Тут еще, может быть дело в том, сначала я поставил proftpd из исходников, но не удалил(не догнадался как). Поэтому в системе их два фик знает как они между сабой деруться. т.е. если просто запусть proftpd без пути, то будет Fatal: unknown configuration directive 'bytes_in_avail,' on line 104 of '/usr /local//etc/proftpd.conf' А конфиг proftpd из репы у меня лежит в /etc/proftpd/.
Starting ftp server: proftpd - mod_tls/2.1.2: using OpenSSL 0.9.8g 19 Oct 2007
- disabling runtime support for IPv6 connections
- DenyFilter: compiling deny regex '\*.*/'
- <IfModule>: using 'mod_dynmasq.c' section at line 56
- retrieved UID 104 for user 'ftp'
- retrieved GID 1002 for group 'ftp'
- <IfModule>: using 'mod_quotatab.c' section at line 100
- <IfModule>: skipping 'mod_ratio.c' section at line 104
- <IfModule>: using 'mod_delay.c' section at line 112
- <IfModule>: using 'mod_ctrls.c' section at line 116
- <IfModule>: using 'mod_ctrls_admin.c' section at line 124
- <IfModule>: using 'mod_sql.c' section at line 7
server -
server - Config for Debian:
server - IdentLookups
server - DeferWelcome
server - DefaultServer
server - ShowSymlinks
server - TimeoutNoTransfer
server - TimeoutStalled
server - TimeoutIdle
server - DisplayLogin
server - DisplayChdir
server - ListOptions
server - DenyFilter
server - AllowForeignAddress
server - DefaultTransferMode
server - DefaultRoot
server - PassivePorts
server - UserID
server - UserName
server - GroupID
server - GroupName
server - Umask
server - DirUmask
server - AllowOverwrite
server - TransferLog
server - ExtendedLog
server - ExtendedLog
server - QuotaEngine
server - DelayEngine
server - SQLBackend
server - SQLEngine
server - SQLAuthenticate
server - SQLAuthTypes
server - SQLConnectInfo
server - RequireValidShell
server - SQLUserTable
server - SQLUsernameField
server - SQLPasswordField
server - SQLUidField
server - SQLGidField
server - SQLHomedirField
server - SQLShellField
server - SQLLogFile
server - DefaultRoot
server - ROOT PRIVS at mod_delay.c:307
server - RELINQUISH PRIVS at mod_delay.c:309
server - ROOT PRIVS at mod_ctrls.c:1618
server - RELINQUISH PRIVS at mod_ctrls.c:1620
server - mod_lang/0.8: binding to text domain 'proftpd' using locale path '/usr/share/locale'
server - retrieved group ID: 65534
server - setting group ID: 65534
server - SETUP PRIVS at main.c:2869
server - ROOT PRIVS at main.c:1946
server - RELINQUISH PRIVS at main.c:1953
лог
Oct 04 15:43:30 server proftpd[26144] server: ROOT PRIVS at main.c:2277
Oct 04 15:43:30 server proftpd[26144] server: opening scoreboard '/var/run/proftpd/proftpd.scoreboard'
Oct 04 15:43:30 server proftpd[26144] server: RELINQUISH PRIVS at main.c:2303
Oct 04 15:43:30 server proftpd[26144] server: ROOT PRIVS at mod_ctrls_admin.c:1092
Oct 04 15:43:30 server proftpd[26144] server: opening scoreboard '/var/run/proftpd/proftpd.scoreboard'
Oct 04 15:43:30 server proftpd[26144] server: RELINQUISH PRIVS at mod_ctrls_admin.c:1094
Oct 04 15:43:30 server proftpd[26144] server: ROOT PRIVS at inet.c:343
Oct 04 15:43:30 server proftpd[26144] server: RELINQUISH PRIVS at inet.c:406
Oct 04 15:43:30 server proftpd[26144] server: ProFTPD 1.3.1 (stable) (built Tue Oct 27 10:09:08 UTC 2009) standalone mode STARTUP
Oct 04 15:43:30 server proftpd[26144] server: ROOT PRIVS at pidfile.c:42
Oct 04 15:43:30 server proftpd[26144] server: RELINQUISH PRIVS at pidfile.c:44
Oct 04 15:43:45 server proftpd[26231] server: RELINQUISH PRIVS at main.c:1074
Oct 04 15:43:45 server proftpd[26231] server: no matching vhost found for 178.63.221.91#21, using DefaultServer 'Debian'
Oct 04 15:43:45 server proftpd[26231] server: notice: unable to resolve 'mm-26-33-120-178.dynamic.pppoe.mgts.by': Resolver Error 0 (no error)
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): ROOT PRIVS at main.c:919
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): SETUP PRIVS at main.c:924
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): FTP session requested from unknown class
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): performing module session initializations
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): ROOT PRIVS at mod_sql.c:4229
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): RELINQUISH PRIVS at mod_sql.c:4231
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): ProFTPD terminating (signal 11)
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): FTP session closed.
Oct 04 15:44:00 server proftpd[26144] server: scrubbing scoreboard
Oct 04 15:44:00 server proftpd[26144] server: ROOT PRIVS at scoreboard.c:761
Oct 04 15:44:00 server proftpd[26144] server: RELINQUISH PRIVS at scoreboard.c:763
Oct 04 15:44:00 server proftpd[26144] server: ROOT PRIVS at scoreboard.c:791
Oct 04 15:44:00 server proftpd[26144] server: RELINQUISH PRIVS at scoreboard.c:822
Starting ftp server: proftpd - mod_tls/2.1.2: using OpenSSL 0.9.8g 19 Oct 2007
- disabling runtime support for IPv6 connections
- <IfModule>: using 'mod_dynmasq.c' section at line 56
- <IfModule>: using 'mod_quotatab.c' section at line 100
- <IfModule>: skipping 'mod_ratio.c' section at line 104
- <IfModule>: using 'mod_delay.c' section at line 112
- <IfModule>: using 'mod_ctrls.c' section at line 116
- <IfModule>: using 'mod_ctrls_admin.c' section at line 124
- <IfModule>: using 'mod_sql.c' section at line 7
неверю, примеры в студию)
Ага, щас. Мне серчеэффект не нужен.😂
Забыл сказать, что речь идет про картинки.
Кину в личку.
Без понятия.:)
Гесер добавил 06.10.2010 в 22:13
Так, я не правильно использовал дебаг:D
Ага, вот:
[quote]/usr/sbin/proftpd -n -d 10
- mod_tls/2.1.2: using OpenSSL 0.9.8g 19 Oct 2007
- disabling runtime support for IPv6 connections
- DenyFilter: compiling deny regex '\*.*/'
- <IfModule>: using 'mod_dynmasq.c' section at line 56
- retrieved UID 104 for user 'xxx'
- retrieved GID 1002 for group 'xxx'
- <IfModule>: using 'mod_quotatab.c' section at line 100
- <IfModule>: skipping 'mod_ratio.c' section at line 104
- <IfModule>: using 'mod_delay.c' section at line 112
- <IfModule>: using 'mod_ctrls.c' section at line 116
- <IfModule>: using 'mod_ctrls_admin.c' section at line 124
- <IfModule>: using 'mod_sql.c' section at line 7
myserver -
myserver - Config for Debian:
myserver - IdentLookups
myserver - DeferWelcome
myserver - DefaultServer
myserver - ShowSymlinks
myserver - TimeoutNoTransfer
myserver - TimeoutStalled
myserver - TimeoutIdle
myserver - DisplayLogin
myserver - DisplayChdir
myserver - ListOptions
myserver - DenyFilter
myserver - AllowForeignAddress
myserver - DefaultTransferMode
myserver - DefaultRoot
myserver - PassivePorts
myserver - UserID
myserver - UserName
myserver - GroupID
myserver - GroupName
myserver - Umask
myserver - DirUmask
myserver - AllowOverwrite
myserver - TransferLog
myserver - ExtendedLog
myserver - ExtendedLog
myserver - QuotaEngine
myserver - DelayEngine
myserver - SQLBackend
myserver - SQLEngine
myserver - SQLAuthenticate
myserver - SQLAuthTypes
myserver - SQLConnectInfo
myserver - RequireValidShell
myserver - SQLUserTable
myserver - SQLUsernameField
myserver - SQLPasswordField
myserver - SQLUidField
myserver - SQLGidField
myserver - SQLHomedirField
myserver - SQLShellField
myserver - SQLLogFile
myserver - DefaultRoot
myserver - ROOT PRIVS at mod_delay.c:307
myserver - RELINQUISH PRIVS at mod_delay.c:309
myserver - ROOT PRIVS at mod_ctrls.c:1618
myserver - RELINQUISH PRIVS at mod_ctrls.c:1620
myserver - mod_lang/0.8: binding to text domain 'proftpd' using lo cale path '/usr/share/locale'
myserver - retrieved group ID: 65534
myserver - setting group ID: 65534
myserver - SETUP PRIVS at main.c:2869
myserver - ROOT PRIVS at main.c:1946
myserver - RELINQUISH PRIVS at main.c:1953
myserver - ROOT PRIVS at main.c:2277
myserver - opening scoreboard '/var/run/proftpd/proftpd.scoreboard '
myserver - RELINQUISH PRIVS at main.c:2303
myserver - ROOT PRIVS at mod_ctrls_admin.c:1092
myserver - opening scoreboard '/var/run/proftpd/proftpd.scoreboard '
myserver - RELINQUISH PRIVS at mod_ctrls_admin.c:1094
myserver - ROOT PRIVS at inet.c:343
myserver - RELINQUISH PRIVS at inet.c:406
myserver - ProFTPD 1.3.1 (stable) (built Tue Oct 27 10:09:08 UTC 2 009) standalone mode STARTUP
myserver - ROOT PRIVS at pidfile.c:42
myserver - RELINQUISH PRIVS at pidfile.c:44
myserver - ROOT PRIVS at main.c:1070
myserver - RELINQUISH PRIVS at main.c:1074
myserver - no matching vhost found for ipserver#21, using Def aultServer 'Debian'
myserver - notice: unable to resolve 'мой домашний ip': Resolver Error 0 (no error)
myserver (ipserver[ipserver]) - ROOT PRIVS at main.c:9 19
myserver (ipserver[ipserver]) - SETUP PRIVS at main.c: 924
myserver (ipserver[ipserver]) - FTP session requested from unknown class
myserver (ipserver[ipserver]) - performing module sess ion initializations
myserver (ipserver[ipserver]) - ROOT PRIVS at mod_sql. c:4229
myserver (ipserver[ipserver]) - RELINQUISH PRIVS at mo d_sql.c:4231
myserver (ipserver[ipserver]) - ProFTPD terminating (s ignal 11)
myserver (ipserver[ipserver]) - FTP session closed.
myserver - scrubbing scoreboard
myserver - ROOT PRIVS at scoreboard.c:761
myserver - RELINQUISH PRIVS at scoreboard.c:763
myserver - ROOT PRIVS at scoreboard.c:791
myserver - RELINQUISH PRIVS at scoreboard.c:822
- scrubbing scoreboard
Тут еще, может быть дело в том, сначала я поставил proftpd из исходников, но не удалил(не догнадался как). Поэтому в системе их два фик знает как они между сабой деруться. т.е. если просто запусть proftpd без пути, то будет Fatal: unknown configuration directive 'bytes_in_avail,' on line 104 of '/usr /local//etc/proftpd.conf' А конфиг proftpd из репы у меня лежит в /etc/proftpd/.
в hosts у меня уже давно прописано
ip domain.tld
врубил 10 уровень
Starting ftp server: proftpd - mod_tls/2.1.2: using OpenSSL 0.9.8g 19 Oct 2007
- disabling runtime support for IPv6 connections
- DenyFilter: compiling deny regex '\*.*/'
- <IfModule>: using 'mod_dynmasq.c' section at line 56
- retrieved UID 104 for user 'ftp'
- retrieved GID 1002 for group 'ftp'
- <IfModule>: using 'mod_quotatab.c' section at line 100
- <IfModule>: skipping 'mod_ratio.c' section at line 104
- <IfModule>: using 'mod_delay.c' section at line 112
- <IfModule>: using 'mod_ctrls.c' section at line 116
- <IfModule>: using 'mod_ctrls_admin.c' section at line 124
- <IfModule>: using 'mod_sql.c' section at line 7
server -
server - Config for Debian:
server - IdentLookups
server - DeferWelcome
server - DefaultServer
server - ShowSymlinks
server - TimeoutNoTransfer
server - TimeoutStalled
server - TimeoutIdle
server - DisplayLogin
server - DisplayChdir
server - ListOptions
server - DenyFilter
server - AllowForeignAddress
server - DefaultTransferMode
server - DefaultRoot
server - PassivePorts
server - UserID
server - UserName
server - GroupID
server - GroupName
server - Umask
server - DirUmask
server - AllowOverwrite
server - TransferLog
server - ExtendedLog
server - ExtendedLog
server - QuotaEngine
server - DelayEngine
server - SQLBackend
server - SQLEngine
server - SQLAuthenticate
server - SQLAuthTypes
server - SQLConnectInfo
server - RequireValidShell
server - SQLUserTable
server - SQLUsernameField
server - SQLPasswordField
server - SQLUidField
server - SQLGidField
server - SQLHomedirField
server - SQLShellField
server - SQLLogFile
server - DefaultRoot
server - ROOT PRIVS at mod_delay.c:307
server - RELINQUISH PRIVS at mod_delay.c:309
server - ROOT PRIVS at mod_ctrls.c:1618
server - RELINQUISH PRIVS at mod_ctrls.c:1620
server - mod_lang/0.8: binding to text domain 'proftpd' using locale path '/usr/share/locale'
server - retrieved group ID: 65534
server - setting group ID: 65534
server - SETUP PRIVS at main.c:2869
server - ROOT PRIVS at main.c:1946
server - RELINQUISH PRIVS at main.c:1953
лог
Oct 04 15:43:30 server proftpd[26144] server: opening scoreboard '/var/run/proftpd/proftpd.scoreboard'
Oct 04 15:43:30 server proftpd[26144] server: RELINQUISH PRIVS at main.c:2303
Oct 04 15:43:30 server proftpd[26144] server: ROOT PRIVS at mod_ctrls_admin.c:1092
Oct 04 15:43:30 server proftpd[26144] server: opening scoreboard '/var/run/proftpd/proftpd.scoreboard'
Oct 04 15:43:30 server proftpd[26144] server: RELINQUISH PRIVS at mod_ctrls_admin.c:1094
Oct 04 15:43:30 server proftpd[26144] server: ROOT PRIVS at inet.c:343
Oct 04 15:43:30 server proftpd[26144] server: RELINQUISH PRIVS at inet.c:406
Oct 04 15:43:30 server proftpd[26144] server: ProFTPD 1.3.1 (stable) (built Tue Oct 27 10:09:08 UTC 2009) standalone mode STARTUP
Oct 04 15:43:30 server proftpd[26144] server: ROOT PRIVS at pidfile.c:42
Oct 04 15:43:30 server proftpd[26144] server: RELINQUISH PRIVS at pidfile.c:44
Oct 04 15:43:45 server proftpd[26231] server: RELINQUISH PRIVS at main.c:1074
Oct 04 15:43:45 server proftpd[26231] server: no matching vhost found for 178.63.221.91#21, using DefaultServer 'Debian'
Oct 04 15:43:45 server proftpd[26231] server: notice: unable to resolve 'mm-26-33-120-178.dynamic.pppoe.mgts.by': Resolver Error 0 (no error)
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): ROOT PRIVS at main.c:919
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): SETUP PRIVS at main.c:924
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): FTP session requested from unknown class
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): performing module session initializations
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): ROOT PRIVS at mod_sql.c:4229
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): RELINQUISH PRIVS at mod_sql.c:4231
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): ProFTPD terminating (signal 11)
Oct 04 15:43:45 server proftpd[26231] server (ip[ip]): FTP session closed.
Oct 04 15:44:00 server proftpd[26144] server: scrubbing scoreboard
Oct 04 15:44:00 server proftpd[26144] server: ROOT PRIVS at scoreboard.c:761
Oct 04 15:44:00 server proftpd[26144] server: RELINQUISH PRIVS at scoreboard.c:763
Oct 04 15:44:00 server proftpd[26144] server: ROOT PRIVS at scoreboard.c:791
Oct 04 15:44:00 server proftpd[26144] server: RELINQUISH PRIVS at scoreboard.c:822
server это внутреннее название сервера
вот с дебагом 3
- disabling runtime support for IPv6 connections
- <IfModule>: using 'mod_dynmasq.c' section at line 56
- <IfModule>: using 'mod_quotatab.c' section at line 100
- <IfModule>: skipping 'mod_ratio.c' section at line 104
- <IfModule>: using 'mod_delay.c' section at line 112
- <IfModule>: using 'mod_ctrls.c' section at line 116
- <IfModule>: using 'mod_ctrls_admin.c' section at line 124
- <IfModule>: using 'mod_sql.c' section at line 7
/var/log/proftpd/sql.log пустой
Я тоже host-tracker пользую. Под мои скромные потребности хватает.
Рестартанул, но он не рестартанулся, а только стопарнулся.😂
Еще вопрос такой - что/где/как надо сделать, что бы на чтение не было доступа вообще за пределами домашнего каталога? На запись и так нет.🚬
Думается мне, cmod'ом тут не обойтись, тем более он и так дефолтовый везде,что уже по идее должно закрывать доступ.
Все в норме, фаер непричем. Сервер почему-то не рестартанул.Всем спасибо.
ipt_ftp_conntrack?
[зачеркнуто]Стало после открытия доп. портов
Ошибка: Невозможно подключиться к серверу
[/зачеркнуто]
iptables -L -nv
Chain INPUT (policy DROP 5 packets, 884 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 209.160.0.0-209.160.79.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 212.220.106.0-212.220.109.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 217.69.128.0-217.69.135.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 217.118.92.0-217.118.95.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 207.171.0.0-207.171.63.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 67.18.0.0-67.19.255.255
33 1584 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 98.192.0.0-98.255.255.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 94.51.176.0-94.51.191.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 94.51.128.0-94.51.159.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 94.51.112.0-94.51.127.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 94.50.144.0-94.50.159.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 94.50.128.0-94.50.143.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 94.50.112.0-94.50.127.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 90.151.128.0-90.151.143.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 90.151.108.0-90.151.111.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 90.151.16.0-90.151.31.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 90.150.128.0-90.150.143.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 90.150.224.0-90.150.239.255
14 672 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 89.237.37.0-89.237.37.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 85.26.164.0-85.26.167.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 85.26.232.0-85.26.239.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 83.149.20.0-83.149.23.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 78.108.88.0-78.108.95.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 78.47.43.176-78.47.43.183
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 188.98.0.0-188.98.79.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 188.18.112.0-188.18.127.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 188.17.192.0-188.17.207.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 188.16.0.0-188.16.63.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 188.16.192.0-188.16.255.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 188.17.160.0-188.17.191.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 188.18.128.0-188.18.191.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 188.18.112.0-188.18.127.255
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 122.170.0.0-122.170.127.255
184 115K ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 127.0.0.0/8
97 12040 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp dpt:245
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp spt:245 flags:!0x17/0x02
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp dpts:65000:65535
0 0 ACCEPT udp -- * * 0.0.0.0/0 ip_сервера udp dpts:65000:65535
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp dpt:53
0 0 ACCEPT udp -- * * 0.0.0.0/0 ip_сервера udp dpt:53
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp dpt:3306
0 0 ACCEPT udp -- * * 0.0.0.0/0 ip_сервера udp dpt:3306
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp spt:53 dpts:1024:65535 flags:!0x17/0x02
6 1036 ACCEPT udp -- * * 0.0.0.0/0 ip_сервера udp spt:53 dpts:1024:65535
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp dpt:25
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp spt:25 dpts:1024:65535 flags:!0x17/0x02
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp spts:1024:65535 dpt:113
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp spt:113 dpts:1024:65535 flags:!0x17/0x02
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp dpt:110
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp dpt:995
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp dpt:143
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp dpt:993
46 44506 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp spt:80 dpts:1024:65535 flags:!0x17/0x02
0 0 ACCEPT icmp -- * * 0.0.0.0/0 ip_сервера icmp type 0
0 0 ACCEPT icmp -- * * 0.0.0.0/0 ip_сервера icmp type 3
0 0 ACCEPT icmp -- * * 0.0.0.0/0 ip_сервера icmp type 8
0 0 ACCEPT icmp -- * * 0.0.0.0/0 ip_сервера icmp type 11
206 29951 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp dpt:80
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp dpt:443
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp dpt:20
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp spt:20 dpts:1024:65535 flags:!0x17/0x02
0 0 ACCEPT udp -- * * 0.0.0.0/0 ip_сервера udp dpt:20
0 0 ACCEPT udp -- * * 0.0.0.0/0 ip_сервера udp spt:20 dpts:1024:65535
17 817 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp dpt:21
0 0 ACCEPT tcp -- * * 0.0.0.0/0 ip_сервера tcp spt:21 dpts:1024:65535 flags:!0x17/0x02
0 0 ACCEPT udp -- * * 0.0.0.0/0 ip_сервера udp dpt:21
0 0 ACCEPT udp -- * * 0.0.0.0/0 ip_сервера udp spt:21 dpts:1024:65535
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:1024:65535 flags:!0x16/0x02
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:1024:65535
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy DROP 3 packets, 3138 bytes)
pkts bytes target prot opt in out source destination
184 115K ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 DROP all -- * * 127.0.0.0/8 0.0.0.0/0
384 255K ACCEPT all -- * * ip_сервера 0.0.0.0/0
а с чего вы взяли что php единым они решили эту проблему ?
я не утверждаю этого. Там-то конечно, возможностей плобольше будет
смотрите не только в php.ini. директория cgi-bin и поддержка исполнения бинарников придумана не зря.
и снова ни желание палить тему - как знакомо🚬(это оффтоп)