Freesco, NND, CDN, EOS
http://forum.freesco.pl/

blokowanie gg - wiem ze to juz bylo ale nie daje rady
http://forum.freesco.pl/viewtopic.php?f=35&t=10710		 Strona 1 z 1
Autor:  Piotras-KBW [ piątek, 13 stycznia 2006, 10:37 ]
Tytuł:  blokowanie gg - wiem ze to juz bylo ale nie daje rady
jak zablokowac gg? szukalem na forum i probowalem roznych metod i lipa :cry: problem wyglada nastepujaca skonfigurowalem firewalla tak aby blokowal gg wszystkim kompom ale nie blokuje jak trzeba albo nie wiem...... mianowicie gg dziala :/ a jak podepne laptopa w dowolnym miejcu sieci to gg mam pieknie zablokowane :| czy ktos mi powie co jest nie tak. pomocy !!!
Autor:  Piotras-KBW [ piątek, 13 stycznia 2006, 10:39 ]
Tytuł:  a wlasnie zapomnielem tu maci moj plik rc_user
#!/bin/sh
#
# User's part of start up scripts
# You may add your command here, see descriptions below

. /etc/system.cfg
. /etc/colors
. /etc/music.cfg

case "$1" in

boot) # Add hardware/software initialization here.
# This part is called once when linux is already running
# but router is not started yet.
;;

start) echo -n "Starting rc_user... "
# Add commands here you want to execute when starting
# the router.
# Use the fork command to launch programs which normally stay
# in the foreground.
# This part is called after all rc_* files.
=
;;

stop) echo -n "Stopping rc_user... "
# Add commands here you want to execute when restarting,
# shutting down or rebooting.
# Be careful not to use any commands which wait for user input.
# This part is called before all rc_* files.
=
;;

restart)
# The next sequence is usually enough.
rc_user stop; rc_user start
;;

firewall)
# Add your custom firewall rules here.
# Warning, incorrect rules could leave your system insecure.
# $INET always represents the Internet interface. But only when
# this script is called from the rc_masq file.
# These rules come before standard system rules.
# Example:
# reject incomming tcp connections to port 22 from the
# internet and log them
#ipfwadm -I -a deny -P tcp -W $INET -D 0.0.0.0/0 22 -y -o
#
# ----> Blokada calego ruchu LAN <--> INTERNET <----
ipfwadm -I -i reject -S $NETWORK0/$NETMASK0
ipfwadm -I -i reject -S $NETWORK1/$NETMASK1
#
#----> Odblokowanie ruchu DNS <----
ipfwadm -I -i accept -P udp -S 10.10.2.0/24 -D any/0 53
#
# ----> Odblokowanie WWW (http i http secure-https) <----
ipfwadm -I -i accept -P tcp -S 10.10.2.0/24 -D any/0 80 82 443
#
# ----> Odblokowanie FTP <----
ipfwadm -I -i accept -P tcp -S 10.10.2.0/24 -D any/0 21
#
# ----> Oblokowanie poczty na smtp i pop3 <----
ipfwadm -I -i accept -P tcp -S 10.10.2.0/24 -D any/0 25 110
#
# ----> Odblokowanie Telnetu w LAN-ie<----
ipfwadm -I -i accept -P tcp -S 10.10.2.0/24 -D 10.10.2.0/24 23
#
;;

newip) # This part is called when router got new IP address from
# ISP's DHCP server.
# The next sequence is usually enough.
# rc_user stop; rc_user start
;;

status) # Add commands that print out your service(s) status.
any ;;
esac
Strona 1 z 1 Strefa czasowa UTC+2godz.
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/