forum.lissyara.su

Код: Выделить всё

hostname="localhost"
defaultrouter="46.146.232.254"
ifconfig_re0="inet 46.146.232.11 netmask 255.255.0.0"
ifconfig_bridge0="inet 192.168.0.2 netmask 255.255.255.0 addm re0 up addm wlan0 up"
gateway_enable="YES"
firewall_enable="YES"
dummynet_enable="YES"
firewall_nat_enable="YES"
firewall_type="NAT"
firewall_script="/usr/local/etc/ipfw.conf"

Код: Выделить всё

exface="tun0"
inface="bridge0"
cmd="ipfw -q"

$cmd -f flush
$cmd -f pipe flush
$cmd -f queue flush
$cmd add 34 check-state

$cmd add 35 allow icmp from any to any via tun0
$cmd add 100 allow ip from any to any via lo0 # loop allow
$cmd add 200 deny ip from any to 127.0.0.0/8
$cmd add 300 deny ip from 127.0.0.0/8 to any
$cmd add 1040 allow ip from any to any via $inface
$cmd nat 1 config log if $exface reset same_ports deny_in redirect_port tcp 192.168.0.2:7777 7777
$cmd add 10130 nat 1 ip from any to any via $exface

Код: Выделить всё

root@craftnet: # tcpdump -i tun0 port 7777
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on tun0, link-type NULL (BSD loopback), capture size 65535 bytes
04:53:22.186136 IP 2ip.ru.48833 > 46.146.232.11.7777: Flags [S], seq 135727452, win 14600, options [mss 1440,sackOK,TS val 2134310661 ecr 0,nop,wscale 7], length 0
04:53:23.186015 IP 2ip.ru.48833 > 46.146.232.11.ru.7777: Flags [S], seq 135727452, win 14600, options [mss 1440,sackOK,TS val 2134311661 ecr 0,nop,wscale 7], length 0
04:53:25.185973 IP 2ip.ru.48833 > 46.146.232.11.ru.7777: Flags [S], seq 135727452, win 14600, options [mss 1440,sackOK,TS val 2134313661 ecr 0,nop,wscale 7], length 0

Код: Выделить всё

$cmd nat 1 config log if $exface reset same_ports deny_in redirect_port tcp 192.168.0.2:80 80