êàê ïîíÿòü ïðè÷èíû äðîïîâ? [Archive]

Bekijk de volledige versie : êàê ïîíÿòü ïðè÷èíû äðîïîâ?

aik

23-07-2007, 14:52

Ëîã íèæå. Íóæíûå ïîðòû îòêðûòû, îäíàêî, äðîïàåò. Êàê ïðè÷èíó ïîíÿòü?

Jul 23 17:48:33 kernel: DROP IN=ppp0 OUT= MAC= SRC=89.222.150.12 DST=89.19.162.178 LEN=42 TOS=0x00 PREC=0x00 TTL=119 ID=3861 PROTO=UDP SPT=10242 DPT=44000 LEN=22
Jul 23 17:48:33 kernel: DROP IN=ppp0 OUT=br0 SRC=213.172.29.66 DST=192.168.1.100 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=38036 DF PROTO=TCP SPT=4724 DPT=44000 SEQ=2391028420 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (0204058C01010402)
Jul 23 17:48:34 kernel: DROP IN=ppp0 OUT=br0 SRC=87.249.56.199 DST=192.168.1.100 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=49079 DF PROTO=TCP SPT=2946 DPT=44000 SEQ=4075479715 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (0204058C01010402)
Jul 23 17:48:35 kernel: DROP IN=vlan1 OUT=br0 SRC=172.16.0.15 DST=192.168.1.100 LEN=52 TOS=0x00 PREC=0x00 TTL=60 ID=62547 DF PROTO=TCP SPT=2135 DPT=21 SEQ=1309568616 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40103030401010402)
Jul 23 17:48:36 kernel: DROP IN=vlan1 OUT=br0 SRC=172.16.0.15 DST=192.168.1.100 LEN=52 TOS=0x00 PREC=0x00 TTL=60 ID=62572 DF PROTO=TCP SPT=2141 DPT=21 SEQ=1393778729 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40103030401010402)
Jul 23 17:48:36 kernel: DROP IN=ppp0 OUT= MAC= SRC=89.222.150.12 DST=89.19.162.178 LEN=42 TOS=0x00 PREC=0x00 TTL=119 ID=4321 PROTO=UDP SPT=10242 DPT=44000 LEN=22
Jul 23 17:48:38 kernel: DROP IN=vlan1 OUT= MAC=01:00:5e:00:00:01:00:17:31:81:66:59:08:00:45:0 0:00:3c SRC=172.16.197.90 DST=224.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=20598 PROTO=UDP SPT=1066 DPT=5000 LEN=40
Jul 23 17:48:40 kernel: DROP IN=vlan1 OUT=br0 SRC=172.16.0.15 DST=192.168.1.100 LEN=52 TOS=0x00 PREC=0x00 TTL=60 ID=62657 DF PROTO=TCP SPT=2150 DPT=21 SEQ=2304656311 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40103030401010402)
Jul 23 17:48:41 kernel: DROP IN=vlan1 OUT=br0 SRC=172.16.0.15 DST=192.168.1.100 LEN=52 TOS=0x00 PREC=0x00 TTL=60 ID=62712 DF PROTO=TCP SPT=2156 DPT=21 SEQ=365626279 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40103030401010402)

Mam(O)n

23-07-2007, 15:03

Êàê ïðè÷èíó ïîíÿòü?

Íóæíî âíèìàòåëüíî ïðîñìîòðåòü òàáëèöû iptables

iptables -L -vn && iptables -L -vn -t nat

vspider

01-03-2009, 18:57

Chain VSERVER (1 references)
pkts bytes target prot opt in out source destination
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:51413 to:192.168.1.3:51413
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6881 to:192.168.1.4:6881
0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:6881 to:192.168.1.2:6881
0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:6882 to:192.168.1.4:6881
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:56906 to:11.11.1.2:56906
0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:56906 to:11.11.1.2:56906
3024 162K DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:40000 to:11.11.1.2:40000
10 576 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 to:11.11.11.2:80
1764 165K DNAT all -- * * 0.0.0.0/0 0.0.0.0/0 to:11.11.1.2

Àíàëîãè÷íàÿ ïðîáëåìà - íå ïðîïóñêàåò ñíàðóæè çàïðîñû íà 80é ïîðò, íî êàìèì-òî ìàêàðîì îòêðûëñÿ 21é (õîòÿ, òîæå íóæåí)
Ìàøèíà 11.11.1.2 - â dmz, íà íåé âñå ñåðâåðà.

Less

02-03-2009, 11:17

aik
1. Êàêèå ïîðòû? Äðîïàåò ó Âàñ - 21,5000,44000.
2. Äàéòå âûâîä òàáëèöû nat êàê ñêàçàë Mam(O)n!

vspider

Òîæå äàéòå âûâîä ïðàâèë iptables. Ïðåäïîëîæûòåëüíî äðîïàåò ó âàñ â öåïî÷êå forward.