OpenForum RSS: �� iptables

�� iptables (Cognac)

Fri, 04 Mar 2011 09:14:42 GMT

>[�� ]
> ....
> :)
> ---
> #!/bin/bash -x
> ��
> ---
> ��
> $IPT -A INPUT -p icmp -j ACCEPT
> $IPT -A OUTPUT -p icmp -j ACCEPT
> �� ##default polices

pavlinux, � �� , � ��. �� , ��. :) �� .
��, �� iptables-save. �� , ��, �� . �� .
�� : -A POSTROUTING -o ppp0 -j SNAT --to-source *.*.*.* (�� ip pppoe-��). �� 25000 ��! �� , �� ? � �� ?

�� : �� NAT �� eth1, � �� :
iptables v1.4.1.1: can't initialize iptables table `NAT': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

�� . �� , ��-�� .

# Generat

�� iptables (pavlinux)

Thu, 03 Mar 2011 13:44:16 GMT

> � �� ping -c 5 ext_ip || echo ERROR?

�� ,
�� ,
�� ,
�� ,
....
:)
---
#!/bin/bash -x

��
---

��
$IPT -A INPUT -p icmp -j ACCEPT
$IPT -A OUTPUT -p icmp -j ACCEPT

�� ##default polices

�� iptables (Cognac)

Thu, 03 Mar 2011 13:12:03 GMT

� �� ping -c 5 ext_ip || echo ERROR?
�� ?

iptables-save ��. �� . �� .

> �� eth1, �� , �� , �� . - �� , ��. �� eth1.

�� iptables (pavlinux)

Wed, 02 Mar 2011 21:29:05 GMT

> � � �� .

:)

�� iptables (shadow_alone)

Wed, 02 Mar 2011 21:26:16 GMT

� � �� .
�� iptables-save , �� , � �� .

�� iptables (pavlinux)

Wed, 02 Mar 2011 21:07:50 GMT

#/bin/bash -x
## addresses and interfaces
IP_EXT1="*.*.*.*"
IP_EXT2="*.*.*.*"
IP_LAN="192.168.0.1"
IP_DMZ="192.168.1.1"
IP_VPN="10.8.0.1"

IF_EXT1="ppp0"
IF_EXT2="eth1"
IF_LAN="eth2"
IF_DMZ="eth3"
IF_VPN="as0t0"

DMZ_FTP="192.168.1.3"
DMZ_RDP="192.168.1.2"
DNS="192.168.0.1"

VPN_SUBNET="10.8.0.0/24"

ping -c 5 $IP_EXT1 || echo ERROR;
##iptables
ping -c 5 $IP_EXT1 || echo ERROR;
IPT="/sbin/iptables"
ping -c 5 $IP_EXT1 || echo ERROR;
##ip-forwarding
ping -c 5 $IP_EXT1 || echo ERROR;
echo "1" > /proc/sys/net/ipv4/ip_forward
ping -c 5 $IP_EXT1 || echo ERROR;
##dynamic IP
ping -c 5 $IP_EXT1 || echo ERROR;
echo "1" > /proc/sys/net/ipv4/ip_dynaddr
ping -c 5 $IP_EXT1 || echo ERROR;
##flush all rules
ping -c 5 $IP_EXT1 || echo ERROR;
$IPT --flush
ping -c 5 $IP_EXT1 || echo ERROR;
$IPT -t nat --flush
ping -c 5 $IP_EXT1 || echo ERROR;
$IPT -t mangle --flush
ping -c 5 $IP_E

OpenForum RSS: �������� ����������� �� �������� ��������� iptables

�������� ����������� �� �������� ��������� iptables (Cognac)

�������� ����������� �� �������� ��������� iptables (pavlinux)

�������� ����������� �� �������� ��������� iptables (Cognac)

�������� ����������� �� �������� ��������� iptables (pavlinux)

�������� ����������� �� �������� ��������� iptables (shadow_alone)

�������� ����������� �� �������� ��������� iptables (pavlinux)

OpenForum RSS: �� iptables

�� iptables (Cognac)

�� iptables (pavlinux)

�� iptables (Cognac)

�� iptables (pavlinux)

�� iptables (shadow_alone)

�� iptables (pavlinux)