{"id":38982,"date":"2019-10-31T22:27:11","date_gmt":"2019-10-31T19:27:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih\/"},"modified":"2019-10-31T22:27:11","modified_gmt":"2019-10-31T19:27:11","slug":"iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih","title":{"rendered":"Iptables dhe filtrimi i trafikut nga mendimtar\u00ebt e varf\u00ebr dhe t\u00eb lenier","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>R\u00ebnd\u00ebsia e bllokimit t\u00eb vizitave n\u00eb burimet e ndaluara preku \u00e7do administratori, t\u00eb cilit mund t'i paraqiten zyrtarisht mosplotesimi i ligjit ose urdhrit t\u00eb organeve p\u00ebrkat\u00ebse. <\/p>\n<p><img decoding=\"async\" alt=\"Iptables dhe filtrimi i trafikut nga mendimtar\u00ebt e varf\u00ebr dhe t\u00eb lenier\" src=\"\/wp-content\/uploads\/2019\/10\/add48d25f687f411cd3c9235c9df61c1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPse t\u00eb shpikim bi\u00e7iklet\u00ebn kur ekzistojn\u00eb programe dhe distribucione t\u00eb specializuara p\u00ebr nevojat tona, p\u00ebr shembull: Zeroshell, pfSense, ClearOS. <\/p>\n<p>Nj\u00eb pyetje tjet\u00ebr u paraqit nga shefat: A ka produkti q\u00eb p\u00ebrdorim certifikat\u00ebn e siguris\u00eb s\u00eb shtetit ton\u00eb?<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nNe kemi pasur p\u00ebrvoj\u00eb me distribucionet e p\u00ebrmendura:<\/p>\n<ul>\n<li>Zeroshell \u2014 zhvilluesit madje na dhuruan nj\u00eb licenc\u00eb p\u00ebr 2 vjet, por doli se distribuoni i interesuar nuk e realizonte logjikisht funksionin kritik p\u00ebr ne;<\/li>\n<li>pfSense \u2014 respekt dhe nderim, nj\u00ebkoh\u00ebsisht e m\u00ebrzitshme, zakon p\u00ebr t\u2019u p\u00ebrshtatur me komand\u00ebn e Firewall-it FreeBSD dhe nuk \u00ebsht\u00eb mjaft e rehatshme p\u00ebr ne (mendoj se \u00ebsht\u00eb nj\u00eb \u00e7\u00ebshtje zakoni, por doli t\u00eb ishte jo \"rruga e duhur\");<\/li>\n<li>ClearOS \u2014 doli shum\u00eb ngadal\u00eb n\u00eb pajisjet tona, nuk arrit\u00ebm t\u00eb kalonim n\u00eb testime serioze, prandaj pse t\u00eb ket\u00eb nd\u00ebrfaqe kaq t\u00eb r\u00ebnda? <\/li>\n<li>Ideco SELECTA. P\u00ebr produktin \"Aideco\" \u00ebsht\u00eb nj\u00eb bised\u00eb aparte, nj\u00eb produkt interesant, por p\u00ebr arsye politike nuk \u00ebsht\u00eb p\u00ebr ne, dhe gjithashtu duam t'i b\u00ebjm\u00eb pyetje lidhur me licenc\u00ebn p\u00ebr po t\u00eb nj\u00ebjt\u00ebn Linux, Roundcube etj. Nga e mor\u00ebn ata se duke \"nd\u00ebrtuar\" nd\u00ebrfaqen n\u00eb <b>Python<\/b> dhe duke i marr\u00eb t\u00eb drejtat e superp\u00ebrdoruesit, ata mund t\u00eb shesin nj\u00eb produkt t\u00eb p\u00ebrfunduar t\u00eb p\u00ebrb\u00ebr\u00eb nga modulet e zhvilluara dhe t\u00eb p\u00ebrmir\u00ebsuara nga komuniteti i internetit t\u00eb shp\u00ebrndara sipas GPL&amp;etj.<\/li>\n<\/ul>\n<p>\nE kuptoj se tani drejt meje do t\u00eb bien reagime negative me k\u00ebrkesa p\u00ebr t\u00eb justifikuar ndjenjat e mia subjektive, por dua t\u00eb them se ky nyje i rrjetit gjithashtu \u00ebsht\u00eb nj\u00eb balancues i trafikut n\u00eb 4 kanale t\u00eb jashtme n\u00eb rrjetin Internet, p\u00ebr m\u00eb tep\u00ebr, secili kanal ka ve\u00e7orit\u00eb e tij. Nj\u00eb tjet\u00ebr faktor i r\u00ebnd\u00ebsish\u00ebm ishte nevoja p\u00ebr t\u00eb punuar me nj\u00eb nga disa nd\u00ebrfaqet rrjet\u00ebsore n\u00eb hap\u00ebsira t\u00eb ndryshme adresash, dhe un\u00eb <b>jam i gatsh\u00ebm<\/b> t\u00eb pranoj se p\u00ebrdorimi i VLAN-eve kudo ku \u00ebsht\u00eb e nevojshme dhe ku nuk \u00ebsht\u00eb, nuk jam <b>gati.<\/b>. N\u00eb p\u00ebrdorim kemi pajisje si TP-Link TL-R480T+ \u2014 q\u00eb nuk portretizohen idealisht, n\u00eb p\u00ebrgjith\u00ebsi me nuancat e tyre. K\u00ebt\u00eb pjes\u00eb n\u00eb Linux arriti ta konfiguroj me kuptim fal\u00eb faqes zyrtare t\u00eb Ubuntu. <noindex><a rel=\"nofollow\" href=\"https:\/\/help.ubuntu.ru\/wiki\/ip_balancing\">Balancimi i IP: bashkojm\u00eb disa kanale interneti n\u00eb nj\u00eb<\/a><\/noindex>. \u00c7do kanal mund t\u00eb \"bjer\u00eb\" n\u00eb \u00e7do moment, ashtu si\u00e7 mund t\u00eb ngrihet. N\u00ebse jeni t\u00eb interesuar p\u00ebr skriptin q\u00eb funksionon aktualisht (dhe kjo merret me nj\u00eb publikim t\u00eb ve\u00e7ant\u00eb) - shkruani n\u00eb komentet. <\/p>\n<p>Zgjidhja e shqyrtuar nuk pretendon p\u00ebr unik, por d\u00ebshiroj t\u00eb ngre pyetjen: \"Pse t\u00eb p\u00ebrshtatemi n\u00eb nj\u00eb nd\u00ebrmarrje me produkte t\u00eb dyshimta me k\u00ebrkesa t\u00eb r\u00ebnda harduerike kur mund t\u00eb shqyrtojm\u00eb nj\u00eb alternativ\u00eb?\".<\/p>\n<p>N\u00ebse n\u00eb RF ka nj\u00eb list\u00eb nga Roskomnadzor, n\u00eb Ukrain\u00eb - nj\u00eb aplikacion t\u00eb Vendimit t\u00eb K\u00ebshillit t\u00eb Siguris\u00eb Komb\u00ebtare (p.sh. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.president.gov.ua\/documents\/1262018-24150\">ja<\/a><\/noindex>), drejtuesit gjithashtu nuk flejn\u00eb. P\u00ebr shembull, na \u00ebsht\u00eb dor\u00ebzuar nj\u00eb list\u00eb e faqeve t\u00eb ndaluara q\u00eb sipas drejtuesve ndikojn\u00eb negativisht n\u00eb produktivitetin e pun\u00ebs. <\/p>\n<p>Duke biseduar me koleg\u00ebt n\u00eb nd\u00ebrmarrje t\u00eb tjera, t\u00eb cilat automatikisht ndalojn\u00eb t\u00eb gjitha faqet dhe vet\u00ebm me k\u00ebrkes\u00eb dhe lejen e shefit mund t\u00eb aksesosh nj\u00eb faqe specifike, me nj\u00eb buz\u00ebqeshje, duke menduar dhe \"duke marr\u00eb frym\u00eb mbi problemin\" erdhi kuptimi se jeta \u00ebsht\u00eb e mir\u00eb dhe ne filluam k\u00ebrkimin ton\u00eb.<\/p>\n<p>Duke pasur mund\u00ebsin\u00eb jo vet\u00ebm t\u00eb shohim analitikisht se \u00e7far\u00eb shkruhet n\u00eb \"libra t\u00eb amvisave\" mbi filtrimin e trafik, por edhe t\u00eb shohim se \u00e7far\u00eb ndodh n\u00eb kanalet e ofruesve t\u00eb ndrysh\u00ebm, e kemi v\u00ebrejtur k\u00ebto receta (\u00e7do skrin pak e prer\u00eb, lutem kuptoni):<\/p>\n<p>Ofruesi 1<br \/>\n \u2014 nuk merret me detaje dhe imposon serverat e tij DNS dhe nj\u00eb server proxy transparent. \u00c7far\u00eb?... Megjithat\u00eb, kemi akses aty ku duhet (n\u00ebse na nevojitet :))<\/p>\n<p>Ofruesi 2<br \/>\n \u2014 mendon se ofruesi i tij m\u00eb i lart\u00eb duhet t\u00eb mendoj\u00eb p\u00ebr at\u00eb, mb\u00ebshtetja teknike e ofruesit t\u00eb lart\u00eb madje e pranoi pse nuk mund t\u00eb hap faqen e nevojshme q\u00eb nuk \u00ebsht\u00eb ndaluar. Mendoj se pamja do t'ju g\u00ebzoj\u00eb \ud83d\ude42<\/p>\n<p><img decoding=\"async\" alt=\"Iptables dhe filtrimi i trafikut nga mendimtar\u00ebt e varf\u00ebr dhe t\u00eb lenier\" src=\"\/wp-content\/uploads\/2019\/10\/ea50d22bb4ab91bfdd52ceae9ccde0e2.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSi\u00e7 duket, ata p\u00ebrkthejn\u00eb emrat e faqeve t\u00eb ndaluara n\u00eb adresa IP dhe bllokojn\u00eb pik\u00ebrisht IP-n\u00eb (nuk i shqet\u00ebson fakti se n\u00eb k\u00ebt\u00eb adres\u00eb IP mund t\u00eb ket\u00eb dhe 20 faqe). <\/p>\n<p>Ofruesi 3<br \/>\n \u2014 lejon trafik n\u00eb nj\u00eb drejtim, por nuk lejon t\u00eb kthehet n\u00eb rrug\u00eb.<\/p>\n<p>Ofruesi 4<br \/>\n \u2014 ndalon t\u00eb gjitha manipulimet me paketat n\u00eb drejtimin e caktuar.<\/p>\n<p>\u00c7far\u00eb t\u00eb b\u00ebjm\u00eb me VPN (n\u00eb shfletuesin Opera) dhe me shtesa p\u00ebr shfletuesit? Duke eksperimentuar fillimisht me nyj\u00ebn Mikrotik, madje krijuam nj\u00eb recet\u00eb k\u00ebrkuese p\u00ebr L7, nga e cila m\u00eb von\u00eb ishte e nevojshme t\u00eb hiqeshim (mund t\u00eb ket\u00eb m\u00eb shum\u00eb emra t\u00eb ndaluar, b\u00ebhet e trishtueshme kur p\u00ebrve\u00e7 detyrave tona direkte p\u00ebr rrug\u00ebt, ngarkesa e procesorit PPC460GT arrin n\u00eb 100% me 30 shprehje).<\/p>\n<p><img decoding=\"async\" alt=\"Iptables dhe filtrimi i trafikut nga mendimtar\u00ebt e varf\u00ebr dhe t\u00eb lenier\" src=\"\/wp-content\/uploads\/2019\/10\/c71db959ded51da02ad43e8e14a4144b.jpg\" style=\"display:block;margin: 0 auto;\" \/>.<\/p>\n<p>\u00c7far\u00eb u kuptua:<br \/>\nDNS n\u00eb 127.0.0.1 nuk \u00ebsht\u00eb nj\u00eb panace, versionet moderne t\u00eb shfletuesve lejojn\u00eb q\u00eb t\u00eb kalohen k\u00ebto probleme. Nuk mund t\u00eb kufizohen t\u00eb gjith\u00eb p\u00ebrdoruesit me t\u00eb drejta t\u00eb kufizuara, dhe nuk duhet harruar numri i madh i DNS alternative. Interneti nuk \u00ebsht\u00eb statik, dhe p\u00ebrve\u00e7 adresave t\u00eb reja DNS, uebfaqet e ndaluara blejn\u00eb adresat e reja, ndryshojn\u00eb domenet e nivelit t\u00eb lart\u00eb, mund t\u00eb shtojn\u00eb\/din\u00eb nj\u00eb simbol n\u00eb adres\u00ebn e tyre. Por gjithsesi ka t\u00eb drejt\u00eb t\u00eb ekzistoj\u00eb di\u00e7ka si:<\/p>\n<pre><code class=\"bash\">ip route add blackhole 1.2.3.4<\/code><\/pre>\n<p>\nDo t\u00eb ishte mjaft efektive t\u00eb merret nj\u00eb list\u00eb e adresave IP nga lista e uebfaqeve t\u00eb ndaluara, por p\u00ebr arsyet e p\u00ebrmendura m\u00eb sip\u00ebr kaluam n\u00eb shqet\u00ebsimet rreth Iptables. Tani ekzistonte nj\u00eb balancues aktiv n\u00eb CentOS Linux release 7.5.1804.<\/p>\n<p>Internetin e p\u00ebrdoruesit duhet t\u00eb jet\u00eb i shpejt\u00eb, dhe shfletuesi nuk duhet t\u00eb pres\u00eb nj\u00eb minut\u00eb, duke arritur n\u00eb p\u00ebrfundimin se kjo faqe nuk \u00ebsht\u00eb e disponueshme. Pas k\u00ebrkimeve t\u00eb gjata arrit\u00ebm n\u00eb nj\u00eb model t\u00eb till\u00eb:<br \/>\nSkedari 1 -&gt; <b>\/script\/denied_host<\/b>, lista e emrave t\u00eb ndaluar:<\/p>\n<pre><code class=\"plaintext\">test.test\nblablabla.bubu\ntorrent\nporno<\/code><\/pre>\n<p>\nSkedari 2 -&gt; <b>\/script\/denied_range<\/b>, lista e hap\u00ebsirave adresore dhe adresave t\u00eb ndaluara:<\/p>\n<pre><code class=\"plaintext\">192.168.111.0\/24\n241.242.0.0\/16<\/code><\/pre>\n<p>\nSkedari-skript 3 -&gt; <b>ipt.sh<\/b>, q\u00eb kryen pun\u00ebn me iptables:<\/p>\n<pre><code class=\"bash\"># \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 \u043f\u0435\u0440\u0435\u0447\u043d\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\nHOSTS=`cat \/script\/denied_host | grep -v '^#'`\nRANGE=`cat \/script\/denied_range | grep -v '^#'`\necho \"Stopping firewall and allowing everyone...\"\n# \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0435\u043c \u0432\u0441\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 iptables, \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044f \u0442\u043e \u0447\u0442\u043e \u043d\u0435 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043e\nsudo iptables -F\nsudo iptables -X\nsudo iptables -t nat -F\nsudo iptables -t nat -X\nsudo iptables -t mangle -F\nsudo iptables -t mangle -X\nsudo iptables -P INPUT ACCEPT\nsudo iptables -P FORWARD ACCEPT\nsudo iptables -P OUTPUT ACCEPT\n#\u0440\u0435\u0448\u0430\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430\u0445 (\u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0448\u0435\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b)\nsudo sh rout.sh\n# \u0446\u0438\u043a\u043b\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u043a\u0430\u0436\u0434\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443 \u0444\u0430\u0439\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0442\u0440\u043e\u043a\u0438\nfor i in $HOSTS; do\nsudo iptables -I FORWARD -m string --string $i --algo bm --from 1 --to 600 -p tcp -j REJECT --reject-with tcp-reset;\nsudo iptables -I FORWARD -m string --string $i --algo bm --from 1 --to 600 -p udp -j DROP;\ndone\n# \u0446\u0438\u043a\u043b\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u043a\u0430\u0436\u0434\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443 \u0444\u0430\u0439\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0430\u0434\u0440\u0435\u0441\u0430\nfor i in $RANGE; do\nsudo iptables -I FORWARD -p UDP -d $i -j DROP;\nsudo iptables -I FORWARD -p TCP  -d $i -j REJECT --reject-with tcp-reset;\ndone\n<\/code><\/pre>\n<p>\nP\u00ebrdorimi i sudo justifikohet me faktin se kemi nj\u00eb hakat t\u00eb vog\u00ebl p\u00ebr t\u00eb menaxhuar p\u00ebrmes nd\u00ebrfaqes WEB, por si\u00e7 e tregoi p\u00ebrvoja e p\u00ebrdorimit t\u00eb k\u00ebtij modeli p\u00ebr m\u00eb shum\u00eb se nj\u00eb vit, WEB nuk \u00ebsht\u00eb aq i nevojsh\u00ebm. Pas implementimit kishte nj\u00eb d\u00ebshir\u00eb p\u00ebr ta futur list\u00ebn e uebfaqeve n\u00eb DB etj. Numri i hosteve t\u00eb bllokuar kalon 250 + dhjet\u00eb hap\u00ebsira adresore. V\u00ebrtet ka nj\u00eb problem kur kalon n\u00eb nj\u00eb uebfaqe p\u00ebrmes nj\u00eb lidhjeje https, si dhe si administrator sistemi kam disa ankesat ndaj shfletuesve :), por k\u00ebto jan\u00eb raste t\u00eb ve\u00e7anta, shumica e rrethanave ku nuk ka qasje n\u00eb burim jan\u00eb m\u00eb s\u00eb shumti n\u00eb an\u00ebn ton\u00eb, gjithashtu bllokojm\u00eb me sukses Opera VPN, shtesa si friGate dhe telemetrin\u00eb nga Microsoft.<\/p>\n<p><img decoding=\"async\" alt=\"Iptables dhe filtrimi i trafikut nga mendimtar\u00ebt e varf\u00ebr dhe t\u00eb lenier\" src=\"\/wp-content\/uploads\/2019\/10\/c08d381986d74a8000d5a77e4a34e750.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/471402\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u044a\u044f\u0432\u0438\u0442\u044c \u043d\u0435\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u0430 \u0438\u043b\u0438 \u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432. \u0417\u0430\u0447\u0435\u043c \u0438\u0437\u043e\u0431\u0440\u0435\u0442\u0430\u0442\u044c \u0432\u0435\u043b\u043e\u0441\u0438\u043f\u0435\u0434 \u0442\u043e\u0433\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u0435\u0441\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b \u0434\u043b\u044f \u043d\u0430\u0448\u0438\u0445 \u0437\u0430\u0434\u0430\u0447, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440: Zeroshell, pfSense, ClearOS. \u0415\u0449\u0435 \u043e\u0434\u0438\u043d \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0443 \u043d\u0430\u0447\u0430\u043b\u044c\u0441\u0442\u0432\u0430: \u0410 \u0435\u0441\u0442\u044c \u043b\u0438 \u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0448\u0435\u0433\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0430? \u0423 \u043d\u0430\u0441 \u0431\u044b\u043b \u043e\u043f\u044b\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29247,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38982","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u044a\u044f\u0432\u0438\u0442\u044c \u043d\u0435\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u0430 \u0438\u043b\u0438 \u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Iptables \u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442 \u0431\u0435\u0434\u043d\u044b\u0445 \u0438 \u043b\u0435\u043d\u0438\u0432\u044b\u0445 \u0438\u043d\u0430\u043a\u043e\u043c\u044b\u0441\u043b\u044f\u0449\u0438\u0445 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u044a\u044f\u0432\u0438\u0442\u044c \u043d\u0435\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u0430 \u0438\u043b\u0438 \u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:27:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:27:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Iptables dhe filtrimi i trafikut nga t\u00eb varfrit dhe t\u00eb lenient\u00ebt mend\u00ebrisht ndryshe | ProHoster","description":"R\u00ebnd\u00ebsia e bllokimit t\u00eb vizitave n\u00eb burimet e ndaluara preku \u00e7do administratori, t\u00eb cilit mund t'i paraqiten zyrtarisht mosplotesimi i ligjit ose urdhrit t\u00eb organeve p\u00ebrkat\u00ebse.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Iptables \u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442 \u0431\u0435\u0434\u043d\u044b\u0445 \u0438 \u043b\u0435\u043d\u0438\u0432\u044b\u0445 \u0438\u043d\u0430\u043a\u043e\u043c\u044b\u0441\u043b\u044f\u0449\u0438\u0445 | ProHoster","og:description":"\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u044a\u044f\u0432\u0438\u0442\u044c \u043d\u0435\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u0430 \u0438\u043b\u0438 \u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/iptables-i-filtratsiya-trafika-ot-bednyh-i-lenivyh-inakomyslyashhih","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:27:11+00:00","article:modified_time":"2019-10-31T19:27:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38982","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 00:15:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:59:27","updated":"2026-01-24 00:15:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38982","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=38982"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38982\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/29247"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=38982"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=38982"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=38982"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}