debian做代理服务器,WINXP共享上网

饭饭

安装记录:

debian 做代理服务器, WINXP共享上网 .

电信ADSL (PPPOE) , 4口HUB

WINXP IP设置:

    IP :192.168.0.5
    网关:192.168.0.1

debian :#cat /etc/network/interfaces
        
   

1. 
   
2. # This file describes the network interfaces available on your system
   
3. # and how to activate them. For more information, see interfaces(5).
   
4. 
   
5. # The loopback network interface
   
6. auto lo
   
7. iface lo inet loopback
   
8. 
   
9. # The primary network interface
   
10. #auto eth0
    
11. iface eth0 inet static
    
12.         name debian
    
13.         address 192.168.0.1
    
14.         netmask 255.255.255.0
    
15.         network 192.168.0.1
    
16.         broadcast 192.168.101.255
    
17.         gateway 192.168.0.1
    
18.         # dns-* options are implemented by the resolvconf package, if installed
    
19.         dns-nameservers 192.168.0.1
    
20. 
    
21. auto dsl-provider
    
22. iface dsl-provider inet ppp
    
23.      provider dsl-provider
    
24. # please do not modify the following line
    
25.      pre-up /sbin/ifconfig eth0 up # line maintained by pppoeconf   

复制代码

S1 :
     apt-get install squid
     apt-get install ipstables

S2:
    修改/etc/squid/squid.conf
   

1. 
   
2.      http_port 3128
   
3.      visible_hostname debian
   
4.      cache_dir ufs /var/spool/squid 500 16 256
   
5.      cache_mem 20 MB
   
6.      cache_swap_low 90
   
7.      cache_swap_high 95
   
8.      httpd_accel_host virtual
   
9.      httpd_accel_port 80
   
10.      httpd_accel_with_proxy on
    
11.      httpd_accel_uses_host_header on
    
12.      acl all src 0.0.0.0/0.0.0.0
    
13.      http_access allow all  

复制代码

S3:
      #squid -z
      # /etc/init.d/squid restart

s4:
      加载ipstables模块:
     

1. 
   
2.         modprobe ip_tables
   
3.         modprobe ip_nat_ftp
   
4.         modprobe ip_conntrack
   
5.         modprobe ip_conntrack_ftp

复制代码

S5:
     

1. 
   
2.       #echo 1 > /proc/sys/net/ipv4/ip_forward
   
3.       #iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
   
4.       #iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE

复制代码

完成  !

     iptables 不是很熟悉   ,研究ying ...

Wallace.lee

你这是单网卡啊