From: Ozgur Karatas (okaratas@ogr.iu.edu.tr)
Date: Tue 31 Oct 2006 - 07:01:45 GMT
Merhaba,
eth0 dis bacak olduguna gore kurallarda sorun yok gibi gorunuyor. Acaba
modemin kendi icinde bir rule belirtmek gerekiyor mu? Modemin markasi
nedir? Bence tum kurallari silip (iptables -F) disaridan baglanmayi
deneyin. Eger problemsiz baglanirsaniz sorunun modemde olmadigi anlasilir
ve kurallari tekrar gozden gecirirsiniz.
sevgiler,
> Arkadaşlar,
> Linux servera ssh ile şirket dışından erişemiyorum.
> Sebebini bulamadım bir türlü.
> Iptables çıktım aşağıdaki gibi... Sorun nerede olabilir??
>
> Not: Modem üzerinden makinenin dış ip bacağına ssh portunu nat yaptım.
>
> # Generated by iptables-save v1.2.11 on Wed Oct 18 14:31:53 2006
> *mangle
> :PREROUTING ACCEPT [5719656:3766785728]
> :INPUT ACCEPT [1857469:1196597788]
> :FORWARD ACCEPT [3679844:2555926518]
> :OUTPUT ACCEPT [2159830:1202598264]
> :POSTROUTING ACCEPT [5839673:3758524742]
> COMMIT
> # Completed on Wed Oct 18 14:31:53 2006
> # Generated by iptables-save v1.2.11 on Wed Oct 18 14:31:53 2006
> *nat
> :PREROUTING ACCEPT [253012:20208567]
> :POSTROUTING ACCEPT [3460:286391]
> :OUTPUT ACCEPT [57059:3535465]
> -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination
> 10.0.0.2
> :3128
> -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
> -A POSTROUTING -o eth1 -j MASQUERADE
> COMMIT
> # Completed on Wed Oct 18 14:31:53 2006
> # Generated by iptables-save v1.2.11 on Wed Oct 18 14:31:53 2006
> *filter
> :INPUT DROP [1:40]
> :FORWARD ACCEPT [1791833:699546443]
> :OUTPUT ACCEPT [1094982:122283150]
> -A INPUT -i lo -j ACCEPT
> -A INPUT -i eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
> -A INPUT -i eth0 -j ACCEPT
> -A INPUT -j LOG
> -A INPUT -j DROP
> -A FORWARD -i eth0 -j ACCEPT
> -A OUTPUT -o lo -j ACCEPT
> -A OUTPUT -o eth0 -j ACCEPT
> COMMIT
> # Completed on Wed Oct 18 14:31:53 2006
,''`. Ozgur Karatas
: :' : ozgur@ozgurkaratas.com
`. `' http://www.ozgurkaratas.com
`- Powered By GNU\Linux
.
_______________________________________________
Linux-ag mailing list
Linux-ag@liste.linux.org.tr
http://liste.linux.org.tr/mailman/listinfo/linux-ag