OpenForum RSS: iptables

�� :) (Andrey Mitrofanov)

Fri, 18 Jan 2008 16:21:53 GMT

>>�� PREROUTING �� . �� . �� .
>�� - �� ip_forward=0 :)

�� , �� , �� - �� , �� , �� , �� . �� - ��, �� , �� .

iptables (Lt_Flash)

Fri, 18 Jan 2008 13:14:30 GMT

>[�� ]
>�� . �� 20,21,5190
>.
>��:
>iptables -A FORWARD -p tcp -o eth1 -m multiport --dport 20,21,5190 -j
>ACCEPT
>iptables -A FORWARD -p tcp -i eth1 -m state --state ESTABLISHED,RELATED -j
>ACCEPT
>iptables -A FORWARD -j DROP
>�� PREROUTING �� . �� . �� .
>

�� - �� ip_forward=0 :)

iptables (stas)

Wed, 16 Jan 2008 13:13:16 GMT

>[�� ]
>-A PREROUTING -p tcp -m tcp -m multiport -i ppp0 -j DROP
>--dports 139,12345,443,445,20034,27374,31337
>-A PREROUTING -p udp -m udp -m multiport -i ppp0 -j DROP
>--dports 22,113,111,10000,3306,3128,514,587,631,953,143,443,1723
>-A PREROUTING -p udp -m udp -m multiport -i ppp0 -j DROP
>--dports 445,139,12345,20034,27374,31337
>-A PREROUTING -p tcp -m tcp -i ppp0 --dport 10000:65535 -j DROP
>
>COMMIT
># Completed

�� , �� . �� eth0 � eth1, �� iptables � �� -�� ppp0.
�� . �� , � ��, �� . �� .
�� , ��, ��:
iptables -P FORWARD DROP
iptables -A FORWARD -p tcp -o eth1 -m multiport --dport 20,21,5190 -j ACCEPT
iptables -A FORWARD -p tcp -i eth1 -m multiport --sport 20,21,5190 -j ACCEPT,
��

iptables (kim_kirill)

Wed, 16 Jan 2008 11:21:43 GMT

�� iptable, �� , �� 5190,20,21

# Generated by iptables-save v1.2.11 on Thu Mar 29 08:58:56 2007
*nat
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A PREROUTING -s 192.168.0.0/24 -i eth0 -j ACCEPT
-A PREROUTING -p tcp -m tcp -m multiport -i ppp0 -j ACCEPT --dports 25,53,20,21,5190,443
-A PREROUTING -p udp -m udp -m multiport -i ppp0 -j ACCEPT --dports 25,53,20,21,5190,443
-A PREROUTING -p tcp -m tcp -s 10.0.0.0/255.255.255.0 --dport 80 -j REDIRECT --to-ports 3128-3128
-A PREROUTING -s 10.0.0.0/255.255.255.0 -j ACCEPT
-A PREROUTING -p tcp -m tcp -m multiport -i ppp0 -j DROP --dports 22,443,1723,111,110,113,10000,3306,3128,514,587,631,953,143,10025
-A PREROUTING -p tcp -m tcp -m multiport -i ppp0 -j DROP --dports 22,443,1723,111,110,113,10000,3306,3128,514,587,631,953,143,445
-A PREROUTING -p tcp -m tcp -m multiport -i ppp0 -j DROP --dports 139,3128,12345,20034,27374,31337
-A PRERO

iptables (stas)

Wed, 16 Jan 2008 10:19:14 GMT

>[�� ]
>�� ?
>
>� �� , �� 5190, ��
>
>-A PREROUTING -p tcp -m tcp -m multiport -i ppp0 -j ACCEPT
>--dports 25,53,20,21,5190
>-A PREROUTING -p udp -m udp -m multiport -i ppp0 -j ACCEPT
>--dports 25,53,20,21,5190
>�� ?
>��

�� : �� PREROUTING. �� , ��-��, �� FORWARD. �� , � �� , �� -j DROP. �� iptables. �� .

OpenForum RSS: iptables

��������� ����� ���� :) (Andrey Mitrofanov)

iptables (Lt_Flash)

iptables (stas)

iptables (kim_kirill)

iptables (stas)

�� :) (Andrey Mitrofanov)