OpenForum RSS: PF �� rdr �� (((

PF �� rdr �� ((( (nicola14753)

Mon, 27 Sep 2010 13:08:02 GMT

>[�� ]
>>
>>pass out on $ext_if proto {udp icmp } to any keep state
>>
>>
>>�� (((
>
>�� $terminal �� users? �� ,
>�� - �� . ��
>��
>��

��
nat on $int_if from any to $terminal port rdp -> $int_if

PF �� rdr �� ((( (��_�)

Tue, 21 Sep 2010 14:56:59 GMT

>[�� ]
># �� .
>pass out on $ext_if proto { tcp udp icmp } to any
>modulate state
>��
>pass out on $ext_if proto { tcp } to any modulate state
>
>pass out on $ext_if proto {udp icmp } to any keep state
>
>
>�� (((

�� $terminal �� users? �� , �� - �� . ��

PF �� rdr �� ((( (nicola14753)

Tue, 21 Sep 2010 11:06:26 GMT

��
# �� tcp, udp � icmp �� (��) ��.
# tcp �� , udp/icmp ��
# �� .
pass out on $ext_if proto { tcp udp icmp } to any modulate state
��
pass out on $ext_if proto { tcp } to any modulate state
pass out on $ext_if proto {udp icmp } to any keep state

�� (((

PF �� rdr �� ((( (nicola14753)

Tue, 21 Sep 2010 08:57:29 GMT

>>pass in log on $ext_if proto tcp from any to $terminal port rdp flags S/SA synproxy state
>
>�� $int_if
>pass out on $int_if inet proto tcp from any to $terminal port
>rdp

��

all udp 192.168.1.255:137 <- 192.168.1.198:137 NO_TRAFFIC:SINGLE
all tcp 192.168.1.77:22 <- 192.168.1.79:3542 ESTABLISHED:ESTABLISHED
all udp 192.168.1.255:137 <- 192.168.1.8:137 NO_TRAFFIC:SINGLE
all udp 192.168.1.255:137 <- 192.168.1.136:137 NO_TRAFFIC:SINGLE
all udp 192.168.1.255:137 <- 192.168.1.175:137 NO_TRAFFIC:SINGLE
all udp 192.168.1.255:138 <- 192.168.1.12:138 NO_TRAFFIC:SINGLE
all tcp 192.168.1.79:3389 <- 85.113.204.19:3389 <- 217.15.140.70:61525 PROXY:DST
all tcp 217.15.140.70:61525 -> 192.168.1.79:3389 SYN_SENT:CLOSED
all udp 192.168.1.255:137 <- 192.168.1.87:137 NO_TRAFFIC:SINGLE
all udp 192.168.1.255:138 <- 192.168.1.143:138 NO_TRAFFIC:SINGLE
all udp 192.168.1.255:138 <- 192.1

PF �� rdr �� ((( (guest)

Tue, 21 Sep 2010 07:57:45 GMT

>pass in log on $ext_if proto tcp from any to $terminal port rdp flags S/SA synproxy state

�� $int_if
pass out on $int_if inet proto tcp from any to $terminal port rdp

PF �� rdr �� ((( (Ingoa)

Tue, 21 Sep 2010 06:05:40 GMT

# �� tcp, udp � icmp �� (��) ��.
# tcp �� , udp/icmp ��
# �� .
pass out on $ext_if proto { tcp udp icmp } to any modulate state

�� , �� . ��-�� , � 6.4 modulate state �� tcp-��. �� icmp � udp �� keep state. �� , ��

PF �� rdr �� ((( (Ingoa)

Tue, 21 Sep 2010 06:00:40 GMT

>>
>>��
>>- pass in log on $ext_if proto tcp from any to $terminal
>>port rdp flags S/SA synproxy state
>>+ pass in log on $ext_if proto tcp from any to $terminal
>>port rdp flags S/SA modulate state
>
>��
>

�� ... �� -�� - �� http ��

ext_if="em1"
int_if="em0"
internal_net="192.168.1.0/24"
...
rdr on $ext_if inet proto tcp from any to ($ext_if) port 8888 -> \
192.168.1.134 port 80
...
pass in quick on $ext_if inet proto tcp from any \
to 192.168.1.134 port 80 keep state
...
pass out on $int_if inet proto tcp from any to $internal_net modulate state
pass out on $int_if inet proto { udp, icmp } from any to $internal_net keep state
...
�� . �� 6.4
�� block all

PF �� rdr �� ((( (sage444)

Tue, 21 Sep 2010 05:44:50 GMT

>rdr on $ext_if proto tcp from any to any port rdp -> $terminal

�� to ($ext_if)

>pass in log on $ext_if proto tcp from any to $terminal port rdp flags S/SA synproxy state

� �� to $terminal ��-�� , �� to ($ext_if)

PF �� rdr �� ((( (nicola14753)

Tue, 21 Sep 2010 03:48:37 GMT

>
>��
>- pass in log on $ext_if proto tcp from any to $terminal
>port rdp flags S/SA synproxy state
>+ pass in log on $ext_if proto tcp from any to $terminal
>port rdp flags S/SA modulate state

��

serv# pfctl -ss
No ALTQ support in kernel
ALTQ related functions disabled
all tcp 127.0.0.1:3128 <- 93.191.13.103:80 <- 192.168.1.79:1030 TIME_WAIT:TIME_WAIT
all udp 192.168.1.255:137 <- 192.168.1.182:137 NO_TRAFFIC:SINGLE
all tcp 192.168.1.77:22 <- 192.168.1.79:1051 ESTABLISHED:ESTABLISHED
all tcp 127.0.0.1:3128 <- 93.191.13.103:80 <- 192.168.1.79:1061 ESTABLISHED:ESTABLISHED
all tcp 85.113.204.19:21033 -> 93.191.13.103:80 ESTABLISHED:ESTABLISHED
all udp 192.168.1.255:137 <- 192.168.1.180:137 NO_TRAFFIC:SINGLE
all udp 192.168.1.255:137 <- 192.168.1.162:137 NO_TRAFFIC:SINGLE
all udp 192.168.1.255:137 <- 192.168.1.139:137 NO_TRAFFIC:SINGLE
all udp 192.168.1.255:138 <- 192.168.1.34:138 NO_

OpenForum RSS: PF �� �������� rdr ������ (((

PF �� �������� rdr ������ ((( (nicola14753)

PF �� �������� rdr ������ ((( (������_�)

PF �� �������� rdr ������ ((( (nicola14753)

PF �� �������� rdr ������ ((( (nicola14753)

PF �� �������� rdr ������ ((( (guest)

PF �� �������� rdr ������ ((( (Ingoa)

PF �� �������� rdr ������ ((( (Ingoa)

PF �� �������� rdr ������ ((( (sage444)

PF �� �������� rdr ������ ((( (nicola14753)

OpenForum RSS: PF �� rdr �� (((

PF �� rdr �� ((( (nicola14753)

PF �� rdr �� ((( (��_�)

PF �� rdr �� ((( (nicola14753)

PF �� rdr �� ((( (nicola14753)

PF �� rdr �� ((( (guest)

PF �� rdr �� ((( (Ingoa)

PF �� rdr �� ((( (Ingoa)

PF �� rdr �� ((( (sage444)

PF �� rdr �� ((( (nicola14753)