ipfw kural dosyası (freebsd) sorunu

merhabalar türkiye sunucularımızda sorunsuz çalısan ipfw ingiltere sunuculara kurunca girişleri kapatıyor (ssh mysql vs.).kural listesi aşagıdaki gibidir ücretli ücretsiz yardımları bekliyorum




cmd="ipfw -q add"
ipfw -q -f flush

################################################## #####
# Bu Sistem Oğuzcan GÖKMEN Tarafından Kodlanmıştır #
################################################## #####
# Oğuzcan GÖKMEN İzin Verdiği 127.0.0.1
################################################## #####
$cmd allow all from any to any via lo0
$cmd deny all from any to 127.0.0.0/8
$cmd deny all from 127.0.0.0/8 to any
$cmd deny tcp from any to any frag
################################################## #####
# Oğuzcan GÖKMEN Genel Prosedürler
################################################## #####
$cmd check-state
$cmd allow tcp from any to any established
$cmd allow all from any to any out keep-state
$cmd deny icmp from any to any
################################################## #####
$cmd allow tcp from any to any 21 setup keep-state
$cmd allow tcp from any to any 22 setup keep-state
$cmd allow tcp from any to any 1957 setup keep-state
$cmd allow tcp from any to any 11000 setup keep-state
$cmd allow tcp from any to any 11002 setup keep-state
$cmd allow tcp from any to any 11005 setup keep-state
$cmd allow tcp from any to any 22745 setup keep-state
$cmd allow tcp from any to any 20000 setup keep-state
$cmd allow tcp from any to any 22000 setup keep-state
$cmd allow tcp from any to any 12000 setup keep-state
$cmd allow tcp from any to any 13000 setup keep-state
$cmd allow tcp from any to any 13001 setup keep-state
$cmd allow tcp from any to any 13002 setup keep-state
$cmd allow tcp from any to any 13003 setup keep-state
$cmd allow tcp from any to any 13004 setup keep-state
$cmd allow tcp from any to any 13105 setup keep-state
$cmd allow tcp from any to any 13061 setup keep-state
$cmd allow tcp from any to any 13099 setup keep-state
$cmd allow tcp from any to any 14000 setup keep-state
$cmd allow tcp from any to any 14001 setup keep-state
$cmd allow tcp from any to any 14002 setup keep-state
$cmd allow tcp from any to any 14003 setup keep-state
$cmd allow tcp from any to any 14004 setup keep-state
$cmd allow tcp from any to any 14061 setup keep-state
$cmd allow tcp from any to any 14099 setup keep-state
$cmd allow tcp from any to any 14105 setup keep-state
$cmd allow tcp from any to any 15000 setup keep-state
$cmd allow tcp from any to any 16000 setup keep-state
$cmd allow tcp from any to any 16001 setup keep-state
$cmd allow tcp from any to any 16002 setup keep-state
$cmd allow tcp from any to any 16003 setup keep-state
$cmd allow tcp from any to any 16004 setup keep-state
$cmd allow tcp from any to any 16061 setup keep-state
$cmd allow tcp from any to any 16099 setup keep-state
$cmd allow tcp from any to any 17000 setup keep-state
$cmd allow tcp from any to any 17001 setup keep-state
$cmd allow tcp from any to any 17002 setup keep-state
$cmd allow tcp from any to any 17003 setup keep-state
$cmd allow tcp from any to any 17004 setup keep-state
$cmd allow tcp from any to any 17061 setup keep-state
$cmd allow tcp from any to any 17099 setup keep-state
$cmd allow tcp from any to any 19000 setup keep-state
$cmd allow tcp from any to any 21000 setup keep-state
$cmd allow tcp from any to any 50000 setup keep-state
$cmd allow tcp from any to any 3306 setup keep-state
$cmd allow udp from any to any 11000 keep-state
$cmd allow udp from any to any 11002 keep-state
$cmd allow udp from any to any 11005 keep-state
$cmd allow udp from any to any 22745 keep-state
$cmd allow udp from any to any 20000 keep-state
$cmd allow udp from any to any 22000 keep-state
$cmd allow udp from any to any 12000 keep-state
$cmd allow udp from any to any 13000 keep-state
$cmd allow udp from any to any 13001 keep-state
$cmd allow udp from any to any 13002 keep-state
$cmd allow udp from any to any 13003 keep-state
$cmd allow udp from any to any 13004 keep-state
$cmd allow udp from any to any 13105 keep-state
$cmd allow udp from any to any 13061 keep-state
$cmd allow udp from any to any 13099 keep-state
$cmd allow udp from any to any 14000 keep-state
$cmd allow udp from any to any 14001 keep-state
$cmd allow udp from any to any 14002 keep-state
$cmd allow udp from any to any 14003 keep-state
$cmd allow udp from any to any 14004 keep-state
$cmd allow udp from any to any 14061 keep-state
$cmd allow udp from any to any 14099 keep-state
$cmd allow udp from any to any 14105 keep-state
$cmd allow udp from any to any 15000 keep-state
$cmd allow udp from any to any 16000 keep-state
$cmd allow udp from any to any 16001 keep-state
$cmd allow udp from any to any 16002 keep-state
$cmd allow udp from any to any 16003 keep-state
$cmd allow udp from any to any 16004 keep-state
$cmd allow udp from any to any 16061 keep-state
$cmd allow udp from any to any 16099 keep-state
$cmd allow udp from any to any 17000 keep-state
$cmd allow udp from any to any 17001 keep-state
$cmd allow udp from any to any 17002 keep-state
$cmd allow udp from any to any 17003 keep-state
$cmd allow udp from any to any 17004 keep-state
$cmd allow udp from any to any 17061 keep-state
$cmd allow udp from any to any 17099 keep-state
$cmd allow udp from any to any 19000 keep-state
$cmd allow udp from any to any 21000 keep-state
$cmd allow udp from any to any 50000 keep-state
################################################## #####
# Oğuzcan GÖKMEN Özel Giriş İzinleri
################################################## #####
$cmd 500 allow all from 178.211.44.108 to any 3306
################################################## #####
# Yasaklanmis IP Adresleri [Banned IP]
################################################## #####

kurallarda anormal bir durum görünmüyor. ipfw enable ettiğinde direk mi düşürüyor yoksa bir süre sonra mı? ayrıca, basit bir soru sunucuda kaç nic var, hangisinden bağlısın?

türkiyedeki sunuculara kurunca sıkıntı çıkmıyor ingilteredeki sunuycularımıza kurunca sunucu direk kapanıyor consoleden firewall i kapatırsak erişilebiliyor

varmı yardımcı olabilecek

ipfw hiç kullanmadım ancak muhtemelen deny rulelarında sıkıntı vardır
cmd deny all from any to 127.0.0.0/8
$cmd deny all from 127.0.0.0/8 to any
$cmd deny tcp from any to any frag
şu 3 kuralı silip denermisiniz

edit: pardon aşağıda ftp,ssh için allow kuralı varmış dikkat etmemişim.

ipfwde öncelik sıralaması nasıl acaba ? Önce allowları tanımlayıp sonra dennyleri yazsanız

bende anlamıyorumki allow denny ne onu bile bilmiyorum

Merhaba,

$cmd 500 allow all from 178.211.44.108 to any 3306

komutunda Mysql servisi sadece 178.214.44.108 ip adresinden gönderilen istekleri kabul ediyor.

Eğer ki herkesin hem mysqld hem de sshd portlarına erişim sağlamalarını isterseniz;

$cmd 500 allow all from any to any 3306
$cmd 510 allow all from any to any 22

komutlarını uygulayabilirsiniz diye düşünüyorum.

allow = izin ver, deny = reddet anlamına gelen argümanlardır.

Teşekkürler.

malesef herkesin erişmesini istemiyorum dediğim gibi tr loaksyonda sorun olmuyor sadece ingilterede sorun oluyor

$cmd 500 allow all from any to any 3306 
$cmd 510 allow all from any to any 22

From'dan sonra gelen any yazan kısımları ip adresleri ile değiştirirseniz, sadece o adreslerden gelen istekler yanıtlanır.