[操作疑難] Raspberry Pi + Shadowsocks 問題

plc1222

已經set完（上網炒人)
但如果唔想俾 Shadowsocks user access 到local ip devices
要點做
iptables -L 係空白

plc1222

係咪應該搬去LINUX版

D@niel

用ufw 簡單d，然後set allow 8388，睇你需要通常incoming 的default policy set deny， outgoing 的就allow

plc1222

用ufw 簡單d，然後set allow 8388，睇你需要通常incoming 的default policy set deny， outgoing 的就allow ...
D@niel 發表於 2017-10-23 09:28

  如果唔想Shadowsocks  user 去local ip可以點set? local ip 係192.168.2.X

D@niel

回覆 4# plc1222


   吾明白！

plc1222

回覆  plc1222


   吾明白！
D@niel 發表於 2017-10-23 10:20

    Raspberry Pi + Shadowsocks  宜家SET好左係我屋企
我主要俾親戚朋友用
但我試左Shadowsocks  可以去/PING到我屋企內部既NAS
有無得 DENY左Shadowsocks  呢部SERVER 去到我屋企內部其他IP

alanh999

Raspberry Pi + Shadowsocks  宜家SET好左係我屋企
我主要俾親戚朋友用
但我試左Shadowsocks  可以 ...
plc1222 發表於 23/10/2017 10:39

    You have to set rules in your firewall to isolate the Raspberry PI.

plc1222

You have to set rules in your firewall to isolate the Raspberry PI.
alanh999 發表於 2017-10-23 11:46

    firewall 會處理內部PACKET?

alanh999

firewall 會處理內部PACKET?
plc1222 發表於 23/10/2017 11:55

    Does your PI device have IP address in a subnet which is different from your LAN subnet and it's your router which handles routing of traffics between these 2 subnets? If yes then you can block traffics between these 2 subnets and mission achieved.

If your PI is in your LAN subnet then it's hard for you to achieve what you want to do......

plc1222

Does your PI device have IP address in a subnet which is different from your LAN subnet and i ...
alanh999 發表於 2017-10-23 11:59

同一SUBSET啊
屋企NETWORK好簡單