forum.lissyara.su

Код: Выделить всё

ifconfig_sis0 = "inst 192.168.0.8 netmask 255.255.255.0" - смотрит в сеть 
ifconfig_rl0 = "inet 192.168.1.50 netmask 255.255.255.0" - смотрит на модем АДСЛ(192.168.1.1)

Код: Выделить всё

#!/bin/sh - 

testoip=$(/sbin/ifconfig | grep "82.209.253.222" | awk '{print$2}')
if(test $testoip)
	then 
		oip=$testoip
	else
		oip="192.168.1.1"
fi

ipfw -f flush

cmd="ipfw -q add"
oif="rl0"
inif="sis0"
lan="192.168.0"
tun="tun0"
users="192.168.0.0/24{1,3,4,7-10,13,15,16,21,101,102}"

$cmd 100 allow all from any to any via lo0
$cmd 101 deny all from 127.0.0.0/8 to any
$cmd 102 deny all from any to 127.0.0.0/8

ipfw pipe 1 config bw 60Kbit/s
ipfw pipe 2 config bw 40Kbit/s
ipfw pipe 3 config bw 40Kbit/s
ipfw pipe 4 config bw 40Kbit/s

$cmd 200 pipe 1 ip from not $lan.8/24 to 192.168.0.102
$cmd 201 pipe 2 ip from not $lan.8/24 to 192.168.0.15
$cmd 202 pipe 3 ip from not $lan.8/24 to 192.168.0.10
$cmd 203 pipe 4 ip from not $lan.8/24 to 192.168.0.1

$cmd 300 deny all from 192.168.0.2 10-65500 to any
$cmd 301 deny all from 172.16.0.0/12 to any in via $oif
$cmd 302 deny all from 10.0.0.0/8 to any in via $oif
$cmd 303 deny all from 127.0.0.0/8 to any in via $oif
$cmd 304 deny all from 0.0.0.0/8 to any in via $oif
$cmd 305 deny all from 169.254.0.0/16 to any in via $oif
$cmd 306 deny all from 192.0.2.0/24 to any in via $oif
$cmd 307 deny all from 204.152.64.0/23 to any in via $oif
$cmd 308 deny all from 224.0.0.0/3 to any in via $oif
$cmd 309 deny tcp from any to any 113 in via $oif
$cmd 310 deny icmp from any to any frag

$cmd 311 allow ICMP from any to any

$cmd 312 deny tcp from any to any 135 in via $oif
$cmd 313 deny tcp from any to any 137 in via $oif
$cmd 314 deny tcp from any to any 138 in via $oif
$cmd 315 deny tcp from any to any 139 in via $oif
$cmd 316 deny all from any to any frag in via $oif

$cmd 400 pass all from $lan.0/24 to me in via $inif established
$cmd 401 pass all from $lan.0/24 to me in via $inif setup
$cmd 402 pass all from me to $lan.0/24 out via $inif established

$cmd 403 divert natd all from $lan.0/24 to any out via $tun
$cmd 404 divert natd all from any to $oip in via $tun

$cmd 410 deny log all from not $users to any in via $inif
$cmd 411 pass all from $oip to any out via $tun
$cmd 412 pass all from any to $oip in via $tun
$cmd 413 pass all from $lan.0/24 to any in via $inif
$cmd 414 pass all from $lan.0/24 to any out via $tun
$cmd 415 pass all from any to $lan.0/24 in via $tun
$cmd 416 pass all from any to $lan.0/24 out via $inif
$cmd 417 pass all from me to any
$cmd 418 pass all from any to me

$cmd 800 deny log all from any to any 

Код: Выделить всё

route add $сеткапрова 192.168.1.1

Код: Выделить всё

testoip=$(/sbin/ifconfig | grep "82.209.253.222" | awk '{print$2}')
if(test $testoip)
   then
      oip=$testoip
   else
      oip="192.168.1.1"
fi