OpenForum RSS: �� rc.firewall

�� rc.firewall (alexcandr)

Wed, 06 May 2009 12:30:54 GMT

��

$ipt -A FORWARD -p tcp -s 192.9.100.0/24 --dport 110 -j ACCEPT
$ipt -A FORWARD -p udp -s 192.9.100.0/24 --dport 53 -j ACCEPT

��

�� rc.firewall (alexcandr)

Wed, 06 May 2009 10:33:36 GMT

>��
>�� .
>�� http://www.opennet.ru/docs/RUS/iptables/ �� .

��

>�� rc.firewall ��
>� /etc/rc.d/ ��

��

��! ��

�� rc.firewall (sonkilla)

Wed, 06 May 2009 10:27:20 GMT

�� .
�� http://www.opennet.ru/docs/RUS/iptables/ �� .
�� rc.firewall �� /etc/rc.d/ ��

!/bin/sh

#�� /etc/sysctl.conf � �� net.ipv4.ip_forward = 1 ��

echo 1 > /proc/sys/net/ipv4/ip_forward

#�� ip_nat_pptp �� #�� .

/sbin/depmod -a

/sbin/modprobe ip_tables
/sbin/modprobe ip_conntrack
/sbin/modprobe iptable_filter
/sbin/modprobe iptable_mangle
/sbin/modprobe iptable_nat
/sbin/modprobe ipt_LOG
/sbin/modprobe ipt_limit
/sbin/modprobe ipt_state
/sbin/modprobe ipt_REJECT
/sbin/modprobe ip_conntrack_ftp
/sbin/modprobe i

�� rc.firewall (alexcandr)

Wed, 06 May 2009 09:41:30 GMT

� �� IMHO:

>$ipt -t nat -A PREROUTING -p tcp -d 192.9.100.254 --dport 8025 -j
>DNAT --to-destination 80.247.184.198:25
>$ipt -t nat -A PREROUTING -p tcp -d 192.9.100.254 --dport 8110 -j
>DNAT --to-destination 80.247.184.198:110
>$ipt -A FORWARD -i $INTIF -p tcp -s 192.9.100.84 -d 80.247.184.198 --dport
>110 -j ACCEPT
>$ipt -A FORWARD -i $INTIF -p tcp -s 192.9.100.84 -d 80.247.184.198 --dport
>25 -j ACCEPT

�� ,,, �� ...
�� ,,,

�� rc.firewall (Kliver)

Wed, 06 May 2009 09:33:51 GMT

>>�� . �� , ��, ��,
>>��
>
>192.9.100.254-��
>62,16,108,188- ip ��
>�� rc.firewall
>
>ipt="/sbin/iptables"
>EXTIF="eth0"
>INTIF="eth1"

�� , ��
# ��
echo 1 > /proc/sys/net/ipv4/ip_forward
# ��
$ipt -F
$ipt -t nat -F
# ��
$ipt -P INPUT DROP
$ipt -P OUTPUT ACCEPT
$ipt -P FORWARD DROP
# ��

$ipt -A INPUT -i $INTIF -s 192.9.100.0/24 -j ACCEPT

>[�� ]
>$ipt -A INPUT -i $EXTIF -p tcp --dport 110 -j ACCEPT
>$ipt -A INPUT -i $EXTIF -p tcp --dport 443 -j ACCEPT
>$ipt -A INPUT -i $EXTIF -p tcp --dport 1723 -j ACCEPT
>$ipt -A INPUT -i $EXTIF -p tcp --dport 64000:65500 -j ACCEPT
>$ipt -A INPUT -i $EXTIF -p tcp --dport 20:21 -j ACCEPT
>
>
>
>$ipt -t nat -A POSTROUTING -s 192.9.100.0/24 -o $E

�� rc.firewall (alexcandr)

Wed, 06 May 2009 09:00:46 GMT

>�� . �� , ��, ��,
>��

192.9.100.254-��
62,16,108,188- ip ��
�� rc.firewall

ipt="/sbin/iptables"
EXTIF="eth0"
INTIF="eth1"

$ipt -A INPUT -s mail.npt.ru -j DROP

$ipt -A INPUT -i $EXTIF -p tcp --dport 4550 -j ACCEPT
$ipt -A INPUT -i $EXTIF -p tcp --dport 80 -j ACCEPT
$ipt -A INPUT -i $EXTIF -p tcp --dport 25 -j ACCEPT
$ipt -A INPUT -i $EXTIF -p tcp --dport 110 -j ACCEPT
$ipt -A INPUT -i $EXTIF -p tcp --dport 443 -j ACCEPT
$ipt -A INPUT -i $EXTIF -p tcp --dport 1723 -j ACCEPT
$ipt -A INPUT -i $EXTIF -p tcp --dport 64000:65500 -j ACCEPT
$ipt -A INPUT -i $EXTIF -p tcp --dport 20:21 -j ACCEPT

$ipt -t nat -A POSTROUTING -s 192.9.100.0/24 -o $EXTIF -j SNAT --to 62.16.108.188
$ipt -t nat -A PREROUTING -p tcp -d 192.9.100.254 --dport 8025 -j DNAT --to-destination 80.247.184.198:25
$ipt -t nat -A PREROUTING -p tcp -d 192.9.100.254 --dport 8110 -j DNAT --to-destination 80

�� rc.firewall (Kli)

Wed, 06 May 2009 08:45:23 GMT

>[�� ]
>DNAT --to-destination 194.67.57.226:110
>$ipt -A FORWARD -p tcp --dport 25 -s $localnet -j ACCEPT
>$ipt -A FORWARD -p tcp --dport 110 -s $localnet -j ACCEPT
>
>
>�� , �� , ��
>�� , ��
>�� ))))
>�� , �� ,,,,
>��

�� . �� , ��, ��, ��

�� rc.firewall (alexcandr)

Wed, 06 May 2009 08:36:10 GMT

$ipt -t nat -A PREROUTING -p tcp -d 192.9.100.254 --dport 25 -j DNAT --to-destination 194.67.57.226:25
$ipt -t nat -A PREROUTING -p tcp -d 192.9.100.254 --dport 110 -j DNAT --to-destination 194.67.57.226:110
$ipt -A FORWARD -p tcp --dport 25 -s $localnet -j ACCEPT
$ipt -A FORWARD -p tcp --dport 110 -s $localnet -j ACCEPT

�� , �� , �� , �� ))))
�� , �� ,,,,
��

�� rc.firewall (Kli)

Wed, 06 May 2009 08:15:45 GMT

>>use -j SNAT --to-source=your.real.ip instead.
>
>� ��
>$ipt -t nat -A POSTROUTING -p tcp -o eth0 -j SNAT --to-source=my
>ip

��, �� eth0 ��
��
iptables -A FORWARD -p tcp --dport 25 -s $localnet -j ACCEPT
iptables -A FORWARD -p tcp --dport 110 -s $localnet -j ACCEPT

OpenForum RSS: ����� ������ � rc.firewall

����� ������ � rc.firewall (alexcandr)

����� ������ � rc.firewall (alexcandr)

����� ������ � rc.firewall (sonkilla)

����� ������ � rc.firewall (alexcandr)

����� ������ � rc.firewall (Kliver)

����� ������ � rc.firewall (alexcandr)

����� ������ � rc.firewall (Kli)

����� ������ � rc.firewall (alexcandr)

����� ������ � rc.firewall (Kli)

OpenForum RSS: �� rc.firewall

�� rc.firewall (alexcandr)

�� rc.firewall (alexcandr)

�� rc.firewall (sonkilla)

�� rc.firewall (alexcandr)

�� rc.firewall (Kliver)

�� rc.firewall (alexcandr)

�� rc.firewall (Kli)

�� rc.firewall (alexcandr)

�� rc.firewall (Kli)