From: Mike Grozak <mike@tversu.ru>
To: ALT Linux sysadmins' discussion <sysadmins@lists.altlinux.org>
Subject: Re: [Sysadmins] PPTPd в контейнере
Date: Fri, 22 Jan 2010 16:33:10 +0300
Message-ID: <4B59A916.70608@tversu.ru> (raw)
In-Reply-To: <a63eee441001220525s682edea1xc7487ed27012dc22@mail.gmail.com>
Руслан Писарев wrote:
> быть может iptables перемудрил?
>> Такое ощущение, что я не понимаю/упускаю из вида
>> какой-то мелочи! Прошу направить ход моих мыслей.
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [180701:7759288]
:ALT-Firewall-1-INPUT - [0:0]
-A INPUT -j ALT-Firewall-1-INPUT
-A FORWARD -j ALT-Firewall-1-INPUT
-A ALT-Firewall-1-INPUT -i lo -j ACCEPT
-A ALT-Firewall-1-INPUT -p icmp -m icmp --icmp-type any -j ACCEPT
-A ALT-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A ALT-Firewall-1-INPUT -s 10.10.0.0/24 -j ACCEPT
-A ALT-Firewall-1-INPUT -d 10.10.0.0/24 -j ACCEPT
Трафик из FORWARD завёрнут в цепочку ALT-Firewall-1-INPUT и в ней "с" и
"на" 10.10.0.0/24 он разрешён. Ни натов, ничего нет.
---
WBR, Mike Grozak, TvSU IC Dep
next prev parent reply other threads:[~2010-01-22 13:33 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-01-22 13:20 Mike Grozak
2010-01-22 13:25 ` Руслан Писарев
2010-01-22 13:33 ` Mike Grozak [this message]
2010-01-22 13:38 ` Руслан Писарев
2010-01-22 13:43 ` Mike Grozak
2010-01-22 15:13 ` Dank Bagryantsev
2010-01-25 8:58 ` Mike Grozak
2010-01-25 21:48 ` Dank Bagryantsev
2010-01-26 9:03 ` Aleksey Avdeev
2010-01-26 12:52 ` Mike Grozak
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4B59A916.70608@tversu.ru \
--to=mike@tversu.ru \
--cc=sysadmins@lists.altlinux.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux sysadmins discussion
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sysadmins/0 sysadmins/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sysadmins sysadmins/ http://lore.altlinux.org/sysadmins \
sysadmins@lists.altlinux.org sysadmins@lists.altlinux.ru sysadmins@lists.altlinux.com
public-inbox-index sysadmins
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sysadmins
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git