Роутер и домашняя сеть

Вот собственно конфиг БЕЗ sudo su (что я понял означает что-то типо от рута)

sudo nano /etc/network/interfaces ---------------- # This file describes the network interfaces available on your system # and how to activate them. For more information, see interfaces(5).

# The loopback network interface auto lo iface lo inet loopback auto eth0 eth0:0 eth1 eth2 iface eth0 inet static address 84.204.225.нескажу netmask 255.255.255.128 gateway 84.204.225.129

iface eth0:0 inet static address 10.21.84.нескажу netmask 255.255.0.0 iface eth1 inet static address 192.168.0.1 netmask 255.255.255.0 iface eth2 inet static address 192.168.1.1 netmask 255.255.255.0 --------------------------------------------------- sudo nano /etc/resolv.conf ------------------ search spbfree.net nameserver 84.204.225.129 nameserver 10.21.5.54 --------------------------------------------------- sudo nano /etc/sysctl.conf

# # /etc/sysctl.conf - Configuration file for setting system variables # See sysctl.conf (5) for information. #

#kernel.domainname = example.com #net/ipv4/icmp_echo_ignore_broadcasts=1

# the following stops low-level messages on console kernel.printk = 4 4 1 7

##############################################################3 # Functions previously found in netbase #

# Uncomment the next line to enable Spoof protection (reverse-path filter) net.ipv4.conf.default.rp_filter=1

# Uncomment the next line to enable TCP/IP SYN cookies net.ipv4.tcp_syncookies=1

# Uncomment the next line to enable packet forwarding for IPv4 net.ipv4.conf.default.forwarding=1 net.ipv4.conf.all.forwarding=1

# Uncomment the next line to enable packet forwarding for IPv6 #net.ipv6.conf.default.forwarding=1 ---------------------------------------------------------------------------- sudo nano /etc/network/if-up.d/nat ------------------- #!/bin/sh /sbin/iptables -t nat -A POSTROUTING -o eth0 -s 192.168.0.1/24 -j MASQUERADE /sbin/iptables -t nat -A POSTROUTING -o eth0 -s 192.168.1.1/24 -j MASQUERADE ------------------- sudo chmod +x /etc/network/if-up.d/nat ------------------ sudo aptitude install openssh-server openssh-client ------------------ sudo reboot ------------------ ping 10.21.5.нескажу ------------------ sudo su ------------------ sudo aptitude install tcpdump ----------------- dmesg ----------------- sudo iptables -L -v -n ----------------- sudo iptables -L -v -t nat ---------------------- sudo iptables -L -v -n -t nat ----------------- sudo su ----------------- sudo tcpdump -n eth1 ----------------- sudo tcpdump -n -i eth1 ----------------- sudo tcpdump -n -i eth2 ----------------- sudo iptables -L -v -t nat -n ----------------- ifconfig ----------------- sudo iptables -L -v -t nat -n ----------------- sudo tcpdump -n -i eth1 ----------------- sudo tcpdump -n -i eth1 ----------------- sudo reboot ----------------- ping 192.168.0.1 ----------------- ping 192.168.0.2 ----------------- ping 192.168.1.2 ----------------- dmesg ----------------- ping 192.168.1.2 ----------------- sudo su ----------------- sudo halt ----------------- df -----------------

А вот лог команд после команды "sudo su":

cd -------- less /etc/sysctl.conf -------- # # /etc/sysctl.conf - Configuration file for setting system variables # See sysctl.conf (5) for information. #

#kernel.domainname = example.com #net/ipv4/icmp_echo_ignore_broadcasts=1

# the following stops low-level messages on console kernel.printk = 4 4 1 7

##############################################################3 # Functions previously found in netbase #

# Uncomment the next line to enable Spoof protection (reverse-path filter) net.ipv4.conf.default.rp_filter=1

# Uncomment the next line to enable TCP/IP SYN cookies net.ipv4.tcp_syncookies=1

# Uncomment the next line to enable packet forwarding for IPv4 net.ipv4.conf.default.forwarding=1 net.ipv4.conf.all.forwarding=1

# Uncomment the next line to enable packet forwarding for IPv6 #net.ipv6.conf.default.forwarding=1 ------------------ sysctl net.ipv4.conf.default.forwarding ------------------ net.ipv4.conf.default.forwarding = 1 ------------------ cd /etc/network/interfaces ------------------ bash: cd: /etc/network/interfaces: Not a directory ------------------ ls ------------------ cd /etc/network/if-up.d/ ------------------ ls ------------------ cat nat ------------------ iptables -L -v -n -t nat ------------------ ps ax | grep bind ------------------ nslookup ------------------ less /etc/bind/named.conf ------------------ iptables -L -V -t nat ------------------ cd ------------------ ls ------------------ iptables -L -t -nat ------------------ iptables -L -t -t nat ------------------ iptables -L -n -t nat ------------------ iptables -F -t nat ------------------ iptables -L -n -t nat ------------------ iptables -A POSTROUTING -t nat -s 192.168.0.2 -j MASQUERADE ------------------ iptables -A FORWARD -s 192.168.0.2 -j ACCEPT ------------------ iptables -L -v -t nat ------------------ iptables -A POSTROUTING -t nat -s 192.168.0.2 -i eth1 -o eth0 -j MASQUERADE ------------------ man iptables ------------------ iptables -A POSTROUTING -t nat -s 192.168.0.2 -o eth 0 -j MASQUERADE ------------------ iptables -L -v -t nat ------------------ sysctl ------------------ sysctl -a | grep forward ------------------ sysctl net.ipv4.conf.all.forwarding=1 ------------------ vim /etc/sysctl.conf ------------------ cd /etc/network ------------------ ls ------------------ cd if-up.d ------------------ ls ------------------ cat nat ------------------ iptables -F -t nat ------------------ sysctl net.ipv4.conf.all.forwarding=1 ------------------ ./nat ------------------ cd .. ------------------ cd if-down.d/ ------------------ vim nat ------------------ chmod +x nat ------------------ ls ------------------ ls -l ------------------ cd .. ------------------ ls ------------------ cd ------------------ clear ------------------ cat /etc/sysctl.conf ------------------ w ------------------ tcpdump -i eth2 ------------------ tcpdump -i eth2 -n ------------------ w ------------------ df -h ------------------ ps ax | grep apache ------------------ ifconfig ------------------ ip route change default via 84.204.225.нескажу ------------------ ping ya.ru ------------------ ip route change default via 10.21.5.55 ------------------ ping ya.ru ------------------ ifconfig ------------------ ip route change default via 84.204.225.129 ------------------ ping ya.ru ------------------ traceroute -n ya.ru ------------------ traceroute6 -n ya.ru ------------------ ping -R ya.ru ------------------ less /etc/network/interfaces ------------------ ifconfig ------------------ ping ya.ru ------------------ cat /etc/resolv.conf ------------------ ping ya.ru ------------------ dmesg ------------------ ifconfig ------------------ netstat -nr ------------------ ping 84.204.224.129 ------------------ ping ya.ru ------------------ ifconfig ------------------ cd ------------------ ls ------------------ pwd ------------------ ifconfig ------------------ ping 10.21.5.55 ------------------ ip route change default via 10.21.5.55 ------------------ ping ya.ru ------------------ iptables -L -v -t nat ------------------ ping 192.168.0.2 ------------------ ping 192.168.1.2 ------------------ arp 192.168.0.2 ------------------ ping 192.168.0.2 ------------------ ifconfig ------------------ ifconfig eth2 192.168.0.1 netmask 255.255.255.0 ------------------ ifconfig eth1 down ------------------ ping 192.168.0.2 ------------------ arp 192.168.0.2 ------------------ ping 192.168.0.2 ------------------ ifconfig ------------------ ping 192.168.0.2 ------------------ ifconfig eth1 192.168.1.1 netmask 255.255.255.0 ------------------ ifconfig ----------------- arp 192.168.0.2 ----------------- ping 192.168.0.2 ----------------- ping ya.ru ----------------- netstat -nr ----------------- aptitude install nmap ----------------- aptitude install tcpdump ----------------- aptitude search tcpdump ----------------- tcpdump -n ----------------- tcpdump -n -i eth0 ----------------- tcpdump -n -i eth1 ------------------ ifconfig eth1 192.168.0.1 netmask 255.255.255.0 ------------------ ifconfig eth2 192.168.1.1 netmask 255.255.255.0 ------------------ nmap -sP -n 192.168.0.2 ------------------ iptables -L -v -n ------------------ iptables -L -v -n -t nat ------------------ ping 192.168.0.2 ------------------ dmesg ------------------ tcpdump -n -i eth1 ------------------ iptables -L -v -t nat -n ------------------ netstat -nr ------------------ dmesg ------------------ uptime ------------------ clear ------------------ w ------------------

Открой для себя http://pastebin.org и не морочь людям голову такими тошнотворными постингами. Не ужели ты думаешь, что кто то будет разбираться в этом фарше, который ты сюда вывалил?

учи iptables.