{"id":1844,"date":"2015-04-19T00:15:01","date_gmt":"2015-04-18T18:15:01","guid":{"rendered":"http:\/\/notes.norfolks.org\/?p=1844"},"modified":"2015-07-07T11:57:44","modified_gmt":"2015-07-07T05:57:44","slug":"iptables-%d1%80%d0%b0%d0%b7%d1%80%d0%b5%d1%88%d0%b8%d1%82%d1%8c-ssh-%d0%bd%d0%b0-%d1%81%d0%b5%d1%80%d0%b2%d0%b5%d1%80%d0%b5","status":"publish","type":"post","link":"https:\/\/notes.norfolks.fun\/?p=1844","title":{"rendered":"iptables: \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c SSH \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435"},"content":{"rendered":"

# \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u043c \u0432\u0441\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043a\u0440\u043e\u043c\u0435 \u044f\u0432\u043d\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445<\/p>\n

iptables -P INPUT DROP<\/pre>\n
# \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 ssh \u043f\u043e\u0440\u0442\u043e\u043c<\/p>\n
iptables -A INPUT -p tcp --dport 22 -m state --state NEW -j ACCEPT<\/pre>\n
# \u0430 \u0434\u043b\u044f asus wl-500gp \u0434\u0435\u043b\u0430\u0435\u043c<\/p>\n
iptables -A INPUT -p tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT<\/pre>\n
Link<\/a>
\n# \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u0432\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f<\/p>\n
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT<\/pre>\n
\u0418\u0442\u043e\u0433\u043e:<\/p>\n
iptables -vL
\nChain INPUT (policy DROP 94 packets, 7040 bytes)
\npkts bytes target prot opt in out source destination
\n5 320 ACCEPT tcp -- any any anywhere anywhere tcp dpt:ssh state NEW
\n88 10745 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED <\/p>\n
Chain FORWARD (policy DROP 0 packets, 0 bytes)
\npkts bytes target prot opt in out source destination <\/p>\n
Chain OUTPUT (policy ACCEPT 143 packets, 16395 bytes)
\npkts bytes target prot opt in out source destination <\/code><\/p>\n
Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
# \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u043c \u0432\u0441\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043a\u0440\u043e\u043c\u0435 \u044f\u0432\u043d\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 iptables -P INPUT DROP # \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 ssh \u043f\u043e\u0440\u0442\u043e\u043c iptables -A INPUT -p tcp —dport 22 -m state —state NEW -j ACCEPT # \u0430 \u0434\u043b\u044f asus wl-500gp \u0434\u0435\u043b\u0430\u0435\u043c iptables -A INPUT -p … \u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435 →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[41,14],"tags":[],"class_list":["post-1844","post","type-post","status-publish","format-standard","hentry","category-iptables","category-linux"],"_links":{"self":[{"href":"https:\/\/notes.norfolks.fun\/index.php?rest_route=\/wp\/v2\/posts\/1844","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/notes.norfolks.fun\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/notes.norfolks.fun\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/notes.norfolks.fun\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/notes.norfolks.fun\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1844"}],"version-history":[{"count":4,"href":"https:\/\/notes.norfolks.fun\/index.php?rest_route=\/wp\/v2\/posts\/1844\/revisions"}],"predecessor-version":[{"id":1852,"href":"https:\/\/notes.norfolks.fun\/index.php?rest_route=\/wp\/v2\/posts\/1844\/revisions\/1852"}],"wp:attachment":[{"href":"https:\/\/notes.norfolks.fun\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1844"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/notes.norfolks.fun\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1844"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/notes.norfolks.fun\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1844"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}