Посмотрите плиз че за фигня.
Натсроен nat.
ipastat говорит что правил нету :(
ipfw show:
00100 24077 2683263 count ip from any to any in recv rl0
00101 3006 390215 count ip from any to any out xmit rl0
00200 0 0 count ip from any to 192.168.0.2 in recv rl0
00201 0 0 count ip from 192.168.0.2 to any out xmit rl0
00202 0 0 count ip from any to 192.168.0.3 in recv rl0
00203 0 0 count ip from 192.168.0.3 to any out xmit rl0
00204 0 0 count ip from any to 192.168.0.4 in recv rl0
00205 0 0 count ip from 192.168.0.4 to any out xmit rl0
00206 0 0 count ip from any to 192.168.0.5 in recv rl0
00207 0 0 count ip from 192.168.0.5 to any out xmit rl0
00208 0 0 count ip from any to 192.168.0.6 in recv rl0
00209 0 0 count ip from 192.168.0.6 to any out xmit rl0
00210 0 0 count ip from any to 192.168.0.7 in recv rl0
00211 0 0 count ip from 192.168.0.7 to any out xmit rl0
00212 0 0 count ip from any to 192.168.0.10 in recv rl0
ipa.conf:
global {
update_db_time = 30s
db_dir=/usr/home/ipa_stat
db_group = wheel
maxchunk = 10G
append_db_time = 1h
}
rule inet_in {
ipfw = 00100
info = traffic_in
}
rule inet_out {
ipfw = 00101
info = traffic_out
}
rule inet_all {
ipfw = 00100 00101
info = traffic_all
}
rule 192.168.0.2_in {
ipfw = 00200
info = traffic in for 192.168.0.2
}
rule 192.168.0.2_out {
ipfw = 00201
info = traffic out for 192.168.0.2
}
rule 192.168.0.3_in {
ipfw = 00202
info = traffic in for 192.168.0.3
}
rule 192.168.0.3_out {
ipfw = 00203
info = traffic out for 192.168.0.3
}
rule 192.168.0.4_in {
ipfw = 00204
info = traffic in for 192.168.0.4
}
rule 192.168.0.4_out {
ipfw = 00205
info = traffic out for 192.168.0.4
}
rule 192.168.0.5_in {
ipfw = 00206
info = traffic in for 192.168.0.5
}
rule 192.168.0.5_out {
ipfw = 00207
info = traffic out for 192.168.0.5
}
rule 192.168.0.6_in {
ipfw = 00208
info = traffic in for 192.168.0.6
}
rule 192.168.0.6_out {
ipfw = 00209
info = traffic out for 192.168.0.6
}
rule 192.168.0.7_in {
ipfw = 00210
info = traffic in for 192.168.0.7
}
rule 192.168.0.7_out {
ipfw = 00211
info = traffic out for 192.168.0.7
}
rule 192.168.0.10_in {
ipfw = 00212
info = traffic in for Domain
}
rule 192.168.0.10_out {
ipfw = 00213
info = traffic out for Domain
}
ipa.log:
------------------------------------------------
Jun 29 21:51:41 gate ipa[252]: IPA: version 1.3.6 started by UID 0 GID 0
Jun 29 21:51:41 gate ipa[252]: current umask is 0227
Jun 29 21:51:41 gate ipa[252]: use configuration file /usr/local/etc/ipa.conf, parsing...
Jun 29 21:51:41 gate ipa[252]: file /usr/local/etc/ipa.conf is readable by group and/or other users
Jun 29 21:51:41 gate ipa[252]: loaded 17 accounting rules
Jun 29 21:51:41 gate ipa[252]: umask is changed 0227 -> 0222
Jun 29 21:51:41 gate ipa[252]: creating main database directory /usr/home/ipa_stat
Jun 29 21:51:41 gate ipa[252]: umask is changed 0222 -> 0227
Jun 29 21:51:41 gate ipa[252]: umask is changed 0227 -> 0222
Jun 29 21:51:41 gate ipa[252]: creating database lock file /usr/home/ipa_stat/lock db
Jun 29 21:51:41 gate ipa[252]: umask is changed 0222 -> 0227
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/inet_in
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/inet_out
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/inet_all
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/192.168.0.2_in
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/192.168.0.2_out
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/192.168.0.3_in
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/192.168.0.3_out
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/192.168.0.4_in
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/192.168.0.4_out
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/192.168.0.5_in
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/192.168.0.5_out
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/192.168.0.6_in
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/192.168.0.6_out
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/192.168.0.7_in
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/192.168.0.7_out
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/192.168.0.10_in
Jun 29 21:51:41 gate ipa[252]: creating rule directory /usr/home/ipa_stat/192.168.0.10_out
Jun 29 21:51:41 gate ipa[252]: preinit IPv4 Firewall support
Jun 29 21:51:41 gate ipa[252]: make IP accounting...