サーバー設定/echeclus.carrot.co.jp の履歴(No.1)

履歴一覧
差分を表示
現在との差分を表示
ソースを表示
サーバー設定/echeclus.carrot.co.jp へ行く。
- 1 (2023-11-08 (水) 22:58:26)

Top/サーバー設定/echeclus.carrot.co.jp

社内-社外ネットワークゲートウェイ/DHCPサーバー†

構成検討中

↑

パッケージ追加†

firewalld
dhcp

↑

詳細設定†

/etcresolv.conf

# Generated by NetworkManager
search carrot.co.jp
nameserver 8.8.8.8

/etc/modules-load.d/br_netfilter.conf

br_netfilter
※以下実施
# systemctl restart systemd-modules-load.service

/etc/sysctl.conf

net.ipv4.conf.all.rp_filter = 2
net.ipv4.conf.default.accept_source_route = 2
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0
net.bridge.bridge-nf-call-arptables = 0
vm.swappiness=10
net.core.somaxconn = 65535
net.core.netdev_max_backlog = 16384
net.core.rmem_max = 134217728
net.core.wmem_max = 134217728

/etc/sysconfig/network

FORWARD_IPV4="yes"
GATEWAY=210.196.71.253

/etc/sysconfig/network-scripts/ifcfg-ens192

TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=none
DEFROUTE=no
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens192
UUID=0682dbe7-9e4d-4c88-a2b7-124891560655
DEVICE=ens192
ONBOOT=yes
IPADDR1=172.31.200.1
PREFIX1=24
NETWORK=172.31.24.0
PEERDNS=no
DNS1=8.8.8.8
IPV6ADDR=2001:db8::1/64
IPADDR=172.31.24.3
PREFIX2=24

/etc/sysconfig/network-scripts/ifcfg-ens224

TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=none
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens224
UUID=69bd6dff-0e1c-4829-82ae-57561009c7c6
DEVICE=ens224
ONBOOT=yes
NETWORK=210.196.71.248
BROADCAST=210.196.71.255
IPADDR=210.196.71.249
PREFIX=29
GATEWAY=210.196.71.253

/etc/sysconfig/network-scripts/ifcfg-ens161

HWADDR=00:0C:29:4F:D0:E5
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
IPV6INIT=no
NAME=ens161
UUID=cdc15a30-6fcf-3c07-a91a-7beaf9f7d949
ONBOOT=yes
AUTOCONNECT_PRIORITY=-999
NETWORK=210.196.71.248
IPADDR=210.196.71.250
PREFIX=29
GATEWAY=210.196.71.253

/etc/sysconfig/network-scripts/ifcfg-ens193

HWADDR=00:0C:29:4F:D0:EF
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
IPV6INIT=no
NAME=ens193
UUID=2235ff8f-58dc-36eb-8a2e-0aa9b63bffdd
ONBOOT=yes
AUTOCONNECT_PRIORITY=-999
IPADDR=210.196.71.251
PREFIX=29
GATEWAY=210.196.71.253

/etc/sysconfig/network-scripts/ifcfg-ens256

HWADDR=00:0C:29:4F:D0:DB
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
IPV6INIT=no
NAME=ens256
UUID=bd8e0444-f884-3169-808e-e3add6c6d788
ONBOOT=yes
AUTOCONNECT_PRIORITY=-999
IPADDR=210.196.71.252
PREFIX=29
GATEWAY=210.196.71.253

/etc/ssh/sshd_config

(以下追記)
ListenAddress 172.31.24.3
ListenAddress 172.31.200.1

/etc/sysconfig/iptables

*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [59:4971]
:default - [0:0]
:pass - [0:0]
#-A INPUT -p icmp --icmp-type any -j ACCEPT
-A INPUT -j default
-A FORWARD -j pass
-A FORWARD -j default
-A default -m state --state RELATED,ESTABLISHED -j ACCEPT
-A default ! -i ens224 -m state --state NEW -j ACCEPT
-A default ! -i ens161 -m state --state NEW -j ACCEPT
-A default ! -i ens193 -m state --state NEW -j ACCEPT
-A default ! -i ens256 -m state --state NEW -j ACCEPT
-A pass -d 172.31.24.232 -s 1.55.43.62/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 2.135.228.107/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 2.135.229.196/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 2.186.208.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 5.53.190.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 5.53.221.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 5.63.105.155/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 5.101.0.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 5.101.40.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 5.133.24.197/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 5.188.62.230/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 5.188.206.197/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 5.250.192.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 8.9.31.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 14.170.205.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 14.242.105.162/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 23.227.199.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 23.254.201.188/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 24.54.48.245/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 27.64.117.15/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 27.116.21.0/255.255.255.0 -j DROP
# アドソル日進のメールサーバに関連するIPなので、dropしない。
#-A pass -d 172.31.24.232 -s 27.121.1.245/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 27.198.160.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 31.132.249.153/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 31.184.195.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 31.220.183.217/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 32.0.0.0/255.0.0.0 -j DROP
-A pass -d 172.31.24.232 -s 37.48.64.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 37.49.224.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 37.49.225.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 37.49.226.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 37.49.230.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 37.216.243.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 37.104.207.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 39.60.118.119/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 41.73.234.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 41.79.79.102/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 41.141.228.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 41.151.167.37/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 43.249.36.174/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 45.13.39.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 45.32.220.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 45.82.153.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 45.95.169.253/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 45.118.40.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 45.118.41.19/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 45.121.216.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 45.125.65.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 45.142.120.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 45.142.195.5/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 45.143.223.57/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 45.147.230.171/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 45.162.229.131/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 45.227.253.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 46.2.202.112/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 46.10.207.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 46.13.4.144/255.255.255.248 -j DROP
-A pass -d 172.31.24.232 -s 46.19.141.218/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 46.21.150.142/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 46.21.151.91/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 46.29.255.117/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 46.36.105.17/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 46.38.144.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 46.38.145.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 46.148.27.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 46.174.216.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 46.246.123.2/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 51.89.142.91/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 51.255.61.89/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 52.210.113.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 54.37.196.114/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 54.39.45.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 57.68.69.34/255.0.0.0 -j DROP
-A pass -d 172.31.24.232 -s 58.64.169.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 59.13.27.100/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 59.120.155.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 60.28.246.113/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 60.191.139.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 60.215.125.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 61.190.7.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 62.73.92.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 62.128.102.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 62.176.108.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 62.210.139.41/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 62.210.140.7/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 62.210.248.53/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 64.55.104.2/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 64.82.228.83/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 64.111.16.0/255.255.240.0 -j DROP
-A pass -d 172.31.24.232 -s 64.158.31.0/255.255.240.0 -j DROP
-A pass -d 172.31.24.232 -s 66.196.200.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 66.198.168.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 67.211.213.32/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 67.220.171.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 67.211.217.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 67.213.229.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 68.15.99.155/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 68.236.175.5/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 69.172.78.21/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 70.35.206.55/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 72.92.83.210/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 74.208.175.211/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 77.77.124.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 77.85.117.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 77.87.77.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 77.210.255.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 77.243.22.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 78.29.40.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 78.128.113.86/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 78.128.113.88/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 79.110.125.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 80.66.81.143/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 80.82.65.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 80.82.67.55/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 80.82.70.189/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 80.82.77.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 80.82.78.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 80.121.148.116/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 80.191.237.169/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 80.211.26.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 80.211.69.79/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 80.211.178.40/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 80.211.186.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 80.244.237.22/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 80.249.233.129/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 81.95.7.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 82.102.20.164/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 82.102.20.179/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 82.102.31.53/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 81.130.134.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 82.147.195.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 82.151.142.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 82.202.167.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 83.66.105.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 83.239.241.152/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 84.17.58.66/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 84.54.36.126/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 85.95.168.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 85.187.183.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 85.202.82.89/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 85.214.194.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 86.105.49.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 87.120.166.159/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 87.227.246.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 87.246.7.34/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 87.246.7.35/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 88.85.228.90/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 88.86.94.46/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 88.204.214.122/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 89.238.132.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 89.248.160.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 89.248.162.145/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 89.248.171.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 89.248.172.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 89.249.65.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 91.90.44.23/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 91.140.237.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 91.142.144.76/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 91.192.4.35/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 91.200.12.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 91.209.70.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 91.205.217.70/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 91.211.71.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 91.212.150.158/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 91.234.99.230/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 92.118.38.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 92.247.68.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 93.174.93.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 94.23.196.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 94.79.4.251/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 94.102.50.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 94.102.56.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 94.102.63.72/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 94.188.160.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 94.241.227.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 94.250.164.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 95.6.36.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 95.43.220.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 95.76.246.143/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 95.110.227.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 95.111.39.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 95.180.194.202/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 95.211.211.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 95.225.172.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 96.9.76.27/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 101.234.130.0/255.255.224.0 -j DROP
-A pass -d 172.31.24.232 -s 102.176.65.177/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 103.28.38.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 103.125.191.5/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 103.48.138.147/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 103.54.88.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 103.54.89.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 103.54.90.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 103.54.91.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 103.79.141.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 103.83.164.198/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 103.89.88.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 103.89.255.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 103.92.28.24/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 103.99.2.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 103.133.105.65/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 103.133.108.208/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 103.141.137.39/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 103.145.253.195/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 103.232.123.105/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 103.206.246.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 103.207.38.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 103.207.39.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 103.208.220.132/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 103.210.236.236/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 103.231.139.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 103.236.253.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 104.129.17.32/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 104.129.20.225/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 104.148.41.181/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 104.200.153.90/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 104.215.186.160/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 104.223.143.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 104.255.70.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 106.248.233.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 108.174.198.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 107.1.152.72/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 110.164.93.42/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 111.92.29.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 117.50.15.113/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 112.196.64.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 112.217.193.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 112.253.38.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 113.64.235.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 113.105.128.7/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 114.112.160.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 114.137.148.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 115.159.198.0/255.255.255.0 -j DROP
# 東京ガスiネット116.202.71.72付近要注意
#-A pass -d 172.31.24.232 -s 116.202.71.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 117.70.38.232/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 118.70.126.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 118.193.217.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 119.28.69.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 119.184.176.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 120.25.166.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 120.26.233.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 120.56.214.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 120.92.153.47/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 121.61.32.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 121.244.121.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 122.154.128.235/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 122.160.17.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 123.22.92.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 123.31.34.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 124.160.127.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 121.78.122.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 130.61.24.101/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 137.74.80.139/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 131.161.81.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 134.209.238.83/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 141.98.9.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 142.0.43.232/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 142.4.1.148/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 142.11.202.140/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 142.44.157.166/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 142.93.103.215/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 144.126.202.25/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 144.217.224.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 145.239.20.37/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 145.249.105.25/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 146.185.0.0/255.255.0.0 -j DROP
-A pass -d 172.31.24.232 -s 146.186.0.0/255.255.0.0 -j DROP
-A pass -d 172.31.24.232 -s 149.56.113.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 150.60.192.254/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 150.109.52.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 151.9.79.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 151.53.40.178/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 151.254.37.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 153.122.3.100/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 154.70.200.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 154.69.116.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 154.69.149.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 155.133.82.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 159.65.44.18/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 159.224.140.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 162.223.95.38/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 162.220.51.30/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 167.99.111.111/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 167.114.152.118/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 167.114.181.155/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 169.50.62.66/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 171.49.200.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 172.83.40.98/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 172.98.67.36/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 173.161.142.53/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 173.244.208.35/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 174.138.13.66/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 175.6.133.182/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 175.100.68.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 175.126.74.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 175.160.53.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 176.31.42.161/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 176.31.125.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 176.59.43.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 176.61.143.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 176.114.19.226/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 177.104.247.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 177.124.24.2/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 177.125.164.2/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 177.200.212.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 178.72.91.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 178.120.13.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 178.128.255.99/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 178.151.241.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 178.236.60.227/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 179.43.178.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 179.191.215.210/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 180.211.86.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 181.66.165.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 181.214.206.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 182.43.234.34/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 182.239.0.0/255.255.0.0 -j DROP
-A pass -d 172.31.24.232 -s 183.0.0.0/255.192.0.0 -j DROP
-A pass -d 172.31.24.232 -s 184.22.109.154/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 185.242.4.51/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 185.35.117.102/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 185.36.81.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.38.127.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.40.4.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.43.8.43/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 185.56.80.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.77.248.7/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 185.86.4.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.103.97.208/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 185.126.200.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.128.40.236/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 185.130.5.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.137.111.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.140.12.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.144.82.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.148.241.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.170.40.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.176.27.140/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 185.189.113.83/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 185.208.211.185/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 185.211.245.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.212.129.147/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 185.216.140.67/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 185.222.209.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.234.216.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.234.217.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.234.218.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.234.219.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.236.36.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.244.214.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 185.244.213.11/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 185.254.188.215/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 186.15.118.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 186.69.160.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 186.144.254.199/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 186.136.193.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 187.162.100.79/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 188.21.52.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 188.65.149.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 188.165.219.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 188.165.221.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 188.165.238.185/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 188.166.42.50/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 188.170.216.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 189.43.88.18/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 189.202.87.228/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 190.2.52.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 190.12.47.246/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 190.85.158.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 190.90.36.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 190.90.191.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 190.111.14.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 190.117.169.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 190.145.95.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 190.190.115.225/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 190.236.203.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 191.96.249.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 191.114.213.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 192.99.7.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 192.99.8.171/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 194.99.106.147/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 192.99.108.168/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 192.99.175.117/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 192.111.147.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 192.232.192.0/255.255.192.0 -j DROP
# gitlab.com
#-A pass -d 172.31.24.232 -s 192.237.158.143/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 192.249.73.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 192.249.76.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 193.37.253.102/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 193.56.28.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 193.85.18.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 193.107.245.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 193.169.252.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 193.169.255.131/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 193.189.117.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 193.238.47.226/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 194.0.131.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 194.15.117.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 194.44.152.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 194.53.142.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 194.99.106.147/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 194.187.249.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 195.22.0.0/255.255.0.0 -j DROP
-A pass -d 172.31.24.232 -s 195.116.203.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 195.154.0.0/255.255.0.0 -j DROP
-A pass -d 172.31.24.232 -s 196.1.235.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 196.20.68.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 196.25.20.186/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 196.52.60.18/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 196.52.84.41/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 196.196.190.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 197.248.202.238/255.255.255.255 -j DROP
# OBCポータルのIPのためブロックしない
#-A pass -d 172.31.24.232 -s 198.37.151.100/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 198.50.191.198/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 198.251.83.42/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 199.116.115.141/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 199.116.115.148/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 199.180.115.68/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 200.0.0.0/255.0.0.0 -j DROP
-A pass -d 172.31.24.232 -s 201.140.233.210/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 201.163.44.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 201.183.224.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 201.184.248.210/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 202.29.80.78/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 202.29.80.140/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 202.62.89.198/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 202.62.130.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 202.67.156.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 202.179.190.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 203.59.125.108/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 203.81.71.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 203.90.230.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 203.94.75.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 203.113.137.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 203.153.0.0/255.255.0.0 -j DROP
-A pass -d 172.31.24.232 -s 203.156.92.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 205.251.150.146/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 208.82.218.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 209.10.95.48/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 209.11.159.5/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 209.105.233.228/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 209.222.103.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 210.87.240.0/255.255.240.0 -j DROP
-A pass -d 172.31.24.232 -s 212.49.163.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 212.50.5.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 212.57.192.0/255.255.224.0 -j DROP
-A pass -d 172.31.24.232 -s 212.70.149.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 212.83.186.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 212.129.49.0/255.255.224.0 -j DROP
-A pass -d 172.31.24.232 -s 212.156.126.2/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 213.6.3.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 213.90.59.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 213.186.176.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 213.189.83.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 212.34.242.82/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 216.3.4.66/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 216.104.34.118/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 217.61.121.23/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 217.64.42.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 217.182.52.78/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 217.182.242.4/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 218.16.120.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 218.16.146.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 218.58.205.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 218.64.122.99/255.255.255.255 -j DROP
-A pass -d 172.31.24.232 -s 220.225.242.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 220.241.27.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 220.246.9.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 221.155.161.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 222.134.201.0/255.255.255.0 -j DROP
-A pass -d 172.31.24.232 -s 223.223.194.83/255.255.255.255 -j DROP
-A default -j DROP
-A pass -d 172.31.24.5 -p tcp -m tcp --dport 53 -j ACCEPT
-A pass -d 172.31.24.5 -p udp -m udp --dport 53 -j ACCEPT
-A pass -d 172.31.24.5 -p tcp -m tcp --dport 80 -j ACCEPT
-A pass -d 172.31.24.5 -p tcp -m tcp --dport 443 -j ACCEPT
-A pass -d 172.31.24.231 -p tcp -m tcp --dport 53 -j ACCEPT
-A pass -d 172.31.24.231 -p udp -m udp --dport 53 -j ACCEPT
#-A pass -d 172.31.24.10 -p tcp -m tcp --dport 22 -j ACCEPT
# TGI通知メールバイパス
-A pass -d 172.31.24.232 -s 52.199.63.0/255.255.255.0 -j ACCEPT
-A pass -d 172.31.24.232 -s 52.198.247.0/255.255.255.0 -j ACCEPT
-A pass -d 172.31.24.232 -s 13.115.104.0/255.255.255.0 -j ACCEPT
-A pass -d 172.31.24.232 -s 18.179.48.0/255.255.255.0 -j ACCEPT
-A pass -d 172.31.24.232 -s 3.112.23.0/255.255.255.0 -j ACCEPT
# www.tdanp.jishin.net通知メールバイパス
-A pass -d 172.31.24.232 -s 110.50.242.2/255.255.255.255 -j ACCEPT
# mta0[34].obc.smtps.jp勤務system通知
-A pass -d 172.31.24.232 -s 163.43.197.11/255.255.255.255 -j ACCEPT
-A pass -d 172.31.24.232 -s 153.125.134.139/255.255.255.255 -j ACCEPT

-A pass -d 172.31.24.232 -m state --state NEW -m multiport -p tcp --dports 25,465,587 -m hashlimit --hashlimit-name smtp_conn_limit --hashlimit 10/m --hashlimit-burst 10 --hashlimit-mode srcip --hashlimit-htable-expire 360000 -j ACCEPT
-A pass -d 172.31.24.232 -m state --state NEW -m multiport -p tcp --dports 25,465,587 -j LOG --log-prefix "[IPTABLES CON SMTP DOS1]"
-A pass -d 172.31.24.232 -m state ! --state NEW -p tcp -m multiport --dports 25,465,587 -j ACCEPT
-A pass -d 172.31.24.232 -p tcp -m tcp --dport 110 -j ACCEPT
-A pass -d 172.31.24.232 -p tcp -m tcp --dport 995 -j ACCEPT
-A pass -d 172.31.24.232 -p tcp -m tcp --dport 20001 -j ACCEPT
-A pass -d 172.31.24.232 -m state --state NEW -p tcp --dport 443 -m hashlimit --hashlimit-name web_limit --hashlimit 100/m --hashlimit-burst 1200 --hashlimit-mode srcip --hashlimit-htable-expire 360000 -j ACCEPT
-A pass -d 172.31.24.232 -m state --state NEW -p tcp --dport 443 -j LOG --log-prefix "[IPTABLES CON WEB DOS1]"
-A pass -d 172.31.24.232 -m state ! --state NEW -p tcp --dport 443 -j ACCEPT
-A pass -d 172.31.24.228 -p tcp -m tcp --dport 80 -j ACCEPT
-A pass -d 172.31.24.33 -p tcp -m tcp --dport 8888 -j ACCEPT
-A pass -d 172.31.24.98 -p tcp -m tcp --dport 5555 -j ACCEPT
-A pass -d 172.31.24.9 -p tcp -m tcp --dport 22 -j ACCEPT
-A pass -d 172.31.24.9 -p tcp -m tcp --dport 80 -j ACCEPT
-A pass -d 172.31.24.9 -p tcp -m tcp --dport 443 -j ACCEPT
-A pass -d 172.31.24.9 -p tcp -m tcp --dport 3306 -j ACCEPT
-A pass -d 172.31.24.9 -p udp -m udp --dport 3306 -j ACCEPT
-A pass -d 172.31.24.9 -p tcp -m tcp --dport 8081 -j ACCEPT
-A pass -d 172.31.24.9 -p tcp -m tcp --dport 5991 -j ACCEPT
-A pass -d 172.31.24.9 -p tcp -m tcp --dport 5992 -j ACCEPT
#-A pass -d 172.31.24.128 -p tcp -m tcp --dport 80 -j ACCEPT
-A pass -d 172.31.24.228 -p tcp -m tcp --dport 5432 -j ACCEPT
-A pass -d 172.31.24.106 -p tcp -m tcp --dport 80 -j ACCEPT
-A pass -d 172.31.24.106 -p tcp -m tcp --dport 443 -j ACCEPT
#-A pass -d 172.31.24.107 -p tcp -m tcp --dport 80 -j ACCEPT
#-A pass -d 172.31.24.107 -p tcp -m tcp --dport 443 -j ACCEPT
#-A pass -d 172.31.24.107 -p tcp -m tcp --dport 8443 -j ACCEPT
#-A pass -d 172.31.24.107 -p tcp -m tcp --dport 8444 -j ACCEPT
-A pass -d 172.31.24.230 -p tcp -m tcp --dport 443 -j ACCEPT
-A pass -d 172.31.24.230 -p udp -m udp --dport 500 -j ACCEPT
-A pass -d 172.31.24.230 -p udp -m udp --dport 4500 -j ACCEPT
-A pass -d 172.31.24.35 -p tcp -m tcp --dport 81 -j ACCEPT
# KCS -> carrot
-A pass -s 172.31.4.0/22 -d 172.31.24.0/22 -j ACCEPT

-A pass -d 172.31.24.227 -p tcp -m tcp --dport 10400 -j ACCEPT
-A pass -d 172.31.24.227 -p udp -m udp --dport 10400 -j ACCEPT
-A pass -d 172.31.24.31 -p tcp -m tcp --dport 8443 -j ACCEPT
-A pass -d 172.31.200.12 -p tcp -m tcp --dport 22 -j ACCEPT
-A pass -d 172.31.200.12 -p tcp -m tcp --dport 25 -j ACCEPT
# PhoMES Light
-A pass -d 172.31.24.108 -p tcp -m tcp --dport 22 -s 118.27.22.29/23 -j ACCEPT
-A pass -d 172.31.24.108 -p tcp -m tcp --dport 80 -s 118.27.22.29/23 -j ACCEPT
# Teiki Ekishi Vision (Staging)
-A pass -d 172.31.24.108 -p tcp -m tcp --dport 22 -s 13.115.249.210 -j ACCEPT
-A pass -d 172.31.24.108 -p tcp -m tcp --dport 80 -s 13.115.249.210 -j ACCEPT
-A pass -d 172.31.24.108 -p tcp -m tcp --dport 22 -s 54.199.129.242 -j ACCEPT
-A pass -d 172.31.24.108 -p tcp -m tcp --dport 80 -s 54.199.129.242 -j ACCEPT
# Teiki Ekishi Vision (Production)
-A pass -d 172.31.24.108 -p tcp -m tcp --dport 22 -s 13.114.85.91 -j ACCEPT
-A pass -d 172.31.24.108 -p tcp -m tcp --dport 80 -s 13.114.85.91 -j ACCEPT
-A pass -d 172.31.24.108 -p tcp -m tcp --dport 22 -s 54.249.216.0 -j ACCEPT
-A pass -d 172.31.24.108 -p tcp -m tcp --dport 80 -s 54.249.216.0 -j ACCEPT
# Uruwashiki Ehon
-A pass -d 172.31.24.108 -p tcp -m tcp --dport 22 -s 160.16.78.73 -j ACCEPT
-A pass -d 172.31.24.108 -p tcp -m tcp --dport 80 -s 160.16.78.73 -j ACCEPT
# UMIN Hosting
-A pass -d 172.31.24.108 -p tcp -m tcp --dport 22 -s 130.69.92.113 -j ACCEPT
-A pass -d 172.31.24.108 -p tcp -m tcp --dport 80 -s 130.69.92.113 -j ACCEPT
# europa
-A pass -d 172.31.24.231 -p tcp -m tcp --dport 80 -j ACCEPT
-A pass -d 172.31.24.231 -p tcp -m tcp --dport 443 -j ACCEPT
# proteus
-A pass -d 172.31.24.204 -p tcp -m tcp --dport 80 -j ACCEPT
-A pass -d 172.31.24.204 -p tcp -m tcp --dport 443 -j ACCEPT
# fmsagami
-A pass -d 172.31.24.53 -p tcp -m tcp --dport 10080 -j ACCEPT
# Uruwashiki Android Test Server
-A pass -d 172.31.24.121 -p tcp -m tcp --dport 8443 -j ACCEPT
COMMIT
# Completed on Wed Oct 25 15:36:26 2006
# Generated by iptables-save v1.2.11 on Wed Oct 25 15:36:26 2006
*nat
:PREROUTING ACCEPT [21:1563]
:POSTROUTING ACCEPT [2:187]
:OUTPUT ACCEPT [2:187]
# phobos
-A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 8888 -j DNAT --to-destination 172.31.24.33:8888

# mozart
-A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 5555 -j DNAT --to-destination 172.31.24.98:5555

# europa (210.196.71.251 -> 172.31.24.231)
-A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 53 -j DNAT --to-destination 172.31.24.231:53
-A PREROUTING -d 210.196.71.251 -p udp -m udp --dport 53 -j DNAT --to-destination 172.31.24.231:53
-A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 53 -j DNAT --to-destination 172.31.24.231:53
-A PREROUTING -d 210.196.71.250 -p udp -m udp --dport 53 -j DNAT --to-destination 172.31.24.231:53

-A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.231:80
-A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.231:443

# NB
-A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 8443 -j DNAT --to-destination 172.31.24.31:8443

# fmsagami
-A PREROUTING -d 210.196.71.250 -p tcp -m tcp --dport 10080 -j DNAT --to-destination 172.31.24.53:10080

# MTA WAN -> LAN
-A PREROUTING -d 172.31.200.100 -p tcp -m tcp --dport 25 -j DNAT --to-destination 172.31.24.232:25
-A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 25 -j DNAT --to-destination 172.31.24.232:25
-A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 587 -j DNAT --to-destination 172.31.24.232:587
-A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 465 -j DNAT --to-destination 172.31.24.232:465
# MTA LAN -> WAN
-A POSTROUTING -s 172.31.24.12 -p tcp -m tcp --dport 25 -j SNAT --to-source 210.196.71.251
# POP
-A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 110 -j DNAT --to-destination 172.31.24.232:110
-A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 995 -j DNAT --to-destination 172.31.24.232:995
-A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 993 -j DNAT --to-destination 172.31.24.232:993
-A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 20001 -j DNAT --to-destination 172.31.24.232:20001

# letsencrypt(www.carrot.co.jp)
#-A PREROUTING -d 210.196.71.249 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.231:80
#-A PREROUTING -d 210.196.71.249 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.231:443
# letsencrypt(cybozu.carrot.co.jp smtp.carrot.co.jp pop3.carrot.co.jp)
#-A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.231:80
#-A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.231:443
# letsencrypt(tethys.carrot.co.jp ssd.carrot.co.jp promoter.carrot.co.jp)
#-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.231:80
#-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.231:443

# www.carrot.co.jp
-A PREROUTING -d 210.196.71.249 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.204:80
-A PREROUTING -d 210.196.71.249 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.204:443

# cybozu
#-A PREROUTING -d 210.196.71.251 -i ens193 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.232:443
-A PREROUTING -d 210.196.71.251 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.232:443

# Uruwashiki Android Test Server (210.196.71.252 -> 172.31.24.121)
-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 8443 -j DNAT --to-destination 172.31.24.121:8443

# bh (210.196.71.252 -> 172.31.24.9)
#-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 22 -j DNAT --to-destination 172.31.24.9:22
#-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.9:80
#-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.9:443
#-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 3306 -j DNAT --to-destination 172.31.24.9:3306
#-A PREROUTING -d 210.196.71.252 -i ens224 -p udp -m udp --dport 3306 -j DNAT --to-destination 172.31.24.9:3306
#-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 5991 -j DNAT --to-destination 172.31.24.9:5991
#-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 5992 -j DNAT --to-destination 172.31.24.9:5992
#-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 8081 -j DNAT --to-destination 172.31.24.9:8081

# Rekochoku (210.196.71.252 -> 172.31.24.228)
-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 5432 -j DNAT --to-destination 172.31.24.228:5432

# tethys.carrot.co.jp (210.196.71.252 -> 172.31.24.107) 2020/03/31 CLOSED
#-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 10080 -j DNAT --to-destination 172.31.24.107:80
#-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 10443 -j DNAT --to-destination 172.31.24.107:443
#-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 8443 -j DNAT --to-destination 172.31.24.107:8443
#-A PREROUTING -d 210.196.71.252 -i ens224 -p tcp -m tcp --dport 8444 -j DNAT --to-destination 172.31.24.107:8444

# phomes.carrot.co.jp (210.196.71.252 -> 172.31.24.230) VPN TEST
-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 10443 -j DNAT --to-destination 172.31.24.230:443
-A PREROUTING -d 210.196.71.252 -p udp -m udp --dport 500 -j DNAT --to-destination 172.31.24.230:500
-A PREROUTING -d 210.196.71.252 -p udp -m udp --dport 4500 -j DNAT --to-destination 172.31.24.230:4500

# dione.carrot.co.jp (210.196.71.252 -> 172.31.24.108) GitLab SYS2G
-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 22 -j DNAT --to-destination 172.31.24.108:22
-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 8080 -j DNAT --to-destination 172.31.24.108:80

# promoter web (210.196.71.252 -> 172.31.24.106)
-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.31.24.106:80
# ssd web (210.196.71.252 -> 172.31.24.106)
-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.106:443
# carelib web (210.196.71.252 -> 172.31.24.106)
#-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 5010 -j DNAT --to-destination 172.31.24.106:8080

# zeno MSSQLServer (210.196.71.252 -> 172.31.24.227)
-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 10400 -j DNAT --to-destination 172.31.24.227:10400
-A PREROUTING -d 210.196.71.252 -p udp -m udp --dport 10400 -j DNAT --to-destination 172.31.24.227:10400
#-A PREROUTING -d 210.196.71.250 -i ens224 -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.31.24.227:10400
#-A PREROUTING -d 210.196.71.250 -i ens224 -p udp -m udp --dport 443 -j DNAT --to-destination 172.31.24.227:10400

# styx remote server (210.196.71.252 -> 172.31.200.12) ISLAND
-A PREROUTING -d 210.196.71.252 -p tcp -m tcp --dport 10999 -j DNAT --to-destination 172.31.200.12:22

# LAN -> WAN (Gateway(rickdom): 210.196.71.249)
#-A POSTROUTING -s 172.31.24.221 -o ens224 -j SNAT --to-source 210.196.71.251
-A POSTROUTING -s 172.31.24.232 -j SNAT --to-source 210.196.71.251
-A POSTROUTING -o ens224 -j SNAT --to-source 210.196.71.249
-A POSTROUTING -o ens161 -j SNAT --to-source 210.196.71.250
-A POSTROUTING -o ens193 -j SNAT --to-source 210.196.71.251
-A POSTROUTING -o ens256 -j SNAT --to-source 210.196.71.252

COMMIT

/etc/dhcp/dhcpd.conf

authoritative;
option domain-name              "carrot.co.jp";
option domain-name-servers      172.31.24.30, 172.31.24.20;

ddns-updates on;
ddns-update-style interim;
ignore client-updates;
update-static-leases on;

include "/etc/ddns.key";
zone carrot.co.jp. {
        primary 172.31.24.30;
        key DDNS;
}
zone 24.31.172.in-addr.arpa. {
        primary 172.31.24.30;
        key DDNS;
}

subnet 172.31.24.0 netmask 255.255.255.0 {

# --- default gateway
        option routers                  172.31.24.3;
        option subnet-mask              255.255.255.0;

        option nis-domain               "carrotnet";

        option time-offset              -18000; # Eastern Standard Time
        option ntp-servers              172.31.24.231;
        option domain-search            "carrot.co.jp";
#       option netbios-name-servers     172.31.24.48;
# --- Selects point-to-point node (default is hybrid). Don't change this unless
# -- you understand Netbios very well
#       option netbios-node-type 2;

        range dynamic-bootp 172.31.24.111 172.31.24.199;
        default-lease-time 216;
        max-lease-time 43200;
}
        # we want the nameserver to appear at a fixed address
#--- Carrotnet Hosts ----
        host bach {
                hardware ethernet 70:20:84:01:A4:DC;
                fixed-address 172.31.24.33;
                update-static-leases on;
        }
        host DocuPrint {
                hardware ethernet 1C:7D:22:36:D6:6A;
                fixed-address 172.31.24.34;
                update-static-leases on;
        }
        host intranet-server {
                hardware ethernet b8:ac:6f:81:47:a5;
                fixed-address 172.31.24.36;
                update-static-leases on;
        }
        host mozart {
                hardware ethernet F8:B1:56:D3:E5:9B;
                fixed-address 172.31.24.98;
                update-static-leases on;
        }

#
# [重要] 172.31.24.37/172.31.24.28 は電話の交換機で固定で使用しているので
#　　　　割り当て不可
#

#--- Groupware Hosts ---
        host odessa {
                hardware ethernet 00:07:40:98:D1:39;
                fixed-address 172.31.24.20;
                update-static-leases on;
        }
        host pluto {
                hardware ethernet 00:01:80:6C:0B:EB;
                fixed-address 172.31.24.30;
                update-static-leases on;
        }

        #--- NB Host ---
        host NB {
                hardware ethernet D4:BE:D9:CA:6A:DE;
                fixed-address 172.31.24.31;
                update-static-leases on;
        }

#--- Common Host ----
        host jaguar {
                hardware ethernet 00:0C:29:4F:C4:19;
                fixed-address 172.31.24.40;
                update-static-leases on;
        }
        host jaguar2 {
                hardware ethernet 00:07:40:24:9E:E1;
                fixed-address 172.31.24.41;
                update-static-leases on;
        }

#--- Project Hosts
        # Sony EdgeStore Project
        host cardl2 {
                hardware ethernet 00:01:80:6B:5B:A8;
                fixed-address 172.31.24.48;
                update-static-leases on;
        }
        host COM-MID1 {
                hardware ethernet 08:00:23:91:98:A7;
                fixed-address 172.31.24.49;
                update-static-leases on;
        }
        host COM-MID2 {
                hardware ethernet BC:C3:42:08:E2:72;
                fixed-address 172.31.24.50;
                update-static-leases on;
        }
        host fmsagami {
                hardware ethernet 00:19:b9:08:49:de;
                fixed-address 172.31.24.53;
                update-static-leases on;
        }

        # Panasonic Project
        host nhktoc {
                hardware ethernet 00:0C:29:84:FD:1A;
                fixed-address 172.31.24.86;
                update-static-leases on;
        }

        # SYS2グループ新サーバー
        host sys2g-2020 {
                hardware ethernet 6C:2B:59:BE:C8:BF;
                fixed-address 172.31.24.88;
                option host-name "sys2g-2020.carrot.co.jp";
                update-static-leases on;
        }

        # Partner GW Host
        host cento {
                hardware ethernet 00:01:80:6b:62:d0;
                fixed-address 172.31.24.90;
                update-static-leases on;
        }
        host cento2 {
                hardware ethernet 00:0C:29:CC:3F:13;
                fixed-address 172.31.24.91;
                update-static-leases on;
        }

#--- Sys1 Group Hosts ----
        host sys1server {
                hardware ethernet d4:ae:52:b8:af:bf;
                fixed-address 172.31.24.70;
                update-static-leases on;
        }

#--- HUB Hosts ---
        host newairport {
                hardware ethernet 00:16:01:5B:76:63;
                fixed-address 172.31.24.95;
                update-static-leases on;
        }

        host airport {
                hardware ethernet 88:57:EE:CC:0B:1C;
                fixed-address 172.31.24.100;
                update-static-leases on;
        }

#--- Reserve ---
#       host regalis {
#               fixed-address 172.31.24.96;
#       }
#
#       host cardreader {
#               fixed-address 172.31.24.97;
#       }

/etc/postfix/main.cf

(以下差分)
76a77
> myhostname = echeclus.carrot.co.jp
83a85
> mydomain = carrot.co.jp
99a102
> myorigin = $mydomain
116c119
< inet_interfaces = localhost
---
> inet_interfaces = localhost, 172.31.200.1
266a270
> mynetworks = 172.0.0.0/8, 172.31.200.0/24
317a322
> relayhost = 172.31.24.232

↑

データ移行†

/home/backup0/
/online/
※/online/bin/backup0.shはOS依存のため差し替え

↑

グループ移行†

backup0:x:581:

↑

アカウント移行†

backup0:x:581:581::/home/backup0:/bin/bash
※合わせてshadowも移植

↑

sudo設定†

(以下追加)
backup0 ALL=(ALL) NOPASSWD:/online/bin/rsync.sh, /usr/bin/rsync

↑

cron†

(root)
00 1 * * 1 /online/bin/backup0.sh > /dev/null
1 19 * * 5 /online/bin/check_mail_filter_weekly.sh > /dev/null
14 19 * * 5 /online/bin/check_cybozu_filter_weekly.sh > /dev/null
11 19 * * 5 /online/bin/check_sshauthfailed.sh > /dev/null
00 6 * * 3 /online/bin/sync_dump_mariners.sh
(backup0)
MAILFROM="root@carrot.co.jp"

0 7 * * * /usr/bin/sudo /usr/bin/rsync -auvz --delete -e "ssh -t -i /home/backup0/.ssh/id_rsa" --rsync-path='sudo /usr/bin/rsync' backup0@172.31.200.11:/var/log/ /home/backup0/mariners/log/
0 15 * * * /usr/bin/sudo /usr/bin/rsync -auvz --delete -e "ssh -t -i /home/backup0/.ssh/id_rsa" --rsync-path='sudo /usr/bin/rsync' backup0@172.31.200.12:/home/ /home/backup0/styx/home/
0 16 * * * /usr/bin/sudo /usr/bin/rsync -auvz --delete -e "ssh -t -i /home/backup0/.ssh/id_rsa" --rsync-path='sudo /usr/bin/rsync' backup0@172.31.200.12:/var/log/ /home/backup0/styx/log/

↑

課題†

iptables -> firewalldの移植をしたい。最悪iptablesを継続して使う