From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Date: Wed, 10 Oct 2007 09:51:01 +0400 From: Timur Batyrshin To: sysadmins@lists.altlinux.org Message-ID: <20071010095101.00b2bc09@batyrshin.ieml.ru> In-Reply-To: <20071009182739.GN22309@osdn.org.ua> References: <867c9a170710090931k3d26393fh9e2a61f460917e37@mail.gmail.com> <20071009182739.GN22309@osdn.org.ua> Organization: IEML X-Mailer: Claws Mail 2.10.0cvs158 (GTK+ 2.10.6; i586-alt-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-SpamTest-Version: SMTP-Filter Version 3.0.0 [0255], KAS30/Release X-SpamTest-Info: Not protected X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.10/RELEASE, bases: 10102007 #403893, status: clean Subject: Re: [Sysadmins] Hosting server AltLinux Server 4.0.1 (openvz) X-BeenThere: sysadmins@lists.altlinux.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: ALT Linux sysadmin discuss List-Id: ALT Linux sysadmin discuss List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Oct 2007 05:51:12 -0000 Archived-At: List-Archive: Michael Shigorin (Tue, 9 Oct 2007 21:27:39 +0300): > > =D0=92 =D0=BF=D1=80=D0=BE=D1=86=D0=B5=D1=81=D1=81=D0=B5 =D1=80=D0=B5=D0= =B0=D0=BB=D0=B8=D0=B7=D0=B0=D1=86=D0=B8=D0=B8 =D0=B2=D0=B5=D1=88=D0=B5=D0= =BE=D0=BF=D0=B8=D1=81=D0=B0=D0=BD=D0=BD=D0=BE=D0=B9 =D1=81=D1=85=D0=B5=D0= =BC=D1=8B =D1=83 =D0=BC=D0=B5=D0=BD=D1=8F =D0=B2=D0=BE=D0=B7=D0=BD=D0=B8=D0= =BA=D0=BB=D0=B8 =D0=B2=D0=BE=D0=BF=D1=80=D0=BE=D1=81=D1=8B: > > 1. VM1 (nginx) =D0=BF=D1=80=D0=B5=D0=BA=D1=80=D0=B0=D1=81=D0=BD=D0=BE = =D0=B2=D0=B8=D0=B4=D0=B8=D1=82 Vm2 =D0=B8 =D0=B5=D0=B3=D0=BE =D0=BA=D0=BB= =D0=BE=D0=BD=D1=8B (172.16.1.100/24), =D0=BD=D0=BE > > VM2 =D0=BD=D0=B5 =D0=B2=D0=B8=D0=B4=D0=B8=D1=82 =D0=B8=D0=BD=D1=82=D0= =B5=D1=80=D0=BD=D0=B5=D1=82. =D0=9C=D0=BD=D0=B5 =D0=BD=D1=83=D0=B6=D0=BD=D0= =BE =D0=BF=D0=BE=D0=B4=D0=BD=D0=B8=D0=BC=D0=B0=D1=82=D1=8C NAT =D0=BD=D0=B0= ROOT? >=20 > =D0=94=D0=B0. (=D0=B4=D0=BB=D1=8F =D0=BF=D1=80=D0=BE=D0=B1=D1=80=D0=BE=D1= =81=D0=B0 =D0=BF=D0=BE=D1=80=D1=82=D0=BE=D0=B2 =D0=BF=D1=80=D0=B8 =D1=8D=D1= =82=D0=BE=D0=BC =D0=B8=D1=81=D0=BF=D0=BE=D0=BB=D1=8C=D0=B7=D1=83=D0=B5=D1= =82=D1=81=D1=8F DNAT, =D0=B0 e.g. DoS =D0=B8 > =D0=BD=D0=B5=D0=B2=D0=BC=D0=B5=D0=BD=D1=8F=D0=B5=D0=BC=D1=8B=D1=85 =D1=80= =D1=83=D0=B1=D0=B8=D0=BC =D0=BD=D0=B5 =D0=B2 INPUT, =D0=B0 =D0=B2 FORWARD) =D0=90 =D0=B5=D1=81=D1=82=D1=8C =D0=BA=D0=B0=D0=BA=D0=B8=D0=B5-=D0=BD=D0=B8= =D0=B1=D1=83=D0=B4=D1=8C =D0=BF=D1=80=D0=B8=D0=BC=D0=B5=D1=80=D1=8B =D0=BF= =D0=BE=D1=80=D1=83=D0=B1=D0=BA=D0=B8? =D0=AF =D1=81=D0=BE=D1=81=D1=82=D0=B0= =D0=B2=D0=BB=D1=8F=D0=BB =D1=81=D0=B5=D0=B1=D0=B5 =D0=BF=D1=80=D0=B0=D0=B2= =D0=B8=D0=BB=D0=B0 =D0=BD=D0=B0 =D0=BE=D1=81=D0=BD=D0=BE=D0=B2=D0=B5 =D0=BF=D1=80=D0=B8=D0=BC=D0=B5=D1=80=D0=B0 =D0=B8=D0=B7 iptables-tutorial. = =D0=9C=D0=BD=D0=B5 =D0=BA=D0=B0=D0=B6=D0=B5=D1=82=D1=81=D1=8F, =D1=82=D0=B0= =D0=BC =D0=BE=D0=B1=D1=89=D0=B8=D0=B5 =D0=BF=D1=80=D0=BE=D0=B1=D0=BB=D0=B5= =D0=BC=D1=8B =D1=80=D0=B5=D1=88=D0=B0=D1=8E=D1=82=D1=81=D1=8F (new not syn =D0=B8 =D1=82.=D0=B4.), =D0=B0 =D1=80=D0=B5=D1=88=D0=B5=D0=BD= =D0=B8=D0=B5 =D0=B1=D0=BE=D0=BB=D0=B5=D0=B5 =D0=BA=D0=BE=D0=BD=D0=BA=D1=80= =D0=B5=D1=82=D0=BD=D1=8B=D1=85 =D1=82=D0=B8=D0=BF=D0=B0 =D1=82=D0=BE=D0=B3= =D0=BE =D0=B6=D0=B5 DoS =D0=B3=D0=B4=D0=B5 =D0=B1=D1=8B =D0=BF=D0=BE=D1=81=D0=BC=D0=BE=D1=82=D1=80=D0=B5=D1=82=D1=8C?