OpenForum RSS: iptables �� .

firehol? �� . (PavelR)

Sun, 10 Aug 2008 13:48:43 GMT

>�� , ��
>�� iptables-save, ��
>��
>�� iptables-restore, ��
>�� . �� ,
>� �� , service RH-�� ,
>�� .

http://debian.nikolas.ru/debian/ RH-�� debian.

firehol? �� . (reader)

Sun, 10 Aug 2008 10:45:53 GMT

�� , �� iptables-save, �� iptables-restore, �� . �� , � �� , service RH-�� , �� .

firehol? �� . (PavelR)

Sun, 10 Aug 2008 05:56:28 GMT

>[�� ]
>>��
>>iptables -L -v
>
>iptables-save �� (�� ?) - ��, ��
>"��" � ��.
>http://www.opennet.ru/openforum/vsluhforumID1/80355.html
>http://www.opennet.ru/openforum/vsluhforumID10/3764.html#11
>
>>�� iptables
>

�� FireHol � �� -��. �� ӣ. �� iptables - �� iptables � �� .

�� , �� iptables �� - �� , �� , � �� , "�� ".

firehol, �� (Gennadi)

Fri, 08 Aug 2008 18:06:30 GMT

http://gennadi.dyndns.org/21.html

firehol, �� (Andrey Mitrofanov)

Thu, 07 Aug 2008 20:06:57 GMT

>>��

��, ��. � FORWARD, ��, �� . ip_forward=1 ��.
�� -��? �� defaul gateway �� ?

>|52. -t nat -A POSTROUTING -o $INET_IFACE -j SNAT --to-source $INET_IP[/CODE]

�� "��": 52 ��, 2.6�� - �� "��ݣ��" ��.

>� �� firehol �� ݣ �� 3 �� 5 ��.
>� �� /��... [�� firehol, ��.]

---8<--- firehol.free.sample.conf
version 5

INET_IP="192.168.1.2"
INET_IFACE="eth0"
LAN_IP_RANGE="192.168.10.0/24"
LAN_IFACE="eth1"

FIREHOL_LOG_LEVEL=DEBUG
FIREHOL_LOG_FREQUENCY="3/minute"
FIREHOL_LOG_BURST=3

snat to "$INET_IP" outface "$INET_IFACE"

interface "$LAN_IFACE" lan
protection full
protection reverse full
client all accept
server all accept src "$LAN_IP_RANGE"
server dhcp accept

interface "$INET_IFACE" inet
protection full
protection reverse full

firehol? �� . (Andrey Mitrofanov)

Thu, 07 Aug 2008 13:09:29 GMT

>��
>��
>iptables -L -v

iptables-save �� (�� ?) - ��, �� "��" � ��.
http://www.opennet.ru/openforum/vsluhforumID1/80355.html
http://www.opennet.ru/openforum/vsluhforumID10/3764.html#11

>�� iptables

�� - �� ...

"� �� "��" �� "��" ��, �� iptables ��. � �� "�� iptables" [...] - FireHOL."
http://www.opennet.ru/openforum/vsluhforumID10/3764.html#2

"�� , �� _��_ iptables �� . �� : ��, �� "��" � ��, �� firehol."
http://www.opennet.ru/openforum/vsluhforumID1/81413.html#7

� �� - ��:
google.ru
firehol "Andrey Mitrofanov" �� site:opennet.ru
ENTER

> � ��

��

iptables �� . (Deneb)

Thu, 07 Aug 2008 07:27:55 GMT

>[�� ]
>> echo -n "Deconfiguring firewall... "
>> echo "done."
>> ;;
>> *)
>> echo "Usage: /etc/init.d/firewall {start|stop}"
>> exit 1
>> ;;
>>esac
>>
>>exit 0

�� . � �� , �� .
� �� , �� .

iptables �� . (reader)

Thu, 07 Aug 2008 07:17:51 GMT

>[�� ]
>
> $IPFW -A INPUT -s 192.168.3.0/24 -p tcp --dport 8128 -j ACCEPT
>
> $IPFW -A INPUT -p tcp --dport 8128 -j DROP
> $IPFW -A FORWARD -s 192.168.1.0/24 -j ACCEPT
> $IPFW -A FORWARD -d 192.168.3.0/24 -j ACCEPT
> $IPFW -A FORWARD -s 192.168.1.2 -j ACCEPT
> $IPFW -A FORWARD -d 192.168.1.2 -j ACCEPT
> $IPFW -A FORWARD -s 192.168.1.200 -j ACCEPT
> $IPFW -A FORWARD -d 192.168.1.200 -j ACCEPT

�� icmp, tcp �� 8128, 22. �� :) .
>[�� ]
> echo -n "Deconfiguring firewall... "
> echo "done."
> ;;
> *)
> echo "Usage: /etc/init.d/firewall {start|stop}"
> exit 1
> ;;
>esac
>
>exit 0

iptables �� . (Deneb)

Thu, 07 Aug 2008 06:48:47 GMT

>� �� linux. �� http://www.opennet.ru/docs/RUS/iptables/
>�� rc.firewall http://www.opennet.ru/docs/RUS/iptables/misc/iptables-tutorial/scripts/rc.firewall.txt
>� �� .
>��
>

�� init.d Debian. A.B.C.D - ��

#!/bin/sh
#n

IPFW=/sbin/iptables

case "$1" in
start)
echo -n "Configuring firewall... "

# ��
$IPFW -F
$IPFW -X
$IPFW -Z
$IPFW -F -t nat
$IPFW -X -t nat
$IPFW -Z -t nat
# �� -��
$IPFW -P INPUT ACCEPT
$IPFW -P FORWARD ACCEPT
$IPFW -P OUTPUT ACCEPT
# ��
$IPFW -A INPUT -p icmp -s x.y.z.0/24 -j ACCEPT
$IPFW -A INPUT -p icmp -s 192.168.1.0/24 -j ACCEPT
$IPFW -A INPUT -p icmp -s 192.168.3.0/24 -j ACCEPT
$IPFW -A INPUT -p icmp -s 192.168.254.0/24 -j ACCEPT
$IPFW -A INPUT -p icmp -j DROP

# �� 22 ��
$IPFW -A INPUT -p

OpenForum RSS: iptables ��� ������ �����.

firehol? ��� ������ �����. (PavelR)

firehol? ��� ������ �����. (reader)

firehol? ��� ������ �����. (PavelR)

firehol, ���������� ������� (Gennadi)

firehol, ���������� ������� (Andrey Mitrofanov)

firehol? ��� ������ �����. (Andrey Mitrofanov)

iptables ��� ������ �����. (Deneb)

iptables ��� ������ �����. (reader)

iptables ��� ������ �����. (Deneb)

OpenForum RSS: iptables �� .

firehol? �� . (PavelR)

firehol? �� . (reader)

firehol? �� . (PavelR)

firehol, �� (Gennadi)

firehol, �� (Andrey Mitrofanov)

firehol? �� . (Andrey Mitrofanov)

iptables �� . (Deneb)

iptables �� . (reader)

iptables �� . (Deneb)