🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: cn.comp.os.linux
Article #14337

Re: DNAT �� SNAT ����

#14337
From: jkwoocn
Date: Wed, 12 Sep 2001 01:34
144 lines
6350 bytes
OK,����,лл

   �������˰�,ը���������湻ˬ��

"madog" <no@no.no> wrote in message news:9nklhl$npi$1@madogcc.myip.org...
>
> "jkwoocn" <jkwoocn@yahoo.com> wrote in message
> news:9nkgq2$99k$1@mail.cn99.com...
> > ʵ�������Router2�Ҳ��õ�linux�汾��Astaro Security Linux 1.811 ,���е�
��
> ��
> > ������WEB������е�.����B����һTelnet Server,����Router2ʹ����A�ܷ���B,
��A
> ��
> > ��B��Telnet Serverʱ,���ܾ�.���Կ϶�����B�ϵ�Ȩ������,Ҳ������������.ǰ
��
> ˵
> > ��ֻ��һ������,�ؼ�������֪��DNAT��SNAT�Dz������Ӧ��,����DNAT�Dz��Ǿͱ�
��
> ͬ
> > ʱҲҪ����Ӧ��SNAT
>
> ����������ͬ��Ӧ�ã�û�ж�Ӧ��ϵ
>
> > ���иղ��Ǹ�����:���ڲ���--destination-port�е�destinationָ��������A��
��
> > Router2��������B
> > (��ݴ�A��B)? Ϊʲô��˵��"�����Լ�23������"?
>
>
> �����̾���A��ROUTER2����һ��telnet����ROUTER2���������תȥ��B
>
> ���ROUTER2�ϵĹ���Ӧ���ǣ�
> ��A(SOURCE)������(DESTINATION)23�˿�(dport)��������ȥB��23�˿�
> (--to-destination)
>
>
> BTW������һ�������������������Σ�
>
>
> > лл��Ļش�
> >
> > "madog" <no@no.no> wrote in message
news:9nk9pl$mpf$1@madogcc.myip.org...
> > >
> > > "jkwoocn" <jkwoocn@yahoo.com> wrote in message
> > > news:9nk7a9$35s$1@mail.cn99.com...
> > > > ������A��IPΪ192.168.1.1
> > >
> > > ����ô˵�ľ�������һ����û����ʵ�������������Ŀ�أ�
> > >
> > > > ���ڲ���--destination-port�е�destinationָ��������A����Router2����
��
> ��
> > B?
> > >
> > > destination
> > >
> > > > ʹ������������������
> > >
> > > ��ʾ��ʲô����һ��Could not open a connection to host: Connect failed
?
> > >
> > > >     iptables -A PREROUTING -t nat  -i eth0  -s 192.168.1.1  -d
> 128.1.1.2
> > \
> > > >              -p tcp --dport 23 -j DNAT --to 128.2.2.3
> > >
> > > #iptables -t nat -L
> > >
> > > �ѽ����������һ��
> > >
> > >
> > >
> > > >
> > > > "madog" <no@no.no> wrote in message
> > news:9nk07i$l63$1@madogcc.myip.org...
> > > > > ������� "--sport 23" ��
> > > > > ����������IPTABLES�Ļ������Ӧ����ROUTER2ֻ��A������23�������Լ�23
��
> ��
> > ��
> > > ת
> > > > ȥ
> > > > > B
> > > > >
> > > > > ����A��ROUTER2 ������TELNET����һ����
> > > > > A������1024������һ���˿�--->router2:23
> > > > >
> > > > > �?128.1.1.1&128.1.1.2��ͬ�εģ��м���ô���и�ROUTER1����ʲô����
��
> ��
> > > > >
> > > > > ��Ҳ��̫����˵���˱����
> > > > >
> > > > >
> > > > > --
> > > > > http://madogcc.myip.org  news://madogcc.myip.org
> > > > >
> > > > > "jkwoocn" <jkwoocn@yahoo.com> wrote in message
> > > > > news:9njuf6$q9b$1@mail.cn99.com...
> > > > > > ����,���繹������
> > > > > >
> > > > > >   ______             _______             _______
______
> > > > > >   |     |           (       )           (       )          |
> |
> > > > > >   |����A|-----------(Router 1)----------(Router2)----------|����
B
> |
> > > > > >   |_____|           (_______)        eth0(___)eth1
|_____
> |
> > > > > >   192.168.1.1                      128.1.1.2    128.2.2.2
> > 128.2.2.3
> > > > > >
> > > > > > ����,����B�ܹ�ͨ������·�ɷ�������A,������Aֻ��ͨ��һ��·�ɷ���
��
> > > > Router2,
> > > > > ��
> > > > > > ����Ϊ��ȫ���趨��
> > > > > >
> > > > > > ��Ϊ����������A��ijһ�˿��ܷ�������B, ��Router2����DNAT,��:
> > > > > >
> > > > > >     iptables -A PREROUTING -t nat  -i eth0  -s 128.1.1.1  -d
> > 128.1.1.2
> > > \
> > > > > >              -p tcp --sport 23 --dport 23 -j DNAT --to 128.2.2.3
> > > > > >
> > > > > > ����,����A��Ȼ����������B��ͨ��,��������Ϊʲô?�Ƿ��ʱ����B��
��
> ��
> > ��
> > > A
> > > > ʱ,
> > > > > ��
> > > > > > ��ֱ����ԭ�е�·��,��Ӧ��Router2�������һ��SNAT����MASQUERADE?
> > >
> > >
> > >
> >
> >
>
>
Technical Details
Message-ID: <9nme45$njn$1@mail.cn99.com>
Path: arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!sn-xit-02!supernews.com!newsfeed.direct.ca!look.ca!feed2.news.rcn.net!rcn!news.maxwell.syr.edu!news.cn99.com!not-for-mail
References: <9njuf6$q9b$1@mail.cn99.com> <9nk07i$l63$1@madogcc.myip.org> <9nk7a9$35s$1@mail.cn99.com> <9nk9pl$mpf$1@madogcc.myip.org> <9nkgq2$99k$1@mail.cn99.com> <9nklhl$npi$1@madogcc.myip.org>

Show Full Headers
Complete Article Headers
X-Google-Language: Chinese,GB
X-Google-Thread: 10b277,4fc98b59a1330052
X-Google-Attributes: gid10b277,public
X-Google-ArrivalTime: 2001-09-11 18:35:06 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!sn-xit-02!supernews.com!newsfeed.direct.ca!look.ca!feed2.news.rcn.net!rcn!news.maxwell.syr.edu!news.cn99.com!not-for-mail
From: "jkwoocn" <jkwoocn@yahoo.com>
Newsgroups: cn.comp.os.linux
Subject: Re: DNAT �� SNAT ����
Date: Wed, 12 Sep 2001 09:34:51 +0800
Organization: Bentium Ltd. (CN99)
Lines: 146
Message-ID: <9nme45$njn$1@mail.cn99.com>
References: <9njuf6$q9b$1@mail.cn99.com> <9nk07i$l63$1@madogcc.myip.org> <9nk7a9$35s$1@mail.cn99.com> <9nk9pl$mpf$1@madogcc.myip.org> <9nkgq2$99k$1@mail.cn99.com> <9nklhl$npi$1@madogcc.myip.org>
NNTP-Posting-Host: 61.170.136.115
X-Trace: mail.cn99.com 1000258501 24183 61.170.136.115 (12 Sep 2001 01:35:01 GMT)
X-Complaints-To: usenet@news.cn99.com
NNTP-Posting-Date: Wed, 12 Sep 2001 01:35:01 +0000 (UTC)
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.00.2919.6600
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600