7/26/2019 11_2_iptab

1/12

11 2/2

Netfilter This work is licensed under the Creative Commons Attri ution!Noncommercial!No "erivative #orks $%&'icense% To view a co() of this license* visit htt(+//creativecommons%or,/licenses/ )!nc!nd/$%&/ or send a

letter to Creative Commons* 1-1 .econd .treet* .uite $&&* .an rancisco* California* 0 1& * 3.A%

7/26/2019 11_2_iptab

2/12

45676896

:;=?9@6@ =B Netfilter BD9EB896 D=B59

7/26/2019 11_2_iptab

3/12

(c) 2007, 3

:;

7/26/2019 11_2_iptab

4/12

(c) 2007, 4

>=?9@6@ =B Netfilter

SB;9RF P'TUV* NAT* WANX'UY Z6D[9 PN\3T* OV#AV"* O3T\3T*

\VUVO3TPNX* \O.TVO3TPNXY Z6J ACCEPT, DROP * 'OX* VU]UCT*

VUT3VNY ^9@9B D H[B89_ ^=B59B

7/26/2019 11_2_iptab

5/12

(c) 2007, 5

`?6HB D=?L7689G DB6@5

7/26/2019 11_2_iptab

6/12

(c) 2007, 6

:;=B;@B D=B59

^=B59B ;=B;B@F5B_@EG D D=G7 :;F[8* E5DB76896 M@ 5F?7 9< R6D[9

D=9H6= 9E_[689G R6J 'OXY 6EJ =9@6=965 5 D=B596

; 6798G_@EG D6=B@=H b 9[6E6 E9 86@ E5DB7689 D9@9B D

H[B89_ E9 6E@J D=B59 ;6< D=D9EB88 R69

R69 =B;@B6@ D=E@ B bE[6@[9

7/26/2019 11_2_iptab

7/12

(c) 2007, 7

K@99@B i(ta les

!A Z ^:g > ^ >4 j: Z j !P Z ^:g > N ^ >4 j: Z j !" Z ^:g > ^ >4 j: !" Z ^:g > N !

!' !v' !\ Z ^:g > Z j

7/26/2019 11_2_iptab

8/12

(c) 2007, 8

Z6J D H[B89_

Z6J D H[B89_ ACCU\T IL8 DH68G@J+

i(ta les !\ PN\3T "VO\ i(ta les !A PN\3T ! "VO\

^=9 86;?79HE@9 8 L8 D=67 EH@=6@J9E_[6896 7G localhost

7/26/2019 11_2_iptab

9/12

(c) 2007, 9

=9@6=99 1Y

!o 98@6=Q6 E OV#AV"* O3T\3T* \O.TVO3TPNX

!i 98@6=Q6 E OV#AV"* PN\3T* \VUVO3TPNX

!( D=@ =58G H769 OCP !s 9 !d 9E@[89 9 D [B@6J

IBEB B 5 '.N* @B 9 5 CP"V 8@BR99

7/26/2019 11_2_iptab

10/12

(c) 2007, 10

=9@6=99 2Y

!!s(ort 9 !!d(ort D=@ n+m 79BDB

7/26/2019 11_2_iptab

11/12

(c) 2007, 11

.NAT 9 "NAT

P(ta les !t nat !A \O.TVO3TPNX !o eth1 !WA. 3UVA"U

P(ta les !t nat !A \O.TVO3TPNX ! .NAT to!

source 102%1 %&%1!102%1 %&%1& P(ta les !t nat !A O3T\3T !( tc( d(ort & !

"NAT to!dest 102%1 % %1&&+ & &

7/26/2019 11_2_iptab

12/12

(c) 2007, 12

^ > S g ` > >:S>

BD9EB896 D=B59netfilter