ipfw/natd pravidla - doplneni

michal.kutnohorsky at asp1000.com michal.kutnohorsky at asp1000.com
Tue May 29 12:00:16 CEST 2001


xl1 je vnejsi interface a xl0 je vnitrni interface s adr. 192.168.0.22

pri logovani pravidel sem mel v logu pri pouziti nasl. pravidla tohle, kde
xxx.xxx.xxx.xxx je ip adresa serveru, resp jeho vnejsiho interfacu

194.213.194.31:8000 192.168.0.40:1175 in via xl1
Apr 18 20:53:00 romeo /kernel: ipfw: 4400 Accept TCP 194.213.194.31:8000
192.168.0.40:1175 out via xl0
Apr 18 20:53:00 romeo /kernel: ipfw: 4400 Accept TCP 192.168.0.40:1175
194.213.194.31:8000 in via xl0
Apr 18 20:53:00 romeo /kernel: ipfw: 4400 Accept TCP xxx.xxx.xxx.xxx:1175
194.213.194.31:8000 out via xl1
Apr 18 20:53:00 romeo /kernel: ipfw: 4400 Accept TCP 194.213.194.31:8000
192.168.0.40:1175 in via xl1
Apr 18 20:53:00 romeo /kernel: ipfw: 4400 Accept TCP xxx.xxx.xxx.xxx:1175
194.213.194.31:8000 out via xl1

192.168.0.40:1523 216.136.204.21:80 in via xl0
May 28 21:27:53 romeo /kernel: ipfw: 265 Accept TCP xxx.xxx.xxx.xxx:1523
216.136.204.21:80 out via xl1
May 28 21:27:53 romeo /kernel: ipfw: 264 Accept TCP 216.136.204.21:80
192.168.0.40:1523 in via xl1
May 28 21:27:53 romeo /kernel: ipfw: 264 Accept TCP 216.136.204.21:80
192.168.0.40:1523 out via xl0

snad sem uz na nic nezapomnel :)

michal

-- Michal Kutnohorsky  
-- michalk at asp1000.com
-- kutny at centrum.cz
-- icq 24864416        



More information about the Users-l mailing list