网通使用第一块网卡(eth0):
 
  IP:210.82.37.149
 
  掩码:255.255.255.224
 
  网关:210.82.37.158
 
  铁通使用第二块网卡(eth1):
 
  IP:222.35.92.242
 
  掩码:255.255.255.252
 
  网关:222.35.92.241
 
  二、配置网卡:
 
  # vi /etc/sysconfig/networking/profiles/default/ifcfg-eth0
 
  DEVICE=eth0
 
  ONBOOT=yes
 
  IPADDR=210.82.37.149
 
  NETMASK=255.255.255.224
 
  GATEWAY=210.82.37.158
 
  TYPE=Ethernet
 
  # vi /etc/sysconfig/networking/profiles/default/ifcfg-eth1
 
  DEVICE=eth1
 
  ONBOOT=yes
 
  IPADDR=222.35.92.242
 
  NETMASK=255.255.255.252
 
  GATEWAY=222.35.92.241
 
  TYPE=Ethernet
 
  # vi /etc/sysconfig/networking/profiles/default/route-eth1
 
  GATEWAY0=218.57.200.1
 
  NETMASK0=255.255.255.0
 
  ADDRESS0=218.57.200.242
 
  # vi /etc/sysconfig/networking/profiles/default/resolv.conf
 
  nameserver 202.102.152.3
 
  nameserver 202.102.128.68
 
  三、配置路由表
 
  # vi /etc/iproute2/rt_tables,增加网通和铁通两个路由表
 
  252 cnc
 
  251 crtc
 
  设置网通的路由表
 
  ip route add 210.82.37.128/27 via 210.82.37.149 dev eth0 table cnc
 
  ip route add 127.0.0.0/8 dev lo table cnc
 
  ip route add default via 210.82.37.158 dev eth0 table cnc
 
  设置铁通的路由表
 
  ip route add 222.35.92.240/30 via 222.35.92.242 dev eth1 table crtc
 
  ip route add 127.0.0.0/8 dev lo table crtc
 
  ip route add default via 222.35.92.241 dev eth1 table crtc
 
  制定策略,让222.35.92.242的回应数据包走铁通的路由表路由,210.82.37.149的回应数据包走网通的路由表路由
 
  ip rule add from 210.82.37.149 table cnc
 
  ip rule add from 222.35.92.242 table crtc
 
  修改IP转发文件
 
  # vi /etc/sysctl.conf
 
  net.ipv4.ip_forward = 1
 
  net.ipv4.conf.default.rp_filter = 1
 
  kernel.sysrq = 0
 
  设置静态路由表文件
 
  # vi /etc/sysconfig/static-routes
 
  eth0 net 210.82.37.149 netmask 255.255.255.224 gw 210.82.37.158
 
  eth1 net 222.35.92.242 netmask 255.255.255.252 gw 222.35.92.241
 
  将从两个WAN口出去的数据包进行IP伪装masquerade
 
  # /sbin/modprobe ip_conntrack_ftp
 
  # /sbin/modprobe ip_nat_ftp
 
  # /sbin/iptables -t nat -A postrouting -o eth0 -j masquerade
 
  # /sbin/iptables -t nat -A postrouting -o eth1 -j masquerade
 
  设置默认网关为网通
 
  # route add default gw 210.82.37.158
 
  增加出口路由策略,客户端是铁通的走铁通线路,其余走网通线路。
 
  CODE:

ip rule add to 121.16.0.0/13 table cnc
ip rule add to 121.24.0.0/14 table cnc
ip rule add to 121.28.0.0/15 table cnc
ip rule add to 121.30.0.0/16 table cnc
ip rule add to 121.31.0.0/16 table cnc

其余省略…
刷新路由表

ip route flush cache

四、配置DNS

在服务器上配置自己的DNS解析,将域名服务器商处的域名解析指向服务器。

这样,来自网通的查询,将反馈网站网通的IP,其余反馈电信的IP。

配置named.conf

CODE:

view “cnc” {
match-clients {121.16.0.0/13;121.24.0.0/14;121.28.0.0/15;121.30.0.0/16;121.31.0.0/16;121.47其余省略…;}
recursion yes;
zone “zhyh.org” {
type master;
file “/var/named/zhyh.org.cnc”;
};
};
view “other” {
match-clients { any; };
recursion no;
zone “zhyh.org” {
type master;
file “/var/named/zhyh.org”;
};
};

配置zhyh.org.cnc,对应网通IP
CODE:

$TTL 86400
@ IN SOA zhyh.org. root (
2006111800 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS zhyh.org.
IN A 218.57.200.242
IN MX 10 mail
www IN A 218.57.200.242
ns1 IN A 218.57.200.242
ns IN A 222.173.254.21
mail IN A 218.57.200.242
1 IN PTR localhost.

配置zhyh.org,对应电信IP
CODE

$TTL 86400
@ IN SOA zhyh.org. root (
2006111800 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS zhyh.org.
IN A 222.173.254.21
IN MX 10 mail
www IN A 222.173.254.21
ns IN A 222.173.254.21
ns1 IN A 218.57.200.242
mail IN A 222.173.254.21
1 IN PTR localhost.

配置222.173.254.zone、218.57.200.zone做反向解析;
CODE:

$TTL 86400
@ IN SOA zhyh.org. root.zhyh.org. (
2006111813
3600
7200
3600000
86400 )
IN NS localhost.
242 IN PTR www.zhyh.org.
242 IN PTR ns1.zhyh.org.
242 IN PTR mail.zhyh.org.

五、配置apache,做好虚拟主机设置
CODE

# vi /etc/httpd/conf/httpd.conf
NameVirtualHost 218.57.200.242:80
NameVirtualHost 222.173.254.21:80

ServerName zhyh.org
DocumentRoot /var/www/html/
ServerAdmin webmaster@zhyh.org
ErrorLog logs/zhyh.org-error_log
CustomLog “|/usr/local/sbin/cronolog /var/log/httpd/zhyh.org-access_log.%Y%m%d” combined

RewriteEngine On
RewriteRule ^(.*)/htm/(.*)$ $1.php?$2

ServerName www.zhyh.org
DocumentRoot /var/www/html/zhyh.org
ServerAdmin webmaster@zhyh.org
ErrorLog logs/zhyh.org-error_log
CustomLog “|/usr/local/sbin/cronolog /var/log/httpd/zhyh.org-access_log.%Y%m%d” combined

Comments are closed.

Post Navigation