forum.lissyara.su

Код: Выделить всё

/et/rc.firewall
${f} add 50 allow tcp from any to me 22,21
${f} add 51 allow tcp from me 22,21 to any

Код: Выделить всё

# nmap 46.98.139.93

Starting Nmap 5.21 ( http://nmap.org ) at 2011-09-29 22:41 EEST
Nmap scan report for 46.98.139.93
Host is up (0.66s latency).
Not shown: 996 filtered ports
PORT    STATE  SERVICE
21/tcp  closed ftp
22/tcp  open   ssh
80/tcp  open   http
443/tcp open   https

Код: Выделить всё

# netstat -an -f inet | grep LISTEN
tcp4       0      0 127.0.0.1.25           *.*                    LISTEN
tcp4       0      0 *.22                   *.*                    LISTEN
tcp46      0      0 *.443                  *.*                    LISTEN
tcp46      0      0 *.80                   *.*                    LISTEN
tcp4       0      0 127.0.0.1.514          *.*                    LISTEN
tcp4       0      0 *.3306                 *.*                    LISTEN
tcp4       0      0 *.5006                 *.*                    LISTEN
tcp4       0      0 127.0.0.1.5005         *.*                    LISTEN
tcp4       0      0 127.0.0.1.953          *.*                    LISTEN
tcp4       0      0 127.0.0.1.53           *.*                    LISTEN
tcp4       0      0 192.1.1.1.53           *.*                    LISTEN

Код: Выделить всё

# ipfw show
00050   466   35910 allow tcp from any to me dst-port 22,21
00051   346   48608 allow tcp from me 22,21 to any
00100     0       0 deny tcp from any to any dst-port 445
00110 61300 3860370 allow ip from any to any via lo0
00120  1072  799106 skipto 1000 ip from me to any
00130     1      40 deny icmp from any to any in icmptypes 5,9,13,14,15,16,17
00140     0       0 deny ip from any to table(120)
00150     0       0 deny ip from table(120) to any
00160  1379  151882 skipto 2000 ip from any to me
00200     0       0 skipto 500 ip from any to any via tun0
00300   230   42986 skipto 4500 ip from any to any in
00400     0       0 skipto 450 ip from any to any recv tun0
00420     0       0 divert 1 ip from any to any
00450     0       0 divert 2 ip from any to any
00490     0       0 allow ip from any to any
00500     0       0 skipto 32500 ip from any to any in
00510     0       0 divert 1 ip from any to any
00540     0       0 allow ip from any to any
01000     0       0 allow udp from any 53,7723 to any
01010     0       0 allow tcp from any to any setup keep-state
01020   138   12254 allow udp from any to any keep-state
01100  1003  794473 allow ip from any to any
02000     0       0 check-state
02010     9     448 allow icmp from any to any
02020  1025  130987 allow tcp from any to any dst-port 80,443
02050   276   12826 deny ip from any to any via tun0
02060     0       0 allow udp from any to any dst-port 53,7723
02100     0       0 deny ip from any to any
05000   229   42652 deny ip from not table(0) to any
05001     0       0 skipto 5010 ip from table(127) to table(126)
05002     0       0 skipto 5030 ip from any to not table(2)
05003     0       0 deny ip from any to not table(1)
05004     0       0 pipe tablearg ip from table(21) to any
05005     0       0 deny ip from any to any
05010     0       0 pipe tablearg ip from table(127) to any
05030     0       0 deny tcp from table(15) to any dst-port 25
05400     0       0 pipe tablearg ip from table(11) to any
32000     0       0 deny ip from any to any
32490     0       0 deny ip from any to any
33000     0       0 pipe tablearg ip from table(126) to table(127)
33001     0       0 skipto 33010 ip from not table(2) to any
33002     0       0 pipe tablearg ip from any to table(20)
33003     0       0 deny ip from any to any
33400     0       0 pipe tablearg ip from any to table(10)
65535     2     398 deny ip from any to any

Код: Выделить всё

proftpd_enable="YES"

Код: Выделить всё

ftp stream tcp nowait root /usr/local/libexec/proftpd proftpd

Код: Выделить всё

/usr/local/etc/rc.d/proftpd.sh.sample