求救ADSL共享上网（急）

小明人

ＡＤＳＬ共享上网，我的iptables\nat都配完成了，客户端也可以ping通ＡＤＳＬ拔号获得的ＩＰ．但客户端没法打开网页．请老师指点．

springwind426

写出你的配置

还有，请注意：
客户端的网关是你的内网卡的IP
DNS需要设置

如果你的客户端是通过DHCP获取的，那么检查你的DHCP服务器的配置

小明人

楼上说的我都配了，它和iptables的设置有关吗

delux2008

我也是用的Linux共享上网的,把我的iptables贴给你看下吧.
记得修改/etc/sysctl.conf文件中的net.ipv4.ip_forward = 0改为1
eth0接内网,eth1接外网

# Generated by iptables-save v1.2.11 on Sun Aug 20 17:16:13 2006
*nat
REROUTING ACCEPT [0:0]
OSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A PREROUTING -i ppp0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.1.202:80
-A POSTROUTING -s 192.168.0.0/255.255.255.0 -o ppp0 -j MASQUERADE
COMMIT
# Completed on Sun Aug 20 17:16:13 2006
# Generated by iptables-save v1.2.11 on Sun Aug 20 17:16:13 2006
*filter
:INPUT DROP [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:allowed - [0:0]
:bad_tcp_packets - [0:0]
:icmp_packets - [0:0]
-A INPUT -p tcp -j bad_tcp_packets
-A INPUT -i ppp0 -p icmp -j icmp_packets
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth0 -j ACCEPT
-A INPUT -m limit --limit 3/min --limit-burst 3 -j LOG --log-prefix "IPT INPUT packet died: " --log-level 6
-A INPUT -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -i eth0 -p udp -m udp --sport 68 --dport 67 -j ACCEPT
-A INPUT -i eth0 -p tcp -m state --state NEW -m tcp --dport 137:139 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 21:23 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m multiport --dports 53,80,1503 -j ACCEPT
-A FORWARD -p tcp -j bad_tcp_packets
-A FORWARD -m mac --mac-source 00:16:36:3B:46:C7 -j ACCEPT
-A FORWARD -m mac --mac-source 00:00:E2:9D:8A:45 -j ACCEPT
-A FORWARD -m mac --mac-source 52:54:AB:56:65:F3 -j ACCEPT
-A FORWARD -m mac --mac-source 00:11:5B:31:4A:32 -j ACCEPT
-A FORWARD -m mac --mac-source 00:50:8D:62:37F -j ACCEPT
-A FORWARD -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 53 -j ACCEPT
-A FORWARD -s 192.168.0.0/255.255.255.0 -j DROP
-A allowed -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN -j ACCEPT
-A allowed -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT
-A allowed -p tcp -j DROP
-A bad_tcp_packets -p tcp -m tcp ! --tcp-flags SYN,RST,ACK SYN -m state --state NEW -j LOG --log-prefix "New not syn: " --log-level 6
-A bad_tcp_packets -p tcp -m tcp ! --tcp-flags SYN,RST,ACK SYN -m state --state NEW -j DROP
-A icmp_packets -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A icmp_packets -p icmp -m icmp --icmp-type 11 -j ACCEPT
COMMIT
# Completed on Sun Aug 20 17:16:13 2006