论文部分内容阅读
NAT(Network Address Translation)即网络地址翻译,就是将一个 IP 地址用另一个 IP 地址代替。地址翻译主要用在三个方面:使用 modem 连接上网时,网络管理员希望隐藏内部网络的 IP地址,通常称之为 IP 伪装(IP masquerading)。使用多重服务器时,你只有一个 IP 但你却想让别人能够连到真实 IP 地址后面的主机去,通常称之为端口转发(port-forwarding)。使用透明代理时,代理服务器在内网和外网之间工作,而你的网络无须知道在和一个代理对话,通常称之为重定向(redirection)。NAT 的具体配置方法也很简单,Linux2.2版本中的 ipchains 和Linux2.4版本中的 netfilter 都支持 NAT 功能。以下我就针对 NAT 的三种主要应用谈一谈具体的配置:
NAT (Network Address Translation) Network address translation, that is, an IP address with another IP address instead. Address translation is mainly used in three aspects: When using a modem to connect to the Internet, the network administrator hopes to hide the IP address of the internal network, which is usually called IP masquerading. When using multiple servers, you have only one IP but you want to allow others to connect to the host behind the real IP address, commonly known as port-forwarding. When using a transparent proxy, the proxy server works between the intranet and the extranet, and your network does not need to know that it is talking to an agent, often referred to as redirection. The specific configuration method of NAT is also very simple, ipchains in Linux2.2 version and netfilter in Linux2.4 version support NAT function. Below I will talk about the three main applications for NAT specific configuration: