11-10-2011, 05:37 PM
Сборка: NextGen 4466
ОС: Ubuntu 10.10
Проблема: Не впускает на сервер после добавления правил Iptables.
Iptables -L
ОС: Ubuntu 10.10
Проблема: Не впускает на сервер после добавления правил Iptables.
Iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
fail2ban-ssh tcp -- anywhere anywhere multiport dports ssh
ACCEPT tcp -- anywhere anywhere tcp dptsh
ACCEPT tcp -- anywhere anywhere tcp dpt:www
ACCEPT tcp -- anywhere anywhere tcp dpt:2106
ACCEPT tcp -- anywhere anywhere tcp dpt:7777
ACCEPT tcp -- anywhere anywhere tcp dpt:9014
DROP tcp -- anywhere anywhere tcp dpt:29000 state NEW limit: up to 1/min burst 1 mode srcport
DROP tcp -- anywhere anywhere tcp dpt:www state NEW limit: up to 1/min burst 1 mode srcport
ACCEPT tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN multiport dports 29000,www
ACCEPT tcp -- anywhere anywhere tcp dpt:www flags:FIN,SYN,RST,ACK/SYN #conn/32 <= 5
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere icmp echo-request length 84
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
DROP icmp -- anywhere anywhere icmp echo-request recent: CHECK seconds: 240 name: BLOCK side: source
DROP icmp -- anywhere anywhere icmp echo-request STRING match "|0f|" ALGO name kmp FROM 27 TO 28 recent: SET name: BLOCK side: source
DROP icmp -- anywhere anywhere icmp echo-request STRING match !"|00|" ALGO name kmp FROM 26 TO 27 recent: SET name: BLOCK side: source
ACCEPT icmp -- anywhere anywhere icmp echo-request
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain fail2ban-ssh (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere