Nie jesteś zalogowany.
Jeśli nie posiadasz konta, zarejestruj je już teraz! Pozwoli Ci ono w pełni korzystać z naszego serwisu. Spamerom dziękujemy!
Prosimy o pomoc dla małej Julki — przekaż 1% podatku na Fundacji Dzieciom zdazyć z Pomocą.
Więcej informacji na dug.net.pl/pomagamy/.
Witam,
Posiadam serwer dedykowany z proxmoxem, zainstalowałem sobie Debiana 6.0 z template, chciałem zabezpieczyć serwer firewallem lecz napotkałem na błąd.
Mój firewall:
#!/bin/sh
IPT=/sbin/iptables
case "$1" in
start)
###
#firewall flush:
iptables -F
iptables -X
iptables -Z
###
#default policy:
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT
###
#ping switching off:
echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all
iptables -A INPUT -i venet0 -s 0/0 -p icmp --icmp-type ping -j DROP
###
$IPT -A INPUT -i venet0 -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPT -A INPUT -i venet0 -p tcp --dport 20 -j ACCEPT
$IPT -A INPUT -i venet0 -p tcp --dport 21 -j ACCEPT
$IPT -A INPUT -i venet0 -p tcp --dport 80 -j ACCEPT
$IPT -A INPUT -i venet0 -p tcp --dport 53 -j ACCEPT
$IPT -A INPUT -i venet0 -p tcp --dport 22 -j ACCEPT #ssh
$IPT -A INPUT -i venet0 -p tcp --dport 6665:6669 -j ACCEPT #irc
###cs
#$IPT -A INPUT -p udp -s 0/0 --dport 1200 -j ACCEPT #cs
#$IPT -A INPUT -p udp -s 0/0 --dport 27015 -j ACCEPT #cs
#$IPT -A INPUT -p tcp -s 0/0 --dport 27015 -j ACCEPT #cs
###
$IPT -A INPUT -i venet0 -p tcp --dport 45000:65000 -j ACCEPT
$IPT -A INPUT -i venet0 -p tcp --dport 60000:64000 -j ACCEPT
###
###
$IPT -A INPUT -i venet0 -j REJECT
#
exit 0
;;
stop)
#firewall flush:
$IPT -F
$IPT -X
$IPT -Z
##
#default policy:
$IPT -P INPUT ACCEPT
$IPT -P OUTPUT ACCEPT
$IPT -P FORWARD ACCEPT
exit 0
;;
*)
echo "Usage: /etc/init.d/firewall {start|stop}"
exit 1
;;
esacpo uruchomieniu wyskakuje błąd:
iptables: No chain/target/match by that name.
błąd dotyczy linii:
$IPT -A INPUT -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
dodam, że na "normalnym" Debianie firewall działa prawidłowo.
# lsmod Module Size Used by
uname -a:
# uname -a Linux deb 2.6.32-4-pve #1 SMP Tue Mar 8 06:49:04 CET 2011 i686 GNU/Linux
Proszę o pomoc.
Ostatnio edytowany przez zomb25 (2011-04-04 16:52:38)
Offline
| Time (s) | Query |
|---|---|
| 0.00010 | SET CHARSET latin2 |
| 0.00004 | SET NAMES latin2 |
| 0.00128 | SELECT u.*, g.*, o.logged FROM punbb_users AS u INNER JOIN punbb_groups AS g ON u.group_id=g.g_id LEFT JOIN punbb_online AS o ON o.ident='3.141.38.5' WHERE u.id=1 |
| 0.00087 | REPLACE INTO punbb_online (user_id, ident, logged) VALUES(1, '3.141.38.5', 1732219851) |
| 0.00026 | SELECT * FROM punbb_online WHERE logged<1732219551 |
| 0.00092 | DELETE FROM punbb_online WHERE ident='18.119.122.69' |
| 0.00054 | SELECT topic_id FROM punbb_posts WHERE id=170023 |
| 0.00063 | SELECT id FROM punbb_posts WHERE topic_id=18712 ORDER BY posted |
| 0.00030 | SELECT t.subject, t.closed, t.num_replies, t.sticky, f.id AS forum_id, f.forum_name, f.moderators, fp.post_replies, 0 FROM punbb_topics AS t INNER JOIN punbb_forums AS f ON f.id=t.forum_id LEFT JOIN punbb_forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id=3) WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND t.id=18712 AND t.moved_to IS NULL |
| 0.00036 | SELECT search_for, replace_with FROM punbb_censoring |
| 0.00070 | SELECT u.email, u.title, u.url, u.location, u.use_avatar, u.signature, u.email_setting, u.num_posts, u.registered, u.admin_note, p.id, p.poster AS username, p.poster_id, p.poster_ip, p.poster_email, p.message, p.hide_smilies, p.posted, p.edited, p.edited_by, g.g_id, g.g_user_title, o.user_id AS is_online FROM punbb_posts AS p INNER JOIN punbb_users AS u ON u.id=p.poster_id INNER JOIN punbb_groups AS g ON g.g_id=u.group_id LEFT JOIN punbb_online AS o ON (o.user_id=u.id AND o.user_id!=1 AND o.idle=0) WHERE p.topic_id=18712 ORDER BY p.id LIMIT 0,25 |
| 0.00079 | UPDATE punbb_topics SET num_views=num_views+1 WHERE id=18712 |
| Total query time: 0.00679 s | |