Dotaz: Router na linuxovom serveri - zmena adresy

[DURI]

Na zaciatok by som rad podotkol ze o linuxe neviem (skoro) nic. Takze prosim o polopatisticku radu Mam takyto problem. Nas linux server (Debian 2.4) funguje zaroven aj ako router (jedna IP je 192.168.254.X, druha 10.0.0.X). Po zmene internetoveho pripojenia potrebujem IP 192.168.254.X zmenit na 81.XX.YY.ZZ. Ako na to? Je to jednoduche, zvladne to aj lama ako ja? A ak ano, ako na to? Dakujem.

Odpovědi

[Arno3t]

Samotna zmena je jednoducha, ale muze mit par zadrhelu. Okamzitou zmenu lze asi udelat prikazy ifconfig eth0 81.XX.YY.ZZ/24 a nasledne route add default gw 81.XX.YY.GW . "Asi" jsem uvedl proto, ze presny prikaz zavisi na parametrech site (eth#, masce, brane, routovaci tabulce). Mozna bude nutne adresu prepsat i v /etc/hosts. Aby zmena byla trvala (predchozi bude funkcni jen do prvniho restartu), je treba jeste zmenit konfiguracni soubor /etc/network/interfaces (adresu a branu). Pokud budete chtit radu upresnit, tak tu ten soubor vystavte. Vsechno bude slozitejsi v pripade, ze router funguje i jako firewall.

[DURI]

# /etc/network/interfaces -- configuration file for ifup(8), ifdown(8)

# The loopback interface
# automatically added when upgrading
auto lo
iface lo inet loopback

# The first network card - this entry was created during the Debian installation
# (network, broadcast and gateway are optional)
# automatically added when upgrading
auto eth0
iface eth0 inet static
address 10.0.0.1
netmask 255.255.255.0
network 10.0.0.0
broadcast 10.0.0.255
# gateway 10.0.0.254

# automatically added when upgrading
auto eth1
iface eth1 inet static
address 192.168.254.20
netmask 255.255.255.0
network 192.168.254.0
broadcast 192.168.254.255
gateway 192.168.254.254

To, ci router funguje aj ako firewall, zial, neviem.

[ldsflkd]

tak zadejte v shellu jako root:

iptables -L -v -n

a vypis poslete...

interfaces poeditujte podle potreby (pote bude nutny restart, nebo /etc/init.d/networking restart), pote /etc/hosts

[DURI]

iptables -L -v -n

Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
57493 37M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 DROP all -- !lo * 127.0.0.0/8 0.0.0.0/0
0 0 ACCEPT all -- eth0 * 0.0.0.0/0 255.255.255.255
145K 21M ACCEPT all -- eth0 * 10.0.0.0/24 0.0.0.0/0
0 0 ACCEPT !tcp -- eth0 * 0.0.0.0/0 224.0.0.0/4
0 0 DROP all -- eth1 * 10.0.0.0/24 0.0.0.0/0
0 0 ACCEPT all -- eth1 * 0.0.0.0/0 255.255.255.255
24278 7822K ACCEPT all -- eth1 * 0.0.0.0/0 192.168.254.20
77 14062 ACCEPT all -- eth1 * 0.0.0.0/0 192.168.254.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0

Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
128K 20M ACCEPT all -- eth0 eth1 10.0.0.0/24 0.0.0.0/0
178K 188M ACCEPT all -- eth1 eth0 0.0.0.0/0 10.0.0.0/24
0 0 DROP all -- * eth1 0.0.0.0/0 10.0.0.0/24
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1863
0 0 DROP all -- * * 0.0.0.0/0 207.46.110.0/25
0 0 DROP all -- * * 0.0.0.0/0 207.46.104.20

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
57493 37M ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- * eth0 0.0.0.0/0 255.255.255.255
184K 180M ACCEPT all -- * eth0 0.0.0.0/0 10.0.0.0/24
0 0 ACCEPT !tcp -- * eth0 0.0.0.0/0 224.0.0.0/4
0 0 DROP all -- * eth1 0.0.0.0/0 10.0.0.0/24
0 0 ACCEPT all -- * eth1 0.0.0.0/0 255.255.255.255
27318 13M ACCEPT all -- * eth1 192.168.254.20 0.0.0.0/0
0 0 ACCEPT all -- * eth1 192.168.254.255 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 DROP tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp dpt:6667
0 0 DROP tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp dpt:1863
0 0 DROP tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp dpt:3828
0 0 DROP tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:3828
0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1863
0 0 DROP tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp dpt:1863
0 0 DROP tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:1863
0 0 DROP all -- * eth1 0.0.0.0/0 207.46.104.20
0 0 DROP all -- * eth1 207.46.104.20 0.0.0.0/0
0 0 DROP all -- * eth0 207.46.104.20 0.0.0.0/0