- This topic has 4 одговора, 2 гласа, and was last updated 22 years, 7 months раније by
.
-
Чланци
-
Instalirao sam na MDK 9.2 mreznu karticu i sve je proteklo bez problema. Ali kad sad ukljucim firewall, modem se konektuje ali nista nece da se otvori preko bilo kog browsera ili mail klienta.
U cemu ja fora?
Kad isklucim DrakFirewall (stikliram “everything no firewall”) internet mi radi. Necu da surfujem bez firewala jer mi je jednom neki tip usao u mashinu i napravio rsum.
POMOC!!!# iptables -L
Posalji izlaz pa da vidimo.
Mozda nije lose da procitas dokumentaciju za iptables (man iptables ili poseta http://tldp.org).
evo sta imam sa firewalom
[root@localhost vladoboss]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destinationChain FORWARD (policy ACCEPT)
target prot opt source destinationChain OUTPUT (policy ACCEPT)
target prot opt source destination
[root@localhost vladoboss]# iptables -L
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT all — anywhere anywhere
DROP !icmp — anywhere anywhere state INVALID
eth0_in all — anywhere anywhere
common all — anywhere anywhere
LOG all — anywhere anywhere LOG level info prefix `Shorewall:INPUT:REJECT:’
reject all — anywhere anywhereChain FORWARD (policy DROP)
target prot opt source destination
DROP !icmp — anywhere anywhere state INVALID
eth0_fwd all — anywhere anywhere
common all — anywhere anywhere
LOG all — anywhere anywhere LOG level info prefix `Shorewall:FORWARD:REJECT:’
reject all — anywhere anywhereChain OUTPUT (policy DROP)
target prot opt source destination
ACCEPT all — anywhere anywhere
DROP !icmp — anywhere anywhere state INVALID
fw2net all — anywhere anywhere
common all — anywhere anywhere
LOG all — anywhere anywhere LOG level info prefix `Shorewall:OUTPUT:REJECT:’
reject all — anywhere anywhereChain all2all (0 references)
target prot opt source destination
ACCEPT all — anywhere anywhere state RELATED,ESTABLISHED
newnotsyn tcp — anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
common all — anywhere anywhere
LOG all — anywhere anywhere LOG level info prefix `Shorewall:all2all:REJECT:’
reject all — anywhere anywhereChain common (5 references)
target prot opt source destination
icmpdef icmp — anywhere anywhere
reject udp — anywhere anywhere udp dpt:135
reject udp — anywhere anywhere udp dpts:netbios-ns:netbios-ssn
reject udp — anywhere anywhere udp dpt:microsoft-ds
reject tcp — anywhere anywhere tcp dpt:netbios-ssn
reject tcp — anywhere anywhere tcp dpt:microsoft-ds
reject tcp — anywhere anywhere tcp dpt:135
DROP udp — anywhere anywhere udp dpt:1900
DROP all — anywhere 255.255.255.255
DROP all — anywhere 224.0.0.0/4
reject tcp — anywhere anywhere tcp dpt:auth
DROP udp — anywhere anywhere udp spt:domain state NEW
DROP all — anywhere 192.168.0.255Chain dynamic (2 references)
target prot opt source destinationChain eth0_fwd (1 references)
target prot opt source destination
dynamic all — anywhere anywhereChain eth0_in (1 references)
target prot opt source destination
dynamic all — anywhere anywhere
net2fw all — anywhere anywhereChain fw2net (1 references)
target prot opt source destination
ACCEPT all — anywhere anywhere state RELATED,ESTABLISHED
newnotsyn tcp — anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
ACCEPT all — anywhere anywhereChain icmpdef (1 references)
target prot opt source destinationChain net2all (1 references)
target prot opt source destination
ACCEPT all — anywhere anywhere state RELATED,ESTABLISHED
newnotsyn tcp — anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
common all — anywhere anywhere
LOG all — anywhere anywhere LOG level info prefix `Shorewall:net2all:DROP:’
DROP all — anywhere anywhereChain net2fw (1 references)
target prot opt source destination
ACCEPT all — anywhere anywhere state RELATED,ESTABLISHED
newnotsyn tcp — anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
ACCEPT tcp — anywhere anywhere state NEW tcp dpt:ssh
net2all all — anywhere anywhereChain newnotsyn (4 references)
target prot opt source destination
LOG all — anywhere anywhere LOG level info prefix `Shorewall:newnotsyn:DROP:’
DROP all — anywhere anywhereChain reject (11 references)
target prot opt source destination
REJECT tcp — anywhere anywhere reject-with tcp-reset
REJECT udp — anywhere anywhere reject-with icmp-port-unreachable
REJECT icmp — anywhere anywhere reject-with icmp-host-unreachable
REJECT all — anywhere anywhere reject-with icmp-host-prohibitedChain shorewall (0 references)
target prot opt source destination
[root@localhost vladoboss]$A evo sta bez firewala
[root@localhost vladoboss]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destinationChain FORWARD (policy ACCEPT)
target prot opt source destinationChain OUTPUT (policy ACCEPT)
target prot opt source destination
[root@localhost vladoboss]#Aj sad pomagaj!
A da probas rucno da napravis skriptu u kojoj podesis iptables? Trenutno koristim Gentoo i nemam DrakFirewall, a malo mi je smor da jurim te lance.
Napravis neku jednostavniju skriptu u kojoj na ulazu odbijes syn pakete i trebalo bi da fercera.
A da sklepas jednu skriptu nabrzinu, pa da mi posaljes na mail? Bio bih ti mnogo zahvalan. Nisam programer, i ne bih znao da napravim skriptu.
Ako si voljan moj mail je: [email protected]
Hvala ti unapred
Мораш бити пријављен да би поставио коментар у овој теми.