OpenForum RSS: iptables ��

iptables �� (tux2002)

Sat, 23 Oct 2010 08:14:34 GMT

> iptables -A INPUT -s 192.168.137.2 -j ACCEPT
> � �� ?

� �� , �� , �� , �� .

iptables �� (xservices)

Wed, 13 Oct 2010 17:17:31 GMT

>�� , �� .

�� + VPN + ��

>�� 4 ��:

3 �� .

iptables �� (Xaionaro)

Wed, 13 Oct 2010 14:53:34 GMT

>[�� ]
> DNAT --to-destination 192.168.20.4
> iptables -t nat -A PREROUTING -p tcp -m tcp --dport 2020 -j
> DNAT --to-destination 192.168.20.4
> iptables -t nat -A PREROUTING -p tcp -m tcp --dport 110 -j
> DNAT --to-destination 192.168.20.5
> iptables -A FORWARD -j REJECT --reject-with icmp-host-prohibited
> � ��
> ��
> iptables -A INPUT -s 192.168.137.2 -j ACCEPT
> � �� ?

�� , �� ̣�� , �� multiports. �� , �.�. �� :)

> ��
> iptables -A INPUT -i tap0 -s 192.168.137.2 -j ACCEPT
> � �� icmp ��.
> iptables -A INPUT -p icmp -m icmp -j ACCEPT
> �� icmp �� ?

�� , ��

iptables �� (Andrey Mitrofanov)

Wed, 13 Oct 2010 11:27:13 GMT

>> man iptabes /ESTABLISHED
> ��
> �� ssh.
> �� ?

��: "��" �� ip ��, �� [� -t filter] �� _�� ==> �� "��" �� NEW, �� - �� ETABLISHED.

�� , �� "�� ", ��?

iptables �� (xservices)

Wed, 13 Oct 2010 09:35:02 GMT

�� .
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 1194 -j ACCEPT
iptables -A INPUT -p udp -m state --state NEW -m udp --dport 1194 -j ACCEPT
iptables -A INPUT -s 192.168.137.2 -j ACCEPT
iptables -A INPUT -p icmp -m icmp -j ACCEPT
iptables -A INPUT -j REJECT --reject-with icmp-host-prohibited
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -p tcp -m state --state NEW -m tcp -d 192.168.20.4 --dport 80 -j ACCEPT
iptables -A FORWARD -p tcp -m state --state NEW -m tcp -d 192.168.20.4 --dport 21 -j ACCEPT
iptables -A FORWARD -p tcp -m state --state NEW -m tcp -d 192.168.20.4 --dport 2020 -j ACCEPT
iptables -A FORWARD -p tcp -m state --state NEW -m tcp -d 192.168.20.5 --dport 110 -j ACCEPT
iptables -t nat -A PREROUTING -p tcp -m tcp --dport

iptables �� (xservices)

Wed, 13 Oct 2010 09:19:33 GMT

> � �� -d 192.168.20.4, -d 192.168.20.5 � ��
> �� .

�� ?

iptables -A FORWARD -p tcp -m state --state NEW -m tcp -d 192.168.20.4 --dport 80 -j ACCEPT
iptables -A FORWARD -p tcp -m state --state NEW -m tcp -d 192.168.20.4 --dport 22 -j ACCEPT
iptables -A FORWARD -p tcp -m state --state NEW -m tcp -d 192.168.20.4 --dport 21 -j ACCEPT
iptables -A FORWARD -p tcp -m state --state NEW -m tcp -d 192.168.20.4 --dport 2020 -j ACCEPT
iptables -A FORWARD -p tcp -m state --state NEW -m tcp -d 192.168.20.5 --dport 110 -j ACCEPT

iptables �� (xservices)

Wed, 13 Oct 2010 09:18:46 GMT

>> �� ?
> � �� "� �� ..."
> �� .

�� )))

iptables �� (xservices)

Wed, 13 Oct 2010 09:18:28 GMT

>> 20.5
>> 20.4
>> 20.6
>> �� .
> P.S.: ��-�� 192.168.20.6. :)

�� 20.6 )))) �� )

iptables �� (xservices)

Wed, 13 Oct 2010 09:17:52 GMT

>[�� ]
>> iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
>> �� .
>> � �� 22 ��
>> �� VPN ��..
>> �� ?
> � �� , �� 22-�� , ��
> �� ? �� . ��
> �� NEW �� 22-�� , � ��, ��, ESTABLISHED ��
> ��.
> man iptabes /ESTABLISHED

�� ssh.
�� . �� NEW �� ..
�� ?

OpenForum RSS: iptables ���������

iptables ��������� (tux2002)

iptables ��������� (xservices)

iptables ��������� (Xaionaro)

iptables ��������� (Andrey Mitrofanov)

iptables ��������� (xservices)

iptables ��������� (xservices)

iptables ��������� (xservices)

iptables ��������� (xservices)

iptables ��������� (xservices)

OpenForum RSS: iptables ��

iptables �� (tux2002)

iptables �� (xservices)

iptables �� (Xaionaro)

iptables �� (Andrey Mitrofanov)

iptables �� (xservices)

iptables �� (xservices)

iptables �� (xservices)

iptables �� (xservices)

iptables �� (xservices)