lter_enable＝"YES"
ipnat_enable="YES"
5、重新启动系统：reboot
三、配置防火墙
1、 设置地址转换ipnat。在/etc下新建文件ipnat.rules,内容为：
map fxp0 192.168.0.0/16 -> 0/32 proxy port ftp ftp/tcp
map fxp0 192.168.0.0/24 -> 0/32 portmap tcp/udp 10000:30000
map fxp0 192.168.0.0/24 -> 0/32
map fxp0 192.168.80.0/24 -> 0/32 portmap tcp/udp 300001:60000
map fxp0 192.168.80.0/24 -> 0/32 portmap
rdr fxp0 x.x.x.x/32 port 80 -> 192.168.0.2 port 80
rdr fxp0 x.x.x.x/32 port ftp -> 192.168.0.3 port ftp
rdr fxp0 x.x.x.x/32 port 30001-50000 -> 192.168.80.3 port 30001 tcp
2、设置包过滤ipfilter。在/etc下新建文件ipf.rules,内容为：
block in log quick all with short
block in log quick all with ipopts
block in log quick all with frag
block in log quick页码：[1] [2] [3] [4] [5] [6] [7] 第2页、共7页 |
