Sziasztok!
A kovetkezo problemam. Adott egy webserver amit egy zorp 2.0-as ved. Kulon gep, keresztkabellel osszekotve.
Kintrol tokeletesen latszik a webserver, es megy is ra az ssh, de a webserverrol is kellene a web. (frissites, patch, stb).
Mit rontottam el? a masik, van valami termeszetes oka, h nagyon lassan epul fel a kapcsolat? utana mar rendben muxik.
Kernem a lista szives segitseget, mert lassan mar alig marad hajam...
Mellekelten kuldenem a konfigokat. Bocsanat a level hosszusagaaert!
Koszi!
Szabek
=====policy.py===========
from Zorp.Core import *
from Zorp.Http import *
from Zorp.Plug import *
InetZone('internet', ['0.0.0.0/0'],
inbound_services=[
"OutgoingRequest",
"HTTP"],
outbound_services=[
"HTTP",
"sshTOweb"])
InetZone('Intranet', ['192.168.0.0/24'],
inbound_services=[])
InetZone('Webserver', ['192.168.0.10/32'],
inbound_services=[
"HTTP",
"sshTOweb"],
outbound_services=[
"OutgoingRequest",
"HTTP"],
admin_parent='Intranet')
def HTTP() :
Service(name="HTTP", proxy_class=HttpProxy, router=DirectedRouter(dest_addr=SockAddrInet('192.168.0.
10', 80), forge_addr=TRUE))
Listener(bindto=SockAddrInet('100.100.100.100', 80), service="HTTP", backlog=255)
def outgoingRequest() :
Service(name="OutgoingRequest", proxy_class=HttpProxy, router=TransparentRouter(forge_addr=TRUE))
Listener(bindto=SockAddrInet('192.168.0.5', 80), service="OutgoingRequest", backlog=255)
def sshTOweb() :
Service(name="sshTOweb", proxy_class=PlugProxy, router=DirectedRouter(dest_addr=SockAddrInet('192.16
8.0.10', 22), forge_addr=TRUE))
Listener(bindto=SockAddrInet('100.100.100.100', 2222), service="sshTOweb", backlog=255)
=======================
instances.conf
=======================
HTTP --autobind-ip 1.2.3.4 --policy /etc/zorp/policy.py
outgoingRequest --autobind-ip 1.2.3.4 --policy /etc/zorp/policy.py
sshTOweb --autobind-ip 1.2.3.4 --policy /etc/zorp/policy.py
=============
iptables.in
=============
-A INPUT -m state --state NEW -p tcp --dport 80 -j ACCEPT
-A INPUT -m state --state NEW -p tcp --dport 2222 -j ACCEPT
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p tcp --syn --dport 22 -j ACCEPT
-A INPUT -p tcp --syn --dport 1310:1320 -j ACCEPT