質問編集履歴
2
iptables等の追記
test
CHANGED
|
File without changes
|
test
CHANGED
|
@@ -129,3 +129,141 @@
|
|
|
129
129
|
|
|
130
130
|
|
|
131
131
|
お助けください。
|
|
132
|
+
|
|
133
|
+
|
|
134
|
+
|
|
135
|
+
-----追記-----
|
|
136
|
+
|
|
137
|
+
皆様ありがとうございます。
|
|
138
|
+
|
|
139
|
+
|
|
140
|
+
|
|
141
|
+
IPアドレスは固定されています。
|
|
142
|
+
|
|
143
|
+
メールサーバにしたいマシンへの
|
|
144
|
+
|
|
145
|
+
sshやping, Webサーバ, ntpのアクセスはできています。
|
|
146
|
+
|
|
147
|
+
|
|
148
|
+
|
|
149
|
+
iptablesの結果は長すぎて追記できないので一部だけですが。
|
|
150
|
+
|
|
151
|
+
```iptables
|
|
152
|
+
|
|
153
|
+
Chain ufw-after-input (1 references)
|
|
154
|
+
|
|
155
|
+
target prot opt source destination
|
|
156
|
+
|
|
157
|
+
ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
|
|
158
|
+
|
|
159
|
+
ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
|
|
160
|
+
|
|
161
|
+
ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
|
|
162
|
+
|
|
163
|
+
ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
|
|
164
|
+
|
|
165
|
+
ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
|
|
166
|
+
|
|
167
|
+
ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
|
|
168
|
+
|
|
169
|
+
ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
|
|
170
|
+
|
|
171
|
+
|
|
172
|
+
|
|
173
|
+
Chain ufw-before-forward (1 references)
|
|
174
|
+
|
|
175
|
+
target prot opt source destination
|
|
176
|
+
|
|
177
|
+
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
|
|
178
|
+
|
|
179
|
+
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
|
|
180
|
+
|
|
181
|
+
ACCEPT icmp -- anywhere anywhere icmp source-quench
|
|
182
|
+
|
|
183
|
+
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
|
|
184
|
+
|
|
185
|
+
ACCEPT icmp -- anywhere anywhere icmp parameter-problem
|
|
186
|
+
|
|
187
|
+
ACCEPT icmp -- anywhere anywhere icmp echo-request
|
|
188
|
+
|
|
189
|
+
ufw-user-forward all -- anywhere anywhere
|
|
190
|
+
|
|
191
|
+
|
|
192
|
+
|
|
193
|
+
Chain ufw-before-input (1 references)
|
|
194
|
+
|
|
195
|
+
target prot opt source destination
|
|
196
|
+
|
|
197
|
+
ACCEPT all -- anywhere anywhere
|
|
198
|
+
|
|
199
|
+
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
|
|
200
|
+
|
|
201
|
+
ufw-logging-deny all -- anywhere anywhere ctstate INVALID
|
|
202
|
+
|
|
203
|
+
DROP all -- anywhere anywhere ctstate INVALID
|
|
204
|
+
|
|
205
|
+
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
|
|
206
|
+
|
|
207
|
+
ACCEPT icmp -- anywhere anywhere icmp source-quench
|
|
208
|
+
|
|
209
|
+
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
|
|
210
|
+
|
|
211
|
+
ACCEPT icmp -- anywhere anywhere icmp parameter-problem
|
|
212
|
+
|
|
213
|
+
ACCEPT icmp -- anywhere anywhere icmp echo-request
|
|
214
|
+
|
|
215
|
+
ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
|
|
216
|
+
|
|
217
|
+
ufw-not-local all -- anywhere anywhere
|
|
218
|
+
|
|
219
|
+
ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
|
|
220
|
+
|
|
221
|
+
ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
|
|
222
|
+
|
|
223
|
+
ufw-user-input all -- anywhere anywhere
|
|
224
|
+
|
|
225
|
+
|
|
226
|
+
|
|
227
|
+
Chain ufw-user-input (1 references)
|
|
228
|
+
|
|
229
|
+
target prot opt source destination
|
|
230
|
+
|
|
231
|
+
ACCEPT tcp -- anywhere anywhere tcp dpt:ntp
|
|
232
|
+
|
|
233
|
+
ACCEPT udp -- anywhere anywhere udp dpt:ntp
|
|
234
|
+
|
|
235
|
+
ACCEPT tcp -- anywhere anywhere tcp dpt:http
|
|
236
|
+
|
|
237
|
+
ACCEPT udp -- anywhere anywhere udp dpt:http
|
|
238
|
+
|
|
239
|
+
ACCEPT tcp -- anywhere anywhere tcp dpt:domain
|
|
240
|
+
|
|
241
|
+
ACCEPT udp -- anywhere anywhere udp dpt:domain
|
|
242
|
+
|
|
243
|
+
ACCEPT tcp -- anywhere anywhere tcp dpt:domain
|
|
244
|
+
|
|
245
|
+
ACCEPT udp -- anywhere anywhere udp dpt:domain
|
|
246
|
+
|
|
247
|
+
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
|
|
248
|
+
|
|
249
|
+
ACCEPT udp -- anywhere anywhere udp dpt:ssh
|
|
250
|
+
|
|
251
|
+
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
|
|
252
|
+
|
|
253
|
+
ACCEPT udp -- anywhere anywhere udp dpt:ntp
|
|
254
|
+
|
|
255
|
+
|
|
256
|
+
|
|
257
|
+
Chain ufw-user-output (1 references)
|
|
258
|
+
|
|
259
|
+
target prot opt source destination
|
|
260
|
+
|
|
261
|
+
ACCEPT tcp -- anywhere anywhere tcp dpt:domain
|
|
262
|
+
|
|
263
|
+
ACCEPT udp -- anywhere anywhere udp dpt:domain
|
|
264
|
+
|
|
265
|
+
ACCEPT tcp -- anywhere anywhere tcp dpt:ntp
|
|
266
|
+
|
|
267
|
+
ACCEPT udp -- anywhere anywhere udp dpt:ntp
|
|
268
|
+
|
|
269
|
+
```
|
1
netstatの結果を追記
test
CHANGED
|
File without changes
|
test
CHANGED
|
@@ -114,4 +114,18 @@
|
|
|
114
114
|
|
|
115
115
|
|
|
116
116
|
|
|
117
|
+
netstat では以下の様子が見られます。
|
|
118
|
+
|
|
119
|
+
```netstat
|
|
120
|
+
|
|
121
|
+
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN
|
|
122
|
+
|
|
123
|
+
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN
|
|
124
|
+
|
|
125
|
+
tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN
|
|
126
|
+
|
|
127
|
+
```
|
|
128
|
+
|
|
129
|
+
|
|
130
|
+
|
|
117
131
|
お助けください。
|