forum.opennet.ru

Составление сообщения

Исходное сообщение

"Блокировка портов. Белый лист."
Отправлено tentakle, 07-Апр-14 09:18

> а нет, не то.
> Чего говорит pfctl -nvf /etc/pf.conf ?
ports = "{20 21 22 25 53 80 110 143 443 514 3306 8080}"
set skip on { lo0 }
scrub in all fragment reassemble
rdr on de0 inet proto tcp from any to any port = http -> 10.0.0.3 port 3128
block drop all
pass out all flags S/SA keep state
pass in quick on de0 proto tcp from any to any port = ftp-data flags S/SA keep state
pass in quick on de0 proto tcp from any to any port = ftp flags S/SA keep state
pass in quick on de0 proto tcp from any to any port = ssh flags S/SA keep state
pass in quick on de0 proto tcp from any to any port = smtp flags S/SA keep state
pass in quick on de0 proto tcp from any to any port = domain flags S/SA keep state
pass in quick on de0 proto tcp from any to any port = http flags S/SA keep state
pass in quick on de0 proto tcp from any to any port = pop3 flags S/SA keep state
pass in quick on de0 proto tcp from any to any port = imap flags S/SA keep state
pass in quick on de0 proto tcp from any to any port = https flags S/SA keep state
pass in quick on de0 proto tcp from any to any port = shell flags S/SA keep state
pass in quick on de0 proto tcp from any to any port = mysql flags S/SA keep state
pass in quick on de0 proto tcp from any to any port = 8080 flags S/SA keep state
pass in quick on de0 proto udp from any to any port = ftp-data keep state
pass in quick on de0 proto udp from any to any port = ftp keep state
pass in quick on de0 proto udp from any to any port = ssh keep state
pass in quick on de0 proto udp from any to any port = smtp keep state
pass in quick on de0 proto udp from any to any port = domain keep state
pass in quick on de0 proto udp from any to any port = http keep state
pass in quick on de0 proto udp from any to any port = pop3 keep state
pass in quick on de0 proto udp from any to any port = imap keep state
pass in quick on de0 proto udp from any to any port = https keep state
pass in quick on de0 proto udp from any to any port = syslog keep state
pass in quick on de0 proto udp from any to any port = mysql keep state
pass in quick on de0 proto udp from any to any port = 8080 keep state

Исходное сообщение
"Блокировка портов. Белый лист." Отправлено tentakle, 07-Апр-14 09:18
> а нет, не то. > Чего говорит pfctl -nvf /etc/pf.conf ? ports = "{20 21 22 25 53 80 110 143 443 514 3306 8080}" set skip on { lo0 } scrub in all fragment reassemble rdr on de0 inet proto tcp from any to any port = http -> 10.0.0.3 port 3128 block drop all pass out all flags S/SA keep state pass in quick on de0 proto tcp from any to any port = ftp-data flags S/SA keep state pass in quick on de0 proto tcp from any to any port = ftp flags S/SA keep state pass in quick on de0 proto tcp from any to any port = ssh flags S/SA keep state pass in quick on de0 proto tcp from any to any port = smtp flags S/SA keep state pass in quick on de0 proto tcp from any to any port = domain flags S/SA keep state pass in quick on de0 proto tcp from any to any port = http flags S/SA keep state pass in quick on de0 proto tcp from any to any port = pop3 flags S/SA keep state pass in quick on de0 proto tcp from any to any port = imap flags S/SA keep state pass in quick on de0 proto tcp from any to any port = https flags S/SA keep state pass in quick on de0 proto tcp from any to any port = shell flags S/SA keep state pass in quick on de0 proto tcp from any to any port = mysql flags S/SA keep state pass in quick on de0 proto tcp from any to any port = 8080 flags S/SA keep state pass in quick on de0 proto udp from any to any port = ftp-data keep state pass in quick on de0 proto udp from any to any port = ftp keep state pass in quick on de0 proto udp from any to any port = ssh keep state pass in quick on de0 proto udp from any to any port = smtp keep state pass in quick on de0 proto udp from any to any port = domain keep state pass in quick on de0 proto udp from any to any port = http keep state pass in quick on de0 proto udp from any to any port = pop3 keep state pass in quick on de0 proto udp from any to any port = imap keep state pass in quick on de0 proto udp from any to any port = https keep state pass in quick on de0 proto udp from any to any port = syslog keep state pass in quick on de0 proto udp from any to any port = mysql keep state pass in quick on de0 proto udp from any to any port = 8080 keep state

Ваше сообщение

Имя*:

EMail:

Для отправки новых сообщений в текущей нити на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email).
Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.

Заголовок*:

Сообщение*:

>> а нет, не то.
>> Чего говорит  pfctl -nvf /etc/pf.conf ?

> ports = "{20 21 22 25 53 80 110 143 443 514 
> 3306 8080}" 
> set skip on { lo0 } 
> scrub in all fragment reassemble 
> rdr on de0 inet proto tcp from any to any port = 
> http -> 10.0.0.3 port 3128 
> block drop all 
> pass out all flags S/SA keep state 
> pass in quick on de0 proto tcp from any to any port 
> = ftp-data flags S/SA keep state 
> pass in quick on de0 proto tcp from any to any port 
> = ftp flags S/SA keep state 
> pass in quick on de0 proto tcp from any to any port 
> = ssh flags S/SA keep state 
> pass in quick on de0 proto tcp from any to any port 
> = smtp flags S/SA keep state 
> pass in quick on de0 proto tcp from any to any port 
> = domain flags S/SA keep state 
> pass in quick on de0 proto tcp from any to any port 
> = http flags S/SA keep state 
> pass in quick on de0 proto tcp from any to any port 
> = pop3 flags S/SA keep state 
> pass in quick on de0 proto tcp from any to any port 
> = imap flags S/SA keep state 
> pass in quick on de0 proto tcp from any to any port 
> = https flags S/SA keep state 
> pass in quick on de0 proto tcp from any to any port 
> = shell flags S/SA keep state 
> pass in quick on de0 proto tcp from any to any port 
> = mysql flags S/SA keep state 
> pass in quick on de0 proto tcp from any to any port 
> = 8080 flags S/SA keep state 
> pass in quick on de0 proto udp from any to any port 
> = ftp-data keep state 
> pass in quick on de0 proto udp from any to any port 
> = ftp keep state 
> pass in quick on de0 proto udp from any to any port 
> = ssh keep state 
> pass in quick on de0 proto udp from any to any port 
> = smtp keep state 
> pass in quick on de0 proto udp from any to any port 
> = domain keep state 
> pass in quick on de0 proto udp from any to any port 
> = http keep state 
> pass in quick on de0 proto udp from any to any port 
> = pop3 keep state 
> pass in quick on de0 proto udp from any to any port 
> = imap keep state 
> pass in quick on de0 proto udp from any to any port 
> = https keep state 
> pass in quick on de0 proto udp from any to any port 
> = syslog keep state 
> pass in quick on de0 proto udp from any to any port 
> = mysql keep state 
> pass in quick on de0 proto udp from any to any port 
> = 8080 keep state

При общении не допускается: неуважительное отношение к собеседнику, хамство, унизительное обращение, ненормативная лексика, переход на личности, агрессивное поведение, обесценивание собеседника, провоцирование флейма голословными и заведомо ложными заявлениями. Не отвечайте на сообщения, явно нарушающие правила - удаляются не только сами нарушения, но и все ответы на них. Лог модерирования.

Партнёры:

Хостинг:

Закладки на сайте
Проследить за страницей

Created 1996-2024 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру