LINUX双线代理

junger

编辑3张卡
#vi /eic/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
BOOTPROTO=none
BROADCAST=192.168.0.255
IPADDR=192.168.0.2
NETMASK=255.255.255.0
NETWORK=192.168.0.0
ONBOOT=yes
USERCTL=no
PEERDNS=no
TYPE=Ethernet

#vi /eic/sysconfig/network-scripts/ifcfg-eth1
DEVICE=eth1
BOOTPROTO=none
BROADCAST=电信广播地址
IPADDR=电信IP地址
NETMASK=电信掩码
NETWORK=电信网段地址
ONBOOT=yes
USERCTL=no
PEERDNS=no
TYPE=Ethernet

#vi /eic/sysconfig/network-scripts/ifcfg-eth2
DEVICE=eth2
BOOTPROTO=none
BROADCAST=网通广播地址
IPADDR=网通IP
NETMASK=网通掩码
NETWORK=网通网段地址
ONBOOT=yes
USERCTL=no
PEERDNS=no
TYPE=Ethernet
DNS设置(可选设置)
#vi /etc/sysconfig/networking/profiles/default/resolv.conf
nameserver 主DNS
nameserver 辅DNS
路由表设置
#echo “5 cnc” >> /etc/iproute2/rt_tables

#vi /etc/rc.d/cncroute
ip r re 0/0 via 网通网关 table cnc
ip r re 0/0 via 电信网关

ip rule add to 60.0.0.0/13 table cnc
ip rule add to 60.8.0.0/15 table cnc
ip rule add to 60.10.0.0/16 table cnc
ip rule add to 60.12.0.0/16 table cnc
ip rule add to 60.13.0.0/18 table cnc
ip rule add to 60.13.128.0/17 table cnc
ip rule add to 60.16.0.0/12 table cnc
ip rule add to 60.208.0.0/13 table cnc
ip rule add to 60.216.0.0/15 table cnc
ip rule add to 60.220.0.0/14 table cnc
ip rule add to 61.48.0.0/13 table cnc
ip rule add to 61.133.0.0/17 table cnc
ip rule add to 61.135.0.0/16 table cnc
ip rule add to 61.136.64.0/18 table cnc
ip rule add to 61.137.128.0/17 table cnc
ip rule add to 61.138.0.0/17 table cnc
ip rule add to 61.138.128.0/18 table cnc
ip rule add to 61.139.128.0/18 table cnc
ip rule add to 61.148.0.0/15 table cnc
ip rule add to 61.156.0.0/16 table cnc
ip rule add to 61.158.128.0/17 table cnc
ip rule add to 61.159.0.0/18 table cnc
ip rule add to 61.161.0.0/18 table cnc
ip rule add to 61.161.128.0/17 table cnc
ip rule add to 61.167.0.0/16 table cnc
ip rule add to 61.168.0.0/16 table cnc
ip rule add to 61.176.0.0/16 table cnc
ip rule add to 61.179.0.0/16 table cnc
ip rule add to 61.180.128.0/17 table cnc
ip rule add to 61.181.0.0/16 table cnc
ip rule add to 61.182.0.0/16 table cnc
ip rule add to 61.189.0.0/17 table cnc
ip rule add to 202.96.0.0/18 table cnc
ip rule add to 202.96.64.0/19 table cnc
ip rule add to 202.97.128.0/17 table cnc
ip rule add to 202.98.0.0/19 table cnc
ip rule add to 202.99.0.0/16 table cnc
ip rule add to 202.102.128.0/18 table cnc
ip rule add to 202.102.224.0/19 table cnc
ip rule add to 202.106.0.0/16 table cnc
ip rule add to 202.107.0.0/17 table cnc
ip rule add to 202.108.0.0/16 table cnc
ip rule add to 202.110.0.0/17 table cnc
ip rule add to 202.110.192.0/18 table cnc
ip rule add to 202.111.128.0/18 table cnc
ip rule add to 218.7.0.0/16 table cnc
ip rule add to 218.8.0.0/14 table cnc
ip rule add to 218.12.0.0/16 table cnc
ip rule add to 218.24.0.0/14 table cnc
ip rule add to 218.28.0.0/15 table cnc
ip rule add to 218.56.0.0/14 table cnc
ip rule add to 218.60.0.0/15 table cnc
ip rule add to 218.67.128.0/17 table cnc
ip rule add to 218.68.0.0/15 table cnc
ip rule add to 221.0.0.0/14 table cnc
ip rule add to 221.4.0.0/15 table cnc
ip rule add to 221.6.0.0/16 table cnc
ip rule add to 221.7.0.0/18 table cnc
ip rule add to 221.7.64.0/19 table cnc
ip rule add to 221.7.128.0/17 table cnc
ip rule add to 221.8.0.0/15 table cnc
ip rule add to 221.10.0.0/16 table cnc
ip rule add to 221.11.128.0/18 table cnc
ip rule add to 221.11.0.0/17 table cnc
ip rule add to 221.11.192.0/19 table cnc
ip rule add to 221.12.0.0/17 table cnc
ip rule add to 221.12.128.0/18 table cnc
ip rule add to 221.13.0.0/18 table cnc
ip rule add to 221.13.64.0/19 table cnc
ip rule add to 221.13.128.0/17 table cnc
ip rule add to 221.14.0.0/15 table cnc
ip rule add to 221.192.0.0/14 table cnc
ip rule add to 221.196.0.0/15 table cnc
ip rule add to 221.198.0.0/16 table cnc
ip rule add to 221.199.0.0/19 table cnc
ip rule add to 221.199.32.0/20 table cnc
ip rule add to 221.199.128.0/18 table cnc
ip rule add to 221.199.192.0/20 table cnc
ip rule add to 221.200.0.0/14 table cnc
ip rule add to 221.204.0.0/15 table cnc
ip rule add to 221.207.0.0/18 table cnc
ip rule add to 221.208.0.0/14 table cnc
ip rule add to 221.212.0.0/15 table cnc
ip rule add to 221.216.0.0/13 table cnc
ip rule add to 222.128.0.0/12 table cnc
ip rule add to 222.160.0.0/15 table cnc
ip rule add to 222.162.0.0/16 table cnc
ip rule add to 222.163.0.0/19 table cnc
ip route flush cache
rc.fw配置
#vi /etc/rc.d/rc.fw

#!/bin/sh
/sbin/modprobe ip_tables
/sbin/modprobe ip_nat_ftp
/sbin/modprobe ip_conntrack_ftp

/sbin/iptables -F
/sbin/iptables -F -t nat
/sbin/iptables -X
/sbin/iptables -Z

/sbin/iptables -P INPUT ACCEPT
/sbin/iptables -P FORWARD ACCEPT
/sbin/iptables -P OUTPUT ACCEPT

echo “1″ > /proc/sys/net/ipv4/ip_forward
echo “262144″ > /proc/sys/net/ipv4/ip_conntrack_max

/sbin/iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
/sbin/iptables -t nat -A POSTROUTING -o eth2 -j MASQUERADE
/sbin/iptables -A FORWARD -s 0/0 -j ACCEPT
/sbin/iptables -A FORWARD -d 0/0 -j ACCEPT

iptables -t nat -A PREROUTING -P UDP -d 192.168.0.1 –dport 53 -j DNAT –to 电信DNS:53
iptables -t nat -A PREROUTING -P UDP -d 192.168.0.1 –dport 53 -j DNAT –to 网通DNS:53
加入执行权限
#chmod 777 /etc/rc.d/rc.fw
#chmod 777 /etc/rc.d/cncroute
启动配置
#vi /etc/rc.d/rc.local

#!/bin/sh/
./etc/rc.d/rc.fw
./etc/rc.d/cncroute