From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <at@altlinux.ru>
Date: Tue, 2 May 2006 21:40:54 +0400
From: Alexey Tourbin <at@altlinux.ru>
To: ALT Linux Sisyphus <sisyphus@lists.altlinux.org>
Message-ID: <20060502174054.GF18898@localhost>
Mail-Followup-To: ALT Linux Sisyphus <sisyphus@lists.altlinux.org>
References: <20060501194904.GT9314@localhost> <20060502060400.GH9795@immo.ru>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="jkO+KyKz7TfD21mV"
Content-Disposition: inline
In-Reply-To: <20060502060400.GH9795@immo.ru>
Subject: Re: [sisyphus] etcnet firewall
X-BeenThere: sisyphus@lists.altlinux.org
X-Mailman-Version: 2.1.7
Precedence: list
Reply-To: ALT Linux Sisyphus discussion list <sisyphus@lists.altlinux.org>
List-Id: ALT Linux Sisyphus discussion list <sisyphus.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/listinfo/sisyphus>,
	<mailto:sisyphus-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/sisyphus>
List-Post: <mailto:sisyphus@lists.altlinux.org>
List-Help: <mailto:sisyphus-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/sisyphus>,
	<mailto:sisyphus-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Tue, 02 May 2006 17:40:35 -0000
Archived-At: <http://lore.altlinux.org/sisyphus/20060502174054.GF18898@localhost/>
List-Archive: <http://lore.altlinux.org/sisyphus/>
List-Post: <mailto:sisyphus@altlinux.ru>


--jkO+KyKz7TfD21mV
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, May 02, 2006 at 10:04:00AM +0400, Alexey I. Froloff wrote:
> * Alexey Tourbin <at@> [060501 23:48]:
> > =F0=CF=C4=D3=CB=C1=D6=C9=D4=C5 =D0=CF=D6=C1=CC=D5=CA=D3=D4=C1, =CB=C1=
=CB =C2=D9=D3=D4=D2=CF =CE=C1=D3=D4=D2=CF=C9=D4=D8 "=D0=C5=D2=D3=CF=CE=C1=
=CC=D8=CE=D9=CA"
> > firewall =C4=CC=D1 =D2=C1=C2=CF=DE=C5=CA =D3=D4=C1=CE=C3=C9=C9 (=D3 =CE=
=C1=D3=D4=CF=D1=DD=C9=CD ip-=C1=C4=D2=C5=D3=CF=CD).
> > =E9=CE=D4=C5=D2=C5=D3=D5=C5=D4 reasonable defaults.  =E9=DA=D7=C9=CE=C9=
=D4=C5 =DA=C1 =CF=C6=C6=D4=CF=D0. :)
> =E4=CC=D1 =CD=C5=CE=D1 =D4=C1=CB=C9=C5 defaults - =D7=D3=C5=C8 =D7=D9=D0=
=D5=D3=CB=C1=D4=D8, =CE=C9=CB=CF=C7=CF =CE=C5 =D7=D0=D5=D3=CB=C1=D4=D8.
> =F3=CB=D2=C9=D0=D4 =C4=CC=D1 ADSL =D3=CF=C5=C4=C9=CE=C5=CE=C9=D1 =D7 =C1=
=D4=D4=C1=DE=C5.  =E9=DA "LAN" =D0=D5=D3=CB=C1=C5=CD =D4=CF=CC=D8=CB=CF =CE=
=C1=DB
> ADSL =CD=CF=C4=C5=CD =CE=C1 NTP, =C9=DA =E2=CF=CC=D8=DB=CF=C7=CF =E9=CE=
=D4=C5=D2=CE=C5=D4=C1 =D4=CF=CC=D8=CB=CF ssh =C9 =CE=D5=D6=CE=D9=C5
> icmp.
>=20
> # sh fw-adsl.sh
> # service iptables save
> # chkconfig iptables on

=F3=D0=C1=D3=C9=C2=CF.  =E2=D9=CC=CF =C2=D9 =C8=CF=D2=CF=DB=CF, =C5=D3=CC=
=C9 =CB=C1=CB=CF=CA-=CE=C9=C2=D5=C4=D8 firewall (=D4=C9=D0=C1 =D7=D3=C5=C8
=D7=D0=D5=D3=CB=C1=D4=D8, =CE=C9=CB=CF=C7=CF =CE=C5 =D7=D0=D5=D3=CB=C1=D4=
=D8) =D2=C1=C2=CF=D4=C1=CC =C9=DA =CB=CF=D2=CF=C2=CB=C9.  =F0=CF=C4=CE=D1=
=CC sshd,
=D7 =D2=C5=DA=D5=CC=D8=D4=C1=D4=C5 =CB=C1=CB=C9=C5-=D4=CF =C7=C1=C4=D9 =D0=
=CF=C4=C3=C5=D0=C9=CC=C9=D3=D8, =DA=C1=D0=D5=D3=D4=C9=CC=C9 =D3=CB=C1=CE=C5=
=D2 =D0=CF=D2=D4=CF=D7.
=F5 =CD=C5=CE=D1 =C2=D9=CC =DA=C1=CD=C5=DE=C1=D4=C5=CC=D8=CE=D9=CA =D0=CF=
=CC=D8=DA=CF=D7=C1=D4=C5=CC=D8 test =D3 =D0=C1=D2=CF=CC=C5=CD test.
=FA=C1=CD=C5=D4=C9=CC =D3=CC=D5=DE=C1=CA=CE=CF.  =F0=C1=D2=CF=CC=D8 =D3=CD=
=C5=CE=C9=CC. :)

--jkO+KyKz7TfD21mV
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFEV5mmfBKgtDjnu0YRApD4AKDMDGc0nIGznzkEEq9kLzbLpC62DACglyO5
KwidiO4VRF7T5RA1lpGzXjM=
=ZJlQ
-----END PGP SIGNATURE-----

--jkO+KyKz7TfD21mV--