我用4.10的環境下設定Ipfilter+IPNAT.. 底下用虛擬ip的電腦開網頁,telnet都沒有問題.. 但是卻沒有辦法用ftp軟體或IE來登入 ftp 站台... >"< 以下是我的一些設定...請各位高手幫我看一下我那邊的設定出了問題..@"@ (對內網卡是 vr0 對外網卡是 dc0) ======================================================================= ipnat.rules map dc0 192.168.0.0/24 -> 0/32 portmap tcp/udp auto map dc0 192.168.0.0/24 -> 0/32 ipnat.conf map dc0 192.168.0.0/24 -> 12.34.56.78/32 ^^^^^^^^^^^ 對外的ip ======================================================================= ipf.rules # 過濾非法封包。 block in quick log quick all with short block in quick log quick all with ipopts # # 同意封包由WAN網卡fxp0介面及localhost介面lo0自由進出。 pass in quick on vr0 all pass out quick on vr0 all pass in quick on dc0 all pass out quick on dc0 all # # 杜絕網際網路上的私有協定的IP封包，阻絕所有私有IP封包進入WAN網卡fxp0這張介面 block in quick on dc0 from 192.168.0.0/16 to any block in quick on dc0 from 172.16.0.0/12 to any block in quick on dc0 from 10.0.0.0/8 to any block in quick on dc0 from 127.0.0.0/8 to any block in quick on dc0 from 192.0.2.0/24 to any # # 阻絕所有封包進入LAN網卡中的de1介面。 # block in quick log on vr0 all # block out quick log on vr0 all # # 同意出去LAN網卡中的de1介面所有tcp/udp封包皆可通行。 pass out quick log on vr0 proto tcp/udp from any to any keep state # # 同意進出LAN網卡中的de1介面所有icmp封包皆可通行。 pass in quick log on vr0 proto icmp all keep state pass out quick log on vr0 proto icmp all keep state # # 同意進入LAN網卡中的de1介面，對特定的通訊協定port開放。 pass in quick on vr0 proto tcp/udp from any to any port = 53 keep state pass in quick on vr0 proto tcp/udp from any to any port = 20 keep state pass in quick on vr0 proto tcp/udp from any to any port = 21 keep state pass in quick on vr0 proto tcp/udp from any to any port = 22 keep state pass in quick on vr0 proto tcp/udp from any to any port = 65 keep state pass in quick on vr0 proto tcp/udp from any to any port = 71 keep state pass in quick on vr0 proto tcp/udp from any to any port = 74 keep state pass in quick on vr0 proto tcp/udp from any to any port = 3128 keep state pass in quick on vr0 proto tcp from any to any port = 23 keep state pass in quick on vr0 proto tcp from any to any port = 22 keep state pass in quick on vr0 proto tcp from any to any port = 25 keep state pass in quick on vr0 proto tcp from any to any port = 110 keep state pass in quick on vr0 proto tcp/udp from any to any port = 139 keep state pass in quick on vr0 proto tcp from any to any port = 80 keep state pass in quick on vr0 proto tcp from any to any port = 443 keep state pass in quick on vr0 proto tcp/udp from any to any port = 445 keep state pass in quick on vr0 proto tcp from any to any port = 8000 keep state ========================================================================= -- ╲ ▇▆▅ ▅▆▇ * ▋◥◣▁▁◢◤▌ ◤ ◥ * ▍ ∩ ◢▼◣ ∩ ▋ ／ ▄▅≡ ▆ ≡▅▄ ◣ ◢ -- ◤◥ Origin: 大頭新站˙大頭傑克的BBS dato.et.tku.edu.tw ◣◢ Author: gungolin 從 localhost 發表