OpenForum RSS: iptables ��

iptables �� (s_dog)

Wed, 13 Oct 2010 08:27:50 GMT

fwbuilder, ��

iptables �� (PavelR)

Tue, 12 Oct 2010 17:53:39 GMT

>> iptables -A INPUT -i lo -j ACCEPT
>> iptables -A INPUT -m state ! -i lo --state NEW -j DROP
> �� , ��

�� , �� -i lo �� , �� accept-�� .

�� .

iptables �� (reader)

Tue, 12 Oct 2010 17:33:40 GMT

> �� .
> iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
> iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
> iptables -A INPUT -i lo -j ACCEPT
> iptables -A INPUT -m state ! -i lo --state NEW -j DROP

�� , ��

>[�� ]
> iptables -t nat -A PREROUTING -i venet0 -p tcp -m tcp --dport
> 80 -j DNAT --to-destination 192.168.20.4
> iptables -t nat -A PREROUTING -i venet0 -p tcp -m tcp --dport
> 21 -j DNAT --to-destination 192.168.20.4
> iptables -t nat -A PREROUTING -i venet0 -p tcp -m tcp --dport
> 2020 -j DNAT --to-destination 192.168.20.4
> iptables -t nat -A PREROUTING -i venet0 -p tcp -m tcp --dport
> 110 -j DNAT --to-destination 192.168.20.5
> iptables -A FORWARD -j REJECT --reject-with icmp-host-prohibited
> iptables -A INPUT -j REJECT --reject-with icmp-host-prohibited

iptables �� (PavelR)

Tue, 12 Oct 2010 13:56:15 GMT

>[�� ]
> iptables -t nat -A PREROUTING -i venet0 -p tcp -m tcp --dport
> 80 -j DNAT --to-destination 192.168.20.4
> iptables -t nat -A PREROUTING -i venet0 -p tcp -m tcp --dport
> 21 -j DNAT --to-destination 192.168.20.4
> iptables -t nat -A PREROUTING -i venet0 -p tcp -m tcp --dport
> 2020 -j DNAT --to-destination 192.168.20.4
> iptables -t nat -A PREROUTING -i venet0 -p tcp -m tcp --dport
> 110 -j DNAT --to-destination 192.168.20.5
> iptables -A FORWARD -j REJECT --reject-with icmp-host-prohibited
> iptables -A INPUT -j REJECT --reject-with icmp-host-prohibited

�� .
�� . �� , �� -A FORWARD -j REJECT �� - �� .

�� -�� , �� .

iptables �� (xservices)

Tue, 12 Oct 2010 09:00:11 GMT

�� .
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state ! -i lo --state NEW -j DROP
iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 1194 -j ACCEPT
iptables -A INPUT -i tap0 -s 192.168.138.2 -j ACCEPT
iptables -A FORWARD -i venet0 -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
iptables -A FORWARD -i venet0 -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
iptables -A FORWARD -i venet0 -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
iptables -A FORWARD -i venet0 -p tcp -m state --state NEW -m tcp --dport 2020 -j ACCEPT
iptables -A FORWARD -i venet0 -p tcp -m state --state NEW -m tcp --dport 110 -j ACCEPT
iptables -t nat -A PREROUTING -i venet0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.20.4
iptables -t nat -A PREROUTING -i v

iptables �� (Andrey Mitrofanov)

Tue, 12 Oct 2010 06:30:59 GMT

> �� ... �� ?

�� :
http://google.ru/search?hl=ru&q=firehol+debug+sorter+site:opennet.ru

:) � �� +++
http://www.opennet.ru/openforum/vsluhforumID1/81413.html#7
http://www.opennet.ru/openforum/vsluhforumID3/56932.html#16

PS: �� , _��_ �� . �� $) ��, iptables ��.

iptables �� (PavelR)

Tue, 12 Oct 2010 06:06:14 GMT

> �� lo ��
> iptables -A INPUT -i lo -j ACCEPT
> iptables -A INPUT -m state ! -i lo --state NEW -j DROP
> 20 �� .
> � �� ?
> iptables -A FORWARD -p tcp -m state --state NEW -m tcp --dport2020
> -j ACCEPT
> iptables -t nat -A PREROUTING -p tcp -m tcp --dport 80 -j
> DNAT --to-destination 192.168.20.4

iptables -A FORWARD -i eth0 -o eth1 ... (�� -o - �� ).
iptables -t -nat -A PREROUTING -i eth0 ...

iptables �� (xservices)

Tue, 12 Oct 2010 05:43:39 GMT

�� lo ��
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state ! -i lo --state NEW -j DROP
20 �� .
� �� ?
iptables -A FORWARD -p tcp -m state --state NEW -m tcp --dport2020 -j ACCEPT
iptables -t nat -A PREROUTING -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.20.4

iptables �� (PavelR)

Tue, 12 Oct 2010 05:15:37 GMT

> iptables -t nat -A PREROUTING -p tcp -m tcp --dport 80 -j
> DNAT --to-destination 192.168.20.4

�, �� , �� .

OpenForum RSS: iptables �������� ��������� ������� ������

iptables �������� ��������� ������� ������ (s_dog)

iptables �������� ��������� ������� ������ (PavelR)

iptables �������� ��������� ������� ������ (reader)

iptables �������� ��������� ������� ������ (PavelR)

iptables �������� ��������� ������� ������ (xservices)

iptables �������� ��������� ������� ������ (Andrey Mitrofanov)

iptables �������� ��������� ������� ������ (PavelR)

iptables �������� ��������� ������� ������ (xservices)

iptables �������� ��������� ������� ������ (PavelR)

OpenForum RSS: iptables ��

iptables �� (s_dog)

iptables �� (PavelR)

iptables �� (reader)

iptables �� (PavelR)

iptables �� (xservices)

iptables �� (Andrey Mitrofanov)

iptables �� (PavelR)

iptables �� (xservices)

iptables �� (PavelR)