Thread View: pl.comp.os.bsd
7 messages
7 total messages
Started by dyfuzor
Mon, 19 Apr 2004 15:46
ipfw divert..
Author: dyfuzor
Date: Mon, 19 Apr 2004 15:46
Date: Mon, 19 Apr 2004 15:46
29 lines
1708 bytes
1708 bytes
Czesc Nie wiecie dlaczego gdy robie: xl0 - zewn. /sbin/ipfw add 1 divert 8668 ip from any to 62.233.xxx.xxx in recv xl0 /sbin/ipfw add pipe 1031 ip from any to 192.168.1.103 via xl0 in /sbin/ipfw add pipe 1032 ip from 192.168.1.103 to any via xl0 out /sbin/ipfw pipe 1031 config bw $down"Kbit/s" /sbin/ipfw pipe 1032 config bw $up"Kbit/s" /sbin/ipfw add 90401 divert 8668 ip from 192.168.0.0/16 to any out xmit xl0 Nie moge pingowac z routera? ~# ping 212.182.97.122 --- 212.182.97.122 ping statistics --- 3 packets transmitted, 0 packets received, 100% packet loss uzywam ipnat map xl0 192.168.0.0/16 -> 62.233.xx.xxx/32 # sysctl -a |grep pass net.inet.ip.fw.one_pass: 1 ipfw show 02301 178 21278 pipe 1031 ip from any to 192.168.1.103 in recv xl0 02401 45 2675 pipe 1032 ip from 192.168.1.103 to any out xmit xl0
Re: ipfw divert..
Author: dyfuzor
Date: Mon, 19 Apr 2004 15:52
Date: Mon, 19 Apr 2004 15:52
7 lines
1187 bytes
1187 bytes
dodam ipfw show 00001 564 29089 divert 8668 ip from any to 62.233.195.158 in recv xl0 24865 0 0 divert 8668 ip from 192.168.0.0/16 to any out xmit xl0 65535 71653048 37048027258 allow ip from any to any
Re: ipfw divert..
Author: Dracula
Date: Tue, 20 Apr 2004 14:24
Date: Tue, 20 Apr 2004 14:24
18 lines
1570 bytes
1570 bytes
"dyfuzor" <dyf...@wp.pl> wrote in message news:c60sj3$cjp$1@opal.futuro.pl... > dodam > ipfw show > 00001 564 29089 divert 8668 ip from any to 62.233.195.158 in recv > xl0 > 24865 0 0 divert 8668 ip from 192.168.0.0/16 to any out > xmit xl0 > 65535 71653048 37048027258 allow ip from any to any Regolka moze miec najwyzszy numer 65535 w twoim przypadku jest to ipfw add allow ip from any to any czyli kernel kompilowales z opcja default_to_accept. Jesli chcesz by divert byl ostatni proponuje numerek 65532 pzd Dracula
Re: ipfw divert..
Author: dyfuzor
Date: Wed, 21 Apr 2004 16:16
Date: Wed, 21 Apr 2004 16:16
12 lines
1292 bytes
1292 bytes
> Regolka moze miec najwyzszy numer 65535 w twoim przypadku jest to ipfw add > allow ip from any to any czyli kernel kompilowales z opcja > default_to_accept. Jesli chcesz by divert byl ostatni proponuje numerek > 65532 > pzd > Dracula 65532 0 0 divert 8668 ip from 192.168.0.0/16 to any out xmit xl0 i dalej nic nie wpada do tej reguly..
Re: ipfw divert..
Author: Dracula
Date: Wed, 21 Apr 2004 22:00
Date: Wed, 21 Apr 2004 22:00
23 lines
1801 bytes
1801 bytes
"dyfuzor" <dyf...@wp.pl> wrote in message news:c666ot$qv9$1@opal.futuro.pl... > > > Regolka moze miec najwyzszy numer 65535 w twoim przypadku jest to ipfw add > > allow ip from any to any czyli kernel kompilowales z opcja > > default_to_accept. Jesli chcesz by divert byl ostatni proponuje numerek > > 65532 > > pzd > > Dracula > > 65532 0 0 divert 8668 ip from 192.168.0.0/16 to any out > xmit xl0 > > i dalej nic nie wpada do tej reguly.. Sorry namieszalem... chyba spalem jak odpisywalem. generalnie przeanalizuj droge pakietu i zmien regolke na ipfw add divert 8668 ip from any to 192.168.0.0/16 to any out xmit xl0. Cos mi sie wydaje ze to wlasnie w ten sposob powinno byc pzd Dracula
Re: ipfw divert..
Author: Dracula
Date: Wed, 21 Apr 2004 22:05
Date: Wed, 21 Apr 2004 22:05
32 lines
2073 bytes
2073 bytes
"Dracula" <dra...@CUT-THISH-SHIT.3net-tech.eu.org> wrote in message news:c66qv7$5qb$1@atlantis.news.tpi.pl... > > "dyfuzor" <dyf...@wp.pl> wrote in message > news:c666ot$qv9$1@opal.futuro.pl... > > > > > Regolka moze miec najwyzszy numer 65535 w twoim przypadku jest to ipfw > add > > > allow ip from any to any czyli kernel kompilowales z opcja > > > default_to_accept. Jesli chcesz by divert byl ostatni proponuje numerek > > > 65532 > > > pzd > > > Dracula > > > > 65532 0 0 divert 8668 ip from 192.168.0.0/16 to any out > > xmit xl0 > > > > i dalej nic nie wpada do tej reguly.. > > Sorry namieszalem... chyba spalem jak odpisywalem. generalnie przeanalizuj > droge pakietu i zmien regolke na ipfw add divert 8668 ip from any to > 192.168.0.0/16 to any out xmit xl0. Cos mi sie wydaje ze to wlasnie w ten kurde literowka ipfw add divert ip from any to 192.168.0.0/16 out xmit xl0 oczywiscie tak powinno byc :-) pzd Dracula
Re: ipfw divert..
Author: dyfuzor
Date: Wed, 21 Apr 2004 23:23
Date: Wed, 21 Apr 2004 23:23
16 lines
1704 bytes
1704 bytes
niestety dalej pucha... 00001 8 419 divert 8668 ip from any to 62.233.195.158 in recv xl0 13301 17 14665 pipe 1371 ip from any to 192.168.1.137 via xl0 13401 0 0 pipe 1372 ip from 192.168.1.137 to any via xl0 65532 0 0 divert 8668 ip from any to 192.168.0.0/16 out xmit xl0 65535 128835681 64125455267 allow ip from any to any robie tak jak TU: http://groups.google.pl/groups?q=zastrzezenia+do+powyzszego+group:pl.comp.os .freebsd&hl=pl&lr=&ie=UTF-8&inlang=pl&group=pl.comp.os.freebsd&selm=c1tjp2%2 4h9q%241%40atlantis.news.tpi.pl&rnum=1 no i niestety nie dziala... nie masz jakiegos sensownego wyjasnienia?
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads