[B! iptables] yutamotyã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yutamoty id:yutamoty

iptablesã«é–¢ã™ã‚‹yutamotyã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (14)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Linuxå¥³åéƒ¨ iptableså¾©ç¿’ç·¨
5. Open Cloud Campus 5 Linuxå¥³åéƒ¨ iptableså¾©ç¿’ç·¨ iptablesã®æ©Ÿèƒ½ ï‚§ iptablesã®æ©Ÿèƒ½ã¯ã€å¤§ããã¯ã€Œãƒ‘ã‚±ãƒƒãƒˆãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ã€ã¨ã€ŒNAT (Network Address Translation)ã€ã«åˆ†ã‹ã‚Œã¾ã™ã€‚ â€“ ãƒ‘ã‚±ãƒƒãƒˆãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ã¯ã€Linuxã«ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«æ©Ÿèƒ½ã‚’æä¾›ã™ã‚‹ã‚‚ã®ã§ã€IPãƒ‘ã‚±ãƒƒãƒˆã®é€ä¿¡ã€ å—ä¿¡ã€è»¢é€ã®ãã‚Œãžã‚Œã«ã¤ã„ã¦ã€è¨±å¯æ¡ä»¶ã‚’è¨å®šã—ã¾ã™ã€‚ â€“ NATã¯ã€Linuxã‚µãƒ¼ãƒã‚’ãƒ«ãƒ¼ã‚¿ã¨ã—ã¦ä½¿ç”¨ã™ã‚‹éš›ã«åˆ©ç”¨ã™ã‚‹æ©Ÿèƒ½ã§ã€ãƒ‘ã‚±ãƒƒãƒˆã®è»¢é€æ™‚ã«ã€ãƒ‘ã‚±ãƒƒãƒˆ ã«å«ã¾ã‚Œã‚‹é€ä¿¡å…ƒã€ã‚‚ã—ãã¯å®›å…ˆIPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’å¤‰æ›ã—ã¾ã™ã€‚ â€¢ æ£ç¢ºã«ã¯ã€DNATï¼ˆå®›å…ˆã‚¢ãƒ‰ãƒ¬ã‚¹å¤‰æ›ï¼‰ã€SNATï¼ˆé€ä¿¡å…ƒã‚¢ãƒ‰ãƒ¬ã‚¹å¤‰æ›ï¼‰ã€ãƒžã‚¹ã‚«ãƒ¬ãƒ¼ãƒ‰ï¼ˆSNAT ã®ç‰¹åˆ¥ç‰ˆï¼‰ã®3ç¨®é¡žãŒã‚ã‚Šã¾ã™ã€‚ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆ 192.168.100.10 ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ 192.168.
yutamoty 2014/03/24
linux

iptables
ãƒªãƒ³ã‚¯
Debianä¸Šã§ã®iptablesã®è¨å®šæ–¹æ³•ã®ç¶šã - ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒ„ã®ç ‚æµœã§ã‚¹ã‚«ãƒ™ãƒ³ã‚¸ãƒ£ãƒ¼
æ¤œç´¢ã‚¨ãƒ³ã‚¸ãƒ³çµŒç”±ã§ä»¥å‰æ›¸ã„ãŸè¨˜äº‹ã‚’èªã‚“ã§ãã‚Œã‚‹æ–¹ãŒçµæ§‹å¤šã„ã‚ˆã†ãªã®ã§ã™ãŒã€ã“ã®æ‰‹ã®æƒ…å ±ã«ã‚ã‚ŠãŒã¡ãªæ™‚é–“ã®æµã‚Œã«ã‚ˆã£ã¦æƒ…å ±ãŒå¤ããªã£ã¦ãŸã¨è¨€ã†çŠ¶æ…‹ã ã£ãŸã®ã§è£œè¶³ã¨ã—ã¦æ›¸ã„ã¦ãŠãã¾ã™(ï¼›Â´Ð”ï½€) ä»¥å‰ã¯ /etc/iptables.test.rules ã¨è¨€ã†ãƒ•ã‚¡ã‚¤ãƒ«ä¸€ã¤ã§ç®¡ç†ã•ã‚Œã¦ã„ãŸã®ã§ã™ãŒ /etc/iptables/rules.v4 /etc/iptables/rules.v6 ç¾åœ¨ã¯ä¸Šè¨˜ã®ã‚ˆã†ã«IPv4ç”¨ã¨IPv6ç”¨ã”ã¨ã«2ã¤ã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’ä½¿ã†ã‚ˆã†ãªä»•çµ„ã¿ã«ãªã£ã¦ã„ã¾ã™ã€‚ ã§ã™ã®ã§ã€ä»Šå¾Œã¯ä¸Šè¨˜ã®ãƒ•ã‚¡ã‚¤ãƒ«ã«è¨å®šã‚’ä¿å˜ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ æ©Ÿèƒ½ã‚‚å¾®å¦™ã«è¿½åŠ ã•ã‚Œã¦ã„ã‚‹ã®ã§ã€è©³ã—ãã¯/etc/init.d/iptables-persistentã‚’èªã‚“ã§ã¿ã¦ãã ã•ã„ã€‚
yutamoty 2013/07/05
debian

iptables
ãƒªãƒ³ã‚¯
Debianä¸Šã§ã®iptablesã®è¨å®šæ–¹æ³• - ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒ„ã®ç ‚æµœã§ã‚¹ã‚«ãƒ™ãƒ³ã‚¸ãƒ£ãƒ¼
ãƒãƒƒãƒˆã§ã‚°ã‚°ã‚‹ã¨å¤ã„è¨˜äº‹ãŒå¤šã„ã®ã§ã€Debian Wikiã‚’å‚è€ƒã«ç°¡å˜ãªæ–¹æ³•ã‚’æ›¸ã„ã¦ã¿ã¾ã™ã€‚ aptitude install iptables iptables-persistent ã¾ãšã€iptablesã¨iptables-persistentã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¾ã™ã€‚ iptables-persistentã¯å¾Œã§å½¹ç«‹ã£ã¦ãã¾ã™ã€‚ iptables -L æ—©é€Ÿã€ç¾åœ¨ã®è¨å®šã‚’è¦‹ã¦ã¿ã‚‹ã¨ Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destinationã“ã®ã‚ˆã†ã«ç©ºã£ã½ã®çŠ¶æ…‹ã ã¨æ€ã„
yutamoty 2013/07/05
debian

iptables
ãƒªãƒ³ã‚¯
ä¿ºå²ä¸Šæœ€å¼·ã®iptablesã‚’ã•ã‚‰ã™ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article? #!/bin/bash ########################################################### # ã“ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆã®ç‰¹å¾´ # # å—ä¿¡ãƒ»é€šéŽã«ã¤ã„ã¦ã¯åŸºæœ¬çš„ã«ç ´æ£„ã—ã€ãƒ›ãƒ¯ã‚¤ãƒˆãƒªã‚¹ãƒˆã§è¨±å¯ã™ã‚‹ã‚‚ã®ã‚’æŒ‡å®šã™ã‚‹ã€‚ # é€ä¿¡ã«ã¤ã„ã¦ã¯åŸºæœ¬çš„ã«è¨±å¯ã™ã‚‹ã€‚ãŸã ã—ã€ã‚µãƒ¼ãƒãŒè¸ã¿å°ã«ãªã‚Šå¤–éƒ¨ã®ã‚µãƒ¼ãƒã«è¿·æƒ‘ã‚’ã‹ã‘ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã®ã§ã€ # å¿ƒé…ãªå ´åˆã¯ã€é€ä¿¡ã‚‚å—ä¿¡åŒæ§˜ã«åŸºæœ¬ç ´æ£„ãƒ»ãƒ›ãƒ¯ã‚¤ãƒˆãƒªã‚¹ãƒˆã§è¨±å¯ã™ã‚‹ã‚ˆã†ã«æ›¸ãæ›ãˆã‚‹ã¨è‰¯ã„ã€‚ #########################################
yutamoty 2012/12/14
linux

iptables
ãƒªãƒ³ã‚¯
RH-Firewall-1-INPUTã¨ã¯ï¼Ÿ - OKWAVE
INPUT OUTPUT FORWARD ãªã©ã¯ã€ã”å˜ã˜ã®ã¨ãŠã‚Šiptablesã®ãƒã‚§ãƒ¼ãƒ³åã¨ã—ã¦æ„å‘³ã®ã‚ã‚‹å˜èªžã§ã™ãŒã€ ã€ŒRH-Firewall-1-INPUTã€ã¯ã€é©å½“ã«ã¤ã‘ãŸãƒ©ãƒ™ãƒ«åã§ã™ã€‚ ã“ã®æ–‡å—åˆ—ã¯ã©ã‚“ãªã‚‚ã®ã«å¤‰æ›´ã—ã¦ã‚‚å¤§ä¸ˆå¤«ã§ã™ã€‚ ãŸã¨ãˆã° ã€ŒMY-FIREWALL-SETTINGSã€ ãªã‚“ã‹ã§ã‚‚å¤§ä¸ˆå¤«ã§ã™ã€‚ ã§ã¯ãªãœãƒ©ãƒ™ãƒ«åãªã‚“ã‹ã‚’å®šç¾©ã—ã¦ã„ã‚‹ã‹ã¨ã„ã†ã¨ã€ ä¸€èˆ¬çš„ã«ã¯INPUTãƒã‚§ãƒ¼ãƒ³ã¨FORWARDãƒã‚§ãƒ¼ãƒ³ã«ã¯ã€ è¨å®šã¨ã—ã¦å…¨ãåŒã˜ã‚‚ã®ã‚’å®šç¾©ã—ã¾ã™ã€‚ ãŸã¨ãˆã°ã€HTTPã‚’è¨±å¯ã™ã‚‹å ´åˆã¯ã€ -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT -A FORWARD -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT ã¨ã„ã†ã‚ˆã†ã«ï¼’ã¤åˆ†è¨˜è¿°ã™ã‚‹
yutamoty 2012/08/14
iptables
ãƒªãƒ³ã‚¯
ä¿ºã§ã‚‚è§£ã‚‹IPTABLES
ãƒ‘ã‚±ãƒƒãƒˆãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ã¨ã¯ï¼š ãƒ‘ã‚±ãƒƒãƒˆã®ãƒ˜ãƒƒãƒ€ãƒ¼éƒ¨åˆ†ã‚’è¦‹ã¦ã€ è¨å®šã—ãŸæ¡ä»¶ï¼ˆé€ä¿¡å…ƒIPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚„å®›å…ˆIPã‚¢ãƒ‰ãƒ¬ã‚¹ã€ãƒãƒ¼ãƒˆç•ªå·ãªã©ï¼‰ã¨ä¸€è‡´ã™ã‚‹ã‹ã©ã†ã‹ã‚’åˆ¤ å®šã—ã¦ã€ ä¸€è‡´ã™ã‚‹å ´åˆã¯è¨å®šã—ãŸã‚¢ã‚¯ã‚·ãƒ§ãƒ³ï¼ˆè»¢é€ã€ç ´æ£„ã€ã‚¢ãƒ‰ãƒ¬ã‚¹æ›¸ãæ›ãˆãªã©ï¼‰ã‚’è¡Œã†ã‚‚ã®ã§ã‚ã‚‹ã€‚ ã‚¢ãƒ‰ãƒ¬ã‚¹å¤‰æ›ã¨ã¯ï¼š ãƒ‘ã‚±ãƒƒãƒˆã®ãƒ˜ãƒƒãƒ€ãƒ¼éƒ¨åˆ†ã‚’è¦‹ã¦ã€è¨å®šã—ãŸæ¡ä»¶ã¨ä¸€è‡´ã™ã‚‹ã‹ã©ã†ã‹ã‚’åˆ¤å®šã—ã€ ä¸€è‡´ã™ã‚‹å ´åˆã¯ãƒ˜ãƒƒãƒ€ãƒ¼ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚„ãƒãƒ¼ãƒˆç•ªå·ã‚’æ›¸ãæ›ãˆã‚‹ã‚‚ã®ã§ã‚ã‚‹ã€‚
yutamoty 2010/11/19
linux

iptables
ãƒªãƒ³ã‚¯
iptables ã®ã‚³ãƒžãƒ³ãƒ‰æ›¸å¼
22.2. iptables ã®ã‚³ãƒžãƒ³ãƒ‰æ›¸å¼ã¯ã˜ã‚ã«ã€ãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ã®ãƒ«ãƒ¼ãƒ«ã‚’è¨å®šã™ã‚‹ iptables ã®ã‚³ãƒžãƒ³ãƒ‰æ›¸å¼ã‚’è§£èª¬ã—ã¾ã™ã€‚iptables ã¯ä»¥ä¸‹ã®æ›¸å¼ã§å®Ÿè¡Œã—ã¾ã™ã€‚ COMMANDSchain ã«æŒ‡å®šã—ãŸãƒã‚§ã‚¤ãƒ³ã«ãƒ«ãƒ¼ãƒ«ã‚’è¿½åŠ ã™ã‚‹ã®ã‹ã€ãã‚Œã¨ã‚‚å‰Šé™¤ã™ã‚‹ã®ã‹ã¨ã„ã£ãŸå‡¦ç†ã‚’æŒ‡å®šã—ã¾ã™ã€‚ chainãƒ«ãƒ¼ãƒ«ã‚’è¨å®šã™ã‚‹ãƒã‚§ã‚¤ãƒ³ã‚’æŒ‡å®šã—ã¾ã™ã€‚ rule-specificationãƒã‚§ã‚¤ãƒ³ã«å…¥ã£ã¦ããŸãƒ‘ã‚±ãƒƒãƒˆãŒæº€ãŸã™ã¹ãæ¡ä»¶ã‚’æŒ‡å®šã—ã¾ã™ã€‚ targetrule-specification ã§æŒ‡å®šã—ãŸæ¡ä»¶ã¨ãƒžãƒƒãƒã—ãŸãƒ‘ã‚±ãƒƒãƒˆã«å¯¾ã™ã‚‹å‡¦ç†ã‚’æŒ‡å®šã—ã¾ã™ã€‚
yutamoty 2010/09/01
linux

iptables
ãƒªãƒ³ã‚¯
çŸ¥ã‚‰ãªãã‚ƒæã™ã‚‹iptablesã®Tips
ã¯ã˜ã‚ã« æœ€çµ‚å›žã«ã‚ãŸã‚Šã€iptablesã‚’ä¾¿åˆ©ã«ä½¿ã†Tipsã‚’ç´¹ä»‹ã—ã¾ã™ã€‚iptablesã‚’1ã¤1ã¤ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã§å®Ÿè¡Œã™ã‚‹ã®ã¯å¤§å¤‰é¢å€’ã§ã™ã€‚ãã†ã—ãŸç…©ã‚ã—ã•ã‚’è»½æ¸›ã§ãã‚‹è¨å®šã‚„ã€å®Ÿéš›ã®é‹ç”¨ã®æ‰‹åŠ©ã‘ã«ãªã‚‹ã‚ˆã†ãªå·¥å¤«ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ é–¢é€£ãƒªãƒ³ã‚¯ï¼š â†’Linuxã§ä½œã‚‹ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ï¼»ãƒ‘ã‚±ãƒƒãƒˆãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°è¨å®šç·¨ï¼½http://www.atmarkit.co.jp/flinux/rensai/security05/security05a.html â†’é€£è¼‰è¨˜äº‹ ã€Œç¿’ã†ã‚ˆã‚Šæ…£ã‚Œã‚ï¼ iptablesãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆé›†ã€http://www.atmarkit.co.jp/flinux/index/indexfiles/iptablesindex.html â†’é€£è¼‰è¨˜äº‹ ã€Œç¿’ã†ã‚ˆã‚Šæ…£ã‚Œã‚ï¼ iptablesãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆé›† æ”¹è¨‚ç‰ˆã€http://www.atmarkit.co.jp/flinux/index/i
yutamoty 2010/08/24
linux

iptables
ãƒªãƒ³ã‚¯
iptablesã§ã§ãã‚‹DoSï¼DDoSå¯¾ç–
ã¯ã˜ã‚ã« ä»Šå›žã¯DoSï¼DDoSå¯¾ç–ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ä»Šå›žã¯iptablesã‚’ä½¿ã£ãŸæ–¹æ³•ã¨ã¨ã‚‚ã«ã€Linuxã®ã‚«ãƒ¼ãƒãƒ«ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚’ä½¿ã£ãŸæ–¹æ³•ã‚‚ç´¹ä»‹ã—ã¾ã™ã€‚ é–¢é€£ãƒªãƒ³ã‚¯ï¼š â†’Linuxã§ä½œã‚‹ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ï¼»ãƒ‘ã‚±ãƒƒãƒˆãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°è¨å®šç·¨ï¼½ http://www.atmarkit.co.jp/flinux/rensai/security05/security05a.html â†’é€£è¼‰è¨˜äº‹ ã€Œç¿’ã†ã‚ˆã‚Šæ…£ã‚Œã‚ï¼ iptablesãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆé›†ã€ http://www.atmarkit.co.jp/flinux/index/indexfiles/iptablesindex.html â†’é€£è¼‰è¨˜äº‹ ã€Œç¿’ã†ã‚ˆã‚Šæ…£ã‚Œã‚ï¼ iptablesãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆé›† æ”¹è¨‚ç‰ˆã€ http://www.atmarkit.co.jp/flinux/index/indexfiles/newiptablesindex.html DoSï¼
yutamoty 2010/07/15
linux

security

iptables

tips
ãƒªãƒ³ã‚¯
é€£è¼‰è¨˜äº‹ ã€Œç¿’ã†ã‚ˆã‚Šæ…£ã‚Œã‚ï¼ iptablesãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆé›†ã€
ã‚¹ãƒ†ãƒ¼ãƒˆãƒ•ãƒ«ãƒ‘ã‚±ãƒƒãƒˆãƒ•ã‚£ãƒ«ã‚¿ã‚’ä½¿ã£ãŸã‚µãƒ¼ãƒ“ã‚¹ã®å…¬é–‹ é€£è¼‰ï¼šç¿’ã†ã‚ˆã‚Šæ…£ã‚Œã‚ï¼ iptablesãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆé›†ï¼ˆ1ï¼‰ã€€åˆå¿ƒè€…ã«ã¨ã£ã¦ã€iptablesã¯é›£ã—ã„ã€‚ãã“ã§ã€å¦ç¿’ã®ç¬¬1æ©ã¨ã—ã¦ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã‚’è‡ªåˆ†ã®ç’°å¢ƒã«é©å¿œã•ã›ã‚‹ã“ã¨ã‹ã‚‰å§‹ã‚ã‚ˆã†
yutamoty 2010/04/16
linux

iptables

tips
ãƒªãƒ³ã‚¯
æŽ¥ç¶šå…ƒã® IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ãƒ©ã‚¦ãƒ³ãƒ‰ãƒãƒ“ãƒ³çš„ã«å¤‰æ›´ã™ã‚‹æ–¹æ³• | Carpe Diem
ã¨ã‚ã‚‹ã‚µãƒ¼ãƒã‹ã‚‰ã€ã‚ã‚‹ã‚µãƒ¼ãƒã«æŽ¥ç¶šã—ãŸã¨ãã€ã‚ã‚‹ã‚µãƒ¼ãƒã«æ®‹ã‚‹ã‚¢ã‚¯ã‚»ã‚¹ãƒã‚°ã®æŽ¥ç¶šå…ƒ IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ãƒ©ã‚¦ãƒ³ãƒ‰ãƒãƒ“ãƒ³çš„ã«å¤‰æ›´ã™ã‚‹ã“ã¨ãŒå¿…è¦ã«ãªã£ãŸã®ã§èª¿æŸ»ã—ã¦ã¿ãŸã€‚ãã†ã™ã‚‹ã¨ã€iptables ã‚’ä½¿ã†ã¨ã§ãã‚‹ã¨ã„ã†ã¾ã•ã«ã´ã£ãŸã‚Šã®è¨˜äº‹ã‚’ç™ºè¦‹ã—ãŸã€‚ ã•ã£ããã€CentOS ã§è©¦ã—ã¦ã¿ã‚‹ã¨ã€iptables ã® libipt_statistic ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒãªã„ã¨ã„ã†ã‚¨ãƒ©ãƒ¼ã«ãªã£ã¦ã—ã¾ã£ãŸã€‚æ¬¡ã« RedHat ã®ãƒšãƒ¼ã‚¸ã‚’èª¿ã¹ã¦ã„ã‚‹ã¨ã€Bug 215361 â€“ iptables is missing /lib/iptables/libipt_statistic.so ã¨ã„ã†ã¾ã•ã«ã´ã£ãŸã‚Šãªæƒ…å ±ãŒè¦‹ã¤ã‹ã£ãŸã€‚ãã®æƒ…å ±ã§ã¯ã€iptables ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 1.3.6 ã‹ã‚‰è¿½åŠ ã•ã‚ŒãŸã¨ã‚ã£ãŸã®ã§ã€ã•ã£ãã netfilter iptables ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 1.3.6 ã®ãƒšãƒ¼ã‚¸ã®å¤‰æ›´ç‚¹ã‚’èª¿ã¹ã¦ã¿ã‚‹ã¨ã€ãŸã—ã‹ã«
yutamoty 2010/02/16
centos

iptables
ãƒªãƒ³ã‚¯
https://ubuntuforums.org/archive/index.php/t-19106.html
yutamoty 2010/02/14
ubuntu

iptables
ãƒªãƒ³ã‚¯
Ubuntuãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ã®ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã‚’è¨å®šã—ã¦ã¿ãŸ - ã±ã›ã‚‰ã‚“ãƒ¡ãƒ¢
æ³¨æ„ï¼šä»¥ä¸‹ã®å†…å®¹ã¯Ubuntu Desktopç‰ˆã§ã®è©±ã§ã™ã€‚Serverç‰ˆã¯ã¾ãŸåˆ¥ã§ã™ã€‚ ãƒãƒ¼ãƒˆã¯å¡žãŒã‚Œã¦ã„ã‚‹ã¨ã„ã†ã‚ˆã‚Šã¯é–‹ã‘ã¦ãªã„ã ã‘ ã€ŒUbuntuã§ã¯æ¨™æº–ã§å…¨ã¦ã®ãƒãƒ¼ãƒˆãŒé–‰ã˜ã¦ã„ã‚‹ã®ã§ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã®è¨å®šã¯ä¸è¦ã€ãªã©ã¨ã„ã†æ–‡ç« ã‚’ã‚ˆãè¦‹ã‹ã‘ã‚‹ã®ã ãŒã€ã“ã‚Œã¯ã‚‚ã®ã™ã”ã„èª¤è§£ã‚’æ‹›ã„ã¦ã„ã‚‹ã¨æ€ã†ã€‚ å®Ÿéš›ã¯ãƒãƒ¼ãƒˆã‚’é–‹ã‘ã¦LISTENã™ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ãŒæ¨™æº–ã§ã¯å…¥ã£ã¦ã„ãªã„ï¼ˆè¨å®šã•ã‚Œã¦ã„ãªã„ï¼‰ã¨ã„ã†ã ã‘ã§ã€æ˜Žç¤ºçš„ã«å…¨ã¦ã®ãƒãƒ¼ãƒˆãŒãƒ–ãƒãƒƒã‚¯ã•ã‚Œã‚‹ã‚ˆã†ã«è¨å®šã•ã‚Œã¦ã„ã‚‹ã‚ã‘ã§ã¯ãªã„ã€‚ å°‘ãªãã¨ã‚‚ä»Šå¹´ã®7æœˆã«Ubuntu(8.04)ã‚’ä½¿ã„å§‹ã‚ãŸæ™‚ã«ã¯iptablesã®å®šç¾©ã‚‚ç©ºã£ã½ã ã£ãŸã—ã€ä»–ã®ãã‚Œã‚‰ã—ã„è¨å®šã‚‚ä½•ã‚‚ãªã‹ã£ãŸã€‚ ã“ã®çŠ¶æ…‹ã§Apacheã¨ã‹å…¥ã‚Œã‚‹ã¨å½“ç„¶ã®ã‚ˆã†ã«80ç•ªãƒãƒ¼ãƒˆã§LISTENã—å§‹ã‚ã¦ã€å¤–éƒ¨ã‹ã‚‰ã‚‚ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹ã‚ˆã†ã«ãªã‚‹ã€‚Apacheãªã©å…¥ã‚Œãªãã¦ã‚‚Nautilusãªã©ã§ãƒ•ã‚¡ã‚¤ãƒ«ã®å…±æœ‰è¨å®šã‚’
yutamoty 2010/02/14
ubuntu

iptables
ãƒªãƒ³ã‚¯
natãƒ†ãƒ¼ãƒ–ãƒ«ã‚’åˆ©ç”¨ã—ãŸLinuxãƒ«ãƒ¼ã‚¿ã®ä½œæˆ
ã¯ã˜ã‚ã« ä»Šå›žã¯ã€iptablesã®natãƒ†ãƒ¼ãƒ–ãƒ«ï¼ˆé–¢é€£è¨˜äº‹ï¼‰ã‚’ä½¿ã£ãŸNATãŠã‚ˆã³NAPTæ©Ÿèƒ½ã‚’è§£èª¬ã—ã¾ã™ã€‚ã“ã†ã—ãŸæ©Ÿèƒ½ã‚’ä½¿ãˆã°ãƒ‘ã‚±ãƒƒãƒˆã®IPã‚¢ãƒ‰ãƒ¬ã‚¹æƒ…å ±ã‚’æ›¸ãæ›ãˆã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã¤ã¾ã‚Šiptablesã‚’é§†ä½¿ã™ã‚Œã°ã€å¸‚è²©ã•ã‚Œã¦ã„ã‚‹ãƒ–ãƒãƒ¼ãƒ‰ãƒãƒ³ãƒ‰ãƒ«ãƒ¼ã‚¿ã¨åŒç‰ã€ã¾ãŸã¯ãã‚Œä»¥ä¸Šã®ãƒ«ãƒ¼ã‚¿ã‚’ä½œã‚Šä¸Šã’ã‚‹ã“ã¨ãŒã§ãã‚‹ã®ã§ã™ã€‚ é–¢é€£ãƒªãƒ³ã‚¯ â†’Linuxã§ä½œã‚‹ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ï¼»ãƒ‘ã‚±ãƒƒãƒˆãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°è¨å®šç·¨ï¼½ http://www.atmarkit.co.jp/flinux/rensai/security05/security05a.html â†’é€£è¼‰è¨˜äº‹ ã€Œç¿’ã†ã‚ˆã‚Šæ…£ã‚Œã‚ï¼ iptablesãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆé›†ã€ http://www.atmarkit.co.jp/flinux/index/indexfiles/iptablesindex.html â†’é€£è¼‰è¨˜äº‹ ã€Œç¿’ã†ã‚ˆã‚Šæ…£ã‚Œã‚ï¼ iptablesãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆé›†
yutamoty 2010/02/10
linux

iptables
ãƒªãƒ³ã‚¯
1