我参考了上奇出版的Absoulate OpenBSD的作法 作了一个家用的NAT(两张网路卡) 设定如下： ****************************************************************************** ext_if="rl1" int_if="rl0" private_ip="{10.0.0.0/8,172.16.0.0/12,192.168.0.0/16}" block_ip="12.34.56.78" allow_dest="{5999,http,https,smtp,sftp}" allow_locl="{http,https,imap,imaps,pop2,pop3,pop3s,ssh,sftp,smtp}" scrub in all nat on $ext_if from $private_ip to any -> $ext_if block in log all pass in on $int_if inet from $private_ip to any modulate state pass in on $ext_if inet proto tcp from any to $ext_if port $allow_locl keep state pass in on $ext_if inet proto tcp from any port $allow_dest to $ext_if keep state block in on $int_if inet from $block_ip to any antispoof for $ext_if antispoof for $int_if ****************************************************************************** 为了要作到挡掉某个外部的实体IP进内部的私人IP 可是这样作似乎作不到我要的样子 所以请问各位大大，该怎样去设定相关的属性或数值 先谢谢将提出解答的大大了^^ -- ╭┼ Origin: 致远心情 telnet://bbs.dwu.edu.tw ┼╯ From: h204-61-59-44.seed.net.tw