{"id":1165,"date":"2005-05-01T21:36:06","date_gmt":"2005-05-01T12:36:06","guid":{"rendered":"\/?p=1165"},"modified":"2005-05-01T22:58:26","modified_gmt":"2005-05-01T13:58:26","slug":"ipchains","status":"publish","type":"post","link":"https:\/\/www.hiro345.net\/blogs\/hiro345\/archives\/1165.html","title":{"rendered":"ipchains"},"content":{"rendered":"

ipchains\u306e\u4f7f\u3044\u65b9\u3092\u601d\u3044\u51fa\u3057\u3066\u3044\u308b\u6700\u4e2d\u3002\uff12\u5e74\u4f4d\u524d\u306b\u8cc7\u6599\u3092\u307e\u3068\u3081\u305f\u6c17\u304c\u3059\u308b\u3093\u3067\u3059\u304c\u3001\u8cc7\u6599\u304c\u898b\u5f53\u305f\u308a\u307e\u305b\u3093\u3002\u3069\u3053\u306b\u3084\u3063\u305f\u304b\u306a\u3041…<\/p>\n

\u25a0\u52d5\u4f5c\u78ba\u8a8d
\nipchains -n -L input<\/p>\n

\u25a0DENY\u30eb\u30fc\u30eb\u8ffd\u52a0
\nipchains -A input -s 192.168.0.0\/24 -j DENY<\/p>\n

\u25a0\u30dd\u30fc\u30c8\u3054\u3068ACCEPT\u306e\u30eb\u30fc\u30eb\u8ffd\u52a0
\nipchains -I input -s 0\/0 -d 0\/0 177 -p udp -j ACCEPT
\nipchains -I input -s 0\/0 -d 0\/0 512 -p tcp -j ACCEPT<\/p>\n

\u25a0\u30eb\u30fc\u30eb\u524a\u9664(-A\u304c-D\u306b\u306a\u308b\u3060\u3051)
\nipchains -D input -s 192.168.0.0\/24 -j DENY<\/p>\n

\u25a0\u30d5\u30a9\u30ef\u30fc\u30c9\u306e\u6709\u52b9
\necho 1 > \/proc\/sys\/net\/ipv4\/ip_forward<\/p>\n

\u25a0IP Masquerade\u306e\u8a2d\u5b9a
\nipchains -A forward -s 192.168.1.0\/24 -d 0.0.0.0\/0 -j MASQ<\/p><\/div>\n

\u307f\u3064\u304b\u3063\u305f\u3051\u3069\u3001\u3053\u3053\u306b\u66f8\u3044\u305f\u4ee5\u4e0a\u306e\u60c5\u5831\u306f\u3068\u304f\u306b\u306a\u3044\u3088\u3046\u306a\u6c17\u3082\u3059\u308b\u306e\u3067\u3068\u308a\u3042\u3048\u305a\u305d\u306e\u307e\u307e\u306b\u3057\u3066\u304a\u304f\u3053\u3068\u306b\u3059\u308b\u3002\u3044\u307e\u3055\u3089ipchains\u3067\u56f0\u308b\u4eba\u3082\u3044\u306a\u3044\u3060\u308d\u3046\u3002iptables\u3060\u308d\u3046\u304b\u3089\u306a\u3041\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

ipchains\u306e\u4f7f\u3044\u65b9\u3092\u601d\u3044\u51fa\u3057\u3066\u3044\u308b\u6700\u4e2d\u3002\uff12\u5e74\u4f4d\u524d\u306b\u8cc7\u6599\u3092\u307e\u3068\u3081\u305f\u6c17\u304c\u3059\u308b\u3093\u3067\u3059\u304c\u3001\u8cc7\u6599\u304c\u898b\u5f53\u305f\u308a\u307e\u305b\u3093\u3002\u3069\u3053\u306b\u3084\u3063\u305f\u304b\u306a\u3041… \u25a0\u52d5\u4f5c\u78ba\u8a8d ipchains -n -L input \u25a0DENY\u30eb\u30fc\u30eb\u8ffd\u52a0 … \u7d9a\u304d\u3092\u8aad\u3080 →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-1165","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/www.hiro345.net\/blogs\/hiro345\/wp-json\/wp\/v2\/posts\/1165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hiro345.net\/blogs\/hiro345\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hiro345.net\/blogs\/hiro345\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hiro345.net\/blogs\/hiro345\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hiro345.net\/blogs\/hiro345\/wp-json\/wp\/v2\/comments?post=1165"}],"version-history":[{"count":0,"href":"https:\/\/www.hiro345.net\/blogs\/hiro345\/wp-json\/wp\/v2\/posts\/1165\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.hiro345.net\/blogs\/hiro345\/wp-json\/wp\/v2\/media?parent=1165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hiro345.net\/blogs\/hiro345\/wp-json\/wp\/v2\/categories?post=1165"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hiro345.net\/blogs\/hiro345\/wp-json\/wp\/v2\/tags?post=1165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}