[ SlackList ] [ WkikiSlack ] |
Witam!
Ostatnie pytanie nurtujace mnie od pewnego czasu :
Otoz nie wiem czemu NIE WIEM PO PROSTU FTP MI NIE SMIGA pokaze wam
konfiguracje i zrzuc z tcpdump:
tcpdump -i eth0 | grep 21
tcpdump: listening on eth0
23:19:36.975870 192.168.1.1.ssh > 192.168.1.2.2372: P 647997061:647997129(68) ack 3002177234 win 8576 (DF) [tos 0x10]
23:19:40.572494 192.168.1.2.2459 > 192.168.1.1.ftp: S 3402107570:3402107570(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
23:19:40.572683 192.168.1.1.ftp > 192.168.1.2.2459: S 1481603559:1481603559(0) ack 3402107571 win 5840 <mss 1460,nop,nop,sackOK> (DF)
23:19:40.759331 192.168.1.2.2460 > 192.168.1.1.ftp: S 3402212570:3402212570(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
23:19:40.759511 192.168.1.1.ftp > 192.168.1.2.2460: S 613302005:613302005(0) ack 3402212571 win 5840 <mss 1460,nop,nop,sackOK> (DF)
23:20:00.419218 192.168.1.2.2464 > 192.168.1.1.ftp: . ack 2 win 64240 (DF)
23:20:02.344633 192.168.1.1.ftp > 192.168.1.2.2466: S 1363217291:1363217291(0) ack 3407883189 win 5840 <mss 1460,nop,nop,sackOK> (DF)
23:20:15.442137 192.168.1.2.2470 > 192.168.1.1.ftp: S 3411388010:3411388010(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
23:20:22.572166 192.168.1.2.2474 > 192.168.1.1.ftp: . ack 2 win 64240 (DF)
iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp dpts:ftp-data:ftp
Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- 192.168.1.0/24 anywhere
ACCEPT all -- anywhere 192.168.1.0/24
ACCEPT all -- 192.168.2.0/24 anywhere
ACCEPT all -- anywhere 192.168.2.0/24
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
byc moze to wina niewkompilowanej obslugi ftp ale NIE WIEM PO
PROSTU... :| jak to sprawdzic ?
Received on Mon Jul 12 23:27:31 2004