Исходное сообщение
"ipfw и squid" Отправлено olegunya, 18-Окт-05 18:45
>и вообще покажи ipfw sh allow ip from any to any via lo0 deny ip from any to 127.0.0.0/8 deny ip from 127.0.0.0/8 to any deny ip from 192.168.0.0/24 to any in via xl0 deny ip from 212.220.0.0/30 to any in via fxp0 deny ip from any to 10.0.0.0/8 via xl0 deny ip from any to 172.16.0.0/12 via xl0 deny ip from any to 192.168.0.0/16 via xl0 deny ip from any to 0.0.0.0/8 via xl0 deny ip from any to 169.254.0.0/16 via xl0 deny ip from any to 192.0.2.0/24 via xl0 deny ip from any to 224.0.0.0/4 via xl0 deny ip from any to 240.0.0.0/4 via xl0 divert 8668 ip from any to any via xl0 deny ip from 10.0.0.0/8 to any via xl0 deny ip from 172.16.0.0/12 to any via xl0 deny ip from 192.168.0.0/16 to any via xl0 deny ip from 0.0.0.0/8 to any via xl0 deny ip from 169.254.0.0/16 to any via xl0 deny ip from 192.0.2.0/24 to any via xl0 deny ip from 224.0.0.0/4 to any via xl0 deny ip from 240.0.0.0/4 to any via xl0 allow tcp from any to any established allow ip from any to any frag allow tcp from any to 212.220.141.98 dst-port 25 setup allow tcp from any to 212.220.141.98 dst-port 53 setup allow udp from any to 212.220.141.98 dst-port 53 allow udp from 212.220.141.98 53 to any allow tcp from any to 212.220.141.98 dst-port 80 setup deny log tcp from any to any in via xl0 setup allow tcp from any to any setup allow udp from 212.220.141.98 to any dst-port 53 keep-state allow udp from 212.220.141.98 to any dst-port 123 keep-state fwd 192.168.0.1,3128 tcp from 192.168.0.0/24 to any dst-port 80 out via xl0 allow ip from any to any предпоследнее правило должно форвардить на сквид...а оно не работает