I Compile succeeded the iptables. I try create its "rules". But write me any "missing module":<br><br>pv@Csiszilla /Programs/Iptables/Settings]./szabalyok<br>iptables v1.3.2: Couldn't load match `psd':/Programs/Iptables/1.3.2/lib/iptables/libipt_psd.so: cannot open shared object file: No such file or directory
<br><br>In the "szabalyok" script is the following:<br><br>#!/bin/zsh<br>#Minden tilos, ami nincs külön engedélyezve<br>iptables -P INPUT DROP; iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT<br>
<br>#Tudni akarom, ki csatlakozik az FTP szerveremhez.<br>iptables -A INPUT -p tcp -m state --state NEW --dport 21 -j LOG --log-prefix "[FTP_KAPCSOLAT] "<br><br>#engedélyezni akarom a bejövő FTP,WWW,SMTP kapcsolatokat.
<br>iptables -A INPUT -p tcp -m multiport --dports ftp,www,smtp -j ACCEPT<br><br>#A portscan-gyanús csomagokat el akarom dobni.<br># (csak ha bele van patch-elve a kernelbe)<br>iptables -I INPUT -m psd --psd-weight-threshold 60 --psd-delay-threshold 10000 --psd-lo-ports-weight 10 --psd-hi-ports-weight 5 -j REJECT
<br><br>#Engedélyezem a 62144 portot az Azureus számára<br>iptables -A INPUT -p tcp --dport 62144 -j ACCEPT<br><br><br>I try the following usable of iptables:<br><br>- all is disabled, if not explicit enabled.<br>- log of the FTP connections
<br>- enabled www, ftp, smtp connections, and the 62144 port for decentralized tracking of Azureus bittorrent kliens<br>- if a package seems to portscan, this should rejected<br><br>And, it is not done: I want enable the https, ftps. And I want, the root user CANNOT access to Internet with any port (nothing input and output to/from Internet) , BUT the wget (only the root-used wget) yes if the root user use this wget progs (this need for the Compile and InstallPackage as root). Of course, the wget can used by the non-root-privilegized user. But the root can connect to the Internet only with the wget. How can I make this?
<br><br>And, what is the best methode, automatic starting of the iptables at bootup?<br><br>Thanks! (btw: I am TOTAL beginner in the NET-knowledge! This is me first probe in the firewall-themes...)<br><br>Zoli<br><br><br>
<br clear="all"><br>-- <br>Honlapom: <a href="http://poliverzum.birodalom.net/powi">http://poliverzum.birodalom.net/powi</a><br>Fórumom: <a href="http://birodalom.net/forum">http://birodalom.net/forum</a><br><br>A #86-os sorszámú hivatalosan bejegyzett GoboLinux felhasználó
<br>The #86 official GoboLinux-user<br><br>A GoboLinux felhasználók hivatalos magyar fóruma:<br>The official forum for the hungarian GoboLinux-users:<br><a href="http://linux.birodalom.net/smf">http://linux.birodalom.net/smf
</a>