Åùå ðàç âîïðîñ ïðî ñàéò íà êîìïå â îáõîä ðîóòåðà

**rboiko** · 17-01-2009, 17:14

Àäðåñ ðîóòåðà 192.168.1.1 Ïðîâàéäåð âûäàåò àäðåñ â ëîêàëüíîé ñåòè: 10.10.10.10
Àäðåñ êîìïà 192.168.1.2

Â ðîóòåðå ïîìåíÿë ïîðòû, ÷òîáû web-èíòåðôåéñ ãðóçèëñÿ ïî ïîðòó 8081.
Ïî àäðåñó http://10.10.10.10 çàãðóæàåòñÿ ñàéò, íàõîäÿùèéñÿ íà ðîóòåðå.

Êàê íàñòðîèòü ðîóòåð, ÷òîáû ïðè îáðàùåíèþ èç ëîêàëüíîé ñåòè ïî àäðåñó http://10.10.10.10 çàãðóæàëñÿ ñàéò ñ êîìïüòåðà, à íå ñ ðîóòåðà.
Èëè íàïðèìåð ïî àäðåñó http://10.10.10.10:82 çàãðóæàëñÿ ñàéò ñ êîìïüþòåðà, à ïî àäðåñó http://10.10.10.10 ñ ðîóòåðà.

Óæå âñå ïåðåïðîáîâàë. Ïûòàëñÿ íàñòðàèâàòü Virtual Host, èãðàëñÿ ñ iptables. Íè ÷åãî íå ïîëó÷àåòñÿ.
Õîòåëîñü áû óâèäåò ïîäðîáíóþ èíñòðóêöèþ íà ýòó òåìó. Óæå ãîëîâó ñëîìàë. Íî çíàíèé íå õâàòàåò.

**DemonGloom** · 18-01-2009, 06:09

Ó ìåíÿ èñïîëüçóåòñÿ ïîäîáíàÿ êîíñòðóêöèÿ:

iptables -I INPUT -m tcp -p tcp --dport 82 -j ACCEPT
iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 82 -j DNAT --to-destination 192.168.1.2:82

Ëèáî ìîæíî --to-destination 192.168.1.2:80 , åñëè ñåðâåð íà êîìïüþòåðå çàïóùåí íà ñòàíäàðòíîì ïîðòó.

**rboiko** · 18-01-2009, 12:07

Originally Posted by DemonGloom

Ó ìåíÿ èñïîëüçóåòñÿ ïîäîáíàÿ êîíñòðóêöèÿ:

iptables -I INPUT -m tcp -p tcp --dport 82 -j ACCEPT
iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 82 -j DNAT --to-destination 192.168.1.2:82

Ëèáî ìîæíî --to-destination 192.168.1.2:80 , åñëè ñåðâåð íà êîìïüþòåðå çàïóùåí íà ñòàíäàðòíîì ïîðòó.

íå ïîëó÷èëîñü

**DemonGloom** · 18-01-2009, 14:26

×òî ïîêàçûâàåò ïî 192.168.1.2:82?
×òî ïîêàçûâàåò ñíàðóæè?
×òî âîîáùå ãîâîðèò ïðè ýòîì?

**rboiko** · 18-01-2009, 17:44

Originally Posted by DemonGloom

×òî ïîêàçûâàåò ïî 192.168.1.2:82?
×òî ïîêàçûâàåò ñíàðóæè?
×òî âîîáùå ãîâîðèò ïðè ýòîì?

Ïî 192.168.1.2:82 ãðóçèòñÿ ñàéò
ñ íàðóæè ïî 10.10.10.10:82 Ñòðàíèöà íå íàéäåíà

**rboiko** · 20-01-2009, 12:30

Ìûñëåé ïî ìîåé ïðîáëåìå íè ó êîãî íåò ?

**Power** · 20-01-2009, 18:29

Originally Posted by rboiko

Êàê íàñòðîèòü ðîóòåð, ÷òîáû ïðè îáðàùåíèþ èç ëîêàëüíîé ñåòè ïî àäðåñó http://10.10.10.10 çàãðóæàëñÿ ñàéò ñ êîìïüòåðà, à íå ñ ðîóòåðà.
Èëè íàïðèìåð ïî àäðåñó http://10.10.10.10:82 çàãðóæàëñÿ ñàéò ñ êîìïüþòåðà, à ïî àäðåñó http://10.10.10.10 ñ ðîóòåðà.

Ìîæíî ðåàëèçîâàòü ëþáîé èç ýòèõ âàðèàíòîâ. Íî äëÿ ïåðâîãî ïîíàäîáèòñÿ îïðåäåëèòü, ÷òî ïîäðàçóìåâàåòñÿ ïîä "ëîêàëüíîé ñåòüþ", à òî÷íåå - êàêèå IP-àäðåñà â íå¸ âõîäÿò.
Òàê êàêîé âàðèàíò âàì íóæåí?

**Escoode** · 20-01-2009, 20:18

à ðàçâå íå íàñòðîéêè virtual server çà ýòî îòâå÷àþò?
íàäî óêàçàòü
portrange 80
local IP - àäðåñ òâîåãî êîìïà ñ âåáñåðâåðîì â äîìàøøíåé ñåòè
local port 80
protocol tcp

âñ¸ äîëæíî ÷óäåñíî ðàáîòàòü

**rboiko** · 21-01-2009, 10:31

Originally Posted by Power

Ìîæíî ðåàëèçîâàòü ëþáîé èç ýòèõ âàðèàíòîâ. Íî äëÿ ïåðâîãî ïîíàäîáèòñÿ îïðåäåëèòü, ÷òî ïîäðàçóìåâàåòñÿ ïîä "ëîêàëüíîé ñåòüþ", à òî÷íåå - êàêèå IP-àäðåñà â íå¸ âõîäÿò.
Òàê êàêîé âàðèàíò âàì íóæåí?

Ëîêàëüíàÿ ïîäñåòü - 10.0.0.0

Ìíå òóò ìûñëü ïðèøëà: Ïðîñêàíèðîâàë ïîðòû ïðîãðàììîé èç âíå. Â ðåçóëüòàòå îêàçàëîñü, ÷òî ïîðò 80 îòêðûò, ïîðò 82 - çàêðûò.
äîáàâèë êîìàíäîé iptables ïîðò 82:

PHP Code:


iptables -I INPUT -p tcp --dport 82:82 -j ACCEPT

iptables -I INPUT -p udp --dport 82:82 -j ACCEPT

ïîñëå ýòîãî iptables ïîêàçûâàåò, ÷òî âðîäå ïîðò 82 îòêðûò, íî ïðè ñêàíèðîâàíèè ïîðòîâ âèäíî ÷òî ïîðò 82 âñåòàêè çàêðûò.

Code:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             anywhere           udp dpt:82
ACCEPT     tcp  --  anywhere             anywhere           tcp dpt:82
ACCEPT     udp  --  anywhere             anywhere           udp dpts:mysql:3307
ACCEPT     tcp  --  anywhere             anywhere           tcp dpts:mysql:3307
ACCEPT     udp  --  anywhere             anywhere           udp dpts:51777:51780
ACCEPT     tcp  --  anywhere             anywhere           tcp dpts:51777:51780
DROP       all  --  anywhere             anywhere           state INVALID
ACCEPT     all  --  anywhere             anywhere           state RELATED,ESTABLISHED
ACCEPT     all  --  anywhere             anywhere           state NEW
ACCEPT     all  --  anywhere             anywhere           state NEW

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere           state INVALID
TCPMSS     tcp  --  anywhere             anywhere           tcp flags:SYN,RST,ACK/SYN TCPMSS clamp to PMTU
ACCEPT     all  --  anywhere             anywhere           state RELATED,ESTABLISHED
DROP       all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere           ctstate DNAT
ACCEPT     all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain MACS (0 references)
target     prot opt source               destination

Chain SECURITY (0 references)
target     prot opt source               destination
RETURN     tcp  --  anywhere             anywhere           tcp flags:SYN,RST,ACK/SYN limit: avg 1/sec burst 5
RETURN     tcp  --  anywhere             anywhere           tcp flags:FIN,SYN,RST,ACK/RST limit: avg 1/sec burst 5
RETURN     udp  --  anywhere             anywhere           limit: avg 5/sec burst 5
RETURN     icmp --  anywhere             anywhere           limit: avg 5/sec burst 5
DROP       all  --  anywhere             anywhere

Chain logaccept (0 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere           state NEW LOG level warning tcp-sequence tcp-options ip-options prefix `ACCEPT '
ACCEPT     all  --  anywhere             anywhere

Chain logdrop (0 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere           state NEW LOG level warning tcp-sequence tcp-options ip-options prefix `DROP '
DROP       all  --  anywhere             anywhere

èëè ÿ âñå òàêè íå â òó ñòîðîíó êîïàþ. ß óæå ÕÇ

**Power** · 21-01-2009, 22:42

Èòàê, äîïóñòèì, ÷òî âàì íóæåí ïåðâûé âàðèàíò, òî åñòü, ÷òîáû ïðè îáðàùåíèè èç ëîêàëüíîé ñåòè (ò.å. èç äèàïàçîíà 10.0.0.0/8, êàê ÿ ïîíÿë) ïî àäðåñó http://10.10.10.10 çàãðóæàëñÿ ñàéò ñ êîìïüþòåðà, à ïðè îáðàùåíèè ïî òîìó æå àäðåñó èç âñåõ îñòàëüíûõ ìåñò - ñàéò ñ ðîóòåðà.

1. Ðîóòåð. Íàñòðàèâàåì ñàéò íà 80 ïîðò (ýòî ñàìè). Îòêðûâàåì ýòîò ïîðò â iptables (åñëè âû ñîáèðàåòåñü òóäà çàõîäèòü íå òîëüêî èç ñâîåé ñåòè)

Code:

iptables -I INPUT 1 -p tcp -m tcp --dport 80 -m state --state NEW -j ACCEPT

2. Êîìïüþòåð. Íàñòðàèâàåì ñàéò íà 80 ïîðò (îïÿòü ñàìè). Äàëåå âûïîëíÿåì ïðîáðîñ ïîðòà 80 ñ ðîóòåðà íà êîìï ïðè óñëîâèè, ÷òî àäðåñ èñòî÷íèêà âõîäèò â ïîäñåòü 10.0.0.0/8

Code:

iptables -t nat -I VSERVER 1 -p tcp -m tcp --dport 80 -s 10.0.0.0/8 -j DNAT --to-destination 192.168.1.2

Äà, è ïðè ýòîì ïåðåíàïðàâëåíèé â Virtual server (÷åðåç âåá-èíòåðôåéñ) äîáàâëÿòü íå íóæíî.
Òåïåðü äîëæíî ðàáîòàòü.

**rboiko** · 25-01-2009, 12:46

Originally Posted by Power

Èòàê, äîïóñòèì, ÷òî âàì íóæåí ïåðâûé âàðèàíò, òî åñòü, ÷òîáû ïðè îáðàùåíèè èç ëîêàëüíîé ñåòè (ò.å. èç äèàïàçîíà 10.0.0.0/8, êàê ÿ ïîíÿë) ïî àäðåñó http://10.10.10.10 çàãðóæàëñÿ ñàéò ñ êîìïüþòåðà, à ïðè îáðàùåíèè ïî òîìó æå àäðåñó èç âñåõ îñòàëüíûõ ìåñò - ñàéò ñ ðîóòåðà.

1. Ðîóòåð. Íàñòðàèâàåì ñàéò íà 80 ïîðò (ýòî ñàìè). Îòêðûâàåì ýòîò ïîðò â iptables (åñëè âû ñîáèðàåòåñü òóäà çàõîäèòü íå òîëüêî èç ñâîåé ñåòè)

Code:

iptables -I INPUT 1 -p tcp -m tcp --dport 80 -m state --state NEW -j ACCEPT

2. Êîìïüþòåð. Íàñòðàèâàåì ñàéò íà 80 ïîðò (îïÿòü ñàìè). Äàëåå âûïîëíÿåì ïðîáðîñ ïîðòà 80 ñ ðîóòåðà íà êîìï ïðè óñëîâèè, ÷òî àäðåñ èñòî÷íèêà âõîäèò â ïîäñåòü 10.0.0.0/8

Code:

iptables -t nat -I VSERVER 1 -p tcp -m tcp --dport 80 -s 10.0.0.0/8 -j DNAT --to-destination 192.168.1.2

Äà, è ïðè ýòîì ïåðåíàïðàâëåíèé â Virtual server (÷åðåç âåá-èíòåðôåéñ) äîáàâëÿòü íå íóæíî.
Òåïåðü äîëæíî ðàáîòàòü.

Ñïàñèáî, âñå òàêè ïîëó÷èëîñü, íî òîëüêî ñ 82 ïîðòîì ïî÷åìó òî, ñ 80 íè êàê

Thread: Åùå ðàç âîïðîñ ïðî ñàéò íà êîìïå â îáõîä ðîóòåðà

Thread Tools

Rate This Thread

Display

Åùå ðàç âîïðîñ ïðî ñàéò íà êîìïå â îáõîä ðîóòåðà

Similar Threads

È åùå ðàç ïðî ñîäåðæàíèå òîððåíòîâ êèðèëëèöåé

Âîïðîñ ïðî ðåæèìû ðîóòåðà

Posting Permissions