Advertisement
Usagi-chan

Untitled

May 3rd, 2012
110
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 15.47 KB | None | 0 0
  1. Windows Rechner:
  2. smbclient -L 10.1.1.100 -U Testuser
  3. Enter Testuser's password:
  4. Connection to 10.1.1.100 failed (Error NT_STATUS_UNSUCCESSFUL)
  5.  
  6. Linux Rechner:
  7. smbclient -L 10.1.1.5
  8. Enter Testuser's password:
  9. Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.5.6]
  10.  
  11. Sharename Type Comment
  12. --------- ---- -------
  13. Storage Disk Datengrab
  14. IPC$ IPC IPC Service (Tux)
  15.  
  16. Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.5.6]
  17.  
  18. Server Comment
  19. --------- -------
  20. LINUX Tux
  21. WINDOWS
  22.  
  23. Workgroup Master
  24. --------- -------
  25. WORKGROUP LINUX
  26.  
  27. Netzwerk LAN: 10.1.1.0/24
  28. Netzwerk OpenVPN: 172.16.1.0/24
  29.  
  30. iptables -nvL
  31. Chain INPUT (policy DROP 0 packets, 0 bytes)
  32. pkts bytes target prot opt in out source destination
  33. 717 121K dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  34. 13733 3778K ovpn2fw all -- tun+ * 0.0.0.0/0 0.0.0.0/0
  35. 24502 11M loc2fw all -- eth0 * 0.0.0.0/0 0.0.0.0/0
  36. 56 2800 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
  37. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  38. 0 0 Drop all -- * * 0.0.0.0/0 0.0.0.0/0
  39. 0 0 ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:INPUT:DROP:' queue_threshold 1
  40. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  41.  
  42. Chain FORWARD (policy DROP 0 packets, 0 bytes)
  43. pkts bytes target prot opt in out source destination
  44. 4192 189K dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  45. 6763 367K ovpn2loc all -- tun+ eth0 0.0.0.0/0 0.0.0.0/0
  46. 3769 1659K loc2ovpn all -- eth0 tun+ 0.0.0.0/0 0.0.0.0/0
  47. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  48. 0 0 Drop all -- * * 0.0.0.0/0 0.0.0.0/0
  49. 0 0 ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:FORWARD:DROP:' queue_threshold 1
  50. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  51.  
  52. Chain OUTPUT (policy DROP 0 packets, 0 bytes)
  53. pkts bytes target prot opt in out source destination
  54. 16074 9997K fw2ovpn all -- * tun+ 0.0.0.0/0 0.0.0.0/0
  55. 27611 14M fw2loc all -- * eth0 0.0.0.0/0 0.0.0.0/0
  56. 56 2800 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
  57. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  58. 0 0 Drop all -- * * 0.0.0.0/0 0.0.0.0/0
  59. 0 0 ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:OUTPUT:DROP:' queue_threshold 1
  60. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  61.  
  62. Chain Drop (4 references)
  63. pkts bytes target prot opt in out source destination
  64. 3984 178K all -- * * 0.0.0.0/0 0.0.0.0/0
  65. 7 308 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 /* Auth */
  66. 3977 177K dropBcast all -- * * 0.0.0.0/0 0.0.0.0/0
  67. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4 /* Needed ICMP types */
  68. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 11 /* Needed ICMP types */
  69. 3977 177K dropInvalid all -- * * 0.0.0.0/0 0.0.0.0/0
  70. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445 /* SMB */
  71. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 /* SMB */
  72. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535 /* SMB */
  73. 4 176 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445 /* SMB */
  74. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1900 /* UPnP */
  75. 3964 174K dropNotSyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
  76. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 /* Late DNS Replies */
  77.  
  78. Chain Reject (2 references)
  79. pkts bytes target prot opt in out source destination
  80. 22 1146 all -- * * 0.0.0.0/0 0.0.0.0/0
  81. 0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 /* Auth */
  82. 22 1146 dropBcast all -- * * 0.0.0.0/0 0.0.0.0/0
  83. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4 /* Needed ICMP types */
  84. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 11 /* Needed ICMP types */
  85. 22 1146 dropInvalid all -- * * 0.0.0.0/0 0.0.0.0/0
  86. 0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445 /* SMB */
  87. 1 78 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 /* SMB */
  88. 0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535 /* SMB */
  89. 0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445 /* SMB */
  90. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1900 /* UPnP */
  91. 4 208 dropNotSyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
  92. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 /* Late DNS Replies */
  93.  
  94. Chain dropBcast (2 references)
  95. pkts bytes target prot opt in out source destination
  96. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
  97. 0 0 DROP all -- * * 0.0.0.0/0 224.0.0.0/4
  98.  
  99. Chain dropInvalid (2 references)
  100. pkts bytes target prot opt in out source destination
  101. 17 860 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
  102.  
  103. Chain dropNotSyn (2 references)
  104. pkts bytes target prot opt in out source destination
  105. 4 208 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02
  106.  
  107. Chain dynamic (2 references)
  108. pkts bytes target prot opt in out source destination
  109.  
  110. Chain fw2loc (1 references)
  111. pkts bytes target prot opt in out source destination
  112. 27435 14M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  113. 18 1346 log1 udp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] multiport dports 53,123
  114. 158 10542 ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:fw2loc:ACCEPT:' queue_threshold 1
  115. 158 10542 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  116.  
  117. Chain fw2ovpn (1 references)
  118. pkts bytes target prot opt in out source destination
  119. 16069 9996K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  120. 5 254 ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:fw2ovpn:ACCEPT:' queue_threshold 1
  121. 5 254 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  122.  
  123. Chain loc2fw (1 references)
  124. pkts bytes target prot opt in out source destination
  125. 23970 11M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  126. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8
  127. 12 688 log0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] multiport dports 22,25,80,110,443,1194,3128
  128. 0 0 log0 udp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] multiport dports 53,123
  129. 520 110K ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:loc2fw:ACCEPT:' queue_threshold 1
  130. 520 110K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  131.  
  132. Chain loc2ovpn (1 references)
  133. pkts bytes target prot opt in out source destination
  134. 3748 1658K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  135. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 137:139,445
  136. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53
  137. 21 1068 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  138. 0 0 ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:loc2ovpn:REJECT:' queue_threshold 1
  139. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  140.  
  141. Chain log0 (2 references)
  142. pkts bytes target prot opt in out source destination
  143. 12 688 ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:loc2fw:ACCEPT:' queue_threshold 1
  144. 12 688 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  145.  
  146. Chain log1 (1 references)
  147. pkts bytes target prot opt in out source destination
  148. 18 1346 ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:fw2loc:ACCEPT:' queue_threshold 1
  149. 18 1346 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  150.  
  151. Chain log2 (4 references)
  152. pkts bytes target prot opt in out source destination
  153. 8 440 ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:ovpn2fw:ACCEPT:' queue_threshold 1
  154. 8 440 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  155.  
  156. Chain log3 (2 references)
  157. pkts bytes target prot opt in out source destination
  158. 5 300 ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:ovpn2loc:ACCEPT:' queue_threshold 1
  159. 5 300 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  160.  
  161. Chain logdrop (0 references)
  162. pkts bytes target prot opt in out source destination
  163. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  164.  
  165. Chain logreject (0 references)
  166. pkts bytes target prot opt in out source destination
  167. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0
  168.  
  169. Chain ovpn2fw (1 references)
  170. pkts bytes target prot opt in out source destination
  171. 13576 3770K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  172. 2 120 ACCEPT icmp -- * * 172.16.1.6 0.0.0.0/0 icmp type 8
  173. 0 0 ACCEPT icmp -- * * 172.16.1.10 0.0.0.0/0 icmp type 8
  174. 0 0 ACCEPT icmp -- * * 172.16.1.26 0.0.0.0/0 icmp type 8
  175. 0 0 log2 udp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] multiport dports 53,123
  176. 2 100 log2 tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] multiport dports 21,22
  177. 145 7540 ACCEPT tcp -- * * 172.16.1.6 0.0.0.0/0 multiport dports 22,25,80,110,443,3128,6600,8080
  178. 1 60 ACCEPT tcp -- * * 172.16.1.10 0.0.0.0/0 multiport dports 22,80,443,3128,6600,8080
  179. 0 0 log2 tcp -- * * 172.16.1.26 0.0.0.0/0 [goto] multiport dports 22,80,443,3128,6600,8080
  180. 6 340 log2 tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] multiport dports 137:139,445
  181. 1 78 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  182. 0 0 ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:ovpn2fw:REJECT:' queue_threshold 1
  183. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  184.  
  185. Chain ovpn2loc (1 references)
  186. pkts bytes target prot opt in out source destination
  187. 2592 179K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  188. 13 1208 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8
  189. 2 104 ACCEPT tcp -- * * 172.16.1.6 10.1.1.100 tcp dpt:3389
  190. 0 0 ACCEPT tcp -- * * 172.16.1.6 10.1.1.39 tcp dpt:3389
  191. 141 7380 ACCEPT tcp -- * * 172.16.1.6 0.0.0.0/0 multiport dports 21,22,80,137:139,443,445,3128
  192. 26 1336 ACCEPT tcp -- * * 172.16.1.10 0.0.0.0/0 multiport dports 21,22,80,137:139,443,445,3128
  193. 5 300 log3 tcp -- * * 172.16.1.26 0.0.0.0/0 [goto] multiport dports 21,22,80,137:139,443,445,3128,3389
  194. 0 0 log3 udp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] multiport dports 53,123
  195. 3984 178K Drop all -- * * 0.0.0.0/0 0.0.0.0/0
  196. 3973 177K ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:ovpn2loc:DROP:' queue_threshold 1
  197. 3973 177K DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  198.  
  199. Chain reject (9 references)
  200. pkts bytes target prot opt in out source destination
  201. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match src-type BROADCAST
  202. 0 0 DROP all -- * * 224.0.0.0/4 0.0.0.0/0
  203. 0 0 DROP 2 -- * * 0.0.0.0/0 0.0.0.0/0
  204. 7 308 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
  205. 1 78 REJECT udp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
  206. 0 0 REJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-unreachable
  207. 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
  208.  
  209. Chain shorewall (0 references)
  210. pkts bytes target prot opt in out source destination
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement