|
ru.unix.bsd
- RU.UNIX.BSD ------------------------------------------------------------------
From : Fedor Malyshkin 2:5003/115.81 12 Jul 2003 01:35:54
To : All
Subject : ipfw + dns
--------------------------------------------------------------------------------
#ipfw show
...
[никаких deny правил ранее]
03000 0 0 deny log tcp from any to any 137,138,139,901 in recv xl0
03100 0 0 deny log tcp from any 137,138,139,901 to any out xmit xl0
03200 0 0 deny log udp from any to any 137,138,139,901 in recv xl0
03300 0 0 deny log udp from any 137,138,139,901 to any out xmit xl0
03400 0 0 check-state
03500 0 0 allow ip from any to 10.0.0.100 in recv xl0 frag
03600 0 0 allow tcp from any to 10.0.0.100 25,53,80,443 keep-state in recv
xl0 setup
03700 0 0 allow udp from any to 10.0.0.100 53 keep-state in recv xl0
03800 0 0 allow log tcp from 10.0.0.100 to any keep-state out xmit xl0
setup
03900 0 0 allow log udp from 10.0.0.100 to any keep-state out xmit xl0
04000 0 0 deny log tcp from any to 10.0.0.100 in recv xl0
04100 0 0 deny log tcp from 10.0.0.100 to any out xmit xl0
04200 0 0 deny log udp from any to 10.0.0.100 in recv xl0
04300 0 0 deny log udp from 10.0.0.100 to any out xmit xl0
...
#less /etc/firewall/ipfw.log
...
Jul 10 15:51:41 asu-02 /kernel: ipfw: 4200 Deny UDP 195.133.0.8:53
10.0.0.100:1029 in via xl0
Jul 10 15:51:41 asu-02 /kernel: ipfw: 4200 Deny UDP 194.67.23.130:53
10.0.0.100:1029 in via xl0
Jul 10 15:51:41 asu-02 /kernel: ipfw: 4200 Deny UDP 192.36.125.2:53
10.0.0.100:1029 in via xl0
Jul 10 15:51:41 asu-02 /kernel: ipfw: 4200 Deny UDP 204.57.55.100:53
10.0.0.100:1029 in via xl0
Jul 10 15:51:42 asu-02 /kernel: ipfw: 4200 Deny UDP 64.0.96.22:53
10.0.0.100:1029 in via xl0
Jul 10 15:51:42 asu-02 /kernel: ipfw: 4200 Deny UDP 199.166.29.2:53
10.0.0.100:1029 in via xl0
Jul 10 15:51:43 asu-02 /kernel: ipfw: 4200 Deny UDP 195.206.104.13:53
10.0.0.100:1029 in via xl0
Jul 10 15:51:44 asu-02 /kernel: ipfw: 4200 Deny UDP 194.8.160.90:53
10.0.0.100:1029 in via xl0
Jul 10 15:51:45 asu-02 /kernel: ipfw: 4200 Deny UDP 199.166.31.3:53
10.0.0.100:1029 in via xl0
Jul 10 15:51:46 asu-02 /kernel: ipfw: 4200 Deny UDP 198.6.1.181:53
10.0.0.100:1029 in via xl0
Jul 10 15:51:49 asu-02 /kernel: ipfw: 4200 Deny UDP 194.67.57.104:53
10.0.0.100:1029 in via xl0
Jul 10 15:51:49 asu-02 /kernel: ipfw: 4200 Deny UDP 195.117.6.25:53
10.0.0.100:1029 in via xl0
Jul 10 15:51:50 asu-02 /kernel: ipfw: 4200 Deny UDP 208.185.54.23:53
10.0.0.100:1029 in via xl0
Jul 10 15:51:51 asu-02 /kernel: ipfw: 4200 Deny UDP 193.125.152.3:53
10.0.0.100:1029 in via xl0
...
почему не пропускае ответы от DNS?
Машина работает как мост (option BRIDGE)
Fedor
// e-mail: sefer<doggy>bk.ru
// PGP fp : 72D6 B9F3 91BD C1D6 7DC9 AADD 4A77 8A9F 8059 09B9
--- GoldED+/BSD 1.1.5
* Origin: Hе работай под root'ом - козленочком станешь. (2:5003/115.81)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
| Тема: |
Автор: |
Дата: |
|
ipfw + dns |
Fedor Malyshkin |
12 Jul 2003 01:35:54 |
 ipfw + dns |
Eugene M. Zheganin |
12 Jul 2003 11:54:40 |
  Re: ipfw + dns |
Fedor Malyshkin |
12 Jul 2003 20:59:46 |
 ipfw + dns |
Eugene M. Zheganin |
14 Jul 2003 12:32:14 |
|
Re: ipfw + dns |
Oleg Koreshkov |
14 Jul 2003 13:06:01 |
|
|
