• [^] # Re: oui on veut bien.

    Posté par . En réponse au message Problème routeur/wifi/iptables. Évalué à 1.

    Voila
    [admin@(none) root]$ iptables -L
    Chain INPUT (policy ACCEPT)
    target prot opt source destination
    DROP all -- anywhere anywhere state INVALID
    ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
    ACCEPT all -- anywhere anywhere state NEW
    ACCEPT all -- anywhere anywhere state NEW
    ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
    ACCEPT tcp -- anywhere anywhere tcp dpt:ftp
    DROP all -- anywhere anywhere

    Chain FORWARD (policy ACCEPT)
    target prot opt source destination
    ACCEPT all -- anywhere anywhere
    DROP all -- anywhere anywhere state INVALID
    ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
    ACCEPT tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN limit: avg 1/sec burst 5
    ACCEPT tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST limit: avg 1/sec burst 5
    ACCEPT icmp -- anywhere anywhere limit: avg 1/sec burst 5 icmp echo-request
    DROP tcp -- 192.168.1.3 anywhere tcp spt:4662 dpt:4662
    DROP tcp -- 192.168.1.3 anywhere tcp spt:4665 dpt:4665
    DROP tcp -- 192.168.1.3 anywhere tcp spt:4666 dpt:4666
    DROP udp -- 192.168.1.3 anywhere udp spt:4666 dpt:4666
    DROP tcp -- 192.168.1.2 anywhere tcp spt:8010 dpt:8010
    DROP udp -- 192.168.1.2 anywhere udp spt:5060 dpt:5060
    DROP udp -- 192.168.1.2 anywhere udp spt:10600 dpt:10600
    DROP udp -- 192.168.1.2 anywhere udp spt:10601 dpt:10601
    DROP tcp -- 192.168.1.2 anywhere tcp spt:8880 dpt:8880
    DROP tcp -- 192.168.1.2 anywhere tcp spt:5060 dpt:5060
    ACCEPT all -- anywhere anywhere
    DROP tcp -- anywhere 192.168.1.2 tcp spt:8010 dpt:8010
    DROP udp -- anywhere 192.168.1.2 udp spt:5060 dpt:5060
    DROP udp -- anywhere 192.168.1.2 udp spt:10600 dpt:10600
    DROP udp -- anywhere 192.168.1.2 udp spt:10601 dpt:10601
    DROP tcp -- anywhere 192.168.1.2 tcp spt:8880 dpt:8880
    DROP tcp -- anywhere 192.168.1.2 tcp spt:5060 dpt:5060
    ACCEPT udp -- anywhere 192.168.1.4 udp dpt:6560
    ACCEPT tcp -- anywhere 192.168.1.4 tcp dpt:9049
    ACCEPT udp -- anywhere 255.255.255.255 udp dpt:47624
    ACCEPT tcp -- anywhere 192.168.1.2 tcp dpt:ldap
    ACCEPT tcp -- anywhere 192.168.1.2 tcp dpt:1503
    ACCEPT tcp -- anywhere 192.168.1.2 tcp dpt:1718
    ACCEPT udp -- anywhere 192.168.1.2 udp dpt:1719
    ACCEPT tcp -- anywhere 192.168.1.2 tcp dpt:1720
    ACCEPT tcp -- anywhere 192.168.1.2 tcp dpt:5060
    ACCEPT udp -- anywhere 192.168.1.2 udp dpt:5060
    ACCEPT udp -- anywhere 192.168.1.2 udp dpt:10600
    ACCEPT udp -- anywhere 192.168.1.2 udp dpt:10601
    ACCEPT tcp -- anywhere 192.168.1.4 tcp dpt:4662
    ACCEPT tcp -- anywhere 192.168.1.4 tcp dpt:4672
    ACCEPT udp -- anywhere 192.168.1.4 udp dpt:4672
    ACCEPT udp -- anywhere 192.168.1.4 udp dpt:4665
    ACCEPT tcp -- anywhere 192.168.1.2 tcp dpt:8880
    ACCEPT tcp -- anywhere 192.168.1.4 tcp dpt:4661
    ACCEPT all -- anywhere 192.168.1.2
    ACCEPT all -- anywhere anywhere

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination

    Chain MACS (0 references)
    target prot opt source destination
    ACCEPT all -- anywhere anywhere
    DROP all -- anywhere anywhere state INVALID
    ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED

    Chain logaccept (0 references)
    target prot opt source destination
    LOG all -- anywhere anywhere state NEW LOG level warning tcp-sequence tcp-options ip-options prefix `ACCEPT '
    ACCEPT all -- anywhere anywhere

    Chain logdrop (0 references)
    target prot opt source destination
    LOG all -- anywhere anywhere state NEW LOG level warning tcp-sequence tcp-options ip-options prefix `DROP'
    DROP all -- anywhere anywhere


    Comme vous pouvez le voir c'est le bordel pour la redirection des ports avec edonkey et SIP.