1 # Generated by iptables-save v1.2.9 on Fri Sep 30 15:51:00 2005
      2 *nat
      3 :PREROUTING ACCEPT [14:65535]
      4 :POSTROUTING ACCEPT [2:65535]
      5 :OUTPUT ACCEPT [2:65535]
      6
      7 #-A PREROUTING -s 10.167.64.0/22 -j ACCEPT
      8 #-A POSTROUTING -d 10.167.64.0/22 -j ACCEPT
      9 #-A POSTROUTING -s 10.167.67.105 -d 147.243.0.0/16 -j MASQUERADE
     10 #-A POSTROUTING -s 10.57.20.0/24 -d 147.243.0.0/16 -j MASQUERADE
     11 #-A POSTROUTING -s 10.57.20.0/24 -d 10.167.0.0/16 -j MASQUERADE
     12 -A POSTROUTING -s 10.167.66.110 -o eth1 -j MASQUERADE
     13 -A POSTROUTING -s 10.167.72.153 -o eth1 -j MASQUERADE
     14 # E7_3F MASQUERADE
     15 -A POSTROUTING -s 10.167.65.15 -o eth1 -j MASQUERADE
     16 -A POSTROUTING -s 10.167.65.140 -o eth1 -j MASQUERADE
     17 -A POSTROUTING -s 10.167.67.15 -o eth1 -j MASQUERADE
     18 -A POSTROUTING -s 10.167.67.136 -o eth1 -j MASQUERADE
     19 -A POSTROUTING -s 10.167.65.133 -o eth1 -j MASQUERADE
     20 -A POSTROUTING -s 10.167.66.36 -o eth1 -j MASQUERADE
     21 # PD LAPTOP MASQUERADE
     22 -A POSTROUTING -s 10.167.67.194 -o eth1 -j MASQUERADE
     23 -A POSTROUTING -s 10.57.21.222 -o eth1 -j MASQUERADE
     24
     25 COMMIT
     26 # Completed on Fri Sep 30 15:51:00 2005
     27 *filter
     28 :INPUT ACCEPT [7:413]
     29 :FORWARD DROP [0:0]
     30 #:FORWARD ACCEPT [0:0]
     31 :OUTPUT ACCEPT [34:2935]
     32 -A FORWARD -d 10.57.20.0/22 -j ACCEPT
     33 -A FORWARD -s 10.57.20.0/22 -j ACCEPT
     34 -A FORWARD -d 10.167.64.66 -j ACCEPT
     35 -A FORWARD -s 192.168.1.0/24 -j ACCEPT
     36 -A FORWARD -d 192.168.1.0/24 -j ACCEPT
     37 # E7 <-> server11
     38 -A FORWARD -s 10.57.20.71 -d 10.167.64.0/22 -j ACCEPT
     39 -A FORWARD -s 10.167.64.0/22 -d 10.57.20.71 -j ACCEPT
     40 -A FORWARD -s 10.57.20.72 -d 10.167.64.0/22 -j ACCEPT
     41 -A FORWARD -s 10.167.64.0/22 -d 10.57.20.72 -j ACCEPT
     42 -A FORWARD -s 10.57.20.73 -d 10.167.64.0/22 -j ACCEPT
     43 -A FORWARD -s 10.167.64.0/22 -d 10.57.20.73 -j ACCEPT
     44 -A FORWARD -s 10.57.21.222 -d 10.167.64.0/22 -j ACCEPT
     45 -A FORWARD -s 10.57.20.2 -d 10.167.64.0/22 -j ACCEPT
     46 # E7_3F <-> RD&NEE
     47 -A FORWARD -s 10.167.66.36 -j ACCEPT
     48 -A FORWARD -d 10.167.66.36 -j ACCEPT
     49 -A FORWARD -s 10.167.65.15 -j ACCEPT
     50 -A FORWARD -d 10.167.65.15 -j ACCEPT
50 -A FORWARD -d 10.167.65.15 -j ACCEPT
     51 -A FORWARD -s 10.167.65.140 -j ACCEPT
     52 -A FORWARD -d 10.167.65.140 -j ACCEPT
     53 -A FORWARD -s 10.167.67.15 -j ACCEPT
     54 -A FORWARD -d 10.167.67.15 -j ACCEPT
     55 -A FORWARD -s 10.167.67.136 -j ACCEPT
     56 -A FORWARD -d 10.167.67.136 -j ACCEPT
     57 -A FORWARD -s 10.167.65.133 -j ACCEPT
     58 -A FORWARD -d 10.167.65.133 -j ACCEPT
     59 # PD <-> RD&NEE
     60 -A FORWARD -s 10.167.67.194 -j ACCEPT
     61 -A FORWARD -d 10.167.67.194 -j ACCEPT
     62 #server2<->server7
     63 #-A FORWARD -s 10.57.20.68 -d 10.167.66.105 -j ACCEPT
     64 #-A FORWARD -s 10.167.66.105 -d 10.57.20.68 -j ACCEPT
     65 #cnsrv151<->cnsrv152
     66 #-A FORWARD -s 10.57.20.67 -d 10.167.64.159 -j ACCEPT
     67 #-A FORWARD -s 10.167.64.159 -d 10.57.20.67 -j ACCEPT
     68 #cnsrv151<->server7
     69 #-A FORWARD -s 10.57.20.68 -d 10.167.64.159 -j ACCEPT
     70 #-A FORWARD -s 10.167.64.159 -d 10.57.20.68 -j ACCEPT
     71 ##cnsrv151<->rd segment
     72 #-A FORWARD -s 10.57.20.80 -d 10.167.64.159 -j ACCEPT
     73 #-A FORWARD -s 10.167.64.159 -d 10.57.20.80 -j ACCEPT
     74 -A FORWARD -s 10.167.72.153 -j ACCEPT
     75 -A FORWARD -d 10.167.72.153 -j ACCEPT
     76 #RD <-> SP Server
     77 -A FORWARD -s 10.167.66.105 -j ACCEPT
     78 -A FORWARD -d 10.167.66.105 -j ACCEPT
     79 -A FORWARD -s 10.167.64.30 -j ACCEPT
     80 -A FORWARD -d 10.167.64.30 -j ACCEPT
     81 -A FORWARD -s 10.167.66.110 -j ACCEPT
     82 -A FORWARD -d 10.167.66.110 -j ACCEPT
     83 -A FORWARD -s 10.57.21.222 -j ACCEPT
     84 -A FORWARD -d 10.57.21.222 -j ACCEPT
     85
     86 #YAHOO Messenger
     87 #-A FORWARD -p TCP -s 192.168.1.0/24 --dport 5050 -j DROP
     88 #MSN
     89 #-A FORWARD -p TCP -s 192.168.1.0/24 --dport 1863 -j DROP
     90 #-A FORWARD -p TCP --sport 1863 -d 192.168.1.0/24 -j DROP
     91 #-A FORWARD -p TCP -s 192.168.1.0/24 --dport 6891:6900 -j DROP
     92 #-A FORWARD -p TCP --sport 6891:6900 -d 192.168.1.0/24 -j DROP
     93 #KURO
     94 #-A FORWARD -p TCP -s 192.168.1.0/24 --dport 6868 -j DROP
     95
     96 #-A INPUT -s 220.135.254.9 -j DROP
     97 COMMIT

ITPub博客

iptables setting for linux

最新文章