ip-masquerade-howto-2.html

Linux初学者最好的老师就是howto了。相当于函数man。

    |          |3    :   +----------+
    +----------+     :
                     :
    +----------+     :
    |          |     :
    | cbox     |::::::
    |          |4    
    +----------+  
                

    <-Internal Network->
</PRE>

在这个例子中我们考虑四台电脑系统（想必遥远的右方还有些东西让你到网际网路的 IP 连线能够连接，以及一些（远超过这一页）在网际网路上你有兴趣交换信息的东西）。
这个 Linux 系统 <CODE>masq-gate</CODE> 是 <CODE>abox</CODE>, <CODE>bbox</CODE>, <CODE>cbox</CODE> 内部网络机器连接网际网路的伪装闸道。
内部网络使用指定的私用(private) 网络位址，在这个案例中是 class C 网络 192.168.1.0, Linux 机器拥有位址 192.168.1.1  而其它系统也拥有此网络上的位址。
<P>这三台机器 <CODE>abox</CODE>, <CODE>bbox</CODE> 以及 <CODE>cbox</CODE> (它们可以执行任何操作系统 － 像是 <B>Windows 95</B>, <B>Macintosh MacTCP</B> 或甚至是另一台 Linux 机器，只要它们能了解 IP)可以连线到网际网路上的其它机器去，然而这个伪装系统闸道 <CODE>masq-gate</CODE> 转换它们所有的连线所以这些连线看起来像是原本即从伪装闸道 <CODE>masq-gate</CODE> 本身发出的，而且还安排伪装连线传回的资料转回原先的系统 － 所以在内部网络上的系统看到的是直接通往网际网路的递送路径而且不知道他们的资料被伪装过。
<P>
<H2><A NAME="ss2.6">2.6 在 Linux 2.2.x 上使用 IP Masquerade  的需求</A>
</H2>

<P>
<BLOCKQUOTE>
 <B>** 请参考 
<A HREF="javascript:if(confirm('http://ipmasq.cjb.net/  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://ipmasq.cjb.net/'" tppabs="http://ipmasq.cjb.net/">IP Masquerade Resource</A> 以获得最新信息。**</B> 
</BLOCKQUOTE>
<P>
<UL>
<LI>2.2.x 版核心的原始程序码可从 
<A HREF="javascript:if(confirm('http://www.kernel.org/  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://www.kernel.org/'" tppabs="http://www.kernel.org/">http://www.kernel.org/</A> 取得。<BR>
(大部份现代的发行套件如 Red Hat 5.2 - 配备了 2.0.36 的核心 -
已有了模块化的核心，且所有 IP Masquerade 所需的选项都已打开。
这种情形下，已没有必要再自行编译。如果你自己升级核心，你应注意你需要什么，在文件稍後会提到。)
</LI>
<LI>可载入的核心模块，最好是 2.1.121 或以後的版本<BR>
</LI>
<LI>设定良好的 TCP/IP 网络<BR>
相关文件在 
<A HREF="javascript:if(confirm('http://metalab.unc.edu/mdw/HOWTO/NET-3-HOWTO.html  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://metalab.unc.edu/mdw/HOWTO/NET-3-HOWTO.html'" tppabs="http://metalab.unc.edu/mdw/HOWTO/NET-3-HOWTO.html">Linux NET-3 HOWTO</A> 及 
<A HREF="javascript:if(confirm('http://metalab.unc.edu/mdw/LDP/nag/nag.html  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://metalab.unc.edu/mdw/LDP/nag/nag.html'" tppabs="http://metalab.unc.edu/mdw/LDP/nag/nag.html">Network Administrator's Guide</A><BR>
也请参考
<A HREF="javascript:if(confirm('http://www.ecst.csuchico.edu/~dranch/LINUX/TrinityOS.wri  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://www.ecst.csuchico.edu/~dranch/LINUX/TrinityOS.wri'" tppabs="http://www.ecst.csuchico.edu/~dranch/LINUX/TrinityOS.wri">Trinity OS Doc</A>, 是一份非常完整的 Linux 网络参考指引。
</LI>
<LI>将你的 Linux 主机连上网际网路<BR>
相关文件有
<A HREF="javascript:if(confirm('http://metalab.unc.edu/mdw/HOWTO/ISP-Hookup-HOWTO.html  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://metalab.unc.edu/mdw/HOWTO/ISP-Hookup-HOWTO.html'" tppabs="http://metalab.unc.edu/mdw/HOWTO/ISP-Hookup-HOWTO.html">Linux ISP Hookup HOWTO</A>,
<A HREF="javascript:if(confirm('http://metalab.unc.edu/mdw/HOWTO/PPP-HOWTO.html  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://metalab.unc.edu/mdw/HOWTO/PPP-HOWTO.html'" tppabs="http://metalab.unc.edu/mdw/HOWTO/PPP-HOWTO.html">Linux PPP HOWTO</A>,
<A HREF="javascript:if(confirm('http://metalab.unc.edu/mdw/HOWTO/mini/DHCP.html  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://metalab.unc.edu/mdw/HOWTO/mini/DHCP.html'" tppabs="http://metalab.unc.edu/mdw/HOWTO/mini/DHCP.html">Linux DHCP mini-HOWTO</A> 及
<A HREF="javascript:if(confirm('http://metalab.unc.edu/mdw/HOWTO/mini/Cable-Modem.html  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://metalab.unc.edu/mdw/HOWTO/mini/Cable-Modem.html'" tppabs="http://metalab.unc.edu/mdw/HOWTO/mini/Cable-Modem.html">Linux Cable Modem mini-HOWTO</A>
</LI>
<LI>IP Chains 1.3.8 或更新的版本。可从
<A HREF="javascript:if(confirm('http://www.rustcorp.com/linux/ipchains/  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://www.rustcorp.com/linux/ipchains/'" tppabs="http://www.rustcorp.com/linux/ipchains/">http://www.rustcorp.com/linux/ipchains/</A> 取得。<BR>
版本需求的更多信息也在
<A HREF="javascript:if(confirm('http://www.rustcorp.com/linux/ipchains/  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://www.rustcorp.com/linux/ipchains/'" tppabs="http://www.rustcorp.com/linux/ipchains/">Linux IP Firewalling Chains page</A>。
</LI>
<LI>其它的信息，请见
<A HREF="javascript:if(confirm('http://ipmasq.cjb.net/  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://ipmasq.cjb.net/'" tppabs="http://ipmasq.cjb.net/">Linux IP Masquerade Resource</A>
</LI>
</UL>
<P>
<H2><A NAME="ss2.7">2.7 在 Linux 2.0.x 上使用 IP Masquerade  的需求</A>
</H2>

<P>
<BLOCKQUOTE>
 <B>** 请参考 
<A HREF="javascript:if(confirm('http://ipmasq.cjb.net/  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://ipmasq.cjb.net/'" tppabs="http://ipmasq.cjb.net/">IP Masquerade Resource</A> 以获得最新信息。**</B> 
</BLOCKQUOTE>
<P>
<P>
<UL>
<LI>核心 2.0.x 的原始程序码可以从这里取得
<A HREF="javascript:if(confirm('http://www.kernel.org/  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://www.kernel.org/'" tppabs="http://www.kernel.org/">http://www.kernel.org/</A><BR>
(大部份现代的发行套件如 Red Hat 5.2 - 配备了 2.0.36 的核心 -
已有了模块化的核心，且所有 IP Masquerade 所需的选项都已打开。
这种情形下，已没有必要再自行编译。如果你自己升级核心，你应注意你需要什么，在文件稍後会提到。)
</LI>
<LI>可载入核心模块，最好是 2.0.0 或更新的版本，可以从这里取得 
<A HREF="javascript:if(confirm('http://www.pi.se/blox/modules/modules-2.0.0.tar.gz  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://www.pi.se/blox/modules/modules-2.0.0.tar.gz'" tppabs="http://www.pi.se/blox/modules/modules-2.0.0.tar.gz">http://www.pi.se/blox/modules/modules-2.0.0.tar.gz</A><BR>
(至少需要 modules-1.3.57)
</LI>
<LI>设定好的 TCP/IP 网络<BR>

相关文件在 
<A HREF="javascript:if(confirm('http://metalab.unc.edu/mdw/HOWTO/NET-3-HOWTO.html  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://metalab.unc.edu/mdw/HOWTO/NET-3-HOWTO.html'" tppabs="http://metalab.unc.edu/mdw/HOWTO/NET-3-HOWTO.html">Linux NET-3 HOWTO</A> 及 
<A HREF="javascript:if(confirm('http://metalab.unc.edu/mdw/LDP/nag/nag.html  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://metalab.unc.edu/mdw/LDP/nag/nag.html'" tppabs="http://metalab.unc.edu/mdw/LDP/nag/nag.html">Network Administrator's Guide</A><BR>
也请参考
<A HREF="javascript:if(confirm('http://www.ecst.csuchico.edu/~dranch/LINUX/TrinityOS.wri  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://www.ecst.csuchico.edu/~dranch/LINUX/TrinityOS.wri'" tppabs="http://www.ecst.csuchico.edu/~dranch/LINUX/TrinityOS.wri">Trinity OS Doc</A>, 是一份非常完整的 Linux 网络参考指引。
</LI>
<LI>将你的 Linux 主机连上网际网路<BR>
相关文件 
<A HREF="javascript:if(confirm('http://metalab.unc.edu/mdw/HOWTO/ISP-Hookup-HOWTO.html  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://metalab.unc.edu/mdw/HOWTO/ISP-Hookup-HOWTO.html'" tppabs="http://metalab.unc.edu/mdw/HOWTO/ISP-Hookup-HOWTO.html">Linux ISP Hookup HOWTO</A>,
<A HREF="javascript:if(confirm('http://metalab.unc.edu/mdw/HOWTO/PPP-HOWTO.html  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://metalab.unc.edu/mdw/HOWTO/PPP-HOWTO.html'" tppabs="http://metalab.unc.edu/mdw/HOWTO/PPP-HOWTO.html">Linux PPP HOWTO</A>,
<A HREF="javascript:if(confirm('http://metalab.unc.edu/mdw/HOWTO/mini/DHCP.html  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://metalab.unc.edu/mdw/HOWTO/mini/DHCP.html'" tppabs="http://metalab.unc.edu/mdw/HOWTO/mini/DHCP.html">Linux DHCP mini-HOWTO</A> 及
<A HREF="javascript:if(confirm('http://metalab.unc.edu/mdw/HOWTO/mini/Cable-Modem.html  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://metalab.unc.edu/mdw/HOWTO/mini/Cable-Modem.html'" tppabs="http://metalab.unc.edu/mdw/HOWTO/mini/Cable-Modem.html">Linux Cable Modem mini-HOWTO</A>
</LI>
<LI>Ipfwadm 2.3 或更新的版本可以从这里取得<BR>
<A HREF="javascript:if(confirm('ftp://ftp.xos.nl/pub/linux/ipfwadm/ipfwadm-2.3.0.tar.gz  \n\nThis file was not retrieved by Teleport Pro, because it did not meet the project\'s file type specifications.  \n\nDo you want to open it from the server?'))window.location='ftp://ftp.xos.nl/pub/linux/ipfwadm/ipfwadm-2.3.0.tar.gz'" tppabs="ftp://ftp.xos.nl/pub/linux/ipfwadm/ipfwadm-2.3.0.tar.gz">ftp://ftp.xos.nl/pub/linux/ipfwadm/ipfwadm-2.3.tar.gz</A> 
在 Linux Ipfwadm  网页上有更多关于版本的信息 
<A HREF="javascript:if(confirm('http://www.xos.nl/linux/ipfwadm/  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://www.xos.nl/linux/ipfwadm/'" tppabs="http://www.xos.nl/linux/ipfwadm/">Linux IPFWADM page</A>
</LI>
<LI>你可以选择性地加上一些 IP Masquerade 修补档以增加其它功能。
从这里可以取的更多信息， 
<A HREF="javascript:if(confirm('http://ipmasq.cjb.net/  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://ipmasq.cjb.net/'" tppabs="http://ipmasq.cjb.net/">IP Masquerade Resources</A> (这些修补档适用于所有的 2.0.x  核心)
</LI>
</UL>
<P>
<P>
<HR>
<A HREF="IP-Masquerade-HOWTO-3.html" tppabs="http://www.linux.org.tw/CLDP/gb/IP-Masquerade-HOWTO-3.html"><IMG SRC="next.gif" tppabs="http://www.linux.org.tw/CLDP/gb/img/next.gif" ALT="Next"></A>
<A HREF="IP-Masquerade-HOWTO-1.html" tppabs="http://www.linux.org.tw/CLDP/gb/IP-Masquerade-HOWTO-1.html"><IMG SRC="prev.gif" tppabs="http://www.linux.org.tw/CLDP/gb/img/prev.gif" ALT="Previous"></A>
<A HREF="IP-Masquerade-HOWTO.html#toc2" tppabs="http://www.linux.org.tw/CLDP/gb/IP-Masquerade-HOWTO.html#toc2"><IMG SRC="toc.gif" tppabs="http://www.linux.org.tw/CLDP/gb/img/toc.gif" ALT="Contents"></A>
  </BODY>
</HTML>