Перейти до

Spl

Маглы
  • Всього повідомлень

    83
  • Приєднався

  • Останній візит

Сообщения додав Spl

  1. Блин, 3!!! раза переустановливал и так и не смог добиться создания/редактирования тарифов!  Фря чистейшая, Юбиллинг - муха не сидела!\

    Что я не так делаю???

    У меня такое происходит когда тарифы на русском языке обзываю
  2. У меня 4 влана, и я хочу пусть отдельный белый ip через нат на каждый влан. Подскажите как мне это зделать? Пока работает так:

    #!/bin/sh
     
    # firewall command
    FwCMD="/sbin/ipfw -q"
     
    ${FwCMD} -f flush
     
    # Networks define
    ${FwCMD} table 2 add 172.30.0.1/20
    ${FwCMD} table 9 add x.x.x.x
    #NAT
    ${FwCMD} nat 1 config log if em1 reset same_ports
    ${FwCMD} add 6000 nat 1 ip from table\(2\) to not table\(9\) via em1
    ${FwCMD} add 6001 nat 1 ip from any to x.x.x.x via em1
     
    #Shaper - table 4 download speed, table 3 - upload speed
    ${FwCMD} add 12001 pipe tablearg ip from any to table\(4\) via em0.11 out
    ${FwCMD} add 12000 pipe tablearg ip from table\(3\) to any via em0.11 in
    ${FwCMD} add 12001 pipe tablearg ip from any to table\(4\) via em0.12 out
    ${FwCMD} add 12000 pipe tablearg ip from table\(3\) to any via em0.12 in
    ${FwCMD} add 12001 pipe tablearg ip from any to table\(4\) via em0.13 out
    ${FwCMD} add 12000 pipe tablearg ip from table\(3\) to any via em0.13 in
    ${FwCMD} add 12001 pipe tablearg ip from any to table\(4\) via em0.14 out
    ${FwCMD} add 12000 pipe tablearg ip from table\(3\) to any via em0.14 in
    ${FwCMD} add 12001 pipe tablearg ip from any to table\(4\) via em0.15 out
    ${FwCMD} add 12000 pipe tablearg ip from table\(3\) to any via em0.15 in
     
     
    # default block policy
    ${FwCMD} add 65533 deny all from table\(2\) to any via em0.11
    ${FwCMD} add 65534 deny all from any to table\(2\) via em0.11
    ${FwCMD} add 65533 deny all from table\(2\) to any via em0.12
    ${FwCMD} add 65534 deny all from any to table\(2\) via em0.12
    ${FwCMD} add 65533 deny all from table\(2\) to any via em0.13
    ${FwCMD} add 65534 deny all from any to table\(2\) via em0.13
    ${FwCMD} add 65533 deny all from table\(2\) to any via em0.14
    ${FwCMD} add 65534 deny all from any to table\(2\) via em0.14
    ${FwCMD} add 65533 deny all from table\(2\) to any via em0.15
    ${FwCMD} add 65534 deny all from any to table\(2\) via em0.15
     
    ${FwCMD} add 65535 allow all from any to any
     
    #unknown users redirect
    ${FwCMD} add 5 fwd 127.0.0.1,80 ip from 172.32.0.0/16 to not me dst-port 80
     
    #Debtors forwarding
    ${FwCMD} add 4 allow ip from table\(2\) to 8.8.8.8 dst-port 53 via em0.11
    ${FwCMD} add 4 allow ip from 8.8.8.8 to table\(2\) src-port 53 via em0.11
    ${FwCMD} add 4 allow ip from table\(2\) to me dst-port 80 via em0.11
    ${FwCMD} add 4 allow ip from me to table\(2\) src-port 80 via em0.11
    ${FwCMD} add 4 allow ip from table\(2\) to 8.8.8.8 dst-port 53 via em0.12
    ${FwCMD} add 4 allow ip from 8.8.8.8 to table\(2\) src-port 53 via em0.12
    ${FwCMD} add 4 allow ip from table\(2\) to me dst-port 80 via em0.12
    ${FwCMD} add 4 allow ip from me to table\(2\) src-port 80 via em0.12
    ${FwCMD} add 4 allow ip from table\(2\) to 8.8.8.8 dst-port 53 via em0.13
    ${FwCMD} add 4 allow ip from 8.8.8.8 to table\(2\) src-port 53 via em0.13
    ${FwCMD} add 4 allow ip from table\(2\) to me dst-port 80 via em0.13
    ${FwCMD} add 4 allow ip from me to table\(2\) src-port 80 via em0.13
    ${FwCMD} add 4 allow ip from table\(2\) to 8.8.8.8 dst-port 53 via em0.14
    ${FwCMD} add 4 allow ip from 8.8.8.8 to table\(2\) src-port 53 via em0.14
    ${FwCMD} add 4 allow ip from table\(2\) to me dst-port 80 via em0.14
    ${FwCMD} add 4 allow ip from me to table\(2\) src-port 80 via em0.14
    ${FwCMD} add 4 allow ip from table\(2\) to 8.8.8.8 dst-port 53 via em0.15
    ${FwCMD} add 4 allow ip from 8.8.8.8 to table\(2\) src-port 53 via em0.15
    ${FwCMD} add 4 allow ip from table\(2\) to me dst-port 80 via em0.15
    ${FwCMD} add 4 allow ip from me to table\(2\) src-port 80 via em0.15
    ${FwCMD} add 6 fwd 127.0.0.1,80 ip from table\(47\) to not me dst-port 80
    ${FwCMD} delete 65534
×
×
  • Створити нове...