OpenForum RSS: �� PF � FreeBSD

�� PF � FreeBSD (BulgakowI)

Fri, 05 Dec 2008 13:29:20 GMT

>>>freebsd# pfctl -sn
>>>nat on tun0 inet from 10.0.0.253 to any -> ��
>>>rdr pass on tun0 inet proto gre all -> 10.0.0.254
>>
>>�� nat ��ۣ� �� 10.0.0.253 ?
>>� �� 10.0.0.254 �� ?
>
>�� 10.0.0.254 �� 10.0.0.253 ��

from 10.0.0.253 to any
��
�� .253 ��
�� .254 ��

� �� DMZ - ��
http://www.openbsd.org/faq/pf/example1.html - ��

�� PF � FreeBSD (superles)

Fri, 05 Dec 2008 13:14:37 GMT

>>freebsd# pfctl -sn
>>nat on tun0 inet from 10.0.0.253 to any -> ��
>>rdr pass on tun0 inet proto gre all -> 10.0.0.254
>
>�� nat ��ۣ� �� 10.0.0.253 ?
>� �� 10.0.0.254 �� ?

�� 10.0.0.254 �� 10.0.0.253 ��

�� PF � FreeBSD (superles)

Fri, 05 Dec 2008 13:05:25 GMT

>[�� ]
>>pass quick on $int_if
>
>� �� :
>
>rdr on $ext_if inet proto tcp from any to ($ext_if) port 65525:65529 tag EXT_NET -> 192.168.12.2 port 65525:65529
>#
>#...
>#
>pass out on { ng0 ng1 ng2 ng3 ng4 ng5 } inet
>all keep state tagged EXT_NET

� ��

�� PF � FreeBSD (BulgakowI)

Fri, 05 Dec 2008 12:38:27 GMT

>freebsd# pfctl -sn
>nat on tun0 inet from 10.0.0.253 to any -> ��
>rdr pass on tun0 inet proto gre all -> 10.0.0.254

�� nat ��ۣ� �� 10.0.0.253 ?
� �� 10.0.0.254 �� ?

�� PF � FreeBSD (djaarf)

Fri, 05 Dec 2008 12:31:23 GMT

gre-�� , �� gre-�� pptp-�� pptp-��.
>[�� ]
>>pass quick on $int_if
>
>� �� :
>
>rdr on $ext_if inet proto tcp from any to ($ext_if) port 65525:65529 tag EXT_NET -> 192.168.12.2 port 65525:65529
>#
>#...
>#
>pass out on { ng0 ng1 ng2 ng3 ng4 ng5 } inet
>all keep state tagged EXT_NET

�� PF � FreeBSD (shutdown now)

Fri, 05 Dec 2008 12:24:09 GMT

>[�� ]
>1533, 8888, 1352, 1723, 25, 80, 4090 } keep state
>
>pass in on $ext_if inet proto tcp from any to $ext_if \
>
> port { 22, 113
>} flags S/SA keep state
>
>pass in inet proto icmp all icmp-type echoreq keep state
>
>pass quick on $int_if

� �� :

rdr on $ext_if inet proto tcp from any to ($ext_if) port 65525:65529 tag EXT_NET -> 192.168.12.2 port 65525:65529
#
#...
#
pass out on { ng0 ng1 ng2 ng3 ng4 ng5 } inet all keep state tagged EXT_NET

�� PF � FreeBSD (superles)

Fri, 05 Dec 2008 12:18:06 GMT

>[�� ]
>antispoof quick for { lo, $int_if } inet
>
>pass in on $ext_if inet proto tcp from any to $ext_if \
>
> port { 22, 113
>} flags S/SA keep state
>
>pass in inet proto icmp all icmp-type echoreq keep state
>
>pass quick on $int_if

�� :

#��
ext_if="tun0"
int_if="fxp0"
#��

set block-policy return
set loginterface $ext_if

set skip on lo

#��

scrub in

#NAT

nat on $ext_if from $int_if to any -> $ext_if

#��
rdr on $ext_if proto gre from any to $ext_if -> 10.0.0.254
rdr on $ext_if proto tcp from any to $ext_if port { 3389, 1494, 1533, 8888, 1352, 1723, 25, 80, 4090 } -> 10.0.0.254

#��
block in all

pass out keep state

antispoof quick for { lo, $int_if } inet

pass in on $ext_if inet proto tcp from any to $ext_if \
port { 3389, 1494, 1533, 8888, 1352, 1723, 25, 80, 4090 } keep state

pass in on $ext_if inet proto tcp from any to $ext_if \
port { 22

�� PF � FreeBSD (superles)

Fri, 05 Dec 2008 12:16:53 GMT

>�� 1723 �� gre ��, ��
>pf. �� (�� ) �� ipfw.

�� :

rdr on $ext_if proto gre from any to $ext_if -> 10.0.0.254

�� ((((( �� ....

�� PF � FreeBSD (��)

Fri, 05 Dec 2008 12:07:17 GMT

�� 1723 �� gre ��, �� pf. �� (�� ) �� ipfw.

OpenForum RSS: �������� � PF � FreeBSD

�������� � PF � FreeBSD (BulgakowI)

�������� � PF � FreeBSD (superles)

�������� � PF � FreeBSD (superles)

�������� � PF � FreeBSD (BulgakowI)

�������� � PF � FreeBSD (djaarf)

�������� � PF � FreeBSD (shutdown now)

�������� � PF � FreeBSD (superles)

�������� � PF � FreeBSD (superles)

�������� � PF � FreeBSD (�����)

OpenForum RSS: �� PF � FreeBSD

�� PF � FreeBSD (BulgakowI)

�� PF � FreeBSD (superles)

�� PF � FreeBSD (superles)

�� PF � FreeBSD (BulgakowI)

�� PF � FreeBSD (djaarf)

�� PF � FreeBSD (shutdown now)

�� PF � FreeBSD (superles)

�� PF � FreeBSD (superles)

�� PF � FreeBSD (��)