Iptables bloqueando Incredimail

1. Iptables bloqueando Incredimail

Xelito
(usa Ubuntu)

Enviado em 18/08/2010 - 22:02h

Galera, tentei de tudo, e vi varios topicos aqui no site, mas não consegui abrir email pelo programa incredimail, já alterei as regras politicas padroes mas nao tive resultado.
Segue abaixo iptables:
#!/bin/bash
#
echo "firewall-Inicializacao"
echo "Setando variaveis"
ipt=/sbin/iptables
if_int=eth1
if_ext=eth0
rede_int=10.50.52.0/255.255.252.0
io=localhost
#
echo "Carregando os modulos"
/sbin/modprobe ip_conntrack
/sbin/modprobe ip_conntrack_ftp
/sbin/modprobe ip_nat_ftp
/sbin/modprobe ip_tables
#
echo "Limpando regras"
$ipt -t nat -F
$ipt -t nat -X
$ipt -t nat -Z
$ipt -F
$ipt -X
$ipt -Z
# Compatilhamento da conexao
#echo 1 > /proc/sys/net/ipv4/ip_forward
#
echo "Aplicando politica padrão"
$ipt -P INPUT DROP
$ipt -P FORWARD DROP
#
echo "Liberando localhost"
$ipt -A INPUT -s $io -j ACCEPT
$ipt -A FORWARD -s $io -j ACCEPT
#
echo "Liberando Forwad para rede interna"
$ipt -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
$ipt -A FORWARD -s $rede_int -j ACCEPT
$ipt -A FORWARD -p icmp -j ACCEPT
$ipt -A FORWARD -s 172.16.0.0 -p tcp -m tcp -j ACCEPT
$ipt -A FORWARD -s 172.16.0.0 -p udp -m udp -j ACCEPT
$ipt -A FORWARD -p tcp -m tcp --dport 3389 -j ACCEPT
#
echo "liberando Input"
$ipt -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
$ipt -A INPUT -p tcp -m tcp --dport 5000 -j ACCEPT
$ipt -A INPUT -p tcp -m tcp --dport 3000 -j ACCEPT
$ipt -A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
$ipt -A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
$ipt -A INPUT -s 10.50.52.0/255.255.252.0 -p tcp -m tcp --dport 53 -j ACCEPT
$ipt -A INPUT -s 10.50.52.0/255.255.252.0 -p udp -m udp --dport 53 -j ACCEPT
$ipt -A INPUT -s 10.50.52.0/255.255.252.0 -p tcp -m tcp --dport 80 -j ACCEPT
$ipt -A INPUT -s 200.203.249.10 -p tcp -m tcp --dport 80 -j ACCEPT
#$ipt -A INPUT -s 172.21.2.35 -p tcp -m tcp --dport 80 -j ACCEPT
$ipt -A INPUT -s 200.203.249.100 -p tcp -m tcp --dport 80 -j ACCEPT
$ipt -A INPUT -s 200.203.249.101 -p tcp -m tcp --dport 80 -j ACCEPT
$ipt -A INPUT -s 10.50.52.0/255.255.252.0 -p tcp -m tcp --dport 3128 -j ACCEPT
$ipt -A INPUT -p icmp -j ACCEPT
#iptables -A FORWARD -p tcp --dport 110 -j ACCEPT
#iptables -A FORWARD -p tcp --dport 25 -j ACCEPT
#$ipt -I FORWARD -s 172.21.2.23 -j DROP
$ipt -I FORWARD -s 10.50.52.0/255.255.252.0 -p tcp --dport 1863 -j REJECT
$ipt -I FORWARD -s 10.50.52.0/255.255.252.0 -p tcp --dport 5190 -j REJECT
#$ipt -I FORWARD -s 172.21.2.0/255.255.254.0 -d loginnet.passport.com -j REJECT
$ipt -A FORWARD -s 10.50.52.0/255.255.252.0 -p tcp --dport 1863 -j REJECT
$ipt -A FORWARD -s 10.50.52.0/255.255.252.0 -p tcp --dport 5190 -j REJECT
#$ipt -A FORWARD -s 172.21.2.0/255.255.254.0 -d loginnet.passport.com -j REJECT
$ipt -A OUTPUT -p tcp --dport 1863 -j DROP
$ipt -A OUTPUT -p tcp --dport 5190 -j DROP
$ipt -A FORWARD -p tcp --dport 25 -j ACCEPT
$ipt -A FORWARD -p tcp --dport 110 -j ACCEPT
#
$ipt -A FORWARD -p tcp -s 10.50.52.0/255.255.252.0 --dport 25 -j ACCEPT # SMTP
$ipt -A FORWARD -p tcp -s 10.50.52.0/255.255.252.0 --dport 587 -j ACCEPT # SMTP
$ipt -A FORWARD -p tcp -s 10.50.52.0/255.255.252.0 --dport 110 -j ACCEPT # POP3
echo "Redirecionando portas para squid"
$ipt -t nat -A PREROUTING -s 10.50.52.0/255.255.252.0 -p tcp --dport 80 -j REDIRECT --to-port 3128
echo "Liberando mascaramento de rede"
$ipt -t nat -A POSTROUTING -o eth0 -j MASQUERADE

Meu proxy não é transparente.
(Utilizo squid + iptables)
=[

0 0

Quote