forum.lissyara.su

Код: Выделить всё

${FwCMD} -f flush               # reset rules                                                           #
${FwCMD} -f pipe flush
${FwCMD} -f queue flush

${FwCMD} add 100 allow ip from any to any via lo0

${FwCMD} add 1040 allow ip from any to any via ${LanOut}

${FwCMD} pipe 1 config bw 512Kbit/s queue 24 gred 0.002/6/12/0.1
${FwCMD} queue 1 config pipe 1 queue 24 mask src-ip 0xffffffff # gred 0.002/6/12/0.1

${FwCMD} pipe 2 config bw 512Kbit/s queue 24  gred 0.002/6/12/0.1
${FwCMD} queue 2 config pipe 2 queue 24 mask dst-ip 0xffffffff # gred 0.002/6/12/0.1

${FwCMD} nat 1 config log if ${LanIn}  reset same_ports deny_in redirect_port tcp 192.168.1.100:22 22 

${FwCMD} add 10150 queue 1 ip from not 192.168.1.0/24 to any out xmit ${LanIn}
${FwCMD} add 10160 nat 1 ip from any to any via ${LanIn}
${FwCMD} add 10170 queue 2 ip from not 192.168.1.0/24 to any in recv ${LanIn}

${FwCMD} add 10180 allow all from any to any

Код: Выделить всё

#!/bin/sh

FwCMD="/sbin/ipfw"

#In network addres
InIp="192.168.1.1"
#In lan
LanIn="re0"
#Out network
LanOut="vr0"
#Inside network
InNet="192.168.1.0"
#Network mask
NetMSK="24"

#########################################################################################################
#                                                                                                       
#                                                                                                      
#                                       EXAMPLE TWO                                                     
#                               net.inet.ip.fw.one_pass=0                                               
#                               Everyone dedicated channel                                             
#########################################################################################################
${FwCMD} -f flush               # reset rules                                                           #
${FwCMD} -f pipe flush
${FwCMD} -f queue flush

${FwCMD} add 100 allow ip from any to any via lo0

${FwCMD} add 1040 allow ip from any to any via ${LanOut}

#${FwCMD} pipe 1 config bw 512Kbit/s queue 48 gred 0.002/8/24/0.1
#${FwCMD} queue 1 config pipe 1 queue 48 mask src-ip 0xffffffff gred 0.002/8/24/0.1

Код: Выделить всё

${FwCMD} pipe 2 config bw 512Kbit/s queue 48 mask dst-ip 0xffffffff gred 0.002/8/24/0.1 #
#${FwCMD} queue 2 config pipe 2 queue 48 mask dst-ip 0xffffffff gred 0.002/8/24/0.1

${FwCMD} nat 1 config log if ${LanIn}  reset same_ports deny_in redirect_port tcp 192.168.1.100:22 22 # redirect_port tcp 192.168.1.100:80 80

#${FwCMD} add 10150 queue 1 ip from any to any out xmit ${LanIn}
${FwCMD} add 10160 nat 1 ip from any to any via ${LanIn}
${FwCMD} add 10170 pipe 2 ip from any to any in recv ${LanIn}

${FwCMD} add 10180 allow all from any to any