From: Murat SULUHAN (murat.suluhan@tesam.com.tr)
Date: Mon 09 Oct 2000 - 12:36:07 EEST
Merhabalar
Firewall arkasindan icq kullanmak icin dahi program yazmislar haberiniz
olsun.
-------------------- --------------------
Saygilar - iyi calismalar
Murat SULUHAN
TE.SA.M. T.U.R.K. / GLOBALSTAR
-------------------- --------------------
----- Original Message -----
From: Serhat Selahattin Umar <misterno@mail.com>
To: Multiple recipients of list LINUX <linux@listweb.bilkent.edu.tr>
Sent: Monday, October 09, 2000 10:37 AM
Subject: [LINUX:20280] Re: tek modemle proxy
> arti olarak belirtmek istedim, icq2000 connect olmak icin auto configure
> seceneginde hemen hemen her protu deniyor (web, ftp, smtp hatta dns bile)
> bence icq icin domain bazinda bir kisitlama yapmalisiniz, 205.188.0.0
> subnet ten karisik olarak bircok ip almislar, bunlari belirleyip
> kapatirsaniz
> daha mantikli olur kanisindayim.
>
>
> >
> > ipchains dokumanlarina bir daha bakin,cunku her portu tek tek yazmak
> > yerine
> >
> > 6666:9001 seklinde kapatip acabiliyorsunuz yanilmiyorsam.Scriptinizde
> > satir sayisini azaltmis olursunuz :)
> >
> >
> >
> > On Sun, 8 Oct 2000, xxxx xxxxx wrote:
> >
> > > Bulundugum is yerine ext 56 k 'lik bir modemle squid proxy server
> > > kurdum.(yardimlarinizla tabi) Bilgisayar acilista baglantiyi yapiyor.
> Her
> > > yarim saatte bir baglanti kontrol ediliyor. Ayrici bulabildigim tum
chat
> ve
> > > icq portlarini kapattim.(Bos bir zamanda bazi adresleride
kapatacagim.)
> > > Bence sistem cok guzel calisiyor. Asagida sistemin acilisinda calisip
> tum
> > > ayarlari yapan multinet isimli bir script var. Onerileriniz varsa
lutfen
> > > scripte ekleyin.
> > >
> > > Saygi ve sevgilerimle ...
> > >
> > > ##################################################################
> > > # multinet scripti /etc/rc.d/rc.local ecerisinden calistiriliyor.
> > > echo "multinet"
> > >
> > > # ip izin
> > > ipfwadm -F -p deny
> > > ipfwadm -F -a m -b -S 192.168.0.0/24 -D 0.0.0.0/0
> > >
> > > #chat portlar kapatiliyor
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 5555 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 6660 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 6661 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 6662 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 6663 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 6664 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 6665 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 6666 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 6667 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 6668 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 6669 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 6670 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 6680 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 6690 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 7001 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 7002 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 7775 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 7777 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 8000 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 8888 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 9000 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 9001 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 9090 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 9999 -j REJECT
> > >
> > > #icq portlar kapatiliyor
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4001 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4002 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4003 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4004 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4005 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4006 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4007 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4008 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4009 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4010 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4011 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4012 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4013 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4014 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4015 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4016 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4017 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4018 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4019 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4020 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4095 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4096 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4097 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4098 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4099 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4100 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4131 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4132 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4133 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4134 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4141 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4142 -j REJECT
> > > ipchains -A input -p tcp -s 0/0 -d 0/0 4143 -j REJECT
> > >
> > > #80. portta gelen istekler squid'e yonlendiriliyor.
> > > ipchains -A input -p tcp -d 0.0.0.0/0 80 -j REDIRECT 3128
> > > # FW="/sbin/ipfwadm"
> > > # ${FW} -I -a accept -W lo
> > > # ${FW} -I -a accept -P tcp -D 192.168.0.1 80
> > > # ${FW} -I -a accept -P tcp -D 0/0 -r 3128
> > >
> > > #Squid calistiriliyor.
> > > /usr/local/squid/bin/squid&
> > >
> > > #connect
> > > echo "doruk baglantisi yapiliyor"
> > > autodial&
> > > ##################################################################
> > >
> > > ##################################################################
> > > #surekli ppp baglantisini saglayan autodial script'i
> > > d=1
> > > while [ $d -lt 10 ] #sonsuz dongu
> > > do
> > > doruk1 #ppp script
> > > sleep 31
> > > doruk2 #ppp script
> > > sleep 32
> > > doruk3 #ppp script
> > > sleep 33
> > > doruk4 #ppp script
> > > sleep 10m #10 dak.bekle
> > > sleep 11m #11 dak.bekle
> > > sleep 12m #12 dak.bekle
> > > done
> > > ##################################################################
> > >
> > >
> > >
> _________________________________________________________________________
> > > Get Your Private, Free E-mail from MSN Hotmail at
> http://www.hotmail.com.
> > >
> > > Share information about yourself, create your own public profile at
> > > http://profiles.msn.com.
> > >
> > >
> > >
> > > Listeden cikmak icin:
> > > unsub linux
> > > mesajini listeci@bilkent.edu.tr adresine gonderiniz.
> > > Lutfen Listeci icin MIME / HTML / Turkce Aksan kullanmayin.
> > > Listeci arayuzu:
> http://listweb.bilkent.edu.tr/yardim/bilkent/linux.html
> > > Liste arsivinin adresi: http://listweb.bilkent.edu.tr/
> > >
> >
> >
> >
> > Listeden cikmak icin:
> > unsub linux
> > mesajini listeci@bilkent.edu.tr adresine gonderiniz.
> > Lutfen Listeci icin MIME / HTML / Turkce Aksan kullanmayin.
> > Listeci arayuzu:
http://listweb.bilkent.edu.tr/yardim/bilkent/linux.html
> > Liste arsivinin adresi: http://listweb.bilkent.edu.tr/
> >
> >
>
>
>
> Listeden cikmak icin:
> unsub linux
> mesajini listeci@bilkent.edu.tr adresine gonderiniz.
> Lutfen Listeci icin MIME / HTML / Turkce Aksan kullanmayin.
> Listeci arayuzu: http://listweb.bilkent.edu.tr/yardim/bilkent/linux.html
> Liste arsivinin adresi: http://listweb.bilkent.edu.tr/
>
Listeden cikmak icin:
unsub linux
mesajini listeci@bilkent.edu.tr adresine gonderiniz.
Lutfen Listeci icin MIME / HTML / Turkce Aksan kullanmayin.
Listeci arayuzu: http://listweb.bilkent.edu.tr/yardim/bilkent/linux.html
Liste arsivinin adresi: http://listweb.bilkent.edu.tr/