Не могу настроить forward ftpipfw add 10040 fwd 10.0.8.1,21 tcp from any to 69.147.83.40 dst-port 21
ipfw add 10040 fwd 10.0.8.1,20 tcp from any to 69.147.83.40 dst-port 20Что не так делаю?
>Не могу настроить forward ftp
>
>ipfw add 10040 fwd 10.0.8.1,21 tcp from any to 69.147.83.40 dst-port 21
>
>ipfw add 10040 fwd 10.0.8.1,20 tcp from any to 69.147.83.40 dst-port 20
>
>
>Что не так делаю?
10.0.8.1 адрес должен входить в список me , то есть быть поднят
на одном из интерсейсов роутера с правилами, что выше.If ipaddr is a local address, then matching packets will be for-
warded to port (or the port number in the packet if one is not
specified in the rule) on the local machine.Долна быть включена опция ядра options PFIREWALL_FORWARD
add allow tcp from any to ${IpOut} 21 in via ${LanOut}
LanOut="xl0" # внешний интерфейс
IpOut="xx.xx.xx.xx" # внешний IP адрес машины
а по мне так это надо на natd делать редирект-redirect_port tcp 10....:21 21 -redirect_port tcp 10....:21 21
Попробовал - не помогло :(Вот мой ipfw list
00010 divert 8668 ip from 10.0.6.3 to not 10.0.6.0/24 out xmit xl1
00010 divert 8668 ip from 10.0.6.2 to not 10.0.6.0/24 out xmit xl1
00010 divert 8668 ip from 10.0.6.8 to not 10.0.6.0/24 out xmit xl1
00010 divert 8668 ip from 10.0.6.175 to not 10.0.6.0/24 out xmit xl1
00010 divert 8668 ip from 10.0.7.7 to not 10.0.7.0/24 out xmit xl1
00010 divert 8668 ip from 10.0.7.3 to not 10.0.7.0/24 out xmit xl1
00011 divert 8668 ip from 10.0.6.23 to not 10.0.6.0/24 out xmit xl1
00012 divert 8668 ip from 10.0.6.34 to not 10.0.6.0/24 out xmit xl1
00013 divert 8668 ip from 10.0.6.201 to not 10.0.6.0/24 out xmit xl1
00014 divert 8668 ip from 10.0.7.55 to not 10.0.7.0/24 out xmit xl1
00015 divert 8668 ip from 10.0.7.56 to not 10.0.7.0/24 out xmit xl1
00015 divert 8668 ip from 10.0.7.57 to not 10.0.7.0/24 out xmit xl1
00016 divert 8668 ip from 10.0.6.246 to not 10.0.6.0/24 out xmit xl1
00017 divert 8668 ip from 10.0.6.243 to not 10.0.6.0/24 out xmit xl1
00018 divert 8668 ip from 10.0.6.202 to not 10.0.6.0/24 out xmit xl1
00019 divert 8668 ip from 10.0.6.253 to not 10.0.6.0/24 out xmit xl1
00020 divert 8668 ip from 10.0.6.126 to not 10.0.6.0/24 out xmit xl1
00021 divert 8668 ip from 10.0.6.121 to not 10.0.6.0/24 out xmit xl1
00021 divert 8668 ip from 10.0.6.101 to not 10.0.6.0/24 out xmit xl1
00022 divert 8668 ip from 10.0.6.28 to not 10.0.6.0/24 out xmit xl1
00023 divert 8668 ip from 10.0.7.51 to not 10.0.7.0/24 out xmit xl1
00024 divert 8668 ip from 10.0.6.224 to not 10.0.6.0/24 out xmit xl1
00025 divert 8668 ip from 10.0.6.195 to not 10.0.6.0/24 out xmit xl1
00026 divert 8668 ip from 10.0.6.116 to not 10.0.6.0/24 out xmit xl1
00027 divert 8668 ip from 10.0.6.207 to not 10.0.6.0/24 out xmit xl1
00029 divert 8668 ip from 10.0.6.46 to not 10.0.6.0/24 out xmit xl1
00030 divert 8668 ip from 10.0.6.185 to not 10.0.6.0/24 out xmit xl1
00031 divert 8668 ip from 10.0.6.188 to not 10.0.6.0/24 out xmit xl1
00032 divert 8668 ip from 10.0.6.81 to not 10.0.6.0/24 out xmit xl1
00050 divert 8668 ip4 from any to any via xl1
00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
01000 divert 8668 ip from not 10.0.6.0/24 to 172.17.225.15 in recv xl1
01001 divert 8668 ip from not 10.0.7.0/24 to 172.17.225.15 in recv xl1
01010 allow ip from 10.0.6.3 to any
01010 allow ip from any to 10.0.6.3
01010 allow ip from 10.0.6.2 to any
01010 allow ip from any to 10.0.6.2
01010 allow ip from 10.0.6.8 to any
01010 allow ip from any to 10.0.6.8
01010 allow ip from 10.0.6.175 to any
01010 allow ip from any to 10.0.6.175
01010 allow ip from 10.0.7.7 to any
01010 allow ip from any to 10.0.7.7
01010 allow ip from 10.0.7.3 to any
01010 allow ip from any to 10.0.7.3
01011 allow ip from 10.0.6.23 to any
01011 allow ip from any to 10.0.6.23
01012 allow ip from 10.0.6.34 to any
01012 allow ip from any to 10.0.6.34
01013 allow ip from 10.0.6.201 to any
01013 allow ip from any to 10.0.6.201
01014 allow ip from 10.0.7.55 to any
01014 allow ip from any to 10.0.7.55
01015 allow ip from 10.0.7.56 to any
01015 allow ip from any to 10.0.7.56
01015 allow ip from 10.0.7.57 to any
01015 allow ip from any to 10.0.7.57
01016 allow ip from 10.0.6.246 to any
01016 allow ip from any to 10.0.6.246
01017 allow ip from 10.0.6.243 to any
01017 allow ip from any to 10.0.6.243
01018 allow ip from 10.0.6.202 to any
01018 allow ip from any to 10.0.6.202
01019 allow ip from 10.0.6.253 to any
01019 allow ip from any to 10.0.6.253
01020 allow ip from 10.0.6.126 to any
01020 allow ip from any to 10.0.6.126
01021 allow ip from 10.0.6.101 to any
01021 allow ip from 10.0.6.121 to any
01021 allow ip from any to 10.0.6.101
01021 allow ip from any to 10.0.6.121
01022 allow ip from 10.0.6.28 to any
01022 allow ip from any to 10.0.6.28
01023 allow ip from 10.0.7.51 to any
01023 allow ip from any to 10.0.7.51
01024 allow ip from 10.0.6.224 to any
01024 allow ip from any to 10.0.6.224
01025 allow ip from 10.0.6.195 to any
01025 allow ip from any to 10.0.6.195
01026 allow ip from 10.0.6.116 to any
01026 allow ip from any to 10.0.6.116
01027 allow ip from 10.0.6.207 to any
01027 allow ip from any to 10.0.6.207
01029 allow ip from 10.0.6.46 to any
01029 allow ip from any to 10.0.6.46
01030 allow ip from 10.0.6.185 to any
01030 allow ip from any to 10.0.6.185
01031 allow ip from 10.0.6.188 to any
01031 allow ip from any to 10.0.6.188
01032 allow ip from 10.0.6.81 to any
01032 allow ip from any to 10.0.6.81
03000 deny tcp from any to any dst-port 3306
10000 allow ip from any to me
10000 allow ip from me to any
10003 fwd 10.0.6.7,21 tcp from any to 213.59.153.42 dst-port 21
10004 fwd 10.0.6.7,20 tcp from any to 213.59.153.42 dst-port 20
10005 allow tcp from any to 213.59.153.42 dst-port 21 in via xl1
65535 deny ip from any to any
зашибись. и кто узнает как все у тебя должно работать?
вообще до правила форварда у тебя не дойдет проверка
посмотри ipfw show счетчики на нулях?
В том и дело, что они на нулях :(
еще раз читай по губам.
у тебя до правила форварда не доходит проверка. почему? подумай