[linux] bridge

[peter Fodrek]

Dakujem za rady
Peto
----- Original Message -----
From: "Frantisek Repkovsky" <repkovsk na magic.allianz.sk>
To: <linux na lists.linux.sk>
Sent: Tuesday, February 18, 2003 4:51 PM
Subject: Re: [linux] bridge


>
>
> On Tue, 18 Feb 2003, peter Fodrek wrote:
>
> > > > > co ti vypise:
> > > > >
> > > > > cat /proc/sys/net/ipv4/ip_forward
> > > >
> > > > 1
>
> toty je OK
>
> > > > > Predpokladam, ze mas takuto topologiu, kedze z toho textu to
nebolo
> > > > > zrejme:
> > > > >
> > > > Presnejsia topologia je
> > > > {INET}147.175.111.1---(147.175.111.x)----[Bridge
Box]----(10.10.10.x )
> > > > :))
> > > >
> > > > > Z [Bridge Box] vidis obidve siete, ale zo siete 10.10.10.x vidis
len
> > > > > [Bridge Box].
> > > > >
> > > >
> > > > Tak tak, testovane ping aj http
> > > >
> > > > > Kedze na pravej strane topologie mas siet s privatnymi >ip
adresami,
> > tak
> > > > by
> > > > > ten [Bridge Box] nemal byt bridge, ale router s >Masquerade.
> > > >
> > > > moze byt...
> > > >
> > > > > Takze by sa zisiel este vystup z:
> > > > > iptables -t nat -L -n
> > > > > iptables -L -n
> > > > >
> > > >
> > > > absolutna pradznota len titulne riadky...
>
> Ak ti ma fungovat NAT nemozes mat tieto vypisy prazdne... Nieco si potom v
> tom skripte z root.cz zle upravil...
>
> Kedze nemas ppp interface a poznas IP adresu vonkajsieho rozhrania mozes
> pouzit SNAT namiesto MASQUERADE:
>
> $IPTABLES -t nat -A POSTROUTING -o $INET_IFACE -j SNAT --to $INET_IP
>
> Dolezity je potom retazec FORWARD, ak tam mas default policy na DROP, tak
> musis povolit traffic z vnutornej siete von (ten sa zvycajne neobmedzuje)
> a v opacnom smere (von -> dnu) musis povolit spojenia nadviazane z
> vnutra a pakety s nim suvisiace...
>
> $IPTABLES -A FORWARD -i $LAN1_IFACE -j ACCEPT
>
> $IPTABLES -A FORWARD -i $INET_IFACE -o $LAN1_IFACE \
>   -m state --state ESTABLISHED,RELATED -j ACCEPT
>
>
> > > ppp0? Mas take rozhranie? Nemalo by tam byt radsej eth0, resp. eth1 ?
> >
> > samozrejeme... u mna tam bola  eth0 namiesto ppp0, v tom mail-e to bola
> > hardcopy z web-u...
>
> S pozdravom
>
> Frantisek Repkovsky
>
> _______________________________________________
> http://lists.linux.sk/listinfo/linux
> Prehladavanie archivu: http://search.lists.linux.sk
> Meta FAQ: http://faq.lists.linux.sk