From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <skompan@kspu.kr.ua>
From: Serge <skompan@kspu.kr.ua>
To: ALT Linux Community <community@lists.altlinux.org>
Date: Fri, 30 Mar 2007 18:15:13 +0300
User-Agent: KMail/1.9.5
References: <460A495F.4010707@bankperm.ru>
In-Reply-To: <460A495F.4010707@bankperm.ru>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="koi8-r"
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
Message-Id: <200703301815.13582.skompan@kspu.kr.ua>
X-Spam-Status: No, score=-2.8 required=8.0 tests=ALL_TRUSTED autolearn=failed 
	version=3.0.4
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on piper.kspu.kr.ua
Subject: Re: [Comm] =?koi8-r?b?ZXRjbmV0IM7FINfJxMnUIM3Pycgg0MXSxc3Fzs7ZyA==?=
X-BeenThere: community@lists.altlinux.org
X-Mailman-Version: 2.1.9rc1
Precedence: list
Reply-To: ALT Linux Community <community@lists.altlinux.org>
List-Id: ALT Linux Community <community.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/listinfo/community>,
	<mailto:community-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/community>
List-Post: <mailto:community@lists.altlinux.org>
List-Help: <mailto:community-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/community>,
	<mailto:community-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Fri, 30 Mar 2007 15:15:38 -0000
Archived-At: <http://lore.altlinux.org/community/200703301815.13582.skompan@kspu.kr.ua/>
List-Archive: <http://lore.altlinux.org/community/>
List-Post: <mailto:mandrake-russian@linuxteam.iplabs.ru>

В сообщении от 28 марта 2007 13:54 Rob Bikmansurov написал(a):
> Где все-таки нужно указывать пользовательские переменные,
> значения которых будут видны в правилах iptables (например в
> /etc/net/ifaces/lan/fw/nat/PREROUTE)?
> Пробовал задавать их значения в ifaces/default/options,
> ifaces/default/fw/options - не видны.
> etcnet 0.8.5
у меня видны
/etc/net/ifaces/default/fw/options
etcnet-0.8.5-alt2

вот мои настройки (начало файла options)
# Type of firewall. Now supported only iptables
FW_TYPE=iptables

# Enable "human" iptables syntax
IPTABLES_HUMAN_SYNTAX=yes

# List of built in iptables chains
IPTABLES_SYSTEM_CHAINS="PREROUTING INPUT FORWARD OUTPUT POSTROUTING"

IPTABLES_INPUT_POLICY=DROP
IPTABLES_FORWARD_POLICY=DROP
IPTABLES_OUTPUT_POLICY=DROP

# Default type of rule embedding. Can be APPEND or INSERT
IPTABLES_RULE_EMBEDDING=APPEND

UNPRIVPORTS="1024:65535"