[Sarlug] proxy help

[Дмитрий Филиппов]

Помогите с проблемой нет доступа в интернет из локальной сети:
Linux proxy.mx-arkada.ru 2.6.18-53.el5 #1 SMP Mon Nov 12 02:22:48 EST 2007
i686 i686 i386 GNU/Linu CentOS 5.1
# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use
Iface
gw64.san.ru     *               255.255.255.255 UH    0      0        0 ppp0
192.168.1.0     *               255.255.255.0   U     0      0        0 eth0
169.254.0.0     *               255.255.0.0     U     0      0        0 eth1
10.0.0.0        *               255.0.0.0       U     0      0        0 eth1
default         *               0.0.0.0         U     0      0        0 ppp0
# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere            limit: avg
3/min burst 3 LOG level info prefix `ACC_OUT:'
LOG        tcp  --  anywhere             anywhere            tcp
flags:FIN,SYN,ACK/SYN LOG level debug tcp-options
REJECT     tcp  --  anywhere             anywhere            tcp
flags:FIN,SYN,ACK/SYN reject-with icmp-port-unreachable
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:smtp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:pop3
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:imap
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ssh
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere            state
RELATED,ESTABLISHED

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
DROP       tcp  --  anywhere             anywhere
ACCEPT     all  --  192.168.1.0/24       anywhere
ACCEPT     all  --  anywhere             192.168.1.0/24
DROP       tcp  --  anywhere             anywhere
DROP       tcp  --  anywhere             anywhere
ACCEPT     icmp --  192.168.1.0/24       anywhere
ACCEPT     icmp --  anywhere             192.168.1.0/24
ACCEPT     udp  --  192.168.1.0/24       anywhere            udp dpt:domain
ACCEPT     udp  --  anywhere             192.168.1.0/24      udp spt:domain
ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
dports ftp-data
ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
dports ftp
ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
dports smtp
ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
dports http
ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
dports pop3
ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
dports webcache
ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
sports ftp-data
ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
sports ftp
ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
sports smtp
ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
sports http
ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
sports pop3
ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
sports webcache
DROP      !icmp --  192.168.1.0/24       anywhere            state INVALID
DROP      !icmp --  anywhere             192.168.1.0/24      state INVALID
DROP       all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere            limit: avg
3/min burst 3 LOG level info prefix `ACC_IN:'
----------- следующая часть -----------
Вложение в формате HTML было удалено...
URL: <http://lists.lug.ru/pipermail/sarlug/attachments/20080506/539f8661/attachment-0001.html>