Исходное сообщение
"ipfw natd все бегает, а вот с внешней стороны тормоза" Отправлено dicty, 16-Дек-09 09:06
>ipfw -a list >покажи 00100  13086 25217038 allow ip from any to any via lo0 00200      0        0 deny ip from any to 127.0.0.0/8 00300      0        0 deny ip from 127.0.0.0/8 to any 00400      0        0 skipto 10000 ip from 192.168.1.0/24 to 195.138.72.210 dst-port 25 00500   2146  2848772 allow ip from me to any dst-port 25 00600   3391   559728 allow ip from 192.168.0.0/16 to 192.168.0.0/16 00700      0        0 deny ip from 192.168.0.0/16 to not me dst-port 25 00800      2      656 deny ip from 192.168.1.0/24 to any in via em0 00900      0        0 deny ip from 195.138.72.208/30 to any in via em1 01000    165    30888 deny ip from any to 10.0.0.0/8 via em0 01100      0        0 deny ip from any to 172.16.0.0/12 via em0 01200      0        0 deny ip from any to 192.168.0.0/16 via em0 01300      0        0 deny ip from any to 0.0.0.0/8 via em0 01400      0        0 deny ip from any to 169.254.0.0/16 via em0 01500      0        0 deny ip from any to 192.0.2.0/24 via em0 01600      0        0 deny ip from any to 224.0.0.0/4 via em0 01700      5     1652 deny ip from any to 240.0.0.0/4 via em0 01800      0        0 deny log ip from any to not me dst-port 445 01900      0        0 deny log ip from not me to any dst-port 445 02000      0        0 deny log ip from any to not me dst-port 135 02100      6      360 deny log ip from not me to any dst-port 135 02200      0        0 deny log ip from any to not me dst-port 137-139 02300     12      576 deny log ip from not me to any dst-port 137-139 09000   4724   928319 fwd 127.0.0.1,3128 tcp from 192.168.1.0/24 to any dst-port 80 out via em0 10000 130084 28895942 divert 8668 ip from any to any via em0 10100      0        0 deny ip from 10.0.0.0/8 to any via em0 10200      0        0 deny ip from 172.16.0.0/12 to any via em0 10300      0        0 deny ip from 192.168.0.0/16 to any via em0 10400      0        0 deny ip from 0.0.0.0/8 to any via em0 10500      0        0 deny ip from 169.254.0.0/16 to any via em0 10600      0        0 deny ip from 192.0.2.0/24 to any via em0 10700      0        0 deny ip from 224.0.0.0/4 to any via em0 10800      0        0 deny ip from 240.0.0.0/4 to any via em0 10900  73255 28473968 allow tcp from any to any established 11000      0        0 allow ip from any to any frag 11100  68701  7008359 allow ip from any to any 11200      0        0 allow tcp from any to 195.138.72.210 dst-port 25 setup 11300      0        0 allow tcp from any to 195.138.72.210 dst-port 53 setup 11400      0        0 allow udp from any to 195.138.72.210 dst-port 53 11500      0        0 allow udp from 195.138.72.210 53 to any 11600      0        0 allow tcp from any to 195.138.72.210 dst-port 80 setup 11700      0        0 deny log tcp from any to any in via em0 setup 11800      0        0 allow tcp from any to any setup 11900      0        0 allow udp from 195.138.72.210 to any dst-port 53 keep-state 12000      0        0 allow udp from 195.138.72.210 to any dst-port 123 keep-state 65535      0        0 deny ip from any to any