forum.lissyara.su

Код: Выделить всё

!/bin/sh
FwCMD="/sbin/ipfw"

ExFace="em0"
NetOut="192.168.100.3/24"
IpOut="192.168.100.137"
in_ip="192.168.100.3"


InFace="em1"
NetIn="172.20.0.0/16"
ip_lan="172.20.0"




${FwCMD} -f flush
${FwCMD} -f pipe flush
${FwCMD} -f queue flush



${FwCMD} table 1 flush
${FwCMD} table 1 add 172.20.0.33
${FwCMD} table 1 add 192.168.100.19


${FwCMD} table 2 flush
${FwCMD} table 2 add 192.168.100.19
${FwCMD} table 2 add 192.168.100.7


${FwCMD} add allow ip from any to any via lo0
${FwCMD} add deny ip from any to 127.0.0.0/8
${FwCMD} add deny ip from 127.0.0.0/8 to any
${FwCMD} add allow all from any to any via ${InFace}
${FwCMD} add allow tcp from table\(2\) to me 22 via ${ExFace}
${FwCMD} add allow tcp from table\(2\) to me 80 via ${ExFace}


${FwCMD} nat 1 config log if ${ExFace} reset same_ports deny_in \
redirect_port tcp 172.20.0.33:3389 3390
${FwCMD} add nat 1 ip from 172.20.0.33 to any via ${ExFace}
${FwCMD} add nat 1 ip from any to 192.168.100.19 via ${ExFace}

Код: Выделить всё

${FwCMD} add nat 1 ip from any to any via ${ExFace}

Код: Выделить всё

ipfw show

Код: Выделить всё

#!/bin/sh
FwCMD="/sbin/ipfw"
ExFace="em0"
NetOut="192.168.100.3/24"
IpOut="192.168.100.137"
in_ip="192.168.100.3"

InFace="em1"
NetIn="172.20.0.0/16"
ip_lan="172.20.0"

${FwCMD} -f flush
${FwCMD} -f pipe flush
${FwCMD} -f queue flush

${FwCMD} table 1 flush
${FwCMD} table 1 add 172.20.0.33
${FwCMD} table 1 add 172.20.0.35

${FwCMD} table 2 flush
${FwCMD} table 2 add 192.168.100.19
${FwCMD} table 2 add 192.168.100.7

${FwCMD} add allow ip from any to any via lo0
${FwCMD} add deny ip from any to 127.0.0.0/8
${FwCMD} add deny ip from 127.0.0.0/8 to any
${FwCMD} add allow all from any to 172.20.0.33 via ${InFace}
${FwCMD} add allow all from 172.20.0.33 to any via ${InFace}

${FwCMD} add allow tcp from table\(2\) to me 22 via ${ExFace}
${FwCMD} add allow tcp from table\(2\) to me 80 via ${ExFace}

${FwCMD} nat 1 config log if ${ExFace} reset same_ports deny_in \
redirect_port tcp 172.20.0.33:3389 3390
${FwCMD} add nat 1 ip from any to 192.168.100.19 via ${ExFace}
${FwCMD} add nat 1 ip from 192.168.100.19 to any via ${ExFace}

${FwCMD} nat 2 config log if ${ExFace} reset same_ports deny_in
${FwCMD} add nat 2 ip from any to any via ${ExFace}

Код: Выделить всё

$ ipfw show
00100    132    34004 allow ip from any to any via lo0
00200      0        0 deny ip from any to 127.0.0.0/8
00300      0        0 deny ip from 127.0.0.0/8 to any
00400    837    51231 allow ip from any to 172.20.0.33 via em1
00500    924    66629 allow ip from 172.20.0.33 to any via em1
00600    104     9645 allow tcp from table(2) to me dst-port 22 via em0
00700      0        0 allow tcp from table(2) to me dst-port 80 via em0
00800     57     8653 nat 1 ip from any to 192.168.100.19 via em0
00900   2375   313151 nat 1 ip from 192.168.100.19 to any via em0
01000 113850 10237131 nat 2 ip from any to any via em0
65535 114688  9897868 deny ip from any to any