全球主机交流论坛

标题: 求助关于内网转发 [打印本页]

作者: ic丶sky 时间: 2023-8-18 16:57
标题: 求助关于内网转发
有个内网集群01可以上外网比如ping通百度，02是个计算只有内网，能ping通01，我该怎么弄让02也可以ping通百度，来个大佬支个招

看下这个脚本哪里需要改一下
#!/bin/bash
# setup NAT gate service

# Run this on master node,
# Point the default gateway to master IP address on all slave nodes
# All slave nodes can access internet.
# You are happy to run yum -y update, etc.

## LAN, private interface
## LANNET, private network
## WAN, public interface

## set interface name first.

LAN="ens81"
WAN="eno1"

LANNET="10.0.0.0/24"

### Do not edit the following contents.

export LAN WAN LANNET

### Flush the original rules
/sbin/iptables -F
/sbin/iptables -X
/sbin/iptables -Z
/sbin/iptables -F -t nat
/sbin/iptables -X -t nat
/sbin/iptables -Z -t nat

### load modules
modprobe ip_tables       > /dev/null 2>&1
modprobe iptable_nat    > /dev/null 2>&1
modprobe ip_nat_ftp    > /dev/null 2>&1
modprobe ip_nat_irc    > /dev/null 2>&1
modprobe ipt_mark    > /dev/null 2>&1
modprobe ip_conntrack    > /dev/null 2>&1
modprobe ip_conntrack_ftp > /dev/null 2>&1
modprobe ip_conntrack_irc > /dev/null 2>&1
modprobe ipt_MASQUERADE > /dev/null 2>&1

### enable the client to use 扶墙 service
modprobe ip_nat_pptp > /dev/null 2>&1
modprobe ip_nat_proto_gre  > /dev/null 2>&1
modprobe ip_conntrack_pptp  > /dev/null 2>&1
modprobe ip_nat_ftp  > /dev/null 2>&1

# Set Default Rules
/sbin/iptables -P INPUT ACCEPT
/sbin/iptables -P OUTPUT  ACCEPT
/sbin/iptables -P FORWARD ACCEPT
/sbin/iptables -t nat -P PREROUTING  ACCEPT
/sbin/iptables -t nat -P POSTROUTING ACCEPT
/sbin/iptables -t nat -P OUTPUT    ACCEPT

### Accept ping test
iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT

### For NAT Gateway
# Starting NAT Server
echo "1" > /proc/sys/net/ipv4/ip_forward

# Stop NAT immediately
#echo "0" > /proc/sys/net/ipv4/ip_forward

# POSTROUTE  NAT Client
/sbin/iptables -t nat -A POSTROUTING -s $LANNET -o $WAN -j MASQUERADE

# the following two lines Enable iptables work in High Efficiency
/sbin/iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

# 5 may be useful for some sites,
# configure the MTU value.
iptables -A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss \
      --mss 1400:1536 -j TCPMSS --clamp-mss-to-pmtu

作者: ic丶sky 时间: 2023-8-18 17:05

作者: ic丶sky 时间: 2023-8-18 17:18

作者: 省港澳白嫖王 时间: 2023-8-18 17:22
dnat

欢迎光临全球主机交流论坛 (https://loc.442266.xyz/)