{"id":2840,"date":"2013-02-03T21:04:24","date_gmt":"2013-02-03T12:04:24","guid":{"rendered":"http:\/\/www.vincentina.net\/?p=2840"},"modified":"2013-10-18T04:05:12","modified_gmt":"2013-10-17T19:05:12","slug":"%e3%82%b5%e3%83%bc%e3%83%90%e3%83%bc2%e5%8f%b0%e3%81%a7%e6%a7%8b%e6%88%90%e3%82%92%e4%bd%9c%e3%81%a3%e3%81%a6%e3%81%bf%e3%81%9f","status":"publish","type":"post","link":"https:\/\/www.vincentina.net\/?p=2840","title":{"rendered":"\u30b5\u30fc\u30d0\u30fc2\u53f0\u3067\u69cb\u6210\u3092\u4f5c\u3063\u3066\u307f\u305f"},"content":{"rendered":"

\u305f\u3076\u3093\u56f3\u3067\u66f8\u304b\u306a\u3044\u3068\u5206\u304b\u308a\u306b\u304f\u3044\u3068\u601d\u3046\u306e\u3067\u3001YAMAHA\u306e\u30d5\u30ea\u30fc\u30a2\u30a4\u30b3\u30f3\u3092\u4f7f\u3063\u3066\u69cb\u6210\u56f3\u3092\u4f5c\u3063\u3066\u307f\u307e\u3057\u305f\u3002
\n\u624b\u4f5c\u308a\u611f\u305f\u3063\u3077\u308a\u306b\u4ed5\u4e0a\u304c\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n

\"network01\"<\/a><\/p>\n

\u30ed\u30fc\u30ab\u30ebIP\u306f\u30d5\u30ec\u30c3\u30c4\u3067\u4f7f\u3063\u3066\u3044\u308b\u30af\u30bb\u3067\u7121\u610f\u8b58\u306b\u4ed8\u3051\u3066\u307e\u3057\u305f\u3002
\n\u4eca\u306f\u554f\u984c\u306a\u304f\u52d5\u3044\u3066\u3044\u307e\u3059\u304c\u3001\u4eca\u56de\u306f\u6570\u65e5\u9593\u307b\u3069\u60a9\u3093\u3060\u306e\u3067\u3059\u3002
\n\u4eca\u56de\u306e\u30ad\u30e2\u306b\u306a\u3063\u305f\u90e8\u5206\u306fiptables\u3067\u3057\u305f\u3002<\/p>\n

\u3068\u306b\u3082\u304b\u304f\u306b\u3082iptables\u3067\u3057\u305f\u3002<\/p>\n

\u30eb\u30fc\u30bf\u3092\u4f7f\u3046\u3068\u3044\u3046\u624b\u3082\u3042\u308a\u307e\u3059\u304c\u3001\u3069\u3046\u3057\u3066\u30822\u53f0\u3067\u3084\u308a\u305f\u304b\u3063\u305f\u306e\u30671\u53f0\u3092\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u517c\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u30fc\u3068\u3057\u3066\u52d5\u4f5c\u3055\u305b\u3066\u3044\u307e\u3059\u3001\u3053\u3044\u3064\u3092\u30ed\u30fc\u30ab\u30ebA\u3068\u3057\u307e\u3059\u3002<\/p>\n

 <\/p>\n

\u30ed\u30fc\u30ab\u30eb\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u69cb\u6210\u306f\u3068\u304f\u306b\u554f\u984c\u306a\u304f\u7d42\u308f\u3063\u305f\u306e\u3067\u3059\u304c\u3001\u3067\u304d\u306a\u304b\u3063\u305f\u3068\u3053\u308d\u304c192.168.24.200\u3092\u30ed\u30fc\u30ab\u30ebB\u3068\u3057\u3066\u8a71\u3092\u9032\u3081\u307e\u3059\u304c\u3001\u3053\u306e\u30ed\u30fc\u30ab\u30ebB\u304b\u3089Yum\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3082\u3067\u304d\u306a\u3044\u3057\u3001\u305d\u308c\u3086\u3048\u306bMySQL\u3082\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3067\u304d\u306a\u3044\u3002
\n\u8981\u306f\u30d1\u30b1\u30c3\u30c8\u304c\u5916\u306b\u3067\u306a\u3044\u3002<\/p>\n

\u30d1\u30c3\u3068\u601d\u3044\u3064\u3044\u305f\u306e\u304c\u3001VPN\u306e\u6642\u306b\u3082\u3084\u3063\u305fiptables\u306eNat\u3068Masquarade\u3002
\n\u30d1\u30b1\u30c3\u30c8\u306e\u8ee2\u9001\u3092\u3059\u308b\u3001\u30eb\u30fc\u30bf\u306e\u6a5f\u80fd\u306e\u4e00\u3064\u3060\u3002
\n\u30dd\u30fc\u30c8\u30d5\u30a9\u30ef\u30fc\u30c9\u3092\u3084\u308b\u3068\u3057\u3066\u3001\u307b\u304b\u306b\u3082Yum\u304c\u3067\u304d\u306a\u3044\u306a\u3069\u60c5\u5831\u3092\u30b0\u30b0\u3063\u3066\u307f\u3066IPV6\u304c\u6709\u52b9\u3060\u3063\u305f\u3089\u3067\u304d\u306a\u3044\u3068\u304b\u3044\u308d\u3044\u308d\u3068\u60c5\u5831\u306f\u51fa\u3066\u304f\u308b\u3051\u3069\u3001\u4eca\u306e\u72b6\u6cc1\u306f\u305d\u308c\u4ee5\u524d\u306e\u554f\u984c\u3060\u308d\u3046\u3002
\n\u305d\u306e\u307b\u304b\u306b\u3082\/etc\/sysconfig\/network\u3084\/etc\/sysconfig\/network-scripts\/ifcfg-eh0\u3084\u3089\u3092\u3044\u3058\u308a\u306b\u3044\u3058\u308a\u307e\u304f\u3063\u305f\u3051\u3069\u3046\u307e\u304f\u3044\u304b\u306a\u3044\u3002
\nVPN\u3067\u3084\u3063\u305f\u6642\u3068\u540c\u3058\u304b\u3069\u3046\u304b\u306f\u3063\u304d\u308a\u899a\u3048\u3066\u306a\u3044\u3051\u3069\u3001\u3082\u3063\u304b\u3044\u8abf\u3079\u306a\u304a\u3057\u3066Postrouting\u306e\u8a2d\u5b9a\u3092\u8ffd\u52a0\u3057\u305f\u308a\u3057\u305f\u3002<\/p>\n

-A POSTROUTING -s 192.168.24.0\/24 -o eth0 -j MASQUERADE\r\n-A FORWARD -s 192.168.24.0\/24 -i eth1 -o eth0 -j ACCEPT\r\n-A OUTPUT -d 10.0.0.0\/8 -o eth0 -j DROP\r\n-A OUTPUT -d 176.16.0.0\/12 -o eth0 -j DROP\r\n-A OUTPUT -d 192.168.0.0\/16 -o eth0 -j DROP\r\n-A OUTPUT -d 127.0.0.0\/8 -o eth0 -j DROP\r\n\r\n-A RH-Firewall-1-INPUT -d 192.168.24.0\/24 -j ACCEPT<\/pre>\n
\u3064\u306a\u611f\u3058\u3067\u3059\u3002
\n\u305d\u3057\u3066\u76ee\u7684\u901a\u308a\u306bPING\u306f\u5fdc\u7b54\u3059\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u304c\u3001IP\u30a2\u30c9\u30ec\u30b9\u3060\u3063\u305f\u5834\u5408\u3060\u3051\u30fb\u30fb\u30fb
\n\u30c9\u30e1\u30a4\u30f3\u3060\u3068\u30c0\u30e1\u306a\u3093\u3067\u3059\u3002<\/p>\n
\u307b\u3044\u3001\u30d1\u30b1\u30c3\u30c8\u306f\u629c\u3051\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u304c\u3001DNS\u304c\u304a\u304b\u3057\u3044\u3002
\n\u3042\u30fc\u3001DNS\u3058\u3083\u306a\u304f\u3066\u304a\u304b\u3057\u3044\u306e\u306f\u30b5\u30fc\u30d0\u30fc\u5074\u304b\u3002<\/p>\n
\u3084\u306f\u308a\u5185\u5411\u304d\u306eDNS\u304c\u5fc5\u8981\u306a\u306e\u304b\uff01\u3068\u9593\u9055\u3063\u305f\u65b9\u5411\u306b\u3069\u3093\u3069\u3093\u9032\u3093\u3067\u3044\u304f\u3001\u305d\u308c\u3060\u3051\u5fc5\u6b7b\u3060\u3063\u305f\u3093\u3067\u3059\u3088\u3002
\n\u3093\u3067\u5185\u5411\u304d\u306e\u30ad\u30e3\u30c3\u30b7\u30e5DNS\u30b5\u30fc\u30d0\u30fc\u517c\u3001\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u517c\u3001\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u30fc\u3068\u3044\u3046\u72b6\u614b\u306b\u3002<\/p>\n
\u30ed\u30fc\u30ab\u30ebB\u304b\u3089\u3082\u540d\u524d\u89e3\u6c7a\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u304c\u3001\u307e\u3060Yum\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u3067\u304d\u306a\u3044\u3002
\n\u5358\u306bdig\u3060\u3063\u305f\u308anslookup\u306f\u3067\u304d\u308b\u306e\u3060\u304c\u3002
\nTraceroute\u3092\u3057\u3066\u307f\u308b\u3068\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u3092\u629c\u3051\u3066\u3044\u306a\u3044\u3001\u304a\u3082\u3044\u3063\u304d\u3057\u3002<\/p>\n
\u7d4c\u8def\u304c\u3042\u308a\u307e\u305b\u3093\u3068\u3044\u3046\u7d50\u679c\u3000\u304c\u3067\u3066\u3057\u307e\u3046\u3002<\/p>\n
 <\/p>\n
\u305d\u3057\u3066\u540c\u3058\u3053\u3068\u3092\u3084\u3063\u305f\u3088\u3046\u306a\u6c17\u306b\u4f55\u5ea6\u304b\u306a\u308a\u3064\u3064\u3082\u3001\u6628\u65e5\u306e\u304a\u663c\u304f\u3089\u3044\u306b\u3084\u3063\u3068\u3068\u3044\u3046\u304b\u3001\u3064\u3044\u306biptables\u3092\u30dd\u30fc\u30c8\u30d5\u30a9\u30ef\u30fc\u30c9\u306e\u8a2d\u5b9a\u3067\u3060\u3051\u306b\u3057\u3066\u307f\u308b\u3053\u3068\u306b\u3057\u305f\u3002
\n\u3055\u3063\u304d\u66f8\u3044\u305f\u8a2d\u5b9a\u3067\u3059\u306d\u3002<\/p>\n
\u3059\u308b\u3068\uff01\u3053\u308c\u306e\u65b9\u5411\u304c\u826f\u304b\u3063\u305f\u3088\u3046\u3067\u3001Yum\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3082\u52d5\u3044\u3066\u304f\u308c\u307e\u3057\u305f\u3001\u3069\u3046\u3084\u3089\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3055\u308c\u3066\u3044\u305f\u3088\u3046\u3067\u3059\u3002
\nnamed\u3082\u505c\u6b62\u3057\u3066\u8a66\u3057\u3066\u3082\u3001\/etc\/resolv.conf\u306e\u8a2d\u5b9a\u3092\u3084\u308a\u76f4\u3059\u3068\u306a\u3093\u306a\u304f\u52d5\u3044\u305f\u3002
\n\u3088\u3063\u3057\u3083\u3042\uff5e\u3063\u3068\u601d\u3063\u305f\u304c\u3001\u307e\u305f\u4f5c\u696d\u3057\u3088\u3046\u3068\u8d77\u52d5\u3057\u305f\u3089\u30ed\u30fc\u30ab\u30ebB\u306bSSH\u304c\u7e4b\u304c\u3089\u306a\u3044\u3001\u4eca\u5ea6\u306f\u30ed\u30fc\u30ab\u30ebB\u304b\u3089\u30ed\u30fc\u30ab\u30ebA\u306b\u306f\u30d1\u30b1\u30c3\u30c8\u304c\u3067\u3066\u901a\u4fe1\u3067\u304d\u308b\u3051\u3069\u3001\u30ed\u30fc\u30ab\u30ebA\u304b\u3089\u30ed\u30fc\u30ab\u30ebB\u3078\u306e\u30a2\u30af\u30bb\u30b9\u304c\u3067\u304d\u306a\u304f\u306a\u3063\u3066\u3057\u307e\u3063\u305f\u3088\u3046\u3060\u3002
\n\u306a\u306b\u3084\u3063\u3066\u3093\u3060\u304b\u3002<\/p>\n
iptables\u3092\u898b\u308b\u3068<\/p>\n
-A RH-Firewall-1-INPUT -d 192.168.24.0\/24 -j ACCEPT<\/pre>\n
\u304c\u629c\u3051\u3066\u3044\u305f\u3002<\/p>\n
\u3042\u3068\u306fRH-Firewal-1-INPUT\u306e\u8a18\u8ff0\u306e\u4f4d\u7f6e\u3092\u4e0b\u3052\u3066\u307f\u305f\u3089\u3001\u5143\u3005\u3042\u3063\u305f\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306e\u8a2d\u5b9a\u3092\u5143\u306b\u623b\u3057\u3066\u3082\u3061\u3083\u3093\u3068\u52d5\u3044\u3066\u304f\u308c\u305f\u3002
\n\u4eca\u56de\u306f2\u53f0\u3060\u304b\u3089\u5fc5\u8981\u306f\u306a\u3044\u3051\u3069\u3001\u53f0\u6570\u3092\u5897\u3084\u3059\u3068\u304d\u306f\u3053\u306e\u8a2d\u5b9a\u3092\u30d9\u30fc\u30b9\u306b\u3057\u3066PREROUTING\u306e\u8a2d\u5b9a\u3092\u8ffd\u52a0\u3059\u308c\u3070\u3044\u3044\u306f\u305a\u30fb\u30fb\u30fb\u305f\u3076\u3093\u3002<\/p>\n
\u5358\u7d14\u306a\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u8a2d\u5b9a\u306f\u3053\u308c\u3067\u3044\u3044\u306f\u305a\u3060\u304b\u3089\u3001\u307b\u304b\u306e\u90e8\u5206\u306f\u30b5\u30fc\u30d0\u30fc\u5074\u306e\u8a2d\u5b9a\u3060\u304b\u3089\u4f55\u3068\u304b\u306a\u308b\u3060\u308d\u3046\u3068\u4e88\u6e2c\u3002
\n\u81ea\u5b85\u30b5\u30fc\u30d0\u30fc\u3092\u4f5c\u3063\u3066\u3044\u305f\u6642\u306b\u30d5\u30ec\u30c3\u30c4\u306eCTU\u3067\u3084\u3063\u3066\u305f\u4f5c\u696d\u304c\u4eca\u56de\u306e\u624b\u4f5c\u696d\u306b\u3042\u305f\u308b\u3051\u3069\u3001\u3053\u308c\u3082\u30b9\u30af\u30ea\u30d7\u30c8\u5316\u3059\u308c\u3070\u30b0\u30ed\u30fc\u30d0\u30eb\u5074\u306eIP\u30a2\u30c9\u30ec\u30b9\u3084\u30ed\u30fc\u30ab\u30eb\u306eIP\u30a2\u30c9\u30ec\u30b9\u3092\u6307\u5b9a\u3059\u308b\u3060\u3051\u3067OK\u306a\u306f\u305a\u3002
\n\u30a4\u30e1\u30fc\u30b8\u3059\u308b\u3068\u305d\u3046\u306a\u308b\u3002<\/p>\n
\u3067\u3082\u3063\u3066\u4eca\u56de\u306f\u30eb\u30fc\u30bf\u30fc\u306f\u4f7f\u3063\u3066\u306a\u3044\u306e\u3067\u77ed\u304f\u307e\u3068\u307e\u3063\u3066\u3044\u308b\u3051\u3069\u3001\u4eca\u5f8c\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u304c\u7d61\u3093\u3067\u6765\u308b\u3068\u307e\u3063\u305f\u304f\u5225\u306e\u9280\u6cb3\u7cfb\u307f\u305f\u3044\u306a\u8a71\u306b\u306a\u308b\u3093\u3060\u308d\u3046\u306a\u3042\u3063\u3066\u601d\u3046\u3002<\/p>\n
\u4eca\u56de\u306eiptables\u306e\u8a2d\u5b9a<\/p>\n
# iptables-setting\r\n*nat\r\n:PREROUTING ACCEPT [0:0]\r\n:POSTROUTING ACCEPT [0:0]\r\n:OUTPUT ACCEPT [0:0]\r\n-A POSTROUTING -s 192.168.24.0\/24 -o eth0 -j MASQUERADE\r\nCOMMIT\r\n#\r\n#\r\n*filter\r\n:INPUT ACCEPT [0:0]\r\n:FORWARD ACCEPT [0:0]\r\n:OUTPUT ACCEPT [0:0]\r\n-A FORWARD -s 192.168.24.0\/24 -i eth1 -o eth0 -j ACCEPT\r\n-A OUTPUT -d 10.0.0.0\/8 -o eth0 -j DROP\r\n-A OUTPUT -d 176.16.0.0\/12 -o eth0 -j DROP\r\n-A OUTPUT -d 192.168.0.0\/16 -o eth0 -j DROP\r\n-A OUTPUT -d 127.0.0.0\/8 -o eth0 -j DROP\r\n:RH-Firewall-1-INPUT - [0:0]\r\n-A INPUT -j RH-Firewall-1-INPUT\r\n-A FORWARD -j RH-Firewall-1-INPUT\r\n-A RH-Firewall-1-INPUT -i lo -j ACCEPT\r\n-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT\r\n-A RH-Firewall-1-INPUT -p 50 -j ACCEPT\r\n-A RH-Firewall-1-INPUT -p 51 -j ACCEPT\r\n-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT\r\n-A RH-Firewall-1-INPUT -d 192.168.24.0\/24 -j ACCEPT\r\n-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT\r\n-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT\r\n-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT\r\n#-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT\r\n-A RH-Firewall-1-INPUT\u00a0 -m state --state NEW -m tcp -p tcp --dport 10022 -j ACCEPT\r\n-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited\r\nCOMMIT<\/pre>\n
 <\/p>\n
        
Tweet<\/a><\/div><\/div>\n
\n","protected":false},"excerpt":{"rendered":"
\u305f\u3076\u3093\u56f3\u3067\u66f8\u304b\u306a\u3044\u3068\u5206\u304b\u308a\u306b\u304f\u3044\u3068\u601d\u3046\u306e\u3067\u3001YAMAHA\u306e\u30d5\u30ea\u30fc\u30a2\u30a4\u30b3\u30f3\u3092\u4f7f\u3063\u3066\u69cb\u6210\u56f3\u3092\u4f5c\u3063\u3066\u307f\u307e\u3057\u305f\u3002 \u624b\u4f5c\u308a\u611f\u305f\u3063\u3077\u308a\u306b\u4ed5\u4e0a\u304c\u3063\u3066\u3044\u307e\u3059\u3002 \u30ed\u30fc\u30ab\u30ebIP\u306f\u30d5\u30ec\u30c3\u30c4\u3067\u4f7f\u3063\u3066\u3044\u308b\u30af\u30bb\u3067\u7121\u610f\u8b58\u306b\u4ed8\u3051\u3066\u307e\u3057\u305f\u3002 \u4eca\u306f\u554f\u984c\u306a\u304f … “\u30b5\u30fc\u30d0\u30fc2\u53f0\u3067\u69cb\u6210\u3092\u4f5c\u3063\u3066\u307f\u305f” \u306e<\/span>\u7d9a\u304d\u3092\u8aad\u3080<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-2840","post","type-post","status-publish","format-standard","hentry","category-server"],"_links":{"self":[{"href":"https:\/\/www.vincentina.net\/index.php?rest_route=\/wp\/v2\/posts\/2840","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.vincentina.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.vincentina.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.vincentina.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.vincentina.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2840"}],"version-history":[{"count":0,"href":"https:\/\/www.vincentina.net\/index.php?rest_route=\/wp\/v2\/posts\/2840\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.vincentina.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2840"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.vincentina.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2840"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.vincentina.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2840"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}