linux防火墙配置教程之访问外网web实验（3）
<p><strong>一、实验目标</strong></p>
<p>
1、本次实验在“linux基础网络搭建实验”的基础上，在外网虚拟机上搭建web服务，并分别配置外网和网关的防火墙规则，使内网能够访问web服务</p>
<p>
2、linux基础网络搭建实验：linux网络搭建基础实验（1）</p>
<p>
3、实验拓扑： </p>
<p>
<img title="linux防火墙配置教程之访问外网web实验（3）" alt="linux防火墙配置教程之访问外网web实验（3）" src="https://zhuji.jb51.net/uploads/img/202305/2d8fd96e2a16fb06bfa3b74eac594bbb.jpg"></p>
<p>
<strong>二、实验步骤</strong></p>
<p>
1、建立如图所示的网络拓扑结构，内外网联通，网关防火墙也暂时关闭</p>
<p>
2、外网测试主机配置</p>
<p>
（1）配置本地yum源（参考：centos 6.5配置本地yum源教程）</p>
<p>
（2）检查系统是否安装web服务器，如有，则启动该服务，如没有，则安装该服务</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_973406">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain"></code><code class="bash comments"># rpm -qa |grep httpd //检查系统是否安装web</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash plain"></code><code class="bash comments"># yum install httpd -y //安装web</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
</div>
<p>
<img title="linux防火墙配置教程之访问外网web实验（3）" alt="linux防火墙配置教程之访问外网web实验（3）" src="https://zhuji.jb51.net/uploads/img/202305/a74a2353719c3818e752c04b9386d35d.jpg"></p>
<p>
<img title="linux防火墙配置教程之访问外网web实验（3）" alt="linux防火墙配置教程之访问外网web实验（3）" src="https://zhuji.jb51.net/uploads/img/202305/1d296f693268659d06fae102308a5f51.jpg"></p>
<p>
<img title="linux防火墙配置教程之访问外网web实验（3）" alt="linux防火墙配置教程之访问外网web实验（3）" src="https://zhuji.jb51.net/uploads/img/202305/bd60d5b256c6cb800a40fc823f89340a.jpg"></p>
<p>
（3）检查web服务器是否运行正常</p>
<p>
在浏览器中访问202.3.4.10,如出现apache的测试页面，则表示web服务器正常运行并可以访问</p>
<p>
<img title="linux防火墙配置教程之访问外网web实验（3）" alt="linux防火墙配置教程之访问外网web实验（3）" src="https://zhuji.jb51.net/uploads/img/202305/5fab3910a6e818d7c51c6b6aaabfc68f.jpg"></p>
<p>
（4）在内网测试机上访问web服务器，显示为无法访问</p>
<p>
<img title="linux防火墙配置教程之访问外网web实验（3）" alt="linux防火墙配置教程之访问外网web实验（3）" src="https://zhuji.jb51.net/uploads/img/202305/498e751f8f8cce159ff90e2c837163ef.jpg"></p>
<p>
（5）在外网测试机上对外开放web服务</p>
<p>
1）清空防火墙规则，设置默认规则</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_958244">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
<div class="line number6 index5 alt1">
6</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain"></code><code class="bash comments"># iptables -f</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash plain"></code><code class="bash comments"># iptables -x</code>
</div>
<div class="line number3 index2 alt2">
<code class="bash plain"></code><code class="bash comments"># iptables -z</code>
</div>
<div class="line number4 index3 alt1">
<code class="bash plain"></code><code class="bash comments"># iptables -p input drop</code>
</div>
<div class="line number5 index4 alt2">
<code class="bash plain"></code><code class="bash comments"># iptables -p output drop</code>
</div>
<div class="line number6 index5 alt1">
<code class="bash plain"></code><code class="bash comments"># iptables -p forward drop</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
</div>
<p>
<img title="linux防火墙配置教程之访问外网web实验（3）" alt="linux防火墙配置教程之访问外网web实验（3）" src="https://zhuji.jb51.net/uploads/img/202305/1d74daec5fd6010d5856cb0a89347cff.jpg"></p>
<p>
2）设置对外开放web服务器</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_981477">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain"></code><code class="bash comments"># iptables -a input -i eth0 -p tcp --dport 80 -j accept</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash plain"></code><code class="bash comments"># iptables -a input -m state --state related,established -j accept</code>
</div>
<div class="line number3 index2 alt2">
<code class="bash plain"></code><code class="bash comments"># iptables -a output -p tcp --sport 80 -j accept</code>
</div>
<div class="line number4 index3 alt1">
<code class="bash plain"></code><code class="bash comments"># iptables-save</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
</div>
<p>
<img title="linux防火墙配置教程之访问外网web实验（3）" alt="linux防火墙配置教程之访问外网web实验（3）" src="https://zhuji.jb51.net/uploads/img/202305/690fbb6247fba4d523af556a553ea519.jpg"></p>
<p>
（6）在内网主机上测试访问</p>
<p>
<img title="linux防火墙配置教程之访问外网web实验（3）" alt="linux防火墙配置教程之访问外网web实验（3）" src="https://zhuji.jb51.net/uploads/img/202305/5fab3910a6e818d7c51c6b6aaabfc68f.jpg"></p>
<p>
3、在网关上搭建内外网之间的防火墙</p>
<p>
（1）启动防火墙</p>
<p>
（2）在内网测试主机上访问web服务器（应为无法访问）</p>
<p>
（3）清空防火墙规则，设置默认规则</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_246046">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
<div class="line number6 index5 alt1">
6</div>
<div class="line number7 index6 alt2">
7</div>
<div class="line number8 index7 alt1">
8</div>
<div class="line number9 index8 alt2">
9</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain"></code><code class="bash comments"># iptables -f</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash plain"></code><code class="bash comments"># iptables -x</code>
</div>
<div class="line number3 index2 alt2">
<code class="bash plain"></code><code class="bash comments"># iptables -z</code>
</div>
<div class="line number4 index3 alt1">
<code class="bash plain"></code><code class="bash comments"># iptables -p input drop</code>
</div>
<div class="line number5 index4 alt2">
<code class="bash plain"></code><code class="bash comments"># iptables -p output drop</code>
</div>
<div class="line number6 index5 alt1">
<code class="bash plain"></code><code class="bash comments"># iptables -p forward drop</code>
</div>
<div class="line number7 index6 alt2">
<code class="bash plain"></code><code class="bash comments"># iptables -a forward -d 202.3.4.10/32 -i eth0 -o eth1 -p tcp -m tcp --dport 80 -j accept</code>
</div>
<div class="line number8 index7 alt1">
<code class="bash plain"></code><code class="bash comments"># iptables -a forward -s 202.3.4.10/32 -m state --state related,established -j accept</code>
</div>
<div class="line number9 index8 alt2">
<code class="bash plain"></code><code class="bash comments"># iptables-save</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
</div>
<p>
<img title="linux防火墙配置教程之访问外网web实验（3）" alt="linux防火墙配置教程之访问外网web实验（3）" src="https://zhuji.jb51.net/uploads/img/202305/81e49c158708586cd1a4a8e1e7357203.jpg"></p>
<p>
（4）内网主机上测试（能够正常访问）</p>
<p>
<img title="linux防火墙配置教程之访问外网web实验（3）" alt="linux防火墙配置教程之访问外网web实验（3）" src="https://zhuji.jb51.net/uploads/img/202305/8552ceaa7f46d57897fe90379c541d79.jpg"></p>
<p>
以上就是本文的全部内容，希望对大家的学习有所帮助，也希望大家多多支持。</p>
頁:
[1]