LINUX-сервер пошаговые инструкции инсталляции и настройки - Бруй В. В. , Карлов С. В

#************************************************************************

#************************************************************************

**

ACCEPT_MSSQL="no"

#************************************************************************

**

#

*

# L D A P

*

#

*

#************************************************************************

**

ACCEPT_LDAP="no"

#************************************************************************

**

#

*

# L D A P S

*

#

*

#************************************************************************

**

ACCEPT_LDAPS="no"

#************************************************************************

#************************************************************************

ACCEPT_AUTH="no"

#------------------------------------------------------------------------

#AUTH outgoing client request

#Reject, rather than deny, the outgoing auth client packets (Net-HOWTO)

INTERFACE0_AUTH_OUT_REJECT="yes"

INTERFACE1_AUTH_OUT_REJECT="yes"

NETWORK1_AUTH_OUT_REJECT="yes"

#------------------------------------------------------------------------

#AUTH incoming client request

#Reject, rather than deny, the incoming auth client packets (Net-HOWTO)

INTERFACE0_AUTH_IN_REJECT="yes"

INTERFACE1_AUTH_IN_REJECT="yes"

NETWORK1_AUTH_IN_REJECT="yes"

#------------------------------------------------------------------------

#AUTH outgoing client request

#Interface 0 AUTH outgoing client request

INTERFACE0_AUTH_CLIENT="yes"

INTERFACE0_AUTH_OUT_SRC_IPADDR[0]=$INTERFACE0_IPADDR

INTERFACE0_AUTH_OUT_DST_IPADDR[0]=$ANY_IPADDR

# Interface 1 AUTH outgoing client request

INTERFACE1_AUTH_CLIENT="yes"

INTERFACE1_AUTH_OUT_SRC_IPADDR[0]=$INTERFACE1_IPADDR

INTERFACE1_AUTH_OUT_DST_IPADDR[0]=$NETWORK1

# Network 1 AUTH forwarded outgoing client request

NETWORK1_AUTH_CLIENT="yes"

NETWORK1_AUTH_OUT_SRC_IPADDR[0]=$NETWORK1

NETWORK1_AUTH_OUT_DST_IPADDR[0]=$ANY_IPADDR

#***********************************************************************

#***********************************************************************

ACCEPT_WHOIS="no"

#-----------------------------------------------------------------------

#WHOIS outgoing client request

#Interface 0 WHOIS outgoing client request

INTERFACE0_WHOIS_CLIENT="yes"

INTERFACE0_WHOIS_OUT_SRC_IPADDR[0]=$INTERFACE0_IPADDR

INTERFACE0_WHOIS_OUT_DST_IPADDR[0]=$ANY_IPADDR

# Interface 1 WHOIS outgoing client request

INTERFACE1_WHOIS_CLIENT="yes"

INTERFACE1_WHOIS_OUT_SRC_IPADDR[0]=$INTERFACE1_IPADDR

INTERFACE1_WHOIS_OUT_DST_IPADDR[0]=$NETWORK1

# Network 1 WHOIS forwarded outgoing client request

NETWORK1_WHOIS_CLIENT="yes"

NETWORK1_WHOIS_OUT_SRC_IPADDR[0]=$NETWORK1

NETWORK1_WHOIS_OUT_DST_IPADDR[0]=$ANY_IPADDR

#************************************************************************

# *

#************************************************************************

ACCEPT_FINGER="no"

#------------------------------------------------------------------------

#FINGER outgoing client request

#Interface 0 FINGER outgoing client request

INTERFACE0_FINGER_CLIENT="yes"

INTERFACE0_FINGER_OUT_SRC_IPADDR[0]=$INTERFACE0_IPADDR

INTERFACE0_FINGER_OUT_DST_IPADDR[0]=$ANY_IPADDR

# Interface 1 FINGER outgoing client request

INTERFACE1_FINGER_CLIENT="yes"

INTERFACE1_FINGER_OUT_SRC_IPADDR[0]=$INTERFACE1_IPADDR

INTERFACE1_FINGER_OUT_DST_IPADDR[0]=$NETWORK1

# Network 1 FINGER forwarded outgoing client request

NETWORK1_FINGER_CLIENT="yes"

NETWORK1_FINGER_OUT_SRC_IPADDR[0]=$NETWORK1

NETWORK1_FINGER_OUT_DST_IPADDR[0]=$ANY_IPADDR

#**********************************************************************

#**********************************************************************

ACCEPT_NTP="no"

#----------------------------------------------------------------------

#NTP outgoing client request

#Interface 0 NTP outgoing client request

INTERFACE0_NTP_CLIENT="yes"

INTERFACE0_NTP_OUT_SRC_IPADDR[0]=$INTERFACE0_IPADDR

INTERFACE0_NTP_OUT_DST_IPADDR[0]=$ANY_IPADDR

# Interface 1 NTP outgoing client request

INTERFACE1_NTP_CLIENT="yes"

INTERFACE1_NTP_OUT_SRC_IPADDR[0]=$INTERFACE1_IPADDR

INTERFACE1_NTP_OUT_DST_IPADDR[0]=$NETWORK1

# Network 1 NTP forwarded outgoing client request

NETWORK1_NTP_CLIENT="yes"

NETWORK1_NTP_OUT_SRC_IPADDR[0]=$NETWORK1

NETWORK1_NTP_OUT_DST_IPADDR[0]=$ANY_IPADDR

#************************************************************************

ACCEPT_X11="no"

#************************************************************************

#************************************************************************

ACCEPT_VNC="no"

#************************************************************************

*

#

*

# L P D

*

#

*

#************************************************************************

*

ACCEPT_LPD="no"

#************************************************************************

*

#

*

# N E T B I O S

*

#

*

#************************************************************************

*

ACCEPT_NETBIOS="no"

#------------------------------------------------------------------------

-

#NETBIOS outgoing client request

#Interface 1 NETBIOS outgoing client request

INTERFACE1_NETBIOS_CLIENT="yes"

INTERFACE1_NETBIOS_OUT_SRC_IPADDR[0]=$INTERFACE1_IPADDR

INTERFACE1_NETBIOS_OUT_DST_IPADDR[0]=$NETWORK1

#------------------------------------------------------------------------

-

#NETBIOS incoming client request

#Interface 1 NETBIOS incoming client request

INTERFACE1_NETBIOS_SERVER="no"

INTERFACE1_NETBIOS_IN_SRC_IPADDR[0]=$NETWORK1

INTERFACE1_NETBIOS_IN_DST_IPADDR[0]=$INTERFACE1_IPADDR

#************************************************************************

*

#

*

# S Y S L O G

*

#

*

#************************************************************************

*

ACCEPT_SYSLOG="no"

#------------------------------------------------------------------------

-

#SYSLOG outgoing client request

#Interface 1 SYSLOG outgoing client request

INTERFACE1_SYSLOG_CLIENT="yes"

INTERFACE1_SYSLOG_OUT_SRC_IPADDR[0]=$INTERFACE1_IPADDR

INTERFACE1_SYSLOG_OUT_DST_IPADDR[0]=$SYSLOG_SERVER

#************************************************************************

#

*

# T R A C E R O U T E

*

#

*

#************************************************************************

*

ACCEPT_TRACEROUTE="yes"

#------------------------------------------------------------------------

#TRACEROUTE outgoing client request

#Interface 0 TRACEROUTE outgoing client request

INTERFACE0_TRACEROUTE_CLIENT="yes"

INTERFACE0_TRACEROUTE_OUT_SRC_IPADDR[0]=$INTERFACE0_IPADDR

INTERFACE0_TRACEROUTE_OUT_DST_IPADDR[0]=$ANY_IPADDR

# Interface 1 TRACEROUTE outgoing client request

INTERFACE1_TRACEROUTE_CLIENT="yes"

INTERFACE1_TRACEROUTE_OUT_SRC_IPADDR[0]=$INTERFACE1_IPADDR

INTERFACE1_TRACEROUTE_OUT_DST_IPADDR[0]=$NETWORK1

INTERFACE1_ICMP_IN_SRC_IPADDR[0]=$NETWORK1

INTERFACE1_ICMP_IN_DST_IPADDR[0]=$INTERFACE0_IPADDR

INTERFACE1_ICMP_IN_SRC_IPADDR[1]=$NETWORK1

INTERFACE1_ICMP_IN_DST_IPADDR[1]=$INTERFACE1_IPADDR

#***********************************************************************

#***********************************************************************

ACCEPT_DHCP="yes"

#-----------------------------------------------------------------------

#DHCP incoming client request

#Interface 1 DHCP incoming client request

INTERFACE1_DHCP_SERVER="yes"

#If above option is "yes", do not forget to configure the following

#lines in the "Spoofing and bad addresses" section

#REFUSE_SPOOFING_IPADDR[2]="0.0.0.0/8"

#INTERFACE1_IN_REFUSE_SPOOFING[2]="no"

INTERFACE1_DHCP_IN_SRC_IPADDR[0]=$NETWORK1

INTERFACE1_DHCP_IN_DST_IPADDR[0]=$INTERFACE1_IPADDR

#************************************************************************

*

#

*

# E N D

*

#

*

#************************************************************************

*

INTERFACE0_IN_DROP_EVERYTHING_FROM_HERE="yes"

INTERFACE1_IN_DROP_EVERYTHING_FROM_HERE="yes"

NETWORK1_IN_DROP_EVERYTHING_FROM_HERE="yes"

#------------------------------------------------------------------------

-

# End of file

Шаг 4

Перезагрузите GIPTables Firewall:

[root@bastion /]# /etc/init.d./giptables restart

Часть 3

Криптографическое программное обеспечение, используемое для безо-

пасной передачи данных

ипроверки подлинности

ицелостности электронных документов

Глава 11

GnuPG – утилита для безопасного хранения и передачи данных

В этой главе 1. Ограничения и допущения

2.Пакеты

3.Инсталляция с помощью rpm-пакетов

4.Компиляция, оптимизация и инсталляция GnuPG

5.Тестирование GnuPG