{"id":38982,"date":"2019-10-31T22:27:11","date_gmt":"2019-10-31T19:27:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih\/"},"modified":"2019-10-31T22:27:11","modified_gmt":"2019-10-31T19:27:11","slug":"iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih","title":{"rendered":"Iptables dhe filtrimi i trafikut nga mendimtar\u00ebt e varf\u00ebr dhe t\u00eb len\u00eb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>R\u00ebnd\u00ebsia e bllokimit t\u00eb vizitave t\u00eb burimeve t\u00eb ndaluara ndikon te \u00e7do administrator, t\u00eb cilit i mund t\u00eb i paraqitet zyrtarisht moszbatimi i ligjit ose urdhrit t\u00eb organeve p\u00ebrkat\u00ebse. <\/p>\n<p><img decoding=\"async\" alt=\"Iptables dhe filtrimi i trafikut nga mendimtar\u00ebt e varf\u00ebr dhe t\u00eb len\u00eb\" src=\"\/wp-content\/uploads\/2019\/10\/add48d25f687f411cd3c9235c9df61c1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPse t\u00eb shpikim bi\u00e7iklet\u00ebn kur kemi programe dhe distribuime t\u00eb specializuara p\u00ebr detyrat tona, si: Zeroshell, pfSense, ClearOS. <\/p>\n<p>Nj\u00eb tjet\u00ebr pyetje doli nga drejtuesit: A ka produkti q\u00eb p\u00ebrdorim nj\u00eb certifikat\u00eb sigurie nga shteti yn\u00eb?<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nKemi pasur p\u00ebrvoj\u00eb me distribuimet e p\u00ebrmendura:<\/p>\n<ul>\n<li>Zeroshell \u2014 zhvilluesit madje na dhuruan nj\u00eb licenc\u00eb p\u00ebr 2 vjet, por u duk se distribuimi q\u00eb na interesonte nuk p\u00ebrmbushte nj\u00eb funksion kritik p\u00ebr ne;<\/li>\n<li>pfSense \u2014 respekt dhe nderim, por po ashtu e m\u00ebrzitshme, zakonimi me komand\u00ebn e linj\u00ebs s\u00eb komandave t\u00eb firewall-it FreeBSD dhe nuk \u00ebsht\u00eb mjaft i p\u00ebrshtatsh\u00ebm p\u00ebr ne (mendoj se ishte \u00e7\u00ebshtje zakoni, por del se nuk ishte \"rruga e duhur\");<\/li>\n<li>ClearOS \u2014 n\u00eb harduerin ton\u00eb rezultoi shum\u00eb ngadal\u00eb, nuk arrit\u00ebm t\u00eb kryejm\u00eb testime serioze, pra p\u00ebrse i till\u00eb t\u00eb jen\u00eb nd\u00ebrfaqet e r\u00ebnda? <\/li>\n<li>Ideco SELECTA. P\u00ebr produktin 'Aideco' \u00ebsht\u00eb nj\u00eb diskutim tjet\u00ebr, nj\u00eb produkt interesant, por p\u00ebr arsyet politike nuk \u00ebsht\u00eb p\u00ebr ne, dhe do t\u00eb doja t\u00eb diskutoja p\u00ebr licenc\u00ebn e Linux, Roundcube etj. Nga e mor\u00ebn ata iden\u00eb se duke \u201ce p\u00ebrshkuar\u201d nd\u00ebrfaqen n\u00eb <b>Python<\/b> dhe duke marr\u00eb t\u00eb drejtat e superp\u00ebrdoruesit mund t\u00eb shesin nj\u00eb produkt t\u00eb p\u00ebrfunduar t\u00eb p\u00ebrb\u00ebr\u00eb nga modulet e zhvilluara dhe t\u00eb p\u00ebrmir\u00ebsuara nga komunat e internetit q\u00eb shp\u00ebrndahen sipas GPL&amp;etc.<\/li>\n<\/ul>\n<p>\nE kuptoj se tani do t\u00eb fillojn\u00eb nj\u00eb val\u00eb ankesash nga ana ime me k\u00ebrkesa p\u00ebr t\u00eb arsyetuar detajisht ndjenjat e mia subjektive, por dua t\u00eb them se ky nyje i rrjetit gjithashtu \u00ebsht\u00eb nj\u00eb balancues trafiku p\u00ebr 4 kanale t\u00eb jashtme drejt internetit, t\u00eb cil\u00ebt gjithashtu kan\u00eb ve\u00e7orit\u00eb e tyre. Nj\u00eb nga problemet kryesore ishte nevoja p\u00ebr t\u00eb punuar me nj\u00eb nga disa nd\u00ebrfaqet e rrjetit n\u00eb hap\u00ebsira t\u00eb ndryshme adresash, dhe un\u00eb <b>jam i gatsh\u00ebm<\/b> t\u00eb pranoj, q\u00eb t\u00eb p\u00ebrdor VLAN-at kudo dhe p\u00ebr \u00e7do arsye un\u00eb <b>nuk jam i gatsh\u00ebm<\/b>. N\u00eb p\u00ebrdorim kemi pajisje si TP-Link TL-R480T+ \u2014 nuk funksionojn\u00eb perfekt, por kan\u00eb nuancat e veta. K\u00ebt\u00eb pjes\u00eb n\u00eb Linux arrit\u00ebm ta konfiguroni n\u00eb m\u00ebnyr\u00eb t\u00eb arsyeshme fal\u00eb faqes zyrtare t\u00eb Ubuntu. <noindex><a rel=\"nofollow\" href=\"https:\/\/help.ubuntu.ru\/wiki\/ip_balancing\">IP-Balancimi: bashkojm\u00eb disa kanale interneti n\u00eb nj\u00eb<\/a><\/noindex>. \u00c7do kanal mund t\u00eb \u201cbjer\u00eb\u201d n\u00eb \u00e7do moment, si\u00e7 mund t\u00eb ngrihet. N\u00ebse jeni t\u00eb interesuar p\u00ebr skriptin q\u00eb funksionon aktualisht (dhe kjo \u00ebsht\u00eb nj\u00eb publikim i ve\u00e7ant\u00eb) \u2014 shkruani n\u00eb komente. <\/p>\n<p>Zgjidhja q\u00eb po shqyrtojm\u00eb nuk pretendon p\u00ebr unik\u00eb, por do t\u00eb doja t\u00eb b\u00ebja nj\u00eb pyetje: \u201cPse n\u00eb nj\u00eb nd\u00ebrmarrje t\u00eb p\u00ebrshtatemi me produkte t\u00eb dyshimta me k\u00ebrkesa materiale t\u00eb r\u00ebnda kur mund t\u00eb shqyrtojm\u00eb nj\u00eb alternativ\u00eb?\u201d<\/p>\n<p>N\u00eb Rusi ka nj\u00eb list\u00eb t\u00eb Roskomnadzor, n\u00eb Ukrain\u00eb \u2014 nj\u00eb aplikacion p\u00ebr Zgjidhjen e K\u00ebshillit t\u00eb Siguris\u00eb Komb\u00ebtare (p.sh. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.president.gov.ua\/documents\/1262018-24150\">k\u00ebtu<\/a><\/noindex>), dhe n\u00eb nivel lokal drejtor\u00ebt gjithashtu nuk flejn\u00eb. P\u00ebr shembull, na u dha nj\u00eb list\u00eb e faqeve t\u00eb ndaluara, sipas mendimit t\u00eb drejtuesit, q\u00eb p\u00ebrkeq\u00ebsojn\u00eb produktivitetin n\u00eb vendin e pun\u00ebs. <\/p>\n<p>Duke komunikuar me koleg\u00eb n\u00eb nd\u00ebrmarrje t\u00eb tjera, ku n\u00eb m\u00ebnyr\u00eb t\u00eb parazgjedhur jan\u00eb t\u00eb ndaluara t\u00eb gjitha faqet dhe vet\u00ebm me k\u00ebrkes\u00eb nga drejtori mund t\u00eb fitosh akses n\u00eb nj\u00eb faqe t\u00eb caktuar, duke buz\u00ebqeshur me respekt, duke menduar dhe \"duke e ndihmuar k\u00ebt\u00eb problem\", na erdhi n\u00eb mendje se jeta ndonj\u00ebher\u00eb \u00ebsht\u00eb e mir\u00eb dhe filluam k\u00ebrkimin ton\u00eb.<\/p>\n<p>Duke pasur mund\u00ebsi jo vet\u00ebm t\u00eb shohim analitikisht se \u00e7far\u00eb shkruhen n\u00eb \"libra nga sht\u00ebpia\" rreth filtrimit t\u00eb trafikut, por edhe t\u00eb shohim se \u00e7far\u00eb ndodh n\u00eb kanale t\u00eb ndryshme t\u00eb ofruesve, ne vum\u00eb re recetat e m\u00ebposhtme (\u00e7do skrin pak i prishur, ju lutem kuptoni k\u00ebrkes\u00ebn):<\/p>\n<p>Ofruesi 1<br \/>\n \u2014 nuk merret me detaje dhe imponon serverat e tij DNS dhe nj\u00eb server proksi transparent. Po \u00e7far\u00eb?.. megjithat\u00eb kemi akses atje ku kemi nevoj\u00eb (n\u00ebse na nevojitet :))<\/p>\n<p>Ofruesi 2<br \/>\n \u2014 mendon se ofruesi i tij i lart\u00eb duhet ta mendoj\u00eb k\u00ebt\u00eb, dhe mb\u00ebshtetja teknike e ofruesit t\u00eb lart\u00eb madje pranoi pse nuk mund t\u00eb hap internetin e nevojsh\u00ebm. Mendoj se pamja do t'ju b\u00ebj\u00eb t\u00eb qeshni \ud83d\ude42<\/p>\n<p><img decoding=\"async\" alt=\"Iptables dhe filtrimi i trafikut nga mendimtar\u00ebt e varf\u00ebr dhe t\u00eb len\u00eb\" src=\"\/wp-content\/uploads\/2019\/10\/ea50d22bb4ab91bfdd52ceae9ccde0e2.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSi\u00e7 doli, ata i kthejn\u00eb emrat e faqeve t\u00eb ndaluara n\u00eb adresa IP dhe bllokojn\u00eb pik\u00ebrisht IP-n\u00eb (nuk shqet\u00ebsohet se n\u00eb k\u00ebt\u00eb IP mund t\u00eb ket\u00eb 20 faqe). <\/p>\n<p>Ofruesi 3<br \/>\n \u2014 kalon trafikun atje, por nuk e lejon t\u00eb kthehet pas n\u00eb rrug\u00eb.<\/p>\n<p>Ofruesi 4<br \/>\n \u2014 ndalon \u00e7do manipulim me paketat n\u00eb drejtimin e p\u00ebrcaktuar.<\/p>\n<p>\u00c7far\u00eb duhet b\u00ebr\u00eb me VPN (n\u00eb shfletuesin Opera) dhe plaginjt\u00eb p\u00ebr shfletuesit? Duke eksperimentuar n\u00eb fillim me nodet Mikrotik, ne madje arrit\u00ebm nj\u00eb recet\u00eb shum\u00eb resurseve p\u00ebr L7, nga e cila m\u00eb von\u00eb na u desh t\u00eb hiqnim dor\u00eb (emrat e ndaluar mund t\u00eb jen\u00eb m\u00eb shum\u00eb, \u00ebsht\u00eb e trisht\u00eb kur, p\u00ebrve\u00e7 detyrave t\u00eb drejtp\u00ebrdrejta p\u00ebr rruge, ngarkesa e procesorit PPC460GT arrin n\u00eb 100% p\u00ebr 30 shprehje).<\/p>\n<p><img decoding=\"async\" alt=\"Iptables dhe filtrimi i trafikut nga mendimtar\u00ebt e varf\u00ebr dhe t\u00eb len\u00eb\" src=\"\/wp-content\/uploads\/2019\/10\/c71db959ded51da02ad43e8e14a4144b.jpg\" style=\"display:block;margin: 0 auto;\" \/>.<\/p>\n<p>\u00c7far\u00eb u kuptua:<br \/>\nDNS n\u00eb 127.0.0.1 nuk \u00ebsht\u00eb nj\u00eb panac\u00eb, versionet moderne t\u00eb shfletuesve e lejojn\u00eb kalimin e k\u00ebsaj problematike. Nuk \u00ebsht\u00eb e mundur t\u00eb kufizosh t\u00eb gjith\u00eb p\u00ebrdoruesit me t\u00eb drejta t\u00eb kufizuara, dhe nuk duhet harruar numri i madh i DNS-ve alternative. Interneti nuk \u00ebsht\u00eb statik, dhe p\u00ebrve\u00e7 adresave t\u00eb reja t\u00eb DNS, faqet e ndaluara blejn\u00eb adresa t\u00eb reja, ndryshojn\u00eb emrat e domain-it t\u00eb sip\u00ebrm, mund t\u00eb shtojn\u00eb\/eliminojn\u00eb nj\u00eb simbol n\u00eb adres\u00ebn e tyre. Por gjithsesi ka t\u00eb drejt\u00eb t\u00eb ekzistoj\u00eb di\u00e7ka si:<\/p>\n<pre><code class=\"bash\">ip route add blackhole 1.2.3.4<\/code><\/pre>\n<p>\nMund t\u00eb ishte mjaft efikase t\u00eb merrnim nj\u00eb list\u00eb IP nga lista e faqeve t\u00eb ndaluara, por p\u00ebr arsyet e p\u00ebrmendura m\u00eb sip\u00ebr, kaluam n\u00eb mendime p\u00ebr Iptables. Nj\u00eb balancues aktiv ekzistonte tashm\u00eb n\u00eb CentOS Linux release 7.5.1804.<\/p>\n<p>Internetin e p\u00ebrdoruesit duhet t\u00eb jet\u00eb i shpejt\u00eb, dhe shfletuesi nuk duhet t\u00eb pres\u00eb gjysm\u00eb minute, duke konkluduar se kjo faqe nuk \u00ebsht\u00eb e disponueshme. Pas k\u00ebrkimeve t\u00eb gjata, arrit\u00ebm n\u00eb k\u00ebt\u00eb model:<br \/>\nFile 1 -&gt; <b>\/script\/denied_host<\/b>, lista e emrave t\u00eb ndaluar:<\/p>\n<pre><code class=\"plaintext\">test.test\nblablabla.bubu\ntorrent\nporno<\/code><\/pre>\n<p>\nFile 2 -&gt; <b>\/script\/denied_range<\/b>, lista e hap\u00ebsirave adresore dhe adresave t\u00eb ndaluara:<\/p>\n<pre><code class=\"plaintext\">192.168.111.0\/24\n241.242.0.0\/16<\/code><\/pre>\n<p>\nFile-skript 3 -&gt; <b>ipt.sh<\/b>, q\u00eb kryen pun\u00ebn me iptables:<\/p>\n<pre><code class=\"bash\"># \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 \u043f\u0435\u0440\u0435\u0447\u043d\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\nHOSTS=`cat \/script\/denied_host | grep -v '^#'`\nRANGE=`cat \/script\/denied_range | grep -v '^#'`\necho \"Stopping firewall and allowing everyone...\"\n# \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0435\u043c \u0432\u0441\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 iptables, \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044f \u0442\u043e \u0447\u0442\u043e \u043d\u0435 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043e\nsudo iptables -F\nsudo iptables -X\nsudo iptables -t nat -F\nsudo iptables -t nat -X\nsudo iptables -t mangle -F\nsudo iptables -t mangle -X\nsudo iptables -P INPUT ACCEPT\nsudo iptables -P FORWARD ACCEPT\nsudo iptables -P OUTPUT ACCEPT\n#\u0440\u0435\u0448\u0430\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430\u0445 (\u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0448\u0435\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b)\nsudo sh rout.sh\n# \u0446\u0438\u043a\u043b\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u043a\u0430\u0436\u0434\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443 \u0444\u0430\u0439\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0442\u0440\u043e\u043a\u0438\nfor i in $HOSTS; do\nsudo iptables -I FORWARD -m string --string $i --algo bm --from 1 --to 600 -p tcp -j REJECT --reject-with tcp-reset;\nsudo iptables -I FORWARD -m string --string $i --algo bm --from 1 --to 600 -p udp -j DROP;\ndone\n# \u0446\u0438\u043a\u043b\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u043a\u0430\u0436\u0434\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443 \u0444\u0430\u0439\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0430\u0434\u0440\u0435\u0441\u0430\nfor i in $RANGE; do\nsudo iptables -I FORWARD -p UDP -d $i -j DROP;\nsudo iptables -I FORWARD -p TCP  -d $i -j REJECT --reject-with tcp-reset;\ndone\n<\/code><\/pre>\n<p>\nP\u00ebrdorimi i sudo \u00ebsht\u00eb i justifikuar sepse kemi nj\u00eb hile t\u00eb vog\u00ebl p\u00ebr menaxhimin p\u00ebrmes nd\u00ebrfaqes WEB, por si\u00e7 tregoi p\u00ebrvoja e p\u00ebrdorimit t\u00eb k\u00ebtij modeli p\u00ebr nj\u00eb periudh\u00eb m\u00eb shum\u00eb se nj\u00eb vit, WEB nuk \u00ebsht\u00eb kaq e nevojshme. Pas zbatimit, kishte d\u00ebshir\u00eb t\u00eb regjistronim list\u00ebn e faqeve n\u00eb DB etj. Numri i hosteve t\u00eb bllokuar \u00ebsht\u00eb mbi 250 + dhjet\u00eb hap\u00ebsira adresore. N\u00eb t\u00eb v\u00ebrtet\u00eb ka nj\u00eb problem kur kalon n\u00eb nj\u00eb faqe p\u00ebrmes nj\u00eb lidhjeje HTTPS, si nj\u00eb administrator sistemi kam v\u00ebrejtje ndaj shfletuesve :), por k\u00ebto jan\u00eb raste t\u00eb ve\u00e7anta, shumica e aktivizimeve pa akses n\u00eb burim jan\u00eb akoma nga ana jon\u00eb, gjithashtu bllokojm\u00eb me sukses Opera VPN, plaginjt\u00eb si friGate dhe telemetrin\u00eb nga Microsoft.<\/p>\n<p><img decoding=\"async\" alt=\"Iptables dhe filtrimi i trafikut nga mendimtar\u00ebt e varf\u00ebr dhe t\u00eb len\u00eb\" src=\"\/wp-content\/uploads\/2019\/10\/c08d381986d74a8000d5a77e4a34e750.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/471402\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u044a\u044f\u0432\u0438\u0442\u044c \u043d\u0435\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u0430 \u0438\u043b\u0438 \u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432. \u0417\u0430\u0447\u0435\u043c \u0438\u0437\u043e\u0431\u0440\u0435\u0442\u0430\u0442\u044c \u0432\u0435\u043b\u043e\u0441\u0438\u043f\u0435\u0434 \u0442\u043e\u0433\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u0435\u0441\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b \u0434\u043b\u044f \u043d\u0430\u0448\u0438\u0445 \u0437\u0430\u0434\u0430\u0447, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440: Zeroshell, pfSense, ClearOS. \u0415\u0449\u0435 \u043e\u0434\u0438\u043d \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0443 \u043d\u0430\u0447\u0430\u043b\u044c\u0441\u0442\u0432\u0430: \u0410 \u0435\u0441\u0442\u044c \u043b\u0438 \u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0448\u0435\u0433\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0430? \u0423 \u043d\u0430\u0441 \u0431\u044b\u043b \u043e\u043f\u044b\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29247,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38982","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u044a\u044f\u0432\u0438\u0442\u044c \u043d\u0435\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u0430 \u0438\u043b\u0438 \u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Iptables \u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442 \u0431\u0435\u0434\u043d\u044b\u0445 \u0438 \u043b\u0435\u043d\u0438\u0432\u044b\u0445 \u0438\u043d\u0430\u043a\u043e\u043c\u044b\u0441\u043b\u044f\u0449\u0438\u0445 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u044a\u044f\u0432\u0438\u0442\u044c \u043d\u0435\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u0430 \u0438\u043b\u0438 \u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:27:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:27:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Iptables dhe filtrimi i trafikut nga t\u00eb varfrit dhe t\u00eb lenient\u00ebt e mendimit t\u00eb kund\u00ebrt | ProHoster","description":"R\u00ebnd\u00ebsia e bllokimit t\u00eb vizitave t\u00eb burimeve t\u00eb ndaluara ndikon te \u00e7do administrator, t\u00eb cilit i mund t\u00eb i paraqitet zyrtarisht moszbatimi i ligjit ose urdhrit t\u00eb organeve p\u00ebrkat\u00ebse.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Iptables \u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442 \u0431\u0435\u0434\u043d\u044b\u0445 \u0438 \u043b\u0435\u043d\u0438\u0432\u044b\u0445 \u0438\u043d\u0430\u043a\u043e\u043c\u044b\u0441\u043b\u044f\u0449\u0438\u0445 | ProHoster","og:description":"\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u044a\u044f\u0432\u0438\u0442\u044c \u043d\u0435\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u0430 \u0438\u043b\u0438 \u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:27:11+00:00","article:modified_time":"2019-10-31T19:27:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38982","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 00:15:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:59:27","updated":"2026-01-24 00:15:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38982","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=38982"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38982\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/29247"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=38982"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=38982"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=38982"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}