UZIK 0 Posted 2010-05-20 16:30:39 Share Posted 2010-05-20 16:30:39 что непробую неполучаеться пробросить порты 22 для доступа по ssh закрыт открыт только 80 тый порт((( пробрасую порты через пф не пробрасуються.. чертовшина какаято.... вот конфиг фаервола f='/sbin/ipfw' ifOut='xl0' ${f} -f flush ${f} add 50 allow tcp from any to me 22 ${f} add 51 allow tcp from me 22 to any ${f} add 110 allow ip from any to any via lo0 ${f} add 120 skipto 1000 ip from me to any ${f} add 130 deny icmp from any to any in icmptype 5,9,13,14,15,16,17 ${f} add 160 skipto 2000 ip from any to me ${f} add 200 skipto 500 ip from any to any via ${ifOut} ${f} add 300 skipto 4500 ip from any to any in ${f} add 400 skipto 450 ip from any to any recv ${ifOut} ${f} add 420 divert 1 ip from any to any ${f} add 450 divert 2 ip from any to any ${f} add 490 allow ip from any to any ${f} add 500 skipto 32500 ip from any to any in ${f} add 510 divert 1 ip from any to any ${f} add 540 allow ip from any to any ${f} add 1000 allow udp from any 53,7723 to any ${f} add 1010 allow tcp from any to any setup keep-state ${f} add 1020 allow udp from any to any keep-state ${f} add 1100 allow ip from any to any ${f} add 2000 check-state ${f} add 2010 allow icmp from any to any ${f} add 2020 allow tcp from any to any 80,443,22 ${f} add 2050 deny ip from any to any via ${ifOut} ${f} add 2060 allow udp from any to any 53,7723 ${f} add 2100 deny ip from any to any ${f} add 32490 deny ip from any to any ipfw add allow all from any to me пф конф set limit states 128000 set optimization aggressive nat pass on xl0 from 10.0.0.0/8 to any -> xl0 nat pass on xl0 from 192.168.0.0/16 to any -> xl0 rdr on xl0 proto { tcp, udp } from any to 192.151.12.100 port 21 -> 10.0.0.13 Link to post Share on other sites
UZIK 0 Posted 2010-05-21 15:13:37 Author Share Posted 2010-05-21 15:13:37 стока советво блин так приятно.... Link to post Share on other sites
neofun 0 Posted 2010-05-21 17:22:16 Share Posted 2010-05-21 17:22:16 rdr on xl0 proto { tcp, udp } from any to 192.151.12.100 port 21 -> 10.0.0.13 Если не ошибаюсь SSH нужен 22 порт, а у вас в ПФ 21 проброшен Link to post Share on other sites
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now