Исходное сообщение
"divert_packet: no divert tag" Отправлено Kris, 17-Ноя-06 22:02
> >>Не помогло .... все равно валится >>divert_packet: no divert tag > >Ну чтож пора опять взглянуть на твои правила ... >Покажи ещё раз что у тебя теперь в правилах Еще раз :))) #!/bin/sh #Quietly flush out rules /sbin/ipfw -q -f flush #Set command prefix (add "-q" option after development to turn on quiet mode) cmd="/sbin/ipfw add" # set outside and inside network interfaces oif="vlanХ" iif="vlanY" # set private IP of this server and the netmask of the whole LAN side $cmd allow ip from any to any via lo0 $cmd  deny ip from any to 127.0.0.0/8 $cmd deny log ip from 127.0.0.0/8 to any        $cmd deny log tcp from any to any in tcpflags fin,psh,urg recv $oif # NULL scan (no flag set at all)          $cmd deny log tcp from any to any in tcpflags !fin,!syn,!rst,!psh,!ack,!urg recv $oif # SYN flood (SYN,FIN)          $cmd  deny log tcp from any to any in tcpflags syn,fin recv $oif # Stealth FIN scan (FIN,RST)          $cmd deny log tcp from any to any in tcpflags fin,rst recv $oif # forced packet routing          $cmd deny log ip from any to any in ipoptions ssrr,lsrr,rr,ts recv $oif      $cmd add pass all from me to any via $oif #HTTP          $cmd allow tcp from any to any 80 in via $oif #SSH          $cmd allow tcp from any to any 22 in via $oif #FTP          $cmd allow ip from any to any 20 in via $oif          $cmd allow ip from any to any 21 in via $oif          $cmd allow tcp from any 21 to any out via $oif #OPENVPN      $cmd allow udp from any to any 1194 in via $oif #POP3      $cmd allow tcp from any to any 110 in via $oif setup #SMTP         $cmd allow tcp from any to any 25 in via $oif         $cmd divert natd all from 192.168.1.96/28 to any via $oif     $cmd divert natd all from 192.168.1.33 to any via $oif     $cmd divert natd all from 192.168.1.56 to any via $oif     $cmd divert natd all from 192.168.1.41 to any via $oif     $cmd divert natd all from 192.168.1.13 to any via $oif     $cmd divert natd all from any to me in via $oif          $cmd check-state         $cmd allow all from any to any via $iif keep-state         $cmd allow all from any to any out via $oif keep-state $cmd allow icmp from any to any icmptypes 3 $cmd allow icmp from any to any icmptypes 4 $cmd allow icmp from any to any icmptypes 11 in $cmd allow icmp from any to any icmptypes 8 $cmd allow icmp from any to any icmptypes 0 in $cmd allow log tcp from any to any 3389,58585,58586 in setup $cmd allow tcp from any to any 3389,58585,58586 in $cmd allow ip from any to $inside 58586 in via $oif $cmd 65000 deny log all from any to any