I have a problem with a server failure. [version: 3.0.13.5] Linux - http://dl.4players.de/ts/relea…0.13.5-Beta-1/~~HEAD=pobj [on the previous version it was also a problem]
ERRORS : 'Untitled Post' | TextUploader.com
Bash
#!/bin/sh
if [ "$1" = "stop" ]
then
echo "Czyszczenie firewalla query rozpoczete"
iptables -F
iptables -t mangle -F
iptables -P FORWARD ACCEPT
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -X syn-flood
/bin/echo "0" > /proc/sys/net/ipv4/icmp_echo_ignore_all
/bin/echo "0" > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
/bin/echo "1" > /proc/sys/net/ipv4/conf/all/accept_source_route
/bin/echo "1" > /proc/sys/net/ipv4/conf/all/accept_redirects
/bin/echo "0" > /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses
/bin/echo "0" > /proc/sys/net/ipv4/conf/all/rp_filter
/bin/echo "0" > /proc/sys/net/ipv4/conf/all/log_martians
echo "Czyszczenie zakonczone"
echo "Firewall query wylaczony"
exit
fi
echo "Konfiguracja firewalla query rozpoczeta"
iptables -F -t nat
iptables -X -t nat
iptables -F -t filter
iptables -X -t filter
echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
echo 0 > /proc/sys/net/ipv4/conf/all/accept_source_route
echo 0 > /proc/sys/net/ipv4/conf/all/accept_redirects
echo 1 > /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses
echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter
echo 1 > /proc/sys/net/ipv4/conf/all/log_martians
iptables -N DENY
iptables -A DENY -p tcp -m tcp -m limit --limit 30/sec --limit-burst 100 -m comment --comment "Anti-DoS" -j REJECT --reject-with tcp-reset
iptables -A DENY -m limit --limit 30/sec --limit-burst 100 -m comment --comment "Anti-DoS" -j REJECT --reject-with icmp-proto-unreachable
iptables -A DENY -m comment --comment "Alles andere ignorieren" -j DROP
iptables -N SERVICES
iptables -A SERVICES -p tcp -m tcp --dport 53 -m comment --comment "Erlaube: DNS" -j ACCEPT
iptables -A SERVICES -p udp -m udp --dport 53 -m comment --comment "Erlaube: DNS" -j ACCEPT
iptables -A SERVICES -p tcp -m tcp --dport 22 -m comment --comment "Erlaube: SSH-Zugriff" -j ACCEPT
iptables -A SERVICES -j RETURN
iptables -N TEAMSPEAK
iptables -I INPUT -s 149.56.15.51 -p tcp -j RECEJT
iptables -I INPUT -s 149.56.15.51 -p udp -j RECEJT
iptables -A INPUT -p tcp --dport 30033 -m limit --limit 2/sec --limit-burst 20 -j ACCEPT
iptables -A INPUT -p tcp --dport 30033 -m limit --limit 2/sec --limit-burst 20 -j LOG --log-prefix "TCP-FLOOD:"
iptables -A INPUT -p tcp --dport 30033 -j DROP
iptables -A TEAMSPEAK -p tcp -m tcp --dport 2008 -m comment --comment "Erlaube: TeamSpeak Accounting" -j ACCEPT
iptables -A TEAMSPEAK -p udp -m udp --dport 9987 -m comment --comment "Erlaube: TeamSpeak Voiceport" -j ACCEPT
iptables -A TEAMSPEAK -p udp -m udp --dport 9988 -m comment --comment "Erlaube: TeamSpeak Voiceport" -j ACCEPT
iptables -A TEAMSPEAK -s 37.59.31.160 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 37.59.46.170 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 127.0.0.1 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 208.167.241.190 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 208.167.241.185 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 208.167.241.186 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 208.167.241.183 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 208.167.241.189 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 108.61.78.147 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 108.61.78.148 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 108.61.78.149 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 108.61.78.150 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 46.186.87.68 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 94.23.88.202 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 155.133.41.48 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 176.221.123.20 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 155.133.42.241 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A TEAMSPEAK -s 94.23.91.122 -p tcp -m tcp --dport 10087 -m comment --comment "Dostep: TeamSpeak ServerQuery" -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 30033 -j ACCEPT
iptables -A TEAMSPEAK -p tcp -m tcp --dport 41144 -m comment --comment "Erlaube: TeamSpeak TSDNS" -j ACCEPT
iptables -A TEAMSPEAK -j RETURN
iptables -A INPUT -i lo -m comment --comment "Erlaube: Loopback" -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -m comment --comment "Erlaube: Related und Established Verbindungen" -j ACCEPT
iptables -A INPUT -m comment --comment "Erlaube Standard Dienste" -j SERVICES
iptables -A INPUT -m comment --comment "Erlaube TeamSpeak Dienste" -j TEAMSPEAK
iptables -A INPUT -p icmp -m comment --comment "Erlaube: ICMP" -j ACCEPT
iptables -A INPUT -m comment --comment "Ignoriere alles andere" -j DENY
iptables -P INPUT DROP
echo "Konfiguracja firewalla query zakonczona"
echo "Firewall query wlaczony"