API tools faq
paste
Advertisement
CryOrDies

Untitled

CryOrDies
Oct 18th, 2020 (edited)
57
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 9.01 KB | None | 0 0
raw download clone embed print report
  1. root@debian-vm:~# ip a
  2. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
  3.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  4.     inet 127.0.0.1/8 scope host lo
  5.        valid_lft forever preferred_lft forever
  6.     inet6 ::1/128 scope host
  7.        valid_lft forever preferred_lft forever
  8. 2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
  9.     link/ether 08:00:27:f5:1f:a6 brd ff:ff:ff:ff:ff:ff
  10.     inet 192.168.178.35/24 brd 192.168.178.255 scope global enp0s3
  11.        valid_lft forever preferred_lft forever
  12.     inet6 fe80::a00:27ff:fef5:1fa6/64 scope link
  13.        valid_lft forever preferred_lft forever
  14. 3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
  15.     link/ether 02:42:10:e6:49:aa brd ff:ff:ff:ff:ff:ff
  16.     inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
  17.        valid_lft forever preferred_lft forever
  18. 4: pterodactyl0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
  19.     link/ether 02:42:09:c7:04:ca brd ff:ff:ff:ff:ff:ff
  20.     inet 172.18.0.1/16 brd 172.18.255.255 scope global pterodactyl0
  21.        valid_lft forever preferred_lft forever
  22.     inet6 fdba:17c8:6c94::1011/64 scope global
  23.        valid_lft forever preferred_lft forever
  24.     inet6 fe80::42:9ff:fec7:4ca/64 scope link
  25.        valid_lft forever preferred_lft forever
  26.     inet6 fe80::1/64 scope link
  27.        valid_lft forever preferred_lft forever
  28. 6: veth41ddd40@if5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master pterodactyl0 state UP group default
  29.     link/ether b6:fe:4a:8d:1c:e6 brd ff:ff:ff:ff:ff:ff link-netnsid 0
  30.     inet6 fe80::b4fe:4aff:fe8d:1ce6/64 scope link
  31.        valid_lft forever preferred_lft forever
  32. ___________________________________________________________________________________________
  33.  
  34. root@debian-vm:~# netstat -ar
  35. Kernel-IP-Routentabelle
  36. Ziel            Router          Genmask         Flags   MSS Fenster irtt Iface
  37. default         fritz.box       0.0.0.0         UG        0 0          0 enp0s3
  38. 172.17.0.0      0.0.0.0         255.255.0.0     U         0 0          0 docker0
  39. 172.18.0.0      0.0.0.0         255.255.0.0     U         0 0          0 pterodactyl0
  40. 192.168.178.0   0.0.0.0         255.255.255.0   U         0 0          0 enp0s3
  41. __________________________________________________________________________________________
  42.  
  43. root@debian-vm:~# iptables -L
  44. Chain INPUT (policy ACCEPT)
  45. target     prot opt source               destination
  46.  
  47. Chain FORWARD (policy DROP)
  48. target     prot opt source               destination
  49. DOCKER-USER  all  --  anywhere             anywhere
  50. DOCKER-ISOLATION-STAGE-1  all  --  anywhere             anywhere
  51. ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
  52. DOCKER     all  --  anywhere             anywhere
  53. ACCEPT     all  --  anywhere             anywhere
  54. ACCEPT     all  --  anywhere             anywhere
  55. ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
  56. DOCKER     all  --  anywhere             anywhere
  57. ACCEPT     all  --  anywhere             anywhere
  58. ACCEPT     all  --  anywhere             anywhere
  59.  
  60. Chain OUTPUT (policy ACCEPT)
  61. target     prot opt source               destination
  62.  
  63. Chain DOCKER (2 references)
  64. target     prot opt source               destination
  65. ACCEPT     tcp  --  anywhere             172.18.0.2           tcp dpt:25565
  66. ACCEPT     udp  --  anywhere             172.18.0.2           udp dpt:25565
  67.  
  68. Chain DOCKER-ISOLATION-STAGE-1 (1 references)
  69. target     prot opt source               destination
  70. DOCKER-ISOLATION-STAGE-2  all  --  anywhere             anywhere
  71. DOCKER-ISOLATION-STAGE-2  all  --  anywhere             anywhere
  72. RETURN     all  --  anywhere             anywhere
  73.  
  74. Chain DOCKER-ISOLATION-STAGE-2 (2 references)
  75. target     prot opt source               destination
  76. DROP       all  --  anywhere             anywhere
  77. DROP       all  --  anywhere             anywhere
  78. RETURN     all  --  anywhere             anywhere
  79.  
  80. Chain DOCKER-USER (1 references)
  81. target     prot opt source               destination
  82. RETURN     all  --  anywhere             anywhere
  83.  
  84. ______________________________________________________________________________
  85. root@debian-vm:~# iptables -t nat -L
  86. Chain PREROUTING (policy ACCEPT)
  87. target     prot opt source               destination
  88. DOCKER     all  --  anywhere             anywhere             ADDRTYPE match dst-type LOCAL
  89.  
  90. Chain INPUT (policy ACCEPT)
  91. target     prot opt source               destination
  92.  
  93. Chain POSTROUTING (policy ACCEPT)
  94. target     prot opt source               destination
  95. MASQUERADE  all  --  172.17.0.0/16        anywhere
  96. MASQUERADE  all  --  172.18.0.0/16        anywhere
  97. MASQUERADE  tcp  --  172.18.0.2           172.18.0.2           tcp dpt:25565
  98. MASQUERADE  udp  --  172.18.0.2           172.18.0.2           udp dpt:25565
  99.  
  100. Chain OUTPUT (policy ACCEPT)
  101. target     prot opt source               destination
  102. DOCKER     all  --  anywhere            !127.0.0.0/8          ADDRTYPE match dst-type LOCAL
  103.  
  104. Chain DOCKER (2 references)
  105. target     prot opt source               destination
  106. RETURN     all  --  anywhere             anywhere
  107. RETURN     all  --  anywhere             anywhere
  108. DNAT       tcp  --  anywhere             debian-vm.fritz.box  tcp dpt:25565 to:172.18.0.2:25565
  109. DNAT       udp  --  anywhere             debian-vm.fritz.box  udp dpt:25565 to:172.18.0.2:25565
  110.  
  111. _______________________________________________________________________________________________________
  112.  
  113. root@debian-vm:~# iptables -S
  114. -P INPUT ACCEPT
  115. -P FORWARD DROP
  116. -P OUTPUT ACCEPT
  117. -N DOCKER
  118. -N DOCKER-ISOLATION-STAGE-1
  119. -N DOCKER-ISOLATION-STAGE-2
  120. -N DOCKER-USER
  121. -A FORWARD -j DOCKER-USER
  122. -A FORWARD -j DOCKER-ISOLATION-STAGE-1
  123. -A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  124. -A FORWARD -o docker0 -j DOCKER
  125. -A FORWARD -i docker0 ! -o docker0 -j ACCEPT
  126. -A FORWARD -i docker0 -o docker0 -j ACCEPT
  127. -A FORWARD -o pterodactyl0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
  128. -A FORWARD -o pterodactyl0 -j DOCKER
  129. -A FORWARD -i pterodactyl0 ! -o pterodactyl0 -j ACCEPT
  130. -A FORWARD -i pterodactyl0 -o pterodactyl0 -j ACCEPT
  131. -A DOCKER -d 172.18.0.2/32 ! -i pterodactyl0 -o pterodactyl0 -p tcp -m tcp --dport 25565 -j ACCEPT
  132. -A DOCKER -d 172.18.0.2/32 ! -i pterodactyl0 -o pterodactyl0 -p udp -m udp --dport 25565 -j ACCEPT
  133. -A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2
  134. -A DOCKER-ISOLATION-STAGE-1 -i pterodactyl0 ! -o pterodactyl0 -j DOCKER-ISOLATION-STAGE-2
  135. -A DOCKER-ISOLATION-STAGE-1 -j RETURN
  136. -A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
  137. -A DOCKER-ISOLATION-STAGE-2 -o pterodactyl0 -j DROP
  138. -A DOCKER-ISOLATION-STAGE-2 -j RETURN
  139. -A DOCKER-USER -j RETURN
  140. ________________________________________________________________________________________________________
  141.  
  142. root@debian-vm:~# iptables -t nat -L
  143. Chain PREROUTING (policy ACCEPT)
  144. target     prot opt source               destination
  145. DOCKER     all  --  anywhere             anywhere             ADDRTYPE match dst-type LOCAL
  146.  
  147. Chain INPUT (policy ACCEPT)
  148. target     prot opt source               destination
  149.  
  150. Chain POSTROUTING (policy ACCEPT)
  151. target     prot opt source               destination
  152. MASQUERADE  all  --  172.17.0.0/16        anywhere
  153. MASQUERADE  all  --  172.18.0.0/16        anywhere
  154. MASQUERADE  tcp  --  172.18.0.2           172.18.0.2           tcp dpt:25565
  155. MASQUERADE  udp  --  172.18.0.2           172.18.0.2           udp dpt:25565
  156.  
  157. Chain OUTPUT (policy ACCEPT)
  158. target     prot opt source               destination
  159. DOCKER     all  --  anywhere            !127.0.0.0/8          ADDRTYPE match dst-type LOCAL
  160.  
  161. Chain DOCKER (2 references)
  162. target     prot opt source               destination
  163. RETURN     all  --  anywhere             anywhere
  164. RETURN     all  --  anywhere             anywhere
  165. DNAT       tcp  --  anywhere             debian-vm.fritz.box  tcp dpt:25565 to:172.18.0.2:25565
  166. DNAT       udp  --  anywhere             debian-vm.fritz.box  udp dpt:25565 to:172.18.0.2:25565
  167.  
  168. _____________________________________________________________________________________
  169.  
  170. root@debian-vm:~# iptables -t nat -S
  171. -P PREROUTING ACCEPT
  172. -P INPUT ACCEPT
  173. -P POSTROUTING ACCEPT
  174. -P OUTPUT ACCEPT
  175. -N DOCKER
  176. -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
  177. -A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
  178. -A POSTROUTING -s 172.18.0.0/16 ! -o pterodactyl0 -j MASQUERADE
  179. -A POSTROUTING -s 172.18.0.2/32 -d 172.18.0.2/32 -p tcp -m tcp --dport 25565 -j MASQUERADE
  180. -A POSTROUTING -s 172.18.0.2/32 -d 172.18.0.2/32 -p udp -m udp --dport 25565 -j MASQUERADE
  181. -A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
  182. -A DOCKER -i docker0 -j RETURN
  183. -A DOCKER -i pterodactyl0 -j RETURN
  184. -A DOCKER -d 192.168.178.35/32 ! -i pterodactyl0 -p tcp -m tcp --dport 25565 -j DNAT --to-destination 172.18.0.2:25565
  185. -A DOCKER -d 192.168.178.35/32 ! -i pterodactyl0 -p udp -m udp --dport 25565 -j DNAT --to-destination 172.18.0.2:25565
  186. root@debian-vm:~#
  187.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!