Debian как раздающий инета

#lspci | grep Ethernet
02:05.0 Ethernet controller: 3Com Corporation 3c940 10/100/1000Base-T [Marvell] (rev 12)
02:0b.0 Ethernet controller: VIA Technologies, Inc. VT6105/VT6106S [Rhine-III] (rev 8b)
02:0c.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL-8139/8139C/8139C+ (rev 10)

~# cat /etc/udev/rules.d/70-persistent-net.rules
# This file was automatically generated by the /lib/udev/write_net_rules
# program, run by the persistent-net-generator.rules rules file.
#
# You can modify it, as long as you keep each rule on a single
# line, and change only the value of the NAME= key.

# PCI device 0x10b7:0x1700 (skge)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:0c:6e:ad:ba:e5", ATTR{dev_id}=="0x0", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"

# PCI device 0x10ec:0x8139 (8139too)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:c0:26:2d:34:f6", ATTR{dev_id}=="0x0", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1"

# PCI device 0x1106:0x3106 (via-rhine)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:21:91:7a:d9:9c", ATTR{dev_id}=="0x0", ATTR{type}=="1", KERNEL=="eth*", NAME="eth2"

# PCI device 0x1106:0x3106 (via-rhine)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="28:10:7b:46:0e:2c", ATTR{dev_id}=="0x0", ATTR{type}=="1", KERNEL=="eth*", NAME="eth3"


#cat /etc/network/interfaces
auto lo
iface lo inet loopback
address 127.0.0.1
netmask 255.0.0.0

allow-hotplug eth0
iface eth0 inet static
address 172.16.1.1
netmask 255.255.255.0
gateway 172.16.1.1

llow-hotplug eth1
iface eth1 inet dhcp

allow-hotplug eth3
iface eth3 inet static
address 10.10.1.1
netmask 255.255.255.0
gateway 10.10.1.1


auto eth0
auto eth1
auto eth3

# ifconfig
eth0      Link encap:Ethernet  HWaddr 00:0c:6e:ad:ba:e5
          inet addr:172.16.1.1  Bcast:172.16.1.255  Mask:255.255.255.0
          inet6 addr: fe80::20c:6eff:fead:bae5/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:4733962 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6172390 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1022119070 (974.7 MiB)  TX bytes:3152827638 (2.9 GiB)
          Interrupt:22

eth1      Link encap:Ethernet  HWaddr 00:c0:26:2d:34:f6
          inet addr:46.39.239.195  Bcast:46.39.239.255  Mask:255.255.255.0
          inet6 addr: fe80::2c0:26ff:fe2d:34f6/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:6002439 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4987427 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1781918409 (1.6 GiB)  TX bytes:1031615621 (983.8 MiB)
          Interrupt:20 Base address:0xe000

eth3      Link encap:Ethernet  HWaddr 28:10:7b:46:0e:2c
          inet addr:10.10.1.1  Bcast:10.10.1.255  Mask:255.255.255.0
          inet6 addr: fe80::2a10:7bff:fe46:e2c/64 Scope:Link
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:37 errors:0 dropped:0 overruns:0 frame:0
          TX packets:132 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:4806 (4.6 KiB)  TX bytes:7923 (7.7 KiB)
          Interrupt:23 Base address:0xe400

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:901 errors:0 dropped:0 overruns:0 frame:0
          TX packets:901 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:85852 (83.8 KiB)  TX bytes:85852 (83.8 KiB)

# cat /etc/dhcp/dhcpd.conf
option domain-name "debian-60.local";
option domain-name-servers debian-60.local;
default-lease-time 600;
max-lease-time 7200;
authoritative;
log-facility local7;

ddns-update-style none;

subnet 172.16.1.0 netmask 255.255.255.0 {
        interface eth0;
        option routers 172.16.1.1;
        option subnet-mask 255.255.255.0;
        option domain-name-servers 8.8.8.8;
        range dynamic-bootp 172.16.1.5 172.16.1.5;
        default-lease-time 21600;
        max-lease-time 43200;
}

subnet 10.10.1.0 netmask 255.255.255.0 {
        interface eth3;
        option routers 10.10.1.1;
        option subnet-mask 255.255.255.0;
        option domain-name-servers 8.8.8.8;
        range dynamic-bootp 10.10.1.5 10.10.1.5;
        default-lease-time 21600;
        max-lease-time 43200;
}

# cat /etc/rc.local
#!/bin/sh -e

iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE

# pidof dhcpd
1684
# cat /proc/1684/cmdline
/usr/sbin/dhcpd -q eth0 eth2

~# cat /etc/default/isc-dhcp-server
# Defaults for dhcp initscript
# sourced by /etc/init.d/dhcp
# installed at /etc/default/isc-dhcp-server by the maintainer scripts
INTERFACES="eth0 eth3"