root@debian:~# cat setup_routing.sh
#!/bin/bash
echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -v -t nat -C POSTROUTING -o enp7s0 -j MASQUERADE || iptables -v -t nat -A POSTROUTING -o enp7s0 -j MASQUERADE
iptables -v -C FORWARD -i enp7s0 -o wlp6s0 -m state --state RELATED,ESTABLISHED -j ACCEPT || iptables -v -A FORWARD -i enp7s0 -o wlp6s0 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -v -C FORWARD -i wlp6s0 -o enp7s0 -j ACCEPT || iptables -v -A FORWARD -i wlp6s0 -o enp7s0 -j ACCEPT
helyett:
/etc/default/ufw
DEFAULT_FORWARD_POLICY="ACCEPT"
/etc/ufw/sysctl.conf
net/ipv4/ip_forward=1
/etc/ufw/before.rules végére
# NAT
*nat
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -s 192.178.0.0/24 -o enp7s0 -j MASQUERADE
COMMIT
systemctl restart ufw.service
NAT ellenőrzése:
root@debian:/etc/ufw# iptables -t nat -L -v
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 262 packets, 24719 bytes)
pkts bytes target prot opt in out source destination
296 22972 MASQUERADE all -- any enp7s0 192.178.0.0/24 anywhere
root@rock64:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether be:c2:d9:9a:28:d8 brd ff:ff:ff:ff:ff:ff
inet 192.178.0.213/24 brd 192.178.0.255 scope global noprefixroute eth0
valid_lft forever preferred_lft forever
root@rock64:~# cat /etc/os-release
PRETTY_NAME="Armbian 23.02.2 Jammy"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04 (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.armbian.com"
SUPPORT_URL="https://forum.armbian.com"
BUG_REPORT_URL="https://www.armbian.com/bugs"
PRIVACY_POLICY_URL="https://www.armbian.com"
UBUNTU_CODENAME=jammy
Rock64-en a DG=WLAN TCP/IP címe:
root@rock64:~# ip r s
default via 192.178.0.100 dev eth0 proto static metric 100
192.178.0.0/24 dev eth0 proto kernel scope link src 192.178.0.213 metric 100
root@rock64:~# chronyc sources
MS Name/IP address Stratum Poll Reach LastRx Last sample
===============================================================================
^+ prod-ntp-3.ntp1.ps5.cano> 2 7 377 333 -1279us[-1619us] +/- 30ms
^* prod-ntp-4.ntp4.ps5.cano> 2 8 377 274 -11ms[ -11ms] +/- 34ms
^+ prod-ntp-5.ntp1.ps5.cano> 2 8 377 136 -8625us[-8625us] +/- 37ms
^- alphyn.canonical.com 2 10 375 402 -45ms[ -45ms] +/- 241ms
^+ ntp2.niif.hu 2 8 377 335 -9079us[-9419us] +/- 40ms
^+ mail.zsurob.hu 3 8 377 466 -6680us[-7011us] +/- 52ms
^+ ntp1.niif.hu 2 8 377 270 -1259us[-1259us] +/- 28ms
^- inspektor-vlan196.debrec> 2 7 377 7 -7916us[-7916us] +/- 41ms
^? 192.178.0.213 0 9 377 - +0ns[ +0ns] +/- 0ns