p2p+iptables

Electron · Сообщение **Electron** » 20.04.2006 16:35

Здравствуйте. Кто-нибудь имеет опыт настройки p2p через шлюз? NAT включён. Нужно ли подгружать отдельные модули?

Chain INPUT (policy DROP 31506 packets, 3588K bytes)
 pkts bytes target     prot opt in     out     source               destination
 102K   17M ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0
 581K  686M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
10224  902K ACCEPT     all  --  *      *       192.168.0.0/24       0.0.0.0/0

Chain FORWARD (policy ACCEPT 2571 packets, 124K bytes)
 pkts bytes target     prot opt in     out     source               destination
93142   68M MAIL       all  --  *      *       0.0.0.0/0            0.0.0.0/0
92740   69M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
   24  1152 ACCEPT     tcp  --  *      *       192.168.0.0/24       0.0.0.0/0           state NEW multiport dports 25,110
   49  2908 ACCEPT     icmp --  *      *       192.168.0.0/24       0.0.0.0/0           icmp type 8
  178 11243 ACCEPT     all  --  *      *       192.168.0.0/24       10.0.0.1
   24  1404 ACCEPT     all  --  *      *       192.168.0.0/24       10.0.0.2

Chain OUTPUT (policy ACCEPT 1016 packets, 261K bytes)
 pkts bytes target     prot opt in     out     source               destination
30165   13M ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0
 366K   72M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
  443 23036 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 80,443

Chain DAILY_POP (1 references)
 pkts bytes target     prot opt in     out     source               destination
   69 42264 DAY_POP    all  --  *      *       0.0.0.0/0            0.0.0.0/0
   69 42264 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain DAY_POP (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.9
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.8
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.13
   51 34778 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.19
   18  7486 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.14
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.7
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.11

Chain MAIL (1 references)
 pkts bytes target     prot opt in     out     source               destination
  166 84959 POP        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spt:110
43641   19M RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain MONTHLY_POP (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.9
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.8
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.13
   73 44648 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.19
   38 17248 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.14
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.7
   55 23063 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.11

Chain POP (1 references)
 pkts bytes target     prot opt in     out     source               destination
  166 84959 DAILY_POP  all  --  *      *       0.0.0.0/0            0.0.0.0/0
  166 84959 MONTHLY_POP  all  --  *      *       0.0.0.0/0            0.0.0.0/0
  166 84959 YEARLY_POP  all  --  *      *       0.0.0.0/0            0.0.0.0/0
  166 84959 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain YEARLY_POP (1 references)
 pkts bytes target     prot opt in     out     source               destination
  166 84959 YEAR_POP   all  --  *      *       0.0.0.0/0            0.0.0.0/0
  166 84959 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain YEAR_POP (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.9
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.8
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.13
   73 44648 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.19
   38 17248 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.14
    0     0 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.7
   55 23063 RETURN     all  --  *      *       0.0.0.0/0            192.168.0.11

Код: Выделить всё

Chain PREROUTING (policy ACCEPT 44743 packets, 4828K bytes)
 pkts bytes target     prot opt in     out     source               destination
   90  5592 DNAT       udp  --  *      *       192.168.0.0/24       0.0.0.0/0           udp dpt:53 to:10.0.0.1
    0     0 DNAT       tcp  --  *      *       192.168.0.0/24       0.0.0.0/0           tcp dpt:53 to:10.0.0.1

Chain POSTROUTING (policy ACCEPT 42445 packets, 1709K bytes)
 pkts bytes target     prot opt in     out     source               destination
 3646  308K MASQUERADE  all  --  *      *       192.168.0.0/24       0.0.0.0/0
  760 79523 MASQUERADE  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT 43668 packets, 1941K bytes)
 pkts bytes target     prot opt in     out     source               destination

Собственно, цепочка FORWARD - ACCEPT