[FUGSPBR] firewall

[Márcio Luciano Donada]

Bom Dia, Moises
Pode nos passar as regras que estão no seu KERNEL sobre o ipfw e o rc.conf
também?


Abraço,
Márcio
> Boa tarde a todos!
>
> Cenario  :
> gateway : FreeBsd 4.2 com duas placas de rede
>
> ed0 : ip valido x.x.x.x
> ed1 : 10.0.0.49:255.255.255.0
>
> firewall: fechado por padrao
>
> /sbin/ipfw -q -f flush
>                 -q add 00100 check-state
>                  -q add 00200 divert natd all from any to any via ed0
>                  -q add 00300 allow ip from any to any via lo0
>                   -q add 00400 allow ip from any to any via ed1
>                   -q add 00500 allow tcp from x.x.x.x to any out xmit ed0
> setup
>                    -q add 00600 allow tcp from any to any via ed0
> established
>                     -q add 00650 allow icmp frfom any to any in icmptyes 0
>                     -q add 00700 allow icmp from x.x.x.x to any out
> icmptypes 8
>                      -q add 00800 allow udp from x.x.x.x to any keep-state
>
>                      -q add 0090 deny udp from any to any keep-state
>
> duvidas:
> 1)nao consiguo pingar das estacoes
> 2) onde colocar regras(abaixo) para divisao de banda? Este ip eo valido ou
o
> da rede interna?dica dada pelo Gamk
>
> ipfw add queue 1 ip from any to 192.168.0.0/24 in
> ipfw add queue 1 ip from 192.168.0.0/24 to any out
> ipfw queue 1 config weight 10 pipe 1 mask dst-ip 0x000000ff
> ipfw pipe 1 config bw 64Kbit/s
> ipfw queue 2 config weight 10 pipe 2 mask src-ip 0x000000ff
> ipfw pipe 2 config bw 64Kbit/s
>
>
>
> _______________________________________________________________
> Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr
> Historico: http://www4.fugspbr.org/lista/html/FUG-BR/
>
>

_______________________________________________________________
Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/