This commit is contained in:
shiraorie
2025-11-01 10:26:59 +05:00
parent 5015e4920a
commit 0c607321d4
5 changed files with 14 additions and 10 deletions

View File

@@ -1493,6 +1493,10 @@ htpasswd c /etc/nginx/.htpasswd WEB
>chmod 700 /etc/pki/CA/private >chmod 700 /etc/pki/CA/private
<p align="center">
<img src="picture для варинта 2\mkdir pki.png" width="600" />
</p>
Создайте корневой ключ и сертификат (RSA 4096, SHA256): Создайте корневой ключ и сертификат (RSA 4096, SHA256):
openssl req -x509 -new -nodes \ openssl req -x509 -new -nodes \

View File

@@ -8,8 +8,8 @@ table inet filter {
log prefix "Dropped Input: " level debug log prefix "Dropped Input: " level debug
iif lo accept iif lo accept
ct state established,related accept ct state established,related accept
tcp dport { 22,514,53,80,443,3015,445,139,88 } accept tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080 } accept
udp dport { 53,123,500,4500,88,137 } accept udp dport { 53,123,500,4500,88,137,8080 } accept
ip protocol icmp accept ip protocol icmp accept
ip protocol esp accept ip protocol esp accept
ip protocol gre accept ip protocol gre accept
@@ -20,8 +20,8 @@ table inet filter {
log prefix "Dropped forward: " level debug log prefix "Dropped forward: " level debug
iif lo accept iif lo accept
ct state established,related accept ct state established,related accept
tcp dport { 22,514,53,80,443,3015,445,139,88 } accept tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080 } accept
udp dport { 53,123,500,4500,88,137 } accept udp dport { 53,123,500,4500,88,137,8080 } accept
ip protocol icmp accept ip protocol icmp accept
ip protocol esp accept ip protocol esp accept
ip protocol gre accept ip protocol gre accept

View File

@@ -8,8 +8,8 @@ table inet filter {
log prefix "Dropped Input: " level debug log prefix "Dropped Input: " level debug
iif lo accept iif lo accept
ct state established,related accept ct state established,related accept
tcp dport { 22,514,53,80,443,3015,445,139,88 } accept tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080 } accept
udp dport { 53,123,500,4500,88,137 } accept udp dport { 53,123,500,4500,88,137,8080 } accept
ip protocol icmp accept ip protocol icmp accept
ip protocol esp accept ip protocol esp accept
ip protocol gre accept ip protocol gre accept
@@ -20,8 +20,8 @@ table inet filter {
log prefix "Dropped forward: " level debug log prefix "Dropped forward: " level debug
iif lo accept iif lo accept
ct state established,related accept ct state established,related accept
tcp dport { 22,514,53,80,443,3015,445,139,88 } accept tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080 } accept
udp dport { 53,123,500,4500,88,137 } accept udp dport { 53,123,500,4500,88,137,8080 } accept
ip protocol icmp accept ip protocol icmp accept
ip protocol esp accept ip protocol esp accept
ip protocol gre accept ip protocol gre accept

Binary file not shown.

Before

Width:  |  Height:  |  Size: 61 KiB

After

Width:  |  Height:  |  Size: 43 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 49 KiB