Fórum Ubuntu CZ/SK
Ostatní => Archiv => Téma založeno: zerg 07 Února 2007, 21:16:47
-
nazdar, chtel bych se zeptat co mam napsat do firewalu firehol, abych si povolil skype, a abych si povolil muj ftp server. moc dekuju.
-
Skype nema zadny konkretni port, proleze treba pres 80 nebo 443. Neni tedy treba ho jakkoliv povolovat.
Ftp server se povoli server ftp accept.
-
no ale proč me ide vždycky skype, když vypnu fireval, ja sa sice přihlasim na skype, ale všecky kontakty mám ofline, akdyž vypnu firewal, tak to funguje.
-
môj vyzerá takto a skype funguje bez problémov
#
# $Id: client-all.conf,v 1.2 2002/12/31 15:44:34 ktsaou Exp $
#
# This configuration file will allow all requests originating from the
# local machine to be send through all network interfaces.
#
# No requests are allowed to come from the network. The host will be
# completely stealthed! It will not respond to anything, and it will
# not be pingable, although it will be able to originate anything
# (even pings to other hosts).
#
version 5
# Accept all client traffic on any interface
# interface any world
# client all accept
DEFAULT_CLIENT_PORTS="1024:65535"
server_icq_ports="tcp/5190"
client_icq_ports="default"
interface eth0 external
protection strong 10/sec 10
policy drop
server icmp accept
server samba accept
client dns accept
client icmp accept
client ping accept
client telnet accept
client http accept
client https accept
client ftp accept
client ntp accept
client ssh accept
client icq accept
client jabber accept
client webcache accept
client all accept
-
jee diky moc , už sem to vyřešil.
-
Nastavenim "client all accept" jste v postate udelal totez co predtim - smerem od vas ven do internetu jse firewall uplne vypnul a povolil veskerou komunikaci.
-
ještě bych mel dotaz. co mam napsat když chci povolit určitou ip adresu, a nebo nejaký určitý port.
-
definovani novych sluzeb: http://firehol.sourceforge.net/adding.html
pokud chcete omezit platnost pravidla jen pro ucrcite cilove adresy, pouzijte parametr "dst", pro zdrojove adresy analogicky "src".
viz. napr. http://forum.ubuntu.cz/viewtopic.php?id=3295
-
Nastavenim "client all accept" jste v postate udelal totez co predtim - smerem od vas ven do internetu jse firewall uplne vypnul a povolil veskerou komunikaci.
držal som sa hesla, radšej viac povoliť aby fungovalo všetko. Podľa tvojej rady som to chcel opraviť, tak som zakomentoval "client all accept", lenže potom mi tiež nešiel skype ani frostwire, tak som to vrátil späť
-
no ale jake porty a co mam nastavit když chcu aby me sel ten skype?
a jeste aby me sly torenty? skoušel jsem toto:
# $Id: client-all.conf,v 1.2 2002/12/31 15:44:34 ktsaou Exp $
#
# This configuration file will allow all requests originating from the
# local machine to be send through all network interfaces.
#
# No requests are allowed to come from the network. The host will be
# completely stealthed! It will not respond to anything, and it will
# not be pingable, although it will be able to originate anything
# (even pings to other hosts).
#
version 5
# Accept all client traffic on any interface
#interface any world
#client all accept
DEFAULT_CLIENT_PORTS="1024:65535"
server_icq_ports="tcp/5190"
client_icq_ports="default"
server_tcpnevim_ports="tcp/1024:3000"
client_tcpnevim_ports="default"
server_skype_ports="tcp/80"
client_skype_ports="default"
server_torrent_ports="tcp/19202"
client_torrent_ports="default"
interface eth1 internet
policy drop
protection strong 10/sec 10
server ident reject with tcp-reset
server ssh accept
server ping accept
client icmp accept
client dhcp accept
client dns accept
client http accept
client https accept
client telnet accept
client smtp accept
client ftp accept
client ntp accept
client ssh accept
client icq accept
client jabber accept
client cups accept
client samba accept
client ping accept
client tcpnevim accept
client pop3 accept
client webcache accept
client skype accept
server skype accept
server torrent accept
client torrent accept
UNMATCHED_INPUT_POLICY="DROP"
UNMATCHED_OUTPUT_POLICY="DROP"
FIREHOL_LOG_LEVEL=4
server ftp accept
-
Nevite nekdo co znamena kdyz po spousteni fireholu napise terminal :
martin@martin-laptop:~$ sudo firehol restart
Stopping: /etc/default/firehol forbids it.
-
změnit v /etc/default/firehol
START_FIREHOL z NO na YES
-
Znamena to, ze nectete navody. V tom souboru je nutne zmenit NO na YES.
-
Znamena to, ze nectete navody.
:D
-
Omlouvam se... asi jsem si nevisiml :) a diky ale mozna nejsem ani prvni ani posledni a treba to nekomu pomuze ;-)
-
No, po zadani sudo firehol restart mi to vypisuje mnoho chyb mimo jine i tuto :
--------------------------------------------------------------------------------
ERROR : # 58.
WHAT : A runtime command failed to execute (returned error 2).
SOURCE : line FIN of /etc/firehol/firehol.conf
COMMAND : /sbin/iptables -t filter -A FORWARD -m state '' --state RELATED -j ACCEPT
OUTPUT :
Try `iptables -h' or 'iptables --help' for more information.
Bad argument `'
Stopped: Couldn't activate new firewall.
FireHOL: Restoring old firewall: OK
-
Nejen ze nectete navody, ale vy nectete ani toto forum :(
http://forum.ubuntu.cz/viewtopic.php?id=7524
-
Takze jedine vzit bash z EE a prepsat jim shell v FF, a pak by to mel jet. hmm
-
Upstream verze uz byla opravena (v cvs), snad se brzy dostane i do distribuce.