The OpenNET Project / Index page

[ новости /+++ | форум | теги | ]




Версия для распечатки Пред. тема | След. тема
Новые ответы [ Отслеживать ]
Блокировка портов. Белый лист., !*! tentakle, 03-Апр-14, 19:38  [смотреть все]
ports="{20 21 22 25 53 80 110 143 443 514 3306 8080}"

set block-policy return
set skip on lo0

scrub in all

rdr on de0 inet proto tcp to port 80 -> 10.0.0.3 port 3128

block all
pass out all
pass in on de0 proto {tcp, udp} to port $ports

Ребятули, почему сие не работает?

  • Блокировка портов. Белый лист., !*! pavlinux, 01:33 , 04-Апр-14 (1) –2
    > ports="(... 22 ...

    Да, 22 обязательно оставь, и ssh туда повесь, и рута разреши и пароль 12345678

  • Блокировка портов. Белый лист., !*! свободный бздун, 23:49 , 05-Апр-14 (3)
    from <source> port <source> to <dest> port <dest>

    Обозначь to <dest>

    • Блокировка портов. Белый лист., !*! свободный бздун, 23:52 , 05-Апр-14 (4)
      а нет, не то.
      Чего говорит  pfctl -nvf /etc/pf.conf ?
      • Блокировка портов. Белый лист., !*! tentakle, 09:18 , 07-Апр-14 (5)
        > а нет, не то.
        > Чего говорит  pfctl -nvf /etc/pf.conf ?

        ports = "{20 21 22 25 53 80 110 143 443 514 3306 8080}"
        set skip on { lo0 }
        scrub in all fragment reassemble
        rdr on de0 inet proto tcp from any to any port = http -> 10.0.0.3 port 3128
        block drop all
        pass out all flags S/SA keep state
        pass in quick on de0 proto tcp from any to any port = ftp-data flags S/SA keep state
        pass in quick on de0 proto tcp from any to any port = ftp flags S/SA keep state
        pass in quick on de0 proto tcp from any to any port = ssh flags S/SA keep state
        pass in quick on de0 proto tcp from any to any port = smtp flags S/SA keep state
        pass in quick on de0 proto tcp from any to any port = domain flags S/SA keep state
        pass in quick on de0 proto tcp from any to any port = http flags S/SA keep state
        pass in quick on de0 proto tcp from any to any port = pop3 flags S/SA keep state
        pass in quick on de0 proto tcp from any to any port = imap flags S/SA keep state
        pass in quick on de0 proto tcp from any to any port = https flags S/SA keep state
        pass in quick on de0 proto tcp from any to any port = shell flags S/SA keep state
        pass in quick on de0 proto tcp from any to any port = mysql flags S/SA keep state
        pass in quick on de0 proto tcp from any to any port = 8080 flags S/SA keep state
        pass in quick on de0 proto udp from any to any port = ftp-data keep state
        pass in quick on de0 proto udp from any to any port = ftp keep state
        pass in quick on de0 proto udp from any to any port = ssh keep state
        pass in quick on de0 proto udp from any to any port = smtp keep state
        pass in quick on de0 proto udp from any to any port = domain keep state
        pass in quick on de0 proto udp from any to any port = http keep state
        pass in quick on de0 proto udp from any to any port = pop3 keep state
        pass in quick on de0 proto udp from any to any port = imap keep state
        pass in quick on de0 proto udp from any to any port = https keep state
        pass in quick on de0 proto udp from any to any port = syslog keep state
        pass in quick on de0 proto udp from any to any port = mysql keep state
        pass in quick on de0 proto udp from any to any port = 8080 keep state




Партнёры:
PostgresPro
Inferno Solutions
Hosting by Hoster.ru
Хостинг:

Закладки на сайте
Проследить за страницей
Created 1996-2024 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру