12/09/2010

OpenBSD PF

Filed under: tech,unix — seeker @ 14:38 Comments (1)

что-то я тупой. есть простенький конфиг pf
ext_if_m=”vlan0″
ext_if_b=”vlan1″
int_if=”sk0″

set skip on lo

scrub in

nat on $ext_if_m from $int_if:network to any -> $ext_if_m
nat on $ext_if_b from $int_if:network to any -> ($ext_if_b)

rdr on $ext_if_m proto tcp from any to any port 2200 -> 192.168.1.3 port 22
rdr on $ext_if_m proto tcp from any to any port 45678 -> 192.168.1.3

block in
pass out

pass quick on $int_if no state
antispoof quick for { lo $int_if }

pass in on $ext_if_b proto tcp to ($ext_if_b) port ssh
pass in on $ext_if_m proto tcp to ($ext_if_m) port ssh
pass in on $ext_if_m proto tcp from any to any port 2200
pass in on $ext_if_m proto tcp from any to any port 45678
pass in on $ext_if_m inet proto icmp from any to ($ext_if_m) icmp-type echoreq
pass in on $ext_if_b inet proto icmp from any to ($ext_if_b) icmp-type echoreq

я в упор непонимаю почему не пашет перенаправление портов.
если убрать всю секцию фильтрации – то пашет.

One Comment

  1. bsd says:

    Скорее всего намудрил именно с фильтрами.
    Сделай так:
    set loginterface pflog0
    block in поменяй на block in log all

    Дальше запускай: tcpdump -ttt -n -v -i pflog0

    И ломись на перенаправлятор, думаю что вопросы отпадут.

Leave a Reply

*

Powered by WordPress Classic II theme by Michael Hampton