Re: ipf / ipnat / co pierwsze ?

Article View: pl.comp.os.bsd

Article #9077

#9077

From: Cezary Ambroziak
Date: Sun, 19 Jun 2005 23:00

26 lines
1702 bytes

G.Maziarek wrote:
> siec wyglada tak:
>
> internet---xl0--freebsd--rl0---siec_lokalna
>
> /etc/ipf.rules ( w duzym skr.)
> block in quick on xl0 from WSZYTKIE_KLASY_IP_LOKA to any
> pass out quick on xl0 proto tcp/udp from IP_PUBL/32 to any keep state
> pass out quick on xl0 proto icmp from IP_PUBL/32 to any keep state
>
> *1*
>
> block out log quick on xl0
> block in  log quick on xl0
>
> przy takim ustawieniu z internetu mozna ko. tylko z freebsd a z sieci
> lokalnej nie mozna,
> musze dodac w firewall (w moejscu *1*) aby zacze. dzialac:
>
> pass out quick on xl0 proto tcp/udp from 192.168.1.0/24 to any keep state
> pass out quick on xl0 proto icmp from 192.168.1.0/24 to any keep state
>
> Dlaczego tak jest ? przeciez siec lokalna 192.168.1.0/24 jest na rl0 a nie
> na xl0.

http://coombs.anu.edu.au/~avalon/ipfil-flow.html

Technical Details

Message-ID: <d94tdo$gna$1@achot.icm.edu.pl>

Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news2.icm.edu.pl!not-for-mail

References: <d91uod$hbq$1@inews.gazeta.pl>

Show Full Headers

Complete Article Headers

Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news2.icm.edu.pl!not-for-mail
From: "Cezary Ambroziak" <ambrozic@poczta.onet.pl>
Newsgroups: pl.comp.os.bsd
Subject: Re: ipf / ipnat / co pierwsze ?
Date: Mon, 20 Jun 2005 01:00:42 +0200
Organization: http://news.icm.edu.pl/
Lines: 27
Message-ID: <d94tdo$gna$1@achot.icm.edu.pl>
References: <d91uod$hbq$1@inews.gazeta.pl>
NNTP-Posting-Host: chello212186142016.chello.pl
Mime-Version: 1.0
X-Trace: achot.icm.edu.pl 1119222008 17130 212.186.142.16 (19 Jun 2005 23:00:08 GMT)
X-Complaints-To: abuse@icm.edu.pl
NNTP-Posting-Date: Sun, 19 Jun 2005 23:00:08 +0000 (UTC)
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506
X-Priority: 3
X-Newsreader: Microsoft Outlook Express 6.00.2800.1506
X-MSMail-Priority: Normal
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

Reply to Parent Message