我用4.10的环境下设定Ipfilter+IPNAT.. 底下用虚拟ip的电脑开网页,telnet都没有问题.. 但是却没有办法用ftp软体或IE来登入 ftp 站台... >"< 以下是我的一些设定...请各位高手帮我看一下我那边的设定出了问题..@"@ (对内网卡是 vr0 对外网卡是 dc0) ======================================================================= ipnat.rules map dc0 192.168.0.0/24 -> 0/32 portmap tcp/udp auto map dc0 192.168.0.0/24 -> 0/32 ipnat.conf map dc0 192.168.0.0/24 -> 12.34.56.78/32 ^^^^^^^^^^^ 对外的ip ======================================================================= ipf.rules # 过滤非法封包。 block in quick log quick all with short block in quick log quick all with ipopts # # 同意封包由WAN网卡fxp0介面及localhost介面lo0自由进出。 pass in quick on vr0 all pass out quick on vr0 all pass in quick on dc0 all pass out quick on dc0 all # # 杜绝网际网路上的私有协定的IP封包，阻绝所有私有IP封包进入WAN网卡fxp0这张介面 block in quick on dc0 from 192.168.0.0/16 to any block in quick on dc0 from 172.16.0.0/12 to any block in quick on dc0 from 10.0.0.0/8 to any block in quick on dc0 from 127.0.0.0/8 to any block in quick on dc0 from 192.0.2.0/24 to any # # 阻绝所有封包进入LAN网卡中的de1介面。 # block in quick log on vr0 all # block out quick log on vr0 all # # 同意出去LAN网卡中的de1介面所有tcp/udp封包皆可通行。 pass out quick log on vr0 proto tcp/udp from any to any keep state # # 同意进出LAN网卡中的de1介面所有icmp封包皆可通行。 pass in quick log on vr0 proto icmp all keep state pass out quick log on vr0 proto icmp all keep state # # 同意进入LAN网卡中的de1介面，对特定的通讯协定port开放。 pass in quick on vr0 proto tcp/udp from any to any port = 53 keep state pass in quick on vr0 proto tcp/udp from any to any port = 20 keep state pass in quick on vr0 proto tcp/udp from any to any port = 21 keep state pass in quick on vr0 proto tcp/udp from any to any port = 22 keep state pass in quick on vr0 proto tcp/udp from any to any port = 65 keep state pass in quick on vr0 proto tcp/udp from any to any port = 71 keep state pass in quick on vr0 proto tcp/udp from any to any port = 74 keep state pass in quick on vr0 proto tcp/udp from any to any port = 3128 keep state pass in quick on vr0 proto tcp from any to any port = 23 keep state pass in quick on vr0 proto tcp from any to any port = 22 keep state pass in quick on vr0 proto tcp from any to any port = 25 keep state pass in quick on vr0 proto tcp from any to any port = 110 keep state pass in quick on vr0 proto tcp/udp from any to any port = 139 keep state pass in quick on vr0 proto tcp from any to any port = 80 keep state pass in quick on vr0 proto tcp from any to any port = 443 keep state pass in quick on vr0 proto tcp/udp from any to any port = 445 keep state pass in quick on vr0 proto tcp from any to any port = 8000 keep state ========================================================================= -- ╲ ▇▆▅ ▅▆▇ * ▋◥◣▁▁◢◤▌ ◤ ◥ * ▍ ∩ ◢▼◣ ∩ ▋ ／ ▄▅≡ ▆ ≡▅▄ ◣ ◢ -- ◤◥ Origin: 大头新站˙大头杰克的BBS dato.et.tku.edu.tw ◣◢ Author: gungolin 从 localhost 发表