eu estou usando o debian etch como roteador de internet, fiz assim....
criei um arquivo com permição de execução dentro de /usr/local/sbin/regras
#!/bin/bash
iptables = /usr/sbin/iptables
sysctl = /sbin/sysctl
echo

echo -e "\n\n Exencutando Regras.\n"
#regras de roteamento de internet
iptables -F
iptables -F INPUT
iptables -F OUTPUT
iptables -F POSTROUTING -t nat
iptables -F PREROUTING -t nat
iptables -P FORWARD ACCEPT
iptables -t nat -A POSTROUTING -j MASQUERADE
sysctl -w net.ipv4.ip_forward=1

e no /etc/init.d/bootmisc.sh adicionei a linha
./usr/local/sbin/regras
#!/bin/sh
### BEGIN INIT INFO
# Provides:          bootmisc
# Required-Start:    $local_fs hostname $remote_fs
# Required-Stop:     $local_fs
# Default-Start:     S
# Default-Stop:
# Short-Description: Miscellaneous things to be done during bootup.
# Description:
### END INIT INFO

PATH=/usr/sbin:/usr/bin:/sbin:/bin
[ "$DELAYLOGIN" ] || DELAYLOGIN=yes
. /lib/init/vars.sh

do_start () {
       #
       # If login delaying is enabled then create the flag file
       # which prevents logins before startup is complete
       #
       case "$DELAYLOGIN" in
         Y*|y*)
               echo "System bootup in progress - please wait" >
/var/lib/initscripts/nologin
               ;;
       esac

       # Create /var/run/utmp so we can login.
       : > /var/run/utmp
       if grep -q ^utmp: /etc/group
       then
               chmod 664 /var/run/utmp
               chgrp utmp /var/run/utmp
       fi

       # Set pseudo-terminal access permissions.
       if [ ! -e /dev/.devfsd ] && [ -c /dev/ttyp0 ]
       then
               chmod -f 666 /dev/tty[p-za-e][0-9a-f]
               chown -f root:tty /dev/tty[p-za-e][0-9a-f]
       fi

       # Update motd
       uname -snrvm > /var/run/motd
       [ -f /etc/motd.tail ] && cat /etc/motd.tail >> /var/run/motd

       # Save kernel messages in /var/log/dmesg
       if which dmesg >/dev/null 2>&1
       then
               savelog -q -p -c 5 /var/log/dmesg
               dmesg -s 524288 > /var/log/dmesg
               chgrp adm /var/log/dmesg || :
       elif [ -c /dev/klog ]
       then
               savelog -q -p -c 5 /var/log/dmesg
               dd if=/dev/klog of=/var/log/dmesg &
               sleep 1
               kill $!
               [ -f /var/log/dmesg ] && { chgrp adm /var/log/dmesg || : ; }
       fi

       #
       #       Save udev log in /var/log/udev
       #
       if [ -e /dev/.udev.log ]
       then
               mv -f /dev/.udev.log /var/log/udev
       fi

       # Remove bootclean's flag files.
       # Don't run bootclean again after this!
       rm -f /tmp/.clean /var/run/.clean /var/lock/.clean
}

case "$1" in
 start|"")
       do_start
       ;;
 restart|reload|force-reload)
       echo "Error: argument '$1' not supported" >&2
       exit 3
       ;;
 stop)
       # No-op
       ;;
 *)
./usr/local/sbin/regras
       echo "Usage: bootmisc.sh [start|stop]" >&2
       exit 3
       ;;
esac

:
mas ele nao consegue rotear o sinal...
eles "pingam" um no outro sem perda de pacotes... executei as regras de
iptables diretamente no terminal e o problema persiste..
e agora...
--
linux user nº 432194

Eu sou livre e você?

Responder a