Linux下固定IP共享NAT代理上网

#/bin/sh
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X

echo "1">/proc/sys/net/ipv4/ip_forward

arp -s 192.168.0.5 00:E0:11:01:CE:BD
iptables -A FORWARD -s 192.168.0.5 -m mac --mac 00:E0:11:01:CE:BD -j ACCEPT
iptables -A FORWARD -s 192.168.0.2 -j ACCEPT
iptables -A FORWARD -s 192.168.0.6 -j ACCEPT
iptables -A FORWARD -s 192.168.0.0/28 -j DROP
iptables -t nat -A POSTROUTING -s 192.168.0.0/28 -o eth1 -j SNAT --to-source 58.1
6.172.2

iptables -A FORWARD -s 192.168.1.2 -j ACCEPT
iptables -A FORWARD -s 192.168.1.0/25 -p tcp --dport ! 80 -j DROP
iptables -A FORWARD -s 192.168.1.0/25 -p udp --dport ! 53 -j DROP
iptables -t nat -A POSTROUTING -s 192.168.1.0/25 -j SNAT --to-source 58.16.172.2
iptables -t nat -A PREROUTING -s 192.168.1.0/25 -i eth0 -p tcp --dport 80 -j RED
IRECT --to-port 3128