[问题求助]请教iptables问题 [复制链接]

Redhat linux as 3:双网.卡    健康
外网卡eth0, ip:1.92.168.1.10教育
内网.卡eth1, ip:192.168.100.2.54外贸
它.通过A.DSL MODEM拨号能够解析域名,正常访问INTERNET          婚庆

echo "1">/proc/sys/net./ipv4/ip_forw.ard--- 印刷
启.用NAT:iptables -t nat -A POSTROUTING -s 192.168.100.0/24 -j .MASQUERADE服务器

windows 2000 pro      IP:192.1.68.100..10<性病>
通过交叉线连接linux的内网卡,能够ping通19.2.1.68.100.254和192.168.1.10    美容


但是,win2000却无论如何都无法通过li.nux访问INTERNE.T电脑
郁闷啊,还漏了什么地方吗?

[ 本帖最后由 李某人 于 2006-4-20 .21:19 编辑 ].外贸

贴出 Linux 的
iptables-save
sysctl -a|grep forward
ip r

贴出 Windows 的
ipconfig/all
route print

[root@haha root]# cat /root/iptables.bak
# Generated by iptables-save v1.2.8 on Thu Apr 20 21:23:06 2006
*nat
:PREROUTING ACCEPT [129:8117]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A POSTROUTING -s 192.168.10.0/255.255.255.0 -j MASQUERADE
COMMIT
# Completed on Thu Apr 20 21:23:06 2006
# Generated by iptables-save v1.2.8 on Thu Apr 20 21:23:06 2006
*filter
:INPUT ACCEPT [190:13120]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [127:7332]
COMMIT
# Completed on Thu Apr 20 21:23:06 2006


[root@haha root]# sysctl -a |grep forward
net.ipv4.conf.ppp0.mc_forwarding = 0
net.ipv4.conf.ppp0.forwarding = 1
net.ipv4.conf.eth1.mc_forwarding = 0
net.ipv4.conf.eth1.forwarding = 1
net.ipv4.conf.eth0.mc_forwarding = 0
net.ipv4.conf.eth0.forwarding = 1
net.ipv4.conf.lo.mc_forwarding = 0
net.ipv4.conf.lo.forwarding = 1
net.ipv4.conf.default.mc_forwarding = 0
net.ipv4.conf.default.forwarding = 1
net.ipv4.conf.all.mc_forwarding = 0
net.ipv4.conf.all.forwarding = 1
net.ipv4.ip_forward = 1


[root@haha root]# ip r
202.104.103.1 dev ppp0  proto kernel  scope link  src 219.134.43.25
192.168.100.0/24 dev eth1  scope link
192.168.1.0/24 dev eth0  scope link
169.254.0.0/16 dev eth1  scope link
127.0.0.0/8 dev lo  scope link
default via 202.104.103.1 dev ppp0


win2000pro
C:\Documents and Settings\lijiakun>ipconfig /all

Windows 2000 IP Configuration

        Host Name . . . . . . . . . . . . : myfamily
        Primary DNS Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Broadcast
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter 本地连接:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Realtek RTL8139(A) PCI Fast Ethernet
Adapter
        Physical Address. . . . . . . . . : 00-0A-EB-77-2C-81
        DHCP Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.100.10
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.100.10
        DNS Servers . . . . . . . . . . . : 202.96.128.68
                                            202.96.134.134

C:\Documents and Settings\lijiakun>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x1000003 ...00 0a eb 77 2c 81 ...... NDIS 5.0 driver

===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0   192.168.100.10  192.168.100.10       1
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
    192.168.100.0    255.255.255.0   192.168.100.10  192.168.100.10       1
   192.168.100.10  255.255.255.255        127.0.0.1       127.0.0.1       1
  192.168.100.255  255.255.255.255   192.168.100.10  192.168.100.10       1
        224.0.0.0        224.0.0.0   192.168.100.10  192.168.100.10       1
  255.255.255.255  255.255.255.255   192.168.100.10  192.168.100.10       1
Default Gateway:    192.168.100.10
===========================================================================
Persistent Routes:
  None

[ 本帖最后由 李某人 于 2006-4-20 21:51 编辑 ]

windows 默认路由设置错误

还是路由问题



QUOTE:Ethernet adapter 本地连接:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Realtek RTL8139(A) PCI Fast Ethernet
Adapter
        Physical Address. . . . . . . . . : 00-0A-EB-77-2C-81
        DHCP Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.100.10
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.100.10
        DNS Servers . . . . . . . . . . . : 202.96.128.68
                                            202.96.134.134


QUOTE:C:\Documents and Settings\lijiakun>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x1000003 ...00 0a eb 77 2c 81 ...... NDIS 5.0 driver

===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0   192.168.100.10  192.168.100.10       1
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
    192.168.100.0    255.255.255.0   192.168.100.10  192.168.100.10       1
   192.168.100.10  255.255.255.255        127.0.0.1       127.0.0.1       1
  192.168.100.255  255.255.255.255   192.168.100.10  192.168.100.10       1
        224.0.0.0        224.0.0.0   192.168.100.10  192.168.100.10       1
  255.255.255.255  255.255.255.255   192.168.100.10  192.168.100.10       1
Default Gateway:    192.168.100.10
===========================================================================
Persistent Routes:
  None


网关等于自己 IP 吗？
低级错误

[ 本帖最后由 platinum 于 2006-4-21 12:34 编辑 ]

为什么呢?你是说要设置成192.168.100.254,是吗?同样是不行的!
两台机子是通过交叉线直接连在一起的,且同属于一个网段,两个设置的结果都一样吧?

[ 本帖最后由 李某人 于 2006-4-20 22:24 编辑 ]

你贴的是 cat /root/iptables.bak
我不确定这个结果和我想要的 iptables-save 是否一致
若你的 windows 设置正确，连接的确实也是 linux 的 100 网段网卡，且 ~/iptables.bak 与 iptables-save 结果一致，没有理由上不去网
我敢保证，问题绝对出在某个低级错误上，再好好查查吧