forum.lissyara.su

Код: Выделить всё

server# cat /etc/pf.conf
int_if="vr0"
ext_if="ng0"
localnet="10.10.20.0/24"
set skip on lo0
set skip on $int_if
scrub in all
nat on $ext_if from $localnet to any -> ($ext_if)
antispoof quick for $ext_if
pass out on $ext_if proto tcp to any keep state
pass out on $ext_if proto udp to any keep state
pass inet proto icmp all

Код: Выделить всё

   acl "IN_NET" {
             127.0.0.1;
			 10.10.20.0/24;
   };
   options {
          hostname "ns.sata.pp.ua";
          directory "/etc/namedb";
          pid-file "/var/run/named/pid";
          dump-file "/var/dump/named_dump.db";
          statistics-file "/var/stats/named.stats";
          listen-on {
             127.0.0.1;
             10.10.20.1;
             };
          interface-interval 10;
          recursion yes;
          allow-recursion { "IN_NET"; };
          forward first;
          forwarders {
		  195.114.6.6;
            8.8.8.8;
             };
          allow-query { any; };
          version "SuperPuper DNS";
   };
   logging {
          channel syslog {
          syslog daemon;
          severity info;
          print-category yes;
          print-severity yes;
       };
   category xfer-in { syslog; };
   category xfer-out { syslog; };
   category config { syslog; };
   category default { null; };
   };
zone "." {
          type hint;
          file "named.root";
   };
zone "localhost" {
          type master;
          allow-query { 127.0.0.1; };
          file "master/localhost";
   };
zone "0.0.127.IN-ADDR.ARPA" {
          type master;
          allow-query { 127.0.0.1; };
          file "reverse/localhost.rev";
   };

zone "sata.pp.ua" {
          type master;
          file "master/sata.pp.ua";
          allow-query { any; };
   };

Код: Выделить всё

$TTL 3600
sata.pp.ua.      IN      SOA     ns.sata.pp.ua. admin.sata.pp.ua. (
             2010111601 ; Serial
             28800      ; Refresh
             7200       ; Retry
             2419200    ; Expire
             86400)     ; Negative Cache TTL
;
             IN      NS      ns.sata.pp.ua.
             IN      MX      10 mail.sata.pp.ua.
             IN      A       195.114.7.67

localhost    IN      A       127.0.0.1
ns           IN      A      195.114.7.67
mail         IN      A      195.114.7.67
www          IN      CNAME   sata.pp.ua.

Код: Выделить всё

server# cat /etc/pf.conf
int_if="vr0"
ext_if="ng0"
dns_ports="{53, 953}"
localnet="10.10.20.0/24"
set skip on lo0
set skip on $int_if
scrub in all
nat on $ext_if from $localnet to any -> ($ext_if)
antispoof quick for $ext_if
pass out on $ext_if proto tcp to any keep state
pass out on $ext_if proto udp to any keep state
####################################################################
pass in on $ext_if proto tcp from any to 195.114.7.67 port $dns_ports keep state
pass in on $ext_if proto udp from any to 195.114.7.67 port $dns_ports keep state
####################################################################
pass inet proto icmp all

Код: Выделить всё

pass in log on $ext_if inet proto tcp from any to any port $dns_ports keep state
pass in log on $ext_if inet proto udp from any to any port $dns_ports keep state