« -: Jun 26, 2005, 00:03 »
Здравейте,
Имам следния проблем: След около един ден ъптайм на фриБСД рутера нет-а на Уиндоуския комп вече го няма. След рестарт на рутера всичко се оправя. Рутера е на ФриБСД 5.4 с ПФ. Когато рестартирам само ПФ чрез /etc/rc.d/pf restart|stop|start... не се оправя и трябва ребоот.
# Nastroika na interfeisite
loop="lo0"
ext_if="fxp0"
cicomanche="84.21.212.23"
lam3r="84.21.212.29"
int_if="my0"
int_net="192.168.2.0/24"
unfiltered="{ lo0, my0 }"
tcp_svcs1="{ 21,25,53,80,110,443,456,995,>1024 }"
tcp_svcs2="{ 53,>1024 }"
# Options
set timeout { interval 30, frag 10 }
set timeout { tcp.first 120, tcp.opening 30, tcp.established 3600 }
set timeout { tcp.closing 60, tcp.finwait 25, tcp.closed 30 }
set timeout { udp.first 60, udp.single 30, udp.multiple 60 }
set timeout { icmp.first 20, icmp.error 10 }
set timeout { other.first 60, other.single 30, other.multiple 6 }
set limit { states 20000, frags 5000 }
set loginterface $ext_if
set optimization normal
set block-policy return
set require-order yes
set fingerprints "/etc/pf/pf.os"
set state-policy if-bound
scrub in on $ext_if all fragment reassemble
scrub out on $ext_if no-df random-id min-ttl 24 max-mss 1492
# Nat
no nat on $unfiltered
no rdr on $unfiltered
nat on $ext_if from $int_net to any -> 84.21.212.23
rdr on $ext_if from any to 84.21.212.23 -> 192.168.2.1
block log
pass quick on $unfiltered
pass out quick on $ext_if inet proto icmp icmp-type 8 code 0 keep state
pass in quick on $ext_if inet proto icmp icmp-type 8 code 0
pass out on $ext_if inet proto udp keep state
pass in quick inet proto udp from any to $ext_if port 53 keep state
pass out quick on $ext_if inet proto tcp from $ext_if to any flags S/SA modulat$
pass in quick on $ext_if inet proto tcp from any to $lam3r port $tcp_svcs1 flag$
S/SA modulate state
pass out quick on $ext_if inet proto tcp from $ext_if to any flags S/SA modulat$
pass in quick on $ext_if inet proto tcp from any to $lam3r port $tcp_svcs1 flag$
S/SA modulate state
pass in quick on $ext_if inet proto tcp from any to $cicomanche port $tcp_svcs2$
S/SA modulate state
#EOF
Това е което имам във пф.конф-а, външната карта е с 2 Аи Пи-та като $цицоманче е алайъс .. ако тук имам грешка моля да помогнете ако не кажете какво може да е проблема моля ви ;(
