적수네 동네 - 질문과 답변 [ 게시물 수정 ]

	>> Edit article


			이름
			제목
			패스워드

방화벽을 설치하고
 사설IP (192.168.0.2)에 ftp서버를 설정하셨습니다.
 외부 공인IP에서는 접속이 잘 되는데
 외부의 또 다른 사설IP에서 이쪽으로 접속을 하면
 연결은 되는데 자료의 주고 받음이 안되네요
 ls만 쳐도 멈춰버립니다..
 고수님들 아시는 분들 답변 부탁 드립니다.
 #!/bin/sh
echo " - Verifying that all kernel modules are ok"
/sbin/depmod -a
 /sbin/insmod ip_tables
/sbin/insmod ip_conntrack
/sbin/insmod ip_conntrack_ftp
/sbin/insmod iptable_nat
/sbin/insmod ip_nat_ftp
echo " - Enabling packet forwarding in the kernel"
echo "1" > /proc/sys/net/ipv4/ip_forward
 echo " - Enabling dynamic addressing measures"
echo "1" > /proc/sys/net/ipv4/ip_dynaddr
 echo " - Resetting firewall and setting the default FORWARD policy to DROP"
/sbin/iptables -P INPUT ACCEPT
/sbin/iptables -F INPUT
/sbin/iptables -P OUTPUT ACCEPT
/sbin/iptables -F OUTPUT
 /sbin/iptables -P FORWARD ACCEPT
/sbin/iptables -F FORWARD
 echo " - FWD : Allow all connections OUT and only existing and related ones IN"
/sbin/iptables -A FORWARD -i eth0 -o eth1 -m state --state ESTABLISHED,RELATED -
j ACCEPT
/sbin/iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT
/sbin/iptables -A FORWARD -j LOG
 echo " - Proidea: Test"
/sbin/iptables -A INPUT -i eth0 -p icmp -j DROP
/sbin/iptables -A INPUT -i eth0 -p tcp --dport 1024 -j DROP
/sbin/iptables -A INPUT -i eth0 -p tcp --dport sunrpc -j DROP
 /sbin/iptables -A INPUT --protocol tcp --dport 21 -j ACCEPT
 echo " - Enabling SNAT (MASQUERADE) functionality on eth0"
/sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
 /sbin/iptables -t nat -A PREROUTING -p udp -d xxx.xxx.xxx.xxx --dport 1004 -j DN
AT --to 192.168.0.2:21
/sbin/iptables -t nat -A PREROUTING -p tcp -d xxx.xxx.xxx.xxx --dport 1004 -j DN
AT --to 192.168.0.2:21
 echo -e "Done."
  ~
--
너무 어려워~~~