forum.lissyara.su

Код: Выделить всё

# uname -sr
FreeBSD 7.1-RELEASE-p3

Код: Выделить всё

# pfctl -f /etc/pf.conf
pfctl: warning: namespace collisions with 3 global tables.

Код: Выделить всё

device          pf
device          pflog
options         ALTQ
options         ALTQ_CBQ
options         ALTQ_RED
options         ALTQ_RIO
options         ALTQ_HFSC
options         ALTQ_CDNR
options         ALTQ_PRIQ
options         ALTQ_NOPCC

Код: Выделить всё

#
------------------
куча макросов
------------------


set optimization normal                                                                                       
                                                                                                              
set skip on lo0
set skip on gif0
set skip on gif1
set skip on gif2                                                                                                              

set block-policy return                                                                                       
set limit { states 100000, frags 100000, src-nodes 100000 }
set ruleset-optimization basic

###### auth
table <internet> const { 0/0 !192.168/16 !172.16/12 !10/8}                                                   
table <intranet> const { 192.168/16 172.16/12 10.10/16 }                                                          
table <serverNets> const { ip }                                                                                                                        
table <dmzNets> const { ip }                                                                                                                           
table <officeNets> const { 192.168/16 }                                                                                                                      
table <corpRes> { ip }

table <DCaddrs> const {ip}

table <internetNAT> const { $officeNET $serverNET ip }

table <denyAccess> persist
table <dmzNetsAccess> persist
table <officeNetsAccess> persist
table <serverNetsAccess> persist
table <internetAccess> persist
table <internetFullAccess> persist

table <internetAccessVPN> persist
table <officeNetsAccessVPN> persist
table <serverNetsAccessVPN> persist
table <dmzNetsAccessVPN> persist
table <home_xxx_orgAccessVPN> persist
table <mail_xxx_orgAccessVPN> persist



table <sshguard> persist
                                                                 
------------------------------
Ну и тут куча всяких правил, редиректы, наты, пасы.
------------------------------