1
This commit is contained in:
@@ -1493,6 +1493,10 @@ htpasswd –c /etc/nginx/.htpasswd WEB
|
||||
|
||||
>chmod 700 /etc/pki/CA/private
|
||||
|
||||
<p align="center">
|
||||
<img src="picture для варинта 2\mkdir pki.png" width="600" />
|
||||
</p>
|
||||
|
||||
Создайте корневой ключ и сертификат (RSA 4096, SHA256):
|
||||
|
||||
openssl req -x509 -new -nodes \
|
||||
|
||||
@@ -8,8 +8,8 @@ table inet filter {
|
||||
log prefix "Dropped Input: " level debug
|
||||
iif lo accept
|
||||
ct state established,related accept
|
||||
tcp dport { 22,514,53,80,443,3015,445,139,88 } accept
|
||||
udp dport { 53,123,500,4500,88,137 } accept
|
||||
tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080 } accept
|
||||
udp dport { 53,123,500,4500,88,137,8080 } accept
|
||||
ip protocol icmp accept
|
||||
ip protocol esp accept
|
||||
ip protocol gre accept
|
||||
@@ -20,8 +20,8 @@ table inet filter {
|
||||
log prefix "Dropped forward: " level debug
|
||||
iif lo accept
|
||||
ct state established,related accept
|
||||
tcp dport { 22,514,53,80,443,3015,445,139,88 } accept
|
||||
udp dport { 53,123,500,4500,88,137 } accept
|
||||
tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080 } accept
|
||||
udp dport { 53,123,500,4500,88,137,8080 } accept
|
||||
ip protocol icmp accept
|
||||
ip protocol esp accept
|
||||
ip protocol gre accept
|
||||
|
||||
@@ -8,8 +8,8 @@ table inet filter {
|
||||
log prefix "Dropped Input: " level debug
|
||||
iif lo accept
|
||||
ct state established,related accept
|
||||
tcp dport { 22,514,53,80,443,3015,445,139,88 } accept
|
||||
udp dport { 53,123,500,4500,88,137 } accept
|
||||
tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080 } accept
|
||||
udp dport { 53,123,500,4500,88,137,8080 } accept
|
||||
ip protocol icmp accept
|
||||
ip protocol esp accept
|
||||
ip protocol gre accept
|
||||
@@ -20,8 +20,8 @@ table inet filter {
|
||||
log prefix "Dropped forward: " level debug
|
||||
iif lo accept
|
||||
ct state established,related accept
|
||||
tcp dport { 22,514,53,80,443,3015,445,139,88 } accept
|
||||
udp dport { 53,123,500,4500,88,137 } accept
|
||||
tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080 } accept
|
||||
udp dport { 53,123,500,4500,88,137,8080 } accept
|
||||
ip protocol icmp accept
|
||||
ip protocol esp accept
|
||||
ip protocol gre accept
|
||||
|
||||
Binary file not shown.
|
Before Width: | Height: | Size: 61 KiB After Width: | Height: | Size: 43 KiB |
BIN
picture для варинта 2/mkdir pki.png
Normal file
BIN
picture для варинта 2/mkdir pki.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 49 KiB |
Reference in New Issue
Block a user