ÀÌÀü ÁÖÁ¦ º¸±â :: ´ÙÀ½ ÁÖÁ¦ º¸±â |
±Û¾´ÀÌ |
¸Þ½ÃÁö |
±âµÕ ¼Õ´Ô
|
¿Ã·ÁÁü: 2003.10.17 ±Ý, 12:55 pm ÁÖÁ¦: ¸®´ª½º »çÀÌÀÇ ÇÁ¸°ÅÍ ¿¬°á ¹æ¹ý¿¡ ¾î¶²°ÍÀÌ ÀÖ½À´Ï±î ? |
|
|
À̹ø¿¡ ¿¬±¸½Ç ÄÄÇ»ÅÍ ¹èÄ¡¸¦ ¹Ù²Ù¸é¼.
³î°í Àִ ȨÆäÀÌÁö ¼¹ö(·¹µåÇÞ9.0)¿¡ ÇÁ¸°Å͸¦ ´Þ¾Ò½À´Ï´Ù.
À©µµ¿ì2000¿¡¼´Â »ï¹Ù¸¦ ÀÌ¿ëÇÏ¿©.
ÇÁ¸°ÅÍ ¼³Á¤À» Àß ÇÏ¿´°í.. Áö±Ýµµ Àß »ç¿ëÇÏ°í ÀÖ½À´Ï´Ù.
À©µµ¿ì¿¡¼ ¸®´ª½º ÇÁ¸°ÅÍ ·Î , ¸®´ª½º¿¡¼ À©µµ¿ì ÇÁ¸°Åͷδ ¼³¸íµµ ¸¹°í.
¹®¼µµ ¸¹Àºµ¥.
¸®´ª½º¿¡¼ ¸®´ª½º ÇÁ¸°ÅÍ´Â ¾îÂî ÇØ¾ß ÇÏ´Â Áö..
¹®¼¸¦ ºÁµµ.. ¿À·¡µÈ ¼³Á¤ »ÓÀ̳׿ä..
¼ÖÁ÷È÷ ¹«½¼ ¸»ÀÎÁö Àß ¸ð¸£°Ú½À´Ï´Ù. ¤Ì¤Ì;
¸®´ª½º »çÀÌÀÇ ³×Å©¿öÅ© ÇÁ¸°ÅÍ ¿¬°á ÇÏ´Â ¹æ¹ý Á» ¾Ë·Á ÁÖ¼¼¿ä. |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
truefeel Ä«Æä °ü¸®ÀÚ
°¡ÀÔ: 2003³â 7¿ù 24ÀÏ ¿Ã¸° ±Û: 1277 À§Ä¡: ´ëÇѹα¹
|
¿Ã·ÁÁü: 2003.10.17 ±Ý, 5:43 pm ÁÖÁ¦: Re: ¸®´ª½º°£ÀÇ ÇÁ¸°ÅÍ ¿¬°á ¹æ¹ý |
|
|
±âµÕ ¾¸: | À̹ø¿¡ ¿¬±¸½Ç ÄÄÇ»ÅÍ ¹èÄ¡¸¦ ¹Ù²Ù¸é¼.
³î°í Àִ ȨÆäÀÌÁö ¼¹ö(·¹µåÇÞ9.0)¿¡ ÇÁ¸°Å͸¦ ´Þ¾Ò½À´Ï´Ù.
À©µµ¿ì2000¿¡¼´Â »ï¹Ù¸¦ ÀÌ¿ëÇÏ¿©.
ÇÁ¸°ÅÍ ¼³Á¤À» Àß ÇÏ¿´°í.. Áö±Ýµµ Àß »ç¿ëÇÏ°í ÀÖ½À´Ï´Ù.
À©µµ¿ì¿¡¼ ¸®´ª½º ÇÁ¸°ÅÍ ·Î , ¸®´ª½º¿¡¼ À©µµ¿ì ÇÁ¸°Åͷδ ¼³¸íµµ ¸¹°í.
¹®¼µµ ¸¹Àºµ¥.
¸®´ª½º¿¡¼ ¸®´ª½º ÇÁ¸°ÅÍ´Â ¾îÂî ÇØ¾ß ÇÏ´Â Áö..
¹®¼¸¦ ºÁµµ.. ¿À·¡µÈ ¼³Á¤ »ÓÀ̳׿ä..
¼ÖÁ÷È÷ ¹«½¼ ¸»ÀÎÁö Àß ¸ð¸£°Ú½À´Ï´Ù. ¤Ì¤Ì;
¸®´ª½º »çÀÌÀÇ ³×Å©¿öÅ© ÇÁ¸°ÅÍ ¿¬°á ÇÏ´Â ¹æ¹ý Á» ¾Ë·Á ÁÖ¼¼¿ä. |
redhat-config-printer À» ÀÌ¿ëÇϸé GUIȯ°æ¿¡¼ ½±°Ô ¼³Á¤ °¡´ÉÇÕ´Ï´Ù.
·¹µåÇÞ¿¡¼ ¸¸µç 'Red Hat Linux 9: Red Hat Linux »ç¿ëÀÚ Á¤ÀÇ °¡À̵å' Áß
27Àå . ÇÁ¸°ÅÍ ¼³Á¤ ºÎºÐÀ» Àо¼¼¿ä.
* 27Àå . ÇÁ¸°ÅÍ ¼³Á¤
http://coffeenix.net/doc/RH-DOCS/rhl-cg-ko-9/ch-printing.html
* 27.3. ¿ø°Ý UNIX (LPD) ÇÁ¸°ÅÍ Ãß°¡Çϱâ
http://coffeenix.net/doc/RH-DOCS/rhl-cg-ko-9/s1-printing-lpd-printer.html
ÇÁ¸°ÅÍ°¡ ¼³Ä¡µÈ ¸®´ª½º´Â ÀϹÝÀûÀÎ ¼³Ä¡¹æ¹ý´ë·Î ¼³Á¤À» ÇÏ°í
¿ø°Ý¿¡¼ »ç¿ëÇÒ ¸®´ª½º´Â ¿ø°ÝÀÇ ¼¹ö¸í°ú ¿ø°Ý ÇÁ¸°¼ºñ½º¸íÀ» ÀÔ·ÂÇÏ¸é µË´Ï´Ù.
ÀÌ·± ÇüÅ·ΠÇϸé Áý¿¡¼
SMB(ÀÌ·² ¶§´Â IP, PC¸í°ú ÇÁ¸°Å͸í, ÀÛ¾÷±×·ì¸í ÇÊ¿ä)¿Í
LPD ¼³Á¤À» ÅëÇØ È¸»çÀÇ ÇØ´ç ÇÁ¸°ÅÍ ¼¹ö(¹°·Ð ¿ÜºÎ¿¡¼ Á¢±Ù °¡´ÉÇÑ IP)·Î Ãâ·ÂÀ» º¸³¾ ¼ö ÀÖ½À´Ï´Ù.
* Áý - ¸®´ª½º
* ȸ»ç - ¸®´ª½º, À©µµ, HPÀÇ Jet Direct
Âü°í·Î ÇÁ¸°ÅÍ°¡ ¼³Ä¡µÈ ¼¹ö´Â
lpd°¡ »ç¿ëÇÏ´Â TCP/UDP 515Æ÷Æ®°¡ ¿·ÁÀÖ¾î¾ß ÇÕ´Ï´Ù. |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
±âµÕ ¼Õ´Ô
|
¿Ã·ÁÁü: 2003.10.17 ±Ý, 8:32 pm ÁÖÁ¦: ¹®Á¦°¡ Á¶±Ý ÀÖ¾î¿ä... |
|
|
½ÇÇè½Ç ÄÄÇ»ÅÍÁß¿¡ ¼¹ö¿ëÀ¸·Î ¾²´Â °Í¸¸ ·¹µåÇÞ 9.0ÀÌ°í ´Ù¸¥ ÄĵéÀº 8.0ÀÌ¿¹¿ä.
»çÁ¤»ó 8.0À» ¾²°í Àִµ¥, ·¹µåÇÞ8.0¿¡´Â cups°¡ ¾È ±ò¸®³»¿ä...
À©µµ¿ì¸¦ ¾²´Â Äĵµ ÀÖ¾î¼ cups¸¦ »ç¿ëÇØ¾ß Çϴµ¥ 8.0ÀÇ ÇÁ¸°ÅÍ ´ë±â¿ À¯Çü¿¡´Â
cups°¡ »ý¼ºµÇÁú ¾Ê½À´Ï´Ù...
ÁÁÀº ´äº¯ ºÎŹµå¸±²²¿ä... |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
truefeel Ä«Æä °ü¸®ÀÚ
°¡ÀÔ: 2003³â 7¿ù 24ÀÏ ¿Ã¸° ±Û: 1277 À§Ä¡: ´ëÇѹα¹
|
¿Ã·ÁÁü: 2003.10.17 ±Ý, 10:50 pm ÁÖÁ¦: Re: 8.0À̶ó¸é cupsºÎÅÍ ¼³Ä¡¸¦... |
|
|
±âµÕ ¾¸: | ½ÇÇè½Ç ÄÄÇ»ÅÍÁß¿¡ ¼¹ö¿ëÀ¸·Î ¾²´Â °Í¸¸ ·¹µåÇÞ 9.0ÀÌ°í ´Ù¸¥ ÄĵéÀº 8.0ÀÌ¿¹¿ä.
»çÁ¤»ó 8.0À» ¾²°í Àִµ¥, ·¹µåÇÞ8.0¿¡´Â cups°¡ ¾È ±ò¸®³»¿ä...
À©µµ¿ì¸¦ ¾²´Â Äĵµ ÀÖ¾î¼ cups¸¦ »ç¿ëÇØ¾ß Çϴµ¥ 8.0ÀÇ ÇÁ¸°ÅÍ ´ë±â¿ À¯Çü¿¡´Â
cups°¡ »ý¼ºµÇÁú ¾Ê½À´Ï´Ù...
ÁÁÀº ´äº¯ ºÎŹµå¸±²²¿ä... |
8.0À̶ó¸é cups¸¦ ¼³Ä¡ÇÏ°í redhat-config-printer´ë½Å cupsconfig·Î ¼³Á¤Çϼ¼¿ä.
1. cups ¼³Ä¡
https://rhn.redhat.com/errata/RHSA-2003-171.html ¿¡¼
redhat 8.0ÀÇ cups, cups-libsÀ» ¹Þ¾Æ ¼³Ä¡Çϼ¼¿ä.
2. cupsd µ¥¸ó ½ÇÇà
/etc/rc.d/init.d/cups start
3. ¼³Á¤
1) cupsconfig À» ½ÇÇàÇϰųª
À¥ºê¶ó¿ìÀú¸¦ ¶ç¿ì°í http://localhost:631/ ¿¡ Á¢¼ÓÇÕ´Ï´Ù. ID´Â root°ÍÀ¸·Î ÇϸéµË´Ï´Ù.
2) printers·Î °£ ÈÄ add print
3) Name(ÇÁ¸°ÅÍ ¼ºñ½º¸í), Location µîÀ» ÀÔ·ÂÇÕ´Ï´Ù.
4) Device ¿¡¼´Â ipp¸¦ ¼±ÅÃÇؼ ÇÁ¸°ÅÍ °æ·Î¸¦ ½áÁÖ¼¼¿ä.
5) /etc/cups/printers.conf¿¡ ¼³Á¤ °á°ú°¡ ÀÖ½À´Ï´Ù.
4. Å×½ºÆ®
ÇØ´ç ÇÁ¸°ÅÍ°¡ »ý¼ºµÆÀ¸¸é 'print test page'¸¦ Ŭ¸¯Çؼ Çغ¸¼¼¿ä.
lpr ´ë½Å lpr.cups, lpq ´ë½Å lpq.cups ó·³ ¸í·É¿¡ .cups ºÙ´Â °Ç ¾Æ½ÃÁÒ?
¿À·ù ¸Þ½ÃÁö´Â /var/log/cups ¿¡¼ È®ÀÎÇÏ¸é µË´Ï´Ù. |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
belle ¼Õ´Ô
|
¿Ã·ÁÁü: 2003.10.20 ¿ù, 10:46 am ÁÖÁ¦: ´äº¯ °í¸¿½À´Ï´Ù. |
|
|
³Ê¹« °í¸¿½À´Ï´Ù.
¼º°øÇÏ°í¾ß ¸»¾Ò½À´Ï´Ù. ¾ßÈ£! ^^
´ã¿¡ ¶Ç Àß ¾È µÇ´Â °ÍµéÀÌ ÀÖÀ¸¸é Áú¹® µå¸±²²¿ä...
³¯¾¾°¡ Â÷³×¿ä~ °Ç° À¯ÀÇÇϽðí Áñ°Å¿î ÇÏ·ç µÇ½Ã±æ ¹Ù·¡¿ä~~ |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
±âµÕ ¼Õ´Ô
|
¿Ã·ÁÁü: 2003.10.20 ¿ù, 7:09 pm ÁÖÁ¦: Æ÷Æ® ¿©´Â ¹ý È®ÀÎ ºÎŹµå¸³´Ï´Ù. |
|
|
À§¿¡ ¼º°øÇß´Ù°í ¾´ »ç¶÷Àº ¿ì¸® ¿¬±¸½Ç ÈĹèÀÔ´Ï´Ù.
±×·±µ¥ ¼±¹èÀÎ Àú´Â ½ÇÆÐÇ߳׿ä.. ¤Ì¤Ì
Æ÷Æ®°¡ ¾È ¿·Á ÀÖ¾ú¾î..
# iptables -A INPUT -p tcp --source-port 515 -j ACCEPT
# iptables -A INPUT -p udp --source-port 515 -j ACCEPT
# iptables -A OUTPUT -p tcp --source-port 515 -j ACCEPT
# iptables -A OUTPUT -p udp --source-port 515 -j ACCEPT
ÀÌ·¸°Ô Çߴµ¥µµ.. Æ÷Æ®°¡ ¾È ¿¸®³×¿ä.
Á¦°¡ ¸í·É¾î¸¦ À߸ø »ç¿ëÇÑ °ÍÀÎÁö¿À ?
È®ÀÎ ¹Ù¶ø´Ï´Ù.
¾ðÁ¦³ª °¨»çÇÕ´Ï´Ù. |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
truefeel Ä«Æä °ü¸®ÀÚ
°¡ÀÔ: 2003³â 7¿ù 24ÀÏ ¿Ã¸° ±Û: 1277 À§Ä¡: ´ëÇѹα¹
|
¿Ã·ÁÁü: 2003.10.20 ¿ù, 7:40 pm ÁÖÁ¦: Re: cups Æ÷Æ® ¿©´Â ¹ý (iptables) |
|
|
±âµÕ ¾¸: | À§¿¡ ¼º°øÇß´Ù°í ¾´ »ç¶÷Àº ¿ì¸® ¿¬±¸½Ç ÈĹèÀÔ´Ï´Ù.
±×·±µ¥ ¼±¹èÀÎ Àú´Â ½ÇÆÐÇ߳׿ä.. ¤Ì¤Ì
Æ÷Æ®°¡ ¾È ¿·Á ÀÖ¾ú¾î..
# iptables -A INPUT -p tcp --source-port 515 -j ACCEPT
# iptables -A INPUT -p udp --source-port 515 -j ACCEPT
# iptables -A OUTPUT -p tcp --source-port 515 -j ACCEPT
# iptables -A OUTPUT -p udp --source-port 515 -j ACCEPT
ÀÌ·¸°Ô Çߴµ¥µµ.. Æ÷Æ®°¡ ¾È ¿¸®³×¿ä.
Á¦°¡ ¸í·É¾î¸¦ À߸ø »ç¿ëÇÑ °ÍÀÎÁö¿À ?
È®ÀÎ ¹Ù¶ø´Ï´Ù.
¾ðÁ¦³ª °¨»çÇÕ´Ï´Ù. |
ÈĹèÇÑÅ× ¹°¾îº¸±â´Â Á»???
cups´Â 631Æ÷Æ®(ipp)¸¦ »ç¿ëÇÕ´Ï´Ù.
µû¶ó¼ ÇÁ¸°ÅÍ°¡ ¼³Ä¡µÈ ¼¹ö¿¡¼´Â µé¾î¿À´Â dest port°¡ 631ÀÎ °ÍÀ» Çã¿ëÇÏ¸é µÉ µí.
(-s IP´Â Çã¿ëÇÒ ¿ø°ÝÁö IP ¶Ç´Â ¼ºê³Ý. 192.168.1.1 ¶Ç´Â 192.168.1.0/24 Çü½Ä)
iptables -A INPUT -s IP¶Ç´Â¼ºê³Ý -p tcp --dport 631 -j ACCEPT
iptables -A INPUT -s IP¶Ç´Â¼ºê³Ý -p udp --dport 631 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 631 -j ACCEPT
iptables -A OUTPUT -p udp --sport 631 -j ACCEPT
¿ø°ÝÁö(ÇÁ¸°ÅÍ°¡ ¾ø´Â) ¼¹ö¿¡¼´Â ³ª°¡´Â Æ÷Æ®¸¦ ¿¾îÁÖ¼¼¿ä.
(Æ÷Æ® 631·Î µé¾î¿À´Â °Íµµ ÇÊ¿äÇÒÁöµµ ¸ô¶ó ´õ Àû¾ú½À´Ï´Ù.)
(-s IP´Â ÇÁ¸°ÅÍ ¼¹ö IP)
iptables -A INPUT -s IP -p tcp --sport 631 -j ACCEPT
iptables -A INPUT -s IP -p udp --sport 631 -j ACCEPT
iptables -A OUTPUT -p tcp --dport 631 -j ACCEPT
iptables -A OUTPUT -p udp --dport 631 -j ACCEPT
±Ùµ¥, ³ª°¡´Â °ÍÀº º¸Åë ACCEPT·Î Çصδ °æ¿ì°¡ ¸¹½À´Ï´Ù.
À§ÀÇ OUTPUT ·ê¼Â Àü¿¡ iptables -L -n À¸·Î OUTPUT Á¤Ã¥ÀÌ ACCEPTÀÌ°í
º°´Ù¸¥ REJECT, DROP·êÀÌ ¾ø´Ù¸é OUTPUT¿¡ ´ëÇؼ´Â ÇÒ ÇÊ¿ä°¡ ¾ø½À´Ï´Ù.
°á·ÐÀûÀ¸·Î ¿ø°ÝÁö ¼¹ö¿¡¼´Â ÇÒ°Ô ¾ø´Ù´Â ^^
¸¸¾à Àú µÎ ´ëÀÇ ¼¹ö »çÀÌ¿¡ ¹æȺ®ÀÌ ÀÖ´Ù¸é ±× ¹æȺ®¿¡¼ 631Æ÷Æ®¿¡ ´ëÇÑ Ã³¸®°¡ ÇÊ¿äÇÕ´Ï´Ù. |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
±âµÕ ¼Õ´Ô
|
¿Ã·ÁÁü: 2003.10.20 ¿ù, 8:57 pm ÁÖÁ¦: ´äº¯ °¨»çµå¸®¸ç.. |
|
|
ÈĹèÇÑÅ× ¹°¾îºÃ´Âµ¥ Á¦´ë·Î ¼³¸íÀ» ¾È ÇØÁÖ´ø±¸¿ä. ¾î¶»°Ô µÈÁö ¸ð¸£°Ú´Ù°í..^^
¸»¾¸ÇØÁֽŴë·Î ¼³Á¤À» Çß½À´Ï´Ù.
±×·±µ¥ ¾ÈµÇ³×¿ä. printtoll¿¡¼ ipp·Î ¼³Á¤ÇÏ°í Å×½ºÆ® ÀμâÀ» Çߴµ¥
Printer busy.. ÀÌ·± ¸Þ½ÃÁö¸¸ printtool â¿¡ º¸¿© ÁÖ´Â ±º¿ä..
ÇÁ¸°ÅÍ ¼¹ö¿¡¼´Â ÀâÇôÀÖ´Â ÇÁ¸°ÅÍ °øÀ¯ÇÞ½À´Ï´Ù. ip °øÀ¯·Î Çؼ ÇØ´ç ipÀ» ³Ö½À´Ï´Ù.
ÇÁ¸°ÅÍ ¼¹ö¿¡¼ nmap -sT À» ÇÑ°á°úÀÔ´Ï´Ù.
22/tcp open ssh
25/tcp open smtp
80/tcp open http
110/tcp open pop-3
111/tcp open sunrpc
139/tcp open netbios-ssn
143/tcp open imap2
443/tcp open https
515/tcp open printer
631/tcp open ipp
995/tcp open pop3s
3306/tcp open mysql
6000/tcp open X11
Ŭ¶óÀ̾ðÆ®¿¡¼ ÇÑ °á°úÀÔ´Ï´Ù.
Port State Service
22/tcp open ssh
111/tcp open sunrpc
139/tcp open netbios-ssn
631/tcp open ipp
6000/tcp open X11
µÎ ¸Ó½Å ´Ù ¹æȺ® ¼³Á¤ÀÌ µÇ¾î ÀÖ¾î¼ root¿¡¼ setupÀ¸·Î Çؼ ¹æȺ® ¼³Á¤¿¡¼ 631 Æ÷Æ® Çã¿ëÇϵµ·Ï Çߴµ¥.. ¾ÈµÇ°í ÀÖ½À´Ï´Ù.
´Ã ¾ðÁ¦³ª ÁÁÀº ´äº¯ °¨»çµå¸³´Ï´Ù. |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
truefeel Ä«Æä °ü¸®ÀÚ
°¡ÀÔ: 2003³â 7¿ù 24ÀÏ ¿Ã¸° ±Û: 1277 À§Ä¡: ´ëÇѹα¹
|
¿Ã·ÁÁü: 2003.10.20 ¿ù, 9:43 pm ÁÖÁ¦: Re: cups ¿ø°Ý ÇÁ¸°Æ® ¹®Á¦ (iptables) |
|
|
±âµÕ ¾¸: | ÈĹèÇÑÅ× ¹°¾îºÃ´Âµ¥ Á¦´ë·Î ¼³¸íÀ» ¾È ÇØÁÖ´ø±¸¿ä. ¾î¶»°Ô µÈÁö ¸ð¸£°Ú´Ù°í..^^
¸»¾¸ÇØÁֽŴë·Î ¼³Á¤À» Çß½À´Ï´Ù.
±×·±µ¥ ¾ÈµÇ³×¿ä. printtool¿¡¼ ipp·Î ¼³Á¤ÇÏ°í Å×½ºÆ® ÀμâÀ» Çߴµ¥
Printer busy.. ÀÌ·± ¸Þ½ÃÁö¸¸ printtool â¿¡ º¸¿© ÁÖ´Â ±º¿ä..
ÇÁ¸°ÅÍ ¼¹ö¿¡¼´Â ÀâÇôÀÖ´Â ÇÁ¸°ÅÍ °øÀ¯ÇÞ½À´Ï´Ù. ip °øÀ¯·Î Çؼ ÇØ´ç ipÀ» ³Ö½À´Ï´Ù.
... »ý·« ...
|
ÇØ°áÇÑ ÈĹèÀÇ PC(¸®´ª½º?)¿¡¼ iptables -L -n ÇÏ¸é ¹¹°¡ ´Ù¸¥Áö ¾Ë ¼ö ÀÖÁö ¾Ê³ª¿ä?
¶ÇÇÑ ±× °÷ÀÇ /etc/cups/printers.conf ¿¡¼ ¹¹°¡ ´Ù¸¥Áöµµ.
¿¸° Æ÷Æ®¸¦ ¾Ë·ÁÁֽô °Í º¸´Ù´Â iptables ³ª netstat °á°ú¸¦ ¿Ã·ÁÁÖ½Ã´Â°Ô ´õ ³ªÀ» µí ½Í½À´Ï´Ù.
------------------------------------------------------------------------------------------------------
1) ¸ÕÀú 631 Æ÷Æ®¸¦ ACCEPTÇϱâ Àü¿¡ DROPÇÑ°Ô ÀÖ´ÂÁö È®ÀÎÇغ¸¼¼¿ä.
# iptables -L -n
Ŭ¶óÀ̾ðÆ®¿¡¼ ¼¹ö·Î telnet ¼¹öIP 631Çؼ
Escape character is '^]'. °¡ º¸Àδٸé Æ÷Æ®´Â ¿¸°°Ì´Ï´Ù.
2) iptables °³ÀιæȺ®À» ÀϽÃÀûÀ¸·Î ¿ÀÇÂÇÏ¸é ¾ÈµÈ°¡¿ä?
iptables -P INPUT ACCEPT
iptables -F
iptables -X
·Î ÀϽÃÀûÀ¸·Î ¸ðµÎ ¿ÀÇÂÇϽðí Å×½ºÆ® ÇÁ¸°Å͸¦ Çغ¸¼¼¿ä.
Á¤»óÀûÀ¸·Î º¸³»Áø´Ù¸é ¹æȺ® ¼³Á¤¹®Á¦ÀÏÅ×°í
ÀÌ ¶§ netstat -atunp·Î »ç¿ëÇÑ Æ÷Æ®¸¦ º¸°í iptables ruleÀ» ¸¸µé¸é µÉ µí ½Í½À´Ï´Ù.
¸ðµÎ ¿¸°»óÅ¿¡¼µµ ¾ÈµÈ´Ù¸é ¿ø°Ý ÇÁ¸°ÅÍ ¼³Á¤ ¹®Á¦°ÚÁö¿ä.
´Ù½Ã ¿ø·¡´ë·Î ¸·´Â °ÍÀº ±âÁ¸ ·ê¼Â ÁöÁ¤ ÆÄÀÏÀ» ÀÌ¿ëÇؼ Çϼ¼¿ä. |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
±âµÕ ¼Õ´Ô
|
¿Ã·ÁÁü: 2003.10.21 È, 2:19 pm ÁÖÁ¦: ¾ðÁ¦³ª °¨»çµå¸³´Ï´Ù. µÇ±â´Â µÇ´Âµ¥ .. |
|
|
¾îÁ¦´Â Á¶±Ý ÀÏÂï Áý¿¡ °¡´À¶ó ¸øÇغ¸°í.
¿À´Ã ÇغýÀ´Ï´Ù.
¾çÂÊ ¹æȺ® ¼³Á¤À» ÇØÁ¦ ÇÏ´Ï
ÇÁ¸°ÅÍ ¼¹öÀÇ ÇÁ¸°ÅÍ°¡ ÀÚµ¿À¸·Î °Ë»öÀÌ µÇ´õ±º¿ä.
±×·¡µµ ¹æȺ® ¼³Á¤À» ¾ÈÇÒ¼ö°¡ ¾ø¾î¼.
setup¸í·É¾î ȸ鿡¼ ¹æȺ® ¼³Á¤À» ÇÏ¸é¼ 631 Æ÷Æ®À» ¿¾ú½À´Ï´Ù.
¾çÂÊ´Ù °°Àº ¹æ¹ýÀ¸·Î Çß½À´Ï´Ù.
±×·¨´õ´Ï ÀÚµ¿ °Ë»öÀÌ ¾ÈµÇ´Â ±º¿ä. ±×·¡¼ ¾îÁ¦ ¾Ë·Á ÁֽŠ¹æ¹ý´ë·Î Ŭ¶óÀ̾ðÆ®(?)ÂÊ¿¡ ¼³Á¤À» ÇÏ¿´½À´Ï´Ù.
¾Æ·¡´Â Ŭ¶óÀ̾ðÆ® ÂÊ iptables -L -n °á°úÀÔ´Ï´Ù.
# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Lokkit-0-50-INPUT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT tcp -- 147.46.236.23 0.0.0.0/0 tcp spt:631
ACCEPT udp -- 147.46.236.23 0.0.0.0/0 udp spt:631
Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Lokkit-0-50-INPUT all -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain RH-Lokkit-0-50-INPUT (2 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:631 flags:0x16/0x02
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 flags:0x16/0x02
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:0:1023 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:0:1023 reject-with icmp-port-unreachable
REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:6000:6009 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:7100 flags:0x16/0x02 reject-with icmp-port-unreachable
±×·±µ¥ ÇÁ¸°ÅÍ ¼¹öÂÊÀº ¾î¶»°Ô ÇØ¾ß ÇÒÁö ¸ð¸£°Ú½À´Ï´Ù. ¾Ë·ÁÁֽŴë·Î ¼³Á¤Çߴµ¥ ÇÁ¸°ÅÍÀ» °Ë»öÇÏÁö ¸øÇÕ´Ï´Ù.
ÇÁ¸°ÅÍ ¼¹ö¿¡ ´ëÇÑ iptables -L -n °á°úÀÔ´Ï´Ù.
[root@uwal root]# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Lokkit-0-50-INPUT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:631
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:631
Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Lokkit-0-50-INPUT all -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:631
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:631
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:631
Chain RH-Lokkit-0-50-INPUT (2 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:631 flags:0x16/0x02
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 flags:0x16/0x02
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 flags:0x16/0x02
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 flags:0x16/0x02
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:0:1023 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:0:1023 reject-with icmp-port-unreachable
REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:6000:6009 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:7100 fllgs:0x16/0x02 reject-with icmp-port-unreachable
¹æȺ® ¼³Á¤ ¹®Á¦¸¸ ÇØ°á ÇÏ¸é µÉ °Å °°½À´Ï´Ù.
¾ðÁ¦³ª °¨»çµå¸³´Ï´Ù. |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
truefeel Ä«Æä °ü¸®ÀÚ
°¡ÀÔ: 2003³â 7¿ù 24ÀÏ ¿Ã¸° ±Û: 1277 À§Ä¡: ´ëÇѹα¹
|
¿Ã·ÁÁü: 2003.10.21 È, 5:02 pm ÁÖÁ¦: Re: cups ¹æȺ® ¹®Á¦ |
|
|
¹æȺ® ÇØÁ¦µÈ »óÅ¿¡¼ ÇÁ¸°ÅÍ ¼¹öÂÊ¿¡¼ netstat -atunp ¸¦ Çؼ ¾î¶² Æ÷Æ®°¡ Ŭ¶óÀ̾ðÆ®¿Í ¿¬°áµÈ
°ÍÀÎÁö È®ÀÎÇϼ̳ª¿ä? ±×°É º¸°í ±âº» ·ê¼Â¿¡ ´ÔÀÇ ÆÇ´ÜÀ» Æ÷ÇÔÇÏ¿© ¼³Á¤À» ÇÏ´Â °ÍÀÔ´Ï´Ù.
Àοë: |
¾Æ·¡´Â Ŭ¶óÀ̾ðÆ® ÂÊ iptables -L -n °á°úÀÔ´Ï´Ù.
# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Lokkit-0-50-INPUT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT tcp -- 147.46.236.23 0.0.0.0/0 tcp spt:631
ACCEPT udp -- 147.46.236.23 0.0.0.0/0 udp spt:631
Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Lokkit-0-50-INPUT all -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain RH-Lokkit-0-50-INPUT (2 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:631 flags:0x16/0x02
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 flags:0x16/0x02
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:0:1023 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:0:1023 reject-with icmp-port-unreachable
REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:6000:6009 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:7100 flags:0x16/0x02 reject-with icmp-port-unreachable
|
INPUT ·ê¼Â Áß spt:631 2ÁÙ (--sport 631)Àº ÀÇ¹Ì ¾øÀ» µí ÇÏ´Ï Áö¿ì¼¼¿ä.
±×¸®°í, /etc/sysconfig/iptables ¿¡¼
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 0:1023 --syn -j REJECT ÁÙ ÀÌÀü¿¡ ´ÙÀ½ »ðÀÔ
-A RH-Lokkit-0-50-INPUT -s 147.46.236.23 -p tcp --dport 631 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -s 147.46.236.23 -p udp --dport 631 -j ACCEPT
IP¸¦ ÁØ °ÍÀº ÇÁ¸°ÅÍ ¼¹ö¿¡¼ ·ÎÄà 631·Î µé¾î¿À´Â °ÍÀ» Çã¿ëÇÏ°Ú´Ù´Â ÀǹÌÀÔ´Ï´Ù.
Àοë: |
ÇÁ¸°ÅÍ ¼¹ö¿¡ ´ëÇÑ iptables -L -n °á°úÀÔ´Ï´Ù.
[root@uwal root]# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Lokkit-0-50-INPUT all -- 0.0.0.0/0 0.0.0.0/0 (ÀÌ °ÍÀ¸·Î ÀÎÇØ Àú ¾Æ·¡¿¡ ÀÖ´Â RH-Lokkit-0-50-INPUTÀÌ ¸ÕÀú Àû¿ë)
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:631
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:631 (Àú ¾Æ·¡¿¡¼ UDP 0:1023ÀÌ ¸ÕÀú REJECTµÇ¾î ACCEPT´Â Àû¿ëÀÌ ¾ÈµÇ´Â ·êÀÓ)
Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Lokkit-0-50-INPUT all -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:631
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:631
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:631
Chain RH-Lokkit-0-50-INPUT (2 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:631 flags:0x16/0x02
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 flags:0x16/0x02
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 flags:0x16/0x02
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 flags:0x16/0x02
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:0:1023 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:0:1023 reject-with icmp-port-unreachable (UDP 0:1023ÀÌ REJECTµÊ)
REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:6000:6009 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:7100 fllgs:0x16/0x02 reject-with icmp-port-unreachable
|
OUTPUT Á¤Ã¥ÀÌ ACCEPTÀÌ°í DROP, REJECTµÇ´Â°Ô ¾øÀ¸´Ï OUTPUT ·ê¼Â 3°³´Â ÇÊ¿ä¾ø½À´Ï´Ù. »èÁ¦.
±×¸®°í, µé¾î¿À´Â TCP 631Àº ¿¸° »óÅÂÀÌ°í, UDP 631Àº CLOSE µÇ¾ú½À´Ï´Ù.
( UDP 0:1023 REJECT°¡ ¸ÕÀú µÇ¾úÀ½. µû¶ó¼ À§ÀÇ ¼³Á¤´ë·Î¶ó¸é UDP 631 ACCEPT´Â ÀÇ¹Ì ¾øÀ½ )
ÀÌ°Ô ¹®Á¦ÀÏÁö ¸ð¸£°Ú½À´Ï´Ù.
¸¶Âù°¡Áö·Î
/etc/sysconfig/iptables ¿¡¼
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 0:1023 --syn -j REJECT ÁÙ ÀÌÀü¿¡ ´ÙÀ½ »ðÀÔ
-A RH-Lokkit-0-50-INPUT -s Çã¿ëÇÒŬ¶óÀ̾ðÆ®IP¶Ç´Âsubnet -p tcp --dport 631 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -s Çã¿ëÇÒŬ¶óÀ̾ðÆ®IP¶Ç´Âsubnet -p udp --dport 631 -j ACCEPT
À§¿Í °°À̵µ Çصµ ¾ÈµÇ¸é Ŭ¶óÀ̾ðÆ® Âʸ¸ ¹æȺ® ÇØÁ¦ÇÏ°í Çغ¸°í,
¶Ç ¼¹öÂʸ¸ ¹æȺ®À» ÇØÁ¦Çؼ Çغ¸¼¼¿ä. ¾î´À ÂÊ ¹®Á¦ÀÎÁö ³ª¿À°ÚÁö¿ä.
Á¤»óµ¿ÀÛÇÒ ¶§ÀÇ netstat -atunpÀ» »ìÆ캸½Ã°í ·ê¼ÂÀ» ¸¸µé¾îº¸½Ã±â ¹Ù¶ø´Ï´Ù.
±×¸®°í ·ê¼ÂÀº À§ºÎÅÍ ¾Æ·¡·Î ¼øÂ÷ÀûÀ¸·Î ½ÇÇàÀÌ µÇ´Â °ÍÀÌ´Ï ¿·Á¾ßÇÏ´Â Æ÷Æ®´Â ¹Ýµå½Ã DROP, REJECTÀü¿¡ ACCEPTµÇ¾î¾ß ÇÕ´Ï´Ù. |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
±âµÕ ¼Õ´Ô
|
¿Ã·ÁÁü: 2003.10.21 È, 6:28 pm ÁÖÁ¦: Ŭ¶óÀ̾ðÆ® ¹®Á¦´õ±º¿ä |
|
|
¼¹ö´Â º° ¹®Á¦°¡ ¾ø´Â °Å °°½À´Ï´Ù.
´Ù¸¥ ¸®´ª½º ¸Ó½Å(RH8.0)¿¡¼´Â Àß ¿¬°áµÇ¾î ÀÖ½À´Ï´Ù.
´Ù¸¸ Á¦°¡ »ç¿ëÇÏ°í ÀÖ´Â ¸Ó½Å (RH9.0)¸¸ ¹®Á¦³×¿ä.. ¤Ì¤Ì;
Á¦ ¸Ó½ÅÀÇ ¹æȺ®À» ´Ù ÇØÀçÇÑ ÈÄ
´Ù¸¥ ¸Ó½Å¿¡¼ telnet 147.46.236.25 631 Çϸé.. ±×³É ÄÁ³Ø¼Ç ¸®Ç»Áî ³ª¿À³×¿ä..
ÈÄÈÄ.
ÀÌÀ¯¸¦ ¸ð¸£°Ú³×¿ä. netstat¿¡¼ º¸¸é. º°´Ù¸¥ °ÍÀÌ ¾ø´Â°Å °°Àºµ¥.
# netstat -atunp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 2400/cupsd
tcp 0 0 127.0.0.1:46659 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46658 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46657 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46656 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46663 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46662 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46661 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46660 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46667 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46666 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46665 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46664 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46671 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46670 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46669 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46668 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46674 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46672 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46639 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46638 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46637 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46643 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46642 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46641 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46640 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46647 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46646 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46645 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46644 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46651 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46650 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46649 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46648 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46655 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46654 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46653 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46652 127.0.0.1:631 TIME_WAIT -
udp 0 0 0.0.0.0:631 0.0.0.0:* 2400/cupsd
¸çĥ° ±«·ÓÈ÷´Â °Å °°¾î¼ Á˼ÛÇÕ´Ï´Ù.
ÀÌÁ¦ ¾ÈµÇ¸é. ¾È ÇÒ·Æ´Ï´Ù. È¥ÀÚ¸¸ RH90 »ç¿ëÇؼ »ý±ä ¹®Á¦·Î »ý°¢ÇÏÁÒ.. ¹¹. |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
truefeel Ä«Æä °ü¸®ÀÚ
°¡ÀÔ: 2003³â 7¿ù 24ÀÏ ¿Ã¸° ±Û: 1277 À§Ä¡: ´ëÇѹα¹
|
¿Ã·ÁÁü: 2003.10.21 È, 10:11 pm ÁÖÁ¦: Re: Ŭ¶óÀ̾ðÆ® ¹®Á¦´õ±º¿ä |
|
|
Àοë: |
¸çĥ° ±«·ÓÈ÷´Â °Å °°¾î¼ Á˼ÛÇÕ´Ï´Ù.
ÀÌÁ¦ ¾ÈµÇ¸é. ¾È ÇÒ·Æ´Ï´Ù. È¥ÀÚ¸¸ RH90 »ç¿ëÇؼ »ý±ä ¹®Á¦·Î »ý°¢ÇÏÁÒ.. ¹¹.
|
±×·¡µµ Á¶±ÝÀÌ¶óµµ ¹®Á¦¿¡ Á¢±ÙÇÒ ¼ö Àִ°Ŷó¸é, ÇغÁ¾ßÁÒ.
±×¸®°í ¿·¿¡ ÀÖ´Â ±× ÇÁ¸°Å͸¦ ¸ø ¾²´Â´Ù´Â°Ô ³Ñ ¾Æ±õÁö ¾Ê³ª¿ä?
Áú¹®Àº °è¼Ó ¿Ã¶ó¿À´Âµ¥ ¼·Î°£ÀÇ OS¹öÀüÀº ¾î¶»°ÔµÇ°í, ¿Ã¸° °á°ú°¡ ¾î´À ¼¹ö¿¡¼ ¿Ã¸°°ÇÁö,
¹æȺ® ÇØÁ¦ ÈÄ ½ÇÁ¦·Î Á¤»ó ÇÁ¸°Æ®°¡ µÈ °ÍÀÎÁö µî ¾Ö¸ÅÇÑ ±Ûµµ ÀÖ¾î ´äº¯Çϱâ Èûµç ºÎºÐµµ ¸î °³ ÀÖ½À´Ï´Ù.
1. ¿ì¼± Á¤»óÀûÀ¸·Î µÈ´Ù´Â ÈĹèÀÇ ÄÄÀÇ È¯°æÀ» »ìÆ캸¼¼¿ä.
/etc/sysconfig/iptables ¶Ç´Â iptables -L -nÀÇ °á°ú ºñ±³
/etc/cups/cupsd.conf
/etc/cups/printers.conf (ipp ¼³Á¤ È®ÀÎ)
2. ¿ÜºÎ¿¡¼ ´ÔÀÇ Å¬¶óÀ̾ðÆ® 631·Î Á¢±ÙÀÌ ¾ÈµÇ´Â °Í
Àοë: |
Á¦ ¸Ó½ÅÀÇ ¹æȺ®À» ´Ù ÇØÀçÇÑ ÈÄ
´Ù¸¥ ¸Ó½Å¿¡¼ telnet 147.46.236.25 631 Çϸé.. ±×³É ÄÁ³Ø¼Ç ¸®Ç»Áî ³ª¿À³×¿ä..
ÈÄÈÄ.
ÀÌÀ¯¸¦ ¸ð¸£°Ú³×¿ä. netstat¿¡¼ º¸¸é. º°´Ù¸¥ °ÍÀÌ ¾ø´Â°Å °°Àºµ¥.
# netstat -atunp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 2400/cupsd
... »ý·« ...
|
refused¶ó°í ³ª¿À´Â °ÍÀº À§¿¡ º¸½Ã´Â °Íó·³ 631Æ÷Æ®°¡ 127.0.0.1·Î ¹ÙÀεùµÇ¾î Àֱ⠶§¹®ÀÔ´Ï´Ù.
µû¶ó¼ ·ÎÄÿ¡¼¸¸ 631Æ÷Æ®·Î Á¢±ÙÀÌ °¡´ÉÇÕ´Ï´Ù.
Àú »óÅÂÀÌ°í, ¹æȺ®ÇØÁ¦µÈ »óÅ¿¡¼ Á¤»ó ÇÁ¸°Æ®°¡ µÇ¾ú´Ù¸é ÀÌ°Ç ¹®Á¦µÉ °ÍÀÌ ¾ø½À´Ï´Ù.
±×·¯³ª ÇØÁ¦µÈ »óÅ¿¡¼µµ ¹®Á¦°¡ ¹ß»ýÀ» ÇÑ´Ù¸é Ȥ½Ã ¸ð¸£´Ï
/etc/cups/cupsd.conf (RH 9.0 °æ·Î°¡ ¿©±âÀÎÁö´Â ¸ð¸§)¼³Á¤ÀÌ ¾î¶»°Ô µÇ¾î ÀÖ´ÂÁö È®ÀÎÇغ¸¼¼¿ä.
Listen 127.0.0.1:631À̶ó´Â ÁÙÀÌ ÀÖÀ¸¸é, ÀÌÁÙ ´ë½Å
Port 631·Î ¹Ù²Ù¼¼¿ä.
¹°·Ð ±× ÈĹèÀÇ cupsd.conf¿Íµµ ºñ±³Çؼ.
3. netstat °á°ú°¡
Àοë: |
... Áß·« ...
tcp 0 0 127.0.0.1:46659 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46658 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46657 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46656 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46663 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46662 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:46661 127.0.0.1:631 TIME_WAIT -
... »ý·« ...
|
ÀÌ°Ô ¹æȺ® ÇØÁ¦ÈÄ Á¤»óÀûÀ¸·Î ÇÁ¸°Æ®µÉ ¶§ °á°úÀΰ¡¿ä? ±×·±µ¥ ÇÁ¸°ÅÍ ¼¹ö(.23 IP?)¿Í Ä¿³Ø¼ÇÇÑ °á°ú°¡ ¾ø³×¿ä.
¹º°¡ ´Ù¸¥ ¹æÇâÀ¸·Î Å×½ºÆ®¸¦ ÇÏ°í ÀÖ´Â °ÍÀº ¾Æ´ÑÁö ^^
ºÐ¸íÇÑ °ÍÀº Ŭ¶óÀ̾ðÆ® ÂÊ ¹æȺ® ÇØÁ¦ÈÄ¿¡ Á¤»ó ÇÁ¸°Æ®°¡ µÈ´Ù¸é Ŭ¶óÀ̾ðÆ® ¹æȺ® ¼³Á¤¿¡ ¹®Á¦°¡ ÀÖ´Â
°ÍÀÌ´Ï ÀÌ °Í Àú°Í Á¶ÇÕÇؼ Çغ¸¼¼¿ä.
/etc/sysconfig/iptables¼³Á¤ º¯°æÈÄ¿¡ /etc/rc.d/init.d/iptables restartÇÏ´Â °ÍÀº ¾Æ½ÇÅ×°í.
* ¸®´ª½º 2.4 ÆÐŶ ÇÊÅ͸µ ÇÏ¿ìÅõ
http://coffeenix.net/go.php?site_code=235&go=/doc/Translations/html/Packet_Filtering-KLDP/
4. ¹®Á¦ ÇØ°á°ú´Â ¹«°üÇÕ´Ï´Ù¸¸
±× ÇÁ¸°ÅÍ ¼¹ö·Î ¿ÜºÎ¿¡¼ Á¢±Ù °¡´ÉÇÑ Æ÷Æ®°¡ ÀÖÀ¸´Ï ¸·À¸¼¼¿ä.
IP .23 ÇÁ¸°ÅÍ ¼¹ö¿¡ 631(ipp), 3306(mysql), 6000(x-win)ÀÌ ¿ÜºÎ¿¡¼ ¿·Á ÀÖ½À´Ï´Ù.
³»ºÎ ³×Æ®¿÷ ¶Ç´Â ÇØ´ç ¼¹ö¿¡¼¸¸ ¿¬°áÇÏ¸é µÇ´Â Æ÷Æ®ÀÏ µí ½ÍÀºµ¥.
/etc/sysconfig/iptables¿¡¼ ¼³Á¤À» Çϼ¼¿ä.
¹®Á¦ ÇØ°áÀÌ ½±°Ô ¾ÈµÇ´Ï ¾ÈŸ±î¿ï »ÓÀÔ´Ï´Ù.
Á¦°¡ Á÷Á¢ Çص帮°í ½ÍÀº ½ÉÁ¤ÀÔ´Ï´Ù. ^^ |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
±âµÕ ¼Õ´Ô
|
¿Ã·ÁÁü: 2003.10.21 È, 10:59 pm ÁÖÁ¦: µåµð¾î ¼º°øÇß½À´Ï´Ù.. |
|
|
Á¦ ¸Ó½Å¿¡ ¹æȺ® ¼³Á¤À» ÇØÁ¦ÇÏÁö ¾Ê°í.
Àü¿¡ ¾Ë·Á ÁֽŠ´ë·Î 631 Æ÷Æ®¸¸ ¿ÀÇÂÇÏ°í.
ÈĹ谡 ¼º°øÇÑ ¸Ó½Å¿¡ ÀÖ´Â cups.conf À» °¡Á®´Ù°¡ º¹»çÇÏ°í.
iptable°ú cupsÀ» Àç½Ãµ¿ÈÄ ÇÁ¸°ÅÍ°¡ ÀâÇû½À´Ï´Ù.
RH9.0°ú 8,0 »çÀÌÀÇ cups.conf°¡ ȣȯÀÌ µÇ´õ±º¿ä.
cupsÀÇ °æ·Î´Â ¾Ë·ÁÁֽŴë·Î ¿´½À´Ï´Ù.
°á±¹ ¹æȺ®ÀÌ ¾Æ´Ï¶ó cups¼³Á¤¿¡¼ ¹®Á¦°¡ ¹ß»ýÇÑ °ÍÀ̾ú½À´Ï´Ù.
¿¬±¸½Ç¿¡ ÀÖ´Â ¸®´ª½º Áß Àú¿Í ÇÁ¸°ÅÍ ¼¹ö¸¸ 9.0ÀÌ°í
³ª¸ÓÁö´Â ¸ðµÎ 8.0À̶ó 9.0¿¡¼ ÀÛµ¿ÇÏ´Â ¹æ¹ýÀ» Á¦´ë·Î ã¾Æ ³»Áö´Â ¸øÇß½À´Ï´Ù.
¸çÄ¥µ¿¾È ¸¹Àº °¡¸£Ä§°ú µµ¿òÀ» Áּż °¨»çÇÕ´Ï´Ù.
¸ð¸£´Â °ÍÀÌ ÀÖÀ¸¸é.. ¶Ç ã¾Æ ¿À°Ú½À´Ï´Ù.
Ä¿ÇÇ¶óµµ ÇÑÀÜ ´ëÁ¢ÇÏ°í ½Í±º¿ä.. ^^;
°¨»çÇÕ´Ï´Ù. °¨±â Á¶½ÉÇϼ¼¿ä.
¾Æ.. ÇÁ¸°ÅÍ ¼¹ö¿¡¼ mysql Àº ȨÆäÀÌÁö °Ô½ÃÆǶ§¹®¿¡ »ç¿ëÇÏ°í Àִµ¥ Æ÷Æ®¸¦ ¸·¾Æµµ º° ¹®Á¦°¡ ¾øÀ»±î¿ä ? ¾øÀ¸¸é Æ÷Æ®¸¦ ´Ý¾Æ ¹ö¸®·Á°í ÇÕ´Ï´Ù. |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
truefeel Ä«Æä °ü¸®ÀÚ
°¡ÀÔ: 2003³â 7¿ù 24ÀÏ ¿Ã¸° ±Û: 1277 À§Ä¡: ´ëÇѹα¹
|
¿Ã·ÁÁü: 2003.10.22 ¼ö, 12:11 am ÁÖÁ¦: Re: µåµð¾î ¼º°øÇß½À´Ï´Ù.. |
|
|
±âµÕ ¾¸: | Á¦ ¸Ó½Å¿¡ ¹æȺ® ¼³Á¤À» ÇØÁ¦ÇÏÁö ¾Ê°í.
Àü¿¡ ¾Ë·Á ÁֽŠ´ë·Î 631 Æ÷Æ®¸¸ ¿ÀÇÂÇÏ°í.
ÈĹ谡 ¼º°øÇÑ ¸Ó½Å¿¡ ÀÖ´Â cups.conf À» °¡Á®´Ù°¡ º¹»çÇÏ°í.
iptable°ú cupsÀ» Àç½Ãµ¿ÈÄ ÇÁ¸°ÅÍ°¡ ÀâÇû½À´Ï´Ù.
RH9.0°ú 8,0 »çÀÌÀÇ cups.conf°¡ ȣȯÀÌ µÇ´õ±º¿ä.
cupsÀÇ °æ·Î´Â ¾Ë·ÁÁֽŴë·Î ¿´½À´Ï´Ù.
°á±¹ ¹æȺ®ÀÌ ¾Æ´Ï¶ó cups¼³Á¤¿¡¼ ¹®Á¦°¡ ¹ß»ýÇÑ °ÍÀ̾ú½À´Ï´Ù.
¿¬±¸½Ç¿¡ ÀÖ´Â ¸®´ª½º Áß Àú¿Í ÇÁ¸°ÅÍ ¼¹ö¸¸ 9.0ÀÌ°í
³ª¸ÓÁö´Â ¸ðµÎ 8.0À̶ó 9.0¿¡¼ ÀÛµ¿ÇÏ´Â ¹æ¹ýÀ» Á¦´ë·Î ã¾Æ ³»Áö´Â ¸øÇß½À´Ï´Ù.
¸çÄ¥µ¿¾È ¸¹Àº °¡¸£Ä§°ú µµ¿òÀ» Áּż °¨»çÇÕ´Ï´Ù.
¸ð¸£´Â °ÍÀÌ ÀÖÀ¸¸é.. ¶Ç ã¾Æ ¿À°Ú½À´Ï´Ù.
Ä¿ÇÇ¶óµµ ÇÑÀÜ ´ëÁ¢ÇÏ°í ½Í±º¿ä.. ^^;
°¨»çÇÕ´Ï´Ù. °¨±â Á¶½ÉÇϼ¼¿ä.
¾Æ.. ÇÁ¸°ÅÍ ¼¹ö¿¡¼ mysql Àº ȨÆäÀÌÁö °Ô½ÃÆǶ§¹®¿¡ »ç¿ëÇÏ°í Àִµ¥ Æ÷Æ®¸¦ ¸·¾Æµµ º° ¹®Á¦°¡ ¾øÀ»±î¿ä ? ¾øÀ¸¸é Æ÷Æ®¸¦ ´Ý¾Æ ¹ö¸®·Á°í ÇÕ´Ï´Ù. |
¼º°øÇÏ¼Ì´Ù´Ï ´ÙÇàÀÔ´Ï´Ù.
³¾ ºÎÅÍ ÇÁ¸°Æ®¸¦ ÇÏ½Ç ¼ö Àְڳ׿ä.
ÀÌÁ¦ Ä¿ÇÇ ÇÑÀÜÀÇ ¿©À¯¸¦ ãÀº °Í °°½À´Ï´Ù. ^^
Ȥ½Ã 9.0ÀÇ ±âÁ¸ cupsd.conf¸¦ º¸°üÇϽøé 8.0ÀÇ °Í°ú diff¸í·ÉÀ¸·Î ¾îµð°¡ ´Ù¸¥Áö ºñ±³Çغ¸¼¼¿ä.
¹°·Ð ÇØ°áÀº µÆÁö¸¸ ´ÜÁö cupsd.confÀÇ ´Þ¶ó¼ ±×·¨´Ù¶ó´Â °Í¸¸ ¾Ë¸é ¾Æ½¬¿ï µí Çؼ...
----------------------------------------------------------------------------------------
Àοë: |
22/tcp open ssh
25/tcp open smtp
80/tcp open http
110/tcp open pop-3
111/tcp open sunrpc
139/tcp open netbios-ssn
143/tcp open imap2
443/tcp open https
515/tcp open printer
631/tcp open ipp
995/tcp open pop3s
3306/tcp open mysql
6000/tcp open X11
|
netbios-ssn¶ó¸é samba¸¦ »ç¿ëÁßÀÏÅ×°í.
À§ÀÇ ¿¸° Æ÷Æ® Áß sunrpc(portmap), imap2, https, pop3s µîÀº ½ÇÁ¦·Î »ç¿ëÇÏ´ÂÁö È®ÀÎÇϽðí
ntsysv ¸í·ÉÀ¸·Î ºÎÆýà ÀÚµ¿À¸·Î ½ÃÀÛµÇÁö ¾Êµµ·Ï Çϼ¼¿ä.
/etc/rc.d/init.d/xinetd restart (imap2, pop3s µî)
/etc/rc.d/init.d/portmap stop (portmap ¾È¾´´Ù¸é)
...
±×¸®°í ¿ÜºÎ¿¡¼ Á÷Á¢ MySQL¿¡ Á¢±ÙÇÏ´Â °æ¿ì´Â µå¹ÉÁÒ.
MySQLÀ» ¿ÜºÎ(³»ºÎ ½ÇÇè½É¿¡¼´Â mysql client·Î Á¢±ÙÇÏ°í)¿¡¼ Á¢±ÙÇÏÁö ¾Ê´Â´Ù¸é
/etc/sysconfig/iptables ¿¡ REJECT°¡ ½áÁø Àû´çÇÑ ÁÙ¿¡ ´ÙÀ½À» Ãß°¡Çϼ¼¿ä.
-A RH-Lokkit-0-50-INPUT -s !147.46.236.0/24 -p tcp --dport 3306 -j REJECT
´Ù¸¥ ¼ºñ½ºµµ ¿ÜºÎÁ¢¼Ó¿©ºÎ¸¦ ÆÇ´ÜÇÏ¿© ACCEPT, REJECTÇϼ¼¿ä.
À̸¦Å׸é ÇØ´ç ¼¹ö¿¡¼¸¸ Á¢¼ÓÇÏ°Ô ÇÏ·Á¸é
-A RH-Lokkit-0-50-INPUT -p tcp --dport Æ÷Æ® -j REJECT
³»ºÎ³×Æ®¿÷Àº µÇ°í ¿ÜºÎ¿¡¼ÀÇ Á¢¼Ó¸¸ ¸·À¸·Á¸é ÀÌ·± À¯ÇüÀ¸·Î ÇÏ¸é µË´Ï´Ù.
-A RH-Lokkit-0-50-INPUT -s !147.46.236.0/24 -p tcp --dport Æ÷Æ® -j REJECT
¸·À¸·Á´Â Æ÷Æ®°¡ REJECTÀü¿¡ ACCEPTµÇ¾î ÀÖÀ¸¸é Àǹ̾ø½À´Ï´Ù.
·êÀº À§¿¡¼ ºÎÅÍ ¼øÂ÷ÀûÀ¸·Î Àû¿ëµË´Ï´Ù. |
|
À§·Î |
|
![](templates/subSilver/images/spacer.gif) |
|