🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: pl.comp.os.freebsd
Article #45377

ipf + ipnat

#45377
From: PCet
Date: Fri, 11 Apr 2003 19:15
85 lines
2111 bytes
Witam wszystkich i proszę o pomoc.



Chciałem skonstruować na FreeBSD 4.8 mały firewall (tak dla testów i celów
poznawczych)

Wybrałem inf + ipnat



rc.conf - wygląda tak:



ifconfig_ed0="inet 192.168.1.50  netmask 255.255.255.0"

ifconfig_ed1="inet 192.168.2.50  netmask 255.255.255.0"

defaultrouter="192.168.1.1"

hostname="test"

portmap_enable="YES"

gateway_enable=YES

kern_securelevel_enable="NO"

keyrate="fast"

linux_enable="YES"

moused_enable="YES"

nfs_reserved_port_only="YES"

saver="fade"

sendmail_enable="YES"

sshd_enable="YES"

ssbd_enable="YES"

ipfilter_enable="YES"

ipfilter_program="/sbin/ipf"

ipfilter_rules="/etc/ipf.rules"

ipfilter_flags=""

ipnat_enable="YES"

ipnat_program="/sbin/ipnat"

ipnat_rules="/etc/ipnat.rules"

ipnat_flags=""



ipf..rules - tymczasowo pusty (ale to chyba nie jest istotne)



ipnat.rules



map ed0 192.168.2.0/32 -> 192.168.1.50/32 proxy port 2121 ftp/tcp

map ed0 192.168.2.0/32 -> 192.168.1.50/32 portmap tcp/udp auto

map ed0 192.168.2.0/32 -> 192.168.1.50/32



Co jest nie tak, że komputerki po stronie ed1 nie widzą niczego po stronie
ed0 i dalej?



Pozdrawiam. Piotrek.
Technical Details
Message-ID: <b774af$4e$1@nemesis.news.tpi.pl>
Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!agh.edu.pl!news.agh.edu.pl!news.onet.pl!newsfeed.gazeta.pl!newsfeed.tpinternet.pl!atlantis.news.tpi.pl!news.tpi.pl!not-for-mail

Show Full Headers
Complete Article Headers
Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!agh.edu.pl!news.agh.edu.pl!news.onet.pl!newsfeed.gazeta.pl!newsfeed.tpinternet.pl!atlantis.news.tpi.pl!news.tpi.pl!not-for-mail
From: "PCet" <PCet@interia.pl>
Newsgroups: pl.comp.os.freebsd
Subject: ipf + ipnat
Date: Fri, 11 Apr 2003 21:15:49 +0200
Organization: tp.internet - http://www.tpi.pl/
Lines: 87
Message-ID: <b774af$4e$1@nemesis.news.tpi.pl>
NNTP-Posting-Host: host80-48-63-50.in-addr.octava.net.pl
X-Trace: nemesis.news.tpi.pl 1050088591 142 80.48.63.50 (11 Apr 2003 19:16:31 GMT)
X-Complaints-To: usenet@tpi.pl
NNTP-Posting-Date: Fri, 11 Apr 2003 19:16:31 +0000 (UTC)
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit