Dram

Andreyka:
включи правила
iptables-save
скопируй в форум
выключи правила
iptables-save
скопируй в форум

плюс логи крона до правил и после правил

4758:~# iptables-save
# Generated by iptables-save v1.4.2 on Wed Aug 17 17:01:00 2011
*mangle
:PREROUTING ACCEPT [1273015607:3116395526887]
:INPUT ACCEPT [1273015607:3116395526887]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1312847374:3256869395895]
:POSTROUTING ACCEPT [1312847374:3256869395895]
COMMIT
# Completed on Wed Aug 17 17:01:00 2011
# Generated by iptables-save v1.4.2 on Wed Aug 17 17:01:00 2011
*filter
:INPUT ACCEPT [1273015607:3116395526887]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1312847374:3256869395895]
COMMIT
# Completed on Wed Aug 17 17:01:00 2011
4758:~#

4758:~# iptables-save
# Generated by iptables-save v1.4.2 on Wed Aug 17 17:06:55 2011
*mangle
:PREROUTING ACCEPT [1274383477:3117782920568]
:INPUT ACCEPT [1274383477:3117782920568]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1314295176:3258550841749]
:POSTROUTING ACCEPT [1314295176:3258550841749]
COMMIT
# Completed on Wed Aug 17 17:06:55 2011
# Generated by iptables-save v1.4.2 on Wed Aug 17 17:06:55 2011
*filter
:INPUT ACCEPT [85977:180614777]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [96442:219142360]
:ISPMGR - [0:0]
-A INPUT -j ISPMGR
-A OUTPUT -j ISPMGR
-A ISPMGR -s мой ip/32 -p tcp -m tcp --dport 3306 -j ACCEPT
-A ISPMGR -p tcp -m tcp --dport 3306 -j REJECT --reject-with icmp-port-unreachable
-A ISPMGR -s 213.0.0.0/8 -p tcp -m tcp --dport 22 -j ACCEPT
-A ISPMGR -s 77.0.0.0/8 -p tcp -m tcp --dport 22 -j ACCEPT
-A ISPMGR -p tcp -m tcp --dport 22 -j REJECT --reject-with icmp-port-unreachable
-A ISPMGR -s 213.0.0.0/8 -p tcp -m tcp --dport 21 -j ACCEPT
-A ISPMGR -s 77.0.0.0/8 -p tcp -m tcp --dport 21 -j ACCEPT
-A ISPMGR -p tcp -m tcp --dport 21 -j REJECT --reject-with icmp-port-unreachable
COMMIT
# Completed on Wed Aug 17 17:06:55 2011
4758:~#

Aug 17 16:49:53 4758 crontab[5287]: (root) LIST (root)
Aug 17 16:50:01 4758 /USR/SBIN/CRON[5332]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly)
Aug 17 16:50:01 4758 /USR/SBIN/CRON[5334]: (munin) CMD (if [ -x /usr/bin/munin-cron ]; then /usr/bin/munin-cron; fi)
Aug 17 16:50:01 4758 /USR/SBIN/CRON[5337]: (root) CMD (if [ -x /etc/munin/plugins/apt_all ]; then /etc/munin/plugins/apt_all update 7200 12 >/dev/null; elif [ -x /etc/munin/plugins/apt ]; then /etc/munin/plugins/apt update 7200 12 >/dev/null; fi)
Aug 17 16:50:01 4758 /USR/SBIN/CRON[5338]: (root) CMD (/usr/local/ispmgr/addon/vmonit/rotate.sh >/dev/null 2>&1)
Aug 17 16:55:02 4758 /USR/SBIN/CRON[7658]: (munin) CMD (if [ -x /usr/bin/munin-cron ]; then /usr/bin/munin-cron; fi)
Aug 17 16:55:02 4758 /USR/SBIN/CRON[7660]: (root) CMD ([ -x /usr/lib/sysstat/sa1 ] && { [ -r "$DEFAULT" ] && . "$DEFAULT" ; [ "$ENABLED" = "true" ] && exec /usr/lib/sysstat/sa1 $SA1_OPTIONS 1 1 ; })
Aug 17 16:55:02 4758 /USR/SBIN/CRON[7662]: (root) CMD (if [ -x /etc/munin/plugins/apt_all ]; then /etc/munin/plugins/apt_all update 7200 12 >/dev/null; elif [ -x /etc/munin/plugins/apt ]; then /etc/munin/plugins/apt update 7200 12 >/dev/null; fi)
Aug 17 16:55:02 4758 /USR/SBIN/CRON[7664]: (root) CMD (/usr/local/ispmgr/addon/vmonit/rotate.sh >/dev/null 2>&1)
Aug 17 17:00:01 4758 /USR/SBIN/CRON[9990]: (munin) CMD (if [ -x /usr/bin/munin-cron ]; then /usr/bin/munin-cron; fi)
Aug 17 17:00:01 4758 /USR/SBIN/CRON[9992]: (root) CMD (if [ -x /etc/munin/plugins/apt_all ]; then /etc/munin/plugins/apt_all update 7200 12 >/dev/null; elif [ -x /etc/munin/plugins/apt ]; then /etc/munin/plugins/apt update 7200 12 >/dev/null; fi)
Aug 17 17:00:01 4758 /USR/SBIN/CRON[9995]: (root) CMD (/usr/local/ispmgr/addon/vmonit/rotate.sh >/dev/null 2>&1)
Aug 17 17:01:01 4758 /USR/SBIN/CRON[10198]: (root) CMD (/usr/local/ispmgr/sbin/rotate)
Aug 17 17:01:13 4758 crontab[11265]: (root) LIST (root)
Aug 17 17:01:13 4758 crontab[11266]: (root) LIST (root)
Aug 17 17:05:01 4758 /USR/SBIN/CRON[12198]: (munin) CMD (if [ -x /usr/bin/munin-cron ]; then /usr/bin/munin-cron; fi)
Aug 17 17:05:01 4758 /USR/SBIN/CRON[12200]: (root) CMD ([ -x /usr/lib/sysstat/sa1 ] && { [ -r "$DEFAULT" ] && . "$DEFAULT" ; [ "$ENABLED" = "true" ] && exec /usr/lib/sysstat/sa1 $SA1_OPTIONS 1 1 ; })
Aug 17 17:05:01 4758 /USR/SBIN/CRON[12203]: (root) CMD (if [ -x /etc/munin/plugins/apt_all ]; then /etc/munin/plugins/apt_all update 7200 12 >/dev/null; elif [ -x /etc/munin/plugins/apt ]; then /etc/munin/plugins/apt update 7200 12 >/dev/null; fi)
Aug 17 17:05:01 4758 /USR/SBIN/CRON[12204]: (root) CMD (/usr/local/ispmgr/addon/vmonit/rotate.sh >/dev/null 2>&1)
Aug 17 17:09:01 4758 /USR/SBIN/CRON[14091]: (root) CMD ( [ -x /usr/lib/php5/maxlifetime ] && [ -d /var/lib/php5 ] && find /var/lib/php5/ -type f -cmin +$(/usr/lib/php5/maxlifetime) -print0 | xargs -n 200 -r -0 rm)
Aug 17 17:09:01 4758 /USR/SBIN/CRON[14093]: (root) CMD (find /var -wholename "*/data/tmp/*" -type f -cmin +120 -print0 | xargs -r -0 rm)

myhand:

Боюсь, что в ДНК...

4758:~# iptables -vL
Chain INPUT (policy ACCEPT 1261M packets, 3099G bytes)
pkts bytes target prot opt in out source destination

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 1300M packets, 3237G bytes)
pkts bytes target prot opt in out source destination
4758:~#

mfl:
Так если сайты качественные зачем заводить второй акк?