From: Veli ADIGÜZEL (veliadiguzel@hotpop.com)
Date: Fri 03 Jan 2003 - 18:12:46 EET
Merhabalar,=20
Squid ve iptables kurdum ve=20
=E7al=FD=FEt=FDrd=FDm =E7al=FD=FE=FDyor=20
ama win 2000 makinadan outlook ve m=FDrc=FD =E7al=FD=FEt=FDramad=FDm unable=
resolve
hatas=FD veriyor neden dir acaba ?=20
=DEimdiden te=FEekk=FCrler.=20
# Generated by iptables-save v1.2.5 on Thu Jan 2 14:41:04 2003
*mangle
:PREROUTING ACCEPT [1040:147849]
:INPUT ACCEPT [680:112804]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [461:78837]
:POSTROUTING ACCEPT [461:78837]
COMMIT
# Completed on Thu Jan 2 14:41:04 2003
# Generated by iptables-save v1.2.5 on Thu Jan 2 14:41:04 2003
*nat
:PREROUTING ACCEPT [10:1390]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A PREROUTING -i eth1 -p tcp -m tcp --dport 30000:30005 -j DNAT
--to-destination 192.168.16.62=20
-A PREROUTING -i eth1 -p tcp -m tcp --dport 30010:30015 -j DNAT
--to-destination 192.168.16.63=20
-A PREROUTING -i eth1 -p tcp -m tcp --dport 30020:30025 -j DNAT
--to-destination 192.168.16.64=20
-A PREROUTING -i eth1 -p tcp -m tcp --dport 30030:30035 -j DNAT
--to-destination 192.168.16.65=20
-A PREROUTING -i eth1 -p tcp -m tcp --dport 8081 -j DNAT
--to-destination 192.168.16.63:80=20
-A PREROUTING -i eth1 -p tcp -m tcp --dport 8082 -j DNAT
--to-destination 192.168.16.62:80=20
-A PREROUTING -p tcp -m tcp --dport 80 -j DNAT --to-destination
192.168.1.5:3128=20
-A PREROUTING -i eth1 -p tcp -m tcp --dport 2224 -j DNAT
--to-destination 192.168.16.62=20
-A PREROUTING -i eth1 -p tcp -m tcp --dport 2208:2210 -j DNAT
--to-destination 192.168.16.62=20
-A PREROUTING -i eth1 -p udp -m udp --dport 2224 -j DNAT
--to-destination 192.168.16.62=20
-A PREROUTING -i eth1 -p udp -m udp --dport 2208:2210 -j DNAT
--to-destination 192.168.16.62=20
-A POSTROUTING -s 192.168.16.0/255.255.255.0 -o ppp0 -j MASQUERADE=20
COMMIT
# Completed on Thu Jan 2 14:41:04 2003
# Generated by iptables-save v1.2.5 on Thu Jan 2 14:41:04 2003
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
-A INPUT -i ppp0 -p tcp -m tcp --dport 22 -j ACCEPT=20
-A INPUT -i ppp0 -p tcp -m tcp --dport 21 -j ACCEPT=20
-A INPUT -i ppp0 -m state --state RELATED,ESTABLISHED -j ACCEPT=20
-A INPUT -i lo -j ACCEPT=20
-A INPUT -s 192.168.16.0/255.255.255.0 -i eth1 -j ACCEPT=20
-A INPUT -p tcp -m tcp --dport 113 --tcp-flags SYN,RST,ACK SYN -j REJECT
--reject-with icmp-port-unreachable=20
-A FORWARD -p tcp -m tcp --sport 20 -m state --state RELATED,ESTABLISHED
-j ACCEPT=20
-A FORWARD -s 192.168.16.0/255.255.255.0 -i eth1 -j ACCEPT=20
-A FORWARD -d 192.168.16.0/255.255.255.0 -o eth1 -j ACCEPT=20
-A OUTPUT -o ppp0 -j ACCEPT=20
-A OUTPUT -o lo -j ACCEPT=20
-A OUTPUT -d 192.168.16.0/255.255.255.0 -o eth1 -j ACCEPT=20
COMMIT
# Completed on Thu Jan 2 14:41:04 2003