da Bellatrix » mar feb 08, 2005 14:15
Ho sempre usato un semplice ed efficace script come firewall: narc.
<BR>Da ieri mi blocca tutto, anche la connessione in rete.
<BR>
<BR>Preciso che non ne capisco molto di iptable,ecc..
<BR>Questo è l´output di narc all´avvio:
<BR>---
<BR>narc (Netfilter Automatic Rule Configurator) v0.6.3
<BR>Initializing firewall (iptables)
<BR>Turning off IP forwarding (will automatically re-enable if you turned on masquerading): OK
<BR>Disable ICMP echo-request to broadcast addresses (anti-smurf): OK
<BR>Disabling source-routed packet support: [ /proc/sys/net/ipv4/conf/all - OK ] [ /proc/sys/net/ipv4/conf/default - OK ] [ /proc/sys/net/ipv4/conf/eth0 - OK ] [ /proc/sys/net/ipv4/conf/lo - OK ]
<BR>Enabling ingress filtering (level 2) via rp_filter on interface: [ /proc/sys/net/ipv4/conf/all - OK ] [ /proc/sys/net/ipv4/conf/default - OK ] [ /proc/sys/net/ipv4/conf/eth0 - OK ] [ /proc/sys/net/ipv4/conf/lo - OK ]
<BR>Log Martians on interface: [ /proc/sys/net/ipv4/conf/all - OK ] [ /proc/sys/net/ipv4/conf/default - OK ] [ /proc/sys/net/ipv4/conf/eth0 - OK ] [ /proc/sys/net/ipv4/conf/lo - OK ]
<BR>Enabling dynamic IP workaround: OK
<BR>TCP Explicit Congestion Notification: DISABLED
<BR>Loading module:
<BR>Flushing/deleting chains
<BR>Setting default policies:
<BR>Chain INPUT (policy DROP)
<BR>Chain FORWARD (policy DROP)
<BR>Chain OUTPUT (policy ACCEPT)
<BR>Creating chains: SPOOF_CHK SANITY_CHK STATE_CHK TCP_CHK UDP_CHK ICMP_CHK CUST_LOG
<BR>Dropping Broadcasts on eth0 to: NARC start aborted!
<BR>Something bad happened!
<BR>--------
<BR>
<BR>E questo è il risultato di ifconfig a narc avviato:
<BR>-----
<BR>eth0 Link encap:Ethernet HWaddr 00:E0:81:23:41:60
<BR> inet addr:10.0.0.5 Bcast:255.255.255.255 Mask:255.0.0.0
<BR> UP BROADCAST NOTRAILERS RUNNING MULTICAST MTU:1500 Metric:1
<BR> RX packets:17466 errors:0 dropped:0 overruns:0 frame:0
<BR> TX packets:12700 errors:0 dropped:0 overruns:0 carrier:0
<BR> collisions:0 txqueuelen:1000
<BR> RX bytes:13280449 (12.6 Mb) TX bytes:6145287 (5.8 Mb)
<BR> Interrupt:18 Base address:0x1800
<BR>
<BR>lo Link encap:Local Loopback
<BR> inet addr:127.0.0.1 Mask:255.0.0.0
<BR> UP LOOPBACK RUNNING MTU:16436 Metric:1
<BR> RX packets:7958 errors:0 dropped:0 overruns:0 frame:0
<BR> TX packets:7958 errors:0 dropped:0 overruns:0 carrier:0
<BR> collisions:0 txqueuelen:0
<BR> RX bytes:677177 (661.3 Kb) TX bytes:677177 (661.3 Kb)
<BR><br>