Перелопатил кучу инфы в инете, все перепробывал - ниче не неработает( Пиров видет, но дальше никаких движений...
Вот конфиг фаервола...Все правила которые пробывал пока закоментил...
peer="192.168.0.243" ето айпи который выдает мне мдп, указан принудительно... Я незню, возможно тут должен быть локальный айпи??? Вообщем вопрос такой: что нада добавить\удалить из етого конфига, чтобы заработал торрент??? Порт в уторренте указал свой а именно 8001 Заранне благодарен за любую помощь...
Код: Выделить всё
#!/bin/sh
cmd="ipfw -q add"
skip="skipto 500"
pif=rl0
lan=vr0
ks="keep-state"
peer="192.168.0.243"
good_tcpo="22,23,25,80,443,110,2802,5190,953,32370,30606,2099,5222,5223,8100,8393,8000,11211"
ipfw -f flush
$cmd 002 allow all from any to any via vr0 # exclude LAN traffic
$cmd 003 allow all from any to any via lo0 # exclude loopback traffic
$cmd 004 allow all from any to any via ng0
$cmd 005 allow all from any to any via ng1
$cmd 006 allow all from any to any via ng2
$cmd 007 allow all from any to any via ng3
$cmd 008 allow all from any to any via ng4
$cmd 020 allow udp from any to any 53 out $ks
$cmd 100 divert natd ip from any to any in via $pif
$cmd 101 check-state
$cmd 110 fwd 192.168.0.1,3128 tcp from 192.168.0.0/24 to any 80
$cmd 125 $skip tcp from any to any $good_tcpo out via $pif setup $ks
$cmd 126 $skip udp from any to any 5000-5200 out via $pif setup $ks
$cmd 130 $skip icmp from any to any out via $pif $ks
$cmd 135 $skip udp from any to any 123 out via $pif $ks
$cmd 301 deny all from 172.16.0.0/12 to any in via $pif #RFC 1918 private IP
$cmd 302 deny all from 10.0.0.0/8 to any in via $pif #RFC 1918 private IP
$cmd 303 deny all from 127.0.0.0/8 to any in via $pif #loopback
$cmd 304 deny all from 0.0.0.0/8 to any in via $pif #loopback
$cmd 305 deny all from 169.254.0.0/16 to any in via $pif #DHCP auto-config
#$cmd 306 deny all from 192.0.2.0/24 to any in via $pif #reserved for docs
$cmd 307 deny all from 204.152.64.0/23 to any in via $pif #Sun cluster
$cmd 308 deny all from 224.0.0.0/3 to any in via $pif #Class D & E multicast
$cmd 309 deny all from 205.209.161.182 to any in via $pif
$cmd 310 deny all from 205.209.161.53 to any in via $pif
$cmd 311 deny all from 205.209.161.101 to any in via $pif
$cmd 312 deny all from 205.209.161.186 to any in via $pif
$cmd 313 deny all from 205.209.161.180 to any in via $pif
$cmd 314 deny all from 205.209.161.28 to any in via $pif
$cmd 315 deny all from 205.209.161.174 to any in via $pif
$cmd 316 deny all from 205.209.161.179 to any in via $pif
$cmd 318 deny all from 205.209.161.50 to any in via $pif
$cmd 319 deny all from 205.209.161.139 to any in via $pif
$cmd 320 deny all from 205.209.161.74 to any in via $pif
$cmd 321 deny all from 205.209.161.236 to any in via $pif
$cmd 322 deny all from 205.209.161.194 to any in via $pif
$cmd 323 deny all from 205.209.161.181 to any in via $pif
$cmd 324 deny all from 205.209.161.187 to any in via $pif
$cmd 326 deny all from 205.209.161.102 to any in via $pif
$cmd 327 deny all from 205.209.161.219 to any in via $pif
$cmd 328 deny all from 205.209.161.139 to any in via $pif
$cmd 329 deny all from 205.209.161.170 to any in via $pif
$cmd 330 deny all from 205.209.161.236 to any in via $pif
$cmd 331 deny all from 205.209.161.170 to any in via $pif
$cmd 332 deny all from 205.209.161.186 to any in via $pif
$cmd 333 deny all from 205.209.161.179 to any in via $pif
$cmd 334 deny all from 205.209.161.61 to any in via $pif
$cmd 335 deny all from 205.209.161.194 to any in via $pif
$cmd 399 allow all from 192.168.0.0/16 to any via $pif setup $ks
$cmd 400 allow tcp from 192.168.15.32 to me 22 in via $pif setup $ks
$cmd 400 allow tcp from 192.168.249.11 to me 22 in via $pif setup $ks
$cmd 401 allow tcp from 192.168.0.243 to me 22 in via $pif setup $ks
$cmd 403 allow tcp from 94.27.75.100 to any via $pif setup $ks
#========= don't delete ==========================================
$cmd 404 allow tcp from 91.90.19.26 to me 22 in via $pif setup $ks
$cmd 405 allow tcp from 213.130.3.19 to me 1723 via $pif setup $ks
#=================================================================
$cmd 405 allow tcp from 192.168.15.32 to me 1723 via $pif setup $ks
$cmd 405 allow tcp from 192.168.249.11 to me 1723 via $pif setup $ks
$cmd 406 allow tcp from 192.168.249.11 to me 8006 via $pif setup $ks
$cmd 407 allow tcp from 192.168.14.5 to me 1723 via $pif setup $ks
$cmd 410 allow icmp from 192.168.249.11 to me via $pif
# proxy
$cmd 417 allow tcp from 192.168.249.11 to me 3128 in via $pif setup $ks
$cmd 418 allow tcp from 192.168.14.5 to me 3128 in via $pif setup $ks
#FTP
$cmd 420 allow tcp from 192.168.249.11 to me 21 in via $pif setup $ks
$cmd 421 allow tcp from 192.168.0.243 to me 21 in via $pif setup $ks
$cmd 421 allow tcp from any to me 21 in via $pif setup $ks
[b]#Torrents
#$cmd 12341 pass all from ${peer} to any in via ${lan}
#$cmd 12342 divert natd all from ${peer} to any out via ${pif}
#$cmd 12343 divert natd all from any to any in via ${pif}
#$cmd 12344 pass all from me to any out via ${pif}
#$cmd 12345 pass all from any to ${peer} out via ${lan}
#$cmd 12346 pass all from any to ${peer} in via ${pif}[/b]
#$cmd 428 allow tcp from any to me 80 in via $pif setup limit src-addr 1
$cmd 429 allow gre from any to any keep-state
$cmd 430 deny log ip from any to any
$cmd 430 deny ip from any to any 80
$cmd 43100 allow ip from any to any 53
$cmd 440 allow all from any to any 11211
$cmd 500 divert natd ip from any to any out via $pif
#$cmd 600 allow ip from any to any
