Navegando neste Tópico:   1 usuários anônimos





Servidor atrás de Firewall ter acesso a dois links?
Home away from home
Cadastrado em:
14/2/2012 20:37
De Belo Horizonte MG
Grupo:
Registered Users
Mensagens: 688
Offline
Olá!
Sei que não é fácil dar uma informação dado a dificuldade de expor meu problema 100%, postando scritps etc.. na verdade estou atrás de uma boa dica que possa me dar o rumo certo. Meu problema!

Meu firewall possui 2 links, e os mesmo estão funcionando normalmente, consigo fazer minhas estações saírem, e entrarem pelo link1 ou pelo link2, estou precisando de uma dica de como fazer uma estação receber conexões de fora tanto do link1 como do link2.

Estou precisando de dicas sobre o mangle do iptables, como utilizado de preferencia algum tipo de exemplo ou exercício para poder desenvolver a ideia melhor. Tenho tentado alguns links que achei aqui no fórum e em outros mas ainda não funcionei ele da forma certa.


Enviado em: 9/5 16:33
Transferir mensagem para outros aplicativos Transferir


Re: Servidor atrás de Firewall ter acesso a dois links?
Home away from home
Cadastrado em:
14/2/2012 20:37
De Belo Horizonte MG
Grupo:
Registered Users
Mensagens: 688
Offline
Ola

Estou precisando de uma receita de bolo do iptables para acessar uma DVR atrás de um servidor Linux com 2 links, preciso ter acesso ao DRV tanto pelo link1 como link2.

Hoje consigo ter acesso pelo link1 ou pelo link2 os dos simultaneamente não.

## criei as seguinte tabelas de roteamento

ip route show table link1
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.253
10.1.0.0/24 dev eth1 proto kernel scope link src 10.1.0.253
default via 10.1.0.254 dev eth1

ip route show table link2
10.2.0.0/24 dev eth2 proto kernel scope link src 10.2.0.253
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.253
default via 10.2.0.254 dev eth2

Estou usando o seguinte script para teste
iptables -F
iptables -X
iptables -t nat -F
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP
iptables -F -t mangle
iptables -X -t mangleecho 0 > /proc/sys/net/ipv4/conf/all/log_martians
echo 1 > /proc/sys/net/ipv4/ip_forward
echo 1 > /proc/sys/net/ipv4/ip_dynaddr
modprobe iptable_nat
modprobe ip_conntrack
modprobe ip_conntrack_ftp
modprobe ip_tables
modprobe ip_gre
modprobe ip_nat_pptp
modprobe ip_conntrack_pptp
modprobe ppp_mppe

## apago os rules
ip rule del from 192.168.1.201 lookup link2 2>/dev/null
ip rule del fwmark 1 lookup link1 2>/dev/null
ip rule del fwmark 2 lookup link2 2>/dev/null
iptables -t mangle -A PREROUTING -i eth0 -j MARK --set-mark 1 -m mark --mark 0

### Rirecionamento
iptables -t nat -A PREROUTING -p tcp -d 10.1.0.253 --dport 8000 -j DNAT --to-destination 192.168.1.201:80
iptables -t nat -A PREROUTING -p tcp -d 10.2.0.253 --dport 8000 -j DNAT --to-destination 192.168.1.201:80

iptables -A FORWARD -s 0/0 -d 0/0 -j ACCEPT
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables -t nat -A POSTROUTING -s 0/0 -d 0/0 -o eth1 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 0/0 -d 0/0 -o eth2 -j MASQUERADE

### Defino a roda
ip rule add fwmark 1 lookup link1
ip rule add fwmark 2 lookup link2

Alguém teria um script que faça o DVR receber a conexão pelos dois links?

Enviado em: 28/6 10:45
Transferir mensagem para outros aplicativos Transferir


Re: Servidor atrás de Firewall ter acesso a dois links?
Home away from home
Cadastrado em:
14/2/2012 20:37
De Belo Horizonte MG
Grupo:
Registered Users
Mensagens: 688
Offline
corrigindo


iptables -t mangle -A PREROUTING -i eth0 -s 192.168.1.201 -j MARK --set-mark 1 -m mark --mark 0


Enviado em: 28/6 11:21
Transferir mensagem para outros aplicativos Transferir


Re: Servidor atrás de Firewall ter acesso a dois links?
Home away from home
Cadastrado em:
14/2/2012 20:37
De Belo Horizonte MG
Grupo:
Registered Users
Mensagens: 688
Offline

Enviado em: 29/6 20:57

Estefânio Brunhara San Giovanne Informática Ltda.
Soluções e integrações c/ Sistemas Inteligentes
Windows/Linux a melhor opção Empresa/Internet
(31)3375-1202 9-8846-2330
Transferir mensagem para outros aplicativos Transferir


Re: Servidor atrás de Firewall ter acesso a dois links?
Home away from home
Cadastrado em:
14/2/2012 20:37
De Belo Horizonte MG
Grupo:
Registered Users
Mensagens: 688
Offline
fechando o tópico k

Enviado em: 29/6 21:12
Transferir mensagem para outros aplicativos Transferir


Re: Servidor atrás de Firewall ter acesso a dois links?
Quite a regular
Cadastrado em:
9/11 0:33
De shanghai
Grupo:
Registered Users
Mensagens: 63
Offline
or michael kors outlet the adidas.nl flames, ray ban outlet he mcm bags can instyler remain rolex replica silent celine outlet for pandora jewelry hours, air max shoes my hermes belt mind nfl giants jerseys do nike free not hollister co want michael kors uhren anything, oakley vault completely ralph lauren factory store immersed adidas clothings in skechers shoes outlet their north face vast rolex watches and baseball jerseys immense stone island jackets of omega watches a vans shoes dream, nfl buccaneers jerseys to polo outlet online soar supra shoes outlet sunny cheap coach purses day, vibram five fingers rainy tory burch sale day polo ralph to mcm backpack outlet cover oakley sunglasses cheap wind fred perry polos shield ralph lauren rain, nike air max not swarovski crystal afraid of ray ban tomorrow, oakley sunglasses outlet how hilfiger outlet much nba jersey wind toronto raptors jerseys and polo ralph rain; jerseys from china do skechers canada not longchamp outlet go cheap oakley sunglasses wandering, oakley holbrook tomorrow, oakley outlet how nhl jerseys to michael kors choose; nfl jerseys never reebok outlet mind, burberry there swarovski are nike store a nike few valentino shoes years marc jacobs handbags more nfl browns jerseys weathered; vans not ray-ban sunglasses to oakley black friday think oakley outlet online about montblanc those nike roshe run moments mens hoodies slip cheap oakley sunglasses genuine nfl redskins jerseys geometry? air max pas cher Guarding rockets jerseys one ed hardy pair louboutin shoes of hugo boss wings tommy hilfiger online shop of free running a longchamp dream, beats by dr dre to northface brave burberry outlet online flying sacramento kings jerseys between michael kors outlet heaven nike jordan and nfl vikings jerseys earth.Whether nike shoes true ferragamo or utah jazz jerseys false, michael kors outlet store those eyeglasses frames who nike air have birkenstock deutschland been versace in coach bags outlet a fred perry better, lacoste outlet relentless asics gel years, louboutin shoes there prada are minnesota timberwolves jerseys numerous new balance shoes heart ralph lauren bit nfl chiefs jerseys by ray ban sunglasses bit, washington wizards jerseys through north face canada wind pumas and burberry outlet online rain, ray ban black friday we wholesale handbags will ecco mens shoes see beats by dre headphones the converse sneakers rainbow bottega of veneta stunning, new orleans pelicans jerseys silent michaelkors.com time, dsquared2 shoes and supra shoes finally ferragamo water, michael kors outlet online slight nfl colts jerseys ripples, air max 90 slowly mcm handbags calm.■ swarovski online shop thoughts jordans such tommy hilfiger canada as hermes birkin bag green oakley rooms, oakley store next shoes outlet to rolex watches the air max small cheap true religion window omega openSlowly timberland shoes walking miami heat jersey on michael kors the nfl lions jerseys road dsquared2 sale of asics life, marc jacobs handbags there thomas sabo is prada outlet a michael kors tiny barbour jackets outlet thorns pandora charms deep ray ban wayfarer huts, coach outlet usa ivy michael kors handbags seasons nfl rams jerseys fear nfl eagles jerseys filled converse a coach factory outlet online corner,surrounded louboutin shoes by oakley full nike soccer shoes of thunder jerseys unknown air max flowers, new balance pleasant, easton bats refined, prada shoes elegant, true religion gentle brooklyn nets fragrance true religion jeans outlet when true religion outlet passed, michael kors bags the puma online shop step adidas shoes by celtics jerseys step nfl packers jerseys on air max 2007 the louboutin occasion new york knicks jersey of michael kors outlet your burberry mouth, nike mercurial my polo ralph lauren thoughts juicy couture clothings such coach factory as mbt shoes green nike shoes rooms, oakley next atl jerseys to huaraches the soccer shoes outlet small nike window easton bats open, air max smelling louboutin shoes flowers, salvatore ferragamo birds timberland outlet Yinger, golden state warriors as ray ban pas cher well jordan retro 11 as prada handbags the ray ban sun, mizuno very michael kors outlet online pure, nba jersey very jimmy choo pureAt air yeezy this tommy hilfiger age, omega watches there true religion jeans outlet are nfl titans jerseys always burberry handbags some adidas online shop inexplicable air jordan retro recollections, nike outlet I jordan retro do michael kors outlet online sale not armani watches know michael kors purses the coach outlet situation coach factory outlet plays, swarovski crystal fond, plein shoes will adidas zx be thomas sabo listening nike uk to flat iron a omega watches song ray ban pas cher suddenly reebok tears bcbg max azria will adidas be michael kors purses intoxicated cheap barbour jackets in coach outlet store the burberry outlet same air max sentence nfl bears jerseys can long champ not hornets jersey extricate phoenix suns jerseys themselves, birkenstock taschen deutschland will tn requin pas cher be soccer jerseys facing polo ralph lauren outlet a michael kors outlet online green nfl jerseys leaf, hollister clothing a michael kors outlet online sale red nike id flower polo ralph lauren outlet bangs, nfl panthers jerseys will nfl broncos jerseys look christian louboutin at clippers jerseys a longchamp black friday residual nike shoes red, burberry outlet online setting boutique clothing sun hermes birkin dressed tommy hilfiger online inexplicably nfl steelers jerseys sad, philipp plein clothes on ray ban uk the mlb jerseys interpretation adidas online shop of lakers jersey the nfl seahawks jerseys youth longchamp firmly nike outlet locked nhl jerseys in michael kors the polo ralph lauren outlet online growth nike free of ralph lauren notebooks, nfl ravens jerseys in indiana pacers jerseys the burberry handbags years iphone 5s cases of montre femme fermentation, juicy couture handbags mellow barbour and nike running shoes more michael kors outlet online sale concentrated.Slow north face pace, coach factory outlet online quietly cheap ray ban blow, hermes tracksuits listen versace clothes to dansko shoes outlet the mcm backpack sound birkenstock of new balance water, fighting nfl azcardinals jerseys to converse see nfl texans jerseys frogs ralph lauren uk married, givenchy smell ralph lauren outlet the hollister clothing store fragrance coach outlet online into under armour outlet the roshe nose, nike quietly oakley picked the north face up longchamp handbags a michael kors outlet online brush, nfl jets jerseys copy timberland pas cher down cheap oakley this replica watches quiet red bottom shoes moment spurs jerseys of vans harmony, air max 95 solemnly 76ers jerseys treasures burberry outlet online found michael kors happiness longchamp in chi flat iron the new balance store sun ferragamo shoes Pushuo. ray ban sunglasses outlet The burberry sale full huarache moon nike air max is new balance a oakley sunglasses painting, swarovski canada poetry converse outlet month is michael kors bags missing, beats headphones then polo ralph lauren better huarache appreciate chrome hearts clothings life nike roshe run no nike roche matter barbour outlet store successful hogan sito ufficiale or polo ralph lauren incomplete tory burch also orlando magic jerseys is jimmy choo outlet a bulls jersey kind kate spade bags of ray ban outlet unique kate spade handbags beauty.Catch dre headphones the nike air max passage the north face outlet of hollister online shop time, nfl cowboys jerseys but detroit pistons jersey they rolex watch can nfl bills jerseys be burberry handbags a skechers mens shoes good uhren shop time nfl saints jerseys in giuseppe zanotti an purses and handbags instant nfl dolphins jerseys freeze michael kors bags into nfl chargers jerseys eternity.Thoughts coach factory outlet such cle Jerseys as ray ban green rooms, nfl 49ers jerseys opened ralph lauren outlet online the nike free trainer 5.0 little coach factory online window nike roshe run and hogan shoes let ralph lauren outlet the north face backpacks sun air force lingering ray bans look swarovski jewelry at ralph lauren uk flowers pandora accompanied michael kors by coach black friday butterflies, air max thea welcome milwaukee bucks jerseys breeze air jordan unsolicited.It mavericks jerseys took hogan us prada sunglasses four giuseppe zanotti sneakers years coach shop factory to basketball shoes finally hollister co fall burberry outlet in ferragamo shoes outlet love north face outlet at ray-ban sunglasses the fitflop shoes foot nike factory of pandora jewellery australia this oakley pas cher piece hollister has michael kors handbags complained horloges numerous coach bags friday times iphone 4s cases in kate spade handbags the doudoune north face land, north face jackets but ray ban prezzi still lebron james shoes had cheap eyeglasses to nfl falcons jerseys leave fendi shoes at mcm bags the woolrich clearance last christian louboutin moment. nba jersey See wholesale handbags annual ralph lauren outlet online number tommy hilfiger outlet of nfl raiders jerseys school burberry handbags brother babyliss flat iron sister nike roshe run school true religion jeans women campus calvin klein outlet dragging air jordan shoes luggage oakley sunglasses cheap out oakley standard issue of nfl jaguars jerseys the nfl bengals jerseys door, coach outlet very portland trail blazers jerseys strange nike factory outlet why ralph lauren polo so mlb jerseys many coach factory outlet tears designer handbags and nuggets jersey emotion, fidget spinner until hollister kids we tommy hilfiger outlet stores come levis outlet to bcbg max this pandora charms moment rayban pointer oakley sunglasses came timberland boots to memphis grizzlies jerseys understand:Time adidas is salomon really michael kors handbags just nike air max 90 a long champ sign barbour mens jackets made cheap jordans of nfl patriots jerseys paper, cheap ray ban

pandora bracelet

Enviado em: 9/11 4:42
Transferir mensagem para outros aplicativos Transferir






Você pode exibir os tópicos.
Você não pode iniciar um novo tópico.
Você não pode responder.
Você não pode editar.
Você não pode excluir mensagens.
Você não pode incluir votações.
Você não pode votar.
Você não pode anexar arquivos.
Você não pode enviar mensagens sem aprovação.

[Pesquisa Avançada]