Исходное сообщение
"еще одна проблема.o\  Теперь ipfw+natd (failed to write packet back) " Отправлено nn, 28-Май-05 14:43
никак не могу разобраться с натд.. помогите, плз, что я криво написал в правилах? --- natd --- magnit-gw# /sbin/natd -v -f /etc/natd.conf -n fxp1                       natd[1191]: Aliasing to 217.115.82.249, mtu 1500 bytes                   Out [TCP]  [TCP] 192.168.10.131:1075 -> 194.67.57.26:25 aliased to                  [TCP] 217.external.xxx.xxx:1075 -> 194.67.57.26:25              natd: failed to write packet back: Permission denied                     Out [TCP]  [TCP] 192.168.10.131:1075 -> 194.67.57.26:25 aliased to                  [TCP] 217.external.xxx.xxx:1075 -> 194.67.57.26:25              natd: failed to write packet back: Permission denied                     --- end natd output --- --- /usr/local/etc/rc.d/fw.sh --- #!/bin/sh #JE - FireWall rule set fw1="/sbin/ipfw add 10" fw2="/sbin/ipfw add 100" jeif="fxp0"  #Внутренний интерфейс 1 - не интересует пока intif="rl0"  #Внутренний интерфейс 2 extif="fxp1" #Внешний интерфейс jeaddr_m="192.168.10.0/24" intaddr_m="192.168.224.0/27" extaddr_m="217.external.xxx.xxx/30" hiports="1025-65535" /sbin/ipfw add 1 pass all from any to any /sbin/ipfw del 10 /sbin/ipfw del 100 $fw1 pass tcp from any to me 22 via fxp0 $fw1 pass tcp from me 22 to any via fxp0 $fw1 deny tcp from any to me 22 /sbin/ipfw del 1 $fw2 pass all from any to any via lo0 $fw2 deny all from 127.0.0.1/8 to any $fw2 deny all from any to 127.0.0.1/8 $fw2 deny all from $jeaddr_m to any in recv $extif $fw2 deny all from $intaddr_m to any in recv $extif $fw2 deny tcp from any 137,135,445 to any in recv $extif $fw2 deny tcp from any to any 135,137,445 in recv $extif $fw2 pass all from $jeaddr_m to any in recv $jeif $fw2 pass all from any to $jeaddr_m out xmit $jeif $fw2 pass all from $intaddr_m to any in recv $intif $fw2 pass all from any to $intaddr_m out xmit $intif #$fw2 deny all from any to any via $jeif #$fw2 deny all from any to any via $intif $fw2 divert natd all from $intaddr_m to any out recv $intif xmit $extif $fw2 divert natd tcp from $jeaddr_m to any 25,110,143,5190,6667,6669 out recv $jeif xmit $extif $fw2 divert natd icmp from $jeaddr_m to any out recv $jeif xmit $extif $fw2 divert natd all from any to me in recv $extif $fw2 pass all from any to any --- eof ---

Ваше сообщение
Имя*:
EMail:	Для отправки новых сообщений в текущей нити на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email). Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.
Заголовок*:
Сообщение*:	> никак не могу разобраться с натд.. помогите, плз, что я криво написал > в правилах? > --- natd --- > magnit-gw# /sbin/natd -v -f /etc/natd.conf -n fxp1 > natd[1191]: Aliasing to 217.115.82.249, mtu 1500 bytes > Out [TCP] [TCP] 192.168.10.131:1075 -> 194.67.57.26:25 aliased to > [TCP] > 217.external.xxx.xxx:1075 -> 194.67.57.26:25 > natd: failed to write packet back: > Permission denied > Out [TCP] [TCP] 192.168.10.131:1075 -> 194.67.57.26:25 aliased to > [TCP] > 217.external.xxx.xxx:1075 -> 194.67.57.26:25 > natd: failed to write packet back: > Permission denied > --- end natd output --- > --- /usr/local/etc/rc.d/fw.sh --- > #!/bin/sh > #JE - FireWall rule set > fw1="/sbin/ipfw add 10" > fw2="/sbin/ipfw add 100" > jeif="fxp0" #Внутренний интерфейс 1 - не интересует пока > intif="rl0" #Внутренний интерфейс 2 > extif="fxp1" #Внешний интерфейс > jeaddr_m="192.168.10.0/24" > intaddr_m="192.168.224.0/27" > extaddr_m="217.external.xxx.xxx/30" > hiports="1025-65535" > /sbin/ipfw add 1 pass all from any to any > /sbin/ipfw del 10 > /sbin/ipfw del 100 > $fw1 pass tcp from any to me 22 via fxp0 > $fw1 pass tcp from me 22 to any via fxp0 > $fw1 deny tcp from any to me 22 > /sbin/ipfw del 1 > $fw2 pass all from any to any via lo0 > $fw2 deny all from 127.0.0.1/8 to any > $fw2 deny all from any to 127.0.0.1/8 > $fw2 deny all from $jeaddr_m to any in recv $extif > $fw2 deny all from $intaddr_m to any in recv $extif > $fw2 deny tcp from any 137,135,445 to any in recv $extif > $fw2 deny tcp from any to any 135,137,445 in recv $extif > $fw2 pass all from $jeaddr_m to any in recv $jeif > $fw2 pass all from any to $jeaddr_m out xmit $jeif > $fw2 pass all from $intaddr_m to any in recv $intif > $fw2 pass all from any to $intaddr_m out xmit $intif > #$fw2 deny all from any to any via $jeif > #$fw2 deny all from any to any via $intif > $fw2 divert natd all from $intaddr_m to any out recv $intif xmit > $extif > $fw2 divert natd tcp from $jeaddr_m to any 25,110,143,5190,6667,6669 out recv $jeif > xmit $extif > $fw2 divert natd icmp from $jeaddr_m to any out recv $jeif xmit > $extif > $fw2 divert natd all from any to me in recv $extif > $fw2 pass all from any to any > --- eof ---
	Введите код, изображенный на картинке: