2xWAN. Ïèíãóåòñÿ ñ ðîóòåðà, íå ïèíãóåòñÿ ñ êîìïà

[Dimonina]

Íàñòðîèë ðîóòåð íà 2 WAN-ïîðòà. Ñ äåôîëòíûì WAN âñå â ïîðÿäêå, âñå öåïëÿåòñÿ.
C äîïîëíèòåëüíûì åñòü òðàáëû. Ñ ðîóòåðà âòîðàÿ ñåòü ïèíãóåòñÿ, ñ êîìïüþòåðà íåò.
 post-firewall ñëåäóþùèå ñòðîêè:

[admin@(none) sbin]$ cat post-firewall
iptables -A INPUT -i vlan2 -m state --state NEW -j SECURITY
iptables -A FORWARD -i vlan2 -m state --state NEW -j SECURITY
iptables -t nat -A POSTROUTING -o vlan2 ! -s 10.61.63.173 -j MASQUERADE

ãäå 10.61.63.173 - Ip àäðåñ vlan2

 ëèíóõàõ ïîëíûé íîëü. ×òî ñäåëàòü ÷òîá ïèíãîâàëîñü ñ êîìïà?
È êàê ñäåëàòü ÷òîá ÄÍÑ ñåðâåðà öåïëÿëèñü äëÿ ñåòêè â vlan2?

[andycpp]

Íàñòðîèë ðîóòåð íà 2 WAN-ïîðòà. Ñ äåôîëòíûì WAN âñå â ïîðÿäêå, âñå öåïëÿåòñÿ.
C äîïîëíèòåëüíûì åñòü òðàáëû. Ñ ðîóòåðà âòîðàÿ ñåòü ïèíãóåòñÿ, ñ êîìïüþòåðà íåò.
 post-firewall ñëåäóþùèå ñòðîêè:

[admin@(none) sbin]$ cat post-firewall
iptables -A INPUT -i vlan2 -m state --state NEW -j SECURITY
iptables -A FORWARD -i vlan2 -m state --state NEW -j SECURITY
iptables -t nat -A POSTROUTING -o vlan2 ! -s 10.61.63.173 -j MASQUERADE

ãäå 10.61.63.173 - Ip àäðåñ vlan2

 ëèíóõàõ ïîëíûé íîëü. ×òî ñäåëàòü ÷òîá ïèíãîâàëîñü ñ êîìïà?
È êàê ñäåëàòü ÷òîá ÄÍÑ ñåðâåðà öåïëÿëèñü äëÿ ñåòêè â vlan2?

Âîñêëèöàòåëüíûé çíàê ïåðåíåñòè -
iptables -t nat -A POSTROUTING -o vlan2 -s ! 10.61.63.173 -j MASQUERADE

Ïðî äíñ - þçàé ïîèñê, ÷òî-òî òóò òàêîå óæå ïðîáåãàëî.

Êñòàòè, ó òåáÿ ôîðâàðäèíã ïîðòîâ, êîòîðûé ôîðâàðäÿòñÿ ñ äåôîëòíîãî WAN'à, ïîñëå âñåõ ýòèõ ìàíèïóëÿöèé ðàáîòàåò?

[Dimonina]

Êñòàòè, ó òåáÿ ôîðâàðäèíã ïîðòîâ, êîòîðûé ôîðâàðäÿòñÿ ñ äåôîëòíîãî WAN'à, ïîñëå âñåõ ýòèõ ìàíèïóëÿöèé ðàáîòàåò?

ß ôîðâàðäèíã íå íàñòðàèâàë, ïýòîìó ïðîâåðèòü íå ìîãó. Ïîäñêàæè êàê ýòî ìîæíî ïðîâåðèòü?

/me çàäóìàëñÿ î ïîêóïêå êíèãè TCP/IP ïîñëå ïðèîáðåòåíèÿ ðîóòåðà

[andycpp]

ß ôîðâàðäèíã íå íàñòðàèâàë, ïýòîìó ïðîâåðèòü íå ìîãó. Ïîäñêàæè êàê ýòî ìîæíî ïðîâåðèòü?

/me çàäóìàëñÿ î ïîêóïêå êíèãè TCP/IP ïîñëå ïðèîáðåòåíèÿ ðîóòåðà

iptables -t nat -I PREROUTING 1 -i vlan1 -d <WAN-IP> -j DNAT --sport <PORT> --to <LAN-IP>:<PORT>

ps. Êíèæêà íå ïîìîæåò Ïî-ìîåìó ïðîøèâêà ôóíêöèîíèðóåò íå òàê, êàê íàïèñàíî â êíèæêå... Íî ýòî ìî¸ ÈÌÕÎ.
Ïî òñð/èï è ò.ï. î÷åíü õîðîøî íàïèñàíî çäåñü
http://iptables-tutorial.frozentux.n...-tutorial.html

[Dimonina]

çàìåòèë ôèøêó. òóò óïàëà ñåòêà âîòêíóòàÿ â äåôîëòíûé ëàí.
è ïåðåñòàëà ïèíãîâàòüñÿ âòîðàÿ ïîñëå ðåáóòà ðîóòåðà.
ââåë ñòðîêè â êîíñîëü êîòîðûå â ïîñò-ôàéåðâîë âáèòû - çàðàáîòàëî.
âèäèìî ïîñò-ôàéåðâîë íå îáðàáàòûâàåòñÿ åñëè äåôîëòíàÿ ñåòü íå îòðàáàòûâàåò

[Rambalac]

iptables -t nat -A POSTROUTING -o vlan2 -s ! 10.61.63.173 -j MASQUERADE

À ÷òî äåëàòü åñëè ÈÏ íà Âëàí2 ïî ÄÕÖÏ?

[owld]

äîáàâèòü â post-boot âîò òàêóþ ñòðîêó
udhcpc -i vlan2 -p /var/run/udhcpc2.pid -s /tmp/udhcpc -b

åñëè ó âàñ âòîðîé ïðîâàéäåð ñêîíôèãóðåí âî vlan2 ( òî åñòü âû åçåð âûâåëè â äðóãîé vlan )

Òîêà ñðàçó ñêàæó , âòîðîé wan ðàáîòàåò êðàéíå êðèâî ( âåðíåå ïîðòôîðâàðäèíã â íåì íå ðàáîòàåò â ïðèíöèïå )

[Rambalac]

À ñ ìàñêàðàäîì ÷òî äåëàòü? ÈÏ òî íå èçâåñòåí

[Mam(O)n]

Îáðàáàòûâàòü ñîáûòèå ïîëó÷åíèÿ IP â ñêðèïòå.
udhcpc -i vlan2 -p /var/run/udhcpc2.pid -s /tmp/udhcpc -b

    udhcpc [-Cfbnqtv] [-c CID] [-V VCLS] [-H HOSTNAME] [-i INTERFACE] [-p pidfile] [-r IP] [-s script] 

            -c,     --clientid=CLIENTID     Set client identifier
            -C,     --clientid-none Suppress default client identifier
            -V,     --vendorclass=CLASSID   Set vendor class identifier
            -H,     --hostname=HOSTNAME     Client hostname
            -h,                             Alias for -H
            -f,     --foreground    Do not fork after getting lease
            -b,     --background    Fork to background if lease cannot be immediately negotiated
            -i,     --interface=INTERFACE   Interface to use (default: eth0)
            -n,     --now   Exit with failure if lease cannot be immediately negotiated
            -p,     --pidfile=file  Store process ID of daemon in file
            -q,     --quit  Quit after obtaining lease
            -r,     --request=IP    IP address to request (default: none)
            -s,     --script=file   Run file at dhcp events (default: /usr/share/udhcpc/default.script)
            -t,     --retries=NUM   Send up to NUM request packets
            -v,     --version       Display version

[Rambalac]

×åòî ÿ íå ïîíÿë.
Çàïóñêàåòñÿ ñêðèïò, ëàäíî.
À ãäå ñàì ÈÏ áðàòü?

[Mam(O)n]

IP ìîæåò ïåðåäàâàòüñÿ ñêðèïòó êàê àðãóìåíò. Åñëè íå ïåðåäàåòñÿ, òî èç ifconfig íàäî áðàòü.

[Mam(O)n]

Äîêóìåíòàöèè, êàê ðàáîòàåò busyboxîâñêèé udhcpd ÿ íå íàøåë. Òàê÷òî îñòàåòñÿ ìåòîä íàó÷íîãî òûêà
Âîò ñêðèïò, êîòîðûé â ëîã çàïèøåò âñå àðãóìåíòû, êîòîðûå áûëè ïåðåäàíû ñêðèïòó:

#!/bin/sh
for i; do logger -s -t "$0[$$]" "$i"; done

Òàê ìîæíî ïîëó÷èòü ip èç ifconfig:

`ifconfig vlan2 | grep 'inet addr' | tr ':' ' ' | awk '{print $3}'`

[Rambalac]

ñïàñèáî, íàäî ïîêîïàòüñÿ ñ ïàðñåðîì

[Rambalac]

à ïðîáðàñûâàòü ïîðò
iptables -t nat -I PREROUTING -i vlan2 -p tcp --dport 40768 -j DNAT --to-destination 192.168.0.2
?

[owld]

à ïðîáðàñûâàòü ïîðò
iptables -t nat -I PREROUTING -i vlan2 -p tcp --dport 40768 -j DNAT --to-destination 192.168.0.2
?

... -j DNAT --to 192.168.0.2:40768

à âààáùå âîò òóò ïîñìîòðèòå ,http://www.wl500g.info/showthread.php?t=9471


èìåþòñÿ íåêèå îñîáåííîñòè ñ äâóìÿ âàíàìè