Re: Obmedzenie portu 3306 cez firewall PF

Ahoj, Hezky mate ten pf, hned to jdu zkusim pro SSH. Jeste jsem asi dvakrat vyuzil resolving. kdyz se hosti bid meni anebo jse jinde jini, takle je pf + jak to dopadne s pfctl: root@sol06fm1d01(pts/14) /root # grep -Evx '[[:blank:]]*([#;].*)?' /etc/firewall/pf-test.conf ext_if = "pub0" nfs_ports

Re: Obmedzenie portu 3306 cez firewall PF

Velka vdaka, moc ste mi pomohli. PF sice pouzivam na taketo jednoduche blokovanie niekolko rokov, ale syntax zial nepoznam. Zial v manuali som naozaj taketo zakladne priklady nenasiel. A pritom, toto sa da pouzivat elegantne aj na SSH, takze cakal by som, ze takychto prikladov najdem na internete v

Re: Obmedzenie portu 3306 cez firewall PF

On 06/06/2021 12:10, Frantisek Hennel wrote: Dakujem, ale ani toto mi nefunguje :-(. Rozsiril som svoje pravidla o tie tvoje a toto je vysledok. Reloading pf rules. /etc/pf.conf:6: port only applies to tcp/udp /etc/pf.conf:6: skipping rule due to errors /etc/pf.conf:6: rule expands to no valid

Re: Obmedzenie portu 3306 cez firewall PF

Frantisek Hennel wrote on 06.06.2021 12:10: table persist file "/etc/pf.mysqlwhite.ip.conf" pass in quick on $ext_if from to any port 3306 block return in log (all) quick on $ext_if from any to any port 3306 Reloading pf rules. /etc/pf.conf:6: port only applies to tcp/udp /etc/pf.conf:7: port

Re: Obmedzenie portu 3306 cez firewall PF

Frantisek Hennel wrote: > > Dakujem za pomoc, ale nefunguje mi to. > > pass in quick on $ext_if from 10.1.1.0/24 to ($ext_if) port 3306 > /etc/pf.conf:4: port only applies to tcp/udp Sorry, chýba tam "proto tcp”. pass in quick on $ext_if proto tcp from 10.1.1.0/24 to ($ext_if) port 3306 block d

Re: Obmedzenie portu 3306 cez firewall PF

Dakujem, ale ani toto mi nefunguje :-(. Rozsiril som svoje pravidla o tie tvoje a toto je vysledok. pf.conf table persist file "/etc/pf.blocked.ip.conf" ext_if="em0" # interface connected to internet block drop in log (all) quick on $ext_if from to any table persist file "/etc/pf.mysqlwhite.ip.

Re: Obmedzenie portu 3306 cez firewall PF

Dakujem, ano takto by sa mi to pacilo. Upravil som to v zmysle tvojho odporucania, ale stale mi to nefunguje. /etc/pf.conf table persist file "/etc/pf.blocked.ip.conf" ext_if="em0" # interface connected to internet block drop in log (all) quick on $ext_if from to any table persist file "/etc/p

Re: Obmedzenie portu 3306 cez firewall PF

Dakujem za pomoc, ale nefunguje mi to. table persist file "/etc/pf.blocked.ip.conf" ext_if="em0" # interface connected to internet block drop in log (all) quick on $ext_if from to any pass in quick on $ext_if from 10.1.1.0/24 to ($ext_if) port 3306 block drop in log (all) quick on $ext_if from a

Re: Obmedzenie portu 3306 cez firewall PF

Frantisek Hennel wrote on 06.06.2021 9:53: Potreboval by som zablokovat pristup na mysql server (port 3306), aby nebol pristupny do internetu a povolit by som chcel tento port iba pre konkretne IP adresy, pripadne konkretne subnety. table persist file "/etc/pf.blocked.ip.conf" ext_if="em0" #

Re: Obmedzenie portu 3306 cez firewall PF

Ahoj, Ve tvym pripade bych si asi nadefinoval pole/tabulku s allowed ips/subnets $MYSQLALLOWED a pridal pravidlo: block in log quick on $ext_if from ! $MYSQLALLOWED to ($MYIP) port 3306 Pisu z mobilu, nesedim u pc, tak si tu syntaxi odkontroluj s man pf.conf ;) Marek 6. 6. 2021 9:54, 9:54, Fr

Re: Obmedzenie portu 3306 cez firewall PF

Frantisek Hennel wrote: > Potreboval by som zablokovat pristup na mysql server (port > 3306), aby nebol pristupny do internetu a povolit by som chcel > tento port iba pre konkretne IP adresy, pripadne konkretne > subnety. Vsetky ostatne porty chcem ponechat normalne > otvorene, len ten jeden port 3

Obmedzenie portu 3306 cez firewall PF

Ahoj, chcel by som Vas poprosit o radu ohladne firewallu PF, nakolko uz od vcera studujem manualy a podobny pripad, ako sa snazim nastavit ja, som nikde nenasiel. Potreboval by som zablokovat pristup na mysql server (port 3306), aby nebol pristupny do internetu a povolit by som chcel tento port i