forum.lissyara.su

Код: Выделить всё

root@gate:/root # ifconfig
em0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>
        ether 00:0c:29:9e:da:57
        inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
em1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>
        ether 00:0c:29:9e:da:61
        inet 81.200.x.x netmask 0xffffffe0 broadcast 81.200.4.223
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
em2: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>
        ether 00:0c:29:9e:da:6b
        inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active

Код: Выделить всё

root@gate:/root # ipfw show
00060 195491281 114203235228 divert 8669 ip from any to any via em1
00100     62848      8003856 allow ip from any to any via lo0
00200         0            0 deny ip from any to 127.0.0.0/8
00300         0            0 deny ip from 127.0.0.0/8 to any
00500        42         2659 deny ip from any to me dst-port 53 in via em1
00600         0            0 deny ip from any to me dst-port 667 in via em1
02000       285        15365 deny ip from 46.40.125.191 to me
02001      1515       142665 deny ip from me to 46.40.125.191
65000 248728988 147436911598 allow ip from any to any
65535        14         2377 deny ip from any to any

Код: Выделить всё

root@gate:/root # cat /etc/rc.conf
hostname="gate.esxi"
keymap="ru.koi8-r.kbd"
ifconfig_em0="inet 192.168.0.1 netmask 255.255.255.0"
ifconfig_em2="inet 192.168.1.1 netmask 255.255.255.0"
ifconfig_em1="inet 81.200.x.x netmask 255.255.255.224"
defaultrouter="81.200.x.x"
sshd_enable="YES"
dumpdev="NO"

firewall_enable="YES"


gateway_enable="YES"
firewall_type="open"

named_enable="YES"
named_program="/usr/sbin/named"
named_flags="-u bind -c /etc/namedb/named.conf"

darkstat_enable="YES"
darkstat_interface="em0"
darkstat_dir="/var/run/darkstat"
darkstat_pidname="darkstat.pid"
darkstat_groupuser="nobody"
darkstat_flags="-b 192.168.0.1 -l 192.168.0.0/255.255.255.0 --import darkstat.db --export darkstat.db"

mpd_enable="YES"

Код: Выделить всё

/sbin/natd -p 8669 -m -n em1
ipfw add 60 divert 8669 ip from any to any via em1

Код: Выделить всё

ipfw add 50 allow all from 192.168.0.0/24 to 192.168.1.0/24
ipfw add 55 allow all from 192.168.1.0/24 to 192.168.0.0/24