Да хоть и фотошоп, в чем разница?
Я такое видел и от дизайнеров, которые за маленький лендинг берут от 1000$
Так какие претензии к заказчику?
root@fastAPI:~# iptables -L -v -n --line-numbers
Chain INPUT (policy ACCEPT 623 packets, 305K bytes)
num pkts bytes target prot opt in out source destination
1 5 420 DROP 0 -- vmbr1 * 0.0.0.0/0 10.0.0.0/8
2 0 0 DROP 0 -- * * 103.245.236.0/24 0.0.0.0/0
3 0 0 DROP 0 -- * * 190.103.60.0/24 0.0.0.0/0
Chain FORWARD (policy ACCEPT 248 packets, 33249 bytes)
num pkts bytes target prot opt in out source destination
1 0 0 DROP 0 -- vmbr1 * 0.0.0.0/0 10.0.0.1
Chain OUTPUT (policy ACCEPT 596 packets, 299K bytes)
num pkts bytes target prot opt in out source destination
root@fastAPI:~# iptables -D INPUT 1
root@fastAPI:~# iptables -L -v -n --line-numbers
Chain INPUT (policy ACCEPT 7 packets, 404 bytes)
num pkts bytes target prot opt in out source destination
1 0 0 DROP 0 -- * * 103.245.236.0/24 0.0.0.0/0
2 0 0 DROP 0 -- * * 190.103.60.0/24 0.0.0.0/0
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
1 0 0 DROP 0 -- vmbr1 * 0.0.0.0/0 10.0.0.1
Chain OUTPUT (policy ACCEPT 5 packets, 468 bytes)
num pkts bytes target prot opt in out source destination
root@fastAPI:~# iptables -D FORWARD 1
root@fastAPI:~# iptables -L -v -n --line-numbers
Chain INPUT (policy ACCEPT 34 packets, 15912 bytes)
num pkts bytes target prot opt in out source destination
1 0 0 DROP 0 -- * * 103.245.236.0/24 0.0.0.0/0
2 0 0 DROP 0 -- * * 190.103.60.0/24 0.0.0.0/0
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 30 packets, 15220 bytes)
num pkts bytes target prot opt in out source destination
# Generated by iptables-save v1.8.9 on Fri Jan 19 01:36:33 2024
*filter
:INPUT ACCEPT [83:12097]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [87:12557]
-A INPUT -d 10.0.0.0/8 -i vmbr1 -j DROP
-A INPUT -s 103.245.236.0/24 -j DROP
-A INPUT -s 190.103.60.0/24 -j DROP
-A FORWARD -d 10.0.0.1/32 -i vmbr1 -j DROP
COMMIT
# Completed on Fri Jan 19 01:36:33 2024
# Generated by iptables-save v1.8.9 on Fri Jan 19 01:36:33 2024
*raw
:PREROUTING ACCEPT [2751:522704]
:OUTPUT ACCEPT [3023:520429]
COMMIT
# Completed on Fri Jan 19 01:36:33 2024
# Generated by iptables-save v1.8.9 on Fri Jan 19 01:36:33 2024
*nat
:PREROUTING ACCEPT [5:822]
:INPUT ACCEPT [2:706]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A PREROUTING -d 10.0.0.2/32 -p tcp -m tcp --dport 80 -j DNAT --to-destination 10.1.0.2:80
-A PREROUTING -d 10.0.0.2/32 -p tcp -m tcp --dport 443 -j DNAT --to-destination 10.1.0.2:443
-A PREROUTING -d 10.0.0.2/32 -p tcp -m tcp --dport 40100 -j DNAT --to-destination 10.1.0.2:22
-A PREROUTING -d 10.0.0.2/32 -p tcp -m tcp --dport 40102 -j DNAT --to-destination 10.1.0.4:22
-A PREROUTING -d 10.0.0.2/32 -p tcp -m tcp --dport 40103 -j DNAT --to-destination 10.1.0.5:22
-A PREROUTING -d 10.0.0.2/32 -p tcp -m tcp --dport 40104 -j DNAT --to-destination 10.1.0.6:22
-A PREROUTING -d 10.0.0.2/32 -p tcp -m tcp --dport 40105 -j DNAT --to-destination 10.1.0.7:22
-A POSTROUTING -s 10.1.0.0/16 -o vmbr0 -j MASQUERADE
-A POSTROUTING -s 10.1.0.0/16 -o tun0 -j MASQUERADE
COMMIT
# Completed on Fri Jan 19 01:36:33 2024
-A INPUT -d 10.0.0.0/8 -i vmbr1 -j DROP
root@gitlab-runner:/home/gitlab-runner-user# docker run --rm -it alpine ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
58: eth0@if59: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue state UP
link/ether 02:42:ac:1a:00:02 brd ff:ff:ff:ff:ff:ff
inet 172.26.0.2/16 brd 172.26.255.255 scope global eth0
valid_lft forever preferred_lft forever
root@gitlab-runner:/home/gitlab-runner-user# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
2: ens18: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether bc:24:11:53:8b:9f brd ff:ff:ff:ff:ff:ff
altname enp0s18
inet 10.1.0.5/16 brd 10.1.255.255 scope global ens18
valid_lft forever preferred_lft forever
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
link/ether 02:42:d6:46:d3:4f brd ff:ff:ff:ff:ff:ff
inet 172.26.0.1/16 brd 172.26.255.255 scope global docker0
valid_lft forever preferred_lft forever