配置NET共享INTERNET资源

echo "1" > /proc/sys/net/ipv4/ip_forward

INET_IFACE="ppp0"

INET_IP="xxx.xxx.xxx.xxx"

LAN_IP="192.168.0.1"

LAN_IP_RANGE="192.168.0.0/24"

IPT="/sbin/iptables"

/sbin/depmod -a

/sbin/modprobe ip_tables

/sbin/modprobe ip_nat_ftp

/sbin/modprobe ipt_LOG

 $IPT -P INPUT ACCEPT

 $IPT -P FORWARD ACCEPT

 $IPT -P OUTPUT ACCEPT

 $IPT -t nat -P PREROUTING ACCEPT

 $IPT -t nat -P POSTROUTING ACCEPT

 $IPT -t nat -P OUTPUT ACCEPT

 for TABLE  in filter nat mangle ; do

 $IPT -t $TABLE -F

 $IPT -t $TABLE -X

 done

$IPT -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

for DNS in $(grep ^n /etc/resolv.conf|awk '{print $2}'); do

$IPT -A INPUT -p udp -s $DNS --sport domain -j ACCEPT

done

if [ "$INET_IFACE"=ppp0 ] ;then

$IPT -t nat -A POSTROUTING -o $INET_IFACE -j MASQUERADE

else

$IPT -t nat -A POSTROUTING -o $INET_IFACE -j SNAT --to $INET_IP

fi