forum.lissyara.su

Код: Выделить всё

http://www.opennet.ru/man.shtml?category=8&russian=0

Код: Выделить всё

DESCRIPTION
     The ipfw utility is the user interface for controlling the ipfw(4) fire-
     wall and the dummynet(4) traffic shaper in FreeBSD.

     An ipfw configuration, or ruleset, is made of a list of rules numbered
     from 1 to 65535.  Packets are passed to ipfw from a number of different
     places in the protocol stack (depending on the source and destination of
     the packet, it is possible that ipfw is invoked multiple times on the
     same packet).  The packet passed to the firewall is compared against each
     of the rules in the firewall ruleset.  When a match is found, the action
     corresponding to the matching rule is performed.

     Depending on the action and certain system settings, packets can be rein-
     jected into the firewall at some rule after the matching one for further
     processing.

     An ipfw ruleset always includes a default rule (numbered 65535) which
     cannot be modified or deleted, and matches all packets.  The action asso-
     ciated with the default rule can be either deny or allow depending on how
     the kernel is configured.

     If the ruleset includes one or more rules with the keep-state or limit
     option, then ipfw assumes a stateful behaviour, i.e., upon a match it
     will create dynamic rules matching the exact parameters (addresses and
     ports) of the matching packet.

     These dynamic rules, which have a limited lifetime, are checked at the
     first occurrence of a check-state, keep-state or limit rule, and are typ-
     ically used to open the firewall on-demand to legitimate traffic only.
     See the STATEFUL FIREWALL and EXAMPLES Sections below for more informa-
     tion on the stateful behaviour of ipfw.

     All rules (including dynamic ones) have a few associated counters: a
     packet count, a byte count, a log count and a timestamp indicating the
     time of the last match.  Counters can be displayed or reset with ipfw
     commands.

     Rules can be added with the add command; deleted individually or in
     groups with the delete command, and globally (except those in set 31)
     with the flush command; displayed, optionally with the content of the
     counters, using the show and list commands.  Finally, counters can be
     reset with the zero and resetlog commands.

Код: Выделить всё

добзащ 1 доб пропуск от всех для всех через сетьайпи 1.1.1.1

Код: Выделить всё

00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
Line 4: bad command `ipfw="/sbin/ipfw"'
Firewall rules loaded.
net.inet.ip.fw.enable: 1 -> 1

Код: Выделить всё

`ipfw="/sbin/ipfw"'

Код: Выделить всё

ipfw="/sbin/ipfw"

Код: Выделить всё

firewall_type="/etc/myconf.firewall"

Код: Выделить всё

firewall_script="/etc/myconf.firewall"

Код: Выделить всё

firewall_type="open"