From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <checked@mail.ru>
From: Laaz Vadim <checked@mail.ru>
To: community@altlinux.ru
Date: Thu, 9 Feb 2006 10:49:12 +0300
User-Agent: KMail/1.7.2
MIME-Version: 1.0
Content-Type: text/plain;
  charset="koi8-r"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Message-Id: <200602091049.12576.checked@mail.ru>
Cc: 
Subject: [Comm] iptables
X-BeenThere: community@lists.altlinux.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: ALT Linux Community <community@lists.altlinux.org>
List-Id: ALT Linux Community <community.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/listinfo/community>,
	<mailto:community-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/community>
List-Post: <mailto:community@lists.altlinux.org>
List-Help: <mailto:community-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/community>,
	<mailto:community-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Feb 2006 07:49:15 -0000
Archived-At: <http://lore.altlinux.org/community/200602091049.12576.checked@mail.ru/>
List-Archive: <http://lore.altlinux.org/community/>
List-Post: <mailto:mandrake-russian@linuxteam.iplabs.ru>

=DE=D4=CF-=D4=CF =CE=C9=CB=C1=CB =CE=C5 =D0=CF=CA=CD=D5

=DB=CC=C0=DA=CF=D7=C1=D1 =CD=C1=DB=C9=CE=C1, =D7=CE=C5=DB=CE=C9=CA =C9=CE=
=D4=C5=D2=C6=C5=CA=D3 eth0

=D0=D2=CF=D7=C5=D2=D1=C0 =CD=C1=DB=C9=CE=D5 =D3 =CE=C1=D2=D5=D6=C9:
$ nmap x.x.x.x
PORT    STATE  SERVICE
22/tcp  open   ssh
80/tcp  open   http
135/tcp closed msrpc
139/tcp closed netbios-ssn
445/tcp closed microsoft-ds
593/tcp closed http-rpc-epmap

=F0=CF=DE=C5=CD=D5 =D0=CF=CB=C1=DA=D9=D7=C1=C5=D4 =D0=CF=D2=D4=D9, =D0=D5=
=D3=D4=D8 =C4=C1=D6=C5 closed?

# iptables -L FORWARD -v
=2E..
    0     0 REJECT     tcp  --  any    any     anywhere             anywher=
e           =20
multiport ports 135,netbios-ssn,microsoft-ds,593 reject-with=20
icmp-port-unreachable
    0     0 REJECT     udp  --  any    any     anywhere             anywher=
e           =20
multiport ports 135,netbios-ssn,microsoft-ds,593 reject-with=20
icmp-port-unreachable
=2E..

# iptables -L OUTPUT -v
Chain OUTPUT (policy ACCEPT 69396 packets, 8850K bytes)
 pkts bytes target     prot opt in     out     source              =20
destination
    0     0 REJECT     tcp  --  any    eth0    anywhere             anywher=
e           =20
multiport ports 135,netbios-ssn,microsoft-ds,593 reject-with=20
icmp-port-unreachable
    0     0 REJECT     udp  --  any    eth0    anywhere             anywher=
e           =20
multiport ports 135,netbios-ssn,microsoft-ds,593 reject-with=20
icmp-port-unreachable


=2D-=20
=C9=CE=D6=C5=CE=C5=D2-=DC=CC=C5=CB=D4=D2=CF=CE=C9=CB =EC=C1=C1=DA =F7=C1=C4=
=C9=CD
=F6=C5=CC=C5=DA=CE=CF=D7=CF=C4=D3=CB=C9=CA =E7=F5=F3
=D4. (87932) 3-14-30