------------------------------------------------------------
# /etc/dhcpd.conf
log-facility local7;
ddns-updates on;
ddns-update-style ad-hoc;
default-lease-time 86400;
max-lease-time 172800;
option netbios-node-type 8;
option netbios-scope "";
subnet 192.168.115.0 netmask 255.255.255.0 {
authoritative;
#
deny unknown-clients;
boot-unknown-clients false;
option domain-name-servers 217.10.251.121;
option domain-name "liutata.net.";
option routers 192.168.115.254;
option subnet-mask 255.255.255.0;
option broadcast-address 192.168.115.255;
option netbios-node-type 8;
option netbios-scope "";
one-lease-per-client on;
default-lease-time 86400;
max-lease-time 172800;
ddns-updates on;
}
host Kolio {
hardware ethernet 00:A0:C9:4D:33:BD;
fixed-address 192.168.115.2;
option ntp-servers 192.43.244.18;
option domain-name-servers 217.10.251.121;
option domain-name "liutata.net.";
option routers 192.168.115.10;
option netbios-name-servers 192.168.115.10;
option netbios-dd-server 192.168.115.10;
option subnet-mask 255.255.255.0;
option broadcast-address 192.168.115.255;
}
------------------------------------------------------------------------
root@ns:~# /etc/rc.d/rc.dhcpd start
Starting DHCPD: /usr/sbin/dhcpd
Internet Systems Consortium DHCP Server V3.0.1
Copyright 2004 Internet Systems Consortium.
All rights reserved.
For info, please visit http://www.isc.org/sw/dhcp/
Wrote 0 deleted host decls to leases file.
Wrote 0 new dynamic host decls to leases file.
Wrote 0 leases to leases file.
Listening on Socket/eth0/192.168.115.0/24
Sending on Socket/eth0/192.168.115.0/24
------------------------------------------------------------------------
root@ns:~# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
DROP tcp -- anywhere anywhere tcp dpt:3306
ACCEPT all -- localhost anywhere
ACCEPT all -- 192.168.115.0/24 anywhere
ACCEPT all -- 192.168.1.2 anywhere
ACCEPT all -- 217-10-251-121-cable.telecablenet.com
anywhere
ACCEPT all -- anywhere anywhere state
NEW,RELATED,ESTABLISHED
ACCEPT icmp -- anywhere anywhere state NEW
DROP tcp -- anywhere anywhere tcp flags:!SYN,RST,ACK/SYN
state NEW
DROP all -- anywhere anywhere PKTTYPE = multicast
DROP all -- anywhere anywhere PKTTYPE = multicast
ACCEPT tcp -- anywhere anywhere tcp spt:bootpc dpt:bootps
ACCEPT udp -- anywhere anywhere udp spt:bootpc dpt:bootps
ACCEPT tcp -- anywhere anywhere tcp dpt:domain
ACCEPT udp -- anywhere anywhere udp dpt:domain
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp dpt:http
ACCEPT all -- 192.168.115.0/24 anywhere
DROP all -- anywhere anywhere state INVALID,NEW,UNTRACKED
Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- 192.168.115.0/24 anywhere
ACCEPT all -- anywhere 192.168.115.0/24 state
RELATED,ESTABLISHED
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
------------------------------------------------------------------------
Poglednete kak sum go konfiguriral.
Predi 1 den sichko raboteshe taka.
A sega neiska da razdava ip-ta dori zaiavki nevizhdam nikude v
logovete kum survura.
Ako mozhe niakoi da mi dade niakakva informatsiia ot kakvo mozhe
da se poluchi takova neshto.
|
