emploze | Code :
- [root@MandrivaServer rpatarin]# iptables -L -v -n
- Chain INPUT (policy DROP 2 packets, 458 bytes)
- pkts bytes target prot opt in out source destination
- 0 0 ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0
- 451 135K Ifw 0 -- * * 0.0.0.0/0 0.0.0.0/0
- 451 135K eth0_in 0 -- eth0 * 0.0.0.0/0 0.0.0.0/0
- 0 0 eth1_in 0 -- eth1 * 0.0.0.0/0 0.0.0.0/0
- 0 0 Reject 0 -- * * 0.0.0.0/0 0.0.0.0/0
- 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:'
- 0 0 reject 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain FORWARD (policy DROP 0 packets, 0 bytes)
- pkts bytes target prot opt in out source destination
- 0 0 eth0_fwd 0 -- eth0 * 0.0.0.0/0 0.0.0.0/0
- 0 0 eth1_fwd 0 -- eth1 * 0.0.0.0/0 0.0.0.0/0
- 0 0 Reject 0 -- * * 0.0.0.0/0 0.0.0.0/0
- 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:'
- 0 0 reject 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain OUTPUT (policy DROP 0 packets, 0 bytes)
- pkts bytes target prot opt in out source destination
- 0 0 ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0
- 384 43086 eth0_out 0 -- * eth0 0.0.0.0/0 0.0.0.0/0
- 0 0 eth1_out 0 -- * eth1 0.0.0.0/0 0.0.0.0/0
- 0 0 Reject 0 -- * * 0.0.0.0/0 0.0.0.0/0
- 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:'
- 0 0 reject 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain Drop (1 references)
- pkts bytes target prot opt in out source destination
- 0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113
- 80 12901 dropBcast 0 -- * * 0.0.0.0/0 0.0.0.0/0
- 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4
- 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 11
- 4 240 dropInvalid 0 -- * * 0.0.0.0/0 0.0.0.0/0
- 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445
- 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139
- 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535
- 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445
- 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1900
- 0 0 dropNotSyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
- 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53
- Chain Ifw (1 references)
- pkts bytes target prot opt in out source destination
- 0 0 RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 set ifw_wl src
- 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 set ifw_bl src
- 0 0 IFWLOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW psd weight-threshold: 10 delay-threshold: 10000 lo-ports-weight: 2 hi-ports-weight: 1 IFWLOG prefix 'SCAN'
- Chain Reject (4 references)
- pkts bytes target prot opt in out source destination
- 0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113
- 0 0 dropBcast 0 -- * * 0.0.0.0/0 0.0.0.0/0
- 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4
- 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 11
- 0 0 dropInvalid 0 -- * * 0.0.0.0/0 0.0.0.0/0
- 0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445
- 0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139
- 0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535
- 0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445
- 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1900
- 0 0 dropNotSyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
- 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53
- Chain all2all (0 references)
- pkts bytes target prot opt in out source destination
- 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
- 0 0 Reject 0 -- * * 0.0.0.0/0 0.0.0.0/0
- 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:all2all:REJECT:'
- 0 0 reject 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain dropBcast (2 references)
- pkts bytes target prot opt in out source destination
- 76 12661 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 PKTTYPE = broadcast
- 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 PKTTYPE = multicast
- Chain dropInvalid (2 references)
- pkts bytes target prot opt in out source destination
- 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
- Chain dropNotSyn (2 references)
- pkts bytes target prot opt in out source destination
- 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02
- Chain dynamic (4 references)
- pkts bytes target prot opt in out source destination
- Chain eth0_fwd (1 references)
- pkts bytes target prot opt in out source destination
- 0 0 dynamic 0 -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW
- 0 0 net2all 0 -- * eth1 0.0.0.0/0 0.0.0.0/0
- Chain eth0_in (1 references)
- pkts bytes target prot opt in out source destination
- 80 12901 dynamic 0 -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW
- 451 135K net2all 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain eth0_out (1 references)
- pkts bytes target prot opt in out source destination
- 384 43086 fw2net 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain eth1_fwd (1 references)
- pkts bytes target prot opt in out source destination
- 0 0 dynamic 0 -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW
- 0 0 loc2net 0 -- * eth0 0.0.0.0/0 0.0.0.0/0
- Chain eth1_in (1 references)
- pkts bytes target prot opt in out source destination
- 0 0 dynamic 0 -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID,NEW
- 0 0 loc2fw 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain eth1_out (1 references)
- pkts bytes target prot opt in out source destination
- 0 0 fw2loc 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain fw2loc (1 references)
- pkts bytes target prot opt in out source destination
- 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
- 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain fw2net (1 references)
- pkts bytes target prot opt in out source destination
- 356 41022 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
- 28 2064 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain loc2fw (1 references)
- pkts bytes target prot opt in out source destination
- 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
- 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain loc2net (1 references)
- pkts bytes target prot opt in out source destination
- 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
- 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain logdrop (0 references)
- pkts bytes target prot opt in out source destination
- 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:logdrop:DROP:'
- 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain logreject (0 references)
- pkts bytes target prot opt in out source destination
- 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:logreject:REJECT:'
- 0 0 reject 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain net2all (2 references)
- pkts bytes target prot opt in out source destination
- 371 122K ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
- 80 12901 Drop 0 -- * * 0.0.0.0/0 0.0.0.0/0
- 4 240 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:net2all:DROP:'
- 4 240 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0
- Chain reject (11 references)
- pkts bytes target prot opt in out source destination
- 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 PKTTYPE = broadcast
- 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 PKTTYPE = multicast
- 0 0 DROP 0 -- * * 255.255.255.255 0.0.0.0/0
- 0 0 DROP 0 -- * * 224.0.0.0/4 0.0.0.0/0
- 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
- 0 0 REJECT udp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
- 0 0 REJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-unreachable
- 0 0 REJECT 0 -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
- Chain shorewall (0 references)
- pkts bytes target prot opt in out source destination
- Chain smurfs (0 references)
- pkts bytes target prot opt in out source destination
- 0 0 LOG 0 -- * * 192.168.223.255 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:'
- 0 0 DROP 0 -- * * 192.168.223.255 0.0.0.0/0
- 0 0 LOG 0 -- * * 255.255.255.255 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:'
- 0 0 DROP 0 -- * * 255.255.255.255 0.0.0.0/0
- 0 0 LOG 0 -- * * 224.0.0.0/4 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:'
- 0 0 DROP 0 -- * * 224.0.0.0/4 0.0.0.0/0
|
Code :
- [root@MandrivaServer rpatarin]# sysctl -a | grep icmp
- error: permission denied on key 'net.ipv4.route.flush'
- error: permission denied on key 'net.ipv6.route.flush'
- net.ipv4.icmp_echo_ignore_all = 0
- net.ipv4.icmp_echo_ignore_broadcasts = 0
- net.ipv4.icmp_ignore_bogus_error_responses = 0
- net.ipv4.icmp_errors_use_inbound_ifaddr = 0
- net.ipv4.icmp_ratelimit = 1000
- net.ipv4.icmp_ratemask = 6168
- net.ipv4.netfilter.ip_conntrack_icmp_timeout = 30
- net.ipv6.icmp.ratelimit = 1000
- net.netfilter.nf_conntrack_icmp_timeout = 30
- error: "Invalid argument" reading key "fs.binfmt_misc.register"
|
|