1.修改服务器内核参数，服务器配置文件/etc/sysctl.conf修改或者添加内容如下
2 J* B9 h( J1 X- _- net.ipv4.ip_forward = 1/ S) e2 ]0 D4 c6 c* k) x# Z4 a7 J& J
- net.ipv4.conf.default.rp_filter = 0
# J G6 S$ w, ?( M, A4 m' k( ^ - net.ipv4.conf.all.rp_filter = 06 m% i* u- X$ x8 q o0 v* x3 r
- net.ipv4.conf.all.send_redirects = 0
6 P3 D9 ]2 d/ J$ J1 r - net.ipv4.conf.default.send_redirects = 04 ?5 a/ M; v" c$ E6 c3 z
- net.ipv4.conf.all.accept_redirects = 0
- b# r( Q4 i% T/ I" l" V - net.ipv4.conf.default.accept_redirects = 0
' S# f" ?: u2 |# a: N: V/ Q - net.core.xfrm_larval_drop = 1
2.防火墙添加规则, E& J5 U& C4 ?+ P/ W5 Y- G
- iptables -t nat -A POSTROUTING ! -s 127.0.0.1/8 -j MASQUERADE5 d% a, a# V! F6 E& Q
- iptables -I FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
|
发表于 2019-3-29 00:20:11