From: Taner AYAZ (taner.ayaz@kuzuairlines.com)
Date: Mon 30 Oct 2006 - 15:23:35 GMT
Arkadaşlar,
Linux servera ssh ile şirket dışından erişemiyorum.
Sebebini bulamadım bir türlü.
Iptables çıktım aşağıdaki gibi... Sorun nerede olabilir??
Not: Modem üzerinden makinenin dış ip bacağına ssh portunu nat yaptım.
# Generated by iptables-save v1.2.11 on Wed Oct 18 14:31:53 2006
*mangle
:PREROUTING ACCEPT [5719656:3766785728]
:INPUT ACCEPT [1857469:1196597788]
:FORWARD ACCEPT [3679844:2555926518]
:OUTPUT ACCEPT [2159830:1202598264]
:POSTROUTING ACCEPT [5839673:3758524742]
COMMIT
# Completed on Wed Oct 18 14:31:53 2006
# Generated by iptables-save v1.2.11 on Wed Oct 18 14:31:53 2006
*nat
:PREROUTING ACCEPT [253012:20208567]
:POSTROUTING ACCEPT [3460:286391]
:OUTPUT ACCEPT [57059:3535465]
-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination
10.0.0.2
:3128
-A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A POSTROUTING -o eth1 -j MASQUERADE
COMMIT
# Completed on Wed Oct 18 14:31:53 2006
# Generated by iptables-save v1.2.11 on Wed Oct 18 14:31:53 2006
*filter
:INPUT DROP [1:40]
:FORWARD ACCEPT [1791833:699546443]
:OUTPUT ACCEPT [1094982:122283150]
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -j ACCEPT
-A INPUT -j LOG
-A INPUT -j DROP
-A FORWARD -i eth0 -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o eth0 -j ACCEPT
COMMIT
# Completed on Wed Oct 18 14:31:53 2006
----
_______________________________________________ Linux-ag mailing list Linux-ag@liste.linux.org.tr http://liste.linux.org.tr/mailman/listinfo/linux-ag