значит на тачке
mail (192.168.10.
![Cool 8)](./../images/smilies/dirol.gif)
. с которой я запускаю
фаера нету.. а на самом сервере точного времени (192.168.10.7) вот конфиг фаера:
Код: Выделить всё
[f0s@router] /home/f0s/> ipfw show
00100 0 0 allow ip from any to any via gif0
00200 0 0 allow udp from 85.214.185.152 to me dst-port 500
00300 0 0 allow esp from me to 85.214.185.152
00400 0 0 allow esp from 85.214.185.152 to me
00500 0 0 deny icmp from any to any in icmptypes 5,9,13,14,15,16,17
00600 97 5208 deny ip from any to 84.54.64.18 dst-port 137-139,445 in via xl0
00700 0 0 deny ip from any to 84.54.64.18 dst-port 137-139,445 in via nve0
00800 25526 41931100 allow ip from any to any via lo0
00900 0 0 deny ip from any to 127.0.0.0/8
01000 0 0 deny ip from 127.0.0.0/8 to any
01100 0 0 deny ip from 192.168.10.0/24 to any in via xl0
01200 0 0 deny ip from 255.255.255.240/28 to any in via nve0
01300 30586 2385515 deny ip from any to 0.0.0.0/8,10.0.0.0/8,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,192.0.2.0/24,192.168.0.0/16,204.152.64.0/23,224.0.0.0/3 in via xl0
01400 0 0 deny icmp from any to any frag
01500 0 0 deny icmp from any to 255.255.255.255 in via xl0
01600 0 0 deny icmp from any to 255.255.255.255 out via xl0
01700 16 792 deny ip from not 195.177.122.1,195.177.123.1 to 84.52.64.20 dst-port 25 in via xl0
01800 59 2816 deny ip from not 85.214.185.132,85.149.244.126,85.179.117.29 to 84.54.64.18 dst-port 1000-1008 in via xl0
01900 1681063 419713752 divert 8668 ip from 192.168.10.0/24 to any out via xl0
02000 2287181 768716310 divert 8668 ip from any to 84.54.64.18 in via xl0
02100 84504 80972118 allow tcp from any to 192.168.10.100 dst-port 25 in via xl0
02200 84503 80972066 allow tcp from any to 192.168.10.100 dst-port 25 out via nve0
02300 64331 4440450 allow tcp from 192.168.10.100 25 to any in via nve0
02400 0 0 allow tcp from any to 192.168.10.100 dst-port 3389 in via xl0
02500 0 0 allow tcp from any to 192.168.10.100 dst-port 3389 out via nve0
02600 22197 1726410 allow tcp from any to 192.168.10.1 dst-port 3389 in via xl0
02700 22197 1726410 allow tcp from any to 192.168.10.1 dst-port 3389 out via nve0
02800 513071 36073879 allow tcp from any to 192.168.10.2 dst-port 3389 in via xl0
02900 513071 36073879 allow tcp from any to 192.168.10.2 dst-port 3389 out via nve0
03000 0 0 allow tcp from any to 192.168.10.3 dst-port 3389 in via xl0
03100 0 0 allow tcp from any to 192.168.10.3 dst-port 3389 out via nve0
03200 0 0 allow tcp from any to 192.168.10.5 dst-port 22 in via xl0
03300 0 0 allow tcp from any to 192.168.10.5 dst-port 22 out via nve0
03400 0 0 allow tcp from any to 192.168.10.6 dst-port 22 in via xl0
03500 0 0 allow tcp from any to 192.168.10.6 dst-port 22 out via nve0
03600 0 0 allow tcp from any to 192.168.10.7 dst-port 22 in via xl0
03700 0 0 allow tcp from any to 192.168.10.7 dst-port 22 out via nve0
03800 0 0 allow tcp from any to 192.168.10.8 dst-port 22 in via xl0
03900 0 0 allow tcp from any to 192.168.10.8 dst-port 22 out via nve0
04000 0 0 deny ip from 0.0.0.0/8,10.0.0.0/8,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,192.0.2.0/24,192.168.0.0/16,204.152.64.0/23,224.0.0.0/3 to any out via xl0
04100 468 29104 allow icmp from any to any icmptypes 0,8,11
04200 0 0 allow tcp from 192.168.10.37 to 212.119.184.142 dst-port 110 in via nve0 setup
04300 0 0 allow tcp from 192.168.10.37 to 212.119.184.142 dst-port 25 in via nve0 setup
04400 0 0 allow tcp from 192.168.10.37 to 80.247.177.46 dst-port 110 in via nve0 setup
04500 0 0 allow tcp from 192.168.10.37 to 80.247.177.46 dst-port 25 in via nve0 setup
04600 0 0 allow tcp from any to 89.163.15.55 dst-port 5026 in via nve0 setup
04700 0 0 allow tcp from 192.168.10.1 to any dst-port 3389 in via nve0 setup
04800 0 0 allow tcp from 192.168.10.1 to any dst-port 3437 in via nve0 setup
04900 5696 273408 allow ip from 192.168.10.100 to any in via nve0 setup
05000 169 10432 allow ip from 192.168.10.0/24{4-8} to any in via nve0 setup
05100 56070 3527200 allow ip from 84.52.64.20 to any out via xl0 setup
05200 1148195 383808634 allow tcp from 192.168.10.0/24,192.168.20.0/24,192.168.0.0/24 to 192.168.10.0/24,192.168.20.0/24,192.168.0.0/24 in via nve0
05300 1281007 858761091 allow tcp from 192.168.10.0/24,192.168.20.0/24,192.168.0.0/24 to 192.168.10.0/24,192.168.20.0/24,192.168.0.0/24 out via nve0
05400 5058033 2617432563 allow tcp from any to any established
05500 2288 173888 allow udp from me to any dst-port 123 via xl0
05600 2213 168188 allow udp from any 123 to me via xl0
05700 79564 3785104 reject tcp from 192.168.10.0/24 to any via nve0
05800 20599 1599324 allow udp from 84.52.64.20 53 to 195.177.122.1 dst-port 53 out via xl0
05900 20599 1599324 allow udp from 192.168.10.8 53 to 195.177.122.1 dst-port 53 in via nve0
06000 20517 2061414 allow udp from 195.177.122.1 53 to 192.168.10.8 dst-port 53 in via xl0
06100 20517 2061414 allow udp from 195.177.122.1 53 to 192.168.10.8 dst-port 53 out via nve0
06200 27569 2141938 allow udp from 84.52.64.20 53 to 195.177.123.1 dst-port 53 out via xl0
06300 27569 2141938 allow udp from 192.168.10.8 53 to 195.177.123.1 dst-port 53 in via nve0
06400 27401 2916190 allow udp from 195.177.123.1 53 to 192.168.10.8 dst-port 53 in via xl0
06500 27401 2916190 allow udp from 195.177.123.1 53 to 192.168.10.8 dst-port 53 out via nve0
06600 39855 6112031 allow udp from 192.168.10.0/24,192.168.20.0/24,192.168.0.0/24 to 192.168.10.0/24,192.168.20.0/24,192.168.0.0/24 in via nve0
06700 10467 709249 allow udp from 192.168.10.0/24,192.168.20.0/24,192.168.0.0/24 to 192.168.10.0/24,192.168.20.0/24,192.168.0.0/24 out via nve0
06800 363906 55601915 deny ip from any to any
65535 12 869 deny ip from any to any
[f0s@router] /home/f0s/>
named, named, what is my TTL value?..
[FidoNet 2:550/2 && 2:5030/4441]