Isikhokelo seKhokelo soNcedisi
Injongo ye-IP Masquerading kukuvumela uomatshini ngee-intanethi ezizimeleyo, ezingapheliyo kwi-intanethi ukufikelela kwi-intanethi ngomshini owenza ukuzitshintsha. I-Traffic esuka kunethiwekhi yakho yabucala ejongene ne-intanethi kufuneka iqhutywe iimpendulo ukuze ibuyele kumshini owenza isicelo. Ukwenza oku, i-kernel kufuneka iguqule idilesi ye-IP yipakethi nganye ukuze iimpendulo zibuyiselwe kuyo, kunokuba idilesi yangasese ye-IP eyenza isicelo, esingenakwenzeka kwi-intanethi. I-Linux isebenzisa i- Connection Tracking (conntrack) ukugcina umgca wokudibanisa kukuphi na oomatshini kunye nokubuyisela iipakethi nganye ngokuphindaphindiweyo ngokufanelekileyo. Isithuthi sishiya intanethi yakho yangasese ke ngoko "i-maskedaded" njengokuba ivela kumashini wakho wesango lomsebenzisi. Le nkqubo ihanjiswa kumaphepha e-Microsoft njenge-Sharing Connection Sharing.
Imiyalelo ye-IP Ukuqhawula
Oku kungenziwa nge-single iptables yolawulo, okungafani ngokusekelwe kwindlela yoqwalaselo lwenethiwekhi:
i-sudo iptables -i -A-POSTROUTING-ye-192.168.0.0/16 -o ppp0 -j MASQUERADEUmyalelo ongentla ukhankanya ukuba isikhala sakho sendawo ye-intanethi yi-192.168.0.0/16 kwaye idivayisi yakho ejongene ne-intanethi i-ppp0. I syntax idilizwe ngendlela elandelayo:
- -u-umgaqo-myalelo ungena etafileni
- -I-POSTROUTING - umgaqo kufuneka uhlanganiswe (-A) kwi-POSTROUTING
- -i-192.168.0.0/16 - umgaqo usebenza kwisithuthi esivela kwidilesi echaziweyo
- -o ppp0 - umgaqo usetyenziswa kwisicwangciso sezothutho ukuba sihanjiswe kwisixhobo senethiwekhi esicacisiwe
- -j MASQUERADE - ukulandelelana kweendlela ezi "ukuxhoma" (-j) kwi-MASQUERADE ekujoliswe kuyo ukuba ichazwe njengoko kuchaziwe ngasentla
Ikheyunithi nganye kwitheyibhuli yokucoca (itafile engagqibekanga, kunye nalapho iindawo ezininzi zokucoca iipakethe zenzeke khona) zinomgaqo-nkqubo ongagqibekanga woMGAQOQO, kodwa ukuba udala i-firewall ngaphezu kwesoxhobo yesango, unokusetha iipolisi kwi-DROP okanye JONGA, kwimeko apho i-tracking yakho enekratshi kufuneka ivumeleke ngethungelwano LOKUPHAKATHI ukuze usebenze:
I-sudo iptables -I-FORWARD-i-192.168.0.0/16 -o ppp0 -j YAMAKELA i-sudo iptables -I-192.168.0.0/16 -m yesigxina -I-ISETYENZISWE, iXELATHE -i ppp0 -jImiyalelo engenhla iya kuvumela yonke intsebenziswano kwi-intanethi yangaphakathi kwi-intanethi kunye nayo yonke inqwelathelwano kwezo zidibaniso ukubuyela kumatshini owaqalisa.
* Ilayisenisi