Me pēhea te ki te whakaturia ake iptables ki te aukati waka katoa anake SSH i Debian Linux?

Tukuna ki runga e

Tirohia te whirihoranga iptables nāianei
iptables -S

kia takoto kau hoki tou putanga e whai ake…

  -P tāuru whakaae
  -P WHAKAMUA whakaae
  OUTPUT -P whakaae

 

Ki te kore he kau koutou iptables rite runga ake ka anō tauranga i taea e tuwhera i runga i tou mīhini. I roto i tenei take, ki Heoi, i te tepu, momo iptables -F, ka tirohia te whirihoranga iptables mā te pato iptables -S.

 

Whakarite ki te hei pakiaka

su
 

faaue E tomo e whai ake nei whirihoranga kotahi raina i te wa. Koa whakarite ko te taua rite i raro i te tikanga o te urunga, te kore e aukati koutou SSH.

   iptables -Ko ha tāuru -i na -j whakaae
   iptables -Ko ha tāuru -p TCP -m TCP --dport 22 -j TALI
   iptables -Ko ha TUTUKINGA -o na -j whakaae
   iptables -Ko ha WHÄITI -p --sport TCP 22 -āhua m --state whakapumautia -j whakaae
   iptables -P tāuru TULUTĀ
   iptables -P TULUTĀ OUTPUT

I roto i te i runga ake, na ko hoki te whāurutau loopback hiahiatia nei e te tahi mau tono, me kahore reira etahi tono kia whatiia.

 

E hinaaro atoa paha koe ki te tuku waka katoa ki te putanga. Na reira, e tono i te ture e whai ake nei hei utu o te runga ake…

   iptables -Ko ha tāuru -i na -j whakaae
   iptables -Ko ha tāuru -p TCP -m TCP --dport 22 -j TALI
   iptables -P tāuru TULUTĀ

 

Ki te hiahia koe ki te tukuna mo whakapumautia, ka pā ana pākete ka e tono i te ture e whai ake nei. Te kore tenei e kore e taea ki te whakamahi i pai-kia me tono git koutou. Whakamahia te whai ake hei utu o te runga ake 2 huinga ture.

   --state whakapumautia āhua iptables tāuru au -m,E pā ana -j whakaae
   iptables -Ko ha tāuru -i na -j whakaae
   iptables -Ko ha tāuru -p TCP -m TCP --dport 22 -j TALI
   iptables -P tāuru TULUTĀ

Kia kua whakaritea e koe nga ture tino tika ana mo koutou pūnaha, e hiahia ana koe ki te whakaora i to koutou ture, te kore e kore ratou e vilitaki i muri i rebooting

Tiaki koutou ture ki te kōnae

iptables-save > /etc/iptables.conf

Ko te whakaora i runga i tou tikanga i roto i te kōnae. Na ka Me ki te uta o koutou ture i runga i nga anō koe

nano /etc/rc.local

Tāpiri i te raina e whai ake ki te kōnae, i runga exit 0

iptables-restore < /etc/iptables.conf
 

Kei raro nei ētahi tikanga ki te ture ...

tikanga whakapumautia e whai pānga te pākete te ki te hononga i kite nei pākete i roto i ngā tohutohu e rua

tikanga TAAIHIA e Kei te tīmata i te pākete te hononga hou, engari e pā ana te ki te hononga tīariari, pērā i te whakawhitinga raraunga FTP, he hapa ICMP ranei.