Forum Debian Users Gang

Syziek · 2005-04-13 19:07:41

zainstalowałem proftpd i z internetu niedziała :(

kamikadze podpowiedział mi zeby tu wprowadzic pewne zmiany
/etc/init.d/firewall

Kod:

# wlaczenie w kernel'u forwardowania 
echo 1 > /proc/sys/net/ipv4/ip_forward
# czyszczenie starych regul
iptables -F
iptables -X
iptables -t nat -X
iptables -t nat -F
# ustawienie polityki dzialania
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT
# zezwolenie nna loczenie sie z naszym zewnetrznym ip po ssh
iptables -A INPUT -s 0/0 -d 192.168.0.1 -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -s 0/0 -d 192.168.0.1 -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -s 0/0 -d 192.168.0.1 -p udp --dport 22 -j ACCEPT
iptables -A OUTPUT -s 0/0 -d 192.168.0.1 -p udp --dport 22 -j ACCEPT
# zezwolenie nna loczenie sie z naszym zewnetrznym ip po ftp
iptables -A INPUT -s 0/0 -d 192.168.0.1 -p tcp --dport 21 -j ACCEPT
iptables -A OUTPUT -s 0/0 -d 192.168.0.1 -p tcp --dport 21 -j ACCEPT
iptables -A INPUT -s 0/0 -d 192.168.0.1 -p tcp --dport 20 -j ACCEPT
iptables -A OUTPUT -s 0/0 -d 192.168.0.1 -p tcp --dport 20 -j ACCEPT
# polaczenia nawiazane
iptables -A INPUT -p tcp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A FORWARD -p tcp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A OUTPUT -p tcp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A INPUT -p udp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A FORWARD -p udp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A OUTPUT -p udp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A INPUT -p icmp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A FORWARD -p icmp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A OUTPUT -p icmp -j ACCEPT -m state --state ESTABLISHED,RELATED
# udostepniaie internetu w sieci lokalnej
iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j MASQUERADE
iptables -A INPUT -s 192.168.0.0/24 -j ACCEPT
iptables -A FORWARD -s 192.168.0.0/24 -j ACCEPT

Ale niestety to nic niedało:(
Mi cos sie wydaje ze moze te zewnętrzne ip mam złe wpisane? No ale jak niby mam wpisac ip które mam zmienne (neostrada)

moze jeszcze to wam pomoze

Kod:

cosmos:/home/syziek# ifconfig
eth0      Link encap:Ethernet  HWaddr 00:50:FC:AA:11:7D
          inet addr:192.168.0.1  Bcast:192.168.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:3525589 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4642268 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1577323229 (1.4 GiB)  TX bytes:1905111268 (1.7 GiB)
          Interrupt:5 Base address:0xe400

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:536 errors:0 dropped:0 overruns:0 frame:0
          TX packets:536 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:44896 (43.8 KiB)  TX bytes:44896 (43.8 KiB)

ppp0      Link encap:Point-to-Point Protocol
          inet addr:83.22.157.129  P-t-P:213.25.2.192  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:58215 errors:0 dropped:0 overruns:0 frame:0
          TX packets:55848 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:53844775 (51.3 MiB)  TX bytes:7092455 (6.7 MiB)

no i aders ftp://cosmos.dyndns.org - on tez mi działa w lanie

zlyZwierz · 2005-04-13 20:12:03

zamiast -s zew_ip daj -o ppp0 , zamiast -d zew_ip daj -i ppp0 , wpusc ruch z passive ports

iptables -A INPUT -p tcp -i ppp0 --sport 49152:49000 -j ACCEPT

pozdro

Syziek · 2005-04-13 21:08:09

wielkie dzieki udało sie :)

podziekowania tez dla kamikaze za pomoc i testy :)

Syziek · 2005-04-17 16:22:36

nic mi niewychodzi

moze mi ktos jeszcze napisac co powinienem dopisac zeby uzyskac to
http://emule-project.net/home/perl/help.cgi?l=20&topic_id=712&rm=show_topic
zeby te potry było otwarte dla wszystkich (2) kompów w lanie

Time (s)	Query
0.00007	SET CHARSET latin2
0.00004	SET NAMES latin2
0.00097	SELECT u., g., o.logged FROM punbb_users AS u INNER JOIN punbb_groups AS g ON u.group_id=g.g_id LEFT JOIN punbb_online AS o ON o.ident='3.145.58.162' WHERE u.id=1
0.00107	REPLACE INTO punbb_online (user_id, ident, logged) VALUES(1, '3.145.58.162', 1738257642)
0.00054	SELECT * FROM punbb_online WHERE logged<1738257342
0.00048	SELECT t.subject, t.closed, t.num_replies, t.sticky, f.id AS forum_id, f.forum_name, f.moderators, fp.post_replies, 0 FROM punbb_topics AS t INNER JOIN punbb_forums AS f ON f.id=t.forum_id LEFT JOIN punbb_forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id=3) WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND t.id=678 AND t.moved_to IS NULL
0.00006	SELECT search_for, replace_with FROM punbb_censoring
0.00118	SELECT u.email, u.title, u.url, u.location, u.use_avatar, u.signature, u.email_setting, u.num_posts, u.registered, u.admin_note, p.id, p.poster AS username, p.poster_id, p.poster_ip, p.poster_email, p.message, p.hide_smilies, p.posted, p.edited, p.edited_by, g.g_id, g.g_user_title, o.user_id AS is_online FROM punbb_posts AS p INNER JOIN punbb_users AS u ON u.id=p.poster_id INNER JOIN punbb_groups AS g ON g.g_id=u.group_id LEFT JOIN punbb_online AS o ON (o.user_id=u.id AND o.user_id!=1 AND o.idle=0) WHERE p.topic_id=678 ORDER BY p.id LIMIT 0,25
0.00347	UPDATE punbb_topics SET num_views=num_views+1 WHERE id=678
Total query time: 0.00788 s

Forum Debian Users Gang

Ogłoszenie

#1 2005-04-13 19:07:41

Syziek - Członek DUG

firewall?

Kod:

Kod:

#2 2005-04-13 20:12:03

zlyZwierz - Moderator

Re: firewall?

#3 2005-04-13 21:08:09

Syziek - Członek DUG

Re: firewall?

#4 2005-04-17 16:22:36

Syziek - Członek DUG

Re: firewall?

Stopka forum

Informacje debugowania