SVmco User Guide
213
2.
Add the jump setting for the PSA-MMB_LAN chain to INPUT and
OUTPUT chains.
Make the setting such that there are no interruptions by an existing
REJECT setting in an INPUT or OUTPUT chain or by a user definition
chain.
Here, use the following command to add the setting to the fifth INPUT
chain (before the REJECT setting) and to the OUTPUT chain. (For details
on the iptables option, see the man manual.)
# /sbin/iptables –I INPUT 5 –j PSA-MMB_LAN
# /sbn/iptables –A OUTPUT –j PSA-MMB_LAN
3.
Execute the iptables -L command, and confirm that the PSA-MMB_LAN
chains added to the INPUT and OUTPUT chains are not interrupted by the
previous REJECT, DROP, or other settings.
Example of settings:
# iptables –L
Chain INPUT (policy ACCEPT)
target
prot opt source
destination
ACCEPT
all -- 0.0.0.0/0
0.0.0.0/0 state
RELATED,ESTABLISHED
ACCEPT
icmp -- 0.0.0.0/0
0.0.0.0/0
ACCEPT
all -- 0.0.0.0/0
0.0.0.0/0
ACCEPT
tcp -- 0.0.0.0/0
0.0.0.0/0 state NEW tcp
dpt:22
PSA-MMB_LAN all -- 0.0.0.0/0
0.0.0.0/0
REJECT
all -- 0.0.0.0/0
0.0.0.0/0 reject-with icmp-
host-prohibited
Chain FORWARD (policy ACCEPT)
target
prot opt source
destination
REJECT
all -- 0.0.0.0/0
0.0.0.0/0 reject-with icmp-
host-prohibited
Содержание PRIMEQUEST 1000 Series
Страница 8: ......
Страница 180: ...SVmco User Guidel 172 Teaming tab ...
Страница 203: ...SVmco User Guide 195 5 Click the Sessions tab in the Properties window and click the MCS button Properties window ...
Страница 219: ...SVmco User Guide 211 1 Confirm that the PSA MMB_LAN chain has been created sbin iptables L ...