Stargazer + Ipfw + Squid. Возможно или нет?

[M_I_V 0]

FreeBSD + stargazer + ipfw + squid. Подскажите возможно ли настроить такую связку?

[Cell 7]

FreeBSD + stargazer + ipfw + squid. Подскажите возможно ли настроить такую связку?

почему бы и нет? ))) возможно...

[M_I_V 0]

ipfw:

#!/bin/sh

fwcmd="/sbin/ipfw -q"

natdcmd="/sbin/natd"

int_if="sk0"

ext_if="vr0"

 

${fwcmd} -f flush

 

${natdcmd} -s -m -u -a 192.168.1.3

#${natdcmd} -s -m -u -a 127.0.0.1

 

${fwcmd} add 10 allow icmp from any to any

 

#${fwcmd} add 11 allow ip from any to any in via lo0

#${fwcmd} add 12 fwd 127.0.01,3128 tcp from 192.168.0.0/24 to any

 

#${fwcmd} add 13 allow tcp from any to any

#${fwcmd} add 14 allow udp from any to any

 

${fwcmd} add 15 pass udp from 192.168.0.0/24 to 192.168.0.0/24 53

${fwcmd} add 16 pass udp from 192.168.0.0/24 53 to 192.168.0.0/24

 

${fwcmd} add 17 pass tcp from any to any 23

${fwcmd} add 18 pass tcp from any 23 to any

 

${fwcmd} add 19 pass tcp from 192.168.0.0/24 to 192.168.0.0/24 445

${fwcmd} add 20 pass tcp from 192.168.0.0/24 445 to 192.168.0.0/24

 

#${fwcmd} add 304 deny ip from any to 192.168.0.0/16 out via ${ext_if}

#${fwcmd} add 305 deny ip from any to 10.0.0.0/16 out via ${ext_if}

#${fwcmd} add 306 deny ip from any to 172.16.0.0/16 out via ${ext_if}

 

${fwcmd} add 207 allow udp from any to 192.168.0.1 5555, 8888 via ${int_if}

${fwcmd} add 208 allow udp from 192.168.0.1 to any via ${int_if}

 

${fwcmd} add 220 pass tcp from any to any 139 via ${int_if}

${fwcmd} add 221 pass tcp from any 139 to any via ${int_if}

${fwcmd} add 222 pass udp from any to any 138 via ${int_if}

${fwcmd} add 223 pass udp from any 138 to any via ${int_if}

${fwcmd} add 224 pass udp from any to any 137 via ${int_if}

${fwcmd} add 225 pass udp from any 137 to any via ${int_if}

 

${fwcmd} add 308 allow ip from 192.168.0.0/24 1000-10000 to 192.168.0.1 via ${int_if}

 

${fwcmd} add 310 allow tcp from 192.168.0.0/24 to 192.168.0.1 22 via ${int_if}

${fwcmd} add 312 allow tcp from 192.168.0.1 to any via ${int_if}

 

${fwcmd} add 320 deny log ip from 192.168.1.0/24 to 192.168.1.3 via ${int_if}

${fwcmd} add 321 deny log ip from 192.168.0.0/24 to 192.168.0.1 via ${int_if}

 

${fwcmd} add 50024 divert natd all from any to any via ${ext_if}

 

${fwcmd} add 50029 allow tcp from any to any out via ${ext_if} setup

${fwcmd} add 50030 allow tcp from any to any via ${ext_if} established

 

${fwcmd} add 50031 allow udp from any to any out via ${ext_if}

${fwcmd} add 50032 allow udp from any 53 to any in via ${ext_if}

 

${fwcmd} add 50063 allow tcp from any 192.168.1.3 22 via ${ext_if}

 

${fwcmd} add 65534 deny log ip from any to any

 

 

OnConnect:

#!/bin/sh

fwcmd="/sbin/ipfw -q"

int_if="sk0"

 

#${fwcmd} -f flush

 

# Login

LOGIN=$1

 

#user IP

IP=$2

 

#cash

CASH=$3

 

#user ID

ID=$4

 

${fwcmd} delete `expr ${ID} '*' 10 + 29000`

${fwcmd} delete `expr ${ID} '*' 10 + 29002`

${fwcmd} delete `expr ${ID} '*' 10 + 29003`

 

${fwcmd} add `expr ${ID} '*' 10 + 29000` allow icmp from ${IP} to any out via ${int_if} icmptype 0,3,4,11,12

${fwcmd} add `expr ${ID} '*' 10 + 29002` allow ip from ${IP} to any

${fwcmd} add `expr ${ID} '*' 10 + 29003` allow ip from any to ${IP}

 

echo "C `date +%Y.%m.%d-%H.%M.%S` ${IP} ${CASH}" >> /var/stargazer/users/${LOGIN}/connect.log

 

OnDisconnect:

#!/bin/sh

 

fwcmd="/sbin/ipfw -q"

 

# Login

LOGIN=$1

 

#user IP

IP=$2

 

#cash

CASH=$3

 

#user ID

ID=$4

 

${fwcmd} delete `expr ${ID} '*' 10 + 29000`

${fwcmd} delete `expr ${ID} '*' 10 + 29002`

${fwcmd} delete `expr ${ID} '*' 10 + 29003`

 

echo "D `date +%Y.%m.%d-%H.%M.%S` ${IP} ${CASH}" >> /var/stargazer/users/${LOGIN}/connect.log

 

 

Когда в ipfw раскоментируеш 13 и 14 строку всё работает. Соответственно и без Stargazera

Подскажите что нибудь чтоб заработало.

Заранее спасибо.