网站服务端：

iptables –Fiptables –F –t nat //清空filter表和nat表service httpd start网关：vim /etc/sysctl.conf

Kernel sysctl configuration file for Red Hat Linux

#

For binary values, 0 is disabled, 1 is enabled. See sysctl(8) and

sysctl.conf(5) for more details.

Controls IP packet forwarding

net.ipv4.ip_forward = 1 //开启路由转发功能

Controls source route verification

net.ipv4.conf.default.rp_filter = 1

iptables –Fiptables -t nat -A POSTROUTING -s 192.168.100.0/24 -o eth0 -j SNAT --to-source 12.0.0.1//将内部局域网IP地址段转换为全局IP地址SNAT配置完成服务端验证转换是否生效cd /etc/httpd/logscat access_log网关服务器做DNAT：iptables -t nat -A PREROUTING -d 12.0.0.1 -i eth0 -p tcp --dport 80 -j DNAT --to-destination 192.168.100.10//允许公网服务器通过网关12.0.0.1访问内部网络192.168.100.10的网站