western
Junior Member | Редактировать | Профиль | Сообщение | ICQ | Цитировать | Сообщить модератору
HomeServer# cat firewall-nat
add 1040 allow ip from any to any via alc0
#add 1050 deny ip from any to 192.168.0.0/16 in recv fxp0
#add 1060 deny ip from 192.168.0.0/16 to any in recv fxp0
#add 1070 deny ip from any to 172.16.0.0/12 in recv fxp0
#add 1080 deny ip from 172.16.0.0/12 to any in recv fxp0
#add 1090 deny ip from any to 10.0.0.0/8 in recv fxp0
#add 10100 deny ip from 10.0.0.0/8 to any in recv fxp0
#add 10110 deny ip from any to 169.254.0.0/16 in recv fxp0
#add 10120 deny ip from 169.254.0.0/16 to any in recv fxp0
nat 1 config log if fxp0 reset same_ports deny_in
add 10130 nat 1 ip from any to any via fxp0
#add 65534 deny all from any to any
add 10130 nat 1 ip from any to any via fxp0
#add 65534 deny all from any to any |
Всего записей: 150 | Зарегистр. 28-01-2006 | Отправлено: 23:51 25-04-2012 | Исправлено: western, 23:56 25-04-2012 |
|
