[Comm] Iptables ÞÕÄÅÓÁ
Nick S. Grechukh
ngrechukh ÎÁ ua.fm
÷Ô ïËÔ 26 18:09:10 MSD 2004
On Tue, 26 Oct 2004 17:05:28 +0400
Pavel Shurubura <pvs at vdnet.ru> wrote:
> On Tue, 26 Oct 2004 11:19:10 +0500
> Mike Lykov <combr at vesna.ru> wrote:
>
> > ÷ ÓÏÏÂÝÅÎÉÉ ÏÔ ÷ÔÏÒÎÉË 26 ïËÔÑÂÒØ 2004 11:09 Polovnikov Denis
> > ÎÁÐÉÓÁÌ:
> >
> > > >> âÌÉÎ ÞÕÄÅÓÁ Ô×ÏÒÑÔÓÑ ÐÒÏÓÔÏ ÖÕÔØ ÚÁËÒÙ×ÁÀ ip × ÔÅÊÂÌÅ
> > > >×ÓÅÍ ËÒÏÍÅ ÍÅÎÑ> -A FORWARD ! -s 192.168.12.200 -d
> > > >209.8.101.130 -j DROP
> >
> > > îÁÒÏÄ ÈÏÄÉÔ × ÉÎÅÔ ÞÅÒÅÚ îáô Ñ ÈÏÞÕ ÚÁËÒÙÔØ ÄÌÑ ÄÏÓÔÕÐÁ ÜÔÏÔ
> > > ip.
> >
> > ÞÉÔÁÊÔÅ ÄÏËÕÍÅÎÔÁÃÉÀ! NAT É -A FORWARD ÎÉËÁË ÎÅ Ó×ÑÚÁÎÙ.
> >
> ëÁË ÜÔÏ ?
> ÐÅÒ×ÙÊ ÐÁËÅÔ ÉÄ£Ô ÞÅÒÅÚ ÔÁÂÌÉÃÕ nat, ÏÓÔÁÌØÎÙÅ ÞÅÒÅÚ FORWARD.
> ðÒÏÓÔÏ ÎÁÄÏ ÐÉÓÁÔØ ÔÁË:
> -A FORWARD -s ! 192.168.12.200 -d 209.8.101.130 -j DROP
>
> (ÒÁÚÎÉÃÁ × ÒÁÓÐÏÌÏÖÅÎÉÉ ×ÏÓËÌÉÃÁÔÅÌØÎÏÇÏ ÚÎÁËÁ ).
ÔÁË Á ÎÅ ÐÒÏÝÅ ÂÌÏËÉÒÏ×ÁÔØ × PREROUTING ÐÅÒ×ÙÊ? ÔÏÇÄÁ É ÏÓÔÁÌØÎÙÈ ÎÅ ÂÕÄÅÔ.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.altlinux.ru/pipermail/community/attachments/20041026/fdb4cca6/attachment.bin
ðÏÄÒÏÂÎÁÑ ÉÎÆÏÒÍÁÃÉÑ Ï ÓÐÉÓËÅ ÒÁÓÓÙÌËÉ Community