forum.lissyara.su

Код: Выделить всё

#!/bin/sh

FwCMD="/sbin/ipfw "
WanIF="re0"
LanIF="vr0"
WAN="77.xx.xx.xx"
Lan="192.168.0.0/24"


${FwCMD} -f flush

${FwCMD} add 100 allow all from any to any via lo0
${FwCMD} add 200 allow all from any to any via ${LanIF}
${FwCMD} add 300 deny  all from any to 127.0.0.0/8
${FwCMD} add 400 deny   ip from 127.0.0.0/8 to any
${FwCMD} add 500 fwd  127.0.0.1:8080 tcp from ${Lan} to not   192.168.0.0/24 80 via ${WanIF}

${FwCMD} nat 123 config ip ${WAN} same_ports log
${FwCMD} add 800 nat 123 all from ${Lan} to any
${FwCMD} add 801 nat 123 all from any to ${WAN}

${FwCMD} add 900 allow  tcp from any to any established
${FwCMD} add 1000 allow  ip from ${WAN} to any out xmit ${WanIF}
${FwCMD} add 1100 allow  udp from any 53 to any via ${WanIF}
${FwCMD} add 1600 allow  udp from any to any 123 via ${WanIF}
${FwCMD} add 1700 allow icmp from any to any icmptypes 0,3,8,11 via ${WanIF}

${FwCMD} add 2000 allow tcp from 95.xx.xx.xx/32 to me 22 via ${WanIF}
${FwCMD} add 2001 allow tcp from xx.xx.x.130/32 to me 22 via ${WanIF}

${FwCMD} add 5000 deny ip from any to any

Код: Выделить всё

ipfw add 450 skipto 800 tcp from 192.168.0.0/24 to <host> 80