Íàñòðîéêà proxy íà Asus WL-500gP

**YAG** · 13-05-2008, 15:55

Originally Posted by dizzy128

Âñå ýòî ïðîäåëàë, íèêàêèõ èçìåíåíèé :-(
Ìû ïðàâèëüíî äðóã äðóãà ïîíèìàåì? - ïðîêñè äîëæåí áûòü äîñòóïåí èç âíå.
Ãäå æå êîñÿê...

Îáà èíòåðôåéñà â êîíôèãå ïðîïèñûâàþòñÿ vlan1 è äëÿ ýòîãî íå íàäî ðûòü âåñü èíåò, à äîñòàòî÷íî íà ýòîì ôîðóìå ïî ïîèñêó íàéòè ÷òî êàêîé èíòåðôåéñ â ñåáÿ âêëþ÷àåò. Âèðòóàë ñåðâåð äåëàòü íå íàäî. È íå çàáûòü â êîíôèãå ïðîïèñàòü äèàïàçîí àéïè àäðåñîâ ñ êîòîðûõ ðàçðåøåíî ïîäêëþ÷åíèå. Ïîêà ÿ íå ðàñêîìåíòèë ýòó ñòðî÷êó è íå ïðîïèñàë òàì ÷òî íàäî àñÿ íå ïîäêëþ÷àëàñü.

**Kolandr** · 13-05-2008, 17:17

Originally Posted by dizzy128

ß áûë áû íåñêàçàííî ñ÷àñòëèâ, åñëè áû ìåíÿ íàó÷èëè åãî óñòàíàâëèâàòü! :-)

1.Êîïèðóåøü ôàéëèê 3proxy â /opt/bin
2. â /opt/etc ñîçäàåøü 3proxy.cfg ñ òàêèì ñîäåðæàíèåì:

Code:

daemon

logformat "L%C - %U [%d/%o/%Y:%H:%M:%S %z] ""%T"" %E %I %O %N/%R:%r"
log /opt/var/log/3proxy.log D
rotate 30

flush  
auth useronly 
icqpr -t 5190 login.icq.com 5190

3. Îòêðûâàåøü ïîðò 5190 íà ðîóòåðå, ÷òîáû ìîæíî áûëî ê íåìó êîííåêòèòñÿ.
äëÿ ýòîãî â /tmp/local/sbin/post-firewall äîáàâëÿåøü ñòðîêè

Code:

iptables -I INPUT -p tcp --dport 5190  -j ACCEPT

4. Åñëè õî÷åøü, ÷òîáû 3proxy ïîñëå ðåáóòà ðîóòåðà ñàì ñòàðòîâàë, äîáàâëÿåøü â /tmp/local/sbin/post-mount ñòðîêó:

Code:

/opt/bin/3proxy /opt/etc/3proxy.cfg

5. Òåïåðü ñîõðàíÿåì ñäåëàííîå. âûïîëíÿåì:

Code:

flashfs save && flashfs commit && flashfs enable && reboot

Ðîóòåð ïåðåçàãðóçèòñÿ è äîëæåí ñòàðòàíóòü 3proxy. ìîæåøü ïîñìîòðåòü åãî ÷åðåç ps.
åñëè îí âèñèò - òî âñå ñäåëàë ïðàâèëüíî è ìîæíî êîííåêòèòñÿ ê ñâîåìó icq-ðåòðèâåðó.
ââîäèøü â êëèåíòå IP ðîóòåðà âíåøíèé è ñòàíäàðòíûé ïîðò 5190. íà êîòîðûé ïîâåñèë 3proxy ( â êîíôèãå ìîæíî èçìåíèòü).
p.s. åñëè íå ñåêðåò, ÷òî çà ëþáèìûé êëèåíò è êàêàÿ ïëàòôîðìà?

**dizzy128** · 13-05-2008, 17:18

Originally Posted by YAG

Îáà èíòåðôåéñà â êîíôèãå ïðîïèñûâàþòñÿ vlan1 è äëÿ ýòîãî íå íàäî ðûòü âåñü èíåò, à äîñòàòî÷íî íà ýòîì ôîðóìå ïî ïîèñêó íàéòè ÷òî êàêîé èíòåðôåéñ â ñåáÿ âêëþ÷àåò. Âèðòóàë ñåðâåð äåëàòü íå íàäî. È íå çàáûòü â êîíôèãå ïðîïèñàòü äèàïàçîí àéïè àäðåñîâ ñ êîòîðûõ ðàçðåøåíî ïîäêëþ÷åíèå. Ïîêà ÿ íå ðàñêîìåíòèë ýòó ñòðî÷êó è íå ïðîïèñàë òàì ÷òî íàäî àñÿ íå ïîäêëþ÷àëàñü.

Âñ¸ âðîäå òàê... Íî âñå ðàâíî - íå îòêëèêàåòñÿ :-(
Âîò ÷òî âûäàåò iptables --list (ìîæåò, ÷òî çàêðûòî?)

Code:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     tcp  --  anywhere             anywhere           tcp dpt:55555 
DROP       all  --  anywhere             anywhere           state INVALID 
ACCEPT     all  --  anywhere             anywhere           state RELATED,ESTABLISHED 
ACCEPT     all  --  anywhere             anywhere           state NEW 
ACCEPT     all  --  anywhere             anywhere           state NEW 
ACCEPT     udp  --  anywhere             anywhere           udp spt:bootps dpt:bootpc 
ACCEPT     tcp  --  anywhere             anywhere           tcp dpt:ftp 
DROP       all  --  anywhere             anywhere           

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere           
DROP       all  --  anywhere             anywhere           state INVALID 
TCPMSS     tcp  --  anywhere             anywhere           tcp flags:SYN,RST,ACK/SYN TCPMSS clamp to PMTU 
RETURN     all  --  anywhere             192.168.1.5        
RETURN     all  --  anywhere             192.168.1.4        
RETURN     all  --  anywhere             192.168.1.3        
RETURN     all  --  anywhere             192.168.1.2        
ACCEPT     all  --  anywhere             anywhere           state RELATED,ESTABLISHED 
DROP       all  --  anywhere             anywhere           
DROP       all  --  anywhere             anywhere           
ACCEPT     all  --  anywhere             anywhere           ctstate DNAT 
DROP       all  --  anywhere             anywhere           

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain MACS (0 references)
target     prot opt source               destination         

Chain SECURITY (0 references)
target     prot opt source               destination         
RETURN     tcp  --  anywhere             anywhere           tcp flags:SYN,RST,ACK/SYN limit: avg 1/sec burst 5 
RETURN     tcp  --  anywhere             anywhere           tcp flags:FIN,SYN,RST,ACK/RST limit: avg 1/sec burst 5 
RETURN     udp  --  anywhere             anywhere           limit: avg 5/sec burst 5 
RETURN     icmp --  anywhere             anywhere           limit: avg 5/sec burst 5 
DROP       all  --  anywhere             anywhere           

Chain logaccept (0 references)
target     prot opt source               destination         
LOG        all  --  anywhere             anywhere           state NEW LOG level warning tcp-sequence tcp-options ip-options prefix `ACCEPT ' 
ACCEPT     all  --  anywhere             anywhere           

Chain logdrop (0 references)
target     prot opt source               destination         
LOG        all  --  anywhere             anywhere           state NEW LOG level warning tcp-sequence tcp-options ip-options prefix `DROP ' 
DROP       all  --  anywhere             anywhere

**dizzy128** · 13-05-2008, 17:39

Originally Posted by Kolandr

1.Êîïèðóåøü ôàéëèê 3proxy â /opt/bin
2. â /opt/etc ñîçäàåøü 3proxy.cfg ñ òàêèì ñîäåðæàíèåì:

Code:

daemon

logformat "L%C - %U [%d/%o/%Y:%H:%M:%S %z] ""%T"" %E %I %O %N/%R:%r"
log /opt/var/log/3proxy.log D
rotate 30

flush  
auth useronly 
icqpr -t 5190 login.icq.com 5190

3. Îòêðûâàåøü ïîðò 5190 íà ðîóòåðå, ÷òîáû ìîæíî áûëî ê íåìó êîííåêòèòñÿ.
äëÿ ýòîãî â /tmp/local/sbin/post-firewall äîáàâëÿåøü ñòðîêè

Code:

iptables -I INPUT -p tcp --dport 5190  -j ACCEPT

4. Åñëè õî÷åøü, ÷òîáû 3proxy ïîñëå ðåáóòà ðîóòåðà ñàì ñòàðòîâàë, äîáàâëÿåøü â /tmp/local/sbin/post-mount ñòðîêó:

Code:

/opt/bin/3proxy /opt/etc/3proxy.cfg

5. Òåïåðü ñîõðàíÿåì ñäåëàííîå. âûïîëíÿåì:

Code:

flashfs save && flashfs commit && flashfs enable && reboot

Ðîóòåð ïåðåçàãðóçèòñÿ è äîëæåí ñòàðòàíóòü 3proxy. ìîæåøü ïîñìîòðåòü åãî ÷åðåç ps.
åñëè îí âèñèò - òî âñå ñäåëàë ïðàâèëüíî è ìîæíî êîííåêòèòñÿ ê ñâîåìó icq-ðåòðèâåðó.
ââîäèøü â êëèåíòå IP ðîóòåðà âíåøíèé è ñòàíäàðòíûé ïîðò 5190. íà êîòîðûé ïîâåñèë 3proxy ( â êîíôèãå ìîæíî èçìåíèòü).

Âñå äåëàþ òàê - ðåçóëüòàò ïðè ïîïûòêå çàïóñêà:
/bin/sh: /opt/bin/3proxy: Accessing a corrupted shared library

**YAG** · 14-05-2008, 10:29

Ïîñòàâèë 3proxy. Ñóïåð øòóêà.

dizzy128, Âû ïðàâèëüíûé ðåïîçèòàðèé èñïîëüçóåòå? Ïàêåò uclibc-opt óñòàíîâëåí? Åñëè íåò, òî

Code:

ipkg update
ipkg install uclibc-opt

**dizzy128** · 14-05-2008, 18:22

Originally Posted by YAG

Ïîñòàâèë 3proxy. Ñóïåð øòóêà.

dizzy128, Âû ïðàâèëüíûé ðåïîçèòàðèé èñïîëüçóåòå? Ïàêåò uclibc-opt óñòàíîâëåí? Åñëè íåò, òî

Code:

ipkg update
ipkg install uclibc-opt

Òåïåðü åñòü ïðîãðåññ - îáíîâèë ïàêåòû (ipkg upgrade), òåïåðü îøèáîê íå âûäàåòñÿ, 3proxy âèñèò â ïðîöåññàõ, âñå âðîäå íîðìàëüíî.
Ìàëî òîãî - îí ðàáîòàåò, íî òîëüêî èçíóòðè! À ìíå íàäî ñíàðóæè

Ñòðî÷êà
iptables -I INPUT -p tcp --dport 5190 -j ACCEPT â post-firewall ïðèñóòñòâóåò, òî åñòü ïî èäåå ïîðò 5190 ÄÎËÆÅÍ ÁÛÒÜ îòêðûò. Íî îí íå îòâå÷àåò! Êàêàÿ åùå ìîæåò áûòü ïðè÷èíà? ß òàê ïîäîçðåâàþ, ÷òî è nylon ïî ýòîé æå ïðè÷èíå íå õîòåë îòâå÷àòü. Ãäå ÿ ìîã çàêðûòü äîñòóï ñíàðóæè? ß æå ïîëíûé ëîõ, ñòàëî áûòü íè÷åãî ìóäðåíîãî ïîñòàâèòü íå ìîã.

×òî èíòåðåñíî, âñå ïîðòû íà èãðîâûå ñåðâåðà, IP òåëåôîí (îòäåëüíûé äåâàéñ), íà êîììóíèêàòîð (òàì òîæå êëèåíò IP òåëåôîíèè) - îòêðûòû èçâíå è íîðìàëüíî ïåðåíàïðàâëÿþòñÿ íà íóæíîãî êëèåíòà è íà íóæíûé ïîðò. Íà âñÿêèé ñëó÷àé ïðèêëåèâàþ âî âëîæåíèè ðåçóëüòàò êîìàíäû iptables --list...iptableslist.txt
************************************************** *****
Âñå. Èçâèíèòå çà ìîþ òóïîñòü.
Ïðîñòî â ñâîå âðåìÿ ÿ òàê äîëãî êîðÿ÷èëñÿ ñ IP òåëåôîíîì, ÷òî ïðîáðîñèë íà íåãî ÂÑÅ ïîðòû, îò 1 äî 65535. Äà òàê è îñòàâèë, çàáûë ïîìåíÿòü íà íóæíûé 5060 äëÿ ñèïíåòà. Âîò òóäà è ëîìèëàñü àñüêà

**UNiRO** · 24-06-2008, 16:18

Ó ìåíÿ ïðîáëåìà òàêàÿ.
Åñòü WL-500gV2(ñ ïîñëåäíåé ïðîøèâêîé îò Îëåãà 10) íà ðàáîòå ñ æèðíûì, áåçëèìèòíûì êàíàëîì.
Åñòü äîìà êîìï, ñ ëèìèòíûì êàíàëîì è áîëåå óçêèì. È äîì è ðàáîòà ïîäêëþ÷åíû ê îäíîìó è òîìóæå ïðîâàéäåðó â îäíîì ãîðîäå, ëîêàëêà ó ïðîâàéäåðà áåñïëàòíàÿ.IP âåçäå äèíàìè÷åñêèé
Íóæíî èç äîìà çàõîäèòü ÷åðåç WL-500g2 ðàáî÷èé è âûõîäèòü âî âíåøíèé èíòåðíåò.
Ñäåëàë â IP-Config->ROUTE:
Network/Host IP -IP äîìàøíåãî êîìïà
Netmask-255.255.255.0
Getewey-IP ñåðâàêà ïðîâàéäåðà.
Metric-1
Interface-Wan

Íå ðàáîòàåò

Îáüÿñíèòå íå ðàçóìíîìó, êàê ñäåëàòü??

**Cr00t** · 02-09-2008, 11:48

Çäðàâñòâóéòå, ãóðó WL500gP!

Õîòåëîñü áû ðàçðåøèòü òàêóþ ïðîáëåìó.

Ìîé êîìïüþòåð âûõîäèòü â èíòåðíåò ÷åðåç ïðîêñè (192.168.1.11), òåïåðü, ò.ê. êóïèë ýòîò ÷óäåñíûé ðîóòåð, õî÷åòñÿ åãî íàñòðîèòü íà ðàáîòó ñ ïðîêñåé. Êàê áû ýòî ðåàëèçîâàòü?

Ñïåöèàëüíûõ ïîëåé äëÿ ïðîêñè íå íàøåë (

**therox** · 02-09-2008, 12:00

Originally Posted by Cr00t

Çäðàâñòâóéòå, ãóðó WL500gP!

Õîòåëîñü áû ðàçðåøèòü òàêóþ ïðîáëåìó.

Ìîé êîìïüþòåð âûõîäèòü â èíòåðíåò ÷åðåç ïðîêñè (192.168.1.11), òåïåðü, ò.ê. êóïèë ýòîò ÷óäåñíûé ðîóòåð, õî÷åòñÿ åãî íàñòðîèòü íà ðàáîòó ñ ïðîêñåé. Êàê áû ýòî ðåàëèçîâàòü?

Ñïåöèàëüíûõ ïîëåé äëÿ ïðîêñè íå íàøåë (

Ò.å. èíòåðíåò ïðèõîäèò ïðîñòî ïî LAN? Â òàêîì ñëó÷àå ðîóòåð WAN'îì ñìîòðèò â ñåòü 192.168.1.*, LAN'îì â íîâóþ ëîêàëüíóþ ñåòêó(íàïðèìåð, 10.0.0.*) ïðîêñè êàê è ðàíüøå ïðîïèñûâàåòñÿ â áðàóçåðå.
Ïî-ìîåìó òàê.

**Cr00t** · 02-09-2008, 12:28

Originally Posted by therox

Ò.å. èíòåðíåò ïðèõîäèò ïðîñòî ïî LAN? Â òàêîì ñëó÷àå ðîóòåð WAN'îì ñìîòðèò â ñåòü 192.168.1.*, LAN'îì â íîâóþ ëîêàëüíóþ ñåòêó(íàïðèìåð, 10.0.0.*) ïðîêñè êàê è ðàíüøå ïðîïèñûâàåòñÿ â áðàóçåðå.
Ïî-ìîåìó òàê.

Èíòåðíåò ïðèõîäèò ïðîñòî ïî LAN ÷åðåç ïðîêñè-ñåðâåð, êîãäà ÿ ê íåìó ïîäñîåäèíÿþñü.

Ìîæåòå ðàçæåâàòü ïî ñëîãàì, ãäå è ÷òî ïðîïèñàòü íàäî? Â êàêîì ðåæèìå óñòðîéñòâî ðàáîòàòü äîëæíî? Ðîóòåð, òî÷êà äîñòóïà, äîìàøíèé øëþç?

**2bars** · 02-09-2008, 13:51

êòî çíàåò òî÷íî, íàïèøèòå ýòîò ïðîöåññ ñðåäñòâàìè Iptables

ÿ êàêòî ïûòàëñÿ íà ïðîêñè ïåðåêèäûâàòü âñå, íî ÷¸òî íå î÷ âûøëî...

Code:

iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to proxy:3128

è òàê

Code:

iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination proxy:3128

**therox** · 02-09-2008, 14:07

Originally Posted by Cr00t

Èíòåðíåò ïðèõîäèò ïðîñòî ïî LAN ÷åðåç ïðîêñè-ñåðâåð, êîãäà ÿ ê íåìó ïîäñîåäèíÿþñü.

Ìîæåòå ðàçæåâàòü ïî ñëîãàì, ãäå è ÷òî ïðîïèñàòü íàäî? Â êàêîì ðåæèìå óñòðîéñòâî ðàáîòàòü äîëæíî? Ðîóòåð, òî÷êà äîñòóïà, äîìàøíèé øëþç?

Åñëè ëèøíèå àäðåñà äîïóñòèìû, òî êàê ðîóòåð (÷òîáû è ðîóòåð âèäåëñÿ â ñåòè è âàø êîìïüþòåð, ñîîòâåòñòâåííî, íóæíî 2 ðàçíûõ ip-àäðåñà è îáà âòûêàòü â LAN), åñëè íåò, òî êàê äîìàøíèé øëþç (WAN íàñòðàèâàåòå íà ëîêàëêó ïðîâàéäåðà, LAN íà ñâîþ ëîêàëêó).

**skelet** · 13-09-2008, 14:33

Íå çíàþ ïî÷åìó, íî ñ äàâíèõ âðåì¸í ÿ íå ìîãó çàõîäèòü íà íåêîòîðûå ñàéòû, òèïà microsoft.com èëè mobile-review.com , êàêàÿ-òî íàñòðîéêà ðîóòåðà íå ïîçâîëÿåò

Îäíàêî íåäàâíî çàìåòèë, ÷òî åñëè âûõîäèòü â èíåò ïîñðåäñòâîì ïîëüçîâàíèÿ dropbear â êà÷åñòâå spcks proxy(äèíàìè÷åñêèé ïîðò ôîðâàðäèíã), òî âñ¸ ðàáîòàåò îòëè÷íî!
Îò÷åãî òàê ìîæåò áûòü õîòü ïðèìåðíî?

**vectorm** · 13-09-2008, 20:16

Originally Posted by skelet

Íå çíàþ ïî÷åìó, íî ñ äàâíèõ âðåì¸í ÿ íå ìîãó çàõîäèòü íà íåêîòîðûå ñàéòû, òèïà microsoft.com èëè mobile-review.com , êàêàÿ-òî íàñòðîéêà ðîóòåðà íå ïîçâîëÿåò

Îäíàêî íåäàâíî çàìåòèë, ÷òî åñëè âûõîäèòü â èíåò ïîñðåäñòâîì ïîëüçîâàíèÿ dropbear â êà÷åñòâå spcks proxy(äèíàìè÷åñêèé ïîðò ôîðâàðäèíã), òî âñ¸ ðàáîòàåò îòëè÷íî!
Îò÷åãî òàê ìîæåò áûòü õîòü ïðèìåðíî?

Ïèñàëè óæå äàâíî êàê-òî - íàäî MTU ïîäîáðàòü

**skelet** · 13-09-2008, 21:28

ñòàëî áûòü ïðîêñÿ åãî ìåíÿåò. Õîðîøî, íå ïîäñêàæèòå òîãäà êàê åãî çíà÷åíèå ïîäãëÿäåòü? ( ìíå äóìàåòñÿ íóæíî ëèøü óçíàòü, ÷òî òàì ñòàâèòü ïðîêñÿ è ñäåëàòü òîæå ñàìîå)

Âåáìîðäà ãîâîðèò, ÷òî MTU = 1492,
à ifconfig ppp0, ÷òî MTU:1400

Òåì íå ìåíåå, ñîâåðøåííî íå ÿñíî íà ÷òî åãî çàìåíÿåò dropbear

MTU ïðàâèòñÿ â /tmp/ppp/options.wan0? - íå ñðàáàòûâàåò,
íî ïîëó÷èëîñü èñïîëüçóÿ îáû÷íóþ ifconfig. Òåì íå ìåíåå ýòî íè÷åãî íå äà¸ò, ò.ê. íåïîíÿòíî ÷åìó ÄÎËÆÅÍ áûòü ðàâåí ñåé ïàðàìåòð. Íåñêîëüêî âáèòûõ îò áàëäû öèôåðîê à-ëÿ 1500, 1492 íå ïðîêàòèëî.

Ìîæåòå íàçâàòü ïëèç êðèòåðèé ïî êîòîðîìó èõ ïîäáèðàòü ñëåäóåò, åñëè òàêîâîé èìååòñÿ...

Thread: Íàñòðîéêà proxy íà Asus WL-500gP

Thread Tools

Rate This Thread

Display

Ïîäêëþ÷åíèå ÷åðåç ïðîêñè-ñåðâåð

Ñòðàííîå ïîâåäåíèå ssh â êà÷åñòâå socks proxy

Similar Threads

Íàñòðîéêà IPv6 â WL-500gP

Óñòàíîâêà è íàñòðîéêà 3proxy/tinyproxy server íà ðîóòåðå

Íàñòðîéêà NAT íà WL-500gP èëè ïðîáëåìà ñ ïî÷òîé (smtp)

Íàñòðîéêà darkstat íà wl-500gp

Íàñòðîéêà HP LaserJet P1006 äëÿ Asus WL-500GP

Tags for this Thread

Posting Permissions