{"id":280218,"date":"2021-01-14T06:59:17","date_gmt":"2021-01-13T22:59:17","guid":{"rendered":"http:\/\/4563.org\/?p=280218"},"modified":"2021-01-14T06:59:17","modified_gmt":"2021-01-13T22:59:17","slug":"%e5%ae%b6%e9%87%8c%e7%bd%91%e7%bb%9c%e8%ae%be%e7%bd%ae%e4%ba%86%e6%97%81%e8%b7%af%e7%94%b1%e5%90%8e%ef%bc%8c-openvpn-%e8%bf%9e%e8%bf%9b%e6%9d%a5%ef%bc%8c%e5%8f%af%e4%bb%a5-ping%ef%bc%8c%e4%bd%86","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=280218","title":{"rendered":"\u5bb6\u91cc\u7f51\u7edc\u8bbe\u7f6e\u4e86\u65c1\u8def\u7531\u540e\uff0c OpenVPN \u8fde\u8fdb\u6765\uff0c\u53ef\u4ee5 ping\uff0c\u4f46\u662f\u65e0\u6cd5\u6b63\u5e38\u8fde\u63a5\u4f55\u6545\uff1f"},"content":{"rendered":"
\n
\n
\n

\u5bb6\u91cc\u7f51\u7edc\u8bbe\u7f6e\u4e86\u65c1\u8def\u7531\u540e\uff0c OpenVPN \u8fde\u8fdb\u6765\uff0c\u53ef\u4ee5 ping\uff0c\u4f46\u662f\u65e0\u6cd5\u6b63\u5e38\u8fde\u63a5\u4f55\u6545\uff1f <\/h1>\n

<\/p>\n

\n
\u8cc7\u6df1\u5927\u4f6c : nozer <\/span> <\/i> 2<\/span> <\/div>\n
<\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n
<\/p>\n

\u8def\u7531\u914d\u7f6e\u60c5\u51b5\u5982\u56fe\uff0c\u6211\u5e0c\u671b PC1 \u4e5f\u80fd\u591f\u6b63\u5e38\u8bbf\u95ee\uff1a<\/p>\n

\"\u5bb6\u91cc\u7f51\u7edc\u8bbe\u7f6e\u4e86\u65c1\u8def\u7531\u540e\uff0c<\/p>\n

\u6709\u6ca1\u6709\u61c2\u7684\uff0c\u6307\u70b9\u6307\u70b9\uff0c\u4e0d\u77e5\u9053\u5982\u4f55\u4e0b\u624b\u3002<\/p>\n<\/p><\/div>\n

\u5927\u4f6c\u6709\u8a71\u8aaa<\/b> (26<\/span>) <\/div>\n
<\/div>\n<\/p><\/div>\n<\/p><\/div>\n
    \n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : UnknownSky <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u4f60\u9019 openvpn server \u76f4\u63a5\u639b\u5728 Openwrt \u4e0a\u4e0d\u5f97\u4e86 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : UnknownSky <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u4e3b\u8def\u7531\u4ec0\u9ebc\u7cfb\u7d71\uff0c\u5efa server \u4e5f\u8981 iptables NAT \u898f\u5247\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : ztechstack <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    openvpn \u670d\u52a1\u7aef\u9700\u8981\u865a\u62df\u51fa\u4e00\u4e2a\u7f51\u7edc\uff0c\u9700\u8981 iptables \u6307\u5b9a source \u4e3a\u6539\u7f51\u7edc\u7684\u8f6c\u53d1\u5230\u7269\u7406\u7f51\u5361\u4e0a\u3002
    iptables -t nat -A POSTROUTING -s x.x.x.x\/x -o eth0 -j MASQURADE <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : Jirajine <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u4f60\u8fd9\u914d\u7684\u4e71\u4e03\u516b\u7cdf\uff0c\u65c1\u8def\u7531\u4e0a\u5f00 masquerade \u662f\u8981\u641e\u4ec0\u4e48\uff1f
    \u76f2\u731c hairpin nat \u7684\u95ee\u9898\uff0c \u628a masquerade \u53bb\u6389\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : nozer <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @Jirajine \uff1f \u6211\u611f\u89c9\u7ebf\u8def\u5f88\u6e05\u6670\u554a\uff0c\u54ea\u91cc\u4e71\u4e86\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : nozer <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @Jirajine \u53bb\u6389\u7684\u8bdd\u65e0\u6cd5\u6b63\u5e38\u4e0a\u7f51\u4e86\uff0c <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : huangya <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    openvpn client \u865a\u62df\u7f51\u5361\u62ff\u5230\u7684 IP \u4e5f\u662f 192.168.2.0\/24 \u7f51\u6bb5\u5417\uff1f <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : huangya <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u53e6\u5916\uff0c\u5728 openvpn client \u865a\u62df\u7f51\u5361\u4e0a\u6293\u4e0b ssh \u6216\u8005 web \u670d\u52a1\u81f3\u5c11\u6709\u6ca1\u6709\u4e09\u6b21\u63e1\u624b\u7684\u5305\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : nozer <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @huangya vpn client \u7684\u865a\u62df\u7f51\u5361\u7f51\u6bb5\u662f\uff1a10.8.0.0\/24 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : huangya <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @nozer
    \u5728 PC1 \u4e0a\u6dfb\u52a0\u4e00\u6761\u5230 10.8.0.0\/24 \u7684\u9759\u6001\u8def\u7531.linux \u4e0b\u7684\u547d\u4ee4:
    sudo route add -net 10.8.0.0\/24 gw 192.168.2.1<\/p>\n

    Windows \u7528\u7ba1\u7406\u5458\u6743\u9650\u6253\u5f00 cmd:
    route add mask 255.255.255.0 192.168.2.1 <\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : huangya <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @huangya
    \u66f4\u6b63\uff1a
    Windows \u7528\u7ba1\u7406\u5458\u6743\u9650\u6253\u5f00 cmd:
    route add 10.8.0.0 mask 255.255.255.0 192.168.2.1 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : nozer <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @huangya \u8c22\u8c22\u6211\u8bd5\u8bd5\u770b\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : jasonyang9 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u778e\u731c\u7684\uff0c
    PC1 \u7684\u9ed8\u8ba4\u7f51\u5173\u662f 192.168.2.2 \u65c1\u8def\u7531\uff0c\u6240\u4ee5\u5bf9 10.8.0.0\/24 \u53d1\u6765\u7684\u6570\u636e\u5305\u5b83\u4e0d\u77e5\u9053\u5982\u4f55\u8fd4\u56de\u5c31\u8d70\u9ed8\u8ba4\u7f51\u5173\uff1b
    \u65c1\u8def\u7531\u6536\u5230\u540e\u4e5f\u4e0d\u77e5\u9053\u5982\u4f55\u5230 10.8.0.0\/24\uff0c\u4e5f\u8d70\u5b83\u7684\u9ed8\u8ba4\u7f51\u5173\uff0c192.168.2.1\uff0c\u4e14\u88ab iptables \u5339\u914d\u5230\uff0c\u505a\u4e86 MASQ\uff0c\u4e5f\u5c31\u662f SNAT\uff0c\u90a3\u4e48\u6570\u636e\u5305\u7684\u6e90\u5730\u5740\u5c31\u88ab\u66ff\u6362\u4e3a\u65c1\u8def\u7531\u81ea\u5df1\u7684 192.168.2.2 \uff1b
    \u800c\u8bf7\u6c42\u6570\u636e\u5305\u7684\u76ee\u6807\u5730\u5740\u662f 192.168.2.10 \uff08 PC1 \uff09\uff0c\u54cd\u5e94\u5374\u662f\u4ece 192.168.2.2 \u6536\u5230\uff0c\u5c31\u88ab\u4e22\u6389\u4e86\u3002\u3002\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : nozer <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @jasonyang9 \u6211\u4e5f\u6709\u8fd9\u79cd\u731c\u6d4b\uff0c\u4f46\u662f\u4e0d\u77e5\u9053\u600e\u4e48\u5904\u7406\u3002 @huangya \u7684\u529e\u6cd5\u4e0d\u9519\uff0c\u6211\u8bd5\u8bd5\u770b\u5e94\u8be5\u80fd\u89e3\u51b3\u95ee\u9898\u3002<\/p>\n

    \u4f46\u662f\u5982\u679c\u80fd\u591f\u5728\u8def\u7531\u5668\u4e0a\u89e3\u51b3\u95ee\u9898\u5c31\u66f4\u597d\u4e86\uff0c\u90a3\u6837\u5c31\u4e0d\u7528\u5728 PC \u4e0a\u5355\u72ec\u914d\u7f6e\u3002 <\/p><\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : huangya <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @jasonyang9 yes, I think so. \u4e3b\u53ef\u4ee5\u7528 wireshark \u68c0\u67e5\u4e0b icmp \u5305\u548c tcp \u5305\u7684\u6e90\u5730\u5740\u3002\u6240\u4ee5\u6211\u63d0\u4f9b\u7684\u65b9\u6848\u662f vpn \u7f51\u6bb5\u76f4\u63a5\u8d70 192.168.2.1 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : nozer <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u6216\u8bb8\u5982 @Jirajine \u6240\u8bf4\uff0c\u53bb\u6389 MASQ \u5c31\u53ef\u4ee5\u4e86\uff0c\u4f46\u662f\u53bb\u6389 MASQ \u4f3c\u4e4e\u4f1a\u5bfc\u81f4\u6570\u636e\u5305\u5728 192.168.2.2 \u4e0a\u5faa\u73af\u5bfc\u81f4\u65e0\u6cd5\u6b63\u5e38\u4e0a\u7f51\u4e86\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : nozer <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @huangya \u55ef\u55ef\uff0c\u6211\u6293\u5305\u770b\u770b\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : huangya <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @nozer <\/p>\n

    >\u4f46\u662f\u5982\u679c\u80fd\u591f\u5728\u8def\u7531\u5668\u4e0a\u89e3\u51b3\u95ee\u9898\u5c31\u66f4\u597d\u4e86\uff0c\u90a3\u6837\u5c31\u4e0d\u7528\u5728 PC \u4e0a\u5355\u72ec\u914d\u7f6e\u3002<\/p>\n

    >\u6216\u8bb8\u5982 @Jirajine \u6240\u8bf4\uff0c\u53bb\u6389 MASQ \u5c31\u53ef\u4ee5\u4e86\uff0c\u4f46\u662f\u53bb\u6389 MASQ \u4f3c\u4e4e\u4f1a\u5bfc\u81f4\u6570\u636e\u5305\u5728 192.168.2.2 \u4e0a\u5faa\u73af\u5bfc\u81f4\u65e0\u6cd5\u6b63\u5e38\u4e0a\u7f51\u4e86\u3002<\/p>\n

    \u53ef\u4ee5\u5728 OpenWRT \u4e0a\u7528\u5982\u4e0b\u547d\u4ee4\u8bd5\u8bd5\u770b,\u8fd9\u79cd\u65b9\u6cd5\u6216\u8bb8\u4e5f\u53ef\u4ee5,\u8fd9\u6837\u5c31\u4e0d\u9700\u8981\u5728 PC \u4e0a\u5355\u72ec\u914d\u7f6e\u9759\u6001\u8def\u7531\u4e86.
    iptables -I nat 1 -s 10.8.0.0\/24 -j ACCEPT <\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : Lemeng <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u6293\u5305\u4e86\u89e3\u8d70\u5411\uff0c\u8d70\u5230\u54ea\u6b65\uff0c\u54ea\u6b65\u51fa\u4e86\u95ee\u9898 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : huangya <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @huangya @nozer
    \u6700\u8fd1\u603b\u662f\u6253\u9519\u547d\u4ee4<\/p>\n

    >\u53ef\u4ee5\u5728 OpenWRT \u4e0a\u7528\u5982\u4e0b\u547d\u4ee4\u8bd5\u8bd5\u770b,\u8fd9\u79cd\u65b9\u6cd5\u6216\u8bb8\u4e5f\u53ef\u4ee5,\u8fd9\u6837\u5c31\u4e0d\u9700\u8981\u5728 PC \u4e0a\u5355\u72ec\u914d\u7f6e\u9759\u6001\u8def\u7531\u4e86.
    >iptables -I nat 1 -s 10.8.0.0\/24 -j ACCEPT<\/p>\n

    ->
    iptables -t nat -I POSTROUTING 1 -s 10.8.0.0\/24 -j ACCEPT <\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : Jirajine <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u80fd ping \u901a\u662f\u56e0\u4e3a icmp \u81ea\u5e26 redirect\uff0c\u4e0d\u53d7 hairpin nat \u7684\u5f71\u54cd\u3002
    \u53bb\u6389 masquerade \u4e0d\u80fd\u4e0a\u7f51\u8bf4\u660e\u4f60\u914d\u7684\u6709\u95ee\u9898\uff0c\u68c0\u67e5\u9632\u706b\u5899\u548c\u5185\u6838 ip \u8f6c\u53d1\u5f00\u4e86\u6ca1\u3002
    \u65c1\u8def\u7531\u8fd9\u79cd\u65b9\u5f0f\u672c\u6765\u5c31\u662f ipv4 \u4e0b\u7684\u4e00\u79cd trick\uff0c\u8e29\u5751\u662f\u5f88\u6b63\u5e38\u7684\uff0c\u914d\u6210\u4e24\u7ea7\u4e3b\u5e72\u4e32\u8d77\u6765\u624d\u662f\u6b63\u7edf\u65b9\u5f0f\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : nozer <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @huangya \u5f88\u611f\u8c22\u3002PC \u4e0a\u8bbe\u7f6e\u9759\u6001\u8def\u7531\u53ef\u4ee5\u89e3\u51b3\u95ee\u9898\u3002 \u4f46\u662f\u8def\u7531\u5668\u4e0a\u8bbe\u7f6e iptables \u89c4\u5219\u6ca1\u4ec0\u4e48\u6548\u679c\u3002 \u6293\u5305\u6211\u4e5f\u6293\u4e86\u4e0b\uff0c\u4f46\u662f\u6c34\u5e73\u6709\u9650\u7814\u7a76\u4e0d\u51fa\u6765\u5565\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : huangya <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @nozer
    \u60f3\u4e86\u4e0b\uff0cOpenWRT \u4e0a\u7684\u8fd9\u6761\u547d\u4ee4\u8fd8\u662f\u6709\u95ee\u9898\uff0c\u5f53\u65f6\u8111\u62bd\u4e86\uff0c\u6539\u6210\u4ee5\u4e0b\u4f30\u8ba1\u5c31\u53ef\u4ee5\u4e86\u3002
    iptables -t nat -I POSTROUTING 1 -d 10.8.0.0\/24 -j ACCEPT <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : nozer <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @huangya \u771f\u7684\u53ef\u4ee5\u4e86\uff0c\u95ee\u9898\u89e3\u51b3\u3002\u539f\u56e0\u5e94\u8be5\u662f\u8ddf\u524d\u9762\u7684\u731c\u6d4b\u4e00\u81f4\uff0c\u4f46\u662f\u6211\u60f3\u8bf7\u6559\u4e0b\uff0c\u73b0\u5728\u7684\u89c4\u5219\u662f\u8fd9\u6837\u7684\uff1a
    iptables -t nat -A PREROUTING -p udp –dport 53 -j REDIRECT –to-ports 53
    iptables -t nat -A PREROUTING -p tcp –dport 53 -j REDIRECT –to-ports 53
    iptables -t nat -I POSTROUTING -j MASQUERADE
    iptables -t nat -I POSTROUTING 1 -d 10.8.0.0\/24 -j ACCEPT<\/p>\n

    \u5c31\u662f\u8bf4\uff0c\u53d1\u9001\u5230 10.8.0.0\/24 \u7684\u5305\u91c7\u7528\u7684\u52a8\u4f5c\u662f ACCEPT\uff0c\u4f46\u662f\u8fd9\u91cc\u5e76\u6ca1\u6709 return\uff0c\u4e3a\u4f55\u5c31\u53ef\u4ee5\u4ea7\u751f\u6548\u679c\u5462\uff1f
    iptables \u89c4\u5219\u7684\u5339\u914d\u4e0d\u662f\u4ece\u524d\u5230\u540e\u4f9d\u6b21\u5339\u914d\uff0c\u9664\u975e\u65e0\u6cd5\u5339\u914d\uff0c\u6216\u8005 return \u624d\u4f1a\u7ec8\u6b62\u5339\u914d\u540e\u9762\u7684\u89c4\u5219\u3002<\/p>\n

    \u8fd9\u4e2a\u5730\u65b9\uff0cACCEPT \u540e\uff0c\u5e76\u6ca1\u6709 return\uff0c\u90a3\u4e0d\u662f\u6700\u540e\u8fd8\u662f\u4f1a\u5339\u914d\u5230 MASQUERADE \u4e0a\u53bb\uff0c\u5bfc\u81f4\u6570\u636e\u5305\u6e90\u5730\u5740\u53d1\u751f\u6539\u53d8\uff1f <\/p><\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : huangya <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u4e0d\u4f1a\uff0cACCEPT \u540e\u8fd9\u4e2a\u5305\u5c31\u5728 chain POSTROURING \u4e0d\u4f1a\u7ee7\u7eed\u8dd1\u4e86\uff0c\u4e0d\u4f1a\u5230\u4e0b\u4e00\u6761 rule MASQUERADE \u4e2d.
    ACCEPT \u4e0e RETURN \u7684\u533a\u522b\u53ef\u4ee5\u770b:<\/p>\n

    https:\/\/ipset.netfilter.org\/iptables.man.html#:~:text=ACCEPT%20means%20to%20let%20the,the%20previous%20(calling)%20chain.<\/p>\n

    >ACCEPT means to let the packet through. DROP means to drop the packet on the floor. RETURN means stop traversing this chain and resume at the next rule in the previous (calling) chain. If the end of a built-in chain is reached or a rule in a built-in chain with target RETURN is matched, the target specified by the chain policy determines the fate of the packet. <\/p>\n

    \u5173\u952e\u70b9\u6709\u4e24\u4e2a:
    1.RETRUN \u662f\u8fd4\u56de\u5230 calling chain.\u7136\u540e\u7ee7\u7eed\u5339\u914d\u4e0b\u4e00\u6761 rule.
    2.ACCEPT \u662f\u76f4\u63a5\u63a5\u53d7\u4e86\uff08\u5728 build-in chain \u6216\u8005\u5b50 chain \uff09\uff0c\u90a3 build-in chain \u548c build-in chain call \u7684\u5b50 chain \u4e2d\u7684 rule \u90fd\u4e0d\u4f1a\u5339\u914d\u4e86\u3002<\/p>\n

    \u53e6\uff0c\u8c03\u8bd5 iptables \u53ef\u4ee5\u7528-j LOG \u770b\u5305\u662f\u5982\u4f55\u8dd1\u7684\u3002 <\/p><\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : nozer <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @huangya \u592a\u611f\u8c22\u4e86! \u641e\u61c2\u4e86\uff0c\u8c22\u8c22\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n","protected":false},"excerpt":{"rendered":"

    \u5bb6\u91cc\u7f51\u7edc\u8bbe\u7f6e\u4e86\u65c1\u8def\u7531\u540e\uff0c Open…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/280218"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=280218"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/280218\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=280218"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=280218"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=280218"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}