我有2条ADSL,使用ip.t.ables的NAT做代理,发现两条线ppp0和ppp.1同时只能有一条线提供WEB服务,另一条就不能用。请大家帮忙看看是那里的问题。学习
[root@..localhost root]# iptables-save 汽车
# Generated by iptables-sav.e v1.2.7a on Fri Dec 1.7 09:28:40 2004 婚庆
*nat
:PREROUTING ACCE..PT [82236].
:POSTROUTING A.CCEPT [0]<性病>
:OUTPUT AC.CEPT [208]服务器
-A PREROUTING -i ppp0 -p tcp .-m tcp --dport 20 -.j DNAT --to-destination 192..168.0.51:20外贸
-A PREROUTING .-i ppp0 -p tcp -m .tcp --dport 21 -j DNAT --to-destination 19.2.168.0.51:21--------------彩票
-A PREROUTING -i ppp0 -p tcp -m tcp --dport 23 -j DNAT .--to-dest.ination 192.168.8.8.:23( 游戏 )
-A PREROUTING -i ppp0 -p. .tcp -m tcp --dp.ort 25 -j DNAT --to-destination 192.168.0.51:25 美容
-A PREROUTING .-i ppp0 -p t.cp -m tc.p --dport 80 -j DNAT --to-destination 192.168.0.51:80 外汇
-A PREROUTING -i ppp0 -p tcp -.m tcp --dport 1.10 -j DNAT --to-.destination 192.168.0.51:110.
-A PRE.ROUTING -i ppp0 -p. tcp -m tcp --dport 8080 -j D.NAT --to-destination 192.168.0.51:8080 汽车
-A PREROUTI.NG -i ppp1 -p tcp -m tcp --..dport 20 -j DNAT --to-destination 192.168.0.51:20 电子
-.A PREROUTING -i ppp1 -p tcp -m tcp --.dport 21 -j DNAT --to-destin.ation 192.168.0.51:21( 游戏 )
-A PRE.ROUTING -i ppp1 -p tcp -m tcp --dport .23 -j DNAT .--to-destination 192.168.8.8:23外贸
-A PREROUTIN.G -i ppp1 -p tcp -m tcp --dpo.rt 25 -j DNAT --to-destin.ation 192.168.0.51:25 电子
-A PREROUTI.NG -i ppp1 -p tcp -m tcp --.dpor.t 80 -j DNAT --to-destination 192.168.0.51:80学习
-A. PREROUTING -i ppp1 -p tcp -m tc.p --dport 110 -j DN.AT --to-destination 192.168.0.51:110.
-A PREROUTING -i pp.p.1 -p tcp -m tcp --dport 8080 -j DNAT --to-destination 192..168.0.51:8080--- 印刷
-A PREROUTING -i ppp0. -p tcp -m tcp -.j DROP 鲜花
-A PREROUTING -i ppp1. -p .tcp -m tcp -j DROP域名
-A POSTROUTING -j M.ASQUERAD.E<性病>
COMMIT
#. Completed on Fri Dec 17 09:28:40 2004. 健康
# Generated by iptabl.es-save v1.2.7a on Fri Dec 17 09:2.8:40 2004虚拟主机
*filter
:I.NPUT ACCEPT [6885] 鲜花
:FORW.ARD ACCEPT [2137473]教育
:OUTPUT ACC.EPT [16967] 鲜花
:RH-Lokkit-0-50.-INPUT .- [0].
-A INPUT -j RH-Lokki.t-0-5.0-INPUT 汽车
-A I..NPUT -s 192.168.0.0/255.255.255.0 -i ppp0 -j DROP.
-A INPUT -s 192..168.0.0/255.255.255.0 -i ppp1 .-j DROP教育
-A INPUT -.s 192.168.1.0/255.25.5.255.0 -i ppp0 -j DROP[成人用品]
-A .INPUT -s 192.168.1.0/25.5.255.255.0 -i ppp1 -j DROP.
-A FORWARD -.j RH-Lokkit-.0-50-INPUT.
-A RH-Lokkit.-0-50-INPUT -p t.c.p -m tcp --dport 20 --tcp-flags SYN,RST,ACK SYN -j ACCEPT( 游戏 )
-A RH-Lokk.it-0-50-INPUT -p tcp -m tcp --dport 21 --tcp-flags .SYN,RST,A.CK SYN -j ACCEPT--- 印刷
-A RH-Lokkit-0-50-INPUT -p tcp -m .tcp --dport 23 --tcp-flags SYN,RST.,ACK SYN .-j ACCEPT 鲜花
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 25 --tcp-fla.gs .SYN,RST,ACK SYN .-j ACCEPT<性病>
-A RH-Lokkit-0-50-INPUT -.p tcp -m tcp --dport 80 --tcp-.f.lags SYN,RST,ACK SYN -j ACCEPT.
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 110 --tcp-flags SYN,RST.,ACK SY.N -j ACCE.PT 健康
-A RH.-Lokki.t-0-50-INPUT -p tcp -m tcp --dport 8080 --tcp-f.lags SYN,RST,ACK SYN -j ACCEPT 电子
-A RH-Lokkit-0-50-.I.NPUT -i lo -j ACCEPT教育
-A RH-Lokkit-0-50-INPUT -i et.h1 -j .ACCEPT.
-A RH-Lokkit-0-50-INPUT -.s .202.102.192.68 -p udp -m udp --sport 53 -j ACCE.PT虚拟主机
-A RH-Lokkit-0-50-INPUT -s 202.102.199...68 -p udp -m udp --sport .53 -j ACCEPT<性病>
COMMIT
# Compl.et.ed on Fri Dec 17 09:28:40 2004 健康
[.b][
root@l.ocalhost root]# ip route 健康
61.191.255.1 dev. ppp0 proto .kernel scope link src 61.191.255.173投资
61.191.255.1 dev ppp1 pro.to kernel scope link src 61.191..255.253 美容
192.168..1.0/24 dev eth1 pr.oto kernel scope link src 192.168.1.1 外汇
192.168.0.0/24 dev eth..1 scope link 鲜花
61.191.255.0/24 dev. ppp0 proto kernel scope link. src 61.191.255.173投资
61.191.255.0/24 dev ppp.1 proto kernel scope link src 61.191..255.253.
192.168.253.0/24 dev eth2 .scope li.nk虚拟主机
192.1.68.254.0/24 d.ev eth0 scope link 电子
1.69.254.0.0/16 dev e.th2 scope link.
127.0.0.0/..8 dev lo scope link 美容
default equal.ize投资
nexthop via 61.191.2.55.173 dev. ppp0 weight 3--- 印刷
nextho.p via 61.191.255.253 dev ppp1 w.eight 6外贸
是否ip .route 设置的问题啊?虚拟主机