GzNow.org

Question

GzNow.org 使用的是 Linux 的 iptables， 配置具有内网转发的路由，以及端口映射设置

1. # Firewall configuration written by system-config-securitylevel
2. # Manual customization of this file is not recommended.
3. *filter
4. :INPUT ACCEPT [0:0]
5. :FORWARD ACCEPT [0:0]
6. :OUTPUT ACCEPT [0:0]
7. :RH-Firewall-1-INPUT - [0:0]
8. -A INPUT -j RH-Firewall-1-INPUT
9. -A FORWARD -j RH-Firewall-1-INPUT
10. -A RH-Firewall-1-INPUT -i lo -j ACCEPT
11. -A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
12. -A RH-Firewall-1-INPUT -i eth1 -j ACCEPT
13. -A RH-Firewall-1-INPUT -p 50 -j ACCEPT
14. -A RH-Firewall-1-INPUT -p 51 -j ACCEPT
15. -A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
16. -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
17. -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
18. -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
19. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
20. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
21. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 25 -j ACCEPT
22. -A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 53 -j ACCEPT
23. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 110 -j ACCEPT
24. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
25. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 873 -j ACCEPT
26. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 904 -j ACCEPT
27. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 2121 -j ACCEPT
28. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 11000:11500 -j ACCEPT
29. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 12000:12500 -j ACCEPT
30. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT
31. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 5900 -j ACCEPT
32. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 5901 -j ACCEPT
33. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 3389 -j ACCEPT
36. -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
37. COMMIT
39. *nat
40. :PREROUTING ACCEPT [194:15200]
41. :POSTROUTING ACCEPT [27:3395]
42. :OUTPUT ACCEPT [47:6031]
43. -A PREROUTING -d 219.136.252.253 -p tcp -m tcp --dport 25 -j DNAT --to-destination 192.168.2.251:25
44. -A PREROUTING -d 219.136.252.253 -p tcp -m tcp --dport 110 -j DNAT --to-destination 192.168.2.251:110
45. -A PREROUTING -d 219.136.252.253 -p tcp -m tcp --dport 3389 -j DNAT --to-destination 192.168.2.251:3389
46. -A PREROUTING -d 219.136.252.253 -p tcp -m tcp --dport 2121 -j DNAT --to-destination 192.168.2.251:2121
47. -A PREROUTING -d 219.136.252.253 -p tcp -m tcp --dport 12000 -j DNAT --to-destination 192.168.2.251:12000
48. -A POSTROUTING -o eth0 -j MASQUERADE
49. COMMIT
50. # Completed on Thu Dec 24 11:36:24 2009

复制代码

Answer 1

.... ....虽然是别人的 ，但是还是要支持！