Iptables ืื•ืŸ ืคื™ืœื˜ืขืจื™ื ื’ ืคืึทืจืงืขืจ ืคื•ืŸ ืึธืจืขื ืื•ืŸ ืคื•ื™ืœ ื“ื™ืกื™ื“ืึทื ืฅ

ื“ื™ ืฉื™ื™ื›ื•ืช ืคื•ืŸ ื‘ืœืึทืงื™ื ื’ ื•ื•ื™ื–ื™ืฅ ืฆื• ืคึผืจืึธื•ื›ื™ื‘ืึทื˜ืึทื“ ืจืขืกื•ืจืกืŸ ืึทืคืขืงืฅ ื™ืขื“ืขืจ ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจ ื•ื•ืึธืก ืงืขืŸ ื–ื™ื™ืŸ ืึทืคื™ืฉืึทืœื™ ื‘ืืคื•ื™ืœืŸ ืžื™ื˜ ื“ื•ืจื›ืคืึทืœ ืฆื• ื ืึธื›ืงื•ืžืขืŸ ืžื™ื˜ ื“ื™ ื’ืขื–ืขืฅ ืึธื“ืขืจ ืึธืจื“ืขืจืก ืคื•ืŸ ื“ื™ ื‘ืึทื˜ื™ื™ึทื˜ื™ืง ืื•ื™ื˜ืืจื™ื˜ืขื˜ืŸ.

Iptables ืื•ืŸ ืคื™ืœื˜ืขืจื™ื ื’ ืคืึทืจืงืขืจ ืคื•ืŸ ืึธืจืขื ืื•ืŸ ืคื•ื™ืœ ื“ื™ืกื™ื“ืึทื ืฅ

ืคืืจื•ื•ืืก ืจื™ื™ื ื•ื•ืขื ื˜ ื“ื™ ืจืึธื“ ื•ื•ืขืŸ ืขืก ื–ืขื ืขืŸ ืกืคึผืขืฉืึทืœื™ื™ื–ื“ ืžื’ื™ืœื” ืื•ืŸ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืคึฟืึทืจ ืื•ื ื“ื–ืขืจ ื˜ืึทืกืงืก, ืœืžืฉืœ: Zeroshell, pfSense, ClearOS.

ื“ื™ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ื”ืื˜ ืืŸ ืื ื“ืขืจ ืงืฉื™ื: ืฆื™ ื“ื™ ืคึผืจืึธื“ื•ืงื˜ ื’ืขื ื™ืฆื˜ ื”ืื˜ ืึท ื–ื™ื›ืขืจืงื™ื™ึทื˜ ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืคื•ืŸ ืื•ื ื“ื–ืขืจ ืฉื˜ืึทื˜?

ืžื™ืจ ื”ืึธื‘ืŸ ื“ืขืจืคืึทืจื•ื ื’ ืžื™ื˜ ื“ื™ ืคืืœื’ืขื ื“ืข ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–:

  • ื–ืขืจืึธืฉืขืœ - ื“ื™ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ืืคื™ืœื• ื“ืึธื•ื ื™ื™ื˜ื™ื“ ืึท 2-ื™ืึธืจ ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ, ืึธื‘ืขืจ ืขืก ืคืืจืงืขืจื˜ ืื•ื™ืก ืึทื– ื“ื™ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ื™ื ื•ื•ืขื ื˜ืึทืจ ื•ื•ืึธืก ืžื™ืจ ื–ืขื ืขืŸ ืื™ื ื˜ืขืจืขืกื™ืจื˜ ืื™ืŸ, ื™ืœืึทื“ื–ืฉื™ืงืึทืœืœื™, ื“ื•ืจื›ื’ืขืงืึธื›ื˜ ืึท ืงืจื™ื˜ื™ืฉ ืคึฟื•ื ืงืฆื™ืข ืคึฟืึทืจ ืื•ื ื“ื–;
  • pfSense - ืจืขืกืคึผืขืงื˜ ืื•ืŸ ื›ึผื‘ึฟื•ื“, ืื™ืŸ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืฆื™ื™ื˜ ื ื•ื“ื ืข, ืฆื•ื’ืขื•ื•ื•ื™ื ื˜ ืฆื• ื“ื™ ื‘ืึทืคึฟืขืœ ืฉื•ืจื” ืคื•ืŸ ื“ื™ ืคืจืขืขื‘ืกื“ ืคื™ื™ืจื•ื•ืึทืœ ืื•ืŸ ื ื™ืฉื˜ ื’ืขื ื•ื’ ื‘ืึทืงื•ื•ืขื ืคึฟืึทืจ ืื•ื ื“ื– (ืื™ืš ื˜ืจืึทื›ื˜ืŸ ืขืก ืื™ื– ืึท ืขื ื™ืŸ ืคื•ืŸ ืžื™ื“ืข, ืึธื‘ืขืจ ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ืึท ืคืึทืœืฉ ื•ื•ืขื’);
  • ClearOS - ืื•ื™ืฃ ืื•ื ื“ื–ืขืจ ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ื–ื™ื™ืขืจ ืคึผืึทืžืขืœืขืš, ืžื™ืจ ืงืขืŸ ื ื™ืฉื˜ ื‘ืึทืงื•ืžืขืŸ ืฆื• ืขืจื ืกื˜ ื˜ืขืกื˜ื™ื ื’, ืึทื–ื•ื™ ื•ื•ืึธืก ืึทื–ืึท ืฉื•ื•ืขืจ ื™ื ื˜ืขืจืคื™ื™ืกื™ื–?
  • Ideco SELECTA. ื“ืขืจ ืื™ื“ืขืงืึธ ืคืจืื“ื•ืงื˜ ืื™ื– ื ื‘ืื–ื•ื ื“ืขืจืข ืฉืžื•ืขืก, ืืŸ ืื™ื ื˜ืขืจืกืื ื˜ืข ืคืจืื“ื•ืงื˜, ืื‘ืขืจ ืฆื•ืœื™ื‘ ืคืืœื™ื˜ื™ืฉืข ืกื™ื‘ื•ืช ื ื™ืฉื˜ ืคืืจ ืื•ื ื–, ืื•ืŸ ืื™ืš ื•ื•ื™ืœ ื–ื™ื™ ืื•ื™ืš "ื‘ื™ืกืŸ" ืื™ื‘ืขืจ ื“ื™ ืœื™ื™ืกืขื ืก ืคืืจ ื“ื™ ื–ืขืœื‘ืข ืœื™ื ื•ืงืก, ืจืื•ื ื“ืงื•ื‘ืข ืืื–"ื• ื•. ื•ื•ื• ื”ืื˜ ื–ื™ื™ ื‘ืึทืงื•ืžืขืŸ ื“ืขื ื’ืขื“ืึทื ืง ืึทื– ื“ื•ืจืš ืงืึทื˜ื™ื ื’ ื“ื™ ืฆื•ื‘ื™ื ื“ ืื™ืŸ ืคึผื™ื˜ื”ืึธืŸ ืื•ืŸ ื“ื•ืจืš ื ืขืžืขืŸ ืึทื•ื•ืขืง ืกื•ืคึผืขืจื•ืกืขืจ ืจืขื›ื˜, ื–ื™ื™ ืงืขื ืขืŸ ืคืึทืจืงื•ื™ืคืŸ ืึท ืคืึทืจื˜ื™ืง ืคึผืจืึธื“ื•ืงื˜ ื’ืขืžืื›ื˜ ืคื•ืŸ ื“ืขื•ื•ืขืœืึธืคึผืขื“ ืื•ืŸ ืžืึทื“ืึทืคื™ื™ื“ ืžืึทื“ื–ืฉื•ืœื– ืคื•ืŸ ื“ื™ ืื™ื ื˜ืขืจื ืขื˜ ืงื”ืœ ืคื•ื ืื ื“ืขืจื’ืขื˜ื™ื™ืœื˜ ืื•ื ื˜ืขืจ GPL & ืขื˜ืง.

ืื™ืš ืคึฟืึทืจืฉื˜ื™ื™ืŸ ืึทื– ืื™ืฆื˜ ื ืขื’ืึทื˜ื™ื•ื• ืขืงืกืงืœืึทืžื™ื™ืฉืึทื ื– ื•ื•ืขื˜ ื’ื™ืกืŸ ืื™ืŸ ืžื™ื™ืŸ ืจื™ื›ื˜ื•ื ื’ ืžื™ื˜ ืคืื“ืขืจื•ื ื’ืขืŸ ืฆื• ื•ื ื˜ืขืจืฉื˜ืจื™ื™ึทื›ืŸ ืžื™ื™ืŸ ืกืึทื‘ื“ื–ืฉืขืงื˜ื™ื•ื• ื’ืขืคื™ืœืŸ ืื™ืŸ ื“ืขื˜ืึทืœ, ืึธื‘ืขืจ ืื™ืš ื•ื•ื™ืœืŸ ืฆื• ื–ืึธื’ืŸ ืึทื– ื“ืขืจ ื ืขืฅ ื ืึธื“ืข ืื™ื– ืื•ื™ืš ืึท ืคืึทืจืงืขืจ ื‘ืึทืœืึทื ืกืขืจ ืคึฟืึทืจ 4 ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ื˜ืฉืึทื ืึทืœื– ืฆื• ื“ื™ ืื™ื ื˜ืขืจื ืขื˜, ืื•ืŸ ื™ืขื“ืขืจ ืงืึทื ืึทืœ ื”ืื˜ ื–ื™ื™ึทืŸ ืื™ื™ื’ืขื ืข ืงืขืจืึทืงื˜ืขืจื™ืกื˜ื™ืงืก. . ืืŸ ืื ื“ืขืจ ืงืึธืจื ืขืจืกื˜ืึธื•ืŸ ืื™ื– ื’ืขื•ื•ืขืŸ ื“ื™ ื ื•ื™ื˜ ืคึฟืึทืจ ืื™ื™ื ืขืจ ืคื•ืŸ ืขื˜ืœืขื›ืข ื ืขืฅ ื™ื ื˜ืขืจืคื™ื™ืกื™ื– ืฆื• ืึทืจื‘ืขื˜ืŸ ืื™ืŸ ืคืึทืจืฉื™ื“ืขื ืข ืึทื“ืจืขืก ืกืคึผื™ื™ืกืึทื–, ืื•ืŸ ืื™ืš ื’ืจื™ื™ื˜ ืึทืจื™ื™ึทื ืœืึธื–ืŸ ืึทื– ื•ื•ืœืึทื ื– ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืื•ืžืขื˜ื•ื ื•ื•ื• ื ื™ื™ื˜ื™ืง ืื•ืŸ ื ื™ื˜ ื ื™ื™ื˜ื™ืง ื ื™ืฉื˜ ื’ืจื™ื™ื˜. ืขืก ื–ืขื ืขืŸ ื“ื™ื•ื•ื™ื™ืกืึทื– ืื™ืŸ ื ื•ืฆืŸ ืึทื–ืึท ื•ื•ื™ TP-Link TL-R480T + - ื–ื™ื™ ื˜ืึธืŸ ื ื™ื˜ ื‘ื™ื›ื™ื™ื•ื•ื– ื‘ื™ืฉืœื™ื™ืžืขืก, ืื™ืŸ ืึทืœื’ืขืžื™ื™ืŸ, ืžื™ื˜ ื–ื™ื™ืขืจ ื ื•ืึทื ืกื™ื–. ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ืžืขื’ืœืขืš ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ ื“ืขื ื˜ื™ื™ืœ ืื•ื™ืฃ ืœื™ื ื•ืงืก ื“ืึทื ืง ืฆื• ื“ื™ Ubuntu ื‘ืึทืึทืžื˜ืขืจ ื•ื•ืขื‘ื–ื™ื™ื˜ืœ IP ื‘ืึทืœืึทื ืกื™ื ื’: ืงืึทืžื‘ื™ื™ื ื™ื ื’ ืขื˜ืœืขื›ืข ืื™ื ื˜ืขืจื ืขื˜ ื˜ืฉืึทื ืึทืœื– ืื™ืŸ ืื™ื™ืŸ. ื“ืขืจืฆื•, ื™ืขื“ืขืจ ืคื•ืŸ ื“ื™ ื˜ืฉืึทื ืึทืœื– ืงืขื ืขืŸ "ืคืึทืœืŸ" ืื™ืŸ ืงื™ื™ืŸ ืžืึธืžืขื ื˜, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื”ืขื›ืขืจื•ื ื’. ืื•ื™ื‘ ืื™ืจ ื–ืขื ื˜ ืื™ื ื˜ืขืจืขืกื™ืจื˜ ืื™ืŸ ืึท ืฉืจื™ืคื˜ ื•ื•ืึธืก ืื™ื– ืื™ืฆื˜ ืืจื‘ืขื˜ืŸ (ืื•ืŸ ื“ืึธืก ืื™ื– ื•ื•ืขืจื˜ ืึท ื‘ืึทื–ื•ื ื“ืขืจ ื•ื™ืกื’ืึทื‘ืข), ืฉืจื™ื™ึทื‘ืŸ ืื™ืŸ ื“ื™ ื‘ืึทืžืขืจืงื•ื ื’ืขืŸ.

ื“ื™ ืœื™ื™ื–ื•ื ื’ ืื•ื ื˜ืขืจ ื‘ืึทื˜ืจืึทื›ื˜ื•ื ื’ ื˜ื•ื˜ ื ื™ืฉื˜ ืคืึธื“ืขืจืŸ ืฆื• ื–ื™ื™ืŸ ื™ื™ื ืฆื™ืง, ืึธื‘ืขืจ ืื™ืš ื•ื•ืึธืœื˜ ื•ื•ื™ ืฆื• ืคืจืขื’ืŸ ื“ื™ ืงืฉื™ื: "ืคืืจื•ื•ืืก ื–ืึธืœ ืึท ืคืึทืจื ืขืžื•ื ื’ ืึทื“ืึทืคึผื˜ ืฆื• ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ืกืึธืคืขืงื“ื™ืง ืคึผืจืึธื“ื•ืงื˜ืŸ ืžื™ื˜ ืขืจื ืกื˜ ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืจืขืงื•ื•ื™ืจืขืžืขื ืฅ ื•ื•ืขืŸ ืึทืŸ ืื ื“ืขืจ ื‘ืจื™ืจื” ืึธืคึผืฆื™ืข ืงืขื ืขืŸ ื–ื™ื™ืŸ ืงืึทื ืกื™ื“ืขืจื“?"

ืื•ื™ื‘ ืื™ืŸ ื“ื™ ืจื•ืกื™ืฉืข ืคืขื“ืขืจื™ื™ืฉืึทืŸ ืขืก ืื™ื– ืึท ืจืฉื™ืžื” ืคื•ืŸ ืจืึธืกืงืึธืžื ื“ื–ืึธืจ, ืื™ืŸ ืื•ืงืจื™ื™ื ื ืขืก ืื™ื– ืึทืŸ ืึทื ืขืงืก ืฆื• ื“ื™ ื‘ืึทืฉืœื•ืก ืคื•ืŸ ื“ื™ ื ืึทืฉืึทื ืึทืœ ืกืขืงื•ืจื™ื˜ื™ ืงืึธื•ื ืกื™ืœ (ืœืžืฉืœ. ื“ืึธ), ื“ืืŸ ืฉืœืืคืŸ ื“ื™ ืœืืงืืœืข ืคื™ืจืขืจ ืื•ื™ืš ื ื™ืฉื˜. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืžื™ืจ ื–ืขื ืขืŸ ื’ืขื’ืขื‘ืŸ ืึท ืจืฉื™ืžื” ืคื•ืŸ ืคึผืจืึธื•ื›ื™ื‘ืึทื˜ืึทื“ ื–ื™ื™ื˜ืœืขืš ื•ื•ืึธืก, ืœื•ื™ื˜ ื“ื™ ืžื™ื™ื ื•ื ื’ ืคื•ืŸ ื“ื™ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’, ืคืึทืจืžื™ื ืขืจืŸ ืคึผืจืึธื•ื“ืึทืงื˜ื™ื•ื•ื™ื˜ื™ ืื™ืŸ ื“ื™ ื•ื•ืขืจืงืคึผืœื™ื™ืก.

ืงืึทืžื™ื•ื ืึทืงื™ื™ื˜ื™ื ื’ ืžื™ื˜ ื—ื‘ืจื™ื ืื™ืŸ ืื ื“ืขืจืข ืขื ื˜ืขืจืคึผืจื™ืกืขืก, ื•ื•ื• ื‘ื™ื™ ืคืขืœื™ืงื™ื™ึทื˜ ืึทืœืข ื–ื™ื™ื˜ืœืขืš ื–ืขื ืขืŸ ืคึผืจืึธื•ื›ื™ื‘ืึทื˜ืึทื“ ืื•ืŸ ื‘ืœื•ื™ื– ืื•ื™ืฃ ื‘ืขื˜ืŸ ืžื™ื˜ ื“ืขืจ ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ืคื•ืŸ ื“ืขืจ ื‘ืึทืœืขื‘ืึธืก ืื™ืจ ืงืขื ืขืŸ ืฆื•ื˜ืจื™ื˜ ืึท ืกืคึผืขืฆื™ืคื™ืฉ ืคึผืœืึทืฅ, ืกืžื™ื™ืœื™ื ื’ ืจื™ืกืคึผืขืงื˜ืคืึทืœื™, ื˜ืจืื›ื˜ืŸ ืื•ืŸ "ืกืžืึธื•ืงื™ื ื’ ืื™ื‘ืขืจ ื“ืขื ืคึผืจืึธื‘ืœืขื", ืžื™ืจ ื’ืขืงื•ืžืขืŸ ืฆื• ื“ื™ ืคืืจืฉื˜ืื ื“ ืึทื– ืœืขื‘ืŸ ืื™ื– ื ืึธืš ื’ื•ื˜ ืื•ืŸ ืžื™ืจ ืื ื’ืขื”ื•ื™ื‘ืŸ ื–ื™ื™ืขืจ ื–ื•ื›ืŸ.

ืžื™ื˜ ื“ื™ ื’ืขืœืขื’ื ื”ื™ื™ื˜ ื ื™ื˜ ื‘ืœื•ื™ื– ืฆื• ืึทื ืึทืœื™ื˜ื™ืฉ ื–ืขืŸ ื•ื•ืึธืก ื–ื™ื™ ืฉืจื™ื™ึทื‘ืŸ ืื™ืŸ ื“ื™ "ื‘ื™ื›ืขืจ ืคื•ืŸ ื›ืึทื•ืกื•ื•ื™ื™ื•ื•ื–" ื•ื•ืขื’ืŸ ืคืึทืจืงืขืจ ืคึฟื™ืœื˜ืจื™ืจื•ื ื’, ืึธื‘ืขืจ ืื•ื™ืš ืฆื• ื–ืขืŸ ื•ื•ืึธืก ืื™ื– ื’ืขืฉืขืขื ื™ืฉ ืื•ื™ืฃ ื“ื™ ื˜ืฉืึทื ืึทืœื– ืคื•ืŸ ืคืึทืจืฉื™ื“ืขื ืข ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื–, ืžื™ืจ ื‘ืืžืขืจืงื˜ ื“ื™ ืคืืœื’ืขื ื“ืข ืจืขืกืึทืคึผื™ื– (ืงื™ื™ืŸ ืกืงืจืขืขื ืฉืึธืฅ ื–ืขื ืขืŸ ืึท ื‘ื™ืกืœ ืงืจืึทืคึผื˜, ื‘ื™ื˜ืข ืคึฟืึทืจืฉื˜ื™ื™ืŸ ื•ื•ืขืŸ ืื™ืจ ืคืจืขื’ืŸ):

ืคึผืจืึทื•ื•ื™ื™ื“ืขืจ 1
- ื˜ื•ื˜ ื ื™ืฉื˜ ืึทืจืŸ ืื•ืŸ ื™ืžืคึผืึธื•ื–ื™ื– ื–ื™ื™ืŸ ืื™ื™ื’ืขื ืข ื“ื ืก ืกืขืจื•ื•ืขืจืก ืื•ืŸ ืึท ื˜ืจืึทื ืกืคึผืขืจืึทื ื˜ ืคึผืจืึทืงืกื™ ืกืขืจื•ื•ืขืจ. ื ื•? .. ืึธื‘ืขืจ ืžื™ืจ ื”ืึธื‘ืŸ ืฆื•ื˜ืจื™ื˜ ืฆื• ื•ื•ื• ืžื™ืจ ื“ืึทืจืคึฟืŸ ืขืก (ืื•ื™ื‘ ืžื™ืจ ื“ืึทืจืคึฟืŸ ืขืก :))

ืคึผืจืึทื•ื•ื™ื™ื“ืขืจ 2
- ื’ืœื•ื™ื‘ื˜ ืึทื– ื–ื™ื™ืŸ ืฉืคึผื™ืฅ ืฉืคึผื™ื™ึทื–ืขืจ ื–ืึธืœ ื˜ืจืึทื›ื˜ืŸ ื•ื•ืขื’ืŸ ื“ืขื, ื“ื™ ืฉืคึผื™ืฅ ืฉืคึผื™ื™ึทื–ืขืจ ืก ื˜ืขื›ื ื™ืฉ ืฉื˜ื™ืฆืŸ ืืคื™ืœื• ืึทื“ืžื™ื˜ืึทื“ ื•ื•ืึธืก ืื™ืš ืงืขืŸ ื ื™ืฉื˜ ืขืคืขื ืขืŸ ื“ืขื ืคึผืœืึทืฅ ืื™ืš ื“ืืจืฃ, ื•ื•ืึธืก ืื™ื– ื ื™ืฉื˜ ืคึผืจืึธื•ื›ื™ื‘ืึทื˜ืึทื“. ืื™ืš ื˜ืจืึทื›ื˜ืŸ ื“ื™ ื‘ื™ืœื“ ื•ื•ืขื˜ ืคืึทืจื•ื•ื™ื™ึทืœืŸ ืื™ืจ :)

Iptables ืื•ืŸ ืคื™ืœื˜ืขืจื™ื ื’ ืคืึทืจืงืขืจ ืคื•ืŸ ืึธืจืขื ืื•ืŸ ืคื•ื™ืœ ื“ื™ืกื™ื“ืึทื ืฅ

ื•ื•ื™ ืขืก ืคืืจืงืขืจื˜ ืื•ื™ืก, ื–ื™ื™ ืื™ื‘ืขืจื–ืขืฆืŸ ื“ื™ ื ืขืžืขืŸ ืคื•ืŸ ืคึผืจืึธื•ื›ื™ื‘ืึทื˜ืึทื“ ื–ื™ื™ื˜ืœืขืš ืื™ืŸ IP ืึทื“ืจืขืกืขืก ืื•ืŸ ืคืึทืจืฉืคึผืึทืจืŸ ื“ื™ IP ื–ื™ืš (ื–ื™ื™ ื–ืขื ืขืŸ ื ื™ืฉื˜ ื‘ืึทื“ืขืจื“ ื“ื•ืจืš ื“ื™ ืคืึทืงื˜ ืึทื– ื“ื™ IP ืึทื“ืจืขืก ืงืขื ืขืŸ ื‘ืึทืœืขื‘ืึธืก 20 ื–ื™ื™ื˜ืœืขืš).

ืคึผืจืึทื•ื•ื™ื™ื“ืขืจ 3
- ืึทืœืึทื•ื– ืคืึทืจืงืขืจ ืฆื• ื’ื™ื™ืŸ ื“ืึธืจื˜, ืึธื‘ืขืจ ื ื™ืฉื˜ ืœืึธื–ืŸ ืขืก ืฆื•ืจื™ืง ืื•ื™ืฃ ื“ืขืจ ืžืึทืจืฉืจื•ื˜.

ืคึผืจืึทื•ื•ื™ื™ื“ืขืจ 4
- ืคึผืจืึธื•ื›ื™ื‘ืึทืฅ ืึทืœืข ืžืึทื ื™ืคึผื™ืึทืœื™ื™ืฉืึทื ื– ืžื™ื˜ ืคึผืึทืงื™ืฅ ืื™ืŸ ื“ื™ ืกืคึผืขืกืึทืคื™ื™ื“ ืจื™ื›ื˜ื•ื ื’.

ื•ื•ืึธืก ืฆื• ื˜ืึธืŸ ืžื™ื˜ VPN (ืจืขืกืคึผืขืงื˜ ืฆื• ื“ื™ ืึธืคึผืขืจืึท ื‘ืœืขื˜ืขืจืขืจ) ืื•ืŸ ื‘ืœืขื˜ืขืจืขืจ ืคึผืœื•ื’ื™ื ืก? ืื™ืŸ ืขืจืฉื˜ืขืจ ืคึผืœื™ื™ื™ื ื’ ืžื™ื˜ ื“ื™ ื ืึธื“ืข ืžื™ืงืจืึธื˜ื™ืง, ืžื™ืจ ืืคื™ืœื• ื‘ืึทืงื•ืžืขืŸ ืึท ืžื™ื˜ืœ-ืื™ื ื˜ืขื ืกื™ื•ื•ืข ืจืขืฆืขืคึผื˜ ืคึฟืึทืจ ืœ 7, ื•ื•ืึธืก ืžื™ืจ ืฉืคึผืขื˜ืขืจ ื”ืึธื‘ืŸ ืฆื• ืคืึทืจืœืึธื–ืŸ (ืขืก ืงืขืŸ ื–ื™ื™ืŸ ืžืขืจ ืคึผืจืึธื•ื›ื™ื‘ืึทื˜ืึทื“ ื ืขืžืขืŸ, ืขืก ื•ื•ืขืจื˜ ื˜ืจื•ื™ืขืจื™ืง ื•ื•ืขืŸ, ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื–ื™ื™ืŸ ื“ื™ืจืขืงื˜ ืจื™ืกืคึผืึทื ืกืึทื‘ื™ืœืึทื˜ื™ื– ืคึฟืึทืจ ืจื•ืฅ, ืื•ื™ืฃ 3 ื˜ื•ืฅ ืื•ื™ืกื“ืจื•ืงืŸ ื“ื™ ืžืึทืกืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹PPC460GT ืคึผืจืึทืกืขืกืขืจ ื’ื™ื™ื˜ ืฆื• 100%.

Iptables ืื•ืŸ ืคื™ืœื˜ืขืจื™ื ื’ ืคืึทืจืงืขืจ ืคื•ืŸ ืึธืจืขื ืื•ืŸ ืคื•ื™ืœ ื“ื™ืกื™ื“ืึทื ืฅ.

ื•ื•ืืก ืื™ื– ื’ืขื•ื•ืืจืŸ ืงืœืืจ:
ื“ื ืก ืื•ื™ืฃ 127.0.0.1 ืื™ื– ืœืขื’ืึทืžืจืข ื ื™ืฉื˜ ืึท ืคึผืึทื ืึทืกื™ืึท; ืžืึธื“ืขืจืŸ ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ ื‘ืจืึทื•ื–ืขืจื– ื ืึธืš ืœืึธื–ืŸ ืื™ืจ ื‘ื™ื™ืคึผืึทืก ืึทื–ืึท ืคึผืจืึธื‘ืœืขืžืก. ืขืก ืื™ื– ืื•ืžืžืขื’ืœืขืš ืฆื• ื‘ืึทื’ืจืขื ืขืฆืŸ ืึทืœืข ื ื™ืฆืขืจืก ืฆื• ืจื™ื“ื•ืกื˜ ืจืขื›ื˜, ืื•ืŸ ืžื™ืจ ืžื•ื–ืŸ ื ื™ืฉื˜ ืคืึทืจื’ืขืกืŸ ื•ื•ืขื’ืŸ ื“ื™ ืจื™ื–ื™ืง ื ื•ืžืขืจ ืคื•ืŸ ืึธืœื˜ืขืจื ืึทื˜ื™ื•ื• ื“ื ืก. ื“ืขืจ ืื™ื ื˜ืขืจื ืขืฅ ืื™ื– ื ื™ืฉื˜ ืกื˜ืึทื˜ื™ืง, ืื•ืŸ ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื ื™ื™ึทืข ื“ื ืก ืึทื“ืจืขืกืขืก, ืคึผืจืึธื•ื›ื™ื‘ืึทื˜ืึทื“ ื–ื™ื™ื˜ืœืขืš ืงื•ื™ืคืŸ ื ื™ื™ึท ืึทื“ืจืขืกืขืก, ื˜ื•ื™ืฉืŸ ืฉืคึผื™ืฅ-ืžื“ืจื’ื” ื“ืึธื•ืžื™ื™ื ื– ืื•ืŸ ืงืขื ืขืŸ ืœื™ื™ื’ืŸ / ืึทืจืึธืคึผื ืขืžืขืŸ ืึท ื›ืึทืจืึทืงื˜ืขืจ ืื™ืŸ ื–ื™ื™ืขืจ ืึทื“ืจืขืก. ืึธื‘ืขืจ ื ืึธืš ื”ืื˜ ื“ื™ ืจืขื›ื˜ ืฆื• ืœืขื‘ืŸ ืขืคึผืขืก ื•ื•ื™:

ip route add blackhole 1.2.3.4

ืขืก ื•ื•ืึธืœื˜ ื–ื™ื™ืŸ ื’ืึทื ืฅ ืขืคืขืงื˜ื™ื•ื• ืฆื• ื‘ืึทืงื•ืžืขืŸ ืึท ืจืฉื™ืžื” ืคื•ืŸ IP ืึทื“ืจืขืกืขืก ืคึฟื•ืŸ ื“ืขืจ ืจืฉื™ืžื” ืคื•ืŸ ืคึผืจืึธื•ื›ื™ื‘ืึทื˜ืึทื“ ื–ื™ื™ื˜ืœืขืš, ืึธื‘ืขืจ ืคึฟืึทืจ ื“ื™ ืื•ื™ื‘ืŸ ื“ืขืจืžืื ื˜ ืกื™ื‘ื•ืช, ืžื™ืจ ืืจื™ื‘ืขืจื’ืขืคืืจืŸ ืฆื• ืงืึทื ืกื™ื“ืขืจื™ื™ืฉืึทื ื– ื•ื•ืขื’ืŸ Iptables. ืขืก ืื™ื– ืฉื•ื™ืŸ ื’ืขื•ื•ืขืŸ ืึท ืœืขื‘ืŸ ื‘ืึทืœืึทื ืกืขืจ ืื•ื™ืฃ CentOS Linux ืžืขืœื“ื•ื ื’ 7.5.1804.

ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ 'ืก ืื™ื ื˜ืขืจื ืขื˜ ื–ืึธืœ ื–ื™ื™ืŸ ืฉื ืขืœ, ืื•ืŸ ื“ืขืจ ื‘ืœืขื˜ืขืจืขืจ ื–ืึธืœ ื ื™ืฉื˜ ื•ื•ืึทืจื˜ืŸ ืึท ื”ืึทืœื‘ ืžื™ื ื•ื˜, ืงืึทื ืงืœื•ื“ื™ื ื’ ืึทื– ื“ืขืจ ื‘ืœืึทื˜ ืื™ื– ื ื™ืฉื˜ ื‘ื ื™ืžืฆื. ื ืึธืš ืึท ืœืึทื ื’ ื–ื•ื›ืŸ ืžื™ืจ ื’ืขืงื•ืžืขืŸ ืฆื• ื“ืขื ืžืึธื“ืขืœ:
ื˜ืขืงืข 1 -> /ืกืงืจื™ืคึผื˜ / ื“ื™ื ื™ื™ื“_ื”ืึธืกื˜, ืจืฉื™ืžื” ืคื•ืŸ ืคึผืจืึธื•ื›ื™ื‘ืึทื˜ืึทื“ ื ืขืžืขืŸ:

test.test
blablabla.bubu
torrent
porno

ื˜ืขืงืข 2 -> /ืกืงืจื™ืคึผื˜/ื“ืขื ied_range, ืจืฉื™ืžื” ืคื•ืŸ ืคึผืจืึธื•ื›ื™ื‘ืึทื˜ืึทื“ ืึทื“ืจืขืก ืกืคึผื™ื™ืกืึทื– ืื•ืŸ ืึทื“ืจืขืกืขืก:

192.168.111.0/24
241.242.0.0/16

ืฉืจื™ืคื˜ ื˜ืขืงืข 3 -> ipt.shื˜ืืŸ ื“ื™ ืึทืจื‘ืขื˜ ืžื™ื˜ ื™ืคึผืึทื‘ืœืขืก:

# ัั‡ะธั‚ั‹ะฒะฐะตะผ ะฟะพะปะตะทะฝัƒัŽ ะธะฝั„ะพั€ะผะฐั†ะธัŽ ะธะท ะฟะตั€ะตั‡ะฝะตะน ั„ะฐะนะปะพะฒ
HOSTS=`cat /script/denied_host | grep -v '^#'`
RANGE=`cat /script/denied_range | grep -v '^#'`
echo "Stopping firewall and allowing everyone..."
# ัะฑั€ะฐัั‹ะฒะฐะตะผ ะฒัะต ะฝะฐัั‚ั€ะพะนะบะธ iptables, ั€ะฐะทั€ะตัˆะฐั ั‚ะพ ั‡ั‚ะพ ะฝะต ะทะฐะฟั€ะตั‰ะตะฝะพ
sudo iptables -F
sudo iptables -X
sudo iptables -t nat -F
sudo iptables -t nat -X
sudo iptables -t mangle -F
sudo iptables -t mangle -X
sudo iptables -P INPUT ACCEPT
sudo iptables -P FORWARD ACCEPT
sudo iptables -P OUTPUT ACCEPT
#ั€ะตัˆะฐะตะผ ะพะฑะฝะพะฒะธั‚ัŒ ะธะฝั„ะพั€ะผะฐั†ะธัŽ ะพ ะผะฐั€ัˆั€ัƒั‚ะฐั… (ะพัะพะฑะตะฝะฝะพัั‚ัŒ ะฝะฐัˆะตะน ะฐั€ั…ะธั‚ะตะบั‚ัƒั€ั‹)
sudo sh rout.sh
# ั†ะธะบะปะธั‡ะตัะบะธ ะพะฑั€ะฐะฑะฐั‚ั‹ะฒะฐั ะบะฐะถะดัƒัŽ ัั‚ั€ะพะบัƒ ั„ะฐะนะปะฐ ะฟั€ะธะผะตะฝัะตะผ ะฟั€ะฐะฒะธะปะพ ะฑะปะพะบะธั€ะพะฒะบะธ ัั‚ั€ะพะบะธ
for i in $HOSTS; do
sudo iptables -I FORWARD -m string --string $i --algo bm --from 1 --to 600 -p tcp -j REJECT --reject-with tcp-reset;
sudo iptables -I FORWARD -m string --string $i --algo bm --from 1 --to 600 -p udp -j DROP;
done
# ั†ะธะบะปะธั‡ะตัะบะธ ะพะฑั€ะฐะฑะฐั‚ั‹ะฒะฐั ะบะฐะถะดัƒัŽ ัั‚ั€ะพะบัƒ ั„ะฐะนะปะฐ ะฟั€ะธะผะตะฝัะตะผ ะฟั€ะฐะฒะธะปะพ ะฑะปะพะบะธั€ะพะฒะบะธ ะฐะดั€ะตัะฐ
for i in $RANGE; do
sudo iptables -I FORWARD -p UDP -d $i -j DROP;
sudo iptables -I FORWARD -p TCP  -d $i -j REJECT --reject-with tcp-reset;
done

ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ืกื•ื“ืึธ ืื™ื– ืจืขื›ื˜ ืฆื• ื“ืขื ืคืึทืงื˜ ืึทื– ืžื™ืจ ื”ืึธื‘ืŸ ืึท ืงืœื™ื™ืŸ ื›ืึทืง ืคึฟืึทืจ ืึธื ืคื™ืจื•ื ื’ ื“ื•ืจืš ื“ื™ ื•ื•ืขื‘ ืฆื•ื‘ื™ื ื“, ืึธื‘ืขืจ ื•ื•ื™ ื“ืขืจืคืึทืจื•ื ื’ ืื™ืŸ ื ื™ืฆืŸ ืึทื–ืึท ืึท ืžืึธื“ืขืœ ืคึฟืึทืจ ืžืขืจ ื•ื•ื™ ืึท ื™ืึธืจ ื”ืื˜ ื’ืขื•ื•ื™ื–ืŸ, ื•ื•ืขื‘ ืื™ื– ื ื™ืฉื˜ ืึทื–ื•ื™ ื ื™ื™ื˜ื™ืง. ื ืึธืš ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ, ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ืึท ืคืึทืจืœืึทื ื’ ืฆื• ืœื™ื™ื’ืŸ ืึท ืจืฉื™ืžื” ืคื•ืŸ ื–ื™ื™ื˜ืœืขืš ืฆื• ื“ื™ ื“ืึทื˜ืึทื‘ื™ื™ืก, ืขื˜ืง. ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ืืคื’ืขืฉื˜ืขืœื˜ ืžื—ื ื•ืช ืื™ื– ืžืขืจ ื•ื•ื™ 250 + ืึท ื˜ื•ืฅ ืึทื“ืจืขืก ืกืคึผื™ื™ืกืึทื–. ืขืก ืื™ื– ื˜ืึทืงืข ืึท ืคึผืจืึธื‘ืœืขื ื•ื•ืขืŸ ืื™ืš ื’ื™ื™ืŸ ืฆื• ืึท ืคึผืœืึทืฅ ื“ื•ืจืš ืึท ื”ื˜ื˜ืคึผืก ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’, ื•ื•ื™ ื“ืขืจ ืกื™ืกื˜ืขื ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจ, ืื™ืš ื”ืึธื‘ืŸ ื˜ืขื ื•ืช ื•ื•ืขื’ืŸ ื‘ืจืึทื•ื–ืขืจื– :), ืึธื‘ืขืจ ื“ืึธืก ื–ืขื ืขืŸ ืกืคึผืขืฆื™ืขืœ ืงืึทืกืขืก, ืจื•ื‘ึฟ ื˜ืจื™ื’ืขืจื– ืคึฟืึทืจ ืคืขืœืŸ ืคื•ืŸ ืึทืงืกืขืก ืฆื• ื“ื™ ืžื™ื˜ืœ ื–ืขื ืขืŸ ื ืึธืš ืื•ื™ืฃ ืื•ื ื“ื–ืขืจ ื–ื™ื™ึทื˜ , ืžื™ืจ ืื•ื™ืš ื”ืฆืœื—ื” ืคืึทืจืฉืคึผืึทืจืŸ ืึธืคึผืขืจืึท ื•ื•ืคึผืŸ ืื•ืŸ ืคึผืœื•ื’ื™ื ืก ื•ื•ื™ ืคืจื™ื’ืึทื˜ืข ืื•ืŸ ื˜ืขืœืขืžืขื˜ืจื™ ืคื•ืŸ ืžื™ื™ืงืจืึธืกืึธืคึฟื˜.

Iptables ืื•ืŸ ืคื™ืœื˜ืขืจื™ื ื’ ืคืึทืจืงืขืจ ืคื•ืŸ ืึธืจืขื ืื•ืŸ ืคื•ื™ืœ ื“ื™ืกื™ื“ืึทื ืฅ

ืžืงื•ืจ: www.habr.com

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’