SNAT and DNAT

SNAT: intranet users access the Internet through firewall rules

DNAT: users accessing the public IP address of the DNAT server through the external network of the firewall can directly forward the IP address to the intranet server for the purpose of publishing the server.

SNAT

Direct DNAT

Network Environment: one server, one client, and one linux server used as a firewall

The purpose is to allow Internet users to access the linux Internet IP address. Linux forwards the IP addresses to clients in the LAN through firewall rules to implement the publishing server.

1) configure network parameters and enable route forwarding. SNAT details are not introduced here.

2) write iptalbes firewall rule 650) this. width = 650; "src ="/e/u261/themes/default/images/spacer.gif "style =" background: url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center; border: 1px solid # ddd; "alt =" spacer.gif "/>

650) this. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/4D/F2/wKioL1Rcz4-BwditAAE4eVg5vE4868.jpg "title =" 0BA78C9AADE74C2F834D0CD25F97096D.jpg "alt =" wKioL1Rcz4-BwditAAE4eVg5vE4868.jpg "/>

-I is followed by the internet nic. The last 192.168.1.100 is the intranet server of the company.

3) access 202.106.0.20 in linux from a client (Internet client 202.106.0.X) will be forwarded to 192.168.1.100

This article is from the "IT technology blog" blog, please be sure to keep this source http://xingxingxingxin.blog.51cto.com/4794205/1574212

SNAT and DNAT