forum.lissyara.su

Код: Выделить всё

#icmp
pass in on $ifVtk reply-to ($ifVtk $gwVtk) inet proto icmp from any to $ifVtk keep state
pass in on $ifFl reply-to ($ifFl $gwFl) inet proto icmp from any to $ifFl keep state

#openvpn
pass in quick on $ifVtk reply-to ($ifVtk $gwVtk) inet proto udp from any to $ifVtk port 1194 keep state
pass in quick on $ifFl reply-to ($ifFl $gwFl) inet proto udp from any to $ifFl port 1194 keep state

#nginx
pass in quick on $ifVtk reply-to ($ifVtk $gwVtk) inet proto tcp from any to $ifVtk port {80,8081,8011,443} keep state
pass in quick on $ifFl reply-to ($ifFl $gwFl) inet proto tcp from any to $ifFl port {80,8081,8011,443} keep state

Код: Выделить всё

Mon Mar 21 23:56:10 2011 TCP/UDP: Incoming packet rejected from <ip1>:1194[2], expected peer address: <ip2>:1194 (allow this incoming source address/port by removing --remote or adding --float)

Код: Выделить всё

local			127.0.0.1

Код: Выделить всё

rdr on $ext_if1 inet proto udp from any to $ext_if port 5000 -> 127.0.0.1 port 5000
rdr on $ext_if2 inet proto udp from any to $ext_if2 port 5000 -> 127.0.0.1 port 5000
pass in on $ext_if1 inet proto udp from any to 127.0.0.1 port 5000 keep state
pass in on $ext_if2 reply-to ($ext_if2 $gate2) inet proto udp from any to 127.0.0.1 port 5000 keep state