nerodark
30-08-2005, 22:32
Hello, I am trying to find the good configuration to make my web pages world-accessible.
I'm not used to iptables yet, so I would need to good iptables commands to put in my /usr/local/sbin/post-firewall.
Right now the above file returns the following output:
#!/bin/sh
iptables -D INPUT -j DROP
iptables -A INPUT -p tcp -m tcp -d 10.0.0.1 --dport 81 -j ACCEPT
iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 81 -j DNAT --to-destination 10.0.0.1:81
iptables -A INPUT -j DROP
And I am running php-thttpd and its configuration file returns:
dir=/opt/share/www
port=81
user=nobody
nochroot
nosymlink
novhost
logfile=/opt/var/log/thttpd.log
# Please do not edit pidfile path at it is use to kill thttpd process during init
pidfile=/opt/var/run/thttpd.pid
cgipat=/cgi-bin/*
I have tested this configuration and it seems to work when the real ip is not a proxy. When the source is a proxy, the webpage returns me "Access Denied". Please this is very important for me because my school uses a proxy and I need to access my webpage sometimes.
Thanx in advance
I'm not used to iptables yet, so I would need to good iptables commands to put in my /usr/local/sbin/post-firewall.
Right now the above file returns the following output:
#!/bin/sh
iptables -D INPUT -j DROP
iptables -A INPUT -p tcp -m tcp -d 10.0.0.1 --dport 81 -j ACCEPT
iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 81 -j DNAT --to-destination 10.0.0.1:81
iptables -A INPUT -j DROP
And I am running php-thttpd and its configuration file returns:
dir=/opt/share/www
port=81
user=nobody
nochroot
nosymlink
novhost
logfile=/opt/var/log/thttpd.log
# Please do not edit pidfile path at it is use to kill thttpd process during init
pidfile=/opt/var/run/thttpd.pid
cgipat=/cgi-bin/*
I have tested this configuration and it seems to work when the real ip is not a proxy. When the source is a proxy, the webpage returns me "Access Denied". Please this is very important for me because my school uses a proxy and I need to access my webpage sometimes.
Thanx in advance