Skocz do zawartości

Historia edycji

dudzikgg

dudzikgg

Dzięki za podpowiedź. Tak więc sprawdziłem i poniżej wrzucam screeny wyniku dwóch komend iptables -L oraz -S. Nie widzę tam żeby port 8086 był blokowany, a ogólna reguła input ma status ACCEPT. Chyba że źle to rozumuję, to proszę wskażcie błąd.

Komenda: sudo iptables -L

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
f2b-sshd   tcp  --  anywhere             anywhere             multiport dports s                                                                                                             sh
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTA                                                                                                             BLISHED
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     udp  --  anywhere             anywhere             udp spt:ntp
ACCEPT     tcp  --  anywhere             anywhere             state NEW tcp dpt:                                                                                                             ssh
REJECT     all  --  anywhere             anywhere             reject-with icmp-h                                                                                                             ost-prohibited

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
REJECT     all  --  anywhere             anywhere             reject-with icmp-h                                                                                                             ost-prohibited

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
InstanceServices  all  --  anywhere             link-local/16

Chain InstanceServices (1 references)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             X.X.0.2          owner UID match ro                                                                                                             ot tcp dpt:iscsi-target /* See the Oracle-Provided Images section in the Oracle                                                                                                              Cloud Infrastructure documentation for security impact of modifying or removing                                                                                                              this rule */
ACCEPT     tcp  --  anywhere             X.X.2.0/24       owner UID match ro                                                                                                             ot tcp dpt:iscsi-target /* See the Oracle-Provided Images section in the Oracle                                                                                                              Cloud Infrastructure documentation for security impact of modifying or removing                                                                                                              this rule */
ACCEPT     tcp  --  anywhere             X.X.4.0/24       owner UID match ro                                                                                                             ot tcp dpt:iscsi-target /* See the Oracle-Provided Images section in the Oracle                                                                                                              Cloud Infrastructure documentation for security impact of modifying or removing                                                                                                              this rule */
ACCEPT     tcp  --  anywhere             X.X.5.0/24       owner UID match ro                                                                                                             ot tcp dpt:iscsi-target /* See the Oracle-Provided Images section in the Oracle                                                                                                              Cloud Infrastructure documentation for security impact of modifying or removing                                                                                                              this rule */
ACCEPT     tcp  --  anywhere             X.X.0.2          tcp dpt:http /* Se                                                                                                             e the Oracle-Provided Images section in the Oracle Cloud Infrastructure document                                                                                                             ation for security impact of modifying or removing this rule */
ACCEPT     udp  --  anywhere             X.X.169.254      udp dpt:domain /*                                                                                                              See the Oracle-Provided Images section in the Oracle Cloud Infrastructure docume                                                                                                             ntation for security impact of modifying or removing this rule */
ACCEPT     tcp  --  anywhere             X.X.169.254      tcp dpt:domain /*                                                                                                              See the Oracle-Provided Images section in the Oracle Cloud Infrastructure docume                                                                                                             ntation for security impact of modifying or removing this rule */
ACCEPT     tcp  --  anywhere             X.X.0.3          owner UID match ro                                                                                                             ot tcp dpt:http /* See the Oracle-Provided Images section in the Oracle Cloud In                                                                                                             frastructure documentation for security impact of modifying or removing this rul                                                                                                             e */
ACCEPT     tcp  --  anywhere             X.X.0.4          tcp dpt:http /* Se                                                                                                             e the Oracle-Provided Images section in the Oracle Cloud Infrastructure document                                                                                                             ation for security impact of modifying or removing this rule */
ACCEPT     tcp  --  anywhere             X.X.169.254      tcp dpt:http /* Se                                                                                                             e the Oracle-Provided Images section in the Oracle Cloud Infrastructure document                                                                                                             ation for security impact of modifying or removing this rule */
ACCEPT     udp  --  anywhere             X.X.169.254      udp dpt:bootps /*                                                                                                              See the Oracle-Provided Images section in the Oracle Cloud Infrastructure docume                                                                                                             ntation for security impact of modifying or removing this rule */
ACCEPT     udp  --  anywhere             X.X.169.254      udp dpt:tftp /* Se                                                                                                             e the Oracle-Provided Images section in the Oracle Cloud Infrastructure document                                                                                                             ation for security impact of modifying or removing this rule */
ACCEPT     udp  --  anywhere             X.X.169.254      udp dpt:ntp /* See                                                                                                              the Oracle-Provided Images section in the Oracle Cloud Infrastructure documenta                                                                                                             tion for security impact of modifying or removing this rule */
REJECT     tcp  --  anywhere             link-local/16        tcp /* See the Ora                                                                                                             cle-Provided Images section in the Oracle Cloud Infrastructure documentation for                                                                                                              security impact of modifying or removing this rule */ reject-with tcp-reset
REJECT     udp  --  anywhere             link-local/16        udp /* See the Ora                                                                                                             cle-Provided Images section in the Oracle Cloud Infrastructure documentation for                                                                                                              security impact of modifying or removing this rule */ reject-with icmp-port-unr                                                                                                             eachable

Chain f2b-sshd (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere


oraz komenda: sudo iptables -S

-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-N InstanceServices
-N f2b-sshd
-A INPUT -p tcp -m multiport --dports 22 -j f2b-sshd
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p udp -m udp --sport 123 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
-A OUTPUT -d X.X.0.0/16 -j InstanceServices
-A InstanceServices -d X.X.0.2/32 -p tcp -m owner --uid-owner 0 -m tcp --dport 3260 -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j ACCEPT
-A InstanceServices -d X.X.2.0/24 -p tcp -m owner --uid-owner 0 -m tcp --dport 3260 -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j ACCEPT
-A InstanceServices -d X.X.4.0/24 -p tcp -m owner --uid-owner 0 -m tcp --dport 3260 -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j ACCEPT
-A InstanceServices -d X.X.5.0/24 -p tcp -m owner --uid-owner 0 -m tcp --dport 3260 -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j ACCEPT
-A InstanceServices -d X.X.0.2/32 -p tcp -m tcp --dport 80 -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j ACCEPT
-A InstanceServices -d X.X.169.254/32 -p udp -m udp --dport 53 -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j ACCEPT
-A InstanceServices -d X.X.169.254/32 -p tcp -m tcp --dport 53 -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j ACCEPT
-A InstanceServices -d X.X.0.3/32 -p tcp -m owner --uid-owner 0 -m tcp --dport 80 -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j ACCEPT
-A InstanceServices -d X.X.0.4/32 -p tcp -m tcp --dport 80 -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j ACCEPT
-A InstanceServices -d X.X.169.254/32 -p tcp -m tcp --dport 80 -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j ACCEPT
-A InstanceServices -d X.X.169.254/32 -p udp -m udp --dport 67 -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j ACCEPT
-A InstanceServices -d X.X.169.254/32 -p udp -m udp --dport 69 -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j ACCEPT
-A InstanceServices -d X.X.169.254/32 -p udp -m udp --dport 123 -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j ACCEPT
-A InstanceServices -d X.X.0.0/16 -p tcp -m tcp -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j REJECT --reject-with tcp-reset
-A InstanceServices -d X.X.0.0/16 -p udp -m udp -m comment --comment "See the Oracle-Provided Images section in the Oracle Cloud Infrastructure documentation for security impact of modifying or removing this rule" -j REJECT --reject-with icmp-port-unreachable
-A f2b-sshd -j RETURN

 

dudzikgg

dudzikgg

Dzięki za podpowiedź. Tak więc sprawdziłem i poniżej wrzucam screeny wyniku dwóch komend iptables -L oraz -S. Nie widzę tam żeby port 8086 był blokowany, a ogólna reguła input ma status ACCEPT. Chyba że źle to rozumuję, to proszę wskażcie błąd.

Komenda: sudo iptables -L
iptables_L.thumb.png.ab4828a7be13915b0248cad5b3ca7418.png


oraz komenda: sudo iptables -S
iptables_S.thumb.png.d0a8237d3237c44ff173691299f99afb.png

×