* [Comm] apt-get через фаервол - ?
@ 2004-10-25 6:51 Jury Levykin
0 siblings, 0 replies; only message in thread
From: Jury Levykin @ 2004-10-25 6:51 UTC (permalink / raw)
To: community
Фрагмент правил iptables:
...
# ---------------
# FTP client (21)
# ---------------
# outgoing request
iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p tcp \
-s $IPADDR --source-port $UNPRIVPORTS \
--destination-port 21 -j ACCEPT
iptables -A INPUT -i $EXTERNAL_INTERFACE -p tcp ! --syn \
--source-port 21 \
-d $IPADDR --destination-port $UNPRIVPORTS -j ACCEPT
# PORT mode data channel
iptables -A INPUT -i $EXTERNAL_INTERFACE -p tcp \
--source-port 20 \
-d $IPADDR --destination-port $UNPRIVPORTS -j ACCEPT
iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p tcp ! --syn \
-s $IPADDR --source-port $UNPRIVPORTS \
--destination-port 20 -j ACCEPT
# ESTABLISHED and RELATED
iptables -A INPUT -p tcp -i $EXTERNAL_INTERFACE -d $IPADDR \
-m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -p tcp -o $EXTERNAL_INTERFACE -s $IPADDR \
-m state --state ESTABLISHED,RELATED -j ACCEPT
...
На мой взгляд, открыто все для работы ftp, но
после выполнения apt-get update получаю следующее:
# apt-get update
Get:1 ftp://updates.altlinux.com Master/2.2/i586 release [696B]
Err ftp://updates.altlinux.com Master/2.2/i586 release
Could not connect passive socket.
Failed to fetch ftp://updates.altlinux.com/Master/2.2/i586/base/release Could not connect passive socket.
Reading Package Lists... Done
Collecting File Provides... Done
W: Release files for some repositories could not be retrieved or authenticated. Such repositories are being ignored.
W: You may want to run apt-get update to correct these problems
E: Some index files failed to download, they have been ignored, or old ones used instead.
Что нужно подправить для нормальной работы apt ?
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2004-10-25 6:51 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2004-10-25 6:51 [Comm] apt-get через фаервол - ? Jury Levykin
ALT Linux Community general discussions
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/community/0 community/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 community community/ http://lore.altlinux.org/community \
mandrake-russian@linuxteam.iplabs.ru community@lists.altlinux.org community@lists.altlinux.ru community@lists.altlinux.com
public-inbox-index community
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.community
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git