Исходное сообщение
"Freebsd84 ipfw+squid - Проблема с натом с почтой" Отправлено vladkic, 23-Июн-15 06:16
> Покажите ipfw sh # ipfw -a list 00005       0          0 check-state 00010  166696   29233680 allow ip from any to any via lo0 00020       0          0 deny ip from any to 127.0.0.0/8 00030       0          0 deny ip from 127.0.0.0/8 to any 00045 6415962 5598536751 allow ip from any to any established 00047     382      29256 allow icmp from 192.168.0.0/24 to any keep-state 00048      50       2520 allow ip from 192.168.0.0/24 to any dst-port 25 out via igb1 setup keep-state 00049     955      48132 allow ip from 192.168.0.0/24 to any dst-port 995 out via igb1 setup keep-state 00400       0          0 deny ip from any to ::1 00500       0          0 deny ip from ::1 to any 00550     177      13806 deny ip from me to any dst-port 137-139,445 out via igb1 01000    1105      55692 allow ip from 192.168.0.0/24 to any out via igb1 keep-state 01300       0          0 deny ip from any to 172.16.0.0/16 in via igb1 01555       0          0 deny ip from 192.168.0.0/24 to any in via igb1 01600       0          0 deny ip from any to 169.254.0.0/16 in via igb1 01650       0          0 deny ip from any to 224.0.0.0/8 in via igb1 01700       0          0 deny ip from any to 240.0.0.0/8 in via igb1 01800       0          0 deny icmp from any to any frag 01810       6        256 allow tcp from any to any dst-port 25 via igb1 01820       0          0 allow tcp from any 25 to any via igb1 01850       0          0 deny tcp from 192.168.0.0/24 to any dst-port 80 out via igb1 01860       0          0 deny tcp from 192.168.0.0/24 to any dst-port 443 out via igb1 01900       0          0 deny log logamount 200 icmp from any to 255.255.255.255 in via igb1 02000       0          0 deny log logamount 200 icmp from any to 255.255.255.255 out via igb1 02150   12296     824413 divert 8668 ip from any to any via igb1 02400       0          0 deny ip from 172.16.0.0/16 to any out via igb1 02700       0          0 deny ip from 169.254.0.0/16 to any out via igb1 02800       0          0 deny ip from 224.0.0.0/4 to any out via igb1 02900       0          0 deny ip from 240.0.0.0/4 to any out via igb1 03000       0          0 allow ip from any to any established 03100  974945  628926121 allow ip from me to any out xmit igb1 keep-state 03150       0          0 allow udp from 192.168.0.0/24 to 8.8.8.8 dst-port 53 out via igb1 keep-state 03300       0          0 allow udp from 8.8.8.8 53 to 192.168.0.0/24 in via igb1 established 03400       0          0 allow udp from 192.168.0.0/24 to any dst-port 53 out via igb1 established 03600       0          0 allow tcp from any to any dst-port 20,21 out via igb1 03700       4        160 allow tcp from any to a.b.c.d dst-port 49152-65535 via igb1 03800       8        634 allow icmp from any to any icmptypes 0,8,11 03900       0          0 allow tcp from any to a.b.c.d dst-port 22 via igb1 03910  299897   37429734 allow ip from any to 192.168.0.0/24 in via igb0 03920  286860   28291872 allow ip from 192.168.0.0/24 to any out via igb0 03930       0          0 allow ip from any to any established 03950    2063     401601 allow ip from any to any via igb0 10000     481      21616 deny log logamount 200 tcp from any to a.b.c.d in via igb1 setup 65530     485      69019 deny log logamount 200 ip from any to any 65535  895701   64933042 deny ip from any to any