$IPTABLES -F # arunca tot din baza de date $IPTABLES -F -t nat $IPTABLES -P INPUT LOG $IPTABLES -P OUTPUT LOG #$IPTABLES -P FORWARD LOG $IPTABLES -P INPUT DROP $IPTABLES -P OUTPUT ACCEPT $IPTABLES -P FORWARD DROP ################################################################# # SETARI IP-URI # ################################################################# ################################################################# # SETARI GENERALE RETEA # ################################################################# $IPTABLES -A INPUT -j ACCEPT -i lo $IPTABLES -A OUTPUT -j ACCEPT -o lo $IPTABLES -A INPUT -j ACCEPT -i eth2 $IPTABLES -A OUTPUT -j ACCEPT -o eth2 $IPTABLES -A OUTPUT -j ACCEPT -o eth0 ################################################################# # SETARI LAN # ################################################################# # NU STERGE, DOAR COMENTEAZA # $IPTABLES -A INPUT -p tcp -s 213.164.226.154 -j ACCEPT $IPTABLES -A OUTPUT -p tcp -s 213.164.226.154 -j ACCEPT # softdreams #$IPTABLES -A INPUT -p tcp -s 86.35.136.8 --dport 22 -j ACCEPT #$IPTABLES -A OUTPUT -p tcp -s 86.35.136.8 --dport 22 -j ACCEP # dezibel $IPTABLES -A INPUT -p tcp -s 82.76.186.62 --dport 22 -j ACCEPT $IPTABLES -A OUTPUT -p tcp -s 82.76.186.62 --sport 22 -j ACCEP #ACASA LA VALI $IPTABLES -A INPUT -p tcp -s 89.137.195.37 --dport 22 -j ACCEPT $IPTABLES -A OUTPUT -p tcp -S 89.137.195.37 --sport 22 -j ACCEPT $IPTABLES -A INPUT -p tcp -s 192.168.2.12 --dport 22 -j ACCEPT $IPTABLES -A OUTPUT -p tcp -s 192.168.2.12 --sport 22 -j ACCEPT # De comentat $IPTABLES -A INPUT -p tcp -s 141.85.0.69 -j ACCEPT $IPTABLES -A OUTPUT -p tcp -s 141.85.0.69 -j ACCEPT $IPTABLES -A INPUT -p tcp -s 141.85.0.69 -j ACCEPT $IPTABLES -A OUTPUT -p tcp -s 141.85.0.69 -j ACCEPT # $IPTABLES -A INPUT -p tcp -s 0.0.0.0/0 --dport 80 -j ACCEPT $IPTABLES -A OUTPUT -p tcp -d 0.0.0.0/0 --dport 80 -j ACCEPT ################################################################# # SETARI GENERALE LOGGER # ################################################################# ################################################################# # SETARI SERVER DE MAIL # ################################################################# #smtp $IPTABLES -A INPUT -p udp --dport 25 -j ACCEPT $IPTABLES -A OUTPUT -p udp --sport 25 -j ACCEPT $IPTABLES -A INPUT -p udp --dport 25 -j LOG --log-udp-options $IPTABLES -A OUTPUT -p udp --sport 25 -j LOG --log-udp-options #SMTP SECURE $IPTABLES -A INPUT -p tcp --dport 465 -j ACCEPT $IPTABLES -A OUTPUT -p tcp --sport 465 -j ACCEPT #$IPTABLES -A INPUT -p udp --dport 465 -j ACCEPT #$IPTABLES -A OUTPUT -p udp --sport 465 -j ACCEPT #pop3 $IPTABLES -A INPUT -p tcp --dport 110 -j ACCEPT $IPTABLES -A OUTPUT -p tcp --sport 110 -j ACCEPT $IPTABLES -A INPUT -j LOG --log-tcp-options $IPTABLES -A OUTPUT -j LOG --log-tcp-options #POP SSL $IPTABLES -A INPUT -p tcp --dport 995 -j ACCEPT $IPTABLES -A OUTPUT -p tcp --sport 995 -j ACCEPT #IMAP $IPTABLES -A INPUT --dport 143 -j ACCEPT $IPTABLES -A OUTPUT --sport 143 -j ACCEPT $IPTABLES -A INPUT --dport 143 -j LOG --log-tcp-options $IPTABLES -A OUTPUT --sport 143 -LOG --log-tcp-options ################################################################# # LISTA IPURI # ################################################################# # 192.168.2.11 VALI # # 192.168.2.12 EXECUTIV () # # 192.168.2.13 FLORIN (grm3) # # 192.168.2.14 ANA (grm1) # # 192.168.2.15 OFFICE () # # 192.168.2.16 AURELIA (ifs3) # # 192.168.2.17 KATY (ifs1) # # 192.168.2.18 COSMIN (ifs2) # # 192.168.2.19 RARES () # # 192.168.2.20 DANA () # ################################################################# # 127.0.0.1 SERVER # $IPTABLES -A INPUT -s 192.168.1.64 -j LOG --log-tcp-options $IPTABLES -A OUTPUT -d 192.168.1.64 -j LOG --log-tcp-options $IPTABLES -A FORWARD -s 192.168.1.64 -j LOG --log-tcp-options #$IPTABLES -A FORWARD -s 192.168.1.64 -j ACCEPT #$IPTABLES -A FORWARD -d 192.168.1.64 -j ACCEPT #$IPTABLES -t nat -A POSTROUTING -s 192.168.1.64 -j MASQUERADE # 192.168.2.21 SURVEY # $IPTABLES -A FORWARD -s 192.168.2.21 -j ACCEPT $IPTABLES -A FORWARD -d 192.168.2.21 -j ACCEPT $IPTABLES -t nat -A POSTROUTING -s 192.168.2.21 -j MASQUERADE # 192.168.2.20 DANA # $IPTABLES -A FORWARD -s 192.168.2.20 -j ACCEPT $IPTABLES -A FORWARD -d 192.168.2.20 -j ACCEPT $IPTABLES -t nat -A POSTROUTING -s 192.168.2.20 -j MASQUERADE # 192.168.2.19 RARES () # $IPTABLES -A FORWARD -s 192.168.2.19 -j ACCEPT $IPTABLES -A FORWARD -d 192.168.2.19 -j ACCEPT $IPTABLES -t nat -A POSTROUTING -s 192.168.2.19 -j MASQUERADE # 192.168.2.18 COSMIN () # $IPTABLES -A FORWARD -s 192.168.2.18 -j ACCEPT $IPTABLES -A FORWARD -d 192.168.2.18 -j ACCEPT $IPTABLES -t nat -A POSTROUTING -s 192.168.2.18 -j MASQUERADE # 192.168.2.17 KATY (ifs1) # $IPTABLES -A FORWARD -s 192.168.2.17 -j ACCEPT $IPTABLES -A FORWARD -d 192.168.2.17 -j ACCEPT $IPTABLES -t nat -A POSTROUTING -s 192.168.2.17 -j MASQUERADE # 192.168.2.16 AURELIA (ifs3) # $IPTABLES -A FORWARD -s 192.168.2.16 -j ACCEPT $IPTABLES -A FORWARD -d 192.168.2.16 -j ACCEPT $IPTABLES -t nat -A POSTROUTING -s 192.168.2.16 -j MASQUERADE # 192.168.2.15 ALINA (office) # $IPTABLES -A FORWARD -s 192.168.2.15 -j ACCEPT $IPTABLES -A FORWARD -d 192.168.2.15 -j ACCEPT $IPTABLES -t nat -A POSTROUTING -s 192.168.2.15 -j MASQUERADE # 192.168.2.14 ANA (grm1) # $IPTABLES -A FORWARD -s 192.168.2.14 -j ACCEPT $IPTABLES -A FORWARD -d 192.168.2.14 -j ACCEPT $IPTABLES -t nat -A POSTROUTING -s 192.168.2.14 -j MASQUERADE # 192.168.2.13 FLORIN (grm3) # $IPTABLES -A FORWARD -s 192.168.2.13 -j ACCEPT $IPTABLES -A FORWARD -d 192.168.2.13 -j ACCEPT $IPTABLES -t nat -A POSTROUTING -s 192.168.2.13 -j MASQUERADE # 192.168.2.12 EXECUTIV () # $IPTABLES -A FORWARD -s 192.168.2.12 -j ACCEPT $IPTABLES -A FORWARD -d 192.168.2.12 -j ACCEPT $IPTABLES -t nat -A POSTROUTING -s 192.168.2.12 -j MASQUERADE # 192.168.2.11 VALI # $IPTABLES -A FORWARD -s 192.168.2.11 -j ACCEPT $IPTABLES -A FORWARD -d 192.168.2.11 -j ACCEPT $IPTABLES -t nat -A POSTROUTING -s 192.168.2.11 -j MASQUERADE #$IPTABLES -nvL LAN(192.168.2.0) <-> (192.168.2.1) SERVER (192.168.1.64) <-> (192.168.1.1)ADSL_ROUTER <-> external ip this is the log generated when i ping google.ro (66.249.93.104) Feb 20 12:37:19 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=0 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=1 Feb 20 12:37:20 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=1 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=2 Feb 20 12:37:21 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=2 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=3 Feb 20 12:37:22 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=3 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=4 Feb 20 12:37:23 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=4 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=5 Feb 20 12:37:24 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=5 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=6 Feb 20 12:37:25 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=6 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=7 Feb 20 12:37:26 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=7 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=8 this is my log with my DNS Feb 20 12:50:23 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=22360 DF PROTO=UDP SPT=53 DPT=32784 LEN=213 Feb 20 12:50:28 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=56444 DF PROTO=UDP SPT=53 DPT=32785 LEN=213 Feb 20 12:50:28 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=34274 DF PROTO=UDP SPT=53 DPT=32786 LEN=213 Feb 20 12:50:33 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=62744 DF PROTO=UDP SPT=53 DPT=32788 LEN=213 Feb 20 12:50:33 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=45692 DF PROTO=UDP SPT=53 DPT=32784 LEN=213 Feb 20 12:50:38 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=3435 DF PROTO=UDP SPT=53 DPT=32785 LEN=213 Feb 20 12:50:38 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=56958 DF PROTO=UDP SPT=53 DPT=32786 LEN=213 Feb 20 12:50:43 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=9309 DF PROTO=UDP SPT=53 DPT=32788 LEN=213 Feb 20 12:53:06 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=61398 DF PROTO=UDP SPT=53 DPT=32788 LEN=213 Feb 20 12:53:11 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=55823 DF PROTO=UDP SPT=53 DPT=32789 LEN=213 Feb 20 12:53:11 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=5625 DF PROTO=UDP SPT=53 DPT=32790 LEN=213 Feb 20 12:53:16 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=17015 DF PROTO=UDP SPT=53 DPT=32788 LEN=213 Feb 20 12:53:16 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=62195 DF PROTO=UDP SPT=53 DPT=32791 LEN=213 Feb 20 12:53:21 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=3219 DF PROTO=UDP SPT=53 DPT=32789 LEN=213 Feb 20 12:53:21 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=29533 DF PROTO=UDP SPT=53 DPT=32790 LEN=213 Feb 20 12:53:26 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=9519 DF PROTO=UDP SPT=53 DPT=32791 LEN=213