IP Forwarding打开

 

IP Forwarding打开

标签： filternetworksecurityinterfacelinux路由器

2010-11-25 09:45  4052人阅读  评论(0)  收藏  举报

  分类：

linux知识学习（4） 

英文源URL：http://www.ducea.com/2006/08/01/how-to-enable-ip-forwarding-in-linux/

   一般情况下，我们的linux机器的ip forwarding选项都是关闭的。 但是如果我们的机器需要做网关，或路由器。那么这个就要打开了。

首先检查下ip forwarding是否已经打开。

 //  Using sysctl:
 sysctl net.ipv4.ip_forward
 net.ipv4.ip_forward = 0

 //或者 just checking out the value in the /proc system
 cat /proc/sys/net/ipv4/ip_forward
 0
 //打开ip forwarding
 sysctl -w net.ipv4.ip_forward=1
 //同样的或者
 echo 1 > /proc/sys/net/ipv4/ip_forward

 //这样的设置只是一次性的。我们可以永久的设置成打开。如下：
 //将文件设置/etc/sysctl.conf:
 net.ipv4.ip_forward = 1
 //如果已经将ip forwarding由0设置为1。为了使它生效。我们执行如下的命令。
 sysctl -p /etc/sysctl.conf

 //RedHat中执行如下：
 service network restart

 //Ubuntu/Debian系统则重启procps服务
 /etc/init.d/procps.sh restart

---

 /*
 下面这段看看linux中的rp_filter是干什么的

  rp_filter, which automatically rejects incoming packets if the

  routing table entry for their source address doesn't match the

  network interface they're arriving on. This has security

  advantages because it prevents the so-called IP spoofing,

  however it can pose problems if you use asymmetric routing

  (packets from you to a host take a different path than packets

  from that host to you) or if you operate a non-routing host

  which has several IP addresses on different interfaces.
 */

 To turn rp_filter off, uncomment the lines below:

 /etc/sysctl.conf

 #net.ipv4.conf.default.rp_filter=1

 #net.ipv4.conf.all.rp_filter=1


 /etc/sysctl.d/10-network-security.conf

 #net.ipv4.conf.default.rp_filter=1

 #net.ipv4.conf.all.rp_filter=1