| Author |
Message |
|
|
Post subject: Instalacia jadra s podporou layer7, ipp2p, time a connlimit
 Posted: 03.05.2008 - 01:15 #64487
|
|
Ucen
Joined: Apr 12, 2006
Posts: 930
Location: Vranov nad Topľou
|
|
Zdravim 
Kedze sa mi stala dost neprijemna vec ( zdochol vedlajsi router na srot, odisla doska, ramka, oba disky.... -> zoskratovala masina, netusim kvoli comu ) tak som nuteny v tomto case instalovat na novy HW novy router....
Tento clanok pisem podla toho, ako to robim, takze je to 100% funkcne.
Oka, zaciname:
Po cerstvom nainstalovani debian etch robim kroky:
1. apt-get install ssh
2. vi /etc/apt/sources.list
3. remujem vsetky deb cdrom:[Debian GNU/Linux 4.0 r1 _
4. apt-get update
5. apt-get upgrade ( neakych cca 2 mb , nepodstatne kniznice )
6. apt-get install kernel-package libncurses5-dev fakeroot wget bzip2 g++ g++-4.1 libstdc++6-4.1-dev yaird
7. cd /usr/src
8. wget ( linky si najdete na nete, ja som to mal ulozene na lokalke )
iptables-1.3.6.tar.bz2
patch-o-matic-ng-20071128.tar.bz2
linux-2.6.18.tar.bz2
l7-protocols-2007-10-10.tar.gz
netfilter-layer7-v2.14.tar.gz
nepindat na aktualnost, v takejto konfiguracii mi to funguje 100% , pokial sa niekomu chce, tak moze potahat novsie ( ako som spominal, tieto verzie mam ulozene na disku )
9. tar jxvf linux-2.6.18.tar.bz2
tar jxvf iptables-1.3.6.tar.bz2
tar jxvf patch-o-matic-ng-20071128.tar.bz2
tar zxvf netfilter-layer7-v2.14.tar.gz
tar zxvf l7-protocols-2007-10-10.tar.gz
10. ln -s linux-2.6.18 linux
ln -s iptables-1.3.6 iptables
11. cd /usr/src/patch-o-matic-ng-20071128
12. ./runme --download
13. pwd /usr/src/new/patch-o-matic-ng-20071128
14. KERNEL_DIR=/usr/src/linux-2.6.18 IPTABLES_DIR=/usr/src/iptables-1.3.6 ./runme ROUTE
KERNEL_DIR=/usr/src/linux-2.6.18 IPTABLES_DIR=/usr/src/iptables-1.3.6 ./runme ipp2p
KERNEL_DIR=/usr/src/linux-2.6.18 IPTABLES_DIR=/usr/src/iptables-1.3.6 ./runme time
KERNEL_DIR=/usr/src/linux-2.6.18 IPTABLES_DIR=/usr/src/iptables-1.3.6 ./runme connlimit
na vsetko odpovedat Yes
15. cd /usr/src/linux-2.6.18
patch -p1 < usr/src/netfilter-layer7-v2.14/for_older_kernels/kernel-2.6.18-2.6.19-layer7-2.9.patch
16. cd /usr/src/iptables-1.3.6
patch -p1 < /usr/src/netfilter-layer7-v2.14/iptables-for-kernel-pre2.6.20-layer7-2.14.patch
chmod +x /usr/src/iptables-1.3.6/extensions/.layer7-test
17. cd /usr/src/linux-2.6.18
18. make mrproper
make menuconfig
v menuconfigu vojst do Networking options ---> [*] Network packet filtering (replaces ipchains) --->
[*] Network packet filtering (replaces ipchains) ---> IP: Netfilter Configuration
medzerou oznacit ako modul :
Layer 7 match support
TIME match support
CONN limit support
19. make-kpkg clean
20. make-kpkg --revision etch --append-to-version .icerowicz_rules --initrd binary-arch
21. dpkg -i linux-image-2.6.18.icerowicz_rules_etch_i386.deb
22. grub menu.lst updatne sam
23. reboot
A uz ficite na novom kernely....
Idem spat |
|
|
| |
|
|
|
 |
|
|
|
Post subject: RE: Instalacia jadra s podporou layer7, ipp2p, time a connlimit
Posted: 03.05.2008 - 11:30 #64490
|
|
Basic
Joined: Mar 25, 2003
Posts: 138
|
|
...vdaka za "step-by-step"navod  |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Instalacia jadra s podporou layer7, ipp2p, time a connlimit
Posted: 03.05.2008 - 12:10 #64491
|
|
Guru
Joined: Jan 24, 2004
Posts: 1685
|
|
pochvala...
zopar ludom to iste pomoze...
..kebyze to napises vtedy ked som este fical na linuxoch a trapil sa zo zladenim jednotlivych verzii ..... |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Instalacia jadra s podporou layer7, ipp2p, time a connlimit
Posted: 03.05.2008 - 13:25 #64492
|
|
Majster
Joined: Máj 12, 2004
Posts: 4579
Location: Bratislava
|
|
| len by si mohol este pokracovat pravidlami iptables a nastavenim L7 filtra so vsetkym moznym |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Instalacia jadra s podporou layer7, ipp2p, time a connlimit
Posted: 03.05.2008 - 13:46 #64493
|
|
Ucen
Joined: Apr 12, 2006
Posts: 930
Location: Vranov nad Topľou
|
|
Chalan wrote: ›len by si mohol este pokracovat pravidlami iptables a nastavenim L7 filtra so vsetkym moznym
moje l7 pravidla sa vyvijali cca rok a maju asi 300 riadkov |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Instalacia jadra s podporou layer7, ipp2p, time a connlimit
Posted: 04.05.2008 - 00:24 #64506
|
|
Ucen
Joined: Apr 12, 2006
Posts: 930
Location: Vranov nad Topľou
|
|
|
|
|
|
|
|
|
Post subject: RE: Instalacia jadra s podporou layer7, ipp2p, time a connlimit
Posted: 15.05.2008 - 13:49 #64902
|
|
Majster
Joined: Máj 12, 2004
Posts: 4579
Location: Bratislava
|
|
| icerowicz stale cakam ale ty nic |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Instalacia jadra s podporou layer7, ipp2p, time a connlimit
Posted: 15.05.2008 - 16:03 #64903
|
|
Ucen
Joined: Apr 12, 2006
Posts: 930
Location: Vranov nad Topľou
|
|
|
|
|
|
|
|
|
Post subject: RE: Instalacia jadra s podporou layer7, ipp2p, time a connlimit
Posted: 15.05.2008 - 19:42 #64908
|
|
Majster
Joined: Máj 12, 2004
Posts: 4579
Location: Bratislava
|
|
| ok, budem cakat |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Instalacia jadra s podporou layer7, ipp2p, time a connlimit
Posted: 16.05.2008 - 07:50 #64917
|
|
Majster
Joined: Okt 22, 2003
Posts: 3321
Location: Banská Bystrica - Rudlová
|
|
| a co tak spravit image ? a dat nam ho aby sme nemali uz voobec ziadnu robotu ? |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Instalacia jadra s podporou layer7, ipp2p, time a connlimit
Posted: 16.05.2008 - 09:04 #64922
|
|
Majster
Joined: Máj 12, 2004
Posts: 4579
Location: Bratislava
|
|
|
|
|
|
|
|
|
Post subject: RE: Instalacia jadra s podporou layer7, ipp2p, time a connlimit
Posted: 16.05.2008 - 18:27 #64935
|
|
Ucen
Joined: Apr 12, 2006
Posts: 930
Location: Vranov nad Topľou
|
|
| dajte niekto neake ftp, poslem vam upraveny kernel ako balicek |
|
|
| |
|
|
|
|
|
|
Powered by PNphpBB2 © 2003-2005 The PNphpBB Group
Credits |
), teda vydrz....
