{"id":38982,"date":"2019-10-31T22:27:11","date_gmt":"2019-10-31T19:27:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih\/"},"modified":"2019-10-31T22:27:11","modified_gmt":"2019-10-31T19:27:11","slug":"iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih","title":{"rendered":"Iptables ja rikkalike ning laiskade dissidentide liiklusfiltreerimine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Keelatud ressursside k\u00fclastamise blokeerimise asjakohasus puudutab iga administraatorit, kellele v\u00f5ivad ametlikult esitada seaduse v\u00f5i vastavate organite korralduste t\u00e4itmata j\u00e4tmise eest s\u00fc\u00fcdistuse. <\/p>\n<p><img decoding=\"async\" alt=\"Iptables ja rikkalike ning laiskade dissidentide liiklusfiltreerimine\" src=\"\/wp-content\/uploads\/2019\/10\/add48d25f687f411cd3c9235c9df61c1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMiks leiutada jalgratast, kui meil on juba spetsialiseeritud programmid ja distributsioonid meie \u00fclesannete jaoks, n\u00e4iteks: Zeroshell, pfSense, ClearOS. <\/p>\n<p>Veel \u00fcks k\u00fcsimus tekkis \u00fclemusel: Kas kasutataval tootel on meie riigi turvasertifikaat?<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nMeil on olnud kogemusi nimetatud distributsioonidega:<\/p>\n<ul>\n<li>Zeroshell \u2014 arendajad isegi kinkisid 2 aastaks litsentsi, kuid selgus, et meie jaoks kriitilise funktsiooni t\u00e4itmine ei olnud selle distributsiooni puhul m\u00f5istlik;<\/li>\n<li>pfSense \u2014 austus ja au, samas igav, harjumine FreeBSD tulem\u00fc\u00fcri k\u00e4sureaga ja ei ole meile piisavalt mugav (arvan, et harjumise k\u00fcsimus, aga see osutus mitte '\u00f5ige teeks');<\/li>\n<li>ClearOS \u2014 meie riistvara peal osutus see v\u00e4ga aeglaseks, t\u00f5siste katsetusteni ei j\u00f5udnud, miks on sellised rasked liidest? <\/li>\n<li>Ideco SELECTA. Toote \"Aideco\" kohta on eraldi jutt, huvitav toode, kuid poliitilistel p\u00f5hjustel mitte meie jaoks, ja tahaksin samuti \"hamustada\" neid Linuxi, Roundcube jne litsentsi k\u00fcsimuses. Kust nad v\u00f5tsid, et \"puurides\" liidese <b>Python<\/b> ja eemaldades superkasutaja \u00f5igused, saavad nad m\u00fc\u00fca l\u00f5pp-produkti, mis on koosnenud interneti\u00fchiskonna arendatud ja t\u00e4iustatud moodulitest, mis levivad GPL&amp;jne.<\/li>\n<\/ul>\n<p>\nM\u00f5istan, et n\u00fc\u00fcd hakkavad mu suunas sadama negatiivsed arvamused koos n\u00f5udmistega \u00f5igustada oma subjektiivseid tundeid, kuid tahan \u00f6elda, et see v\u00f5rgu s\u00f5lm on samuti liikluse tasakaalustaja neljale v\u00e4lisele kanalile internetti, kus igal kanalil on oma erip\u00e4ra. Veel \u00fcheks nurgakiviks oli vajadus, et \u00fcks mitmest v\u00f5rguliidesest t\u00f6\u00f6taks erinevates aadressiruumides, ja ma <b>olen valmis<\/b> tunnistama, et ei ole valmis VLANe igal pool rakendama, kus vaja ja kus ei ole. <b>Kasutuses on seadmed nagu TP-Link TL-R480T+ \u2014 nende k\u00e4itumine ei ole ideaalne, \u00fcldiselt omade n\u00fcanssidega. Seda osa oli Linuxil m\u00f5istlikult seadistada t\u00e4nu Ubuntu ametlikule veebilehele.<\/b>IP-Balansseerimine: \u00fchendame mitu interneti kanalit \u00fcheks. <noindex><a rel=\"nofollow\" href=\"https:\/\/help.ubuntu.ru\/wiki\/ip_balancing\">IP-Balansseerimine: \u00fchendame mitu interneti kanalit \u00fcheks.<\/a><\/noindex>. Iga kanaleid v\u00f5ib igal ajal \"langetada\", nagu ka t\u00f5sta. Kui teid huvitab skript, mis praegu t\u00f6\u00f6tab (ja sellest tasub eraldi postitus) \u2014 kirjutage kommentaarides. <\/p>\n<p>K\u00e4sitletav lahendus ei pretendeeri ainulaadsusele, kuid sooviksin esitada k\u00fcsimuse: \"Miks peaks ettev\u00f5ttes kohanema kahtlaste kolmandate osapoolte toodetega, millel on t\u00f5sised riistvaran\u00f5uded, kui saab kaaluda alternatiivset varianti?\".<\/p>\n<p>Kui Venemaal on Roskomnadzori nimekiri, siis Ukrainas \u2014 rakendus Riigi Julgeolekun\u00f5ukogu otsusele (n\u00e4iteks. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.president.gov.ua\/documents\/1262018-24150\">siin on<\/a><\/noindex>), siis kohaliku tasandi juhid ka ei maga. N\u00e4iteks anti meile \u00fcle nimekiri keelatud veebisaitidest, mis, juhtkonna arvates, halvendavad t\u00f6\u00f6 efektiivsust. <\/p>\n<p>Suheldes kolleegidega teistes ettev\u00f5tetes, kus on vaikimisi keelatud k\u00f5ik saidid ja ainult \u00fclemuse loal on v\u00f5imalik konkreetse saidi juurde p\u00e4\u00e4seda, arutlesime ning m\u00f5istsime, et elu on siiski ilus ja alustasime oma otsingutele.<\/p>\n<p>Olles suuteline mitte ainult anal\u00fc\u00fctiliselt vaatama, mida kirjutatakse \"koduperenaiste raamatutes\" liikluse filtreerimise kohta, vaid ka j\u00e4lgima, mis toimub erinevate teenusepakkujate kanalites, m\u00e4rkisime j\u00e4rgmised retseptid (k\u00f5ik ekraanikuud on natuke k\u00e4rbitud, palun m\u00f5istke):<\/p>\n<p>Teenusepakkuja 1<br \/>\n \u2014 ei muretse ja pealeseb oma DNS-serverid ja l\u00e4bipaistva proksi-serveri. Mis siis?.. kuid meil on ju juurdep\u00e4\u00e4s sinna, kuhu on vaja (kui see meile vajalik on :))<\/p>\n<p>Teenusepakkuja 2<br \/>\n \u2014 arvab, et tema \u00fclemine teenusepakkuja peaks selle eest hoolitsema, isegi \u00fclemise teenusepakkuja tehniline tugi tunnustas, miks ma ei saa avada vajalikku, mitte keelatud saiti. Arvan, et pilt paneb teid naerma \ud83d\ude42<\/p>\n<p><img decoding=\"async\" alt=\"Iptables ja rikkalike ning laiskade dissidentide liiklusfiltreerimine\" src=\"\/wp-content\/uploads\/2019\/10\/ea50d22bb4ab91bfdd52ceae9ccde0e2.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSelgus, et nad t\u00f5lgivad keelatud saitide nimed IP-aadressideks ja blokeerivad just IP-d (neid ei huvita, et sellel IP-aadressil v\u00f5ib olla 20 saiti). <\/p>\n<p>Teenusepakkuja 3<br \/>\n \u2014 laseb liikluse sinna, kuid tagasi m\u00f6\u00f6da marsruuti ei lase.<\/p>\n<p>Teenusepakkuja 4<br \/>\n \u2014 keelab k\u00f5ik pakettide manipulatsioonid n\u00e4idatud suunas.<\/p>\n<p>Ja mida teha VPN-iga (Opera brauserile austus) ja brauseri pluginatega? M\u00e4ngides alguses Mikrotik node'iga, tekkis meil isegi ressursimahukas L7 retsept, millest pidime hiljem loobuma (keelatud nimesid v\u00f5ib olla rohkem, kahju on, kui peale oma otseste \u00fclesannete marsruutide, CPU PPC460GT koormus ulatub 100% peale kolme k\u00fcmne v\u00e4ljendi).<\/p>\n<p><img decoding=\"async\" alt=\"Iptables ja rikkalike ning laiskade dissidentide liiklusfiltreerimine\" src=\"\/wp-content\/uploads\/2019\/10\/c71db959ded51da02ad43e8e14a4144b.jpg\" style=\"display:block;margin: 0 auto;\" \/>.<\/p>\n<p>Selgeks sai:<br \/>\nDNS 127.0.0.1 ei ole absoluutne lahendus, t\u00e4nap\u00e4eva brauserite versioonid v\u00f5imaldavad t\u00f5epoolest selliseid probleeme v\u00e4ltida. K\u00f5iki kasutajaid ei saa piirata v\u00e4hendatud \u00f5igustega ning ei tohi unustada, et alternatiivsete DNS-ide hulk on tohutu. Internet ei ole staatiline ja peale uute DNS-aadresside ostavad keelatud saidid uusi aadresse, muudavad tippdomeene, v\u00f5ivad oma aadressis m\u00e4rkmeid lisada\/\u00e4ra kustutada. Kuid siiski on \u00f5igust elada midagi sellist:<\/p>\n<pre><code class=\"bash\">ip route add blackhole 1.2.3.4<\/code><\/pre>\n<p>\nIP-aadresside nimekirja saamine keelatud saitide loendist oleks t\u00e4iesti t\u00f5hus, kuid eespool nimetatud kaalutlustel l\u00e4ksime Iptables'iga arutlemisse. Keskmes oli juba t\u00f6\u00f6tav tasakaalustaja CentOS Linuxi versioonil 7.5.1804.<\/p>\n<p>Kasutaja internet peab olema kiire ja brauser ei tohi oodata pool minutit, j\u00e4reldades, et see leht ei ole saadaval. Pikkade otsingute j\u00e4rel j\u00f5udsime sellise mudelini:<br \/>\nFail 1 -&gt; <b>\/script\/denied_host<\/b>, keelatud nimede nimekiri:<\/p>\n<pre><code class=\"plaintext\">test.test\nblablabla.bubu\ntorrent\nporno<\/code><\/pre>\n<p>\nFail 2 -&gt; <b>\/script\/denied_range<\/b>, keelatud adresseerimise ruumide ja aadresside nimekiri:<\/p>\n<pre><code class=\"plaintext\">192.168.111.0\/24\n241.242.0.0\/16<\/code><\/pre>\n<p>\nFail-skript 3 -&gt; <b>ipt.sh<\/b>, mis tegeleb iptables'ega:<\/p>\n<pre><code class=\"bash\"># \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 \u043f\u0435\u0440\u0435\u0447\u043d\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\nHOSTS=`cat \/script\/denied_host | grep -v '^#'`\nRANGE=`cat \/script\/denied_range | grep -v '^#'`\necho \"Stopping firewall and allowing everyone...\"\n# \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0435\u043c \u0432\u0441\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 iptables, \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044f \u0442\u043e \u0447\u0442\u043e \u043d\u0435 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043e\nsudo iptables -F\nsudo iptables -X\nsudo iptables -t nat -F\nsudo iptables -t nat -X\nsudo iptables -t mangle -F\nsudo iptables -t mangle -X\nsudo iptables -P INPUT ACCEPT\nsudo iptables -P FORWARD ACCEPT\nsudo iptables -P OUTPUT ACCEPT\n#\u0440\u0435\u0448\u0430\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430\u0445 (\u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0448\u0435\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b)\nsudo sh rout.sh\n# \u0446\u0438\u043a\u043b\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u043a\u0430\u0436\u0434\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443 \u0444\u0430\u0439\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0442\u0440\u043e\u043a\u0438\nfor i in $HOSTS; do\nsudo iptables -I FORWARD -m string --string $i --algo bm --from 1 --to 600 -p tcp -j REJECT --reject-with tcp-reset;\nsudo iptables -I FORWARD -m string --string $i --algo bm --from 1 --to 600 -p udp -j DROP;\ndone\n# \u0446\u0438\u043a\u043b\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u043a\u0430\u0436\u0434\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443 \u0444\u0430\u0439\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0430\u0434\u0440\u0435\u0441\u0430\nfor i in $RANGE; do\nsudo iptables -I FORWARD -p UDP -d $i -j DROP;\nsudo iptables -I FORWARD -p TCP  -d $i -j REJECT --reject-with tcp-reset;\ndone\n<\/code><\/pre>\n<p>\nSudo kasutamine on tingitud sellest, et meil on v\u00e4ike h\u00e4kk, et hallata l\u00e4bi WEB-interf\u00e4\u00e4si, kuid nagu n\u00e4itas selle mudeli kasutamine rohkem kui aasta jooksul, pole WEB nii vajalik. P\u00e4rast rakendamist oli soov t\u00f5sta veebisaitide loend andmebaasi ja nii edasi. Blokeeritud hostide hulk on \u00fcle 250 + k\u00fcmme adresseerimise ruumi. T\u00f5epoolest on probleem HTTPS-\u00fchendusega saidile minekul, nagu s\u00fcsteemiadministraatoril on mul brauserite osas pretensioone :), kuid need on erijuhud, enamus juhtub ikkagi meie poolel, samuti blokime edukalt Opera VPN-i, friGate t\u00fc\u00fcpi pluginaid ja Microsofti telemeetriat.<\/p>\n<p><img decoding=\"async\" alt=\"Iptables ja rikkalike ning laiskade dissidentide liiklusfiltreerimine\" src=\"\/wp-content\/uploads\/2019\/10\/c08d381986d74a8000d5a77e4a34e750.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/471402\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u044a\u044f\u0432\u0438\u0442\u044c \u043d\u0435\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u0430 \u0438\u043b\u0438 \u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432. \u0417\u0430\u0447\u0435\u043c \u0438\u0437\u043e\u0431\u0440\u0435\u0442\u0430\u0442\u044c \u0432\u0435\u043b\u043e\u0441\u0438\u043f\u0435\u0434 \u0442\u043e\u0433\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u0435\u0441\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b \u0434\u043b\u044f \u043d\u0430\u0448\u0438\u0445 \u0437\u0430\u0434\u0430\u0447, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440: Zeroshell, pfSense, ClearOS. \u0415\u0449\u0435 \u043e\u0434\u0438\u043d \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0443 \u043d\u0430\u0447\u0430\u043b\u044c\u0441\u0442\u0432\u0430: \u0410 \u0435\u0441\u0442\u044c \u043b\u0438 \u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0448\u0435\u0433\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0430? \u0423 \u043d\u0430\u0441 \u0431\u044b\u043b \u043e\u043f\u044b\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29247,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38982","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u044a\u044f\u0432\u0438\u0442\u044c \u043d\u0435\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u0430 \u0438\u043b\u0438 \u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Iptables \u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442 \u0431\u0435\u0434\u043d\u044b\u0445 \u0438 \u043b\u0435\u043d\u0438\u0432\u044b\u0445 \u0438\u043d\u0430\u043a\u043e\u043c\u044b\u0441\u043b\u044f\u0449\u0438\u0445 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u044a\u044f\u0432\u0438\u0442\u044c \u043d\u0435\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u0430 \u0438\u043b\u0438 \u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:27:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:27:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Iptables ja liikluse filtreerimine vaeste ja laiskade teistsuguste m\u00f5tlejate poolt | ProHoster","description":"Keelatud ressursside k\u00fclastamise blokeerimise asjakohasus puudutab iga administraatorit, kellele v\u00f5ivad ametlikult esitada seaduse v\u00f5i vastavate organite korralduste t\u00e4itmata j\u00e4tmise eest s\u00fc\u00fcdistuse.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Iptables \u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442 \u0431\u0435\u0434\u043d\u044b\u0445 \u0438 \u043b\u0435\u043d\u0438\u0432\u044b\u0445 \u0438\u043d\u0430\u043a\u043e\u043c\u044b\u0441\u043b\u044f\u0449\u0438\u0445 | ProHoster","og:description":"\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u044a\u044f\u0432\u0438\u0442\u044c \u043d\u0435\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u0430 \u0438\u043b\u0438 \u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:27:11+00:00","article:modified_time":"2019-10-31T19:27:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38982","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 00:15:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:59:27","updated":"2026-01-24 00:15:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38982","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=38982"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38982\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/29247"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=38982"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=38982"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=38982"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}