BSDPORTAL.RU

Драсте. У меня вот такая вот задача - сделать интернет гейт через dial-up ... Можно ли сделать это средствами pf ? Или что еще надобно? Желательно как можно легче.. и быстрей

з.ы. nat и т.д. - мой больной вопрос
з.з.ы. Еще надобно плюс к этому кэширующий прокси прикрутить
з.з.з.ы. И плюс все это хотелось бы через web управлять

можеш прикрутить webmin или как его там - тока яб натвоем месте в консоле все делал
подыми squid и все если nat не пренципелен - если надо то http://www.openbsd.org/faq/pf/nat.html

Вот тебе мой рабочий конфиг PF, правда он был заточен по ADSL, вроде переправил под диалап - должно работать.

Если чё вот аська: 68400267



altq on ppp0 priq bandwidth 33600b queue { std_out, crit_out, dns_out, www_out mail_out ftp_out }

queue std_out priq(default)
queue crit_out priority 7 priq(red)
queue dns_out priority 6
queue www_out priority 4
queue mail_out priority 3
queue ftp_out priority 2

altq on rl1 cbq bandwidth 56Kb queue { std_in off_in }

queue std_in bandwidth 16Kb cbq(default)

queue off_in bandwidth 40Kb priority 1 cbq(borrow) { crit_in dns_in www_in mail_in ftp_in }

queue crit_in bandwidth 10% priority 6 cbq(borrow)
queue dns_in bandwidth 10% priority 5 cbq(borrow)
queue www_in bandwidth 60% priority 4 cbq(borrow)
queue mail_in bandwidth 10% priority 3 cbq(borrow)
queue ftp_in bandwidth 10% priority 2 cbq(borrow)


office = "{ 192.168.0.1 192.168.0.2 192.168.0.3 192.168.0.4 192.168.0.5 192.168.0.6 192.168.0.7 192.168.0.8 192.168.0.9 }"

crit_ports = "{ 22 5190 }"
mail_ports = "{ 25 110 }"
www_ports = "{ 80 443 3128 8080 }"
ftp_ports = "{ 20 21 >=49151 }"

nat on ppp0 from 192.168.0.0/24 to any -> (ppp0)

block all

pass on lo0 all

# filter rules for ppp0

pass in on tun0 from any to (ppp0) keep state
pass out on tun0 proto icmp from (ppp0) to any


pass out on ppp0 inet proto { tcp udp } from (ppp0) to any port $crit_ports queue crit_out keep state
pass out on ppp0 inet proto udp from (ppp0) to any port domain queue dns_out
pass out on ppp0 inet proto tcp from (ppp0) to any port $www_ports queue www_out
pass out on ppp0 inet proto tcp from (ppp0) to any port $ftp_ports queue ftp_out
pass out on ppp0 inet proto tcp from (ppp0) to any port $mail_ports queue mail_out



# filter rules for rl1

pass in on rl1 from any to any
pass out on rl1 proto icmp from any to any


pass out on rl1 inet proto { tcp udp } from any port $crit_ports to $office queue crit_in
pass out on rl1 inet proto udp from any port domain to $office queue dns_in
pass out on rl1 inet proto tcp from any port $www_ports to $office queue www_in
pass out on rl1 inet proto tcp from any port $ftp_ports to $office queue ftp_in
pass out on rl1 inet proto tcp from any port $mail_ports to $office queue mail_in