forum.lissyara.su

Код: Выделить всё

options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_FORWARD
options IPFIREWALL_NAT
options LIBALIAS
options IPSTEALTH

Код: Выделить всё

#!/bin/sh

ipfw -fq flush
ipfw -q add 1 allow all from any to any via lo0
ipfw -q add 4 allow ip from any to any via vr0
ipfw -q add 5 allow ip from any to any via gif0


ipfw nat 123 config ip 217.112.210.70 log
ipfw -q add 10 nat 123 ip from 192.168.3.0/24 to any out via rl0
ipfw -q add 20 nat 123 ip from any to xxx.xxx.xxx.xxx in via rl0

ipfw -q add 30 allow ip from any to 192.168.3.0/24 in via rl0

ipfw -q add check-state

ipfw -q add 500 allow tcp from any to any 22 via rl0 setup keep-state


ipfw -q add 900 allow icmp from any to any icmptypes 0,8

ipfw -q add 1000 allow tcp from any to any 80 out via rl0 setup keep-state
ipfw -q add 1010 allow tcp from any to any 443 out via rl0 setup keep-state
ipfw -q add 1020 allow tcp from any to any 110 out via rl0 setup keep-state
ipfw -q add 1030 allow tcp from any to any 25 out via rl0 setup keep-state
ipfw -q add 1040 allow tcp from any to any 143 out via rl0 setup keep-state
ipfw -q add 1050 allow tcp from any to any 5190 out via rl0 setup keep-state
ipfw -q add 1060 allow tcp from any to any 21,20,49152-65535 out via rl0 setup keep-state
ipfw -q add 1070 allow tcp from any to any 465,995 out via rl0 setup keep-state


ipfw -q add 1010 allow udp from any to any 53 out via rl0 keep-state

ipfw -q add 50000 deny log ip from any to any