[Fbsd] natd i trzy adresy

Thread View: pl.comp.os.bsd

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Arek Czereszewski Wed, 14 Apr 2004 13:22

#640

Author: Arek Czereszewski
Date: Wed, 14 Apr 2004 13:22

53 lines
2477 bytes

Witam

Pewnie to co napisze jest sprawa banalna ale ma pewna zagwozdke z 
regulkami dla ipfw + natd. I prosilbym jesli ktos moze o sprawdzenie czy 
dobrze sa zrobione. Nie moge przetestowac na serverze bo jest narazie 
wypiety z sieci (z powodow niezaleznych ode mnie).

Konfiguracja taka:
fxp0 - IP publiczne (kabel do ISP)
fxp1 - IP publiczne (na nim ma chodzic www, mail, dns)
fxp1_alias - 192.168.0.1
fxp1 i alias wpiete do lana na budynek.

w /etc/rc.conf ustawione:
...
gateway_enable="YES"
firewall_enable="YES"
#firewall_type="OPEN"
firewall_script="/etc/fwrules"
natd_enable="YES"
natd_interface="fxp1"
natd_flags="-f /etc/natd.conf"
...


  /etc/fwrules

fwcdm="/sbin/ipfw"

$fwcdm -f flush

$fwcdm add 50 divert 8668 ip from 192.168.0.0/24 to any via fxp1
$fwcdm add 51 allow tcp from any to me 53
$fwcdm add 52 allow udp from any to me 53
$fwcdm add 53 allow tcp from any to me 80
$fwcdm add 54 allow tcp from any to me 25
$fwcdm add 55 allow tcp from any to me 995


$fwcdm add 60 allow tcp from 192.168.0.0/24 to any 53
$fwcdm add 61 allow udp from 192.168.0.0/24 to any 53
$fwcdm add 62 allow tcp from 192.168.0.0/24 to any 80
$fwcdm add 63 allow tcp from 192.168.0.0/24 to any 8074
$fwcdm add 64 allow any from 192.168.0.0/24 to me 25
$fwcdm add 62 allow tcp from 192.168.0.0/24 to me 995
...

Pisze tu bo nie mam kogo sie spytac a nie jestem za dobry w te klocki.

Jesli ktos moze to niech powie co sadzi o tych regulkach.

Pozdrawiam
Arek

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads