[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[debian-users:37666] Re: iptable 特定のPCだけインターネットサーフィン 他はイントラのwebサーバーが見れるだけ

YłB

>>> In Message "[debian-users:37664] Re: iptable  	PCC^[lbgT[tB ̓CgwebT[o[邾"
>>>            <20030712155315.52db14f8.okou@xxxxxxxxxxxxxxxxx>,
>>>  <okou@xxxxxxxxxxxxxxxxx>  said;
>  GR[fOԈĂ邩ȂƂł܂AMĒ܂B

mɊԈĂ܂B܂ɂCɂȂ̂łƓeĒ܂B

܂AGR[hႤ̂́AIPAhX̊eINebg̋؂ɁA
ṕuBvgĂ邽ߕϊɎŝƎv܂B
܊px\ꂽ̂łAoOɌ܂傤B

ɁÂ܂B
 * ̂AړI͉
 * ĉ{l܂,}̂
 * ݂̏Ԃ͂ǂBʼn̂
炢ȂƁANԎo܂B

ŌɁAo΁uԐMvƁuVKṽ[𐳂gĉB
uԐMv́A[̕ҏWʂɂ炩 To p͂邾ł͂ȂāA
uiIꂽ[ɑ΂jԎłvƂtŃ[܂B
uԐMv{^͒P To ̓͂ȗ邽߂ɂ킯ł͂܂B
Ȃ̂ŁAVbȂKuVKvŏoĉB
tɕԐMȂA*ꏊ* ԐMĉB


՘bxB

-----------------------------------------------------------------------

> O̓eł win192.168.72.131 win192.168.72.PQO݂Ă܂܂B
> Ōq̃[ɑウ܂B

̖ړI͌Ȃ悤ɂ邱Ƃł傤H

>  > fletz ISDN
>  > |
>  > router
>  > NIC 192.168.1.50
>  > |
>  > NIC 192.168.1.250
>  > sarge
>  > NIC 192.168.72.250
>  > |
>  > HUB192.168.72.PQOA192.168.72.207
>  > |
>  > 192.168.72.131A192.168.72.131
>  > Ƃ‹ 
> 
> ƁA
> win192.168.72.1QO win192.168.72.131 ݂͓̂RƂĂ
> win192.168.72.131   win192.168.72.1QO Ȃ̂svcłB
> (192.168.72.250͌oRȂ͂Ȃ̂)

P 192.168.72.131 ɐݒ肳ĂTulbg}XNԈĂ肵܂񂩁H

<...΂Ɨ...>

> win192.168.72.131   win192.168.72.1QO݂͂Ȃ̂ɑ΂
> S̓ĐʂłA
> 
> ʂwin192.168.72.131 win192.168.72.1QOɒŝł
> $IPTABLES -t nat -A PREROUTING -i eth1 -s 192.168.72.131/32 -p tcp -d 192.168.72.250/32  --destination-port 137:139 -j  DROP
> $IPTABLES -t nat -A PREROUTING -i eth1 -s 192.168.72.131/32 -p udp -d 192.168.72.250/32  --destination-port 137:139 -j  DROP
>  邽߂192.168.72.131 192.168.72.250 nat̂ߎ΂̂悤ɐ񂹂 DROP[󂯂ƍl܂B
> łAƂ ƕ|Ƃ N肻ȋC܂B

Ȃ̂ňSł :-)

-- 
Tatsuki Sugiura   mailto:sugi@xxxxxxxxxxxxxxxxxxxxxxxxxxx