forum.lissyara.su

Код: Выделить всё

#!/bin/sh
FwCMD="/sbin/ipfw"
LanOut="alc0"
LanIn="em0"

IpOut="zzz.zzz.zzz.132"
NetOut="zzz.zzz.zzz.128"
NetOutMask="29"

IpIn="192.168.0.1"
NetIn="192.168.0.0"
NetInMask="16"

${FwCMD} -f flush
${FwCMD} add 00010 check-state

${FwCMD} add 00110 allow log logamount 100 ip from any to any via lo0

#${FwCMD} add 00111 deny log logamount 100 ip from any to 127.0.0.0/8
#${FwCMD} add 00112 deny log logamount 100 ip from 127.0.0.0/8 to any

${FwCMD} add 00120 allow log logamount 100 ip from any to any via ${LanIn}

${FwCMD} add 00130 allow log logamount 100 tcp from any to any established
${FwCMD} add 00131 allow log logamount 100 ip from ${IpOut} to any via ${LanOut} keep-state

${FwCMD} add 00303 allow log logamount 100 tcp from ${NetOut}/${NetOutMask} to ${IpOut} 5900 via ${LanOut}

${FwCMD} nat 1 config ip ${IpOut} log reset same_ports deny_in
${FwCMD} add 00500 nat 1 log logamount 100 ip from any to ${IpOut} via ${LanOut}
${FwCMD} add 00501 nat 1 log logamount 100 ip from 192.168.0.5/32 to any via ${LanOut}

${FwCMD} add 65534 deny log logamount 100 ip from any to any

Код: Выделить всё

Dec 27 15:28:10 hostel kernel: ipfw: 120 Accept TCP 192.168.0.5:1103 93.158.134.203:80 in via em0
Dec 27 15:28:10 hostel kernel: ipfw: 501 Nat TCP 192.168.0.5:1103 93.158.134.203:80 out via alc0
Dec 27 15:28:13 hostel kernel: ipfw: 120 Accept TCP 192.168.0.5:1103 93.158.134.203:80 in via em0
Dec 27 15:28:13 hostel kernel: ipfw: 501 Nat TCP 192.168.0.5:1103 93.158.134.203:80 out via alc0

Код: Выделить всё

08:56:41.505685 IP init.net.ua.1200 > mail.ru.http: Flags [R], seq 1552524176, win 0, length 0
08:56:53.495574 IP init.net.ua.1201 > mail.ru.http: Flags [S], seq 3375490083, win 64240, options [mss 1460,nop,nop,sackOK], length 0
08:56:53.526203 IP mail.ru.http > unico.init.net.ua.1201: Flags [S.], seq 3869615879, ack 3375490084, win 5640, options [mss 1410,nop,nop,sackOK], length 0
08:56:53.526236 IP init.net.ua.1201 > mail.ru.http: Flags [R], seq 3375490084, win 0, length 0
08:56:56.496191 IP init.net.ua.1201 > mail.ru.http: Flags [S], seq 3375490083, win 64240, options [mss 1460,nop,nop,sackOK], length 0
08:56:56.526661 IP mail.ru.http > unico.init.net.ua.1201: Flags [S.], seq 3872616407, ack 3375490084, win 5640, options [mss 1410,nop,nop,sackOK], length 0
08:56:56.526695 IP init.net.ua.1201 > mail.ru.http: Flags [R], seq 3375490084, win 0, length 0