OpenForum RSS: � �� iptables

� �� iptables (LS)

Wed, 25 Feb 2009 06:05:58 GMT

>[�� ]
>��, ��, �� , � ��
>�� - �� .
> �� .
>�� , ��
>��:
>iptables -t mangle -A POSTROUTING -o eth0 -j IPMARK --adr=dst --and-mask 0xffff
>--or-mask 0x10000
>tc add filter dev eth0 parent 1:0 protocol ip fw
>�� :
>unknown arg --addr

�� , jump �� , � �� . � �� , �� .

� �� iptables (ai)

Fri, 06 Feb 2009 14:21:48 GMT

>You right - the problem was just in that: I try write
>own rules over existing and this was bad idea.
>I clear all rules and write own from beginning
>Yes, LOG - very usefull target

Welcome...

� �� iptables (handler2006)

Fri, 06 Feb 2009 13:14:27 GMT

You right - the problem was just in that: I try write own rules over existing and this was bad idea.
I clear all rules and write own from beginning
Yes, LOG - very usefull target

� �� iptables (ai)

Fri, 06 Feb 2009 07:14:27 GMT

>[�� ]
>"A.D.D.R" � � �� :
># iptables -A FORWARD -s A.D.D.R -o $EXT_IF - j ACCEPT
>
> //��
># iptables -A FORWARD -d A.D.D.R -i $EXT_IF -m state --state ESTABLISHED,RELATED
>-j ACCEPT //��
># iptables -t nat -A POSTROUTING -s A.D.D.R -o $EXT_IF -j SNAT
>--to $EXT_IP
># ping $EXT_IP //�� , ��
>��

�� :
�� - �� -j LOG �� -j DROP

�� :

logops="--log-level=3 -m limit --limit 1/second --limit-burst 10"

$ipt -A FORWARD -i $INET_IF -j LOG --log-prefix "IPT: IN_LOCAL_NETWORK: " $logops
$ipt -A FORWARD -i $INET_IF -j DROP
$ipt -A FORWARD -i $LOCAL_IF -j LOG --log-prefix "IPT: FORWARD -i $LOCAL_IF: " $logops
$ipt -A FORWARD -i $LOCAL_IF -j DROP
$ipt -A FORWARD -j LOG --log-prefix "IPT: FORWARD: " $logops

� �� iptables (handler2006)

Mon, 02 Feb 2009 06:43:45 GMT

�� , �� , � � �� , ��, �� , � �� - �� .
�� .
�� , �� :
iptables -t mangle -A POSTROUTING -o eth0 -j IPMARK --adr=dst --and-mask 0xffff --or-mask 0x10000
tc add filter dev eth0 parent 1:0 protocol ip fw
�� :
unknown arg --addr

� �� iptables (PavelR)

Sun, 01 Feb 2009 16:02:23 GMT

>�� , �. �. ��
>�� , �� , � ��
>��.
>��, �� , �� .
>�� , ��
>��.
>�� iptables ��
>��, � ��, ��, �� -A FORWARD ��
>�� -j DROP

iptables -I FORWARD <position_number> ....
iptables -nvL FORWARD --line

� �� iptables (handler2006)

Sun, 01 Feb 2009 13:40:35 GMT

�� , �. �. �� , �� , � �� .
��, �� , �� .
�� , �� .
�� iptables �� , � ��, ��, �� -A FORWARD �� -j DROP

� �� iptables (PavelR)

Sun, 01 Feb 2009 12:19:18 GMT

OpenForum RSS: � ����� ���������� � iptables

� ����� ���������� � iptables (LS)

� ����� ���������� � iptables (ai)

� ����� ���������� � iptables (handler2006)

� ����� ���������� � iptables (ai)

� ����� ���������� � iptables (handler2006)

� ����� ���������� � iptables (PavelR)

� ����� ���������� � iptables (handler2006)

� ����� ���������� � iptables (PavelR)

OpenForum RSS: � �� iptables

� �� iptables (LS)

� �� iptables (ai)

� �� iptables (handler2006)

� �� iptables (ai)

� �� iptables (handler2006)

� �� iptables (PavelR)

� �� iptables (handler2006)

� �� iptables (PavelR)