OpenForum RSS: �� PF �� VPN-��

�� PF �� VPN-�� (SHRDLU)

Wed, 09 Mar 2011 05:17:57 GMT

> �� ng �� ?

��? �� :)))
�� .
�� - �� , �� top ��:

last pid: 89313; load averages: 0.04, 0.06, 0.02 up 28+19:04:09 08:15:45
43 processes: 1 running, 42 sleeping
CPU: 0.0% user, 0.0% nice, 0.2% system, 0.0% interrupt, 99.8% idle
Mem: 23M Active, 266M Inact, 144M Wired, 92K Cache, 110M Buf, 555M Free
Swap: 1996M Total, 1996M Free

�� PF �� VPN-�� (borin)

Mon, 28 Feb 2011 11:01:18 GMT

>[�� ]
> anchor "ng-int/*"
> ��, �� :
> # less if-up.sh
> #!/bin/sh
> echo "pass quick on $1 all" | pfctl -a ng-int/$1 -f -
> # less if-down.sh
> #!/bin/sh
> pfctl -a ng-int/$1 -F rules
> IMHO, � �� PF �� ޣ��, ��
> ��...

�� ng �� ?

�� PF �� VPN-�� (SHRDLU)

Fri, 10 Dec 2010 05:04:21 GMT

> �� :
> �� pf.conf � pf_vpn.conf (��
> ng0)
> � rc.conf �� pf.conf.
> �� , � mpd �� , � up: pfctl -f
> /etc/pf_vpn.conf, � down: pfctl -f /etc/pf.conf

� �� ng* �� ?

�� PF �� VPN-�� (Mick)

Thu, 09 Dec 2010 14:56:46 GMT

�� :
�� pf.conf � pf_vpn.conf (�� ng0)
� rc.conf �� pf.conf.
�� , � mpd �� , � up: pfctl -f /etc/pf_vpn.conf, � down: pfctl -f /etc/pf.conf

�� PF �� VPN-�� (SHRDLU)

Mon, 13 Apr 2009 09:31:28 GMT

>�� mpd.conf?

�� ...

startup:

default:
load pptp_server0

pptp_server0:
# Define dynamic IP address pool.
set ippool add pool1 10.0.9.3 10.0.9.254

# Create clonable bundle template named B
create bundle template B
set iface enable proxy-arp
set iface idle 1800
set iface enable tcpmssfix
# Add PF rules to ng*
set iface up-script /usr/local/etc/mpd5/if-up.sh
set iface down-script /usr/local/etc/mpd5/if-down.sh
set ipcp yes vjcomp
# Specify IP address pool for dynamic assigment.
set ipcp ranges 10.0.9.2/32 ippool pool1
set ipcp dns 10.0.0.2
set ipcp nbns 10.0.0.18
# The five lines below enable Microsoft Point-to-Point encryption
# (MPPE) using the ng_mppc(8) netgraph node type.
set bundle enable compression
set ccp yes mppc
set mppc yes e40
set mppc yes e128
set mppc yes stateless
# Create clonable link template na

�� PF �� VPN-�� (artemrts)

Mon, 13 Apr 2009 09:22:27 GMT

>[�� ]
>#
># Add some rules to firewall
>#
>echo "block quick on $1 from any to !10.0.0.0/8" > /usr/local/etc/mpd5/$1;
>echo "pass quick on $1 all" >> /usr/local/etc/mpd5/$1;
>pfctl -a ng-int/$1 -f /usr/local/etc/mpd5/$1;
>rm -f /usr/local/etc/mpd5/$1;
>#
># Done
>#

��, ��, �� Incorrect context for: 'set iface up-script /usr/local/etc/mpd5/if-up.sh'.
�� mpd.conf?

�� PF �� VPN-�� (SHRDLU)

Mon, 13 Apr 2009 09:02:57 GMT

> ��, � � �� mpd �� if-up ��,

��, �ӣ �� .
�� "��" ��:

#!/bin/sh
#
# VPN Interface Up Script
#
# Script is called like this:
#
# script interface proto local-ip remote-ip authname
# $1 $2 $3 $4 $5
#
# Add some rules to firewall
#
echo "block quick on $1 from any to !10.0.0.0/8" > /usr/local/etc/mpd5/$1;
echo "pass quick on $1 all" >> /usr/local/etc/mpd5/$1;
pfctl -a ng-int/$1 -f /usr/local/etc/mpd5/$1;
rm -f /usr/local/etc/mpd5/$1;
#
# Done
#

�� PF �� VPN-�� (artemrts)

Mon, 13 Apr 2009 08:52:22 GMT

>[�� ]
>#!/bin/sh
>echo "pass quick on $1 all" | pfctl -a ng-int/$1 -f -
>
>
># less if-down.sh
>#!/bin/sh
>pfctl -a ng-int/$1 -F rules
>
>IMHO, � �� PF �� ޣ��, ��
>��...

��, � � �� mpd �� if-up ��, � ��
Apr 13 09:27:42 server mpd: mpd.conf:50: Incorrect context for: 'set iface up-script /usr/local/etc/mpd5/if-up.sh'
�� mpd ��, �� PF �� :-(.

�� PF �� VPN-�� (SHRDLU)

Wed, 12 Mar 2008 04:11:11 GMT

��-�� . �� . ��, �� :

anchor "ng-int/*"

��, �� :

# less if-up.sh
#!/bin/sh
echo "pass quick on $1 all" | pfctl -a ng-int/$1 -f -

# less if-down.sh
#!/bin/sh
pfctl -a ng-int/$1 -F rules

IMHO, � �� PF �� ޣ��, �� ...

OpenForum RSS: ������� ��� ���������� ������ PF ��� ����������� VPN-�������

������� ��� ���������� ������ PF ��� ����������� VPN-������� (SHRDLU)

������� ��� ���������� ������ PF ��� ����������� VPN-������� (borin)

������� ��� ���������� ������ PF ��� ����������� VPN-������� (SHRDLU)

������� ��� ���������� ������ PF ��� ����������� VPN-������� (Mick)

������� ��� ���������� ������ PF ��� ����������� VPN-������� (SHRDLU)

������� ��� ���������� ������ PF ��� ����������� VPN-������� (artemrts)

������� ��� ���������� ������ PF ��� ����������� VPN-������� (SHRDLU)

������� ��� ���������� ������ PF ��� ����������� VPN-������� (artemrts)

������� ��� ���������� ������ PF ��� ����������� VPN-������� (SHRDLU)

OpenForum RSS: �� PF �� VPN-��

�� PF �� VPN-�� (SHRDLU)

�� PF �� VPN-�� (borin)

�� PF �� VPN-�� (SHRDLU)

�� PF �� VPN-�� (Mick)

�� PF �� VPN-�� (SHRDLU)

�� PF �� VPN-�� (artemrts)

�� PF �� VPN-�� (SHRDLU)

�� PF �� VPN-�� (artemrts)

�� PF �� VPN-�� (SHRDLU)