Доброго времени суток
проблема такая
не могу из инета попасть по впн в локалку
в качестве впн сервера мпд5, конфиг рабочий
связь в провайдером по vpn
вот конфиг pfint_if = "fxp0"
ext_if = "re0"
vpn_if = "ng0"
ports = "{21 25 80 110 443 1723}"
router = "192.168.0.1"
set block-policy return
set loginterface re0
set loginterface ng0
set skip on lo
scrub in all
table <local> {192.168.0.0/24}
nat on $vpn_if from <local> to any -> ($vpn_if)
nat on $ext_if from <local> to any -> ($ext_if)
no nat on $vpn_if proto gre all
block on $vpn_if all
block on $ext_if all
pass out keep state
antispoof quick for { lo $int_if }
block in on $vpn_if proto tcp from any to any port {ssh}
block in on $ext_if proto tcp from any to any port {ssh}
pass in on $vpn_if proto {udp, icmp} all keep state
pass on $vpn_if proto udp from any port 53 to any
pass on $vpn_if proto udp from any to any port 53
pass in on $int_if proto tcp from <local> to any port $ports flags S/SA keep state
pass out on $int_if proto tcp from any port $ports to <local> flags S/SA keep state
pass on $vpn_if proto tcp from any port 1723 to any flags S/SA keep state
pass on $vpn_if proto tcp from any to any port 1723 flags S/SA keep state
pass on $vpn_if inet proto gre from any to any
pass in on $ext_if proto tcp from 10.0.0.1 port {1723 1023} to any flags S/SA keep state