This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
сервис_nat [2024/05/06 16:17] val [Debian/Ubuntu (iptables)] |
сервис_nat [2025/07/14 08:26] (current) val [Сервис NAT] |
||
---|---|---|---|
Line 1: | Line 1: | ||
====== Сервис NAT ====== | ====== Сервис NAT ====== | ||
- | * [[http://stackoff.ru/ip/|Определение внутреннего IP-адреса за NAT и VPN через WebRTC]] | + | * [[https://stackoff.ru/ip/|Определение внутреннего IP-адреса за NAT и VPN через WebRTC]] |
===== Трансляция на основе адреса отправителя ===== | ===== Трансляция на основе адреса отправителя ===== | ||
Line 162: | Line 162: | ||
</code> | </code> | ||
+ | ==== Debian/Ubuntu (nftables) ==== | ||
+ | |||
+ | <code> | ||
+ | root@gate:~# cat /etc/nftables.conf | ||
+ | </code><code> | ||
+ | ... | ||
+ | table ip nat { | ||
+ | ... | ||
+ | chain prerouting { | ||
+ | type nat hook prerouting priority dstnat; policy accept; | ||
+ | ip daddr 172.16.1.X tcp dport 2222 dnat to 192.168.X.10:22 | ||
+ | ip daddr 172.16.1.X udp dport 53 dnat to 192.168.X.10 | ||
+ | ip daddr 172.16.1.X tcp dport 53 dnat to 192.168.X.10 | ||
+ | |||
+ | ip daddr 172.16.1.X tcp dport { 25, 80, 143, 465, 587, 5222 } dnat to 192.168.X.10 | ||
+ | |||
+ | ip daddr 172.16.1.X udp dport { 10000-20000 } dnat to 192.168.X.10 | ||
+ | ip daddr 172.16.1.X udp dport { 5060 } dnat to 192.168.X.10:5060 | ||
+ | # ip daddr 172.16.1.X udp dport { 6050 } dnat to 192.168.X.10:5060 | ||
+ | |||
+ | ip daddr 172.16.1.X tcp dport 5061 dnat to 192.168.X.10 | ||
+ | ip daddr 172.16.1.X udp dport 4569 dnat to 192.168.X.10 | ||
+ | |||
+ | } | ||
+ | } | ||
+ | </code><code> | ||
+ | root@gate:~# systemctl restart nftables.service | ||
+ | </code> | ||
==== FreeBSD (pf) ==== | ==== FreeBSD (pf) ==== | ||
<code> | <code> |