oneem

Я б остался в Мегафоне.

Добавил фильтры и забыл давно об этом

Ни кто не поможет ? 13:04:17.058946 In IP 192.184.12.171.80 > 185.11.60.93.123: NTPv2, Reserved, length 8 13:04:17.058978 In IP 192.184.12.171.80 > 185.11.60.93.123: NTPv2, Reserved, length 8 13:04:17.058987 In IP 192.184.12.171.80 > 185.11.60.93.123: NTPv2, Reserved, length 8 13:04:17.058996 In IP 192.184.12.171.80 > 185.11.60.93.123: NTPv2, Reserved, length 8 13:04:17.059005 In IP 192.184.12.171.80 > 185.11.60.93.123: NTPv2, Reserved, length 8 13:04:17.059014 In IP 192.184.12.171.80 > 185.11.60.93.123: NTPv2, Reserved, length 8 13:04:17.059051 Out IP truncated-ip - 6 bytes missing! 185.11.60.93 > 192.184.12.171: [|icmp] 13:04:17.059088 Out IP truncated-ip - 6 bytes missing! 185.11.60.93 > 192.184.12.171: [|icmp] 13:04:17.059110 Out IP truncated-ip - 6 bytes missing! 185.11.60.93 > 192.184.12.171: [|icmp] 13:04:17.059131 Out IP truncated-ip - 6 bytes missing! 185.11.60.93 > 192.184.12.171: [|icmp] 13:04:17.059152 Out IP truncated-ip - 6 bytes missing! 185.11.60.93 > 192.184.12.171: [|icmp] 13:04:17.059173 Out IP truncated-ip - 6 bytes missing! 185.11.60.93 > 192.184.12.171: [|icmp] 13:04:17.239206 In IP 192.184.12.171.80 > 185.11.60.93.123: NTPv2, Reserved, length 8 13:04:17.239263 Out IP truncated-ip - 6 bytes missing! 185.11.60.93 > 192.184.12.171: [|icmp] 13:04:17.247097 In IP 192.184.12.171.80 > 185.11.60.93.123: NTPv2, Reserved, length 8 13:04:17.247138 Out IP truncated-ip - 6 bytes missing! 185.11.60.93 > 192.184.12.171: [|icmp] 13:04:17.249100 In IP 192.184.12.171.80 > 185.11.60.93.123: NTPv2, Reserved, length 8 13:04:17.249123 In IP 192.184.12.171.80 > 185.11.60.93.123: NTPv2, Reserved, length 8 13:04:17.249148 Out IP truncated-ip - 6 bytes missing! 185.11.60.93 > 192.184.12.171: [|icmp] 13:04:17.249181 Out IP truncated-ip - 6 bytes missing! 185.11.60.93 > 192.184.12.171: [|icmp] Запросы стали идти на ICMP на какой та форум... ХЕЛП

Здраствуйте, а позовите пожалуйста одмина. Он Вам поможет! .) Мне кричать или рыпаться чтоб он пришел ?))

Привет, помогите новичку в среде JunOS Атака была по NTP. Прописал фильтры set firewall family inet filter CoPP term First_Fragment from first-fragment set firewall family inet filter CoPP term First_Fragment then count First_Fragment set firewall family inet filter CoPP term First_Fragment then discard set firewall family inet filter CoPP term Fragment from is-fragment set firewall family inet filter CoPP term Fragment then count Fragment set firewall family inet filter CoPP term Fragment then discard set firewall family inet filter CoPP term MGMT_Global_setup from protocol tcp set firewall family inet filter CoPP term MGMT_Global_setup from destination-port ssh set firewall family inet filter CoPP term MGMT_Global_setup from destination-port telnet set firewall family inet filter CoPP term MGMT_Global_setup from destination-port 830 set firewall family inet filter CoPP term MGMT_Global_setup from tcp-initial set firewall family inet filter CoPP term MGMT_Global_setup then policer copp-lim-1m set firewall family inet filter CoPP term MGMT_Global_setup then count MGMT_Global_setup set firewall family inet filter CoPP term MGMT_Global from protocol tcp set firewall family inet filter CoPP term MGMT_Global from destination-port ssh set firewall family inet filter CoPP term MGMT_Global from destination-port telnet set firewall family inet filter CoPP term MGMT_Global from destination-port 830 set firewall family inet filter CoPP term MGMT_Global from tcp-established set firewall family inet filter CoPP term MGMT_Global then policer copp-lim-1m set firewall family inet filter CoPP term MGMT_Global then count MGMT_Global set firewall family inet filter CoPP term SNMP from source-prefix-list FTP_Clients set firewall family inet filter CoPP term SNMP from protocol udp set firewall family inet filter CoPP term SNMP from port snmp set firewall family inet filter CoPP term SNMP then policer copp-lim-1m set firewall family inet filter CoPP term SNMP then count SNMP set firewall family inet filter CoPP term SNMP then accept set firewall family inet filter CoPP term NTP from source-prefix-list NTP set firewall family inet filter CoPP term NTP from protocol udp set firewall family inet filter CoPP term NTP from port ntp set firewall family inet filter CoPP term NTP then policer copp-lim-1m set firewall family inet filter CoPP term NTP then count NTP set firewall family inet filter CoPP term NTP then accept set firewall family inet filter CoPP term NTP_Block from protocol udp set firewall family inet filter CoPP term NTP_Block from port ntp set firewall family inet filter CoPP term NTP_Block then count NTP_Block set firewall family inet filter CoPP term NTP_Block then discard set firewall family inet filter CoPP term FTP from source-prefix-list FTP_Clients set firewall family inet filter CoPP term FTP from protocol tcp set firewall family inet filter CoPP term FTP from port ftp set firewall family inet filter CoPP term FTP from port ftp-data set firewall family inet filter CoPP term FTP from port 1024-65535 set firewall family inet filter CoPP term FTP then policer copp-lim-10m set firewall family inet filter CoPP term FTP then count FTP set firewall family inet filter CoPP term FTP then accept set firewall family inet filter CoPP term FTP_Discard from protocol tcp set firewall family inet filter CoPP term FTP_Discard from port ftp set firewall family inet filter CoPP term FTP_Discard from port ftp-data set firewall family inet filter CoPP term FTP_Discard from port 1024-65535 set firewall family inet filter CoPP term FTP_Discard then count FTP_Discard set firewall family inet filter CoPP term FTP_Discard then discard set firewall family inet filter CoPP term SNMP_Discard from protocol udp set firewall family inet filter CoPP term SNMP_Discard from port snmp set firewall family inet filter CoPP term SNMP_Discard then count SNMP_Discard set firewall family inet filter CoPP term SNMP_Discard then discard set firewall family inet filter CoPP term LAST then accept далее ввожу защиту set system ddos-protection protocols ntp aggregate bandwidth 1000 burst 128 И создаю lo0.0, применяю фильтры set interfaces lo0.0 family inet filter CoPP policer создал. Когда вяжу фильтры на lo0.0 пропадает инет, и все. Доступ бывает. Что не правильно сделал подскажите пожалуйста.Спасибо!

Всем привет. Задача: Стоит Nanostation m5, протянуто 2 кабеля от Lan0 Main и secondary Lan1. Нужно чтоб на 2х компах одновременно работал интернет. Как бы настроить ? Думал про разных Vlan. Ну не уверен что получиться, есть ли легкий какой нибудь метод ?