Vorlage:Nat2: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
(Die Seite wurde neu angelegt: „ <span style="color:#FF0000">table inet nat {</span> <span style="color:#FF0000"> chain postrouting {</span> <span style="color:#FF0000"> type nat hook post…“)
 
 
Zeile 1: Zeile 1:
<span style="color:#FF0000">table inet nat {</span>
+
<pre>
<span style="color:#FF0000"> chain postrouting {</span>
+
table inet nat {
<span style="color:#FF0000">  type nat hook postrouting priority 100; policy accept;</span>
+
  chain postrouting {
<span style="color:#FF0000">  oif $wandev ip saddr $lan snat to $wanip</span>
+
  type nat hook postrouting priority 100; policy accept;
<span style="color:#FF0000">  oif $wandev ip saddr $server snat to $wanip</span>
+
        ip saddr $DMZ ip daddr $KIT return
<span style="color:#FF0000">  oif $wandev ip saddr $mgmt snat to $wanip</span>
+
        ip saddr $DMZ ip daddr 10.88.0.0/16 return
<span style="color:#FF0000">  # DMZ wird genattet, außer zu 10.88.0.0/16 und 10.82.89.0/24</span>
+
        ip saddr $DMZ oif $WANDEV snat to $WANIP
<span style="color:#FF0000">  oif $wandev ip saddr $dmz ip daddr != { 10.88.0.0/16, 10.82.89.0/24 } snat to $wanip</span>
+
        ip saddr $LAN oif $WANDEV snat to $WANIP
<span style="color:#FF0000"> }</span>
+
        ip saddr $SERVER oif $WANDEV snat to $WANIP
<span style="color:#FF0000">}</span>
+
        ip saddr $MGMT oif $WANDEV snat to $WANIP
 +
    }
 +
  }
 +
</pre>

Aktuelle Version vom 7. Mai 2026, 15:35 Uhr

 table inet nat {
  chain postrouting {
   type nat hook postrouting priority 100; policy accept;
        ip saddr $DMZ ip daddr $KIT return
        ip saddr $DMZ ip daddr 10.88.0.0/16 return
        ip saddr $DMZ oif $WANDEV snat to $WANIP
        ip saddr $LAN oif $WANDEV snat to $WANIP
        ip saddr $SERVER oif $WANDEV snat to $WANIP
        ip saddr $MGMT oif $WANDEV snat to $WANIP
     }
  }