Модератор: terminus
Код: Выделить всё
Tue Nov 13 18:55:28 2007 frox[19225] Listening on 192.168.0.1:2121
Tue Nov 13 18:55:28 2007 frox[19225] Dropped privilegesЕсть идеи?# cat frox.conf
Listen 192.168.0.1
Port 2121
User nobody
Group nogroup
WorkingDir /tmp
DontChroot Yes
LogLevel 20
LogFile /var/log/frox/frox.log
XferLogging no
PidFile /var/run/frox.pid
APConv yes
BounceDefend yes
AllowNonASCII yes
ACL Allow * - *
Код: Выделить всё
0 0 fwd 192.168.0.1,2121 tcp from any to any dst-port 21Код: Выделить всё
fwd 127.0.0.1,3128 tcp from any to any dst-port 80 in via rl0Код: Выделить всё
[Ss][Ii][Mm][Pp][Ll][Ee])
# set these to your network and netmask and ip
oif="rl0"
onet="192.168.0.0"
omask="255.255.255.0"
oip="192.168.0.1"
# set these to your inside interface network and netmask and ip
iif="rl1"
inet="10.0.0.0"
imask="255.255.255.0"
iip="10.0.0.2"
setup_loopback
#----22
${fwcmd} add pass tcp ${onet}/8 to any 22
${fwcmd} add pass tcp from any 22 to ${onet}/8
#---
#---------samba---------------------------------------
${fwcmd} add deny tcp from any to any 137,138,139,445 via ${iif}
${fwcmd} add deny udp from any to any 137,138,139,445 via ${iif}
${fwcmd} add allow tcp from ${onet}/24 to me 137,138,139,445 via ${oif}
${fwcmd} add allow tcp from me 137,138,139,445 to ${onet}/24 via ${oif}
${fwcmd} add allow udp from ${onet}/24 to me 137,138,139,445 via ${oif}
${fwcmd} add allow udp from me 137,138,139,445 to ${onet}/24 via ${oif}
${fwcmd} add deny log all ${onet}/8 to ${onet}/8 via ${iif}
${fwcmd} add allow ip ${onet}/8 to ${onet}/8 via ${oif}
${fwcmd} add deny log tcp from any to ${iip} in via ${iif} ipoptions rr
# Stop spoofing
${fwcmd} add deny all from ${inet}:${imask} to any in via ${oif}
${fwcmd} add deny all from ${onet}:${omask} to any in via ${iif}
# Stop RFC1918 nets on the outside interface
${fwcmd} add deny all from any to 10.0.0.0/8 via ${oif}
${fwcmd} add deny all from any to 172.16.0.0/12 via ${oif}
# ${fwcmd} add deny all from any to 192.168.0.0/16 via ${oif}
${fwcmd} add deny all from any to 0.0.0.0/8 via ${oif}
${fwcmd} add deny all from any to 169.254.0.0/16 via ${oif}
# ${fwcmd} add deny all from any to 192.0.2.0/24 via ${oif}
${fwcmd} add deny all from any to 224.0.0.0/4 via ${oif}
${fwcmd} add deny all from any to 240.0.0.0/4 via ${oif}
#--------заворачиваем весь HTTP трафик на прокси
case ${squid_enable} in
[Yy][Ee][Ss])
${fwcmd} add fwd 127.0.0.1,3128 tcp from any to any http in via ${oif}
;;
esac
#--------заворачиваем весь FTP трафик на прокси
case ${frox_enable} in
[Yy][Ee][Ss])
# ${fwcmd} add fwd ${oip},2121 tcp from ${onet}:${omask} to any 21
${fwcmd} add fwd ${oip},2121 tcp from any to any 21
;;
esac
#-----------------------------------------------
case ${natd_enable} in
[Yy][Ee][Ss])
if [ -n "${natd_interface}" ]; then
${fwcmd} add divert natd all from any to any via ${natd_interface}
fi
;;
esac
#--------------------------
${fwcmd} add allow icmp from any to any
#----------------------VPN-server--------------
${fwcmd} add allow tcp from any to any 1723
${fwcmd} add allow tcp from any 1723 to any
${fwcmd} add allow gre from any to any
${fwcmd} add allow ip from any to any via tun0
${fwcmd} add allow ip from any to any via tun1
# клиент банк
${fwcmd} add pass tcp from any to any 9091
${fwcmd} add pass tcp from any 9091 to any
${fwcmd} add pass tcp from any to any 9092
${fwcmd} add pass tcp from any 9092 to any
#---- разрешаем обновления портов
${fwcmd} add allow all from any to any 2401
${fwcmd} add allow all from any 2401 to any
${fwcmd} add allow all from any to any 5999
${fwcmd} add allow all from any 5999 to any
# SMTP
${fwcmd} add pass tcp from any to any 25
${fwcmd} add pass tcp from any 25 to any
#POP3
${fwcmd} add pass tcp from any to any 110
${fwcmd} add pass tcp from any 110 to any
#IMAP
${fwcmd} add pass tcp from any to any 143
${fwcmd} add pass tcp from any 143 to any
# DNS
${fwcmd} add pass udp from any 53 to any
${fwcmd} add pass udp from any to any 53
# даю всем остальным доступ к WWW
${fwcmd} add pass tcp from any to any 80
${fwcmd} add pass tcp from any 80 to any
# WWW 8080
${fwcmd} add pass tcp from any to any 8080
${fwcmd} add pass tcp from any 8080 to any
# WWW 443
${fwcmd} add pass tcp from any to any 443
${fwcmd} add pass tcp from any 443 to any
# Ftp
${fwcmd} add pass tcp from any to any 21
${fwcmd} add pass tcp from any 21 to any
${fwcmd} add pass tcp from any to any 20
${fwcmd} add pass tcp from any 20 to any
${fwcmd} add pass tcp from any to any 2121
${fwcmd} add pass tcp from any 2121 to any
${fwcmd} add allow tcp from any to me 40000-50000
${fwcmd} add allow tcp from me 40000-50000 to any
#----22
${fwcmd} add pass tcp from any to any 22
${fwcmd} add pass tcp from any 22 to any
#----10022
${fwcmd} add pass tcp from any to any 10022
${fwcmd} add pass tcp from any 10022 to any
#---ICQ
${fwcmd} add pass tcp from any to any 5190
${fwcmd} add pass tcp from any 5190 to any
#---RDC
${fwcmd} add pass tcp from any to any 3389
${fwcmd} add pass tcp from any 3389 to any
${fwcmd} add deny log tcp from any to any in via ${oif} setup
${fwcmd} add pass udp from ${oip} to any 123 keep-state
Код: Выделить всё
${fwcmd} add fwd ${oip},2121 tcp from any to any 21Код: Выделить всё
${fwcmd} add fwd ${oip},2121 tcp from ${локальная_сеть} to any 21 out via ${внешний_интерфейс}Код: Выделить всё
Tue Nov 13 18:55:28 2007 frox[19225] Dropped privilegesкак я понял это нормальное поведение frox, у меня тоже самое пишется, и все нормально работает и заворачивается.tormozok писал(а):дело мне кажется не файрвеле
а в том что опять прав не хватает запустить
не зря же в логах ошибка
Код: Выделить всё
Tue Nov 13 18:55:28 2007 frox[19225] Dropped privileges
Код: Выделить всё
Starting frox.