[FUGSPBR] firewall

[Moises Duque]

Bom dia, obrigado pela atencao.
Segue as opcaoes do kernel

options IPFIREWALL
            IPFIREWALL_VERBOSE
            IPFIREWALL_FORWARD
            IPFIREWALL_VERBOSE_LIMIT=10
            IPDIVERT
            IPSTEALTH
            DUMMYNET

----- Original Message ----- 
From: "Márcio Luciano Donada" <marcio em sl.unochapeco.rct-sc.br>
To: "Grupo Brasileiro de Usuarios FreeBSD" <fugspbr em fugspbr.org>
Sent: Friday, October 24, 2003 7:21 AM
Subject: Re: [FUGSPBR] firewall


> Bom Dia, Moises
> Pode nos passar as regras que estão no seu KERNEL sobre o ipfw e o rc.conf
> também?
>
>
> Abraço,
> Márcio
> > Boa tarde a todos!
> >
> > Cenario  :
> > gateway : FreeBsd 4.2 com duas placas de rede
> >
> > ed0 : ip valido x.x.x.x
> > ed1 : 10.0.0.49:255.255.255.0
> >
> > firewall: fechado por padrao
> >
> > /sbin/ipfw -q -f flush
> >                 -q add 00100 check-state
> >                  -q add 00200 divert natd all from any to any via ed0
> >                  -q add 00300 allow ip from any to any via lo0
> >                   -q add 00400 allow ip from any to any via ed1
> >                   -q add 00500 allow tcp from x.x.x.x to any out xmit
ed0
> > setup
> >                    -q add 00600 allow tcp from any to any via ed0
> > established
> >                     -q add 00650 allow icmp frfom any to any in icmptyes
0
> >                     -q add 00700 allow icmp from x.x.x.x to any out
> > icmptypes 8
> >                      -q add 00800 allow udp from x.x.x.x to any
keep-state
> >
> >                      -q add 0090 deny udp from any to any keep-state
> >
> > duvidas:
> > 1)nao consiguo pingar das estacoes
> > 2) onde colocar regras(abaixo) para divisao de banda? Este ip eo valido
ou
> o
> > da rede interna?dica dada pelo Gamk
> >
> > ipfw add queue 1 ip from any to 192.168.0.0/24 in
> > ipfw add queue 1 ip from 192.168.0.0/24 to any out
> > ipfw queue 1 config weight 10 pipe 1 mask dst-ip 0x000000ff
> > ipfw pipe 1 config bw 64Kbit/s
> > ipfw queue 2 config weight 10 pipe 2 mask src-ip 0x000000ff
> > ipfw pipe 2 config bw 64Kbit/s
> >
> >
> >
> > _______________________________________________________________
> > Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr
> > Historico: http://www4.fugspbr.org/lista/html/FUG-BR/
> >
> >
>
> _______________________________________________________________
> Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr
> Historico: http://www4.fugspbr.org/lista/html/FUG-BR/
>

_______________________________________________________________
Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/