Linux/ゲートウェイサーバ の変更点


**ゲートウェイサーバ [#z59a690d]

 # vi /etc/sysctl.conf
 
 net.ipv4.ip_forward=0
 ↓以下に修正
 net.ipv4.ip_forward=1

**iptables [#b3246ad8]
 *filter
 :INPUT DROP [37:9133]
 :FORWARD DROP [0:0]
 :OUTPUT ACCEPT [333:41657]
 :TRUST-NET - [0:0]
 -A INPUT -j TRUST-NET 
 -A FORWARD -j TRUST-NET 
 -A TRUST-NET -s 127.0.0.1 -j ACCEPT 
 -A TRUST-NET -p icmp -j ACCEPT 
 -A TRUST-NET -m state --state RELATED,ESTABLISHED -j ACCEPT 
 COMMIT
 *nat
 :PREROUTING ACCEPT [40:9317]
 :POSTROUTING ACCEPT [2:120]
 :OUTPUT ACCEPT [5:1061]
 -A POSTROUTING -o eth0 -j MASQUERADE 
 COMMIT