質問編集履歴

2

iptables等の追記

2016/08/02 00:49

投稿

Feynman
Feynman

score19

test CHANGED
File without changes
test CHANGED
@@ -129,3 +129,141 @@
129
129
 
130
130
 
131
131
  お助けください。
132
+
133
+
134
+
135
+ -----追記-----
136
+
137
+ 皆様ありがとうございます。
138
+
139
+
140
+
141
+ IPアドレスは固定されています。
142
+
143
+ メールサーバにしたいマシンへの
144
+
145
+ sshやping, Webサーバ, ntpのアクセスはできています。
146
+
147
+
148
+
149
+ iptablesの結果は長すぎて追記できないので一部だけですが。
150
+
151
+ ```iptables
152
+
153
+ Chain ufw-after-input (1 references)
154
+
155
+ target prot opt source destination
156
+
157
+ ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
158
+
159
+ ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
160
+
161
+ ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
162
+
163
+ ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
164
+
165
+ ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
166
+
167
+ ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
168
+
169
+ ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
170
+
171
+
172
+
173
+ Chain ufw-before-forward (1 references)
174
+
175
+ target prot opt source destination
176
+
177
+ ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
178
+
179
+ ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
180
+
181
+ ACCEPT icmp -- anywhere anywhere icmp source-quench
182
+
183
+ ACCEPT icmp -- anywhere anywhere icmp time-exceeded
184
+
185
+ ACCEPT icmp -- anywhere anywhere icmp parameter-problem
186
+
187
+ ACCEPT icmp -- anywhere anywhere icmp echo-request
188
+
189
+ ufw-user-forward all -- anywhere anywhere
190
+
191
+
192
+
193
+ Chain ufw-before-input (1 references)
194
+
195
+ target prot opt source destination
196
+
197
+ ACCEPT all -- anywhere anywhere
198
+
199
+ ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
200
+
201
+ ufw-logging-deny all -- anywhere anywhere ctstate INVALID
202
+
203
+ DROP all -- anywhere anywhere ctstate INVALID
204
+
205
+ ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
206
+
207
+ ACCEPT icmp -- anywhere anywhere icmp source-quench
208
+
209
+ ACCEPT icmp -- anywhere anywhere icmp time-exceeded
210
+
211
+ ACCEPT icmp -- anywhere anywhere icmp parameter-problem
212
+
213
+ ACCEPT icmp -- anywhere anywhere icmp echo-request
214
+
215
+ ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
216
+
217
+ ufw-not-local all -- anywhere anywhere
218
+
219
+ ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
220
+
221
+ ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
222
+
223
+ ufw-user-input all -- anywhere anywhere
224
+
225
+
226
+
227
+ Chain ufw-user-input (1 references)
228
+
229
+ target prot opt source destination
230
+
231
+ ACCEPT tcp -- anywhere anywhere tcp dpt:ntp
232
+
233
+ ACCEPT udp -- anywhere anywhere udp dpt:ntp
234
+
235
+ ACCEPT tcp -- anywhere anywhere tcp dpt:http
236
+
237
+ ACCEPT udp -- anywhere anywhere udp dpt:http
238
+
239
+ ACCEPT tcp -- anywhere anywhere tcp dpt:domain
240
+
241
+ ACCEPT udp -- anywhere anywhere udp dpt:domain
242
+
243
+ ACCEPT tcp -- anywhere anywhere tcp dpt:domain
244
+
245
+ ACCEPT udp -- anywhere anywhere udp dpt:domain
246
+
247
+ ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
248
+
249
+ ACCEPT udp -- anywhere anywhere udp dpt:ssh
250
+
251
+ ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
252
+
253
+ ACCEPT udp -- anywhere anywhere udp dpt:ntp
254
+
255
+
256
+
257
+ Chain ufw-user-output (1 references)
258
+
259
+ target prot opt source destination
260
+
261
+ ACCEPT tcp -- anywhere anywhere tcp dpt:domain
262
+
263
+ ACCEPT udp -- anywhere anywhere udp dpt:domain
264
+
265
+ ACCEPT tcp -- anywhere anywhere tcp dpt:ntp
266
+
267
+ ACCEPT udp -- anywhere anywhere udp dpt:ntp
268
+
269
+ ```

1

netstatの結果を追記

2016/08/02 00:49

投稿

Feynman
Feynman

score19

test CHANGED
File without changes
test CHANGED
@@ -114,4 +114,18 @@
114
114
 
115
115
 
116
116
 
117
+ netstat では以下の様子が見られます。
118
+
119
+ ```netstat
120
+
121
+ tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN
122
+
123
+ tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN
124
+
125
+ tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN
126
+
127
+ ```
128
+
129
+
130
+
117
131
  お助けください。