RaQ?????????

1
RaQ?????????

• (?)???????
• RS??? ????G ?? ?

2
????????????

• ??????????
• TCP/IP????
• ?????????????
• ipchains????????????????
• Tcpwrappers?????????

3
??????????

• ??????????
• ??????????????????????
• OCN?128kbps??????????portscan???
• Cobalt??????????
• ??????????????????
• POP3??FTP???????????
• ??????????????????
• ??LAN?Internet????
• ????????????????????

4
?????????

• TCP/IP???UDP/IP???????????
• ?????????????????????????
• ?ipchains(linux 2.2),ipf(BSD,Solaris)??
• Kernel??????????????????
• ???????
• ?????????????????????
• ???????????????????????(squid,???)
• ????????????????????
• ????????
• ???????????????????
• ???????????????????
• ??2???????????????????

5
??????????

• ???????????
• SonicWall??
• ???????????????
• Linux,FreeBSD,Solaris,Windows2000
• ????????
• Sendmail,Apache,TcpWrappers,Squid
• ???????????????????????

6
TCP/IP???????

• ??????PC?????????????
• ???????Netscape?????????????(1028?????)?
• ????IP????192.168.0.3?????1028????IP????192.168.0.
  1?????80???????????
• ?????80??????????Apache?????????
• ???????????????????????
• ????????
• netstat na????????????????

7
??????????
input
output
ACCEPT
REJECT DENY
REJECT DENY
forward
REJECT DENY
8
Ipchains????

• ????????????
• http//www.cobaltresq.com/rpms/ipchains-1.3.10-uC1
  .i386.rpm
• http//www.cobaltresq.com/pkg/RaQ3-Unofficial-2002
  0901.pkg
• Cobalt????????????????????????
• RPM???ssh??????rpm??????????

9
ipchains??????????
10
ipchains????

• ???????????
• ipchains F
• ipchains A input s 0/0 d ! 127.0.0.1 81 p tcp
  j REJECT
• ipchains A input s 10.0.3.0/24 d 10.0.3.40 110
  \
• p tcp j DENY
• ipchains L
• ipchains-save v gt /etc/sysconfig/ipchains
• ??????????????????????????????????!

11
TCP-Wrappers

• ???????????????????
• inetd?????????
• ???????libwrap????????????
• vi /etc/hosts.allow
• ????? IP ???????????? ????
• ALL 127.0.0.1/255.255.255.255 allow
• sshd 210.196.148.245 allow
• sshd 210.189.91.94/255.255.255.192 allow
• sshd ALL deny
• pop-3 ALL allow