никак не могу разобраться с натд.. помогите, плз, что я криво написал в правилах?
--- natd ---
magnit-gw# /sbin/natd -v -f /etc/natd.conf -n fxp1
natd[1191]: Aliasing to 217.115.82.249, mtu 1500 bytes
Out [TCP] [TCP] 192.168.10.131:1075 -> 194.67.57.26:25 aliased to
[TCP] 217.external.xxx.xxx:1075 -> 194.67.57.26:25 natd: failed to write packet back: Permission denied
Out [TCP] [TCP] 192.168.10.131:1075 -> 194.67.57.26:25 aliased to
[TCP] 217.external.xxx.xxx:1075 -> 194.67.57.26:25 natd: failed to write packet back: Permission denied
--- end natd output ---
--- /usr/local/etc/rc.d/fw.sh ---
#!/bin/sh
#JE - FireWall rule set
fw1="/sbin/ipfw add 10"
fw2="/sbin/ipfw add 100"
jeif="fxp0" #Внутренний интерфейс 1 - не интересует пока
intif="rl0" #Внутренний интерфейс 2
extif="fxp1" #Внешний интерфейс
jeaddr_m="192.168.10.0/24"
intaddr_m="192.168.224.0/27"
extaddr_m="217.external.xxx.xxx/30"
hiports="1025-65535"
/sbin/ipfw add 1 pass all from any to any
/sbin/ipfw del 10
/sbin/ipfw del 100
$fw1 pass tcp from any to me 22 via fxp0
$fw1 pass tcp from me 22 to any via fxp0
$fw1 deny tcp from any to me 22
/sbin/ipfw del 1
$fw2 pass all from any to any via lo0
$fw2 deny all from 127.0.0.1/8 to any
$fw2 deny all from any to 127.0.0.1/8
$fw2 deny all from $jeaddr_m to any in recv $extif
$fw2 deny all from $intaddr_m to any in recv $extif
$fw2 deny tcp from any 137,135,445 to any in recv $extif
$fw2 deny tcp from any to any 135,137,445 in recv $extif
$fw2 pass all from $jeaddr_m to any in recv $jeif
$fw2 pass all from any to $jeaddr_m out xmit $jeif
$fw2 pass all from $intaddr_m to any in recv $intif
$fw2 pass all from any to $intaddr_m out xmit $intif
#$fw2 deny all from any to any via $jeif
#$fw2 deny all from any to any via $intif
$fw2 divert natd all from $intaddr_m to any out recv $intif xmit $extif
$fw2 divert natd tcp from $jeaddr_m to any 25,110,143,5190,6667,6669 out recv $jeif xmit $extif
$fw2 divert natd icmp from $jeaddr_m to any out recv $jeif xmit $extif
$fw2 divert natd all from any to me in recv $extif
$fw2 pass all from any to any
--- eof ---