iptables场景三——模拟公司常用简单iptables规则场景

一 场景要求

1、员工在公司内部（192.168.0.0/24）能访问服务器上的任何服务

2、当员工出差例如在上海，通过VPN连接到公司外网===拨号到===>VPN服务器=====>内网FTP，SAMBA，NFS，SSH

3、公司有一个门户网站需要运行公网访问

二 常见端口梳理

 

 

三 配置规则基本思路

<!--5f39ae17-8c62-4a45-bc43-b32064c9388a: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-->