Различия

Показаны различия между двумя версиями страницы.

--- wiki:freebsd:ipfw [2024/01/07 15:05] – [Включение ipfw] Diman
+++ wiki:freebsd:ipfw [2024/01/29 14:41] (текущий) – Diman
@@ Строка 26: / Строка 26: @@
 pkg update && pkg upgrade
-pkg install -y mc nano rsync screen tmux bash htop
+pkg install -y mc nano rsync  tmux bash htop bind-tools
 # replace bash for root
@@ Строка 51: / Строка 51: @@
 net.fibs="4"' >> /boot/loader.conf
+</code>
+==== Работающий в первый же запуск скрипт ipfw ====
+<code bash>
 echo '#!/usr/local/bin/bash
@@ Строка 61: / Строка 66: @@
 $cmd add deny all from 127.0.0.0/8 to any
 $cmd add deny all from any to any frag
-$cmd add check-state
-$cmd add allow tcp from any to any established
-$cmd add allow all from any to any out keep-state
 # ssh
 $cmd table admin create missing
 $cmd table admin add 10.1.1.0/24
 $cmd table admin add 192.168.10.0/24
+$cmd add check-state
+#$cmd add allow tcp from any to any established
+$cmd add allow all from any to any out keep-state
 $cmd add allow ip from "table(admin)" to me 22
-# HTTP && HTTPS
-$cmd add allow tcp from any to me 443 in limit src-addr 50
-$cmd add allow tcp from any to me 80 in limit src-addr 20
-# Mail
-$cmd add allow tcp from me to any 25 out
-$cmd add allow tcp from any 25 to me in
 # Ping
 $cmd add allow icmp from "table(admin)" to me in icmptype 8
 $cmd add allow icmp from me to "table(admin)" out icmptype 0,8
 $cmd add allow all from any to any
 $cmd add deny log all from any to any' > /etc/ipfw.script
@@ Строка 92: / Строка 88: @@
 sysrc firewall_script="/etc/ipfw.script"
 sysrc firewall_logging="YES"
 </code>
@@ Строка 127: / Строка 122: @@
 sysrc ntpdate_hosts="127.0.0.1"
 sysrc ntpd_sync_on_start="NO"
+service ntpd start
+</code>
+==== Включение NAT ====
+<code bash>
+sysrc gateway_enable="YES"
 </code>