OpenForum RSS: Centos � iptables

Centos � iptables (reader)

Tue, 12 May 2009 20:02:09 GMT

>echo "1" > /proc/sys/net/ipv4/ip_forward
>echo "1" > /proc/sys/net/ipv4/ip_dynaddr - �� :)
>c �� :
> /sbin/insmod ip_conntrack_pptp
>insmod: can't read 'ip_conntrack_pptp': No such file or directory
>��-�� /sbin/modprobe - �� - �� .

�� , �� , �� :)

�� , � �� - ��

>
>
>�� "�� win
>"?

�� tcpdump, � �� - wireshark ( �� win �� ), � �� , �� win �� .

>� �� , �� ?

lsmod - ��

>
>PS Reader, �� !

�� , �� , ��

Centos � iptables (ksw)

Tue, 12 May 2009 16:35:05 GMT

echo "1" > /proc/sys/net/ipv4/ip_forward
echo "1" > /proc/sys/net/ipv4/ip_dynaddr - �� :)
c �� :
/sbin/insmod ip_conntrack_pptp
insmod: can't read 'ip_conntrack_pptp': No such file or directory
��-�� /sbin/modprobe - �� - �� .

�� "�� win "?
� �� , �� ?

PS Reader, �� !

Centos � iptables (reader)

Tue, 12 May 2009 08:01:43 GMT

>[�� ]
>
>�� , �� , �� , ��
>� �� mangle �� .
>
>��
>echo "1" > /proc/sys/net/ipv4/ip_forward
>echo "1" > /proc/sys/net/ipv4/ip_dynaddr
>�� win �� ( IP, ��, DNS,
>�� ), ��
>� win

��

insmod ip_conntrack_pptp
insmod ip_nat_pptp

Centos � iptables (reader)

Tue, 12 May 2009 07:52:31 GMT

>[�� ]
>COMMIT
># Completed on Mon May 11 13:14:10 2009
># Generated by iptables-save v1.3.5 on Mon May 11 13:14:10 2009
>*nat
>:PREROUTING ACCEPT [34:3694]
>:POSTROUTING ACCEPT [22:1187]
>:OUTPUT ACCEPT [22:1187]
>-A POSTROUTING -s 192.168.1.0/255.255.255.0 -o ppp0 -j MASQUERADE
>COMMIT
># Completed on Mon May 11 13:14:10 2009

�� , �� , �� , �� mangle �� .

��
echo "1" > /proc/sys/net/ipv4/ip_forward
echo "1" > /proc/sys/net/ipv4/ip_dynaddr
�� win �� ( IP, ��, DNS, �� ), �� win

Centos � iptables (ksw)

Mon, 11 May 2009 09:35:24 GMT

��-�� - �� - �� . �� -
iptables-save
/sbin/iptables-save
# Generated by iptables-save v1.3.5 on Mon May 11 13:14:10 2009
*filter
:INPUT ACCEPT [13:966]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [17:1434]
-A FORWARD -j ACCEPT
COMMIT
# Completed on Mon May 11 13:14:10 2009
# Generated by iptables-save v1.3.5 on Mon May 11 13:14:10 2009
*nat
:PREROUTING ACCEPT [34:3694]
:POSTROUTING ACCEPT [22:1187]
:OUTPUT ACCEPT [22:1187]
-A POSTROUTING -s 192.168.1.0/255.255.255.0 -o ppp0 -j MASQUERADE
COMMIT
# Completed on Mon May 11 13:14:10 2009

Centos � iptables (��)

Fri, 08 May 2009 09:17:01 GMT

>�� CentOS � ��
>� ��. �� iptables � Centos �� /etc/sysconfig/iptables.
>��
>-A RH-Firewall-1-IPTBALES -A POSTROUTING -t nat -o ppp0 -j MASQUERADE
>
>iptables �� , �� -t
>
>��

��
-A RH-Firewall-1-IPTBALES -A POSTROUTING -t nat -p all -o ppp0 -j MASQUERADE

Centos � iptables (reader)

Thu, 07 May 2009 20:04:18 GMT

>[�� ]
>-j ACCEPT
>-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 80
>-j ACCEPT
>-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 443
>-j ACCEPT
>-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 25
>-j ACCEPT
>-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
>COMMIT
># Completed on Thu May 7 21:54:21 2009

� �� ?
�� iptables-save � �� .
/etc/sysconfig/iptables �� win � ��.
�� DNS, �� (�� --dport 53).

�� (�� iptables-restore < /etc/sysconfig/iptables ), win �� .
�� , �� , � �� .

Centos � iptables (reader)

Thu, 07 May 2009 19:32:52 GMT

>[�� ]
> ]
>�� iptables: Bad argument `*nat'
>Error occurred at line: 11
>Try `iptables-restore -h' or 'iptables-restore --help' for more information.
>
>
>
>
>
> [ �� ]

�� -��
COMMIT
��
*nat
�
*filter

Centos � iptables (ksw)

Thu, 07 May 2009 18:28:16 GMT

�� Win �� DNS ��.
�� CentOS �� /sbin/service iptables save
�� iptables.save � /etc/sysconfig
��
echo "1" > /proc/sys/net/ipv4/ip_forward
echo "1" > /proc/sys/net/ipv4/ip_dynaddr

iptables -A INPUT -j ACCEPT
iptables -A FORWARD -j ACCEPT
iptables -A OUTPUT -j ACCEPT
iptables -t nat -A POSTROUTING -o ppp+ -j MASQUERADE

�� /sbin/service iptables save
�� /etc/sysconfig/iptables: [ OK ]
�� /etc/init.d/iptables restart
�� : [ OK ]
�� ACCEPT: nat [ OK ]
�� [ OK ]
�� iptables: [ OK ]
�� iptables: ip_conntrack_ne[ OK ]

�� /etc/sysconfig/iptables

# Generated by iptables-save v1.3.5 on Thu May 7 21:58:20 2009
*nat
:PREROUTING ACCEPT [0:0]
:POSTROU

OpenForum RSS: Centos � iptables

Centos � iptables (reader)

Centos � iptables (ksw)

Centos � iptables (reader)

Centos � iptables (reader)

Centos � iptables (ksw)

Centos � iptables (��������)

Centos � iptables (reader)

Centos � iptables (reader)

Centos � iptables (ksw)

Centos � iptables (��)