sslug-teknik team mailing list archive
-
sslug-teknik team
-
Mailing list archive
-
Message #96859
Re: Firewall
On Mon, Nov 24, 2008 at 12:58 PM, Gunner <gunner@xxxxxxxxxxxxxxxxxxxx> wrote:
>> netstat -anp | grep apache
> tcp6 0 0 :::80 :::*
> LISTEN 10291/apache2
> tcp6 0 0 ::ffff:10.10.1.98:80 ::ffff:10.10.1.1:3401
> ESTABLISHED11036/apache2
> tcp6 0 0 ::ffff:10.10.1.98:80 ::ffff:10.10.1.1:3391
> ESTABLISHED11037/apache2
> tcp6 0 0 ::ffff:10.10.1.98:80 ::ffff:10.10.1.1:3390
> ESTABLISHED12421/apache2
> unix 3 [ ] STREAM CONNECTED 717071 11037/apache2
>
>
>> netstat -anp | grep ':80'
> tcp 0 0 10.10.1.98:59213 194.182.134.43:80 FIN_WAIT2 -
> tcp 0 0 10.10.1.98:59212 194.182.134.43:80 FIN_WAIT2 -
> tcp 0 0 10.10.1.98:59214 194.182.134.43:80 FIN_WAIT2 -
> tcp 0 0 10.10.1.98:59209 194.182.134.43:80 FIN_WAIT2 -
> tcp 0 0 10.10.1.98:59208 194.182.134.43:80 FIN_WAIT2 -
> tcp 0 0 10.10.1.98:59210 194.182.134.43:80 FIN_WAIT2 -
> tcp 0 0 10.10.1.98:59205 194.182.134.43:80 FIN_WAIT2 -
> tcp 0 0 10.10.1.98:59204 194.182.134.43:80 FIN_WAIT2 -
> tcp 0 0 10.10.1.98:59207 194.182.134.43:80 FIN_WAIT2 -
> tcp 0 0 10.10.1.98:59203 194.182.134.43:80 FIN_WAIT2 -
> tcp6 0 0 :::80 :::* LISTEN 10291/apache2
> tcp6 0 0 ::ffff:10.10.1.98:80 ::ffff:10.10.1.1:3401 TIME_WAIT -
> tcp6 0 0 ::ffff:10.10.1.98:80 ::ffff:10.10.1.1:3391
> ESTABLISHED11037/apache2
> tcp6 0 0 ::ffff:10.10.1.98:80 ::ffff:10.10.1.1:3390 TIME_WAIT -
> tcp6 0 0 ::ffff:10.10.1.98:80 ::ffff:10.10.1.1:2807 TIME_WAIT -
> tcp6 0 0 ::ffff:10.10.1.98:80 ::ffff:10.10.1.1:2806 TIME_WAIT -
> tcp6 0 0 ::ffff:10.10.1.98:80 ::ffff:10.10.1.1:2809 TIME_WAIT -
> tcp6 0 0 ::ffff:10.10.1.98:80 ::ffff:208.36.144.:4392 TIME_WAIT -
ja, den lytter på port 80
tcp6 0 0 :::80 :::* LISTEN 10291/apache2
Det ser meget fint ud.
Så må vi jo kigge på iptables
iptables -n -L |grep 80
( eller iptables-save |grep 80 )
-Doc
--
No trees were killed in the sending of this message
However, a large number of electrons were terribly inconvenienced.
Also, Wil Wheaton Says, "Don't be a dick!"
Follow ups
References