Configuration of the “/etc/rc.d/init.d/firewall” script file for the Gateway Server | All about OS

Configuration of the “/etc/rc.d/init.d/firewall” script file for the Gateway Server

Категория: Securing and Optimizing

-A input -A input -A input -A input -A input -A input -A input
i $EXTERNAL i $EXTERNAL i $EXTERNAL~ i $EXTERNAL i $EXTERNAL i $EXTERNAL~ i $EXTERNAL
INTERFACE INTERFACE INTERFACE INTERFACE INTERFACE INTERFACE INTERFACE
-s 73.0.0.0/8 -s 74.0.0.0/8 -s 75.0.0.0/8 -s 76.0.0.0/8 -s 77.0.0.0/8 -s 78.0.0.0/8 -s 79.0.0.0/8
-j DENY -I -j DENY -I -j DENY -I -j DENY -I -j DENY -I -j DENY -I -j DENY -I
#80: 01010000 -14 masks 80-95
ipchains -A input -i $EXTERNAL_INTERFACE -s 80.0.0.0/4 -j DENY -I
# 96: 01100000 -14 makses 96-111
ipchains -A input -i $EXTERNAL_INTERFACE -s 96.0.0.0/4 -j DENY -I
#126:01111110
-A input -A input -A input -A input -A input -A input -A input -A input -A input -A input -A input -A input -A input -A input -A input
ipchains ipchains ipchains ipchains ipchains ipchains ipchains ipchains ipchains ipchains ipchains ipchains ipchains ipchains ipchains
- /3 includes 127 - need 112–i $EXTERNAL_INTERFACE -i $EXTERNAL_INTERFACE -i $EXTERNAL_INTERFACE -i $EXTERNAL_INTERFACE -i $EXTERNAL_INTERFACE -i $EXTERNAL_INTERFACE -i $EXTERNAL_INTERFACE -i $EXTERNAL_INTERFACE -i $EXTERNAL_INTERFACE -i $EXTERNAL_INTERFACE -i $EXTERNAL_INTERFACE -i $EXTERNAL_INTERFACE -i $EXTERNAL_INTERFACE -i $EXTERNAL_INTERFACE -i$EXTERNAL INTERFACE
126 spelled out -s112.0.0.0/8 -j -s113.0.0.0/8-j -s114.0.0.0/8 -j -s115.0.0.0/8-j -s116.0.0.0/8-j -s117.0.0.0/8-j -s118.0.0.0/8-j -s119.0.0.0/8-j -s 120.0.0.0/8-j -s 121.0.0.0/8-j -s 122.0.0.0/8-j -s 123.0.0.0/8-j -s 124.0.0.0/8-j -s 125.0.0.0/8-j -s 126.0.0.0/8-j
DENY DENY DENY DENY DENY DENY DENY DENY DENY DENY DENY DENY DENY DENY DENY

Страниц: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15

« Build a kernel with Firewall Masquerading and Forwarding support
Deny access to some address »