Подниму тему. Точно такая же проблема. Шлюз на FreeBSD 8.0, две сетевухи - одна смотрит в инет, вторая в локалку. Через mdp5 поднят VPN до провайдера, шлюз инет видит. Локалка - нет. Из локалки также доступны только внешняя сеть - днс и внешний шлюз.В ядре -
#NETGRAPH
options NETGRAPH
options NETGRAPH_SOCKET
options NETGRAPH_ETHER
options NETGRAPH_PPP
options NETGRAPH_PPPOE
options NETGRAPH_MPPC_ENCRYPTION
options NETGRAPH_IFACE
options NETGRAPH_NETFLOW
options NETGRAPH_PPTPGRE
options NETGRAPH_TEE
options NETGRAPH_ONE2MANY
options NETGRAPH_NAT
options LIBALIAS
options NETGRAPH_IPFW
# FIREWALL
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=10
options IPDIVERT
options DUMMYNET
options IPFIREWALL_FORWARD
options IPFIREWALL_NAT
options IPSTEALTH
options LIBALIAS
В rc.conf -
gateway_enable="YES"
natd_enable="YES"
natd_interface="vr0"
static_routes="network vpn"
router="/sbin/routed"
router_enable="YES"
router_flags="-q"
route_network="-net 10.110.0.0/0 10.110.230.1"
route_vpn="-net 87.255.0.0/0 10.110.230.1"
ipfw -a list -
00050 250043 38006593 divert 8668 ip4 from any to any via vr0
00100 12 600 allow ip from any to any via lo0
00200 0 0 deny ip from any to 127.0.0.0/8
00300 0 0 deny ip from 127.0.0.0/8 to any
65000 286205 55628863 allow ip from any to any
65535 4 260 deny ip from any to any
ifconfig -
ale0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=319a<TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,WOL_MCAST,WOL_MAGIC>
ether 48:5b:39:cb:af:f8
inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255
media: Ethernet autoselect (10baseT/UTP <full-duplex>)
status: active
vr0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=2808<VLAN_MTU,WOL_UCAST,WOL_MAGIC>
ether 00:21:91:1f:af:55
inet 10.110.230.96 netmask 0xffffff00 broadcast 10.110.230.255
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=3<RXCSUM,TXCSUM>
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff000000
ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1460
inet 87.20.23.104 --> 172.16.1.1 netmask 0xffffffff
ЧТО ЗА ХРЕНЬ ТАКАЯ???
Вариант для распечатки
