Âíåøíèé àäðåñ ñ 80ûì ïîðòîì íà âíóòðåííèé àäðåñ ñ 8081

[SinSel]

Êàê ñäåëàòü òàê, ÷òîáû èç èíòåðíåòà íàáðàâ àäðåñ abc.dyndns.org ìîæíî ïîïàñòü íà âíóòðåííèé ñåðâåð, êîòîðûé ðàáîòàåò íà ïîðòó 8081?

post-firewall:

#!/bin/sh

iptables -D INPUT -j DROP
iptables -A INPUT -p tcp --dport 8081 -j ACCEPT
iptables -t nat -A PREROUTING -i vlan1 -p tcp --dport 8081 -j DNAT --to-destinatiopn $4:8081
iptables -A INPUT -j DROP 

Òàê âñå ðàáîòàåò, åñëè óêàçàòü â èíòåðíåòå ïîðò 8081!

Òåìà óæå îáñóæäàëàñü, íî ðåøåíèå òàê è íå áûëî óêàçàíî.

[Duke]

Ïîïðîáóé âîò òàê èñïðàâèòü

iptables -A INPUT -p tcp -d $2 --dport 80 -j ACCEPT
iptables -t nat -A PREROUTING -i vlan1 -p tcp -d $2 --dport 80 -j DNAT --to-destinatiopn $4:8081

[Vofik]

http://wl500g.info/showthread.php?t=13045

[lexass]

Vofik, òû õîòü ïîíÿë î ÷åì ðå÷ü â ýòîì òîïèêå?
õâàòèò ôëóäèòü...

[SinSel]

Ïîïðîáóé âîò òàê èñïðàâèòü

iptables -A INPUT -p tcp -d $2 --dport 80 -j ACCEPT
iptables -t nat -A PREROUTING -i vlan1 -p tcp -d $2 --dport 80 -j DNAT --to-destinatiopn $4:8081

Âñå ðàâíî ëåçåò íà àäìèíñêóþ ñòðàíèöó (õîòÿ âíåøíèé ïîðò ñòîèò 8080)... Ìîæåò åñòü êàêèå-òî åùå âàðèàíòû?

[Sheeft]

Ðåøåíèå áûëî íàéäåíî, ó ñàìîãî âåñåë ñàéò íà 80 ïîðòó, íà thttpd áûë 1234... Ïîèùè ïî ôîðóìó âíèìàòåëüíåå, íàéäåøü...

[SinSel]

Ðåøåíèå áûëî íàéäåíî, ó ñàìîãî âåñåë ñàéò íà 80 ïîðòó, íà thttpd áûë 1234... Ïîèùè ïî ôîðóìó âíèìàòåëüíåå, íàéäåøü...

Óæå èñêàë, íè÷åãî êîíêðåòíîãî íå íàøåë, áóäü äîáð ïîìîãè ðåøåíèåì. Íà ôîðóìå äîñòàòî÷íî òÿæåëî ÷òî-òî èñêàòü - ÷èòàòü âñå 15 (à òî è áîëüøå) ñòðàíèö òåì çà÷àñòóþ áûâàåò íåâîçìîæíûì, à òåì áîëåå îòûñêàòü êîíêðåòíî ðåøåíèå ñâîåé ïðîáëåìû è ïîäàâíî. Ìíå êàæåòñÿ íàäî êîïàòü â ñòîðîíó post-firewall, íå ïîëåíèñü ñêèíóòü ñâîé. Çàðàíåå ñïàñèáî!

[Sheeft]

Ó ìåíÿ áûë òàêîé (ñ 1234 íà 8081 óæå ïîïðàâèë)

Ñåé÷àñ ìó÷àþñü ñ îøèáêàìè ðîóòåðà, ïîõîäó ïðîáëåìû ñ æåëåçîì :-)

#!/bin/sh
iptables -I INPUT -p tcp --dport 21 -j ACCEPT

iptables -D INPUT -j DROP
iptables -A INPUT -p tcp --dport 21 -j ACCEPT
iptables -A INPUT -i tun+ -j ACCEPT
iptables -t nat -A PREROUTING -i vlan1 -p tcp --dport 21 -j DNAT --to-destination $4:21
iptables -A FORWARD -i tun+ -j ACCEPT

iptables -t nat -I PREROUTING 1 -p tcp -d "$2" --dport 80 -j DNAT --to "$2":8081
iptables -t nat -D PREROUTING -i "$1" -p tcp --dport 80 -j DROP iptables -t nat -I PREROUTING 2 -i "$1" -p tcp --dport 8081 -j DROP
iptables -I INPUT 1 -i "$1" -d "$2" -p tcp --syn --dport 8081 -j ACCEPT

iptables -A INPUT -j DROP

[al37919]

À ìîæåò åùå ïðîùå ïåðåíàçíà÷èòü ïîðò âåá-ìîðäû?:

nvram set http_lanport=8080
nvram commit 

Êñòàòè, ôîðâàðäèíã ïîðòà áåçóñëîâíî òîæå äîëæåí ðàáîòàòü. Ïðåäëàãàþ ñâîé âàðèàíò (IMHO â âàðèàíòå îò Duke îøèáêà â ïåðâîé ñòðîêå):

iptables -A INPUT -p tcp --dport 8081 -j ACCEPT
iptables -t nat -A PREROUTING -i $1 -p tcp --dport 80 -j DNAT --to-destination $4:8081 

[Serge_K]

Êàê ñäåëàòü òàê, ÷òîáû èç èíòåðíåòà íàáðàâ àäðåñ abc.dyndns.org ìîæíî ïîïàñòü íà âíóòðåííèé ñåðâåð, êîòîðûé ðàáîòàåò íà ïîðòó 8081?

Ìîæåò ýòî:
http://wl500g.info/showthread.php?t=...E8%F0%F3%E5%F2