User Tools
сервис_portsentry
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
сервис_portsentry [2012/06/27 17:58] val |
сервис_portsentry [2024/05/04 13:08] (current) val [Использование в режиме без блокировки] |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Сервис Portsentry ====== | ====== Сервис Portsentry ====== | ||
| - | ===== Установка и настройка на блокировку с использованием route ==== | + | * [[https://www.opennet.ru/docs/RUS/portsentry/portsentry3.html|Настройка portsentry]] |
| - | [[Сервисы Gateway и routing#Управление таблицей маршрутизации]] | + | ===== Установка ===== |
| - | ==== Ubuntu ==== | + | ==== Debian/Ubuntu ==== |
| <code> | <code> | ||
| - | gate# apt-get install portsentry | + | # apt install portsentry |
| + | </code> | ||
| - | gate# tail -f /var/log/syslog | + | ===== Использование в режиме без блокировки ===== |
| - | gate# ci -l /etc/portsentry/portsentry.conf | + | Настраивается по умолчанию |
| - | gate# cat /etc/portsentry/portsentry.conf | + | <code> |
| + | # cat /etc/portsentry/portsentry.conf | ||
| + | </code><code> | ||
| + | ... | ||
| + | BLOCK_UDP="0" | ||
| + | BLOCK_TCP="0" | ||
| + | ... | ||
| + | </code><code> | ||
| + | # tail -f /var/log/syslog | ||
| + | |||
| + | ИЛИ | ||
| + | |||
| + | # journalctl -f | ||
| + | </code> | ||
| + | |||
| + | ===== Включение блокировки ===== | ||
| + | |||
| + | <code> | ||
| + | # cat /etc/portsentry/portsentry.conf | ||
| </code><code> | </code><code> | ||
| ... | ... | ||
| Line 19: | Line 38: | ||
| BLOCK_TCP="1" | BLOCK_TCP="1" | ||
| ... | ... | ||
| - | </code><code> | + | </code> |
| - | gate# /etc/init.d/portsentry restart | + | |
| - | gate# cat /var/lib/portsentry/portsentry.blocked.* | + | ===== Блокировка с использованием route ===== |
| - | gate# netstat -rn | grep '!H' | + | * Включена по умолчанию |
| + | * [[Сервисы Gateway и routing#Управление таблицей маршрутизации]] | ||
| + | |||
| + | <code> | ||
| + | # cat /etc/portsentry/portsentry.conf | ||
| + | </code><code> | ||
| + | ... | ||
| + | # Newer versions of Linux support the reject flag now. This | ||
| + | # is cleaner than the above option. | ||
| + | KILL_ROUTE=... | ||
| + | ... | ||
| + | </code><code> | ||
| + | /sbin/route del -host 192.168.N.M reject | ||
| </code> | </code> | ||
| - | ==== FreeBSD ==== | + | ===== Блокировка с использованием libwrap ===== |
| - | [[http://www.lissyara.su/articles/freebsd/security/portsentry/]] | + | * Включена по умолчанию |
| + | * [[Сервис Tcpwrap#Конфигурация в режиме "все разрешено, кроме"]] | ||
| <code> | <code> | ||
| + | # :> /etc/hosts.deny | ||
| + | # cat /etc/portsentry/portsentry.conf | ||
| + | </code><code> | ||
| + | ... | ||
| + | KILL_HOSTS_DENY="ALL: $TARGET$" | ||
| + | ... | ||
| </code> | </code> | ||
| + | |||
| + | ===== Просмотр заблокированных хостов ===== | ||
| + | <code> | ||
| + | # cat /var/lib/portsentry/portsentry.blocked.* | ||
| + | </code> | ||
| + | |||
сервис_portsentry.1340805535.txt.gz · Last modified: 2013/05/22 13:50 (external edit)
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
