LinuxForum.Fans
Тема

iptables и ftp

Автор: maximus-asoi 5 сообщений 2972 просмотров
22.10.2010 11:24 #90792

Уважаемые линуксоиды, очень прошу у вас помощи. У меня такая проблема: пришел работать недавно на предприятие. Вроде с iptablesом уже работал и думал, что знаю достаточно, чтоб настроить сеть... оказалось нет. При открытии фтп сервера по определенному адресу показывается только корневой каталог фтп. Все, что в папках - пусто. Звонил сисадмину того сервера и он мне сказал, что проблемы у нас в сети, хотя другие фтп сервера спокойно открываю... И вот призадумался я теперь, может быть все же у меня непорядок в файерволле... 2 дня бился проблем найти не мог. Наша сеть находится за iptables на Suse Linux. фтп сервер, на котором не вижу файло (кроме корневого каталога)
[url]ftp://mcw.iar-moscow.ru/SERVICE/EPC[/url].
Вот конфиг iptables:

text

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
10135   51M ACCEPT     all  --  lo     any     anywhere             anywhere            
 369K  322M ACCEPT     all  --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  any    any     10.8.42.94           anywhere            udp dpt:rsf-1 
    0     0 ACCEPT     all  --  tun1   any     anywhere             anywhere            
    0     0 ACCEPT     tcp  --  eth0   any     10.8.42.94           anywhere            tcp dpt:xmltec-xmlmail 
    0     0            all  --  any    any     anywhere             anywhere            policy match dir in pol ipsec proto esp 
    0     0 input_wifi  all  --  eth2   any     anywhere             anywhere            
10058 1122K input_int  all  --  eth1   any     anywhere             anywhere            
 6385  451K input_ext  all  --  eth0   any     anywhere             anywhere            
    0     0 LOG        all  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-IN-ILL-TARGET ' 
    0     0 DROP       all  --  any    any     anywhere             anywhere            

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 4627  238K TCPMSS     tcp  --  any    any     anywhere             anywhere            tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU 
    0     0 ACCEPT     all  --  eth1   eth0    anywhere             mx.spaa.ru          
    0     0            all  --  any    any     anywhere             anywhere            policy match dir in pol ipsec proto esp 
  368 89633 ACCEPT     tcp  --  tun0   eth0    mail.spaa.ru         anywhere            multiport sports http,https 
  326 81380 ACCEPT     tcp  --  eth0   tun0    anywhere             mail.spaa.ru        multiport dports http,https 
87276   67M ACCEPT     all  --  tun0   eth1    anywhere             anywhere            
61607 7605K ACCEPT     all  --  eth1   tun0    anywhere             anywhere            
    0     0 wifi_forward  all  --  eth2   any     anywhere             anywhere            
63527   29M forward_int  all  --  eth1   any     anywhere             anywhere            
28963 3927K forward_ext  all  --  eth0   any     anywhere             anywhere            
    0     0 LOG        all  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-FWD-ILL-ROUTING ' 
    0     0 DROP       all  --  any    any     anywhere             anywhere            


Chain OUTPUT (policy ACCEPT 278 packets, 13976 bytes)
 pkts bytes target     prot opt in     out     source               destination         
10135   51M ACCEPT     all  --  any    lo      anywhere             anywhere            
 324K  221M ACCEPT     all  --  any    any     anywhere             anywhere            state NEW,RELATED,ESTABLISHED 
   34  1588 LOG        all  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-OUT-ERROR ' 


Chain bookkeepers (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   49  2822 LOG        all  --  eth1   any     ip9.net1.prv         anywhere            LOG level warning prefix `bookkeepers ' 
    0     0 LOG        all  --  any    any     ip72.net1.prv        anywhere            LOG level warning prefix `bookkeepers ' 
    0     0 ACCEPT     tcp  --  any    any     ip72.net1.prv        10.8.80.75          tcp spt:ms-wbt-server 
    0     0 ACCEPT     tcp  --  any    any     ip9.net1.prv         10.8.110.15         tcp spt:ms-wbt-server 
    0     0 ACCEPT     tcp  --  any    any     ip9.net1.prv         ns1.icbank.ru       tcp dpt:5097 
    0     0 ACCEPT     tcp  --  any    any     ip72.net1.prv        ns1.icbank.ru       tcp dpt:5097 
    0     0 ACCEPT     tcp  --  any    any     ip9.net1.prv         cl194-134-5-195.cl.metrocom.ru tcp dpt:5097 
    0     0 ACCEPT     tcp  --  any    any     ip72.net1.prv        cl194-134-5-195.cl.metrocom.ru tcp dpt:5097 
    0     0 ACCEPT     udp  --  any    any     ip9.net1.prv         sb.onego.ru         udp dpt:87 
    0     0 ACCEPT     udp  --  any    any     ip72.net1.prv        sb.onego.ru         udp dpt:87 
    0     0 ACCEPT     tcp  --  any    any     ip9.net1.prv         cuba.uralsibbank.ru tcp dpt:vsinet 
   49  2822 ACCEPT     tcp  --  any    any     ip9.net1.prv         ip78-36-60-95.onego.ru tcp dpt:8585 
    0     0 ACCEPT     tcp  --  any    any     ip72.net1.prv        cuba.uralsibbank.ru tcp dpt:vsinet 
    0     0 ACCEPT     tcp  --  any    any     ip9.net1.prv         195.234.190.58      tcp dpt:https 
    0     0 ACCEPT     tcp  --  any    any     ip72.net1.prv        195.234.190.58      tcp dpt:https 
    0     0 ACCEPT     tcp  --  any    any     ip9.net1.prv         web.uralsibbank.ru  tcp dpt:http 
    0     0 ACCEPT     tcp  --  any    any     ip72.net1.prv        web.uralsibbank.ru  tcp dpt:http 
    0     0 ACCEPT     tcp  --  any    any     ip9.net1.prv         bsd.nikoil.ru       tcp dpt:https 
    0     0 ACCEPT     tcp  --  any    any     ip72.net1.prv        bsd.nikoil.ru       tcp dpt:https 
    0     0 ACCEPT     tcp  --  any    any     ip9.net1.prv         ip78-36-60-93.onego.ru tcp dpt:https 
    0     0 ACCEPT     tcp  --  any    any     ip72.net1.prv        ip78-36-60-93.onego.ru tcp dpt:https 
    0     0 ACCEPT     tcp  --  any    any     ip9.net1.prv         petrosoft.karelia.ru tcp dpt:http 
    0     0 ACCEPT     tcp  --  any    any     ip72.net1.prv        petrosoft.karelia.ru tcp dpt:http 
    0     0 ACCEPT     tcp  --  any    any     ip9.net1.prv         petrosoft.karelia.ru tcp dpt:https 
    0     0 ACCEPT     tcp  --  any    any     ip72.net1.prv        petrosoft.karelia.ru tcp dpt:https 
    0     0 ACCEPT     tcp  --  any    any     ip9.net1.prv         217.170.91.99       tcp dpt:https 
    0     0 ACCEPT     icmp --  any    any     ip9.net1.prv         217.170.91.99       
    0     0 ACCEPT     icmp --  any    any     ip9.net1.prv         cl212-169-119-212.cl.metrocom.ru 
    0     0 ACCEPT     tcp  --  any    any     ip9.net1.prv         cl212-169-119-212.cl.metrocom.ru tcp dpt:https 
    0     0 ACCEPT     tcp  --  any    any     ip72.net1.prv        cl212-169-119-212.cl.metrocom.ru tcp dpt:https 
    0     0 ACCEPT     tcp  --  any    any     ip72.net1.prv        217.170.91.99       tcp dpt:https 
    0     0 ACCEPT     icmp --  any    any     ip72.net1.prv        217.170.91.99       
    0     0 ACCEPT     icmp --  any    any     ip72.net1.prv        cl212-169-119-212.cl.metrocom.ru 
    0     0 ACCEPT     tcp  --  any    any     ip72.net1.prv        195.250.56.144      multiport dports smtp,pop3 
    0     0 REJECT     all  --  any    any     ip9.net1.prv         194.67.35.0/24      reject-with icmp-port-unreachable 
    0     0 REJECT     tcp  --  any    any     ip9.net1.prv         87.248.192.0/19     reject-with icmp-port-unreachable 
    0     0 REJECT     all  --  any    any     ip9.net1.prv         63.245.208.0/20     reject-with icmp-port-unreachable 
    0     0 LOG        all  --  eth1   any     ip9.net1.prv         anywhere            LOG level warning prefix `bk-unknown ' 
    0     0 REJECT     all  --  eth1   any     ip9.net1.prv         anywhere            reject-with icmp-port-unreachable 
    0     0 REJECT     all  --  eth1   any     ip72.net1.prv        anywhere            reject-with icmp-port-unreachable 


Chain citilink_servers (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  any    any     ip90.net1.prv        anywhere            
    0     0 ACCEPT     tcp  --  any    any     ip7.net1.prv         10.0.11.12          tcp dpt:netbios-ssn 
   67  3216 REJECT     all  --  any    any     anywhere             anywhere            reject-with icmp-port-unreachable 


Chain forward_ext (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  any    any     10.8.42.94           ip131.net1.prv      tcp dpt:livelan 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp echo-reply 
  607 50409 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp destination-unreachable 
    9   504 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp time-exceeded 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp parameter-problem 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp timestamp-reply 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp address-mask-reply 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp protocol-unreachable 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp redirect 
28280 3870K ACCEPT     all  --  eth0   any     anywhere             anywhere            state RELATED,ESTABLISHED 
    0     0 LOG        tcp  --  eth0   any     anywhere             ip104.net1.prv      tcp dpt:excerpt LOG level warning prefix `DVR-in ' 
    0     0 ACCEPT     tcp  --  any    any     ip92-101-211-94.onego.ru  anywhere            tcp dpt:ms-wbt-server 
    0     0 ACCEPT     tcp  --  any    any     10.8.42.94           anywhere            tcp dpt:ms-wbt-server 
   53  5132 ACCEPT     all  --  any    any     anywhere             ip90.net1.prv       
    0     0 ACCEPT     tcp  --  any    any     ip10-10-111-117.sampo.ru  anywhere            tcp dpt:ms-wbt-server 
    0     0 ACCEPT     tcp  --  eth0   any     ip10-10-54-101.sampo.ru  anywhere            tcp dpt:ms-wbt-server 
    0     0 ACCEPT     tcp  --  eth0   any     anywhere             ip90.net1.prv       tcp dpt:32218 
   14  1296 ACCEPT     udp  --  eth0   any     anywhere             ip90.net1.prv       udp dpt:32218 
    0     0 ACCEPT     tcp  --  any    any     10.8.27.66           anywhere            tcp dpt:ms-wbt-server 
    0     0 ACCEPT     tcp  --  any    any     anywhere             ip10.net1.prv       tcp dpt:ms-wbt-server 
    0     0 ACCEPT     tcp  --  any    any     anywhere             ip9.net1.prv        tcp dpt:ms-wbt-server 
    0     0 ACCEPT     tcp  --  eth0   any     anywhere             ip104.net1.prv      tcp dpt:excerpt 
    0     0 ACCEPT     tcp  --  eth0   any     anywhere             ip5.net1.prv        tcp dpt:ms-wbt-server 
    0     0 ACCEPT     tcp  --  eth0   any     anywhere             ip22.net1.prv       tcp dpt:ms-wbt-server 
    0     0 LOG        tcp  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 tcp flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-FWDext-DROP-DEFLT ' 
    0     0 LOG        icmp --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-FWDext-DROP-DEFLT ' 
    0     0 LOG        udp  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-FWDext-DROP-DEFLT ' 
    0     0 LOG        all  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 state INVALID LOG level warning tcp-options ip-options prefix `SFW2-FWDext-DROP-DEFLT-INV ' 
    0     0 DROP       all  --  any    any     anywhere             anywhere            


Chain forward_int (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp echo-reply 
   67  8288 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp destination-unreachable 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp time-exceeded 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp parameter-problem 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp timestamp-reply 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp address-mask-reply 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp protocol-unreachable 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp redirect 
   41  3116 ACCEPT     udp  --  eth1   any     ip104.net1.prv       anywhere            udp dpt:ntp 
   35  2100 LOG        all  --  eth1   any     ip104.net1.prv       anywhere            state NEW LOG level warning prefix `DVR ' 
   35  2100 ACCEPT     all  --  eth1   any     ip104.net1.prv       anywhere            
63384   29M forward_int_reject  all  --  any    any     anywhere             anywhere            
    0     0 swap_sampo_ru  tcp  --  eth1   eth0    192.168.1.0/24       swap.sampo.ru       
   67  3216 citilink_servers  all  --  eth1   eth0    anywhere             10.0.11.0/24        
  413 71553 peugeot_pps  all  --  eth1   eth0    ip62.net1.prv        anywhere            
    0     0 ACCEPT     all  --  any    any     ip90.net1.prv        ip2.net2.prv        
    0     0 ACCEPT     tcp  --  any    any     ip9.net1.prv         mail.okssoft.ru     tcp dpt:http 
  252 13262 ACCEPT     all  --  eth1   eth0    ip5.net1.prv         anywhere            
    0     0 ACCEPT     udp  --  eth1   eth0    ip66.net1.prv        anywhere            udp dpt:isakmp 
 4852 1147K ACCEPT     tcp  --  any    any     ip66.net1.prv        anywhere            multiport dports http,https 
    0     0 ACCEPT     tcp  --  eth1   eth0    ip66.net1.prv        anywhere            tcp dpt:isakmp 
    0     0 ACCEPT     tcp  --  any    any     ip9.net1.prv         ip78-36-60-95.onego.ru multiport dports smtp,pop3 
    0     0 ACCEPT     all  --  eth1   eth0    ip109.net1.prv       194.50.160.180      
    0     0 ACCEPT     all  --  any    any     ip131.net1.prv       anywhere            
    0     0 ACCEPT     tcp  --  any    any     ip48.net1.prv        anywhere            tcp dpt:http 
57191   28M ACCEPT     all  --  eth1   eth0    ip90.net1.prv        anywhere            
    0     0 ACCEPT     tcp  --  any    any     ip15.net1.prv        96-0.colo.sta.blacknight.ie/24 tcp dpt:https 
    0     0 ACCEPT     all  --  any    any     ip15.net1.prv        pool-71-160-100-220.lsanca.dsl-w.verizon.net 
    0     0 ACCEPT     tcp  --  any    any     ip15.net1.prv        96-7.colo.sta.blacknight.ie tcp dpt:https 
    0     0 ACCEPT     tcp  --  eth1   eth0    ip32.net1.prv        audaupdate.audatex.ru 
    0     0 ACCEPT     tcp  --  eth1   eth0    192.168.1.0/24       mcw.iar-moscow.ru   
    0     0 ACCEPT     all  --  any    any     192.168.1.0/24       eurorscg.ru         
    0     0 ACCEPT     tcp  --  eth1   eth0    192.168.1.0/24       kvadrat1.karelia.ru 
    0     0 ACCEPT     tcp  --  eth1   eth0    192.168.1.0/24       ip217-77-60-133.sampo.ru 
    0     0 ACCEPT     tcp  --  eth1   eth0    192.168.1.0/24       orion.mtw.ru        
    0     0 REJECT     all  --  any    any     ip71.net1.prv        ip39.net1.prv       reject-with icmp-port-unreachable 
    0     0 ACCEPT     tcp  --  eth1   eth1    192.168.1.0/24       ip104.net1.prv      tcp dpt:excerpt 
  585 62865 bookkeepers  all  --  any    any     anywhere             anywhere            
  536 60043 reject-ms  all  --  any    any     anywhere             anywhere            
  476 57163 LOG        all  --  eth1   any     anywhere             anywhere            state NEW LOG level warning prefix `int-conn-attempt ' 
    0     0 ACCEPT     all  --  eth1   eth0    anywhere             anywhere            state RELATED,ESTABLISHED 
   74  3552 LOG        tcp  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 tcp flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-FWDint-DROP-DEFLT ' 
    0     0 LOG        icmp --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-FWDint-DROP-DEFLT ' 
   96 19659 LOG        udp  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-FWDint-DROP-DEFLT ' 
    9   432 LOG        all  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 state INVALID LOG level warning tcp-options ip-options prefix `SFW2-FWDint-DROP-DEFLT-INV ' 
  536 60043 DROP       all  --  any    any     anywhere             anywhere            


Chain forward_int_reject (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   24  2246 REJECT     udp  --  eth1   eth0    anywhere             anywhere            udp dpt:domain reject-with icmp-port-unreachable 
    0     0 REJECT     tcp  --  eth1   eth0    anywhere             anywhere            multiport dports msnp,aol reject-with icmp-port-unreachable 


Chain input_ext (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   63  5064 DROP       all  --  any    any     anywhere             anywhere            PKTTYPE = broadcast 
    7   392 ACCEPT     icmp --  any    any     anywhere             anywhere            icmp source-quench 
    1    64 ACCEPT     icmp --  any    any     anywhere             anywhere            icmp echo-request 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp echo-reply 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp destination-unreachable 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp time-exceeded 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp parameter-problem 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp timestamp-reply 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp address-mask-reply 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp protocol-unreachable 
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED icmp redirect 
    0     0 LOG        tcp  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 tcp dpt:http flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP ' 
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpt:http 
    0     0 LOG        tcp  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 tcp dpt:https flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP ' 
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpt:https 
    0     0 LOG        tcp  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 tcp dpt:imaps flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP ' 
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpt:imaps 
    0     0 LOG        tcp  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 tcp dpt:pop3s flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP ' 
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpt:pop3s 
    1    48 LOG        tcp  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 tcp dpt:smtp flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP ' 
   16   780 REJECT     tcp  --  any    any     anywhere             anywhere            tcp dpt:smtp reject-with icmp-port-unreachable 
    0     0 LOG        tcp  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 tcp dpt:ssh flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP ' 
    0     0 ACCEPT     tcp  --  any    any     10.8.42.94           anywhere            tcp dpt:81 
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpt:ssh 
    0     0 ACCEPT     udp  --  any    any     anywhere             anywhere            udp dpt:openvpn 
    3   144 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpt:iatp-normalpri state NEW 
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpt:iatp-highpri state NEW 
    0     0 ACCEPT     udp  --  any    any     anywhere             anywhere            udp dpt:bootpc 
    0     0 ACCEPT     tcp  --  any    any     10.0.0.0/8           mx.spaa.ru          tcp spts:1024:65535 dpts:49152:49162 state NEW 
    0     0 ACCEPT     tcp  --  any    any     10.0.0.0/8           mx.spaa.ru          tcp dpt:scientia-ssdb state NEW 
    0     0 ACCEPT     udp  --  any    any     anywhere             anywhere            udp dpt:tftp 
    0     0 reject_func  tcp  --  any    any     anywhere             anywhere            tcp dpt:ident state NEW 
   99  5124 LOG        tcp  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 tcp flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
    8  1169 LOG        icmp --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
  114  9194 LOG        udp  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
    7   340 LOG        all  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 state INVALID LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT-INV ' 
 6295  444K DROP       all  --  any    any     anywhere             anywhere            


Chain input_int (1 references)
 pkts bytes target     prot opt in     out     source               destination         
10058 1122K ACCEPT     all  --  any    any     anywhere             anywhere            


Chain input_wifi (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  eth2   any     192.168.2.0/24       anywhere            tcp dpt:ndl-aas 
    0     0 ACCEPT     udp  --  eth2   any     192.168.2.0/24       anywhere            udp dpt:domain 
    0     0 LOG        all  --  eth2   any     anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning prefix `spaa_wifi_dropped' 
    0     0 DROP       all  --  eth2   any     anywhere             anywhere            


Chain peugeot_pps (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  eth1   eth0    ip62.net1.prv        194.250.98.0/24     multiport ports http,https 
    0     0 ACCEPT     tcp  --  eth1   eth0    ip62.net1.prv        66.102.0.0/20       tcp dpt:http 
    0     0 ACCEPT     tcp  --  eth1   eth0    ip62.net1.prv        64.233.160.0/19     tcp dpt:http 
    0     0 ACCEPT     tcp  --  eth1   eth0    ip62.net1.prv        66.249.64.0/19      tcp dpt:http 
    0     0 ACCEPT     tcp  --  eth1   eth0    ip62.net1.prv        any-in-0000.1e100.net/16 tcp dpt:http 
    0     0 ACCEPT     tcp  --  eth1   eth0    ip62.net1.prv        213.200.108.0/24    tcp dpt:http 
  387 67090 ACCEPT     tcp  --  eth1   eth0    ip62.net1.prv        81.255.178.0/24     multiport dports http,https 
    0     0 ACCEPT     tcp  --  eth1   eth0    ip62.net1.prv        62.109.192.0/18     multiport dports http,https 
    0     0 ACCEPT     tcp  --  eth1   eth0    ip62.net1.prv        64.68.96.0/19       multiport dports http,https 
    0     0 ACCEPT     tcp  --  eth1   eth0    ip62.net1.prv        195.101.26.0/23     multiport dports http,https 
    0     0 ACCEPT     all  --  eth1   eth0    ip62.net1.prv        194.250.98.0/24     
    0     0 DROP       udp  --  eth1   eth0    ip62.net1.prv        anywhere            multiport dports ctdp,vmsvc 
   26  4463 LOG        all  --  any    any     ip62.net1.prv        anywhere            LOG level warning prefix `ibm-scanner ' 
   26  4463 ACCEPT     all  --  any    any     ip62.net1.prv        anywhere            
    0     0 DROP       all  --  any    any     anywhere             anywhere            


Chain reject-ms (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 REJECT     all  --  any    any     192.168.1.0/24       207.46.0.0/16       reject-with icmp-port-unreachable 
    0     0 REJECT     all  --  any    any     192.168.1.0/24       65.52.0.0/14        reject-with icmp-port-unreachable 
    0     0 REJECT     all  --  any    any     192.168.1.0/24       87.248.192.0/19     reject-with icmp-port-unreachable 
  536 60043 RETURN     all  --  any    any     anywhere             anywhere            


Chain reject_func (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 REJECT     tcp  --  any    any     anywhere             anywhere            reject-with tcp-reset 
    0     0 REJECT     udp  --  any    any     anywhere             anywhere            reject-with icmp-port-unreachable 
    0     0 REJECT     all  --  any    any     anywhere             anywhere            reject-with icmp-proto-unreachable 


Chain swap_sampo_ru (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  any    any     ip5.net1.prv         anywhere            
    0     0 ACCEPT     all  --  any    any     ip22.net1.prv        anywhere            
    0     0 ACCEPT     all  --  any    any     ip90.net1.prv        anywhere            
    0     0 REJECT     all  --  any    any     anywhere             anywhere            reject-with icmp-port-unreachable 


Chain wifi_forward (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  any    any     ip90.net1.prv        mx.spaa.ru          
    0     0 ACCEPT     all  --  any    any     ip2.net2.prv         ip90.net1.prv       
    0     0 LOG        all  --  any    any     anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning prefix `FWD_WIFI_SPAA_Dropped' 
    0     0 DROP       all  --  any    any     anywhere             anywhere

очень прошу помочь мне разобраться...

22.10.2010 14:29 · отредактировано #90852

Чего тут думать? Найдите компьютер с которого сайт будет нормально открываться, я вот пока не нашел. Есть серьезные подозрения на права доступа, видимо анонимным нет досупа к файлам даже на чтение, так что пусть автор сайта копает.

22.10.2010 14:32 #90855

И вообще. Если есть подозрения на файрволл, то какая проблема его отключить? Отключили и не помогло, значит не он или точнее не только в нем дело.

22.10.2010 14:33 #90856

В каталоге SERVICE нет вообще ничего... по крайней мере, выдается ошибка, что не найдена страница... ваш файерволл тут не при чем

22.10.2010 15:35 #90878

Спасибо вам большое за то, что отозвались! Я просто нахожусь в пределах не очень большого города. Позвонив тамошнему админу фтп сервера я сперва засомневался в себе и решил, что действительно ошибка у меня какая-нибудь может быть, т.к. тот одмин категорически отрезал свое причастие к неработоспособности серва и указал перстом на меня... Теперь, после долгого, матерного разговора с московским одмином проблема все же решилась - права доступа. Спасибо всем большое за то, что отозвались. Пост можно удалять smile

Войдите или зарегистрируйтесь, чтобы ответить.