Tim wrote:Hello,On Sun, 2007-04-01 at 23:42 +0800, edwardspl@xxxxxxxxxx wrote:Does your system as the following sample ? eg : For Public IP ( from ISP ) : IP range : 202.175.123.123 ~ 202.175.123.129 ( I want to use 202.175.123.123 trasnfer to 192.168.0.1 Server machine )Your router needs to associate those last two addresses together. Are you using a configurable one? Depending on your network, you might connect 202.175.123.123 to 192.168.0.1 with rules. You might set that computer to use 202.175.123.123 as its address, directly. If you have a series of public addresses that you can use, you *can* use them directly.subnet mask : 255.255.255.240 ( I want to trasnfer to 255.255.255.0 )Don't know what you mean.Router IP : 202.175.123.128 ( So, how to trasnfer to 192.168.0.254, due to via the Router machine first ! )Can't understand that, either. It's an incoherent mix of words. How is your network physically set up? Do you have a modem connected to a router, connected to a network of computers? Is the modem a combination modem and router? Is your router a "router" or a computer working as one? How are the other computers connected?For Private IP ( All of Server under LAN environment ) : IP : 192.168.0.1 ( I want to tranfer to 202.175.123.123 ) subnet mask : 255.255.255.0 ( I want to tranfer to 255.255.255.240 ) Router IP : 192.168.0.254 ( I want to tranfer to 202.175.123.128 ) For Client IP ( via NAT + DHCP of the Server ) : Ip : 192.168.1.1 ~ 192.168.1.50Don't know what you mean. You want to set up a DHCP server to dole out those addresses? You want to enable NAT? After apply a leased line connection with Internet from ISP, there is a segemnt IP addresses ( Public IP ) and a Router machine ( can't to be enabled the firewall function ) by ISP also : For sample : IP range : 202.175.123.123 ~ 202.175.123.129 subnet mask : 255.255.255.240 Router IP : 202.175.123.128 Now, I'm setting up a Internet Server ( all service in the same machines ) : There are Ethernat 0 and Ethernet 1 two Interfaces with the Server : Ethernet 0 for connecting with HUB_A and Router, but want to use Private IP address ( eg : 192.168.0.1 ) instead of public IP ( eg : 202.175.123.123 ) Ethernet 1 for connecting with HUB_B, provide NAT + DHCP for Clients ( ip range : 192.168.1.0 / 24 ) So...how to config the firewall rules by using iptables as the following condition : 1, how to clear up the default setting ? 2, how to disable all services ? 3, how to enable the service which needed ? 4, how to transfer the ip address ( public from / to private ) ? 5, how to enable NAT + DHCP for clients users connection with Internet ? Edward. |