| View previous topic :: View next topic |
| Author |
Message |
Belliash
Advocate
Joined: 24 Nov 2004
Posts: 2394
Location: Legnica, Poland
|
 Posted: Sun May 20, 2007 5:44 pm Post subject: [SOLVED] Problem z iptables |
 |
|
Witam,
Chcialbym sobie wrzucic takie regolki:
| Code: | iptables -P INPUT DROP
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -m state --state NEW -j ACCEPT
iptables -A INPUT -p tcp --dport 443 -m state --state NEW -j ACCEPT
iptables -A INPUT -p tcp --dport 1550 -m state --state NEW -j ACCEPT
iptables -A INPUT -p udp --dport 1550 -m state --state NEW -j ACCEPT
iptables -A INPUT -p tcp --dport 9176 -m state --state NEW -j ACCEPT
iptables -A INPUT -p udp --dport 9176 -m state --state NEW -j ACCEPT
iptables -A INPUT -p tcp --dport 58856 -m state --state NEW -j ACCEPT
iptables -A INPUT -p udp --dport 58856 -m state --state NEW -j ACCEPT
iptables -A INPUT -p TCP --syn -j REJECT
iptables -A INPUT -p tcp -i eth0 -j REJECT --reject-with tcp-reset
iptables -A INPUT -p udp -i eth0 -j REJECT --reject-with icmp-port-unreachable |
ale juz na: "iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT"
dostaje: "iptables: No chain/target/match by that name"
Nie wiem co jest grane, tymbardziej, ze:
| Code: | PECET rootfs # grep NETFILTER /usr/src/linux/.config |grep -vh '^[[:space:]]*\(#\|$\)'
CONFIG_NETFILTER=y
CONFIG_NETFILTER_NETLINK=m
CONFIG_NETFILTER_NETLINK_QUEUE=m
CONFIG_NETFILTER_NETLINK_LOG=m
CONFIG_NETFILTER_XTABLES=m
CONFIG_NETFILTER_XT_TARGET_CLASSIFY=m
CONFIG_NETFILTER_XT_TARGET_DSCP=m
CONFIG_NETFILTER_XT_TARGET_MARK=m
CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m
CONFIG_NETFILTER_XT_TARGET_NFLOG=m
CONFIG_NETFILTER_XT_TARGET_TCPMSS=m
CONFIG_NETFILTER_XT_MATCH_COMMENT=m
CONFIG_NETFILTER_XT_MATCH_DCCP=m
CONFIG_NETFILTER_XT_MATCH_DSCP=m
CONFIG_NETFILTER_XT_MATCH_ESP=m
CONFIG_NETFILTER_XT_MATCH_LENGTH=m
CONFIG_NETFILTER_XT_MATCH_LIMIT=m
CONFIG_NETFILTER_XT_MATCH_MAC=m
CONFIG_NETFILTER_XT_MATCH_MARK=m
CONFIG_NETFILTER_XT_MATCH_POLICY=m
CONFIG_NETFILTER_XT_MATCH_MULTIPORT=m
CONFIG_NETFILTER_XT_MATCH_PKTTYPE=m
CONFIG_NETFILTER_XT_MATCH_QUOTA=m
CONFIG_NETFILTER_XT_MATCH_REALM=m
CONFIG_NETFILTER_XT_MATCH_SCTP=m
CONFIG_NETFILTER_XT_MATCH_STATISTIC=m
CONFIG_NETFILTER_XT_MATCH_STRING=m
CONFIG_NETFILTER_XT_MATCH_TCPMSS=m
CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=m
PECET rootfs # grep _NF_ /usr/src/linux/.config |grep -vh '^[[:space:]]*\(#\|$\)'
CONFIG_NF_CONNTRACK_ENABLED=m
CONFIG_NF_CONNTRACK_SUPPORT=y
CONFIG_NF_CONNTRACK=m
CONFIG_NF_CT_ACCT=y
CONFIG_NF_CONNTRACK_MARK=y
CONFIG_NF_CONNTRACK_EVENTS=y
CONFIG_NF_CT_PROTO_GRE=m
CONFIG_NF_CT_PROTO_SCTP=m
CONFIG_NF_CONNTRACK_AMANDA=m
CONFIG_NF_CONNTRACK_FTP=m
CONFIG_NF_CONNTRACK_H323=m
CONFIG_NF_CONNTRACK_IRC=m
CONFIG_NF_CONNTRACK_NETBIOS_NS=m
CONFIG_NF_CONNTRACK_PPTP=m
CONFIG_NF_CONNTRACK_SANE=m
CONFIG_NF_CONNTRACK_SIP=m
CONFIG_NF_CONNTRACK_TFTP=m
CONFIG_NF_CT_NETLINK=m
CONFIG_NF_CONNTRACK_IPV4=m
CONFIG_NF_CONNTRACK_PROC_COMPAT=y
CONFIG_IP_NF_QUEUE=m
CONFIG_IP_NF_IPTABLES=m
CONFIG_IP_NF_MATCH_IPRANGE=m
CONFIG_IP_NF_MATCH_TOS=m
CONFIG_IP_NF_MATCH_RECENT=m
CONFIG_IP_NF_MATCH_ECN=m
CONFIG_IP_NF_MATCH_AH=m
CONFIG_IP_NF_MATCH_TTL=m
CONFIG_IP_NF_MATCH_OWNER=m
CONFIG_IP_NF_MATCH_ADDRTYPE=m
CONFIG_IP_NF_FILTER=m
CONFIG_IP_NF_TARGET_REJECT=m
CONFIG_IP_NF_TARGET_LOG=m
CONFIG_IP_NF_TARGET_ULOG=m
CONFIG_IP_NF_MANGLE=m
CONFIG_IP_NF_TARGET_TOS=m
CONFIG_IP_NF_TARGET_ECN=m
CONFIG_IP_NF_TARGET_TTL=m
CONFIG_IP_NF_RAW=m
CONFIG_IP_NF_ARPTABLES=m
CONFIG_IP_NF_ARPFILTER=m
CONFIG_IP_NF_ARP_MANGLE=m |
Nie bardzo wiem co moglem pominac?
Jakies sugestie?
DZIEKI!
_________________
Asio Software Technologies
Belliash IT Weblog
Last edited by Belliash on Mon May 21, 2007 5:31 am; edited 1 time in total |
|
| Back to top |
|
 |
sir KAT
Tux's lil' helper
Joined: 27 Aug 2005
Posts: 118
Location: Kraków
|
| Posted: Sun May 20, 2007 6:15 pm Post subject: Re: Problem z iptables |
|
|
| Morpheouss wrote: | Witam,
Nie bardzo wiem co moglem pominac?
Jakies sugestie?
|
CONFIG_NETFILTER_XT_MATCH_STATE
_________________
Pozdrawiam!
Krzysiek |
|
| Back to top |
|
|
timor
Guru
Joined: 25 May 2005
Posts: 517
Location: Poland, Krk
|
| Posted: Sun May 20, 2007 6:44 pm Post subject: Re: Problem z iptables |
|
|
| sir KAT wrote: | | Morpheouss wrote: | Witam,
Nie bardzo wiem co moglem pominac?
Jakies sugestie?
|
CONFIG_NETFILTER_XT_MATCH_STATE |
Trochę rzeczy się poprzenosiło, zerknij tutaj: http://forums.gentoo.org/viewtopic-p-4034731.html#4034731 |
|
| Back to top |
|
|
Belliash
Advocate
Joined: 24 Nov 2004
Posts: 2394
Location: Legnica, Poland
|
|
| Back to top |
|
|
|
Polskie forum (Polish)
