[Sarlug] proxy help

[Дмитрий Филиппов]

спасибо всё работает echo 1 > /proc/sys/net/ipv4/ip_forward

6 мая 2008 г. 19:21 пользователь Дмитрий Филиппов <archangel.night на gmail.com>
написал:

> Помогите с проблемой нет доступа в интернет из локальной сети:
> Linux proxy.mx-arkada.ru 2.6.18-53.el5 #1 SMP Mon Nov 12 02:22:48 EST 2007
> i686 i686 i386 GNU/Linu CentOS 5.1
> # route
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
> gw64.san.ru     *               255.255.255.255 UH    0      0        0
> ppp0
> 192.168.1.0     *               255.255.255.0   U     0      0        0
> eth0
> 169.254.0.0     *               255.255.0.0     U     0      0        0
> eth1
> 10.0.0.0        *               255.0.0.0       U     0      0        0
> eth1
> default         *               0.0.0.0         U     0      0        0
> ppp0
> # iptables -L
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
> LOG        all  --  anywhere             anywhere            limit: avg
> 3/min burst 3 LOG level info prefix `ACC_OUT:'
> LOG        tcp  --  anywhere             anywhere            tcp
> flags:FIN,SYN,ACK/SYN LOG level debug tcp-options
> REJECT     tcp  --  anywhere             anywhere            tcp
> flags:FIN,SYN,ACK/SYN reject-with icmp-port-unreachable
> ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:smtp
> ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:pop3
> ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:imap
> ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ssh
> ACCEPT     all  --  anywhere             anywhere
> ACCEPT     all  --  anywhere             anywhere
> ACCEPT     all  --  anywhere             anywhere            state
> RELATED,ESTABLISHED
>
> Chain FORWARD (policy ACCEPT)
> target     prot opt source               destination
> DROP       tcp  --  anywhere             anywhere
> ACCEPT     all  --  192.168.1.0/24       anywhere
> ACCEPT     all  --  anywhere             192.168.1.0/24
> DROP       tcp  --  anywhere             anywhere
> DROP       tcp  --  anywhere             anywhere
> ACCEPT     icmp --  192.168.1.0/24       anywhere
> ACCEPT     icmp --  anywhere             192.168.1.0/24
> ACCEPT     udp  --  192.168.1.0/24       anywhere            udp
> dpt:domain
> ACCEPT     udp  --  anywhere             192.168.1.0/24      udp
> spt:domain
> ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
> dports ftp-data
> ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
> dports ftp
> ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
> dports smtp
> ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
> dports http
> ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
> dports pop3
> ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
> dports webcache
> ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
> sports ftp-data
> ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
> sports ftp
> ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
> sports smtp
> ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
> sports http
> ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
> sports pop3
> ACCEPT     tcp  --  192.168.1.0/24       anywhere            multiport
> sports webcache
> DROP      !icmp --  192.168.1.0/24       anywhere            state INVALID
>
> DROP      !icmp --  anywhere             192.168.1.0/24      state INVALID
>
> DROP       all  --  anywhere             anywhere
>
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
> LOG        all  --  anywhere             anywhere            limit: avg
> 3/min burst 3 LOG level info prefix `ACC_IN:'
>
>
----------- следующая часть -----------
Вложение в формате HTML было удалено...
URL: <http://lists.lug.ru/pipermail/sarlug/attachments/20080506/2d9f87f2/attachment.html>