diff --git a/README.md b/README.md
index ab10853..3de7be3 100644
--- a/README.md
+++ b/README.md
@@ -1212,7 +1212,7 @@ apache
+- /etc/nftables
### 9. Настройте веб-сервер nginx как обратный прокси-сервер на HQ-RTR
- При обращении по доменному имени web.au-team.irpo у клиента должно открываться веб приложение на HQ-SRV @@ -1307,7 +1308,7 @@ EXIT; ***curl -o /etc/nginx/sites-available/default https://raw.githubusercontent.com/shiraorie/demo2026-1/main/files/reverse-proxy.conf*** -***dos2unix /etc/nginx/sites-available/reverse-proxy.conf*** +***dos2unix /etc/nginx/sites-available/default*** - Проверяем его наличие: diff --git a/files/br-rtr/nftables.conf b/files/br-rtr/nftables.conf index dfff51c..d878650 100755 --- a/files/br-rtr/nftables.conf +++ b/files/br-rtr/nftables.conf @@ -8,8 +8,8 @@ table inet filter { log prefix "Dropped Input: " level debug iif lo accept ct state established,related accept - tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080,2049,389 } accept - udp dport { 53,123,500,4500,88,137,8080,2049 } accept + tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080,2049,389,10050,10051 } accept + udp dport { 53,123,500,4500,88,137,8080,2049,10050,10051 } accept ip protocol icmp accept ip protocol esp accept ip protocol gre accept @@ -20,8 +20,8 @@ table inet filter { log prefix "Dropped forward: " level debug iif lo accept ct state established,related accept - tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080,2049,389 } accept - udp dport { 53,123,500,4500,88,137,8080,2049 } accept + tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080,2049,389,10050,10051 } accept + udp dport { 53,123,500,4500,88,137,8080,2049,10050,10051 } accept ip protocol icmp accept ip protocol esp accept ip protocol gre accept diff --git a/files/hq-rtr/nftables.conf b/files/hq-rtr/nftables.conf index 64fd675..641cd39 100755 --- a/files/hq-rtr/nftables.conf +++ b/files/hq-rtr/nftables.conf @@ -8,8 +8,8 @@ table inet filter { log prefix "Dropped Input: " level debug iif lo accept ct state established,related accept - tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080,631,2049,389 } accept - udp dport { 53,123,500,4500,88,137,8080,631,2049 } accept + tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080,631,2049,389,10050,10051 } accept + udp dport { 53,123,500,4500,88,137,8080,631,2049,10050,10051 } accept ip protocol icmp accept ip protocol esp accept ip protocol gre accept @@ -20,8 +20,8 @@ table inet filter { log prefix "Dropped forward: " level debug iif lo accept ct state established,related accept - tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080,631,2049,389 } accept - udp dport { 53,123,500,4500,88,137,8080,631,2049 } accept + tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080,631,2049,389,10050,10051 } accept + udp dport { 53,123,500,4500,88,137,8080,631,2049,10050,10051 } accept ip protocol icmp accept ip protocol esp accept ip protocol gre accept