forum.lissyara.su

Код: Выделить всё

keymap="ru.koi8-r"
sshd_enable="YES"
ifconfig_rl0="inet 192.168.100.112 netmask 255.255.255.0"
firewall_enable="YES"
firewall_type="/etc/ipfw_rules"

Код: Выделить всё

flush
disable one_pass
disable dyn_keepalive

add 1 allow tcp from any to me 22 in via tun0
add 1 allow tcp from me 22 to any out via tun0

#####################
# lo0
add 100 pass all from any to any via lo0
add 100 deny all from any to 127.0.0.0/8
add 100 deny ip from 127.0.0.0/8 to any

#####################
add 501 allow ip from any to any via rl0  # Local network
#add 502 skipto 1200 ip from any to any via rl1 # Modem + PPPoE internet
#add 503 skipto 1300 ip from any to any via tun0 # F67   OpenVPN
add 510 deny ip from any to any

# me
add 1618 allow ip   from me  to any                     out keep-state
add 1618 allow tcp  from any to me 22                   in  keep-state

#add 1619 allow ip from 192.168.100.13 to any dst-port 25,80,110,143,8080 keep-state # это я хотел ему открыть только порты
add 1619 allow ip from 192.168.100.52 to any                                                                  # но все таки разрешил все по ip адресу
add 1619 allow ip from any to 192.168.100.52

add 1697 unreach filter-prohib  ip from any to any
add 1697 unreach filter-prohib  gre from any to any

add 1698 deny ip from any to any dst-port 80,8080 keep-state                                     # а это прямой запрет траффика по 80 и 8080 порты (http)

add 1699 deny ip from any to any

Код: Выделить всё

ipfw2 (+ipv6) initialized, divert loadable, nat loadable, rule-based forwarding disabled, default to deny, logging disabled
Flushed all rules.
00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
[b]Are you sure?:rl0:link state changed to UP [yn] [/b]

Код: Выделить всё

# Flush out the list before we begin.
${fwcmd} -f flush
${fwcmd} -f pipe flush
${fwcmd} -f queue flush