WiMAX - èëè Yota, óáèéöà îôèñíûõ ïðîâàéäåðîâ

Code:

---

192.168.1.0/24 dev br0  proto kernel  scope link  src 192.168.1.1
127.0.0.0/8 dev lo  scope link

---

Code:

---

# Generated by iptables-save v1.3.8 on Thu Jan  1 00:03:12 1970
*nat
:PREROUTING ACCEPT [1040:143638]
:POSTROUTING ACCEPT [4:1324]
:OUTPUT ACCEPT [8:2178]
:VSERVER - [0:0]
-A POSTROUTING -s 192.168.1.0/255.255.255.0 -d 192.168.1.0/255.255.255.0 -o br0 -j SNAT --to-source 192.168.1.1
-A POSTROUTING -s ! 109.188.128.82 -o wimax0 -j MASQUERADE
-A VSERVER -p udp -m udp --dport 45330 -j DNAT --to-destination 192.168.0.6:45330
-A VSERVER -p tcp -m tcp --dport 45330 -j DNAT --to-destination 192.168.0.6:45330
COMMIT
# Completed on Thu Jan  1 00:03:12 1970
# Generated by iptables-save v1.3.8 on Thu Jan  1 00:03:12 1970
*mangle
:PREROUTING ACCEPT [1349:212766]
:INPUT ACCEPT [351:71696]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [401:229817]
:POSTROUTING ACCEPT [511:270478]
COMMIT
# Completed on Thu Jan  1 00:03:12 1970
# Generated by iptables-save v1.3.8 on Thu Jan  1 00:03:12 1970
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [370:218584]
:BRUTE - [0:0]
:MACS - [0:0]
:SECURITY - [0:0]
:logaccept - [0:0]
:logdrop - [0:0]
-A INPUT -m state --state INVALID -j DROP
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -m state --state NEW -j ACCEPT
-A INPUT -i br0 -m state --state NEW -j ACCEPT
-A INPUT -p tcp -m tcp --dport 21 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
-A INPUT -j DROP
-A FORWARD -o wimax0 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -i br0 -o br0 -j ACCEPT
-A FORWARD -m state --state INVALID -j DROP
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i ! br0 -o vlan1 -j DROP
-A FORWARD -m conntrack --ctstate DNAT -j ACCEPT
-A FORWARD -o br0 -j DROP
-A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 1/sec -j RETURN
-A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK RST -m limit --limit 1/sec -j RETURN
-A SECURITY -p udp -m limit --limit 5/sec -j RETURN
-A SECURITY -p icmp -m limit --limit 5/sec -j RETURN
-A SECURITY -j DROP
-A logaccept -m state --state NEW -j LOG --log-prefix "ACCEPT " --log-tcp-sequence --log-tcp-options --log-ip-options
-A logaccept -j ACCEPT
-A logdrop -m state --state NEW -j LOG --log-prefix "DROP " --log-tcp-sequence --log-tcp-options --log-ip-options
-A logdrop -j DROP
COMMIT
# Completed on Thu Jan  1 00:03:12 1970

---

syslog

Code:

---

Jan  1 00:00:02 syslogd started: BusyBox v1.15.3
Jan  1 00:00:03 kernel: klogd started: BusyBox v1.15.3 (2010-01-24 20:40:42 MSK)
Jan  1 00:00:03 kernel: CPU revision is: 00029006
Jan  1 00:00:03 kernel: Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes.
Jan  1 00:00:03 kernel: Primary data cache 16kB, 2-way, linesize 16 bytes.
Jan  1 00:00:03 kernel: Linux version 2.4.37.7 (root@localhost) (gcc version 3.4.6) #1 2010-01-24 20:44:23 MSK
Jan  1 00:00:03 kernel: Setting the PFC to its default value
Jan  1 00:00:03 kernel: Determined physical RAM map:
Jan  1 00:00:03 kernel:  memory: 02000000 @ 00000000 (usable)
Jan  1 00:00:03 kernel: On node 0 totalpages: 8192
Jan  1 00:00:03 kernel: zone(0): 8192 pages.
Jan  1 00:00:03 kernel: zone(1): 0 pages.
Jan  1 00:00:03 kernel: zone(2): 0 pages.
Jan  1 00:00:03 kernel: Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,ext3 noinitrd init=/linuxrc console=ttyS0,115200
Jan  1 00:00:03 kernel: CPU: BCM4704 rev 9 pkg 0 at 264 MHz
Jan  1 00:00:03 kernel: Using 132.000 MHz high precision timer.
Jan  1 00:00:03 kernel: Calibrating delay loop... 263.78 BogoMIPS
Jan  1 00:00:03 kernel: Memory: 29868k/32768k available (1958k kernel code, 2900k reserved, 240k data, 92k init, 0k highmem)
Jan  1 00:00:03 kernel: Dentry cache hash table entries: 4096 (order: 3, 32768 bytes)
Jan  1 00:00:03 kernel: Inode cache hash table entries: 2048 (order: 2, 16384 bytes)
Jan  1 00:00:03 kernel: Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Jan  1 00:00:03 kernel: Buffer cache hash table entries: 1024 (order: 0, 4096 bytes)
Jan  1 00:00:03 kernel: Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
Jan  1 00:00:03 kernel: Checking for 'wait' instruction...  unavailable.
Jan  1 00:00:03 kernel: POSIX conformance testing by UNIFIX
Jan  1 00:00:03 kernel: PCI: Initializing host
Jan  1 00:00:03 kernel: PCI: Fixing up bus 0
Jan  1 00:00:03 kernel: PCI: Fixing up bridge
Jan  1 00:00:03 kernel: PCI: Fixing up bus 1
Jan  1 00:00:03 kernel: Linux NET4.0 for Linux 2.4
Jan  1 00:00:03 kernel: Based upon Swansea University Computer Society NET3.039
Jan  1 00:00:03 kernel: Initializing RT netlink socket
Jan  1 00:00:03 kernel: Starting kswapd
Jan  1 00:00:03 kernel: Journalled Block Device driver loaded
Jan  1 00:00:03 kernel: devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au)
Jan  1 00:00:03 kernel: devfs: boot_options: 0x1
Jan  1 00:00:03 kernel: NTFS driver v1.1.22 [Flags: R/O]
Jan  1 00:00:03 kernel: squashfs: version 3.0 (2006/03/15) Phillip Lougher
Jan  1 00:00:03 kernel: pty: 256 Unix98 ptys configured
Jan  1 00:00:03 kernel: Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI enabled
Jan  1 00:00:03 kernel: ttyS00 at 0xb8000300 (irq = 3) is a 16550A
Jan  1 00:00:03 kernel: ttyS01 at 0xb8000400 (irq = 3) is a 16550A
Jan  1 00:00:03 kernel: HDLC line discipline: version $Revision: 3.7 $, maxframe=4096
Jan  1 00:00:03 kernel: N_HDLC line discipline registered.
Jan  1 00:00:03 kernel: loop: loaded (max 8 devices)
Jan  1 00:00:03 kernel: PPP generic driver version 2.4.2
Jan  1 00:00:03 kernel: PPP Deflate Compression module registered
Jan  1 00:00:03 kernel: PPP BSD Compression module registered
Jan  1 00:00:03 kernel: MPPE/MPPC encryption/compression module registered
Jan  1 00:00:03 kernel: PPPoL2TP kernel driver, V0.15.1
Jan  1 00:00:03 kernel: PPTP driver version 0.8.5-rc1
Jan  1 00:00:03 kernel:  Amd/Fujitsu Extended Query Table v1.3 at 0x0040
Jan  1 00:00:03 kernel:  Flash Id: Vendor: 0x0001 Device: 0x007e
Jan  1 00:00:03 kernel: number of CFI chips: 1
Jan  1 00:00:03 kernel: cfi_cmdset_0002: Disabling fast programming due to code brokenness.
Jan  1 00:00:03 kernel: Flash device: 0x800000 at 0x1c000000
Jan  1 00:00:03 kernel: Physically mapped flash: squashfs filesystem found at block 967
Jan  1 00:00:03 kernel: Creating 5 MTD partitions on "Physically mapped flash":
Jan  1 00:00:03 kernel: 0x00000000-0x00040000 : "boot"
Jan  1 00:00:03 kernel: 0x00040000-0x007f0000 : "linux"
Jan  1 00:00:03 kernel: 0x000f1d94-0x007f0000 : "rootfs"
Jan  1 00:00:03 kernel: 0x007f0000-0x00800000 : "nvram"
Jan  1 00:00:03 kernel: 0x003e0000-0x007f0000 : "flashfs"
Jan  1 00:00:03 kernel: sflash: found no supported devices
Jan  1 00:00:03 kernel: Initializing Cryptographic API
Jan  1 00:00:03 kernel: IPv6 v0.8 for NET4.0
Jan  1 00:00:03 kernel: IPv6 over IPv4 tunneling driver
Jan  1 00:00:03 kernel: NET4: Linux TCP/IP 1.0 for NET4.0
Jan  1 00:00:03 kernel: IP Protocols: ICMP, UDP, TCP, IGMP
Jan  1 00:00:03 kernel: IP: routing cache hash table of 4096 buckets, 32Kbytes
Jan  1 00:00:03 kernel: TCP: Hash tables configured (established 2048 bind 4096)
Jan  1 00:00:03 kernel: usb.c: registered new driver usbdevfs
Jan  1 00:00:03 kernel: usb.c: registered new driver hub
Jan  1 00:00:03 dnsmasq[70]: started, version 2.51 cachesize 512
Jan  1 00:00:03 dnsmasq[70]: compile time options: IPv6 GNU-getopt no-RTC no-DBus no-I18N DHCP no-scripts no-TFTP
Jan  1 00:00:03 dnsmasq-dhcp[70]: DHCP, IP range 192.168.1.2 -- 192.168.1.254, lease time 1d
Jan  1 00:00:03 dnsmasq[70]: read /etc/hosts - 2 addresses
Jan  1 00:00:03 kernel: usb-uhci.c: $Revision: 1.275 $ time 20:46:06 Jan 24 2010
Jan  1 00:00:03 kernel: usb-uhci.c: High bandwidth mode enabled
Jan  1 00:00:03 kernel: PCI: Enabling device 01:03.0 (0000 -> 0001)
Jan  1 00:00:03 kernel: UHCI: Enabling VIA 6212 workarounds
Jan  1 00:00:03 kernel: usb-uhci.c: USB UHCI at I/O 0x100, IRQ 12
Jan  1 00:00:03 kernel: usb-uhci.c: Detected 2 ports
Jan  1 00:00:03 kernel: usb.c: new USB bus registered, assigned bus number 1
Jan  1 00:00:03 kernel: hub.c: USB hub found
Jan  1 00:00:03 kernel: hub.c: 2 ports detected
Jan  1 00:00:03 kernel: PCI: Enabling device 01:03.1 (0000 -> 0001)
Jan  1 00:00:03 kernel: UHCI: Enabling VIA 6212 workarounds
Jan  1 00:00:03 kernel: usb-uhci.c: USB UHCI at I/O 0x120, IRQ 12
Jan  1 00:00:03 kernel: usb-uhci.c: Detected 2 ports
Jan  1 00:00:03 kernel: usb.c: new USB bus registered, assigned bus number 2
Jan  1 00:00:03 kernel: hub.c: USB hub found
Jan  1 00:00:03 kernel: hub.c: 2 ports detected
Jan  1 00:00:03 kernel: usb-uhci.c: v1.275:USB Universal Host Controller Interface driver
Jan  1 00:00:04 kernel: PCI: Enabling device 01:03.2 (0000 -> 0002)
Jan  1 00:00:04 kernel: ehci_hcd 01:03.2: PCI device 1106:3104
Jan  1 00:00:04 kernel: ehci_hcd 01:03.2: irq 12, pci mem c01a1000
Jan  1 00:00:04 kernel: usb.c: new USB bus registered, assigned bus number 3
Jan  1 00:00:04 kernel: EHCI: Enabling VIA 6212 workarounds
Jan  1 00:00:04 kernel: ehci_hcd 01:03.2: USB 2.0 enabled, EHCI 1.00, driver 10 Dec 2004/2.4
Jan  1 00:00:04 kernel: hub.c: USB hub found
Jan  1 00:00:04 kernel: hub.c: 4 ports detected
Jan  1 00:00:04 kernel: usb.c: registered new driver usblp
Jan  1 00:00:04 kernel: printer.c: v0.13: USB Printer Device Class driver
Jan  1 00:00:05 kernel: hub.c: new USB device 01:03.2-2, assigned address 2
Jan  1 00:00:05 kernel: usb.c: USB device 2 (vend/prod 0x4e8/0x6761) is not claimed by any active driver.
Jan  1 00:00:05 kernel: usb.c: registered new driver audio
Jan  1 00:00:05 kernel: audio.c: v1.0.1:USB Audio Class driver
Jan  1 00:00:05 kernel: Linux video capture interface: v1.00
Jan  1 00:00:05 kernel: SCSI subsystem driver Revision: 1.00
Jan  1 00:00:05 kernel: Initializing USB Mass Storage driver...
Jan  1 00:00:05 kernel: usb.c: registered new driver usb-storage
Jan  1 00:00:06 kernel: scsi0 : SCSI emulation for USB Mass Storage devices
Jan  1 00:00:06 kernel:  Vendor: Samsung  Model: Install Disk      Rev: 0.10
Jan  1 00:00:06 kernel:  Type:  CD-ROM                            ANSI SCSI revision: 02
Jan  1 00:00:06 kernel: USB Mass Storage support registered.
Jan  1 00:00:06 kernel: vlan1: Setting MAC address to  00 22 15 24 22 5c.
Jan  1 00:00:06 kernel: VLAN (vlan1):  Underlying device (eth0) has same MAC, not checking promiscious mode.
Jan  1 00:00:06 dnsmasq[70]: read /etc/hosts - 2 addresses
Jan  1 00:00:07 kernel: Universal TUN/TAP device driver 1.5 (C)1999-2002 Maxim Krasnyansky
Jan  1 00:00:07 kernel: USB device disconnected from the SCSI subsystem
Jan  1 00:00:11 dnsmasq[70]: read /etc/hosts - 2 addresses
Jan  1 00:00:11 dnsmasq[70]: read /etc/hosts - 2 addresses
Jan  1 00:00:11 dnsmasq[70]: using nameserver 94.25.128.74#53
Jan  1 00:00:11 dnsmasq[70]: using nameserver 94.25.208.74#53

---

Quote:

---

Originally Posted by theMIROn

à êàê æå ìàðøðóò 224.0.0.0/4?
ïðîøèâêà Îëåãà èëè íàøà, è, åñëè íàøà òî âîîáùå íåïîíÿòíî çà÷åì (è êàê) èñïîëüçóåòñÿ âíåøíèé madwimax, åñëè îí óæå âêëþ÷åí â ïðîøèâêó.


ß ïðîçðà÷íî íàìåêàë åùå íà ïðåäûäóùèõ ñòðàíèöàõ, ÷òî âûáðàííûé ïóòü î÷èñòêè òàáëèö iptables - íåëîãè÷íûé è íåïðàâèëüíûé, ïðèâîäÿùèé ê îòñóòñòâèþ çàùèòû è àáñîëþòíîìó óäàëåíèþ íàñòðîåê èç web ìîðäû.
òî ÷òî íóæíî - ïðîïèñûâàåòñÿ â Visrual Servers è â ñêðèïòå madwimax events.sh äîáàâëÿåòñÿ ïðè ïîäíÿòèè ñîåäèíåíèÿ â òàáëèöó VSERVER.

Ïîýòîìó íå ñòîèò ñîâåòîâàòü îñòàëüíûì òî, â ÷åì íå òîëüêî íå ðàçîáðàëèñü, íî è òî, ÷òî âîîáùå íåäîïîíèìàåòå.

---

Ñîáñòâåííî, à ïðî êàêóþ âû çàùèòó ãîâîðèòå? è êòî âàì âîîáùå ñêàçàë, ÷òî îíà ìíå íóæíà? ß âïèñàë â èïòàéáëñ, òå ïðàâèëà, êîòîðûå ìíå áûëè íóæíû äëÿ ðàáîòû...

Âîçâðàùàÿñü ê òåìå ôîðóìà, ó ìåíÿ íà âàøåé ïðîøèâêè âîîáùå íå çàâåëîñü íè÷åãî... òàê ÷òî ãîâîðèë ïðî 1.9.2.7.-10

È â çàâåðøåíèè, õîòåë åùå ðàç ïîâòîðèòü, ÿ íèêîìó íè÷åãî íå ñîâåòóþ, ÷èòàéòå âíèìàòåëüíåé ôîðóì, ÿ íàïèñàë âîïðîñ "êòî è êàê ðåøàë", èáî ñàì ïûòàþñü ðåøèòü äàííóþ ïðîáëåìó!!!

2all: ëàäíî, ïîïðîáóþ ñäåëàòü âàì flashfs äëÿ wimax

È êîãäà æäàòü, ïðèìåðíî?
Âðåìåííîãî ðåøåíèÿ íåò?

Quote:

---

Originally Posted by theMIROn

2all: ëàäíî, ïîïðîáóþ ñäåëàòü âàì flashfs äëÿ wimax

---

Óâàæàåìû ãîñïîäà!
Ìîæåò ÿ ÷åãî òî íå ïîíèìàþ, ïîïðàâüòå ïîæàëóéñòà, ïîñëå ïðîøèâêè îò îëåãà 1.9.2.7-10, äåëàþ ñëåäóþùèå:

Code:

---

umount /opt
umount /tmp/mnt/disc0_1

echo -e -n d\n1\nn\np\n1\n512\nw | fdisk /dev/scsi/host0/bus0/target0/lun0/part1 < /tmp/fdisk.cfg

mke2fs -j /dev/scsi/host0/bus0/target0/lun0/part1

mount -o sync,noatime,rw /dev/scsi/host0/bus0/target0/lun0/part1 /opt

cd /tmp
wget http://lvk.cs.msu.su/~lasaine/madwimax/wl500g/libusb-1.0-mipsel.tgz
wget http://lvk.cs.msu.su/~lasaine/madwimax/wl500g/madwimax-latest-mipsel.tgz
wget http://lvk.cs.msu.su/~lasaine/madwimax/wl500g/udhcpc-script.tgz
cd /
tar -xzf /tmp/libusb-1.0-mipsel.tgz
tar -xzf /tmp/madwimax-latest-mipsel.tgz
tar -xzf /tmp/udhcpc-script.tgz
rm /tmp/libusb-1.0-mipsel.tgz /tmp/madwimax-latest-mipsel.tgz /tmp/udhcpc-script.tgz

mkdir -p /usr/local/sbin/
echo "#!/bin/sh" > /usr/local/sbin/post-mount
echo "mount -o sync,noatime,rw /dev/scsi/host0/bus0/target0/lun0/part1 /opt" >> /usr/local/sbin/post-mount
echo "mount -o bind /tmp/mnt/disc0_1 /opt" >> /usr/local/sbin/post-mount
echo "insmod /lib/modules/tun.o" >> /usr/local/sbin/post-mount
echo "(while true; do /opt/sbin/madwimax -qof; sleep 10; done) &" >> /usr/local/sbin/post-mount
chmod +x /usr/local/sbin/post-mount

ipkg.sh update
ipkg.sh install ipkg-opt

flashfs save
flashfs commit
flashfs enable

reboot

---

ïîñëå ðåáóòà ïîÿâëÿåòñÿ èíòåðôàéñ wimax0, íó è âñå ðàáîòàåò ïî ñóòè... ïðè ïåðåïðîøèâêè 1.9.2.7-d è äàëüíåéøåì âûïîëíåíèè âûøå èçëîæåííîãî êîäà, èíòåðôàéñ íå ïîÿâëÿåòñÿ, â ÷åì òðàáë?

ñêàæèòå, à êàê mtu 1300 âûñòàâèòü - ïîëîâèíà ñàéòîâ íå îòêðûâàåòñÿ...

Quote:

---

Originally Posted by theMIROn

2all: ëàäíî, ïîïðîáóþ ñäåëàòü âàì flashfs äëÿ wimax

---

Åñòü ëè êàêèå-íèáóäü óñïåõè?

ñêàæèòå, êàêèå åñòü ðåøåíèÿ îò çàâèñàíèÿ ñâèñòêà â WL-500gpv2

Quote:

---

Originally Posted by cainer

ñêàæèòå, êàêèå åñòü ðåøåíèÿ îò çàâèñàíèÿ ñâèñòêà â WL-500gpv2

---

Ïðîñòî ïèíãîâàòü êàêîé íèòü äîñòóïíûé õîñò !

à åùå ëó÷øå åñëè îí íå ïèíãóåòñÿ ïåðåçàïóñêàòü madwimax

Quote:

---

Originally Posted by ferrum26

ip route add 224.0.0.0/4 dev wimax0
ip route add default dev wimax0

---

Èòàê, ââîäîì ýòèõ ñòðîê â System Command, èíòåðíåò äåéñòâèòåëüíî ïîÿâëÿåòñÿ, íî åñëè ðîóòåð àâàðèéíî èëè ïðèíóäèòåëüíî âûêëþ÷àåòñÿ, ïðè âêë. ðîóòû ñêèäûâàþòñÿ. è ïðèõîäèòñÿ âáèâàòü èõ çàíîâî. Íåóæåëè íåëüçÿ ýòîãî ñäåëàòü àâòîìàòè÷åñêè ïðè âêë..
Åñëè ìîæíî, òî êàê? Æåëàòåëüíî, ïî-ïîäðîáíåå!
:)

Quote:

---

Originally Posted by iMelord

Èòàê, ââîäîì ýòèõ ñòðîê â System Command, èíòåðíåò äåéñòâèòåëüíî ïîÿâëÿåòñÿ, íî åñëè ðîóòåð àâàðèéíî èëè ïðèíóäèòåëüíî âûêëþ÷àåòñÿ, ïðè âêë. ðîóòû ñêèäûâàþòñÿ. è ïðèõîäèòñÿ âáèâàòü èõ çàíîâî. Íåóæåëè íåëüçÿ ýòîãî ñäåëàòü àâòîìàòè÷åñêè ïðè âêë..
Åñëè ìîæíî, òî êàê? Æåëàòåëüíî, ïî-ïîäðîáíåå!
:)

---

Äîáàâèòü èõ â ôàéë post-firewall
×òî ýòî òàêîå, è êàê äîáàâëÿòü - åñòü â èíñòðóêöèÿõ ñ íóëÿ.

Quote:

---

Originally Posted by vectorm

Äîáàâèòü èõ â ôàéë post-firewall
×òî ýòî òàêîå, è êàê äîáàâëÿòü - åñòü â èíñòðóêöèÿõ ñ íóëÿ.

---

 êàêîì âèäå èõ äîáàâëÿòü?  òàêîì: ip route add 224.0.0.0/4 dev wimax0
ip route add default dev wimax0? :eek:

Quote:

---

Originally Posted by iMelord

 êàêîì âèäå èõ äîáàâëÿòü?  òàêîì: ip route add 224.0.0.0/4 dev wimax0
ip route add default dev wimax0? :eek:

---

Äà, ÷òî â ýòîì ñòðàííîãî???

Quote:

---

Originally Posted by iMelord

Íåóæåëè íåëüçÿ ýòîãî ñäåëàòü àâòîìàòè÷åñêè ïðè âêë..

---

Ïåðåëèñòíèòå ñòðàíèöó, òàì ñêàçàíî, ÷òî íóæíî äîáàâëÿòü â event.sh

Quote:

---

Originally Posted by vectorm

Äîáàâèòü èõ â ôàéë post-firewall

---

Íåò, ò.ê. ðàáîòà ñ WiMax ïîñòðîåíà íà ñêðèïòàõ, post-firewall, ïî-ìîåìó, íå ðàáîòàåò