Advanced Micro Computers Online
Broadband Internet Service Provider and Computer Sales & Service Centre
vi /etc/rc.local [root@dvb@amconline root]# vi /etc/rc.local #!/bin/sh # # This script will be executed *after* all the other init scripts. # You can put your own initialization stuff in here if you don't # want to do the full Sys V style init stuff. touch /var/lock/subsys/local echo "1" > /proc/sys/net/ipv4/ip_forward /sbin/iptables -F /sbin/iptables -t nat -F iptables -A INPUT -s 0/0 -d 0/0 -p icmp -j DROP iptables -A INPUT -i eth1 -s 0/0 -d 0/0 -p icmp -j DROP iptables -A FORWARD -i eth1 -s 0/0 -d 0/0 -p icmp -j DROP iptables -A FORWARD -s 0/0 -d 0/0 -p icmp -j DROP iptables -A INPUT -i eth0 -s 0/0 -d 0/0 -p icmp -j DROP iptables -A FORWARD -i eth0 -s 0/0 -d 0/0 -p icmp -j DROP iptables -A INPUT -p icmp -s 0/0 --icmp-type echo-request -j LOG --log-prefix "PING_denied" iptables -A INPUT -p icmp --icmp-type echo-request -j DROP iptables -A INPUT -i eth1 -p icmp --icmp-type echo-reply -j DROP iptables -A INPUT -p icmp -i eth0 -s 192.168.1.0/24 --icmp-type echo-request -j LOG --log-prefix "PING_denied" iptables -A INPUT -p icmp -i eth0 -s 0/0 --icmp-type echo-request -j DROP iptables -X iptables iptables iptables iptables
-A -A -A -A
INPUT -i eth1 -m state --state INVALID -j LOG --log-prefix "INVALIDINPUT_denied" INPUT -i eth1 -m state --state INVALID -j DROP FORWARD -i eth1 -m state --state INVALID -j LOG --log-prefix "INVALIDForwad_denied" FORWARD -i eth1 -m state --state INVALID -j DROP
NETBIOS_TCP="135,136,137,138,139,445,3127,3198" NETBIOS_UDP="60,66,72,78,100,135,136,137,138,139" iptables -A INPUT -s 0/0 -p tcp -m multiport --dport $NETBIOS_TCP -j DROP iptables -A INPUT -s 0/0 -p udp -m multiport --dport $NETBIOS_UDP -j DROP iptables -A FORWARD -s 0/0 -p tcp -m multiport --dport $NETBIOS_TCP -j DROP iptables -A FORWARD -s 0/0 -p udp -m multiport --dport $NETBIOS_UDP -j DROP /sbin/iptables -t nat -A POSTROUTING -s 0/0 -d 0/0 -j MASQUERADE /linux-install/pentaval-RHx-2.1.10/pentavalt -a -d pentaval0 -f /etc/pentaval.conf #iptables #iptables #iptables #iptables
-A -A -A -A
INPUT -p tcp -s 192.168.1.47/32 -d 0/0 --dport 8080 -j DROP FORWARD -p tcp -s 192.168.1.47/32 -d 0/0 --dport 8080 -j DROP INPUT -p tcp -s 192.168.1.47/32 -d 0/0 --dport 80:8080 -j REJECT FORWARD -p tcp -s 192.168.1.47/32 -d 0/0 --dport 80:8080 -j REJECT
#/etc/rc.d/cbq.init start # /linux-install/pentaval-RHx-2.1.10/pentavalm
Head Office: Begum Mill Moor, Biman Office Road, Kazi Para, Puratan Koshba, Jessore-7400, Bangladesh. Branch Office: Arabpur Moor, Airport Road, Near Cantonment Rail Crossing, 1st Floor, Jessore-7400, Bangladesh. Phone: 880-421-67776 (Off.), 66065 (Res.) E-mail:
[email protected]
Mobile: 0174-041324, 0171-283839, 0171-972810
Copyright © Advanced Micro Computers Online 2002-2005. All Rights Reserved.
Advanced Micro Computers Online
Broadband Internet Service Provider and Computer Sales & Service Centre
vi /etc/sysconfig/network-scripts/ifcfg-eth0 [root@dvb@amconline root]# vi /etc/sysconfig/network-scripts/ifcfg-eth0 DEVICE=eth0 BOOTPROTO=static BROADCAST=203.91.153.47 IPADDR=203.91.153.42 NETMASK=255.255.255.248 NETWORK=203.91.153.40 ONBOOT=yes vi /etc/sysconfig/network-scripts/ifcfg-eth0 root@dvb@amconline root]# vi /etc/sysconfig/network-scripts/ifcfg-eth1 DEVICE=eth1 BOOTPROTO=static BROADCAST=192.168.1.255 IPADDR=192.168.1.254 NETMASK=255.255.255.0 NETWORK=192.168.1.0 ONBOOT=yes vi /etc/resolv.conf [root@dvb@amconline root]# vi /etc/resolv.conf nameserver 210.80.58.66 nameserver 203.112.196.17 nameserver 203.112.196.15 # nameserver 203.112.202.195 # nameserver 210.80.58.66 # nameserver 203.188.191.5 # nameserver 203.188.191.6 vi /etc/sysctl.conf [root@dvb@amconline root]# vi /etc/sysctl.conf # Kernel sysctl configuration file for Red Hat Linux # # For binary values, 0 is disabled, 1 is enabled. See sysctl(8) and # sysctl.conf(5) for more details. # Controls IP packet forwarding net.ipv4.ip_forward = 0 # Controls source route verification net.ipv4.conf.default.rp_filter = 1 # Controls the System Request debugging functionality of the kernel kernel.sysrq = 0 # Controls whether core dumps will append the PID to the core filename. # Useful for debugging multi-threaded applications. kernel.core_uses_pid = 1
Head Office: Begum Mill Moor, Biman Office Road, Kazi Para, Puratan Koshba, Jessore-7400, Bangladesh. Branch Office: Arabpur Moor, Airport Road, Near Cantonment Rail Crossing, 1st Floor, Jessore-7400, Bangladesh. Phone: 880-421-67776 (Off.), 66065 (Res.) E-mail:
[email protected]
Mobile: 0174-041324, 0171-283839, 0171-972810
Copyright © Advanced Micro Computers Online 2002-2005. All Rights Reserved.
Advanced Micro Computers Online
Broadband Internet Service Provider and Computer Sales & Service Centre
vi /etc/pentaval.conf [root@dvb@amconline root]# vi /etc/pentaval.conf [Transponder] SatName=JCSAT3 Name=DNS Frequency=4120.0000 Symbol rate=27.500 ;Polar=VER Polar=HOR ;Band=KU Band=C 22Khz=Off ;22Khz=On LnbPower=On Viterbi=3/4 ;Aviterbi lists -> 1/2, 2/3, 3/4, 5/6, 7/8, Auto LnbType=None ;LNB type lists -> None, 9300, 9750, 10000, 10600, 10750, 11300, Universal DISEqC=None ;DISEqC lists -> None, Port1, Port2 ~ Port16 Count=2 PID0=405 ;PID1=405 AutoPID=Off ;AutoPID=On CrcChecksum=Off ;CrcChecksum=On [Option] SIP Count=1 SIP0=4.5.6.7 SIP1=1.2.3.4 SIP2=0.0.0.0 VMAC0=0 VMAC1=0 [End]
Head Office: Begum Mill Moor, Biman Office Road, Kazi Para, Puratan Koshba, Jessore-7400, Bangladesh. Branch Office: Arabpur Moor, Airport Road, Near Cantonment Rail Crossing, 1st Floor, Jessore-7400, Bangladesh. Phone: 880-421-67776 (Off.), 66065 (Res.) E-mail:
[email protected]
Mobile: 0174-041324, 0171-283839, 0171-972810
Copyright © Advanced Micro Computers Online 2002-2005. All Rights Reserved.