IPTABLES NAT配置问题

[七_号]

环境
A 161.33.2.x
B 162.33.2.110 eth0 161.33.2.110 eth1 163.33.2.110
C 163.33.x.x

B机器环境
RHEL5
IP_FORWARD = 1
route -n
dest gw
161.33.2.0 161.33.2.254
162.33.2.0 162.33.2.254
default gw 163.33.2.254
现在将A网关设置为161.33.2.110
请问 如何配置B防火墙，可以让A可以访问C

[ingpj]

iptables -t nat -A POSTROUTING -s 161.33.2.x/32 -o eth1 -j MASQUERADE iptables -A FORWARD -s 161.33.2.x -d 163.33.x.x/32 -j ACCEPT

[七_号]

引用 1 楼 ingpj 的回复:

iptables -t nat -A POSTROUTING -s 161.33.2.x/32 -o eth1 -j MASQUERADE iptables -A FORWARD -s 161.33.2.x -d 163.33.x.x/32 -j ACCEPT

iptables -t nat -A PREROUTING -d 161.33.2.110 -p tcp --dport 10000 -j DNAT --to-destination 163.33.x.x:80 iptables -t nat -A POSTROUTING -s 161.33.0.0/16 -j SNAT --to-source 163.33.2.110 这样A机器的网关也不用修改