From: Starodumoff Ilya <ripper.mail@gmail.com>
To: community@lists.altlinux.org
Subject: Re: [Comm] Не открываются некоторые сайты.
Date: Sat, 19 Apr 2008 21:01:34 +0600
Message-ID: <200804192101.34071.ripper.mail@gmail.com> (raw)
In-Reply-To: <8cb899cc0804190313m4ab49dc4i23745f8bd0665f5a@mail.gmail.com>
В сообщении от 19 апреля 2008 Denis A. Lopin написал(a):
> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue
> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> 2: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen
> 1000
> link/ether 00:19:5b:8a:f8:bf brd ff:ff:ff:ff:ff:ff
> 3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen
> 1000
> link/ether 00:19:5b:82:ae:09 brd ff:ff:ff:ff:ff:ff
> 4: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc
> pfifo_fast qlen 3
> link/ppp
>
> pkts bytes target prot opt in out source
> destination
> 2475 439K ACCEPT 0 -- * * 0.0.0.0/0
> 0.0.0.0/0 state RELATED,ESTABLISHED
> 62 2988 ACCEPT 0 -- * * 192.168.2.0/24
> 0.0.0.0/0
> 0 0 ACCEPT udp -- * * 192.168.2.0/24
> 0.0.0.0/0 udp dpt:53
> 0 0 DROP 0 -- * * 0.0.0.0/0
> 0.0.0.0/0
>
> pkts bytes target prot opt in out source
> destination
> 57 2740 SNAT 0 -- * ppp0 192.168.2.0/24
> 0.0.0.0/0 to:12.345.678.901
>
> Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
> pkts bytes target prot opt in out source
> destination
iptables -F FORWARD
iptables -A FORWARD -m state --state INVALID -j DROP
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i _интерфейс_в_локалку_ -j ACCEPT
iptables -t mangle -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j \
TCPMSS --clamp-mss-to-pmtu
так, есессно, разрешено к форвардингу из локалки все...
--
С уважением,
Стародумов Илья
prev parent reply other threads:[~2008-04-19 15:01 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-04-13 15:31 ` Владимир
2008-04-13 15:35 ` Starodumoff Ilya
2008-04-13 19:14 ` Владимир Кутявин
2008-04-13 19:23 ` Konstantin S. Uvarin
2008-04-19 8:39 ` Starodumoff Ilya
2008-04-19 15:01 ` Starodumoff Ilya [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200804192101.34071.ripper.mail@gmail.com \
--to=ripper.mail@gmail.com \
--cc=community@lists.altlinux.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux Community general discussions
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/community/0 community/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 community community/ http://lore.altlinux.org/community \
mandrake-russian@linuxteam.iplabs.ru community@lists.altlinux.org community@lists.altlinux.ru community@lists.altlinux.com
public-inbox-index community
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.community
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git