Не сбить нас с верного пути, нам по фигу куда идти
https://forum.lissyara.su/
илиdiff писал(а):Поиск по слову bridge.
Код: Выделить всё
re1 192.168.1.1
vr0 192.168.2.1
Купить книжку по TCP/IPbeerdy писал(а):Две сетевые с одинаковыми подсетками но друг друга невидят.
Куплю обязательноsnorlov писал(а):Купить книжку по TCP/IPbeerdy писал(а):Две сетевые с одинаковыми подсетками но друг друга невидят.
Код: Выделить всё
ipfw add 1 allow all from any to any recv re1 xmit vr0
ipfw add 2 allow all from any to any recv vr0 xmit re1
Код: Выделить всё
defaultrouter="192.168.0.1"
gateway_enable="YES"
hostname="freeserver"
ifconfig_re0="inet 192.168.0.100 netmask 255.255.255.0"
ifconfig_vr0="inet 192.168.1.1 netmask 255.255.255.0"
ifconfig_vr0_alias0="192.168.1.100 netmask 255.255.255.0"
ifconfig_re1="inet 192.168.2.3 netmask 255.255.255.0"
...
firewall_enable="YES"
firewall_script="/etc/ipfw.rules"
firewall_nat_enable="YES"
dummynet_enable="YES"
#natd_enable="YES"
...
ddclient_enable="YES"
...
samba_enable="YES"
...
openvpn_enable="YES"
openvpn_if="tun"
openvpn_configfile="/usr/local/etc/openvpn/server.conf"
openvpn_dir="/usr/local/etc/openvpn"
Код: Выделить всё
#!/bin/sh
FwCMD="/sbin/ipfw"
#In lan internet ADSL
LanIn="re0"
#Out network
LanOut="vr0"
LanIns="re1"
${FwCMD} -f flush
${FwCMD} -f pipe flush
${FwCMD} -f queue flush
#ipfw add 1 allow all from any to any recv re1 xmit vr0
#ipfw add 2 allow all from any to any recv vr0 xmit re1
${FwCMD} add 100 allow ip from any to any via lo0
${FwCMD} add 1040 allow ip from any to any via ${LanOut}
${FwCMD} add 1050 allow ip from any to any via ${LanIns}
${FwCMD} pipe 2 config bw 4096Kbit/s queue 300kbytes gred 0.02/50kbytes/150kbytes/0.5 mask dst-ip 0xffffffff
${FwCMD} queue 2 config pipe 2 queue 150kbytes gred 0.02/25kbytes/75kbytes/0.5 mask dst-ip 0xffffffff
${FwCMD} nat 1 config log if ${LanIn} reset same_ports deny_in redirect_port tcp 192.168.0.100:22 22 redirect_port tcp
${FwCMD} add 10200 nat 1 ip from any to any via ${LanIn}
${FwCMD} add 10500 queue 2 ip from any to any via ${LanIn}
${FwCMD} add 20000 allow all from any to any
Код: Выделить всё
re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=389b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_UCAST,WOL_MCAST,WOL_MAGIC>
ether e0:cb:4e:c3:80:d6
inet 192.168.0.100 netmask 0xffffff00 broadcast 192.168.0.255
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
vr0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=82808<VLAN_MTU,WOL_UCAST,WOL_MAGIC,LINKSTATE>
ether 1c:bd:b9:86:0c:4a
inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
inet 192.168.1.100 netmask 0xffffff00 broadcast 192.168.1.255
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
re1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=389b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_UCAST,WOL_MCAST,WOL_MAGIC>
ether 14:d6:4d:1c:a2:97
inet 192.168.2.3 netmask 0xffffff00 broadcast 192.168.2.255
media: Ethernet autoselect (1000baseT <full-duplex>)
status: active
ipfw0: flags=8801<UP,SIMPLEX,MULTICAST> metric 0 mtu 65536
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=3<RXCSUM,TXCSUM>
inet 127.0.0.1 netmask 0xff000000
tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1500
options=80000<LINKSTATE>
inet 10.0.0.1 --> 10.0.0.2 netmask 0xffffffff
Opened by PID 973
Код: Выделить всё
13:38:46.088790 IP 192.168.1.150 > 192.168.2.2: ICMP echo request, id 55840, seq 1813, length 64
13:38:46.090015
13:38:46.352489 STP 802.1d, Config, Flags [none], bridge-id 8000.f4:ec:38:e9:82:8c.8001, length 43
13:38:47.089208
13:38:47.089885 IP 192.168.1.150 > 192.168.2.2: ICMP echo request, id 55840, seq 1814, length 64
13:38:48.090856
13:38:48.090965 IP 192.168.1.150 > 192.168.2.2: ICMP echo request, id 55840, seq 1815, length 64
13:38:48.352425 STP 802.1d, Config, Flags [none], bridge-id 8000.f4:ec:38:e9:82:8c.8001, length 43
13:38:49.091116
13:38:49.092051 IP 192.168.1.150 > 192.168.2.2: ICMP echo request, id 55840, seq 1816, length 64
13:38:49.648505 IP 10.69.198.108.138 > 10.69.198.255.138: NBT UDP PACKET(138)
13:38:50.089164
13:38:50.093136 IP 192.168.1.150 > 192.168.2.2: ICMP echo request, id 55840, seq 1817, length 64
13:38:50.352358 STP 802.1d, Config, Flags [none], bridge-id 8000.f4:ec:38:e9:82:8c.8001, length 43
13:38:51.089037
13:38:51.094222 IP 192.168.1.150 > 192.168.2.2: ICMP echo request, id 55840, seq 1818, length 64
13:38:52.093677
13:38:52.095308 IP 192.168.1.150 > 192.168.2.2: ICMP echo request, id 55840, seq 1819, length 64
13:38:52.352328 STP 802.1d, Config, Flags [none], bridge-id 8000.f4:ec:38:e9:82:8c.8001, length 43
Код: Выделить всё
ipfw add 1 allow all from any to any recv LAN1 xmit LAN2
ipfw add 2 allow all from any to any recv LAN2 xmit LAN1