Aroun
Advanced Member | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору
Доброго дня, ситуация такова:
cat /etc/resolv.conf
nameserver 8.8.8.8
ifconfig
eth0 Link encap:Ethernet HWaddr 92:4e:4f:3e:8a:fa
inet addr:192.168.0.4 Bcast:192.168.0.255 Mask:255.255.255.0
inet6 addr: fe80::904e:4fff:fe3e:8afa/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:13152 errors:0 dropped:1 overruns:0 frame:0
TX packets:6324 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1440813 (1.4 MB) TX bytes:1656264 (1.6 MB)
Interrupt:32 Base address:0x6000
/etc/network/interfaces
auto lo
iface lo inet loopback
# The primary network interface
auto eth0
iface eth0 inet static
address 192.168.0.4
netmask 255.255.255.0
gateway 192.168.0.1
dns-nameservers 8.8.8.8
UFW
/etc/ufw$ cat /etc/ufw/sysctl.conf
#
# Configuration file for setting network variables. Please note these settings
# override /etc/sysctl.conf and /etc/sysctl.d. If you prefer to use
# /etc/sysctl.conf, please adjust IPT_SYSCTL in /etc/default/ufw. See
# Documentation/networking/ip-sysctl.txt in the kernel source code for more
# information.
#
# Uncomment this to allow this host to route packets between interfaces
net/ipv4/ip_forward=1
#net/ipv6/conf/default/forwarding=1
#net/ipv6/conf/all/forwarding=1
# Disable ICMP redirects. ICMP redirects are rarely used but can be used in
# MITM (man-in-the-middle) attacks. Disabling ICMP may disrupt legitimate
# traffic to those sites.
net/ipv4/conf/all/accept_redirects=0
net/ipv4/conf/default/accept_redirects=0
net/ipv6/conf/all/accept_redirects=0
net/ipv6/conf/default/accept_redirects=0
# Ignore bogus ICMP errors
net/ipv4/icmp_echo_ignore_broadcasts=1
net/ipv4/icmp_ignore_bogus_error_responses=1
net/ipv4/icmp_echo_ignore_all=0
# Don't log Martian Packets (impossible addresses)
# packets
net/ipv4/conf/all/log_martians=0
net/ipv4/conf/default/log_martians=0
#net/ipv4/tcp_fin_timeout=30
#net/ipv4/tcp_keepalive_intvl=1800
# Uncomment this to turn off ipv6 autoconfiguration
#net/ipv6/conf/default/autoconf=1
#net/ipv6/conf/all/autoconf=1
# Uncomment this to enable ipv6 privacy addressing
#net/ipv6/conf/default/use_tempaddr=2
#net/ipv6/conf/all/use_tempaddr=2
/etc/ufw# ufw status
Status: active
To Action From
-- ------ ----
22 ALLOW Anywhere
Anywhere ALLOW 192.168.0.0/24
80 ALLOW Anywhere
66 ALLOW Anywhere
67 ALLOW Anywhere
3128 ALLOW Anywhere
443 ALLOW Anywhere
8080 ALLOW Anywhere
53 ALLOW Anywhere
dig yandex.ru +short проходит только первые два запроса, после чего:
/etc/ufw# dig ya.ru +short
; <<>> DiG 9.7.3 <<>> ya.ru +short
;; global options: +cmd
;; connection timed out; no servers could be reached
Иногда имя разрешается, компьютеры, использущие этот dns работают нормально (т.е. 8.8.8.8 работает нормально)
Добавлено:
Офтоп. Косяк провайдера, через раз работал DNS. |
Всего записей: 680 | Зарегистр. 19-07-2005 | Отправлено: 11:05 17-07-2011 | Исправлено: Aroun, 11:06 17-07-2011 |
|
