Исходное сообщение
"И все же ГУРУ IPFW, откликнитесь" Отправлено Camb, 26-Мрт-09 19:50
------------------------ FROM HandBook ------------ 00001 allow ip from any to any via lo0 00002 allow ip from any to any via age0 00014 divert 8668 ip from any to any in via ng0 00015 check-state 00020 skipto 800 tcp from any to any dst-port 20,21,22 out via ng0 setup keep-state 00021 skipto 800 tcp from any 20 to any in via ng0 setup keep-state 00030 skipto 800 udp from any to any dst-port 53 out via ng0 keep-state 00040 skipto 800 tcp from any to any dst-port 80,443 out via ng0 setup keep-state 00080 skipto 800 icmp from any to any out via ng0 keep-state 00330 deny ip from any to any frag in via ng0 00332 deny tcp from any to any established in via ng0 00400 deny log logamount 100 ip from any to any in via ng0 00450 deny log logamount 100 ip from any to any out via ng0 00800 divert 8668 ip from any to any out via ng0 00801 allow ip from any to any 00999 deny log logamount 100 ip from any to any 65535 allow ip from any to any --------------------- end ------------------------------------- правило 21 добавил я. теперь юзеры могут ходить на активный Фтп. Но как не нравится мне это правило. НУ ПОЖАЛУЙСТА!!!