• Opret dig
  • Glemt adgangskode

User account menu

  • Artikler
  • Forside
  • Forum
  • Nyheder
  • Log ind
Hjem
LinuxIN.dk

Snak med

Opret dig!

Af webmaniac | 16.09.2008 19:02

Hjælp til iptables!

Hjælp generelt
Hej folkens nu har jeg bøvlet med iptables på min dist, jeg køre ubuntu 8.0.4 og har 3g usbmodem fra 3, problemet er jeg har lavet en firewall rule og den bliver indlæst fra opstart men alligevel er de porte jeg har åbnet helt lukket af håber i kan hjælpe

firewall.sh:
#!/bin/bash
#
# Created by: Per Jørgensen 2007
# Mail: linux@pbj-design.dk
#
# Revision History
#
# Version 0.1: Added pppo for Internetconnection
# Version 0.0: Started with the script
#
# -------------------------------------------------------------------
# Setup the enviroment variables
# -------------------------------------------------------------------
# External Program
IPTABLES="/sbin/iptables"

# Setting up the interfaces
LO="lo"
WAN="ppp0"
GW="10.64.64.64"

# The IP-addresses for the interfaces
WAN_IP="`ifconfig $WAN | grep \"inet addr\" | cut -f 2 -d \":\" | cut -f 1 -d \" \"`"
LO_IP="127.0.0.1"

#Networks
WAN_NET="$WAN_IP"
LO_NET="127.0.0.1/8"

#-------------------------------------------------------------------
# Starting the scripts and write to syslog & Console
# ------------------------------------------------------------------
echo "'date':FIREWALL SCRIPT Started " >> /var/log/messages

echo
echo "Initializing firewall with these settings:"
echo "- WAN IP-address: $WAN ($WAN_IP)"
echo "- GATEWAY hos 3: GW ($GW)"
echo
echo "Initiating script:"
echo " Done"

# ---------------------------------------------------------------
# Start by loading IPTABLES modules
# ---------------------------------------------------------------
echo "Loading IPTABLES modules"
modprobe ip_tables
modprobe ip_conntrack

echo " Done"
# ---------------------------------------------------------------
# Flush existing Connections and removing rules
# ---------------------------------------------------------------
echo "Flashing and zeroing the chains"
$IPTABLES -F
$IPTABLES -Z
$IPTABLES -X
echo " Done"
echo
# ---------------------------------------------------------------
# Initialize and setup defaults rules
# ---------------------------------------------------------------
echo "Initialzing and setup defaults policies"

# IP spoofing
for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
echo 1 > $f
done

# Default Policies
$IPTABLES -P INPUT DROP
$IPTABLES -P OUTPUT ACCEPT
$IPTABLES -P FORWARD DROP

echo " Done"
echo
# --------------------------------------------------------------
# Create and flush chains
# --------------------------------------------------------------
echo "Creating and flushing the chains"
$IPTABLES -N lo
$IPTABLES -N wan
echo " Done. Chains are made"
echo

## Deluge ##
$IPTABLES -t filter -A INPUT -p tcp --dport 52145 -j ACCEPT
$IPTABLES -t filter -A INPUT -p tcp --dport 52146 -j ACCEPT
$IPTABLES -t filter -A INPUT -p tcp --dport 52147 -j ACCEPT
$IPTABLES -t filter -A INPUT -p tcp --dport 52148 -j ACCEPT
$IPTABLES -t filter -A INPUT -p tcp --dport 52149 -j ACCEPT
$IPTABLES -t filter -A INPUT -p tcp --dport 52150 -j ACCEPT
$IPTABLES -t filter -A INPUT -p tcp --dport 52151 -j ACCEPT

## ICMP ##
$IPTABLES -t filter -A INPUT -p icmp -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -t filter -A INPUT -i $WAN -p icmp --icmp-type echo-request -m state --state NEW -j ACCEPT

echo " Done. INPUT chain is up and running"
echo

################################################################
# Setting up rules for LO interface
# --------------------------------------------------------------
echo "Setting up LOCAL interface "
$IPTABLES -A lo -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A INPUT -i $LO -j ACCEPT
$IPTABLES -A OUTPUT -o $LO -j ACCEPT

echo " Done. LO is up and running"
echo

##################################################################
# --------------------------------------------------------------
# Setting up the WAN interface
# --------------------------------------------------------------
echo "Setting up the WAN interface"
$IPTABLES -t filter -A wan -m state --state ESTABLISHED,RELATED -j ACCEPT

echo " Done. WAN is up and running"
echo

##################################################################
# Activating the Chains
# ----------------------------------------------------------------
echo "Activating the chains"
$IPTABLES -A INPUT -i $WAN -j wan
$IPTABLES -A INPUT -i $LO -j lo

echo "Done. The chains are now activated"

echo
echo "Firewall has been setup succesfully and are now"
echo " protecting your network. No garanty is given."
echo
echo "This script is designet by PBJ IT & Webdesign"
echo " This is released under GPL licens"
echo " Remember OpenSource is not nessecary FREE"


håber i kan bruge det til noget

EDIT
Bare glem det det lader til at være en fejl i programmet Deluge
Beklager den unødvendig post :(
  • Log ind eller opret dig for at tilføje kommentarer

Kommentarer

Svar søges

Ja jeg er ret glad 0
KDE-dokumentar 0
YT-DLP-En piratkopieringsplatform? 0
Holland lavede en Nix-baseret Linux desktop, fordi Microsoft afskar ICC fra adgang. 0
Brave lancerer e-mail-aliasser for at skjule din rigtige e-mailadresse 0

Seneste aktivitet

GRUB eller Limine? 4
BigLinux 7
Linux live sucks 15
IT Uafhængighed - eller ? 1
AI genererede, Adobe inspirerede apps. 4
Hvordan opdaterer den 1
Det engang så elskede PCLinuxOS er tilbage - og det er stadig en fantastisk Windows erstatning 3
Jolla phone 2026 7
JOPDF for Linux 5
Arch Linux baseret Omarchy har sikret sig 8 millioner dollars i støtte 1
Debian 13 overtager over 2.200 kontrolsystemer hos CERN 2
USB Printer 2
Fremviser 2
Udbud af MitID-løsningen 2
Hvad gør jeg 1
tst 2
Gnome extensions 7
Commodore-telefon med SailfishOS 3
(U)hyggen breder sig 8
Lenovo P16 2

© 2026 Linuxin og de respektive skribenter

Oprettet og drevet af nørder siden 2004 !