forum.lissyara.su

Код: Выделить всё

FreeBSD GW 10.0-RELEASE FreeBSD 10.0-RELEASE #0: Fri Jan  2 06:14:16 EET 2015     root@GW:/usr/obj/usr/src/sys/GW-KERNEL  amd64

Код: Выделить всё

# cat /etc/rc.conf
# IFACES
# ISP#1
ifconfig_re0="inet 192.168.111.114/24 -rxcsum -txcsum -tso"
#ISP#2
ifconfig_vr0="inet 192.168.1.18/24 -rxcsum -txcsum -tso"
#LAN0
ifconfig_em0="inet 192.168.0.1/24"

# GW ISP#1
defaultrouter="192.168.111.8"

gateway_enable="YES"
firewall_enable="YES"
firewall_nat_enable="YES"
firewall_script="/etc/ipfw.conf"

##########################################
# DHCP
dhcpd_enable="YES"
dhcpd_conf="/usr/local/etc/dhcpd.conf"
dhcpd_ifaces="em0"
...

Код: Выделить всё

# cat /etc/ipfw.conf
exface="re0"
inface="em0"
test_ip="192.168.0.12"

cmd="ipfw -q"

$cmd -f flush
$cmd add 100 allow ip from any to any via lo0
$cmd add 200 deny ip from any to 127.0.0.0/8
$cmd add 300 deny ip from 127.0.0.0/8 to any
$cmd add 400 allow all from any to any via $inface

$cmd nat 123 config if $exface redirect_port tcp ${test_ip}:3389 192.168.111.114:3389
$cmd add 1030 nat 123 ip from any to any via $exface

#$cmd add 2000 allow all from any to any via $exface

Код: Выделить всё

...
options SC_DISABLE_REBOOT
options SC_NORM_ATTR=(FG_GREEN|BG_BLACK)
options SC_KERNEL_CONS_ATTR=(FG_YELLOW|BG_BLACK)



options         LIBALIAS
options         ROUTETABLES=5
options         IPFIREWALL
options         IPDIVERT
options         DUMMYNET
options         IPFIREWALL_NAT
options         IPFIREWALL_DEFAULT_TO_ACCEPT
options         IPFIREWALL_VERBOSE
options         IPFIREWALL_VERBOSE_LIMIT=50

options         HZ="1000"
options         DEVICE_POLLING

options         VGA_WIDTH90     # support 90 column modes