OpenForum RSS: �� putty

�� putty (worsvch)

Wed, 22 Feb 2012 08:31:21 GMT

>[�� ]
> /sbin/iptables -t filter -N in_router_ssh_s1
> /sbin/iptables -t filter -A in_router -j in_router_ssh_s1
> # Creating chain 'out_router_ssh_s1' under 'out_router' in table 'filter'
> /sbin/iptables -t filter -N out_router_ssh_s1
> /sbin/iptables -t filter -A out_router -j out_router_ssh_s1
> # Running simple rules for server 'ssh'
> /sbin/iptables -t filter -A in_router_ssh_s1 -i eth0 -p tcp --sport 1024:65535 --dport
> 22 -m state --state NEW\,ESTABLISHED -j ACCEPT
> /sbin/iptables -t filter -A out_router_ssh_s1 -o eth0 -p tcp --sport 22 --dport
> 1024:65535 -m state --state ESTABLISHED -j ACCEPT

��, ��

�� putty (Andrey Mitrofanov)

Wed, 22 Feb 2012 07:52:43 GMT

> �� :
> -A OUTPUT -p tcp -m tcp -o eth0 --dport 22 --sport "1024:65535"
> -j ACCEPT
> -A INPUT -p tcp -m tcp -i eth0 --dport "1024:65535" --sport 22
> -j ACCEPT

# FireHOL [router:router] > server ssh accept inface eth0

# \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
# Cmd Line : 2
# Command : server ssh accept inface eth0

# Preparing for service 'ssh' of type 'server' under interface 'router'

# Creating chain 'in_router_ssh_s1' under 'in_router' in table 'filter'
/sbin/iptables -t filter -N in_router_ssh_s1
/sbin/iptables -t filter -A in_router -j in_router_ssh_s1

# Creating chain 'out_router_ssh_s1' under 'out_router' in table 'filter'
/sbin/iptables -t filter -N out_router_ssh_s1
/sbin/iptables -t filter -A out_router -j out_router_ssh_s1

# Running simple rules for server 'ssh'
/sbin/iptables -t filter -A in_router_ssh_s1 -i eth0 -p tcp --sport 1024:65535 --dport 22 -m state --state NEW\,ESTABLISHED -j ACCEPT
/sbin/ipta

�� putty (worsvch)

Wed, 22 Feb 2012 07:39:35 GMT

>> �� iptables, �� putty �� .
>> �� ssh:
>> -A INPUT -p tcp --dport 22 -j ACCEPT
>> �� ?
> �� . �� .

�� :

*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:FORWARD DROP [0:0]

-A INPUT icmp -j ACCEPT
-A OUTPUT icmp -j ACCEPT
-A OUTPUT -p tcp -m tcp -o eth0 --dport 22 --sport "1024:65535" -j ACCEPT
-A INPUT -p tcp -m tcp -i eth0 --dport "1024:65535" --sport 22 -j ACCEPT

�� putty (PavelR)

Wed, 22 Feb 2012 07:06:35 GMT

> �� iptables, �� putty �� .
> �� ssh:
> -A INPUT -p tcp --dport 22 -j ACCEPT
> �� ?

�� . �� .

OpenForum RSS: �� ������� putty

�� ������� putty (worsvch)

�� ������� putty (Andrey Mitrofanov)

�� ������� putty (worsvch)

�� ������� putty (PavelR)

OpenForum RSS: �� putty

�� putty (worsvch)

�� putty (Andrey Mitrofanov)

�� putty (worsvch)

�� putty (PavelR)