andinholuiz
(usa Debian)
Enviado em 22/08/2011 - 13:53h
Gente eu não consigo enviar e-mails.
Será se esqueci de algo?
firewall.sh
#!/bin/bash
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128
#LIBERANDO ACESSO PARA O LOGMEIN
#Porta 5405 - utilizada pelo LogMeIn
iptables -A INPUT -p tcp --destination-port 5405 -j ACCEPT
iptables -A FORWARD -p tcp -i eth0 --dport 5405 -d 192.168.0.0/24 -j ACCEPT
#liberando o envio de emails
iptables -A INPUT -p tcp --dport 8080 -j ACCEPT
iptables -A INPUT -p tcp --sport 25 -j ACCEPT
## Liberando HTTPS, POP, SMTP, POP (SSL), SMTP (SSL),
iptables -A FORWARD -p tcp -s 192.168.0.0/24 -m multiport --dports 443,110,25,465,995,809 -j ACCEPT
iptables -A FORWARD -p tcp -s 192.168.0.0/24 -m multiport --dports 443,110,25,465,995,809 -j ACCEPT
squid.conf
#Configuracao Geral do Firewall
http_port 3128 transparent
acl all src 0.0.0.0/0.0.0.0
visible_hostname firewall.diocred.com.br
error_directory /usr/share/squid/errors/Portuguese/
#Configuracao de Cache
cache_mem 8 MB
maximum_object_size 64 KB
cache_dir ufs /var/spool/squid 100 16 256
cache_swap_low 90
cache_swap_high 95
cache_access_log /var/log/squid/access.log
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 #http
acl Safe_ports port 21 #ftp
acl Safe_ports port 25 #pop
acl Safe_ports port 110 #smtp
acl Safe_ports port 70 #gopher
acl Safe_ports port 210 #wais
acl Safe_ports port 1025-65535 #portas altas
acl Safe_ports port 280 #http-mgmt
acl Safe_ports port 488 #gss-http
acl Safe_ports port 591 #filemaker
acl Safe_ports port 777 #multiling http
acl purge method PURGE
acl CONNECT method CONNECT
acl sites_bloqueados url_regex -i "/etc/squid/regras/bloqueados"
acl redelocal src 192.168.0.0/24
http_access deny sites_bloqueados
http_access allow redelocal
http_access allow localhost
http_access allow manager localhost
http_access allow purge localhost
http_access allow purge
http_access allow !Safe_ports
http_access allow !CONNECT !SSL_ports
http_access allow all