Ïðîáëåìà îòêðûòèÿ ïîðòîâ.

[asdd]

Èìåþ:
Wl-500gP V2, ôëåøêà, ôèíò...
Ïðîøèâêà 1.9.2.7-10.5.

Íå ìîãó óäàëèòü ïîñëåäíåå ïðàâèëî â iptables

[admin@Wl-500g root]$ iptables -L INPUT
Chain INPUT (policy ACCEPT)
target prot opt source destination
DROP all -- anywhere anywhere state INVALID
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- anywhere anywhere state NEW
ACCEPT all -- anywhere anywhere state NEW
ACCEPT igmp -- anywhere BASE-ADDRESS.MCAST.NET/4
ACCEPT udp -- anywhere BASE-ADDRESS.MCAST.NET/4udp dpt:!upnp
ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
ACCEPT tcp -- anywhere anywhere tcp dpt:ftp
DROP all -- anywhere anywhere
[admin@Wl-500g root]$ iptables -D INPUT -j DROP -p ALL
iptables: Bad rule (does a matching rule exist in that chain?)


×òî íóæíî äëÿ ýòîãî ñäåëàòü? Âñå äåëàë ïî èíñòðóêöèè http://www.wl500g.info/showthread.php?t=12883&highlight=Bad+rule

[al37919]

ïðàâèëî äîëæíî áûòü çàïèñàíî òî÷íî òàêæå êàê ïðè äîáàâëåíèè, òîëüêî ñ -D âìåñòî -A.  êàêîì âèäå ïðàâèëà áûëè çàäàíû ñìîðòåòü çäåñü:

cat /tmp/filter_rules
cat /tmp/nat_rules

[asdd]

ïðàâèëî äîëæíî áûòü çàïèñàíî òî÷íî òàêæå êàê ïðè äîáàâëåíèè, òîëüêî ñ -D âìåñòî -A.  êàêîì âèäå ïðàâèëà áûëè çàäàíû ñìîðòåòü çäåñü:

cat /tmp/filter_rules
cat /tmp/nat_rules

Íè÷åãî íå ïîíÿë!


[admin@Wl-500g root]$ cat /tmp/nat_rules
*nat
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:VSERVER - [0:0]
-A PREROUTING -d 95.24.õõõ.104 -j VSERVER
-A PREROUTING -d 10.227.õõõ.166 -j VSERVER
-A POSTROUTING -o ppp0 ! -s 95.24.õõõ.104 -j SNAT --to-source 95.24.õõõ.104
-A POSTROUTING -o vlan1 ! -s 10.227.õõõ.166 -j SNAT --to-source 10.227.õõõ.166
-A POSTROUTING -o br0 -s 192.168.1.0/24 -d 192.168.1.0/24 -j SNAT --to-source 192.168.1.1
COMMIT
[admin@Wl-500g root]$ tmp/filter_rules
-sh: tmp/filter_rules: not found

[asdd]

Òîâàðèùè ÃÓÐÓ ôîðóìà, ïîìîãèòå ðàçîáðàòüñÿ. Âåñü ôîðóì îáëàçèë òàêîé ïðîáëåìû íå íàøåë!!!!

[Less]

DROP all -- anywhere anywhere

iptables -D INPUT -j DROP

[asdd]

DROP all -- anywhere anywhere

iptables -D INPUT -j DROP

Áîëüøîå ñïàñèáî! Ïîìîãëî!

Òåìó çàêðûâàåì. Íî â èíñòðóêöèè http://www.wl500g.info/showthread.ph...light=Bad+rule ìîæåò ñäåëàòü ïîïðàâî÷êó ñ ó÷åòîì çàìå÷àíèé Less'à?

[Power]

Ãäå âàñ òîëüêî ó÷èëè iptables ïîëüçîâàòüñÿ?
1. Ïðè ëèñòèíãå âñåãäà óêàçûâàéòå äâå îïöèè: n è v


iptables -L INPUT -nv

áóäåòå èìåòü ìåíüøå íåïîíÿòîê.

2. "-p ALL" äîáàâëÿòü íå íàäî. Åñëè õîòèòå óçíàòü, êàê òî÷íî âûãëÿäÿò òåêóùèå ïðàâèëà, âûïîëíèòå


iptables-save

[asdd]

Ãäå âàñ òîëüêî ó÷èëè iptables ïîëüçîâàòüñÿ?
1. Ïðè ëèñòèíãå âñåãäà óêàçûâàéòå äâå îïöèè: n è v


iptables -L INPUT -nv

áóäåòå èìåòü ìåíüøå íåïîíÿòîê.

2. "-p ALL" äîáàâëÿòü íå íàäî. Åñëè õîòèòå óçíàòü, êàê òî÷íî âûãëÿäÿò òåêóùèå ïðàâèëà, âûïîëíèòå


iptables-save


Âàé-âàé, êàêèå ìû âàæíûå. Âñå íà ÷åì-òî è êîãäà-òî ó÷èëèñü :o .
Íî âñå ðàâíî ñïàñèáî!!!!