From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Lyv5U-0000dg-2Q for garchives@archives.gentoo.org; Tue, 28 Apr 2009 21:43:36 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id D389BE09B6; Tue, 28 Apr 2009 21:43:34 +0000 (UTC) Received: from mx7.mail.ru (mx7.mail.ru [94.100.176.21]) by pigeon.gentoo.org (Postfix) with ESMTP id 93BBAE09B6 for ; Tue, 28 Apr 2009 21:43:34 +0000 (UTC) Received: from [92.113.226.176] (port=47558 helo=localhost) by mx7.mail.ru with asmtp id 1Lyv5Q-0005hZ-00 for gentoo-user-ru@lists.gentoo.org; Wed, 29 Apr 2009 01:43:32 +0400 Date: Wed, 29 Apr 2009 00:43:31 +0300 From: "Sergey A. Kobzar" X-Mailer: The Bat! (v4.0.24) Professional X-Priority: 3 (Normal) Message-ID: <952834215.20090429004331@mail.ru> To: gentoo-user-ru@lists.gentoo.org Subject: Re[6]: [gentoo-user-ru] port forwarding to loopback In-Reply-To: <262557685.20090428182828@astafjev.com> References: <1613392244.20090428171827@mail.ru> <75b643ec0904280744l32b8fd1cle283b388ff68524f@mail.gmail.com> <1077864324.20090428175928@mail.ru> <877446843.20090428180801@astafjev.com> <452097779.20090428182145@mail.ru> <262557685.20090428182828@astafjev.com> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user-ru@lists.gentoo.org Reply-To: gentoo-user-ru@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: quoted-printable X-Spam: Not detected X-Mras: Ok X-Archives-Salt: c65fbd35-c0db-47c3-948a-a06deba0569b X-Archives-Hash: ac7e1a181738a7ddc9faa8b0b04e144b Tuesday, April 28, 2009, 6:28:28 PM, Konstantin wrote: > Hello Sergey, > Tuesday, April 28, 2009, 18:21:45, you wrote: >> Tuesday, April 28, 2009, 6:08:01 PM, Konstantin wrote: >>> Hello Sergey, >>> Tuesday, April 28, 2009, 17:59:28, you wrote: >>>>> $IPTABLES -t nat -A PREROUTING -p TCP -s 0/0 -d $INET_IP --dport 7722 >>>>> -j DNAT --to-destination $INET_IP:22 >>>>> =C7=C4=C5 INET_IP =C5=D3=D4=D8 =D7=CE=C5=DB=CE=C9=CA =C1=C4=D2=C5=D3 = =D3=C5=D2=D7=C5=D2=C1 >>>> =F4=CF=C7=C4=C1 =CE=D5=D6=CE=CF =CF=D4=CB=D2=D9=D7=C1=D4=D8 22 =D0=CF= =D2=D4 =C4=CC=D1 =D7=D3=C5=C8 - =D3=CD=D9=D3=CC =D7 =D4=C1=CB=CF=CD =D0=D2= =C1=D7=C9=CC=C5? >>> =F7 PREROUTING =D2=C1=CE=D8=DB=C5 =D0=D2=C1=D7=C9=CC=C1 =E1=CE=C4=D2=C5= =D1, =CD=CF=D6=CE=CF =DA=C1=D0=D2=C5=D4=C9=D4=D8 =D0=C1=CB=C5=D4=D9 =CE=C1 = 22 =D0=CF=D2=D4. >>> iptables -t mangle -I PREROUTING -d $INET_IP -p tcp --dport 22 -j DROP >>> =F7 =D2=C5=DA=D5=CC=D8=D4=C1=D4=C5 =D0=D2=CF=CA=C4=D5=D4 =D4=CF=CC=D8= =CB=CF =D0=C1=CB=C5=D4=D9 =C9=C4=D5=DD=C9=C5 =CE=C1 =D0=CF=D2=D4 7722. >> =E1 =CE=C5 =D0=CF=D0=C1=C4=D5=D4 =CC=C9 =D0=CF=C4 DROP =D0=D2=C1=D7=C9= =CC=C1 =D0=CF=D3=CC=C5 DNAT, =C9=C4=D5=DD=C9=C5 =CE=C1 :22? >> =E9=CC=C9 =DC=D4=CF =D5=D6=C5 POSTROUTING? > =F7 PREROUTING =CE=C1=D3=CB=CF=CC=D8=CB=CF =D0=CF=CD=CE=C0 =D3=CE=C1=DE= =C1=CC=C1 =C9=C4=A3=D4 mangle =DA=C1=D4=C5=CD nat. =FE=D4=CF =C5=D3=D4=D8 > ":22"? =E4=C1, =D4=C1=CB =D0=CF=CC=D5=DE=C9=CC=CF=D3=D8 - =D3=D0=C1=D3=C9=C2=CF :) :22 - =DC=D4=CF =D7=CE=C5=DB=CE=C9=CA =C9=CE=D4=C5=D2=C6=C5=CA= =D3, 22 =D0=CF=D2=D4. --=20 Sergey