Odp: [Pomoc] Multiroom przez VPN
Proszę:
root@Gargoyle:~# ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
64 bytes from 8.8.8.8: seq=0 ttl=48 time=48.622 ms
64 bytes from 8.8.8.8: seq=1 ttl=48 time=47.455 ms
64 bytes from 8.8.8.8: seq=2 ttl=48 time=47.337 ms
64 bytes from 8.8.8.8: seq=3 ttl=48 time=47.010 ms
^Z[1]+ Stopped ping 8.8.8.8
root@Gargoyle:~# ping 77.255.249.68
PING 77.255.249.68 (77.255.249.68): 56 data bytes
64 bytes from 77.255.249.68: seq=0 ttl=64 time=3.061 ms
64 bytes from 77.255.249.68: seq=1 ttl=64 time=1.599 ms
64 bytes from 77.255.249.68: seq=2 ttl=64 time=1.629 ms
64 bytes from 77.255.249.68: seq=3 ttl=64 time=1.604 ms
^Z[2]+ Stopped ping 77.255.249.68
root@Gargoyle:~# iptables -v -L
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
2991 259K bw_ingress all -- br-lan any anywhere anywhere
2950 256K delegate_input all -- any any anywhere anywhere
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 bw_ingress all -- br-lan any anywhere anywhere
0 0 delegate_forward all -- any any anywhere anywhere
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
1539 814K delegate_output all -- any any anywhere anywhere
Chain MINIUPNPD (1 references)
pkts bytes target prot opt in out source destination
Chain bw_ingress (2 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere bandwidth --id total1-download-2-449 --type combined --current_bandwidth 0 --reset_interval 2 --reset_time 2 --intervals_to_save 449
0 0 all -- any any anywhere anywhere match-set local_addr_set dst bandwidth --id bdist1-download-minute-15 --type individual_dst --reset_interval minute --intervals_to_save 15
0 0 all -- any any anywhere anywhere bandwidth --id total2-download-minute-359 --type combined --current_bandwidth 0 --reset_interval minute --intervals_to_save 359
0 0 all -- any any anywhere anywhere match-set local_addr_set dst bandwidth --id bdist2-download-900-24 --type individual_dst --reset_interval 900 --reset_time 900 --intervals_to_save 24
0 0 all -- any any anywhere anywhere bandwidth --id total3-download-180-479 --type combined --current_bandwidth 0 --reset_interval 180 --reset_time 180 --intervals_to_save 479
0 0 all -- any any anywhere anywhere match-set local_addr_set dst bandwidth --id bdist3-download-hour-24 --type individual_dst --reset_interval hour --intervals_to_save 24
0 0 all -- any any anywhere anywhere bandwidth --id total4-download-7200-359 --type combined --current_bandwidth 0 --reset_interval 7200 --reset_time 7200 --intervals_to_save 359
0 0 all -- any any anywhere anywhere match-set local_addr_set dst bandwidth --id bdist4-download-day-31 --type individual_dst --reset_interval day --intervals_to_save 31
0 0 all -- any any anywhere anywhere bandwidth --id total5-download-day-365 --type combined --current_bandwidth 0 --reset_interval day --intervals_to_save 365
0 0 all -- any any anywhere anywhere match-set local_addr_set dst bandwidth --id bdist5-download-month-12 --type individual_dst --reset_interval month --intervals_to_save 12
Chain delegate_forward (1 references)
pkts bytes target prot opt in out source destination
0 0 forwarding_rule all -- any any anywhere anywhere /* user chain for forwarding */
0 0 ACCEPT all -- any any anywhere anywhere ctstate RELATED,ESTABLISHED
0 0 zone_lan_forward all -- br-lan any anywhere anywhere
0 0 zone_vpn_forward all -- tun0 any anywhere anywhere
0 0 reject all -- any any anywhere anywhere
Chain delegate_input (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- lo any anywhere anywhere
2950 256K input_rule all -- any any anywhere anywhere /* user chain for input */
1222 123K ACCEPT all -- any any anywhere anywhere ctstate RELATED,ESTABLISHED
118 6136 syn_flood tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN
1728 133K zone_lan_input all -- br-lan any anywhere anywhere
0 0 zone_vpn_input all -- tun0 any anywhere anywhere
Chain delegate_output (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any lo anywhere anywhere
1539 814K output_rule all -- any any anywhere anywhere /* user chain for output */
1444 806K ACCEPT all -- any any anywhere anywhere ctstate RELATED,ESTABLISHED
95 7252 zone_lan_output all -- any br-lan anywhere anywhere
0 0 zone_vpn_output all -- any tun0 anywhere anywhere
Chain forwarding_lan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain forwarding_rule (1 references)
pkts bytes target prot opt in out source destination
Chain forwarding_vpn_rule (1 references)
pkts bytes target prot opt in out source destination
Chain forwarding_wan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain input_lan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain input_rule (1 references)
pkts bytes target prot opt in out source destination
Chain input_vpn_rule (1 references)
pkts bytes target prot opt in out source destination
Chain input_wan_rule (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:openvpn
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:openvpn
Chain output_lan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain output_rule (1 references)
pkts bytes target prot opt in out source destination
Chain output_vpn_rule (1 references)
pkts bytes target prot opt in out source destination
Chain output_wan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain reject (2 references)
pkts bytes target prot opt in out source destination
0 0 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset
0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable
Chain syn_flood (1 references)
pkts bytes target prot opt in out source destination
118 6136 RETURN tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 25/sec burst 50
0 0 DROP all -- any any anywhere anywhere
Chain zone_lan_dest_ACCEPT (1 references)
pkts bytes target prot opt in out source destination
95 7252 ACCEPT all -- any br-lan anywhere anywhere
Chain zone_lan_forward (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- br-lan br-lan anywhere anywhere
0 0 forwarding_lan_rule all -- any any anywhere anywhere /* user chain for forwarding */
0 0 zone_wan_dest_ACCEPT all -- any any anywhere anywhere /* forwarding lan -> wan */
0 0 zone_vpn_dest_ACCEPT all -- any any anywhere anywhere /* forwarding lan -> vpn */
0 0 zone_lan_src_REJECT all -- any any anywhere anywhere
Chain zone_lan_input (1 references)
pkts bytes target prot opt in out source destination
1728 133K input_lan_rule all -- any any anywhere anywhere /* user chain for input */
1728 133K zone_lan_src_ACCEPT all -- any any anywhere anywhere
Chain zone_lan_output (1 references)
pkts bytes target prot opt in out source destination
95 7252 output_lan_rule all -- any any anywhere anywhere /* user chain for output */
95 7252 zone_lan_dest_ACCEPT all -- any any anywhere anywhere
Chain zone_lan_src_ACCEPT (1 references)
pkts bytes target prot opt in out source destination
1728 133K ACCEPT all -- br-lan any anywhere anywhere
Chain zone_lan_src_REJECT (1 references)
pkts bytes target prot opt in out source destination
0 0 reject all -- br-lan any anywhere anywhere
Chain zone_vpn_dest_ACCEPT (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any tun0 anywhere anywhere
Chain zone_vpn_forward (1 references)
pkts bytes target prot opt in out source destination
0 0 forwarding_vpn_rule all -- any any anywhere anywhere /* user chain for forwarding */
0 0 zone_wan_dest_ACCEPT all -- any any anywhere anywhere /* forwarding vpn -> wan */
0 0 zone_vpn_src_ACCEPT all -- any any anywhere anywhere
Chain zone_vpn_input (1 references)
pkts bytes target prot opt in out source destination
0 0 input_vpn_rule all -- any any anywhere anywhere /* user chain for input */
0 0 zone_vpn_src_ACCEPT all -- any any anywhere anywhere
Chain zone_vpn_output (1 references)
pkts bytes target prot opt in out source destination
0 0 output_vpn_rule all -- any any anywhere anywhere /* user chain for output */
0 0 zone_vpn_dest_ACCEPT all -- any any anywhere anywhere
Chain zone_vpn_src_ACCEPT (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- tun0 any anywhere anywhere
Chain zone_wan_dest_ACCEPT (3 references)
pkts bytes target prot opt in out source destination
Chain zone_wan_forward (0 references)
pkts bytes target prot opt in out source destination
0 0 MINIUPNPD all -- any any anywhere anywhere
0 0 forwarding_wan_rule all -- any any anywhere anywhere /* user chain for forwarding */
0 0 zone_wan_src_REJECT all -- any any anywhere anywhere
Chain zone_wan_input (0 references)
pkts bytes target prot opt in out source destination
0 0 input_wan_rule all -- any any anywhere anywhere /* user chain for input */
0 0 ACCEPT udp -- any any anywhere anywhere udp dpt:bootpc /* Allow-DHCP-Renew */
0 0 ACCEPT icmp -- any any anywhere anywhere icmp echo-request /* Allow-Ping */
0 0 zone_wan_src_REJECT all -- any any anywhere anywhere
Chain zone_wan_output (0 references)
pkts bytes target prot opt in out source destination
0 0 output_wan_rule all -- any any anywhere anywhere /* user chain for output */
0 0 zone_wan_dest_ACCEPT all -- any any anywhere anywhere
Chain zone_wan_src_REJECT (2 references)
pkts bytes target prot opt in out source destination
root@Gargoyle:~#

