Ïîìîãèòå ñ íàñòðîéêîé Virtual Server

**timonych** · 13-11-2011, 13:05

Originally Posted by zert88

àãà áûëîá òàê ïðîñòî, áûëî áû êðóòî. ß ïî âñÿêîìó ïðîáóþ ëîêàëüíûé àéïè ó ìåíÿ 192.168.1.23, ãýòâýé 192.168.1.1, åñòü åùå òîò àéïè ÷òî âûäàåò ïðîâàéäåð íà÷èíàåòñÿ ñî 172. Ïðîñèò ââåñòè äâà àéïè, õç ÷òî è êàê , íà ñêðèíàõ â ôîòêàõ ÿíäåêñà âèäåë êàê äîëæíà áûòü ñåòêà ñ ïðîáðîñêîé ïîðòîâ, ÿ ÿâíî âèæó ðàçëè÷èÿ ñî ñâîåé ôîòêîé.

Source IP äîëæåí áûòü ïóñòîé,à Local Ip - êîìï, ïî êîòîðîìó ê ðîóòåðó ïðèâÿçàí.

**zert88** · 14-11-2011, 03:18

Originally Posted by timonych

Source IP äîëæåí áûòü ïóñòîé,à Local Ip - êîìï, ïî êîòîðîìó ê ðîóòåðó ïðèâÿçàí.

ñïàñèáî, âñå êàê âñåãäà ïðîùå, ÷åì êàçàëîñü, à ÿ óæå â iptables ïîëåç... ïðî÷åë íèæå, îòâåò óæå áûë äàí, à ÿ äóðåíü íå òî â çàïðîñ âáèâàë è ñðàçó íå ïðî÷åë âñþ âåòêó

**Dexter_ams** · 14-11-2011, 10:09

Ïðèâåòñòâóþ!
Ñòîèò ïðîøèâêà îò Îëåãà. Ñäåëàë âåá ñåðâåð, èç äîìàøíåé ñåòè ïî âíåøíåìó àäðåñó ñòðàíèöû ãðóçÿòñÿ, èç èíòåðíåòà íåò. ôàéðâîë îòêëþ÷àë - âñå ðàâíî íå ãðçóòñÿ.
Virtual Server - äîáàâèë
Port Range – 80
Local IP – èï íà êîòîðîì ñòîèò ñåðâåð
Local Port – 80
Protocol – TCP
Protocol No. – HTTP
Description – http server (80)
Ìîæåò áûòü ïðîáëåìà â ðîóòåðå èëè îäíîçíà÷íî ñåðâåð?

**vectorm** · 14-11-2011, 10:14

Originally Posted by Dexter_ams

Ïðèâåòñòâóþ!
Ñòîèò ïðîøèâêà îò Îëåãà. Ñäåëàë âåá ñåðâåð, èç äîìàøíåé ñåòè ïî âíåøíåìó àäðåñó ñòðàíèöû ãðóçÿòñÿ, èç èíòåðíåòà íåò.

iptables-save ÷òî ãîâîðèò?
Ëîã ðîóòåðà?
Âíåøíèé IP êóïëåí? (ó Âàøåãî ïðîâàéäåðà çàêàçûâàåòñÿ îòäåëüíî).

**Dexter_ams** · 14-11-2011, 11:23

Originally Posted by vectorm

iptables-save ÷òî ãîâîðèò?
Ëîã ðîóòåðà?
Âíåøíèé IP êóïëåí? (ó Âàøåãî ïðîâàéäåðà çàêàçûâàåòñÿ îòäåëüíî).

iptables-save

Code:

# Generated by iptables-save v1.3.8 on Mon Nov 14 11:25:11 2011
*nat
:PREROUTING ACCEPT [35770:2536346]
:POSTROUTING ACCEPT [1767:174638]
:OUTPUT ACCEPT [1780:179170]
:VSERVER - [0:0]
-A PREROUTING -d 195.158.232.48 -j VSERVER 
-A PREROUTING -i br0 -p tcp -m tcp --dport 80 -j autofw --related-proto tcp --related-dport 80-80 --related-to 80-80 
-A POSTROUTING -s ! 195.158.232.48 -o vlan1 -j MASQUERADE 
-A POSTROUTING -s 192.168.1.0/255.255.255.0 -d 192.168.1.0/255.255.255.0 -o br0 -j MASQUERADE 
-A VSERVER -p tcp -m tcp --dport 15024 -j DNAT --to-destination 192.168.1.182:15024 
-A VSERVER -p udp -m udp --dport 64600 -j DNAT --to-destination 192.168.1.167:64600 
-A VSERVER -p udp -m udp --dport 15024 -j DNAT --to-destination 192.168.1.182:15024 
-A VSERVER -p udp -m udp --dport 59025 -j DNAT --to-destination 192.168.1.167:59025 
-A VSERVER -p udp -m udp --dport 62820 -j DNAT --to-destination 192.168.1.182:62820 
-A VSERVER -p udp -m udp --dport 36692 -j DNAT --to-destination 192.168.1.182:36692 
-A VSERVER -p udp -m udp --dport 61386 -j DNAT --to-destination 192.168.1.167:61386 
-A VSERVER -p udp -m udp --dport 62112 -j DNAT --to-destination 192.168.1.182:62112 
-A VSERVER -p udp -m udp --dport 56509 -j DNAT --to-destination 192.168.1.167:56509 
-A VSERVER -p udp -m udp --dport 58661 -j DNAT --to-destination 192.168.1.182:58661 
-A VSERVER -p udp -m udp --dport 55943 -j DNAT --to-destination 192.168.1.182:55943 
-A VSERVER -p udp -m udp --dport 55011 -j DNAT --to-destination 192.168.1.167:55011 
-A VSERVER -p tcp -m tcp --dport 11111 -j DNAT --to-destination 192.168.1.182:11111 
-A VSERVER -p tcp -m tcp --dport 20:21 -j DNAT --to-destination 192.168.1.119:21 
-A VSERVER -p tcp -m tcp --dport 20:21 -j DNAT --to-destination 192.168.1.119:20 
-A VSERVER -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.1.119:80 
COMMIT
# Completed on Mon Nov 14 11:25:11 2011
# Generated by iptables-save v1.3.8 on Mon Nov 14 11:25:11 2011
*mangle
:PREROUTING ACCEPT [10462598:10022423212]
:INPUT ACCEPT [11577:1890908]
:FORWARD ACCEPT [10449850:10020465233]
:OUTPUT ACCEPT [13665:9919917]
:POSTROUTING ACCEPT [10466298:10031296266]
COMMIT
# Completed on Mon Nov 14 11:25:11 2011
# Generated by iptables-save v1.3.8 on Mon Nov 14 11:25:11 2011
*filter
:INPUT ACCEPT [788:62014]
:FORWARD ACCEPT [55052:3654097]
:OUTPUT ACCEPT [13409:9891346]
:BRUTE - [0:0]
:MACS - [0:0]
:SECURITY - [0:0]
:logaccept - [0:0]
:logdrop - [0:0]
-A INPUT -m state --state INVALID -j DROP 
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 
-A INPUT -i lo -m state --state NEW -j ACCEPT 
-A INPUT -i br0 -m state --state NEW -j ACCEPT 
-A INPUT -d 224.0.0.0/240.0.0.0 -p igmp -j ACCEPT 
-A INPUT -d 224.0.0.0/240.0.0.0 -p udp -m udp ! --dport 1900 -j ACCEPT 
-A FORWARD -i br0 -o br0 -j ACCEPT 
-A FORWARD -m state --state INVALID -j DROP 
-A FORWARD -d 224.0.0.0/240.0.0.0 -p udp -j ACCEPT 
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT 
-A FORWARD -i ! br0 -o vlan1 -j DROP 
-A FORWARD -m conntrack --ctstate DNAT -j ACCEPT 
-A FORWARD -o br0 -j DROP 
-A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 1/sec -j RETURN 
-A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK RST -m limit --limit 1/sec -j RETURN 
-A SECURITY -p udp -m limit --limit 5/sec -j RETURN 
-A SECURITY -p icmp -m limit --limit 5/sec -j RETURN 
-A SECURITY -j DROP 
-A logaccept -m state --state NEW -j LOG --log-prefix "ACCEPT " --log-tcp-sequence --log-tcp-options --log-ip-options 
-A logaccept -j ACCEPT 
-A logdrop -m state --state NEW -j LOG --log-prefix "DROP " --log-tcp-sequence --log-tcp-options --log-ip-options 
-A logdrop -j DROP 
COMMIT
# Completed on Mon Nov 14 11:25:11 2011

System Log

Nov 14 08:47:42 ntp client: Synchronizing time with time.nist.gov ...
Nov 14 08:53:36 dnsmasq-dhcp[70]: DHCPINFORM(br0) 192.168.1.119 00:1d:09:3e:2d:ce
Nov 14 08:53:36 dnsmasq-dhcp[70]: DHCPACK(br0) 192.168.1.119 00:1d:09:3e:2d:ce WIN-FPGOHH6I78A
Nov 14 09:25:45 dnsmasq-dhcp[70]: DHCPREQUEST(br0) 192.168.1.119 00:1d:09:3e:2d:ce
Nov 14 09:25:45 dnsmasq-dhcp[70]: DHCPACK(br0) 192.168.1.119 00:1d:09:3e:2d:ce WIN-FPGOHH6I78A
Nov 14 09:26:01 dnsmasq-dhcp[70]: DHCPINFORM(br0) 192.168.1.119 00:1d:09:3e:2d:ce
Nov 14 09:26:01 dnsmasq-dhcp[70]: DHCPACK(br0) 192.168.1.119 00:1d:09:3e:2d:ce WIN-FPGOHH6I78A
Nov 14 09:28:05 dnsmasq-dhcp[70]: DHCPINFORM(br0) 192.168.1.119 00:1d:09:3e:2d:ce
Nov 14 09:28:05 dnsmasq-dhcp[70]: DHCPACK(br0) 192.168.1.119 00:1d:09:3e:2d:ce WIN-FPGOHH6I78A
Nov 14 09:44:43 dnsmasq-dhcp[70]: DHCPINFORM(br0) 192.168.1.119 00:1d:09:3e:2d:ce
Nov 14 09:44:43 dnsmasq-dhcp[70]: DHCPACK(br0) 192.168.1.119 00:1d:09:3e:2d:ce WIN-FPGOHH6I78A
Nov 14 10:47:42 ntp client: Synchronizing time with time.nist.gov ...
Nov 14 11:13:12 dnsmasq-dhcp[70]: DHCPREQUEST(br0) 192.168.1.119 00:1d:09:3e:2d:ce
Nov 14 11:13:12 dnsmasq-dhcp[70]: DHCPACK(br0) 192.168.1.119 00:1d:09:3e:2d:ce WIN-FPGOHH6I78A
Nov 14 11:13:17 dnsmasq-dhcp[70]: DHCPREQUEST(br0) 192.168.1.119 00:1d:09:3e:2d:ce
Nov 14 11:13:17 dnsmasq-dhcp[70]: DHCPACK(br0) 192.168.1.119 00:1d:09:3e:2d:ce WIN-FPGOHH6I78A
Nov 14 11:13:24 dnsmasq-dhcp[70]: DHCPREQUEST(br0) 192.168.1.119 00:1d:09:3e:2d:ce
Nov 14 11:13:24 dnsmasq-dhcp[70]: DHCPACK(br0) 192.168.1.119 00:1d:09:3e:2d:ce WIN-FPGOHH6I78A
Nov 14 11:13:28 dnsmasq-dhcp[70]: DHCPINFORM(br0) 192.168.1.119 00:1d:09:3e:2d:ce
Nov 14 11:13:28 dnsmasq-dhcp[70]: DHCPACK(br0) 192.168.1.119 00:1d:09:3e:2d:ce WIN-FPGOHH6I78A
Nov 14 11:24:28 dnsmasq-dhcp[70]: DHCPREQUEST(br0) 192.168.1.119 00:1d:09:3e:2d:ce
Nov 14 11:24:28 dnsmasq-dhcp[70]: DHCPACK(br0) 192.168.1.119 00:1d:09:3e:2d:ce WIN-FPGOHH6I78A
Nov 14 11:24:31 dnsmasq-dhcp[70]: DHCPREQUEST(br0) 192.168.1.119 00:1d:09:3e:2d:ce
Nov 14 11:24:31 dnsmasq-dhcp[70]: DHCPACK(br0) 192.168.1.119 00:1d:09:3e:2d:ce WIN-FPGOHH6I78A
Nov 14 11:24:40 dnsmasq-dhcp[70]: DHCPREQUEST(br0) 192.168.1.119 00:1d:09:3e:2d:ce
Nov 14 11:24:40 dnsmasq-dhcp[70]: DHCPACK(br0) 192.168.1.119 00:1d:09:3e:2d:ce WIN-FPGOHH6I78A
Nov 14 11:24:43 dnsmasq-dhcp[70]: DHCPINFORM(br0) 192.168.1.119 00:1d:09:3e:2d:ce
Nov 14 11:24:43 dnsmasq-dhcp[70]: DHCPACK(br0) 192.168.1.119 00:1d:09:3e:2d:ce WIN-FPGOHH6I78A

Äà, âíåøíèé èï êóïëåí. Ïðîâàéäåð ïîðòû íå áëîêèðóåò

**vectorm** · 14-11-2011, 12:13

Originally Posted by Dexter_ams

iptables-save

Code:

-A PREROUTING -i br0 -p tcp -m tcp --dport 80 -j autofw --related-proto tcp --related-dport 80-80 --related-to 80-80
-A VSERVER -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.1.119:80

Ñêîðåå âñåãî ýòè ïðàâèëà ïåðåñåêàþòñÿ, ò.å. 80 ïîðò ðîóòåðîì äëÿ ñåáÿ çàáèðàåòñÿ. Ïåðåíåñèòå âåá ìîðäó ðîóòåðà íà äðóãîé ïîðò (â FAQ åñòü).

Originally Posted by Dexter_ams

System Log

Ìäà, î÷åíü ïîäðîáíûé. Çà÷åì áûëî îáðåçàòü íà÷àëî??? Óêàçàííûå ñòðî÷êè - âîîáùå íè î ÷åì â êîíòåêñòå âîïðîñà. Òîëüêî 1 ñòðàííîñòü - îáíîâëåíèå ñëèøêîì ÷àñòîå.

**Dexter_ams** · 14-11-2011, 12:34

Originally Posted by vectorm

Ñêîðåå âñåãî ýòè ïðàâèëà ïåðåñåêàþòñÿ, ò.å. 80 ïîðò ðîóòåðîì äëÿ ñåáÿ çàáèðàåòñÿ. Ïåðåíåñèòå âåá ìîðäó ðîóòåðà íà äðóãîé ïîðò (â FAQ åñòü).

Ìäà, î÷åíü ïîäðîáíûé. Çà÷åì áûëî îáðåçàòü íà÷àëî??? Óêàçàííûå ñòðî÷êè - âîîáùå íè î ÷åì â êîíòåêñòå âîïðîñà. Òîëüêî 1 ñòðàííîñòü - îáíîâëåíèå ñëèøêîì ÷àñòîå.

web ìîðäó ïåðåíåñ

System Log

Code:

Jan  1 00:00:02 syslogd started: BusyBox v1.17.2
Jan  1 00:00:02 kernel: Memory: 29960k/32768k available (1960k kernel code, 2808k reserved, 140k data, 92k init, 0k highmem)
Jan  1 00:00:02 kernel: Dentry cache hash table entries: 4096 (order: 3, 32768 bytes)
Jan  1 00:00:02 kernel: Inode cache hash table entries: 2048 (order: 2, 16384 bytes)
Jan  1 00:00:02 kernel: Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Jan  1 00:00:02 kernel: Buffer cache hash table entries: 1024 (order: 0, 4096 bytes)
Jan  1 00:00:02 kernel: Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
Jan  1 00:00:02 kernel: Checking for 'wait' instruction...  unavailable.
Jan  1 00:00:02 kernel: POSIX conformance testing by UNIFIX
Jan  1 00:00:02 kernel: PCI: no core
Jan  1 00:00:02 kernel: PCI: Fixing up bus 0
Jan  1 00:00:02 dnsmasq[70]: started, version 2.55 cachesize 512
Jan  1 00:00:02 dnsmasq[70]: compile time options: IPv6 GNU-getopt no-RTC no-DBus no-I18N DHCP no-scripts no-TFTP
Jan  1 00:00:02 dnsmasq-dhcp[70]: DHCP, IP range 192.168.1.101 -- 192.168.1.254, lease time 1d
Jan  1 00:00:02 dnsmasq[70]: read /etc/hosts - 2 addresses
Jan  1 00:00:02 kernel: usb.c: registered new driver usbdevfs
Jan  1 00:00:02 kernel: usb.c: registered new driver hub
Jan  1 00:00:03 kernel: usb-ohci.c: USB OHCI at membase 0xb8003000, IRQ 6
Jan  1 00:00:03 kernel: usb-ohci.c: usb-00:03.0, PCI device 14e4:471a
Jan  1 00:00:03 kernel: usb.c: new USB bus registered, assigned bus number 1
Jan  1 00:00:03 kernel: hub.c: USB hub found
Jan  1 00:00:03 kernel: hub.c: 2 ports detected
Jan  1 00:00:03 kernel: ehci_hcd 00:03.1: PCI device 14e4:471a
Jan  1 00:00:03 kernel: ehci_hcd 00:03.1: irq 6, pci mem b8003800
Jan  1 00:00:03 kernel: usb.c: new USB bus registered, assigned bus number 2
Jan  1 00:00:03 kernel: ehci_hcd 00:03.1: USB 0.0 enabled, EHCI 1.00, driver 10 Dec 2004/2.4
Jan  1 00:00:03 kernel: hub.c: USB hub found
Jan  1 00:00:03 kernel: hub.c: 2 ports detected
Jan  1 00:00:03 kernel: usb.c: registered new driver usblp
Jan  1 00:00:03 kernel: printer.c: v0.13: USB Printer Device Class driver
Jan  1 00:00:04 kernel: Linux video capture interface: v1.00
Jan  1 00:00:04 kernel: SCSI subsystem driver Revision: 1.00
Jan  1 00:00:04 kernel: Initializing USB Mass Storage driver...
Jan  1 00:00:04 kernel: usb.c: registered new driver usb-storage
Jan  1 00:00:04 kernel: USB Mass Storage support registered.
Jan  1 00:00:04 kernel: vlan1: Setting MAC address to  1c bd b9 96 62 55.
Jan  1 00:00:05 dnsmasq[70]: read /etc/hosts - 2 addresses
Jan  1 00:00:05 dhcp client: deconfig: lease is lost
Jan  1 00:00:05 dnsmasq[70]: read /etc/hosts - 2 addresses
Jan  1 00:00:05 dnsmasq[70]: using nameserver 94.228.204.34#53
Jan  1 00:00:05 dnsmasq[70]: using nameserver 91.195.61.2#53
Jan  1 00:00:05 dnsmasq[70]: using nameserver 193.232.245.125#53
Jan  1 00:00:05 dnsmasq[70]: using nameserver 212.152.38.186#53
Jan  1 00:00:05 dhcp client: bound IP : 195.158.232.48 from 195.158.232.33
Jan  1 00:00:05 dnsmasq-dhcp[70]: DHCPREQUEST(br0) 192.168.1.167 78:dd:08:cc:7e:f0 
Jan  1 00:00:05 dnsmasq-dhcp[70]: DHCPACK(br0) 192.168.1.167 78:dd:08:cc:7e:f0 
Nov 14 12:38:23 login[115]: root login on 'pts/0'
Nov 14 12:39:19 ntp client: Synchronizing time with time.nist.gov ...

**Xenon007** · 17-11-2011, 09:25

Èìååòñÿ ñåòü ñ WL500gp v2 è 4 êîìïà.
Íà òî÷êå ñòîèò lighttpd íà 80 ïîðòó.
Íà êîìïüþòåðàõ òîæå ñòîÿò HTTP ñåðâåðà.
Ïîäñêàæèòå, êàê îòêðûòü äîñòóï äî ïîðòîâ êîìïüþòåðîâ ñåòêè, íàïðèìåð:
asus:81 -> 192.168.1.2:80
asus:82 -> 192.168.1.3:80
asus:83 -> 192.168.1.4:80
asus:84 -> 192.168.1.5:80
Æåëàòåëüíî ÷åðåç êîíñîëü.

Ñïàñèáî

PS
Ïðîøèâêà 1.9.2.7-d/-rtn

**SLP** · 08-12-2011, 11:55

Íå çíàþ â òåìó èëè íåò íî ïðîãðàììû ïîääåðæèâàþùèå UpNp çàìå÷àòåëüíî ïðîáðàñûâàþò ïîðòû ÷åðåç ðîóòåð. À âîò ñ âèðòóàë ñåðâåð ÷åðåç âåá-ìîðäó ê ðîóòåðó ÿ òàê è íå ðàçîáðàëñÿ - ïðîáîâàë îòêðûâàòü êîíêðåòíûå ïîðòû, ïðîâåðêà ïîðòîâ âñå ðàâíî ïîêàçûâàåò ÷òî îíè çàêðûòû

**Dimonakapirat** · 19-12-2011, 11:57

Ïîìåíÿë ðîóòåð íà rt-n16. Íàñòðîèë àíàëîãè÷íî, ïðîáðîñèë ïîðòû, ïðîáóþ öåïëÿòüñÿ - íå îòâå÷àåò. Ñóäÿ ïî diagnostic info âñ¸ îê ïîðòû ïðîáðîøåíû, íåîòâå÷àåò ïîïëÿñàë ñ áóáíîì, ïîëèñòàë ôîðóì, èìïåðè÷åñêè âûÿñíèë ÷òî win 7 áëî÷èò ïîäêëþ÷åíèÿ èç âíå, âñ¸ ðåøèëîñü ïåðåêëþ÷åíèåì òèïà ñåòè ñ "îáùåñòâåííîå ìåñòî" íà "äîìàøíÿÿ ñåòü", îáðàòèòå íà ýòî âíèìàíèå òå ó êîãî "âñ¸ âðîäå îê íî íåðàáîòàåò"

**eska** · 22-12-2011, 17:26

Ïðèâåò âñåì!
wl500gPv2, ïðîøèâêà îò Îëåãà.
Åñòü çàäà÷è ïåðåáðàñûâàòü âíåøíèå çàïðîñû ïî îïðåäåëåííîìó ïîðòó íà îïðåäåëåííûé àäðåñ:ïîðò, äîñòèæèìî ëè òàêîå?
Ò.å. ãðóáî ãîâîðÿ, ñòó÷èòñÿ êòî-òî íà âíåøíèé àäðåñ ðîóòåðà ïî ïîðòó 80, à åãî ïåðåáðàñûâàåò íà XXX.XXX.XXX.XXX:80.
Äîáàâèë òàêîå ïðàâèëî â Nat Setting -> Virtual Server, èçíóòðè ñåòè ðàáîòàåò, à ñíàðóæè íåò.
×òî ìîæíî ñäåëàòü è ìîæíî ëè ÷òî-òî ñäåëàòü?
Åñëè íóæíî ëåçòü "âíóòðü", òî æåëàòåëüíî ïàëüöåì ïîêàçàòü â êàêîì ôàéëå ÷òî íóæíî äîïèñàòü.
Ñïàñèáî!

**TReX** · 22-12-2011, 17:39

Originally Posted by eska

Ïðèâåò âñåì!
wl500gPv2, ïðîøèâêà îò Îëåãà.
Åñòü çàäà÷è ïåðåáðàñûâàòü âíåøíèå çàïðîñû ïî îïðåäåëåííîìó ïîðòó íà îïðåäåëåííûé àäðåñ:ïîðò, äîñòèæèìî ëè òàêîå?
Ò.å. ãðóáî ãîâîðÿ, ñòó÷èòñÿ êòî-òî íà âíåøíèé àäðåñ ðîóòåðà ïî ïîðòó 80, à åãî ïåðåáðàñûâàåò íà XXX.XXX.XXX.XXX:80.
Äîáàâèë òàêîå ïðàâèëî â Nat Setting -> Virtual Server, èçíóòðè ñåòè ðàáîòàåò, à ñíàðóæè íåò.
×òî ìîæíî ñäåëàòü è ìîæíî ëè ÷òî-òî ñäåëàòü?
Åñëè íóæíî ëåçòü "âíóòðü", òî æåëàòåëüíî ïàëüöåì ïîêàçàòü â êàêîì ôàéëå ÷òî íóæíî äîïèñàòü.
Ñïàñèáî!

Ïàëüöåì îáû÷íî äðóãîå ïîêàçûâàþò, à âàì íóæíî ïðîáðîñèòü ïîðòû, íî êðîìå òåõ ÷òî óæå èñïîëüçóþòñÿ ðîóòåðîì, â ÷àñòíîñòè 80 )

**tempik** · 22-12-2011, 17:42

Originally Posted by eska

Ïðèâåò âñåì!
wl500gPv2, ïðîøèâêà îò Îëåãà.
Åñòü çàäà÷è ïåðåáðàñûâàòü âíåøíèå çàïðîñû ïî îïðåäåëåííîìó ïîðòó íà îïðåäåëåííûé àäðåñ:ïîðò, äîñòèæèìî ëè òàêîå?
Ò.å. ãðóáî ãîâîðÿ, ñòó÷èòñÿ êòî-òî íà âíåøíèé àäðåñ ðîóòåðà ïî ïîðòó 80, à åãî ïåðåáðàñûâàåò íà XXX.XXX.XXX.XXX:80.
Äîáàâèë òàêîå ïðàâèëî â Nat Setting -> Virtual Server, èçíóòðè ñåòè ðàáîòàåò, à ñíàðóæè íåò.
×òî ìîæíî ñäåëàòü è ìîæíî ëè ÷òî-òî ñäåëàòü?
Åñëè íóæíî ëåçòü "âíóòðü", òî æåëàòåëüíî ïàëüöåì ïîêàçàòü â êàêîì ôàéëå ÷òî íóæíî äîïèñàòü.
Ñïàñèáî!

Âûâîä

Code:

iptables-save

ïðèâåäèòå ...

**eska** · 22-12-2011, 18:22

Âîò:

Code:

# Generated by iptables-save v1.2.7a on Thu Dec 22 21:26:11 2011
*nat
:PREROUTING ACCEPT [343:44980]
:POSTROUTING ACCEPT [21:1285]
:OUTPUT ACCEPT [21:1285]
:VSERVER - [0:0]
-A PREROUTING -d âíåøíèéIP -j VSERVER
-A POSTROUTING -s ! âíåøíèéIP -o vlan1 -j MASQUERADE
-A POSTROUTING -s 192.168.172.0/255.255.255.0 -d 192.168.172.0/255.255.255.0 -o br0 -j MASQUERADE
-A VSERVER -p udp -m udp --dport 2456 -j DNAT --to-destination 192.168.172.4:2456
-A VSERVER -p tcp -m tcp --dport 1501 -j DNAT --to-destination 192.168.172.4:1501
-A VSERVER -p tcp -m tcp --dport 7711 -j DNAT --to-destination 192.168.172.4:7711
-A VSERVER -p udp -m udp --dport 7711 -j DNAT --to-destination 192.168.172.4:7711
-A VSERVER -p tcp -m tcp --dport 80 -j DNAT --to-destination ïåðåáðîñíàýòîòIP:80
COMMIT
# Completed on Thu Dec 22 21:26:11 2011
# Generated by iptables-save v1.2.7a on Thu Dec 22 21:26:11 2011
*mangle
:PREROUTING ACCEPT [6670:4941815]
:INPUT ACCEPT [880:81839]
:FORWARD ACCEPT [5690:4833262]
:OUTPUT ACCEPT [1012:627279]
:POSTROUTING ACCEPT [6702:5460541]
COMMIT
# Completed on Thu Dec 22 21:26:11 2011
# Generated by iptables-save v1.2.7a on Thu Dec 22 21:26:11 2011
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [158:9747]
:OUTPUT ACCEPT [1004:625302]
:MACS - [0:0]
:SECURITY - [0:0]
:logaccept - [0:0]
:logdrop - [0:0]
-A INPUT -m state --state INVALID -j DROP
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -m state --state NEW -j ACCEPT
-A INPUT -i br0 -m state --state NEW -j ACCEPT
-A INPUT -i vlan1 -m state --state NEW -j SECURITY
-A INPUT -p udp -m udp --sport 67 --dport 68 -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -j DROP
-A FORWARD -i br0 -o br0 -j ACCEPT
-A FORWARD -m state --state INVALID -j DROP
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i ! br0 -o vlan1 -j DROP
-A FORWARD -i ! br0 -m state --state NEW -j SECURITY
-A FORWARD -m conntrack --ctstate DNAT -j ACCEPT
-A FORWARD -o br0 -j DROP
-A SECURITY -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN -m limit --limit 1/sec -j RETURN
-A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK RST -m limit --limit 1/sec -j RETURN
-A SECURITY -p udp -m limit --limit 5/sec -j RETURN
-A SECURITY -p icmp -m limit --limit 5/sec -j RETURN
-A SECURITY -j DROP
-A logaccept -m state --state NEW -j LOG --log-prefix "ACCEPT " --log-tcp-sequence --log-tcp-options --log-ip-options
-A logaccept -j ACCEPT
-A logdrop -m state --state NEW -j LOG --log-prefix "DROP " --log-tcp-sequence --log-tcp-options --log-ip-options
-A logdrop -j DROP
COMMIT
# Completed on Thu Dec 22 21:26:11 2011

**tempik** · 22-12-2011, 19:37

Íó ïåðåàäðåñàöèÿ âðîäå íîðìàëüíî âñòàëà, à âîò ðàçðåøåíèÿ íà äîñòóï ê 80 ïîðòó ñíàðóæè íåò. Íóæíî ÿâíî ðàçðåøèòü (õîòÿ âåáìîðäà äîëæíà áûëà ñäåëàòü) äîñòóï èçâíå íà ïîðò 80 ...
÷òî-òî òèïà:

Code:

iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT

ó âàñ ýòîãî íåò ...

Thread: Ïîìîãèòå ñ íàñòðîéêîé Virtual Server

Thread Tools

Rate This Thread

Display

Ïîðòû íà òî÷êå

?

Âñåì ó êîãî WIN7

Virtual Server ñíàðóæè - ïåðåáðîñ ïîðòà ñíàðóæè âîçìîæåí?

Similar Threads

Óñòàíîâêà è íàñòðîéêà 3proxy/tinyproxy server íà ðîóòåðå

Ïîìîãèòå ÷àéíèêó ñ íàñòðîéêîé FTP (vsftpd)

Íå ïîëó÷àåòñÿ íàñòðîèòü Virtual DMZ

Ïîìîãèòå ñ íàñòðîéêîé Samba

Virtual serial port (CDC Class)

Tags for this Thread

Posting Permissions