rafaelwerner
(usa Ubuntu)
Enviado em 06/12/2012 - 15:32h
quando dou o comando "apt-get install nmap" da erro, o mesmo ocorre quando vou instalar o ssh.
segue minhas regras iptables, (uso as iptables no rc.local):
#!/bin/sh -e
## bloqueio do facebook #
#
REDE_INTERNA="192.168.0.0/24
iptables -N FACEBOOK
iptables -I FORWARD -s $REDE_INTERNA -j FACEBOOK
for i in 'cat /etc/facebook.txt';do
iptables -A FACEBOOK -d $i -J REJECT
done
iptables -t nat -A POSTROUTING -s 192.168.0.16 -0 eth0 -j MASQUERADE
iptables -A FORWARD -s $REDE_INTERNA -m multiport -p tcp -dports 443,25,110,20,21 -j ACCEPT
## rede eth0 e eth1 dhcp x tcp ##
#modprobe iptables_nat
#echo 1 > /proc/sys/net/ipv4/ip_forward
#iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
#iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 3128
MINHAS REGRAS DO squid.conf:
http_port 3128
visible_hostname Administrador(Rafael Werner)
cache_mgr areadeti.lauravicunha@hotmail.com
error_directory /usr/share/squid3/errors/English
hierarchy_stoplist cgi-bin ?
cache_mem 32 MB
maximum_object_size_in_memory 64 KB
maximum_object_size 100 MB
cache_dir ufs /var/spool/squid3 2048 16 256
refresh_pattern ^ftp: 360 20% 10080
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
acl localhost src 127.0.0.1/32
acl localnet src 192.168.0.0/24
acl manager proto cache_objetct
http_access allow manager localhost
http_access deny manager
acl purge method PURGE
http_access allow purge localhost
http_access deny purge
acl Safe_ports port 21 70 80 210 280 443 488 563 591 777 873 901 1025-65535
#http_access deny !Safe_ports
acl connect method CONNECT
acl SSL_ports port 443 #https
acl SSL_ports port 563 #nntps
acl SSL_ports port 873 #rsync
#http_access deny connect !SSL_pots
acl domains dstdomain "/etc/squid3/domains"
#http_access deny domains
acl words url_regex jogo
acl words url_regex -i "/etc/squid/words"
#http_access deny words
#acl extensions urlpath_regex -i "/etc/squid3/extensions"
#http_access deny exensions
#acl MAC_LIBERADO arp "/etc/squid3/mac-liberado"
#http_access allow MAC-LIBERADO
acl orkut url_regex -i orkut
http_access deny orkut
acl facebook url_regex -i facebook
http_access deny facebook
http_access allow localnet
http_access allow localhost
#http_access deny all