Dotaz: firehol stale blokuje

[petka]

Zdravim podle

DEFAULT_CLIENT_PORTS="1024:65535"

server_icq_ports="tcp/5190"
client_icq_ports="default"

interface br0 internal
        protection strong 10/sec 10
        policy                  drop
        server dns              accept
        server netbios_ns       accept
        server netbios_dgm      accept
        server netbios_ssn      accept
        server samba            accept
        server squid            accept
        server icmp             accept
        server ping             accept
        client all              accept

interface eth0 external
        protection strong 10/sec 10
        policy drop
        server icmp     accept
        server ping     accept
        server ssh      accept
        client dns      accept
        client icmp     accept
        client ping     accept
        client telnet   accept
        client http     accept
        client https    accept
        client ftp      accept
        client ntp      accept
        client ssh      accept
        client icq      accept
        client jabber   accept
        client webcache accept

router internal2external inface br0 outface eth0
        masquerade
        route all accept

navod nalezeny na internetu , sice internet routuje , ale blokuje sluzby spustene na portech .

Odpovědi

[pavlix]

Firehol není firewall, ale konfigurátor. Výsledkem jeho konfigurace jsou pravidla linuxového firewallu. Dají se vypsat pomocí programů iptables-save a ip6tables-save.