|
|||||||
|
|
|
 |
|
|
Strumenti |
22-04-2007, 13:40
|
#1 |
|
Senior Member
Iscritto dal: Feb 2001
Città: Foggia
Messaggi: 2519
|
2 interfacce di rete, aiuto su bridge e nat!
Salve,
ho un router Wi-Fi La Fonera (quel simpatico ap by Fon) che tra l'altro funziona veramente da dio se non fosse per un problema di configurazione interna, vi pasto l'ifconfig di una sessione SSH sul router stesso: Codice:
root@OpenWrt:~# ifconfig
ath0 Link encap:Ethernet HWaddr 00:18:84:1E:89:15
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
ath1 Link encap:Ethernet HWaddr 00:18:84:1E:89:16
inet addr:192.168.10.1 Bcast:192.168.10.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:2290 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
eth0 Link encap:Ethernet HWaddr 00:18:84:1E:89:14
inet addr:192.168.0.100 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:6056 errors:0 dropped:0 overruns:0 frame:0
TX packets:2060 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:655533 (640.1 KiB) TX bytes:229819 (224.4 KiB)
Interrupt:4 Base address:0x1000
eth0:1 Link encap:Ethernet HWaddr 00:18:84:1E:89:14
inet addr:169.254.255.1 Bcast:169.254.255.255 Mask:255.255.0.0
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
Interrupt:4 Base address:0x1000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:5 errors:0 dropped:0 overruns:0 frame:0
TX packets:5 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:2180 (2.1 KiB) TX bytes:2180 (2.1 KiB)
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:192.168.182.1 P-t-P:192.168.182.1 Mask:255.255.255.0
UP POINTOPOINT RUNNING MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:10
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
wifi0 Link encap:Ethernet HWaddr 00:18:84:1E:89:15
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:249 errors:0 dropped:0 overruns:0 frame:402
TX packets:46 errors:2 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:199
RX bytes:15982 (15.6 KiB) TX bytes:2802 (2.7 KiB)
Interrupt:3 Memory:b0000000-b00ffffc
Aiuto raghi  Vi pasto anche la tabella di routing Codice:
root@OpenWrt:~# route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.182.0 * 255.255.255.0 U 0 0 0 tun0 192.168.0.0 * 255.255.255.0 U 0 0 0 eth0 192.168.10.0 * 255.255.255.0 U 0 0 0 ath1 169.254.0.0 * 255.255.0.0 U 0 0 0 eth0 default 192.168.0.1 0.0.0.0 UG 0 0 0 eth0 Codice:
root@OpenWrt:/etc# cat firewall.user #!/bin/sh # Copyright (C) 2006 OpenWrt.org . /tmp/network-config WAN="$wan_ifname" LAN="$lan_ifname" iptables -F input_rule iptables -F output_rule iptables -F forwarding_rule iptables -t nat -F prerouting_rule iptables -t nat -F postrouting_rule ### BIG FAT DISCLAIMER ## The "-i $WAN" is used to match packets that come in via the $WAN interface. ## it WILL NOT MATCH packets sent from the $WAN ip address -- you won't be able ## to see the effects from within the LAN. ### Open port to WAN ## -- This allows port 22 to be answered by (dropbear on) the router iptables -t nat -A prerouting_rule -i $WAN -p tcp --dport 22 -j ACCEPT iptables -A input_rule -i $WAN -p tcp --dport 22 -j ACCEPT
__________________
mi sembra di essere tornato adolescente ai bei tempi.. che figata essere di nuovo su questo forum 
Ultima modifica di cdere : 22-04-2007 alle 13:47. |
|
|
|
24-04-2007, 15:11
|
#2 |
|
Senior Member
Iscritto dal: Feb 2001
Città: Foggia
Messaggi: 2519
|
qui un iptables -L
Codice:
root@OpenWrt:~# iptables -L Chain INPUT (policy DROP) target prot opt source destination DROP tcp -- anywhere anywhere tcp dpt:80 INPUT_CFG all -- anywhere anywhere NET_ACCESS all -- anywhere anywhere DROP all -- anywhere anywhere state INVALID ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED DROP tcp -- anywhere anywhere tcp option=!2 flags:SYN/SYN input_rule all -- anywhere anywhere ACCEPT all -- 169.254.0.0/16 anywhere ACCEPT all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere ACCEPT gre -- anywhere anywhere REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT all -- anywhere anywhere reject-with icmp-port-unreachable Chain FORWARD (policy DROP) target prot opt source destination DROP all -- anywhere anywhere state INVALID TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED forwarding_rule all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere Chain OUTPUT (policy DROP) target prot opt source destination DROP all -- anywhere anywhere state INVALID ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED output_rule all -- anywhere anywhere ACCEPT all -- anywhere anywhere REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT all -- anywhere anywhere reject-with icmp-port-unreachable Chain INPUT_CFG (3 references) target prot opt source destination Chain NET_ACCESS (3 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp dpt:3990 ACCEPT udp -- anywhere anywhere udp dpt:53 ACCEPT tcp -- anywhere anywhere tcp dpt:53 WAN_HOOK all -- anywhere anywhere DROP all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere DROP all -- anywhere anywhere Chain WAN_HOOK (1 references) target prot opt source destination DROP all -- anywhere 169.254.0.0/16 DROP all -- anywhere 192.168.0.0/24 Chain forwarding_rule (1 references) target prot opt source destination INPUT_CFG all -- anywhere anywhere INPUT_CFG all -- anywhere anywhere NET_ACCESS all -- anywhere anywhere NET_ACCESS all -- anywhere anywhere Chain input_rule (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp dpt:22 Chain output_rule (1 references) target prot opt source destination
__________________
mi sembra di essere tornato adolescente ai bei tempi.. che figata essere di nuovo su questo forum
|
|
|
|
|
|
| Strumenti | |
|
|
Tutti gli orari sono GMT +1. Ora sono le: 20:38.
