使用iptables建置Linux 防火墙(2)

核心提示： IP_POOL="163.21.xxx.240-163.21.xxx.250"INET_IFACE="eth1"## 1.2 Local Area Network configuration.## 定义 NAT IP 及 LAN 接口LAN_IP=&

IP_POOL="163.21.xxx.240-163.21.xxx.250"

INET_IFACE="eth1"

#

# 1.2 Local Area Network configuration.

#

# 定义 NAT IP 及 LAN 接口

LAN_IP="192.168.1.253"

LAN_HTTP1_IP="192.168.1.2"

LAN_HTTP2_IP="192.168.1.4"

LAN_HTTP3_IP="192.168.1.9"

LAN_HTTP4_IP="192.168.1.6"

LAN_HTTP5_IP="192.168.1.7"

LAN_HTTP6_IP="192.168.1.53"

LAN_FTP1_IP="192.168.1.2"

LAN_FTP2_IP="192.168.1.6"

LAN_FTP3_IP="192.168.1.7"

LAN_MAIL1_IP="192.168.1.6"

LAN_MAIL2_IP="192.168.1.7"

LAN_PCAW1_IP="192.168.1.2"

LAN_PCAW2_IP="192.168.1.4"

LAN_WAM1_IP="192.168.1.6"

LAN_WAM2_IP="192.168.1.7"

LAN_DNS_IP="192.168.1.2"

LAN_IP_RANGE="192.168.0.0/16"

LAN_BROADCAST_ADDRESS="192.168.1.255"

LAN_IFACE="eth0"

#

# 1.4 Localhost Configuration.

#

# 定义 Loopback IP 及接口

LO_IFACE="lo"

LO_IP="127.0.0.1"

#

# 1.5 IPTables Configuration.

#

# 设定 iptables 指令路径

IPTABLES="/sbin/iptables"

#

# 1.6 Other Configuration.

#

###########################################################################