[B! example] a_bickyã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

a_bicky id:a_bicky

exampleã«é–¢ã™ã‚‹a_bickyã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¼·åŒ–å¯¾ç–(Iptablesç·¨)
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å¼·åŒ–ã™ã‚‹ãŸã‚ã€ã“ã¡ã‚‰ã§ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯æ§‹æˆã¨ãƒ«ãƒ¼ã‚¿ã®è¨å®šã‚’å¤§å¹…ã«å¤‰æ›´ã—ã¾ã—ãŸãŒã€ä»Šã¾ã§æ‰‹ã‚’æŠœã„ã¦ã„ãŸã‚µãƒ¼ãƒæ©Ÿã®ãƒ•ã‚¡ã‚¤ãƒ¤ã‚¦ã‚©ãƒ¼ãƒ«ã®è¨å®šã‚’åˆã‚ã›ã¦è¦‹ç›´ã—ã¾ã—ãŸã€‚ ã‚µãƒ¼ãƒæ©Ÿã§ä½¿ç”¨ã—ã¦ã„ã‚‹RedHat 8.0ã§ã¯ã€iptablesã‚’ä½¿ã£ãŸãƒ•ã‚¡ã‚¤ãƒ¤ã‚¦ã‚©ãƒ¼ãƒ«ãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã¾ã™ã®ã§ã€ã“ã®è¨å®šã‚’è¦‹ç›´ã—ã¾ã—ãŸã€‚ DNSã¯UDP:53ã¨æ€ã£ã¦ã„ãŸã®ã§ã™ãŒã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒåå‰è§£æ±ºã™ã‚‹ã¨ãã«512byteã‚’è¶ŠãˆãŸå ´åˆã€DNSã¯512byteä»¥ä¸Šã®ãƒ‡ãƒ¼ã‚¿ã¯UDPã§é€ä¿¡ã§ããªã„ãŸã‚ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯å†åº¦TCPã§ç‰½ãç›´ã—ã¦ã„ã‚‹ã“ã¨ãŒåˆ¤æ˜Žã—ãŸã®ã§ã€TCPã®è¨å®šã‚’è¿½åŠ ã—ã¾ã—ãŸã€‚
a_bicky 2011/09/24
iptables

example
ãƒªãƒ³ã‚¯
iptables å…¥é–€ - Lazy Programmer :-p
ãƒ¡ãƒ¼ã‚«ã®ãƒ«ãƒ¼ã‚¿ã¯ã€Œã‚dã‚½ãƒ•ã‚£ã‚¢jsæ©ãµãƒjã±ã€ãªã®ã§ä¿¡ç”¨ã—ãªã„æ–¹ãŒã„ã„ã£ã¦ã€id:azurestoneã•ã‚“ã«æ•™ãˆã¦ã‚‚ã‚‰ã£ãŸã®ã§ã€å…¨è£¸ã§ã‚µãƒ¼ãƒã®ãƒ•ã‚¡ã‚¤ã‚¢ãƒ¼å£ã‚’è¨å®šã™ã‚‹ï¼ id:hideden id:vkgtaro id:azurestoneã•ã‚“ã«æ•™ãˆã¦ã‚‚ã‚‰ã„ãªãŒã‚‰ iptablesè¨å®šã—ãŸã‚ˆï¼ # å…¨éƒ¨ä¸è¨±å¯ã«ã™ã‚‹ /sbin/iptables -P INPUT DROP /sbin/iptables -P FORWARD DROP /sbin/iptables -P OUTPUT DROP # åˆæœŸåŒ–ã™ã‚‹ /sbin/iptables --flush /sbin/iptables --delete-chain # è‡ªåˆ†è‡ªèº«ã‚’è¨±å¯ã•ã›ã‚‹ /sbin/iptables -A INPUT -i lo -j ACCEPT /sbin/iptables -A OUTPUT -o lo -j ACCE
a_bicky 2011/09/24
iptables

example
ãƒªãƒ³ã‚¯
iptablesè¨å®šç·¨
Iptabalesè¨å®šç·¨ è¨å®šã™ã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯æ§‹æˆ ãƒ«ãƒ¼ã‚¿ãƒ¼(å¤–å´)ï¼šISPã®DHCPã‚µãƒ¼ãƒãƒ¼ã‹ã‚‰å‰²ã‚Šå½“ã¦ã‚‰ã‚ŒãŸIPã‚¢ãƒ‰ãƒ¬ã‚¹ ãƒ«ãƒ¼ã‚¿ãƒ¼(å†…å´)ï¼š192.18.1.1 ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆPCï¼š192.168.*.* è¨å®šã®ãƒ«ãƒ¼ãƒ« +ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆãƒãƒªã‚·ãƒ¼ç ´æ£„ +IPãƒžã‚¹ã‚«ãƒ¬ãƒ¼ãƒ‰ã¨ãƒ‘ã‚±ãƒƒãƒˆãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ã®ãƒ«ãƒ¼ãƒ« ãƒ»ãƒ«ãƒ¼ãƒ—ãƒãƒƒã‚¯ã¯ç„¡æ¡ä»¶ã«è¨±å¯ ãƒ»Internetã‹ã‚‰ã®22ç•ª(SSH)ã€25ç•ª(SMTP)ã€80ç•ª(HTTP)ã€110ç•ª(POP3) 67ç•ª(bootps:DHCPã‚µãƒ¼ãƒãƒ¼)ã€68ç•ª(bootps:DHCPã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ)ã‚’è¨±å¯ ãƒ»LANã‹ã‚‰Internetã¸ã®NetBIOSé–¢é€£ãƒãƒ¼ãƒˆ(137ï½ž139ã€445ç•ª)ã‚’ç ´æ£„ ãƒ»Internetã‹ã‚‰ã®é€ä¿¡å…ƒIPã‚¢ãƒ‰ãƒ¬ã‚¹ãŒãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆã‚¢ãƒ‰ãƒ¬ã‚¹ã®ãƒ‘ã‚±ãƒƒãƒˆã‚’ ç ´æ£„(ã‚¹ãƒ—ãƒ¼ãƒ•ã‚£ãƒ³ã‚°å¯¾ç–) ãƒ»Internetã‹ã‚‰ã®å®›å…ˆIPã‚¢ãƒ‰ãƒ¬ã‚¹ãŒãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆã‚¢ãƒ‰ãƒ¬ã‚¹ã®ãƒ‘ã‚±ãƒƒãƒˆã‚’
a_bicky 2011/09/24
ã‚ˆãè€ƒãˆã‚‰ã‚Œã¦ãã†ã§ç†è§£ã—ãŒãŸã„éƒ¨åˆ†ã‚‚ã¡ã‚‰ã»ã‚‰

iptables

example
ãƒªãƒ³ã‚¯
iptablesã§ãƒã‚°ã‚’å–ã‚‹ | Nibelungen Code
Category: Ubuntu, ã‚µãƒ¼ãƒãƒ¼æ§‹ç¯‰Â | Tags: iptablesÂ | Reading time: About 26 minutes iptablesã§ã¯Dropã—ãŸãƒã‚°ã‚’ãªã‚‹ã¹ãå–ã£ã¦ãŠã„ãŸæ–¹ãŒã„ã„ã§ã™ãã€‚ ã‚ã‚Œã€ãªã‚“ã§ç¹‹ãŒã‚‰ãªã„ã®ï¼ãªï½žã‚“ã¦ã“ã¨ãŒã‚ã£ãŸã¨ãã«ãƒã‚°ã‚’è¦‹ã‚Œã° iptablesã§æ‹’å¦ã—ã¦ãŸã“ã¨ãŒã‚ã‹ã‚Šã¾ã™ã®ã§ãã€‚ ã¾ãšãƒã‚°ã®å‡ºåŠ›å…ˆã‚’ç¢ºä¿ sudo mkdir -p /var/log/iptables æ¬¡ã«ãƒã‚°ã‚’å‡ºã™è¨å®š Ubuntu10.04ï¼Ÿã‚ãŸã‚Šã‹ã‚‰syslogãŒç„¡ããªã£ã¦ä»£ã‚ã‚Šã«rsyslogã«ãªã£ãŸã‚ˆã†ã§ã€‚ ä»Šã¾ã§ã¨åŒã˜ã‚ˆã†ãªæ›¸ãæ–¹ã§ã‚‚ã„ã„ã ã‘ã©æŠ˜è§’ãªã®ã§rsyslogã®æ›¸ãæ–¹ã§ç´¹ä»‹ã€‚ rsyslogã®å ´åˆã¯/etc/rsyslog.d/ã®ãªã‹ã«è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’ç½®ãå½¢ã«ãªã£ã¦ã¾ã™ã€‚ sudo nano /etc/rsyslog.d/35-iptables
a_bicky 2011/09/24
iptables

example
ãƒªãƒ³ã‚¯
LinuxRouter@Katsuyuki Kobayashi's HomePage
ã“ã®ãƒšãƒ¼ã‚¸ã¯ã€ http://www.cl.is.sci.toho-u.ac.jp/~ono/memo/iptables.htmlã€ è‡ªå®…ã‚µãƒ¼ãƒãƒ¼ãƒžãƒ‹ã‚¢ãƒƒã‚¯ã‚¹ - ãƒ«ãƒ¼ã‚¿ãƒ¼è¨å®šãƒ¡ãƒ¢(iptables)ã€ Linux 2.4 Packet Filtering HOWTO ã‚’å‚è€ƒã«ã•ã›ã¦é ‚ãã¾ã—ãŸã€‚ 1. ãƒ‘ã‚±ãƒƒãƒˆè»¢é€ã‚’è¨±å¯ã™ã‚‹ ãƒ‘ã‚±ãƒƒãƒˆã®è»¢é€ã‚’è¡Œã†ãŸã‚ã€/etc/sysctl.confã‚’ç·¨é›†ã™ã‚‹ã€‚ 2. iptablesã®ãƒ‘ã‚±ãƒƒãƒˆã®æµã‚Œ iptablesã«ã¯ã€filter, nat, mangleã®3ã¤ã®ãƒ†ãƒ¼ãƒ–ãƒ«ãŒã‚ã‚‹ã€‚ (ç‰¹ã«æŒ‡å®šã—ãªã‘ã‚Œã°ã€filterãƒ†ãƒ¼ãƒ–ãƒ«ã‚’æŒ‡å®šã—ãŸã“ã¨ã«ãªã‚‹)ã€‚ å„ã€…ã®ãƒ†ãƒ¼ãƒ–ãƒ«ã«ã¯æ¨™æº–ã®ãƒã‚§ã‚¤ãƒ³ãŒå®šç¾©ã•ã‚Œã¦ã„ã¦ã€ãã®ãƒã‚§ã‚¤ãƒ³æ¯Žã«ãƒ‘ã‚±ãƒƒãƒˆã®ACCEPT, DROPç‰ã®å‡¦ç†ã‚’è¡Œã†ã€‚ filterãƒ†ãƒ¼ãƒ–ãƒ«ã®ã®INPUT, OUTPUT, FORWARDãƒã‚§ã‚¤ãƒ³ nat
a_bicky 2011/09/24
iptables

example
ãƒªãƒ³ã‚¯
iptablesã®è¨å®š
iptablesã®è¨å®š [ã‚µãƒ¼ãƒã®å®Ÿé¨“å®¤ Redhat/Fedora] ä½œæˆ : 2005/01/27 ä¿®æ£ : 2011/05/05 "ã‚µãƒ¼ãƒã®å®Ÿé¨“å®¤"ã®æ¤œç´¢ iptables ãƒ‘ã‚±ãƒƒãƒˆãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ã€NA(P)Tã‚’è¨å®šã™ã‚‹ãŸã‚ã®ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã€‚ ç’°å¢ƒã«ã‚ˆã£ã¦ã¯ã‚«ãƒ¼ãƒãƒ«ã®å†æ§‹ç¯‰ãŒå¿…è¦ã«ãªã‚‹ãŒã€Fedora Core 3ã§ã¯ä¸è¦ã€‚ å‚è€ƒã«ãªã‚‹æ–‡æ›¸ netfilter.orgã®ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«ã€‚ ã‚ã¨ã€manpageã€‚ ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« FTPã‚µã‚¤ãƒˆã¾ãŸã¯FedoraCore3 CD Disk1ã‹ã‚‰RPMãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’ã‚‚ã‚‰ã£ã¦ãã¦ã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã€‚ # rpm -Uvh iptables-1.2.11-3.1.i386.rpm yumã‚’ä½¿ã£ã¦ã‚‚ã‚ˆã„ã€‚ # yum install iptables chkconfigãƒ¦ãƒ¼ãƒ†ã‚£ãƒªãƒ†ã‚£ã§ã€ã‚µãƒ¼ãƒèµ·å‹•æ™‚ã«ã‚µãƒ¼ãƒ“ã‚¹ãŒé–‹å§‹ã™ã‚‹ã‚ˆã†è¨å®šã™ã‚‹ã€‚ # chkconfig i
a_bicky 2011/09/24
iptables

example
ãƒªãƒ³ã‚¯
1