Hjælp til iptables!
Hej folkens nu har jeg bøvlet med iptables på min dist, jeg køre ubuntu 8.0.4 og har 3g usbmodem fra 3, problemet er jeg har lavet en firewall rule og den bliver indlæst fra opstart men alligevel er de porte jeg har åbnet helt lukket af håber i kan hjælpe
firewall.sh:
håber i kan bruge det til noget
EDIT
Bare glem det det lader til at være en fejl i programmet Deluge
Beklager den unødvendig post :(
firewall.sh:
#!/bin/bash
#
# Created by: Per Jørgensen 2007
# Mail: linux@pbj-design.dk
#
# Revision History
#
# Version 0.1: Added pppo for Internetconnection
# Version 0.0: Started with the script
#
# -------------------------------------------------------------------
# Setup the enviroment variables
# -------------------------------------------------------------------
# External Program
IPTABLES="/sbin/iptables"
# Setting up the interfaces
LO="lo"
WAN="ppp0"
GW="10.64.64.64"
# The IP-addresses for the interfaces
WAN_IP="`ifconfig $WAN | grep \"inet addr\" | cut -f 2 -d \":\" | cut -f 1 -d \" \"`"
LO_IP="127.0.0.1"
#Networks
WAN_NET="$WAN_IP"
LO_NET="127.0.0.1/8"
#-------------------------------------------------------------------
# Starting the scripts and write to syslog & Console
# ------------------------------------------------------------------
echo "'date':FIREWALL SCRIPT Started " >> /var/log/messages
echo
echo "Initializing firewall with these settings:"
echo "- WAN IP-address: $WAN ($WAN_IP)"
echo "- GATEWAY hos 3: GW ($GW)"
echo
echo "Initiating script:"
echo " Done"
# ---------------------------------------------------------------
# Start by loading IPTABLES modules
# ---------------------------------------------------------------
echo "Loading IPTABLES modules"
modprobe ip_tables
modprobe ip_conntrack
echo " Done"
# ---------------------------------------------------------------
# Flush existing Connections and removing rules
# ---------------------------------------------------------------
echo "Flashing and zeroing the chains"
$IPTABLES -F
$IPTABLES -Z
$IPTABLES -X
echo " Done"
echo
# ---------------------------------------------------------------
# Initialize and setup defaults rules
# ---------------------------------------------------------------
echo "Initialzing and setup defaults policies"
# IP spoofing
for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
echo 1 > $f
done
# Default Policies
$IPTABLES -P INPUT DROP
$IPTABLES -P OUTPUT ACCEPT
$IPTABLES -P FORWARD DROP
echo " Done"
echo
# --------------------------------------------------------------
# Create and flush chains
# --------------------------------------------------------------
echo "Creating and flushing the chains"
$IPTABLES -N lo
$IPTABLES -N wan
echo " Done. Chains are made"
echo
## Deluge ##
$IPTABLES -t filter -A INPUT -p tcp --dport 52145 -j ACCEPT
$IPTABLES -t filter -A INPUT -p tcp --dport 52146 -j ACCEPT
$IPTABLES -t filter -A INPUT -p tcp --dport 52147 -j ACCEPT
$IPTABLES -t filter -A INPUT -p tcp --dport 52148 -j ACCEPT
$IPTABLES -t filter -A INPUT -p tcp --dport 52149 -j ACCEPT
$IPTABLES -t filter -A INPUT -p tcp --dport 52150 -j ACCEPT
$IPTABLES -t filter -A INPUT -p tcp --dport 52151 -j ACCEPT
## ICMP ##
$IPTABLES -t filter -A INPUT -p icmp -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -t filter -A INPUT -i $WAN -p icmp --icmp-type echo-request -m state --state NEW -j ACCEPT
echo " Done. INPUT chain is up and running"
echo
################################################################
# Setting up rules for LO interface
# --------------------------------------------------------------
echo "Setting up LOCAL interface "
$IPTABLES -A lo -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A INPUT -i $LO -j ACCEPT
$IPTABLES -A OUTPUT -o $LO -j ACCEPT
echo " Done. LO is up and running"
echo
##################################################################
# --------------------------------------------------------------
# Setting up the WAN interface
# --------------------------------------------------------------
echo "Setting up the WAN interface"
$IPTABLES -t filter -A wan -m state --state ESTABLISHED,RELATED -j ACCEPT
echo " Done. WAN is up and running"
echo
##################################################################
# Activating the Chains
# ----------------------------------------------------------------
echo "Activating the chains"
$IPTABLES -A INPUT -i $WAN -j wan
$IPTABLES -A INPUT -i $LO -j lo
echo "Done. The chains are now activated"
echo
echo "Firewall has been setup succesfully and are now"
echo " protecting your network. No garanty is given."
echo
echo "This script is designet by PBJ IT & Webdesign"
echo " This is released under GPL licens"
echo " Remember OpenSource is not nessecary FREE"håber i kan bruge det til noget
EDIT
Bare glem det det lader til at være en fejl i programmet Deluge
Beklager den unødvendig post :(
Kommentarer