基于Linux实现局域网共享IP访问Internet

A Implemantation of Connecting Local Network with Internet Sharing one IP Based on Linux System

文章旨在介绍如何设置一个基本的Linux防火墙系统,允许局域网用户通过IP伪装使用一个IP上网联入In-ternet,在防火墙上对所有局域网进出的封包加工处理,使外界认为所有的封包和请求都是防火墙发出的,觉察不到内部局域网的存在。运行防火墙系统可以提升整个网络的安全性,保护内部局域网不会轻易受到外界的攻击。在防火墙上可以控制内部网络对Internet的访问权限,禁止内部网络访问一些受限制的站点。

This paper introduces how to set up a basic linux firewall system,which permit local users to be connected with internet using one IP through IP_Masquerade.The firewall analyses and processes all packages traversing it,which seems that the firewall send and receive all messages with the hosts outside not perceiving the interior network.Running the firewall system can promote the whole network security and protect interior local network from being attacked easi-ly.The administrator can control access of interior network to internet and forbid it to visit some limited sites.