初学iptables配置DMZ
我用linux做了台firewall，eth0(WAN);eth1(OPT);eth2(LAN)
我想在eth1上作DMZ区，请问我这样用iptables做对么？
[color=red]INPUT ACCEPT
OUTPUT ACCEPT
FORWARD DROP
-A FORWARD -i eth1 -o eth0 -j ACCEPT
-A FORWARD -i eth0 -o eth1 -j ACCEPT
-A FORWARD -i eth2 -o eth1 -j ACCEPT
-A FORWARD -i eth1 -o eth2 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eth2 -o eth0 -j ACCEPT
-A FORWARD -i eth0 -o eth2 -m state --state RELATED,ESTABLISHED -j ACCEPT[/color]
[color=#ff0000][/color]
还缺什么，请高手指导~~~
上面只给出DMZ配置，别的先不管！~~~
页:
[1]