Исходное сообщение
"ipfw форвардинг" Отправлено pfox, 14-Ноя-07 14:49
>показывайте конфиг pf, если все еще не работает # конфигурация ext_if="ed0"                                                                                            # Внешний интерфейс int_if="vr0"                                                                                            # Внутренний интерфейс external_addr="91.122.47.93"                                                                            # Внешний IP-адрес int_net="{192.168.100.0/24, 192.168.112.0/24, 192.168.128.0/24, 192.168.200.0/24}"                      # Сети # опции set fingerprints "/etc/pf.os" set loginterface $ext_if set debug urgent set block-policy drop set skip on lo0 scrub in on ! lo0 all fragment reassemble rdr on $int_if proto tcp from $int_net to $external_addr port 80 -> 192.168.112.2 port 80 # вот этой строкой пытаюсь редиректнуть - не работает. ( # внешний NAT nat on $ext_if from $int_net -> $ext_if # внутренний NAT #nat on $int_if from $int_net to $external_addr port 80 -> $int_if # пересылка снаружи на внутренние сервера rdr on $ext_if proto tcp from any to $external_addr port 80 -> 192.168.112.2 port 80                    # http rdr on $ext_if proto tcp from any to $external_addr port 25 -> 192.168.112.2 port 25                    # smtp rdr on $ext_if proto tcp from any to $external_addr port 110 -> 192.168.112.2 port 110                  # pop3 rdr on $ext_if proto tcp from any to $external_addr port 143 -> 192.168.112.2 port 143                  # imap4 rdr on $ext_if proto tcp from any to $external_addr port 10245 -> 192.168.112.3 port 10245              # torrent rdr on $ext_if proto tcp from any to $external_addr port 1723 -> 192.168.112.5 port 1723                # pptp rdr on $ext_if proto gre from any to $external_addr -> 192.168.112.5                                    # pptp rdr on $ext_if proto tcp from any to $external_addr port 1701 -> 192.168.112.5 port 1701                # l2tp rdr on $ext_if proto udp from any to $external_addr port 1701 -> 192.168.112.5 port 1701                # l2tp # правила pass quick on lo0 pass quick on $int_if antispoof log quick for $ext_if block on $ext_if block in quick from any os NMAP pass out on $ext_if proto udp keep state pass out on $ext_if proto tcp flags S/SA keep state pass on $ext_if inet proto icmp icmp-type echoreq code 0 keep state                                     # icmp # сервисы шлюза pass in on $ext_if inet proto udp from any to port 53 keep state                                        # dns pass in on $ext_if inet proto tcp from any to port 53 flags S/SA keep state                             # dns pass in on $ext_if inet proto tcp from any to port 22 flags S/SA keep state                             # ssh # пересылка снаружи на внутренние сервера pass in on $ext_if inet proto tcp from any to 192.168.112.2 port 80 flags S/SA synproxy state           # http pass in on $ext_if inet proto tcp from any to 192.168.112.2 port 25 flags S/SA keep state               # smtp pass in on $ext_if inet proto tcp from any to 192.168.112.2 port 110 flags S/SA keep state              # pop3 pass in on $ext_if inet proto tcp from any to 192.168.112.2 port 143 flags S/SA keep state              # imap4 pass in on $ext_if inet proto tcp from any to 192.168.112.3 port 10245 flags S/SA keep state            # torrent pass in on $ext_if inet proto tcp from any to 192.168.112.5 port 1723 flags S/SA keep state             # pptp pass in on $ext_if inet proto gre from any to 192.168.112.5                                             # pptp pass in on $ext_if inet proto tcp from any to 192.168.112.5 port 1701 flags S/SA keep state             # l2tp pass in on $ext_if inet proto udp from any to 192.168.112.5 port 1701 keep state                        # l2tp #pass on $ext_if inet proto tcp from $int_net to $external_addr port 80 flags S/SA keep state #(это я уже извращался с редиректом, ставил и внутренний интерфейс, и внешний, а для этого разрешение делал)