Как разрешить работу icq для всех пользователей сети?
Вот конфиг pf:
ext_if="fxp2" # replace with actual external interface name i.e., dc0
int_if="fxp1" # replace with actual internal interface name i.e., dc1
int_net="192.168.1.0/24"
udp_services="{domain, ntp}"
client_out="{ftp_data, ftp, ssh, domain, pop3, auth, nntp, https, 5190, 443, 446, cvspserver, 2628, cvsup, 8000, 8080}"
rdr on $int_if proto tcp from $int_net to any port 80 -> 127.0.0.1 port 3128
nat on $ext_if from $int_net to any -> ($ext_if)
block all
pass from {lo, $int_if} to any keep state
#Для ВПН
pass out on $ext_if inet proto tcp from any to any port 1723 flags S/SA keep state
pass out on $ext_if inet proto {udp, icmp, gre} all keep state
pass in on $ext_if inet proto tcp from any to any port 1723 flags S/SA keep state
pass in on $ext_if inet proto {udp, icmp, gre} all keep state
pass inet proto tcp from $int_if to any port $client_out flags S/SA keep state
pass in inet proto tcp from any to any port ssh
pass quick inet proto {tcp, udp} to any port $udp_services keep state
|
Вариант для распечатки
Информационная безопасность (Public)
on 14-Дек-05, 12:45 
