User Tools
сервис_portsentry
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
|
сервис_portsentry [2017/07/05 08:07] val [Настройка на блокировку с использованием route] |
сервис_portsentry [2020/07/22 08:48] val |
||
|---|---|---|---|
| Line 9: | Line 9: | ||
| ==== Debian/Ubuntu ==== | ==== Debian/Ubuntu ==== | ||
| <code> | <code> | ||
| - | server# apt install portsentry | + | # apt install portsentry |
| - | + | ||
| - | server# cd /etc/portsentry/ | + | |
| </code> | </code> | ||
| - | ==== FreeBSD ==== | + | ===== Использование в режиме без блокировки ===== |
| - | <code> | + | |
| - | server# pkg install portsentry | + | |
| - | server# cd /usr/local/etc/ | + | Настраивается по умолчанию |
| - | + | ||
| - | server# cp portsentry.conf.default portsentry.conf | + | |
| - | + | ||
| - | server# cp portsentry.ignore.default portsentry.ignore | + | |
| - | </code> | + | |
| - | + | ||
| - | ===== Использование в режиме без блокировки ===== | + | |
| <code> | <code> | ||
| - | server# cat portsentry.conf | + | # cat /etc/portsentry/portsentry.conf |
| </code><code> | </code><code> | ||
| ... | ... | ||
| Line 35: | Line 24: | ||
| ... | ... | ||
| </code><code> | </code><code> | ||
| - | server# tail -f /var/log/syslog | + | # tail -f /var/log/syslog |
| - | или | + | |
| - | server# tail -f /var/log/messages | + | |
| </code> | </code> | ||
| - | ===== Настройка на блокировку с использованием libwrap ===== | + | ===== Настройка на блокировку с использованием route ===== |
| - | [[Сервис Tcpwrap#Конфигурация в режиме "все разрешено, кроме"]] | + | [[Сервисы Gateway и routing#Управление таблицей маршрутизации]] |
| <code> | <code> | ||
| - | server# :> /etc/hosts.deny | + | # cat /etc/portsentry/portsentry.conf |
| - | + | ||
| - | server# cat portsentry.conf | + | |
| </code><code> | </code><code> | ||
| ... | ... | ||
| Line 53: | Line 38: | ||
| BLOCK_TCP="1" | BLOCK_TCP="1" | ||
| ... | ... | ||
| - | KILL_HOSTS_DENY="ALL: $TARGET$" | + | # Newer versions of Linux support the reject flag now. This |
| + | # is cleaner than the above option. | ||
| + | KILL_ROUTE=... | ||
| ... | ... | ||
| + | </code><code> | ||
| + | /sbin/route del -host 192.168.N.M reject | ||
| </code> | </code> | ||
| - | ===== Настройка на блокировку с использованием route ===== | + | ===== Настройка на блокировку с использованием libwrap ===== |
| - | [[Сервисы Gateway и routing#Управление таблицей маршрутизации]] | + | [[Сервис Tcpwrap#Конфигурация в режиме "все разрешено, кроме"]] |
| <code> | <code> | ||
| - | server# cat portsentry.conf | + | # :> /etc/hosts.deny |
| + | |||
| + | # cat /etc/portsentry/portsentry.conf | ||
| </code><code> | </code><code> | ||
| ... | ... | ||
| - | KILL_ROUTE=... | + | KILL_HOSTS_DENY="ALL: $TARGET$" |
| ... | ... | ||
| - | </code><code> | + | </code> |
| - | /sbin/route del -host 192.168.N.M reject | + | |
| - | <code> | + | |
| ===== Просмотр заблокированных хостов ===== | ===== Просмотр заблокированных хостов ===== | ||
| <code> | <code> | ||
| - | server# cat /var/lib/portsentry/portsentry.blocked.* | + | # cat /var/lib/portsentry/portsentry.blocked.* |
| - | или | + | |
| - | server# cat /usr/local/etc/portsentry.blocked.* | + | |
| </code> | </code> | ||
сервис_portsentry.txt · Last modified: 2020/07/23 05:28 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
