Page 59 - การบริหารความมั่นคงปลอดภัยสารสนเทศ

การ​ประยุกต์​ใช้​งาน​ความ​มั่นคง​ปลอดภัย 14-49

โดยเ​พิ่มเ​ติมก​ ฎข​ องไ​ฟร์วอลล์ด​ ังต​ ่อ​ไป​นี้

#!/bin/bash
iptables -t nat -N logging
iptables -t nat -A PREROUTING -j logging
iptables -t nat -A POSTROUTING -j logging
iptables -A INPUT -j LOG -log-level info -log-prefix “INPUT ”
iptables -A OUTPUT -j LOG -log-level info -log-prefix “OUTPUT ”
iptables -A FORWARD -j LOG -log-level info -log-prefix “FORWARD ”
# HTTP:
iptables -t nat -A logging -p tcp -dport 80 -j LOG -log-prefix “HTTP: ” -log-level info
# HTTPS:
iptables -t nat -A logging -p tcp –dport 443 -j LOG -log-prefix “HTTPS: ” -log-level info
# SMTP:
iptables -t nat -A logging -p tcp –dport 25 -j LOG -log-prefix “SMTP: ” -log-level info
# FTP:
iptables -t nat -A logging -p tcp –dport 21 -j LOG -log-prefix “FTP: ” -log-level info
# IMAP:
iptables -t nat -A logging -p tcp –dport 143 -j LOG -log-prefix “IMAP: ” -log-level info
# POP3:
iptables -t nat -A logging -p tcp –dport 110 -j LOG -log-prefix “POP3: ” -log-level info
# MSN:
iptables -t nat -A logging -p tcp –dport 1863 -j LOG -log-prefix “MSN: ” -log-level info
# JABBER:
iptables -t nat -A logging -p tcp –dport 5222 -j LOG -log-prefix “JABBER: ” -log-level info
# JABBERS
iptables -t nat -A logging -p tcp –dport 5223 -j LOG -log-prefix “JABBERS: ” -log-level info
# ICQ/AIM
iptables -t nat -A logging -p tcp –dport 5190 -j LOG -log-prefix “ICQ/AIM: ” -log-level info
# Yahoo
iptables -t nat -A logging -p tcp –dport 5050 -j LOG -log-prefix “YAHOO: ” -log-level info
# IRC
iptables -t nat -A logging -p tcp –dport 6667 -j LOG -log-prefix “IRC: ” -log-level info
# Gadu-Gadu
iptables -t nat -A logging -p tcp –dport 8074 -j LOG -log-prefix “GADU-GADU: ” -log-level info