![[PukiWiki]](image/pukiwiki.png "[PukiWiki]")
#author("2023-11-08T13:58:26+00:00","","") #author("2026-08-28T04:56:11+00:00","","") #topicpath * 社内-社外ネットワークゲートウェイ/DHCPサーバー [#o4356192] 構成検討中 * パッケージ追加 [#jc29daf2] firewalld dhcp * 詳細設定 [#o3a04b55] ++ /etcresolv.conf # Generated by NetworkManager search carrot.co.jp nameserver 8.8.8.8 ++ /etc/modules-load.d/br_netfilter.conf br_netfilter ※以下実施 # systemctl restart systemd-modules-load.service ++ /etc/sysctl.conf net.ipv4.conf.all.rp_filter = 2 net.ipv4.conf.default.accept_source_route = 2 kernel.sysrq = 0 kernel.core_uses_pid = 1 net.ipv4.tcp_syncookies = 1 net.bridge.bridge-nf-call-ip6tables = 0 net.bridge.bridge-nf-call-iptables = 0 net.bridge.bridge-nf-call-arptables = 0 vm.swappiness=10 net.core.somaxconn = 65535 net.core.netdev_max_backlog = 16384 net.core.rmem_max = 134217728 net.core.wmem_max = 134217728 ++ /etc/sysconfig/network FORWARD_IPV4="yes" GATEWAY=210.196.71.253 ++ /etc/sysconfig/network-scripts/ifcfg-ens192 TYPE=Ethernet PROXY_METHOD=none BROWSER_ONLY=no BOOTPROTO=none DEFROUTE=no IPV4_FAILURE_FATAL=no IPV6INIT=yes IPV6_AUTOCONF=yes IPV6_DEFROUTE=yes IPV6_FAILURE_FATAL=no IPV6_ADDR_GEN_MODE=stable-privacy NAME=ens192 UUID=0682dbe7-9e4d-4c88-a2b7-124891560655 DEVICE=ens192 ONBOOT=yes IPADDR1=172.31.200.1 PREFIX1=24 NETWORK=172.31.24.0 PEERDNS=no DNS1=8.8.8.8 IPV6ADDR=2001:db8::1/64 IPADDR=172.31.24.3 PREFIX2=24 ++ /etc/sysconfig/network-scripts/ifcfg-ens224 TYPE=Ethernet PROXY_METHOD=none BROWSER_ONLY=no BOOTPROTO=none DEFROUTE=yes IPV4_FAILURE_FATAL=no IPV6INIT=yes IPV6_AUTOCONF=yes IPV6_DEFROUTE=yes IPV6_FAILURE_FATAL=no IPV6_ADDR_GEN_MODE=stable-privacy NAME=ens224 UUID=69bd6dff-0e1c-4829-82ae-57561009c7c6 DEVICE=ens224 ONBOOT=yes NETWORK=210.196.71.248 BROADCAST=210.196.71.255 IPADDR=210.196.71.249 PREFIX=29 GATEWAY=210.196.71.253 ++ /etc/sysconfig/network-scripts/ifcfg-ens161 HWADDR=00:0C:29:4F:D0:E5 TYPE=Ethernet PROXY_METHOD=none BROWSER_ONLY=no IPV6INIT=no NAME=ens161 UUID=cdc15a30-6fcf-3c07-a91a-7beaf9f7d949 ONBOOT=yes AUTOCONNECT_PRIORITY=-999 NETWORK=210.196.71.248 IPADDR=210.196.71.250 PREFIX=29 GATEWAY=210.196.71.253 ++ /etc/sysconfig/network-scripts/ifcfg-ens193 HWADDR=00:0C:29:4F:D0:EF TYPE=Ethernet PROXY_METHOD=none BROWSER_ONLY=no IPV6INIT=no NAME=ens193 UUID=2235ff8f-58dc-36eb-8a2e-0aa9b63bffdd ONBOOT=yes AUTOCONNECT_PRIORITY=-999 IPADDR=210.196.71.251 PREFIX=29 GATEWAY=210.196.71.253 ++ /etc/sysconfig/network-scripts/ifcfg-ens256 HWADDR=00:0C:29:4F:D0:DB TYPE=Ethernet PROXY_METHOD=none BROWSER_ONLY=no IPV6INIT=no NAME=ens256 UUID=bd8e0444-f884-3169-808e-e3add6c6d788 ONBOOT=yes AUTOCONNECT_PRIORITY=-999 IPADDR=210.196.71.252 PREFIX=29 GATEWAY=210.196.71.253 ++ /etc/ssh/sshd_config (以下追記) ListenAddress 172.31.24.3 ListenAddress 172.31.200.1 ++ /etc/sysconfig/iptables *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [59:4971] :default - [0:0] :pass - [0:0] #-A INPUT -p icmp --icmp-type any -j ACCEPT -A INPUT -j default -A FORWARD -j pass -A FORWARD -j default -A default -m state --state RELATED,ESTABLISHED -j ACCEPT -A default ! -i ens224 -m state --state NEW -j ACCEPT -A default ! -i ens161 -m state --state NEW -j ACCEPT -A default ! -i ens193 -m state --state NEW -j ACCEPT -A default ! -i ens256 -m state --state NEW -j ACCEPT -A pass -d 172.31.24.232 -s 1.55.43.62/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 2.135.228.107/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 2.135.229.196/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 2.186.208.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 5.53.190.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 5.53.221.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 5.63.105.155/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 5.101.0.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 5.101.40.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 5.133.24.197/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 5.188.62.230/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 5.188.206.197/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 5.250.192.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 8.9.31.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 14.170.205.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 14.242.105.162/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 23.227.199.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 23.254.201.188/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 24.54.48.245/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 27.64.117.15/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 27.116.21.0/255.255.255.0 -j DROP # アドソル日進のメールサーバに関連するIPなので、dropしない。 #-A pass -d 172.31.24.232 -s 27.121.1.245/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 27.198.160.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 31.132.249.153/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 31.184.195.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 31.220.183.217/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 32.0.0.0/255.0.0.0 -j DROP -A pass -d 172.31.24.232 -s 37.48.64.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 37.49.224.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 37.49.225.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 37.49.226.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 37.49.230.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 37.216.243.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 37.104.207.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 39.60.118.119/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 41.73.234.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 41.79.79.102/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 41.141.228.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 41.151.167.37/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 43.249.36.174/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 45.13.39.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 45.32.220.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 45.82.153.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 45.95.169.253/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 45.118.40.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 45.118.41.19/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 45.121.216.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 45.125.65.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 45.142.120.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 45.142.195.5/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 45.143.223.57/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 45.147.230.171/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 45.162.229.131/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 45.227.253.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 46.2.202.112/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 46.10.207.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 46.13.4.144/255.255.255.248 -j DROP -A pass -d 172.31.24.232 -s 46.19.141.218/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 46.21.150.142/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 46.21.151.91/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 46.29.255.117/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 46.36.105.17/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 46.38.144.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 46.38.145.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 46.148.27.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 46.174.216.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 46.246.123.2/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 51.89.142.91/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 51.255.61.89/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 52.210.113.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 54.37.196.114/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 54.39.45.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 57.68.69.34/255.0.0.0 -j DROP -A pass -d 172.31.24.232 -s 58.64.169.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 59.13.27.100/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 59.120.155.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 60.28.246.113/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 60.191.139.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 60.215.125.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 61.190.7.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 62.73.92.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 62.128.102.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 62.176.108.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 62.210.139.41/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 62.210.140.7/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 62.210.248.53/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 64.55.104.2/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 64.82.228.83/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 64.111.16.0/255.255.240.0 -j DROP -A pass -d 172.31.24.232 -s 64.158.31.0/255.255.240.0 -j DROP -A pass -d 172.31.24.232 -s 66.196.200.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 66.198.168.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 67.211.213.32/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 67.220.171.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 67.211.217.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 67.213.229.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 68.15.99.155/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 68.236.175.5/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 69.172.78.21/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 70.35.206.55/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 72.92.83.210/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 74.208.175.211/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 77.77.124.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 77.85.117.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 77.87.77.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 77.210.255.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 77.243.22.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 78.29.40.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 78.128.113.86/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 78.128.113.88/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 79.110.125.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 80.66.81.143/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 80.82.65.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 80.82.67.55/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 80.82.70.189/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 80.82.77.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 80.82.78.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 80.121.148.116/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 80.191.237.169/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 80.211.26.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 80.211.69.79/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 80.211.178.40/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 80.211.186.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 80.244.237.22/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 80.249.233.129/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 81.95.7.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 82.102.20.164/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 82.102.20.179/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 82.102.31.53/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 81.130.134.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 82.147.195.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 82.151.142.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 82.202.167.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 83.66.105.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 83.239.241.152/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 84.17.58.66/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 84.54.36.126/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 85.95.168.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 85.187.183.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 85.202.82.89/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 85.214.194.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 86.105.49.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 87.120.166.159/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 87.227.246.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 87.246.7.34/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 87.246.7.35/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 88.85.228.90/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 88.86.94.46/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 88.204.214.122/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 89.238.132.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 89.248.160.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 89.248.162.145/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 89.248.171.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 89.248.172.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 89.249.65.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 91.90.44.23/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 91.140.237.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 91.142.144.76/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 91.192.4.35/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 91.200.12.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 91.209.70.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 91.205.217.70/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 91.211.71.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 91.212.150.158/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 91.234.99.230/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 92.118.38.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 92.247.68.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 93.174.93.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 94.23.196.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 94.79.4.251/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 94.102.50.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 94.102.56.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 94.102.63.72/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 94.188.160.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 94.241.227.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 94.250.164.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 95.6.36.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 95.43.220.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 95.76.246.143/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 95.110.227.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 95.111.39.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 95.180.194.202/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 95.211.211.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 95.225.172.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 96.9.76.27/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 101.234.130.0/255.255.224.0 -j DROP -A pass -d 172.31.24.232 -s 102.176.65.177/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 103.28.38.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 103.125.191.5/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 103.48.138.147/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 103.54.88.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 103.54.89.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 103.54.90.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 103.54.91.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 103.79.141.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 103.83.164.198/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 103.89.88.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 103.89.255.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 103.92.28.24/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 103.99.2.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 103.133.105.65/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 103.133.108.208/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 103.141.137.39/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 103.145.253.195/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 103.232.123.105/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 103.206.246.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 103.207.38.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 103.207.39.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 103.208.220.132/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 103.210.236.236/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 103.231.139.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 103.236.253.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 104.129.17.32/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 104.129.20.225/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 104.148.41.181/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 104.200.153.90/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 104.215.186.160/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 104.223.143.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 104.255.70.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 106.248.233.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 108.174.198.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 107.1.152.72/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 110.164.93.42/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 111.92.29.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 117.50.15.113/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 112.196.64.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 112.217.193.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 112.253.38.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 113.64.235.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 113.105.128.7/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 114.112.160.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 114.137.148.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 115.159.198.0/255.255.255.0 -j DROP # 東京ガスiネット116.202.71.72付近要注意 #-A pass -d 172.31.24.232 -s 116.202.71.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 117.70.38.232/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 118.70.126.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 118.193.217.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 119.28.69.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 119.184.176.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 120.25.166.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 120.26.233.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 120.56.214.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 120.92.153.47/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 121.61.32.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 121.244.121.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 122.154.128.235/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 122.160.17.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 123.22.92.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 123.31.34.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 124.160.127.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 121.78.122.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 130.61.24.101/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 137.74.80.139/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 131.161.81.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 134.209.238.83/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 141.98.9.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 142.0.43.232/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 142.4.1.148/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 142.11.202.140/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 142.44.157.166/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 142.93.103.215/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 144.126.202.25/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 144.217.224.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 145.239.20.37/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 145.249.105.25/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 146.185.0.0/255.255.0.0 -j DROP -A pass -d 172.31.24.232 -s 146.186.0.0/255.255.0.0 -j DROP -A pass -d 172.31.24.232 -s 149.56.113.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 150.60.192.254/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 150.109.52.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 151.9.79.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 151.53.40.178/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 151.254.37.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 153.122.3.100/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 154.70.200.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 154.69.116.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 154.69.149.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 155.133.82.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 159.65.44.18/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 159.224.140.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 162.223.95.38/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 162.220.51.30/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 167.99.111.111/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 167.114.152.118/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 167.114.181.155/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 169.50.62.66/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 171.49.200.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 172.83.40.98/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 172.98.67.36/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 173.161.142.53/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 173.244.208.35/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 174.138.13.66/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 175.6.133.182/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 175.100.68.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 175.126.74.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 175.160.53.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 176.31.42.161/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 176.31.125.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 176.59.43.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 176.61.143.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 176.114.19.226/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 177.104.247.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 177.124.24.2/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 177.125.164.2/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 177.200.212.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 178.72.91.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 178.120.13.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 178.128.255.99/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 178.151.241.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 178.236.60.227/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 179.43.178.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 179.191.215.210/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 180.211.86.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 181.66.165.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 181.214.206.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 182.43.234.34/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 182.239.0.0/255.255.0.0 -j DROP -A pass -d 172.31.24.232 -s 183.0.0.0/255.192.0.0 -j DROP -A pass -d 172.31.24.232 -s 184.22.109.154/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 185.242.4.51/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 185.35.117.102/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 185.36.81.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.38.127.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.40.4.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.43.8.43/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 185.56.80.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.77.248.7/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 185.86.4.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.103.97.208/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 185.126.200.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.128.40.236/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 185.130.5.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.137.111.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.140.12.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.144.82.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.148.241.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.170.40.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.176.27.140/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 185.189.113.83/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 185.208.211.185/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 185.211.245.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.212.129.147/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 185.216.140.67/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 185.222.209.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.234.216.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.234.217.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.234.218.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.234.219.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.236.36.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.244.214.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 185.244.213.11/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 185.254.188.215/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 186.15.118.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 186.69.160.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 186.144.254.199/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 186.136.193.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 187.162.100.79/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 188.21.52.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 188.65.149.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 188.165.219.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 188.165.221.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 188.165.238.185/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 188.166.42.50/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 188.170.216.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 189.43.88.18/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 189.202.87.228/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 190.2.52.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 190.12.47.246/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 190.85.158.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 190.90.36.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 190.90.191.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 190.111.14.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 190.117.169.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 190.145.95.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 190.190.115.225/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 190.236.203.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 191.96.249.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 191.114.213.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 192.99.7.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 192.99.8.171/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 194.99.106.147/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 192.99.108.168/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 192.99.175.117/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 192.111.147.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 192.232.192.0/255.255.192.0 -j DROP # gitlab.com #-A pass -d 172.31.24.232 -s 192.237.158.143/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 192.249.73.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 192.249.76.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 193.37.253.102/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 193.56.28.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 193.85.18.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 193.107.245.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 193.169.252.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 193.169.255.131/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 193.189.117.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 193.238.47.226/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 194.0.131.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 194.15.117.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 194.44.152.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 194.53.142.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 194.99.106.147/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 194.187.249.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 195.22.0.0/255.255.0.0 -j DROP -A pass -d 172.31.24.232 -s 195.116.203.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 195.154.0.0/255.255.0.0 -j DROP -A pass -d 172.31.24.232 -s 196.1.235.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 196.20.68.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 196.25.20.186/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 196.52.60.18/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 196.52.84.41/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 196.196.190.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 197.248.202.238/255.255.255.255 -j DROP # OBCポータルのIPのためブロックしない #-A pass -d 172.31.24.232 -s 198.37.151.100/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 198.50.191.198/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 198.251.83.42/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 199.116.115.141/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 199.116.115.148/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 199.180.115.68/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 200.0.0.0/255.0.0.0 -j DROP -A pass -d 172.31.24.232 -s 201.140.233.210/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 201.163.44.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 201.183.224.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 201.184.248.210/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 202.29.80.78/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 202.29.80.140/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 202.62.89.198/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 202.62.130.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 202.67.156.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 202.179.190.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 203.59.125.108/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 203.81.71.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 203.90.230.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 203.94.75.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 203.113.137.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 203.153.0.0/255.255.0.0 -j DROP -A pass -d 172.31.24.232 -s 203.156.92.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 205.251.150.146/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 208.82.218.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 209.10.95.48/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 209.11.159.5/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 209.105.233.228/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 209.222.103.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 210.87.240.0/255.255.240.0 -j DROP -A pass -d 172.31.24.232 -s 212.49.163.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 212.50.5.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 212.57.192.0/255.255.224.0 -j DROP -A pass -d 172.31.24.232 -s 212.70.149.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 212.83.186.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 212.129.49.0/255.255.224.0 -j DROP -A pass -d 172.31.24.232 -s 212.156.126.2/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 213.6.3.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 213.90.59.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 213.186.176.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 213.189.83.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 212.34.242.82/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 216.3.4.66/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 216.104.34.118/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 217.61.121.23/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 217.64.42.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 217.182.52.78/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 217.182.242.4/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 218.16.120.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 218.16.146.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 218.58.205.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 218.64.122.99/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 220.225.242.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 220.241.27.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 220.246.9.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 221.155.161.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 222.134.201.0/255.255.255.0 -j DROP -A pass -d 172.31.24.232 -s 223.223.194.83/255.255.255.255 -j DROP -A default -j DROP -A pass -d 172.31.24.5 -p tcp -m tcp --dport 53 -j ACCEPT -A pass -d 172.31.24.5 -p udp -m udp --dport 53 -j ACCEPT -A pass -d 172.31.24.5 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.5 -p tcp -m tcp --dport 443 -j ACCEPT -A INPUT -j default -A FORWARD -j pass -A FORWARD -j default -A default -m state --state RELATED,ESTABLISHED -j ACCEPT -A default ! -i ens224 -m state --state NEW -j ACCEPT -A default ! -i ens161 -m state --state NEW -j ACCEPT -A default ! -i ens193 -m state --state NEW -j ACCEPT -A default ! -i ens256 -m state --state NEW -j ACCEPT # -A pass -d 172.31.24.232 -s 0.0.0.0/0.0.0.0 -j ACCEPT -A pass -d 172.31.200.12 -s 1.202.70.134/255.255.255.255 -j DROP --- 踏み台サーバーdropフィルタ部分中略 --- -A pass -d 172.31.200.12 -s 223.255.183.10/255.255.255.255 -j DROP -A pass -d 172.31.24.232 -s 1.13.20.177/255.255.255.255 -j DROP --- メールサーバーdropフィルタ部分中略 --- -A pass -d 172.31.24.232 -s 223.241.117.180/255.255.255.255 -j DROP -A default -j DROP -A pass -d 172.31.24.5 -p tcp -m tcp --dport 53 -j ACCEPT -A pass -d 172.31.24.5 -p udp -m udp --dport 53 -j ACCEPT -A pass -d 172.31.24.5 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.5 -p tcp -m tcp --dport 443 -j ACCEPT # DNS -A pass -d 172.31.24.231 -p tcp -m tcp --dport 53 -j ACCEPT -A pass -d 172.31.24.231 -p udp -m udp --dport 53 -j ACCEPT #-A pass -d 172.31.24.10 -p tcp -m tcp --dport 22 -j ACCEPT # TGI通知メールバイパス -A pass -d 172.31.24.232 -s 52.199.63.0/255.255.255.0 -j ACCEPT -A pass -d 172.31.24.232 -s 52.198.247.0/255.255.255.0 -j ACCEPT -A pass -d 172.31.24.232 -s 13.115.104.0/255.255.255.0 -j ACCEPT -A pass -d 172.31.24.232 -s 18.179.48.0/255.255.255.0 -j ACCEPT -A pass -d 172.31.24.232 -s 3.112.23.0/255.255.255.0 -j ACCEPT # www.tdanp.jishin.net通知メールバイパス -A pass -d 172.31.24.232 -s 110.50.242.2/255.255.255.255 -j ACCEPT # hsspv.jishin.netメールバイパス -A pass -d 172.31.24.232 -s 113.35.159.189/255.255.255.255 -j ACCEPT # mta0[34].obc.smtps.jp勤務system通知 -A pass -d 172.31.24.232 -s 163.43.197.11/255.255.255.255 -j ACCEPT -A pass -d 172.31.24.232 -s 153.125.134.139/255.255.255.255 -j ACCEPT -A pass -d 172.31.24.232 -m state --state NEW -m multiport -p tcp --dports 25,465,587 -m hashlimit --hashlimit-name smtp_conn_limit --hashlimit 10/m --hashlimit-burst 10 --hashlimit-mode srcip --hashlimit-htable-expire 360000 -j ACCEPT -A pass -d 172.31.24.232 -m state --state NEW -m multiport -p tcp --dports 25,465,587 -j LOG --log-prefix "[IPTABLES CON SMTP DOS1]" -A pass -d 172.31.24.232 -m state ! --state NEW -p tcp -m multiport --dports 25,465,587 -j ACCEPT -A pass -d 172.31.24.232 -p tcp -m tcp --dport 110 -j ACCEPT -A pass -d 172.31.24.232 -p tcp -m tcp --dport 995 -j ACCEPT -A pass -d 172.31.24.232 -p tcp -m tcp --dport 20001 -j ACCEPT -A pass -d 172.31.24.232 -m state --state NEW -p tcp --dport 443 -m hashlimit --hashlimit-name web_limit --hashlimit 100/m --hashlimit-burst 1200 --hashlimit-mode srcip --hashlimit-htable-expire 360000 -j ACCEPT -A pass -d 172.31.24.232 -m state --state NEW -p tcp --dport 443 -j LOG --log-prefix "[IPTABLES CON WEB DOS1]" -A pass -d 172.31.24.232 -m state ! --state NEW -p tcp --dport 443 -j ACCEPT -A pass -d 172.31.24.228 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.232 -p tcp -m multiport --dports 25,465,587 -j ACCEPT -A pass -d 172.31.24.232 -p tcp -m tcp --dport 110 -j ACCEPT -A pass -d 172.31.24.232 -p tcp -m tcp --dport 995 -j ACCEPT -A pass -d 172.31.24.232 -p tcp -m tcp --dport 20001 -j ACCEPT -A pass -d 172.31.24.241 -p tcp -m tcp --dport 443 -j ACCEPT -A pass -d 172.31.24.228 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.33 -p tcp -m tcp --dport 8888 -j ACCEPT -A pass -d 172.31.24.98 -p tcp -m tcp --dport 5555 -j ACCEPT -A pass -d 172.31.24.9 -p tcp -m tcp --dport 22 -j ACCEPT -A pass -d 172.31.24.9 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.9 -p tcp -m tcp --dport 443 -j ACCEPT -A pass -d 172.31.24.9 -p tcp -m tcp --dport 3306 -j ACCEPT -A pass -d 172.31.24.9 -p udp -m udp --dport 3306 -j ACCEPT -A pass -d 172.31.24.9 -p tcp -m tcp --dport 8081 -j ACCEPT -A pass -d 172.31.24.9 -p tcp -m tcp --dport 5991 -j ACCEPT -A pass -d 172.31.24.9 -p tcp -m tcp --dport 5992 -j ACCEPT #-A pass -d 172.31.24.128 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.228 -p tcp -m tcp --dport 5432 -j ACCEPT -A pass -d 172.31.24.106 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.106 -p tcp -m tcp --dport 443 -j ACCEPT #-A pass -d 172.31.24.107 -p tcp -m tcp --dport 80 -j ACCEPT #-A pass -d 172.31.24.107 -p tcp -m tcp --dport 443 -j ACCEPT #-A pass -d 172.31.24.107 -p tcp -m tcp --dport 8443 -j ACCEPT #-A pass -d 172.31.24.107 -p tcp -m tcp --dport 8444 -j ACCEPT -A pass -d 172.31.24.230 -p tcp -m tcp --dport 443 -j ACCEPT -A pass -d 172.31.24.230 -p udp -m udp --dport 500 -j ACCEPT -A pass -d 172.31.24.230 -p udp -m udp --dport 4500 -j ACCEPT -A pass -d 172.31.24.9 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.9 -p tcp -m tcp --dport 443 -j ACCEPT -A pass -d 172.31.24.9 -p tcp -m tcp --dport 3306 -j ACCEPT -A pass -d 172.31.24.9 -p udp -m udp --dport 3306 -j ACCEPT -A pass -d 172.31.24.9 -p tcp -m tcp --dport 8081 -j ACCEPT -A pass -d 172.31.24.9 -p tcp -m tcp --dport 5991 -j ACCEPT -A pass -d 172.31.24.9 -p tcp -m tcp --dport 5992 -j ACCEPT #-A pass -d 172.31.24.128 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.228 -p tcp -m tcp --dport 5432 -j ACCEPT -A pass -d 172.31.24.235 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.235 -p tcp -m tcp --dport 443 -j ACCEPT #-A pass -d 172.31.24.237 -p tcp -m tcp --dport 80 -j ACCEPT #-A pass -d 172.31.24.237 -p tcp -m tcp --dport 443 -j ACCEPT #-A pass -d 172.31.24.237 -p tcp -m tcp --dport 8443 -j ACCEPT #-A pass -d 172.31.24.237 -p tcp -m tcp --dport 8444 -j ACCEPT #-A pass -d 172.31.24.230 -p tcp -m tcp --dport 443 -j ACCEPT #-A pass -d 172.31.24.230 -p udp -m udp --dport 500 -j ACCEPT #-A pass -d 172.31.24.230 -p udp -m udp --dport 4500 -j ACCEPT -A pass -d 172.31.24.35 -p tcp -m tcp --dport 81 -j ACCEPT # KCS -> carrot -A pass -s 172.31.4.0/22 -d 172.31.24.0/22 -j ACCEPT -A pass -s 172.31.4.0/22 -d 172.31.24.0/22 -j ACCEPT -A pass -d 172.31.24.227 -p tcp -m tcp --dport 10400 -j ACCEPT -A pass -d 172.31.24.227 -p udp -m udp --dport 10400 -j ACCEPT -A pass -d 172.31.24.31 -p tcp -m tcp --dport 8443 -j ACCEPT -A pass -d 172.31.200.12 -p tcp -m tcp --dport 22 -j ACCEPT -A pass -d 172.31.200.12 -p tcp -m tcp --dport 25 -j ACCEPT # PhoMES Light -A pass -d 172.31.24.108 -p tcp -m tcp --dport 22 -s 118.27.22.29/23 -j ACCEPT -A pass -d 172.31.24.108 -p tcp -m tcp --dport 80 -s 118.27.22.29/23 -j ACCEPT -A pass -d 172.31.24.238 -p tcp -m tcp --dport 22 -s 118.27.22.29/23 -j ACCEPT -A pass -d 172.31.24.238 -p tcp -m tcp --dport 80 -s 118.27.22.29/23 -j ACCEPT # Teiki Ekishi Vision (Staging) -A pass -d 172.31.24.108 -p tcp -m tcp --dport 22 -s 13.115.249.210 -j ACCEPT -A pass -d 172.31.24.108 -p tcp -m tcp --dport 80 -s 13.115.249.210 -j ACCEPT -A pass -d 172.31.24.108 -p tcp -m tcp --dport 22 -s 54.199.129.242 -j ACCEPT -A pass -d 172.31.24.108 -p tcp -m tcp --dport 80 -s 54.199.129.242 -j ACCEPT -A pass -d 172.31.24.238 -p tcp -m tcp --dport 22 -s 13.115.249.210 -j ACCEPT -A pass -d 172.31.24.238 -p tcp -m tcp --dport 80 -s 13.115.249.210 -j ACCEPT -A pass -d 172.31.24.238 -p tcp -m tcp --dport 22 -s 54.199.129.242 -j ACCEPT -A pass -d 172.31.24.238 -p tcp -m tcp --dport 80 -s 54.199.129.242 -j ACCEPT # Teiki Ekishi Vision (Production) -A pass -d 172.31.24.108 -p tcp -m tcp --dport 22 -s 13.114.85.91 -j ACCEPT -A pass -d 172.31.24.108 -p tcp -m tcp --dport 80 -s 13.114.85.91 -j ACCEPT -A pass -d 172.31.24.108 -p tcp -m tcp --dport 22 -s 54.249.216.0 -j ACCEPT -A pass -d 172.31.24.108 -p tcp -m tcp --dport 80 -s 54.249.216.0 -j ACCEPT -A pass -d 172.31.24.238 -p tcp -m tcp --dport 22 -s 13.114.85.91 -j ACCEPT -A pass -d 172.31.24.238 -p tcp -m tcp --dport 80 -s 13.114.85.91 -j ACCEPT -A pass -d 172.31.24.238 -p tcp -m tcp --dport 22 -s 54.249.216.0 -j ACCEPT -A pass -d 172.31.24.238 -p tcp -m tcp --dport 80 -s 54.249.216.0 -j ACCEPT # Uruwashiki Ehon -A pass -d 172.31.24.108 -p tcp -m tcp --dport 22 -s 160.16.78.73 -j ACCEPT -A pass -d 172.31.24.108 -p tcp -m tcp --dport 80 -s 160.16.78.73 -j ACCEPT -A pass -d 172.31.24.238 -p tcp -m tcp --dport 22 -s 160.16.78.73 -j ACCEPT -A pass -d 172.31.24.238 -p tcp -m tcp --dport 80 -s 160.16.78.73 -j ACCEPT # UMIN Hosting -A pass -d 172.31.24.108 -p tcp -m tcp --dport 22 -s 130.69.92.113 -j ACCEPT -A pass -d 172.31.24.108 -p tcp -m tcp --dport 80 -s 130.69.92.113 -j ACCEPT -A pass -d 172.31.24.238 -p tcp -m tcp --dport 22 -s 130.69.92.113 -j ACCEPT -A pass -d 172.31.24.238 -p tcp -m tcp --dport 80 -s 130.69.92.113 -j ACCEPT # europa -A pass -d 172.31.24.231 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.231 -p tcp -m tcp --dport 443 -j ACCEPT # proteus -A pass -d 172.31.24.204 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.204 -p tcp -m tcp --dport 443 -j ACCEPT -A pass -d 172.31.24.82 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.82 -p tcp -m tcp --dport 443 -j ACCEPT # fmsagami -A pass -d 172.31.24.53 -p tcp -m tcp --dport 10080 -j ACCEPT # Uruwashiki Android Test Server -A pass -d 172.31.24.121 -p tcp -m tcp --dport 8443 -j ACCEPT # cavpn.carrot.co.jp -A pass -d 172.31.24.251 -p tcp -m tcp --dport 5555 -j ACCEPT -A pass -d 172.31.24.251 -p udp -m udp --dport 500 -j ACCEPT -A pass -d 172.31.24.251 -p udp -m udp --dport 4500 -j ACCEPT # saigaist.carrot.co.jp -A pass -d 172.31.24.243 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.243 -p tcp -m tcp --dport 443 -j ACCEPT -A pass -d 172.31.24.244 -p tcp -m tcp --dport 80 -j ACCEPT -A pass -d 172.31.24.244 -p tcp -m tcp --dport 443 -j ACCEPT COMMIT # Completed on Wed Oct 25 15:36:26 2006 # Generated by iptables-save v1.2.11 on Wed Oct 25 15:36:26 2006 *nat :PREROUTING ACCEPT [21:1563] :POSTROUTING ACCEPT [2:187] :OUTPUT ACCEPT [2:187] # phobos -A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 8888 -j DNAT --to-destination 172.31.24.33:8888 # mozart -A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 5555 -j DNAT --to-destination 172.31.24.98:5555 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 5555 -j DNAT --to-destination 172.31.24.98:5555 -A PREROUTING -d 210.196.71.251 -p udp -m udp --dport 500 -j DNAT --to-destination 172.31.24.98:500 -A PREROUTING -d 210.196.71.251 -p udp -m udp --dport 4500 -j DNAT --to-destination 172.31.24.98:4500 # europa (210.196.71.251 -> 172.31.24.231) -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 53 -j DNAT --to-destination 172.31.24.231:53 -A PREROUTING -d 210.196.71.251 -p udp -m udp --dport 53 -j DNAT --to-destination 172.31.24.231:53 -A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 53 -j DNAT --to-destination 172.31.24.231:53 -A PREROUTING -d 210.196.71.250 -p udp -m udp --dport 53 -j DNAT --to-destination 172.31.24.231:53 -A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 53 -j DNAT --to-destination 172.31.24.231:53 -A PREROUTING -d 210.196.71.250 -p udp -m udp --dport 53 -j DNAT --to-destination 172.31.24.231:53 -A PREROUTING -d 210.196.71.249 -p tcp -m tcp --dport 53 -j DNAT --to-destination 172.31.24.231:53 -A PREROUTING -d 210.196.71.249 -p udp -m udp --dport 53 -j DNAT --to-destination 172.31.24.231:53 -A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.231:80 -A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.231:443 # NB -A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 8443 -j DNAT --to-destination 172.31.24.31:8443 # fmsagami -A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 10080 -j DNAT --to-destination 172.31.24.53:10080 # NBMAC -A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 3000 -j DNAT --to-destination 172.31.24.54:3000 -A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 11434 -j DNAT --to-destination 172.31.24.54:11434 # MTA WAN -> LAN -A PREROUTING -d 172.31.200.100 -p tcp -m tcp --dport 25 -j DNAT --to-destination 172.31.24.232:25 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 25 -j DNAT --to-destination 172.31.24.232:25 # -A PREROUTING -d 172.31.200.100 -p tcp -m tcp --dport 25 -j DNAT --to-destination 172.31.24.232:25 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 25 -j DNAT --to-destination 172.31.24.232:25 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 587 -j DNAT --to-destination 172.31.24.232:587 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 465 -j DNAT --to-destination 172.31.24.232:465 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 465 -j DNAT --to-destination 172.31.24.232:465 # MTA LAN -> WAN -A POSTROUTING -s 172.31.24.12 -p tcp -m tcp --dport 25 -j SNAT --to-source 210.196.71.251 # POP -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 110 -j DNAT --to-destination 172.31.24.232:110 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 995 -j DNAT --to-destination 172.31.24.232:995 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 993 -j DNAT --to-destination 172.31.24.232:993 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 20001 -j DNAT --to-destination 172.31.24.232:20001 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 110 -j DNAT --to-destination 172.31.24.232:110 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 995 -j DNAT --to-destination 172.31.24.232:995 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 993 -j DNAT --to-destination 172.31.24.232:993 # letsencrypt(www.carrot.co.jp) #-A PREROUTING -d 210.196.71.249 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.231:80 #-A PREROUTING -d 210.196.71.249 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.231:443 # letsencrypt(cybozu.carrot.co.jp smtp.carrot.co.jp pop3.carrot.co.jp) #-A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.231:80 #-A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.231:443 # letsencrypt(tethys.carrot.co.jp ssd.carrot.co.jp promoter.carrot.co.jp) #-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.231:80 #-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.231:443 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 20001 -j DNAT --to-destination 172.31.24.229:20001 # netmster-wiki -A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.224:443 # letsencrypt acme -A PREROUTING -d 210.196.71.249 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.224:80 -A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.224:80 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.224:80 -A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.224:80 # www.carrot.co.jp -A PREROUTING -d 210.196.71.249 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.204:80 -A PREROUTING -d 210.196.71.249 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.204:443 -A PREROUTING -d 210.196.71.249 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.224:443 # cybozu #-A PREROUTING -d 210.196.71.251 -i ens193 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.232:443 -A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.232:443 -A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.241:443 # Uruwashiki Android Test Server (210.196.71.252 -> 172.31.24.121) -A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 8443 -j DNAT --to-destination 172.31.24.121:8443 # bh (210.196.71.252 -> 172.31.24.9) #-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 22 -j DNAT --to-destination 172.31.24.9:22 #-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.9:80 #-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.9:443 #-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 3306 -j DNAT --to-destination 172.31.24.9:3306 #-A PREROUTING -d 210.196.71.252 -i ens224 -p udp -m udp --dport 3306 -j DNAT --to-destination 172.31.24.9:3306 #-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 5991 -j DNAT --to-destination 172.31.24.9:5991 #-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 5992 -j DNAT --to-destination 172.31.24.9:5992 #-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 8081 -j DNAT --to-destination 172.31.24.9:8081 # Rekochoku (210.196.71.252 -> 172.31.24.228) -A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 5432 -j DNAT --to-destination 172.31.24.228:5432 # tethys.carrot.co.jp (210.196.71.252 -> 172.31.24.107) 2020/03/31 CLOSED #-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 10080 -j DNAT --to-destination 172.31.24.107:80 #-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 10443 -j DNAT --to-destination 172.31.24.107:443 #-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 8443 -j DNAT --to-destination 172.31.24.107:8443 #-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 8444 -j DNAT --to-destination 172.31.24.107:8444 # cavpn.carrot.co.jp (210.196.71.252 -> 172.31.24.251) SoftEtherVPN(G2) -A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 15555 -j DNAT --to-destination 172.31.24.251:5555 -A PREROUTING -d 210.196.71.252 -p udp -m udp --dport 500 -j DNAT --to-destination 172.31.24.251:500 -A PREROUTING -d 210.196.71.252 -p udp -m udp --dport 4500 -j DNAT --to-destination 172.31.24.251:4500 # phomes.carrot.co.jp (210.196.71.252 -> 172.31.24.230) VPN TEST -A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 10443 -j DNAT --to-destination 172.31.24.230:443 -A PREROUTING -d 210.196.71.252 -p udp -m udp --dport 500 -j DNAT --to-destination 172.31.24.230:500 -A PREROUTING -d 210.196.71.252 -p udp -m udp --dport 4500 -j DNAT --to-destination 172.31.24.230:4500 # promoter web & ssd (revers proxy) (210.196.71.252 -> 172.31.24.229) -A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.229:443 # dione.carrot.co.jp (210.196.71.252 -> 172.31.24.108) GitLab SYS2G -A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 22 -j DNAT --to-destination 172.31.24.108:22 -A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 8080 -j DNAT --to-destination 172.31.24.108:80 # promoter web (210.196.71.252 -> 172.31.24.106) -A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.106:80 # ssd web (210.196.71.252 -> 172.31.24.106) -A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.106:443 # carelib web (210.196.71.252 -> 172.31.24.106) #-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 5010 -j DNAT --to-destination 172.31.24.106:8080 # zeno MSSQLServer (210.196.71.252 -> 172.31.24.227) -A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 10400 -j DNAT --to-destination 172.31.24.227:10400 -A PREROUTING -d 210.196.71.252 -p udp -m udp --dport 10400 -j DNAT --to-destination 172.31.24.227:10400 #-A PREROUTING -d 210.196.71.250 -i ens224 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.227:10400 #-A PREROUTING -d 210.196.71.250 -i ens224 -p udp -m udp --dport 443 -j DNAT --to-destination 172.31.24.227:10400 -A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 10400 -j DNAT --to-destination 172.31.24.205:10400 -A PREROUTING -d 210.196.71.252 -p udp -m udp --dport 10400 -j DNAT --to-destination 172.31.24.205:10400 # styx remote server (210.196.71.252 -> 172.31.200.12) ISLAND -A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 10999 -j DNAT --to-destination 172.31.200.12:22 # LAN -> WAN (Gateway(rickdom): 210.196.71.249) #-A POSTROUTING -s 172.31.24.221 -o ens224 -j SNAT --to-source 210.196.71.251 -A POSTROUTING -s 172.31.24.232 -j SNAT --to-source 210.196.71.251 -A POSTROUTING -o ens224 -j SNAT --to-source 210.196.71.249 -A POSTROUTING -o ens161 -j SNAT --to-source 210.196.71.250 -A POSTROUTING -o ens193 -j SNAT --to-source 210.196.71.251 -A POSTROUTING -o ens256 -j SNAT --to-source 210.196.71.252 COMMIT ++ /etc/dhcp/dhcpd.conf authoritative; option domain-name "carrot.co.jp"; option domain-name-servers 172.31.24.30, 172.31.24.20; ddns-updates on; ddns-update-style interim; ignore client-updates; update-static-leases on; include "/etc/ddns.key"; zone carrot.co.jp. { primary 172.31.24.30; key DDNS; } zone 24.31.172.in-addr.arpa. { primary 172.31.24.30; key DDNS; } subnet 172.31.24.0 netmask 255.255.255.0 { # --- default gateway option routers 172.31.24.3; option subnet-mask 255.255.255.0; option nis-domain "carrotnet"; option time-offset -18000; # Eastern Standard Time option ntp-servers 172.31.24.231; option domain-search "carrot.co.jp"; # option netbios-name-servers 172.31.24.48; # --- Selects point-to-point node (default is hybrid). Don't change this unless # -- you understand Netbios very well # option netbios-node-type 2; range dynamic-bootp 172.31.24.111 172.31.24.199; default-lease-time 216; max-lease-time 43200; } # we want the nameserver to appear at a fixed address #--- Carrotnet Hosts ---- host bach { hardware ethernet 70:20:84:01:A4:DC; fixed-address 172.31.24.33; update-static-leases on; } host DocuPrint { hardware ethernet 1C:7D:22:36:D6:6A; fixed-address 172.31.24.34; update-static-leases on; } host intranet-server { hardware ethernet b8:ac:6f:81:47:a5; fixed-address 172.31.24.36; update-static-leases on; } host mozart { hardware ethernet F8:B1:56:D3:E5:9B; fixed-address 172.31.24.98; update-static-leases on; } # # [重要] 172.31.24.37/172.31.24.28 は電話の交換機で固定で使用しているので # 割り当て不可 # #--- Groupware Hosts --- host odessa { hardware ethernet 00:07:40:98:D1:39; fixed-address 172.31.24.20; update-static-leases on; } host pluto { hardware ethernet 00:01:80:6C:0B:EB; fixed-address 172.31.24.30; update-static-leases on; } #--- NB Host --- host NB { hardware ethernet D4:BE:D9:CA:6A:DE; fixed-address 172.31.24.31; update-static-leases on; } #--- Common Host ---- host jaguar { hardware ethernet 00:0C:29:4F:C4:19; fixed-address 172.31.24.40; update-static-leases on; } host jaguar2 { hardware ethernet 00:07:40:24:9E:E1; fixed-address 172.31.24.41; update-static-leases on; } #--- Project Hosts # Sony EdgeStore Project host cardl2 { hardware ethernet 00:01:80:6B:5B:A8; fixed-address 172.31.24.48; update-static-leases on; } host COM-MID1 { hardware ethernet 08:00:23:91:98:A7; fixed-address 172.31.24.49; update-static-leases on; } host COM-MID2 { hardware ethernet BC:C3:42:08:E2:72; fixed-address 172.31.24.50; update-static-leases on; } host fmsagami { hardware ethernet 00:19:b9:08:49:de; fixed-address 172.31.24.53; update-static-leases on; } # Panasonic Project host nhktoc { hardware ethernet 00:0C:29:84:FD:1A; fixed-address 172.31.24.86; update-static-leases on; } # SYS2グループ新サーバー host sys2g-2020 { hardware ethernet 6C:2B:59:BE:C8:BF; fixed-address 172.31.24.88; option host-name "sys2g-2020.carrot.co.jp"; update-static-leases on; } # Partner GW Host host cento { hardware ethernet 00:01:80:6b:62:d0; fixed-address 172.31.24.90; update-static-leases on; } host cento2 { hardware ethernet 00:0C:29:CC:3F:13; fixed-address 172.31.24.91; update-static-leases on; } #--- Sys1 Group Hosts ---- host sys1server { hardware ethernet d4:ae:52:b8:af:bf; fixed-address 172.31.24.70; update-static-leases on; } #--- HUB Hosts --- host newairport { hardware ethernet 00:16:01:5B:76:63; fixed-address 172.31.24.95; update-static-leases on; } host airport { hardware ethernet 88:57:EE:CC:0B:1C; fixed-address 172.31.24.100; update-static-leases on; } #--- Reserve --- # host regalis { # fixed-address 172.31.24.96; # } # # host cardreader { # fixed-address 172.31.24.97; # } ++ /etc/postfix/main.cf (以下差分) 76a77 > myhostname = echeclus.carrot.co.jp 83a85 > mydomain = carrot.co.jp 99a102 > myorigin = $mydomain 116c119 < inet_interfaces = localhost --- > inet_interfaces = localhost, 172.31.200.1 266a270 > mynetworks = 172.0.0.0/8, 172.31.200.0/24 317a322 > relayhost = 172.31.24.232 * データ移行 [#b4722d72] /home/backup0/ /online/ ※/online/bin/backup0.shはOS依存のため差し替え * グループ移行 [#h512ba67] backup0:x:581: * アカウント移行 [#yec16acc] backup0:x:581:581::/home/backup0:/bin/bash ※合わせてshadowも移植 * sudo設定 [#y5a81c34] (以下追加) backup0 ALL=(ALL) NOPASSWD:/online/bin/rsync.sh, /usr/bin/rsync * cron [#j4001fb3] (root) 00 1 * * 1 /online/bin/backup0.sh > /dev/null 1 19 * * 5 /online/bin/check_mail_filter_weekly.sh > /dev/null 14 19 * * 5 /online/bin/check_cybozu_filter_weekly.sh > /dev/null 11 19 * * 5 /online/bin/check_sshauthfailed.sh > /dev/null 00 6 * * 3 /online/bin/sync_dump_mariners.sh (backup0) MAILFROM="root@carrot.co.jp" 0 7 * * * /usr/bin/sudo /usr/bin/rsync -auvz --delete -e "ssh -t -i /home/backup0/.ssh/id_rsa" --rsync-path='sudo /usr/bin/rsync' backup0@172.31.200.11:/var/log/ /home/backup0/mariners/log/ 0 15 * * * /usr/bin/sudo /usr/bin/rsync -auvz --delete -e "ssh -t -i /home/backup0/.ssh/id_rsa" --rsync-path='sudo /usr/bin/rsync' backup0@172.31.200.12:/home/ /home/backup0/styx/home/ 0 16 * * * /usr/bin/sudo /usr/bin/rsync -auvz --delete -e "ssh -t -i /home/backup0/.ssh/id_rsa" --rsync-path='sudo /usr/bin/rsync' backup0@172.31.200.12:/var/log/ /home/backup0/styx/log/ * 課題 [#n6b4cf1c] iptables -> firewalldの移植をしたい。最悪iptablesを継続して使う
