OpenForum RSS: iptables

iptables (reader)

Tue, 16 Sep 2008 13:11:12 GMT

>>>�� ӣ�� mak ��?
>>
>>-m mac --mac-source 00:70:70:70:70:70 -j ACCEPT
>
>��
>��
>iptables -A FORWARD -i $LAN_IP -j ACCEPT ?
>�� - ��

� FORWARD �� , � INPUT �� , �� , �� .

iptables (BearMK)

Tue, 16 Sep 2008 12:38:00 GMT

>>�� ӣ�� mak ��?
>
>-m mac --mac-source 00:70:70:70:70:70 -j ACCEPT

��
��
iptables -A FORWARD -i $LAN_IP -j ACCEPT ?
�� - ��

iptables (reader)

Tue, 16 Sep 2008 12:17:12 GMT

>��!
>>
>>�� 192.168.2.88, � � FORWARD �� , ��
>>�� 192.168.2.1 :)
>
>�� ݣ ��
>��

��

>
>�� ӣ�� mak ��?

-m mac --mac-source 00:70:70:70:70:70 -j ACCEPT

iptables (BearMK)

Tue, 16 Sep 2008 12:00:45 GMT

��!
>
>�� 192.168.2.88, � � FORWARD �� , ��
>�� 192.168.2.1 :)

�� ݣ ��

�� ӣ�� mak ��?

iptables (reader)

Tue, 16 Sep 2008 11:38:14 GMT

>reader!
>�� !
>SWAT �� ...

�� firewall-�? �� , �� swat � ��

>� ��

� FORWARD � �� , � �� - ��.
�� SNAT, �� .

>��:
>�� ̣�� -��

�� 192.168.2.88, � � FORWARD �� , �� 192.168.2.1 :)

http://www.opennet.ru/docs/RUS/iptables/

>�� ݣ ��
>�� .

��, �� ip

>��
>�� windows ��

�� http , ��, ... ��, ��
�� , �� 100%

iptables (BearMK)

Tue, 16 Sep 2008 11:01:03 GMT

reader!
�� !
SWAT �� ...
� ��
��:
�� ̣�� -�� ݣ �� .
�� windows ��

iptables (reader)

Tue, 16 Sep 2008 10:26:25 GMT

>[�� ]
> 0 0
> 0 eth0
>0.0.0.0 192.168.2.1
> 0.0.0.0
>UG 0 0
> 0 eth0
>
>�� :
>ADSL �� IP=192.168.2.1
>DNS - 82.207.69.34

��
-A INPUT -d 192.168.2.1 -m state --state RELATED,ESTABLISHED -j ACCEPT
��
-A INPUT -d 192.168.2.88 -m state --state RELATED,ESTABLISHED -j ACCEPT

iptables (BearMK)

Tue, 16 Sep 2008 09:59:53 GMT

ifconfig
eth0 Link encap:Ethernet HWaddr 00:0E:2E:99:67:71
inet addr:192.168.2.88 Bcast:192.168.2.255 Mask:255.255.255.0
inet6 addr: fe80::20e:2eff:fe99:6771/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:906 errors:0 dropped:0 overruns:0 frame:0
TX packets:223 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:77456 (75.6 KiB) TX bytes:30420 (29.7 KiB)
Interrupt:185 Base address:0x6000

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:2048 errors:0 dropped:0 overruns:0 frame:0
TX packets:2048 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:7539832 (7.1 MiB) TX bytes:7539832 (7.1 MiB)

route -n
Kernel IP routing table
Destination Gateway

iptables (reader)

Tue, 16 Sep 2008 09:29:14 GMT

>[�� ]
>-A tcp_packets -p tcp -m tcp --dport 80 -j allowed
>-A tcp_packets -p tcp -m tcp --dport 81 -j allowed
>-A tcp_packets -p tcp -m tcp --dport 53 -j allowed
>COMMIT
># Completed on Tue Sep 16 10:20:54 2008
>
>�� - Red Hat Enterprise Linux 5
>
>
>�� !

�� ifconfig � route -n
�� ?
� �� firewall-�� localhost:901 ��?