课程第24次：2020-03-25星期三

botang · 发表于 2020-3-25 20:34:48

1. 两个interface之间的路由（ROUTING）
/etc/sysctl.conf

net.ipv4.ip_forward=1

复制代码

2. 富规则

firewall-cmd --permanent --remove-rich-rule='rule family="ipv4" source address="192.168.1.1/24" port port="5500" protocol="tcp" drop'

复制代码

[root@server4 ~]# firewall-cmd --list-all
public (active)
target: default
icmp-block-inversion: no
interfaces: ens33 ens38 ens39 team0
sources:
services: cockpit dhcpv6-client dns mountd nfs rpc-bind smtp ssh
ports: 1521/tcp 5500/tcp
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:
rule family="ipv4" source address="192.168.0.54" accept
rule family="ipv4" source address="192.168.0.154" accept
rule family="ipv4" source address="192.168.0.204" accept
rule family="ipv4" source address="192.168.0.104" accept
rule family="ipv4" source address="192.168.0.105" accept
rule family="ipv4" source address="192.168.0.184" accept
rule family="ipv4" source address="192.168.0.185" accept
rule family="ipv4" source address="172.31.118.104" accept
rule family="ipv4" source address="172.31.118.105" accept
rule family="ipv4" source address="127.0.0.1" accept
rule family="ipv4" source address="169.254.0.0/16" accept
rule family="ipv4" source address="192.168.1.1/24" port port="5500" protocol="tcp" log prefix="ORACLE RAC 12c EM" limit value="2/h" drop
rule family="ipv4" source address="192.168.1.1/24" service name="ssh" audit limit value="1/m" drop

复制代码

Mar 25 23:00:00 server4 systemd[1]: Starting system activity accounting tool...
Mar 25 23:00:02 server4 systemd[1]: Started system activity accounting tool.
Mar 25 23:00:03 server4 kernel: ORACLE RAC 12c EMIN=ens33 OUT= MAC=00:0c:29:e5:9e:b7:00:0c:29:81:5b:56:08:00 SRC=192.168.1.133 DST=192.168.0.104 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=24096 DF PROTO=TCP SPT=57452 DPT=5500 WINDOW=29200 RES=0x00 SYN URGP=0
Mar 25 23:00:03 server4 kernel: ORACLE RAC 12c EMIN=ens33 OUT= MAC=00:0c:29:e5:9e:b7:00:0c:29:81:5b:56:08:00 SRC=192.168.1.133 DST=192.168.0.104 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=20958 DF PROTO=TCP SPT=57454 DPT=5500 WINDOW=29200 RES=0x00 SYN URGP=0
Mar 25 23:00:11 server4 kernel: ORACLE RAC 12c EMIN=ens33 OUT= MAC=00:0c:29:e5:9e:b7:00:0c:29:81:5b:56:08:00 SRC=192.168.1.133 DST=192.168.0.104 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=20959 DF PROTO=TCP SPT=57454 DPT=5500 WINDOW=29200 RES=0x00 SYN URGP=0
Mar 25 23:00:11 server4 kernel: ORACLE RAC 12c EMIN=ens33 OUT= MAC=00:0c:29:e5:9e:b7:00:0c:29:81:5b:56:08:00 SRC=192.168.1.133 DST=192.168.0.104 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=24097 DF PROTO=TCP SPT=57452 DPT=5500 WINDOW=29200 RES=0x00 SYN URGP=0

Mar 25 23:00:28 server4 kernel: ORACLE RAC 12c EMIN=ens33 OUT= MAC=00:0c:29:e5:9e:b7:00:0c:29:81:5b:56:08:00 SRC=192.168.1.133 DST=192.168.0.104 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=24098 DF PROTO=TCP SPT=57452 DPT=5500 WINDOW=29200 RES=0x00 SYN URGP=0
Mar 25 23:00:28 server4 kernel: ORACLE RAC 12c EMIN=ens33 OUT= MAC=00:0c:29:e5:9e:b7:00:0c:29:81:5b:56:08:00 SRC=192.168.1.133 DST=192.168.0.104 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=20960 DF PROTO=TCP SPT=57454 DPT=5500 WINDOW=29200 RES=0x00 SYN URGP=0

Mar 25 23:01:00 server4 kernel: ORACLE RAC 12c EMIN=ens33 OUT= MAC=00:0c:29:e5:9e:b7:00:0c:29:81:5b:56:08:00 SRC=192.168.1.133 DST=192.168.0.104 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=20961 DF PROTO=TCP SPT=57454 DPT=5500 WINDOW=29200 RES=0x00 SYN URGP=0
Mar 25 23:01:00 server4 kernel: ORACLE RAC 12c EMIN=ens33 OUT= MAC=00:0c:29:e5:9e:b7:00:0c:29:81:5b:56:08:00 SRC=192.168.1.133 DST=192.168.0.104 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=24099 DF PROTO=TCP SPT=57452 DPT=5500 WINDOW=29200 RES=0x00 SYN URGP=0

765686189 · 发表于 2020-3-25 21:26:37

火狐版本flash：https://www.flash.cn/cdm/latest/ ... -release.x86_64.rpm

谷歌版本flash：https://www.flash.cn/cdm/latest/ ... -release.x86_64.rpm