Исходное сообщение
"IPFilter. Открытие/закрытие портов" Отправлено teapot, 15-Ноя-08 12:06
Методом проб и ошибок был достигнут рабочий вариант. pass out quick on lo0 proto ip from 127.0.0.0/8 to 127.0.0.0/8 pass in quick on lo0 proto ip from 127.0.0.0/8 to 127.0.0.0/8 block in quick on lo0 proto ip from any to 127.0.0.0/8 pass out quick on bce0 from 192.168.17.254  to any pass out quick on bce0 from 192.168.50.254  to any pass in quick on bce0 from 192.168.17.0 mask 255.255.255.0 to 192.168.17.254  port = 10000 pass in quick on bce0 from 192.168.50.0 mask 255.255.255.0 to 192.168.50.254  port = 10000 pass in quick on bce0 from 192.168.17.0 mask 255.255.255.0 to 192.168.17.254  port = 110 pass in quick on bce0 from 192.168.50.0 mask 255.255.255.0 to 192.168.50.254  port = 110 pass in quick on bce0 from any to 192.168.17.254  port = 8081 pass in quick on bce0 from any to 192.168.50.254 port = 8081 pass in quick on bce0 from 192.168.17.0 mask 255.255.255.0 to 192.168.17.254  port = 22 pass in quick on bce0 from 192.168.50.0 mask 255.255.255.0 to 192.168.50.254  port = 22 pass in quick on bce0 from any to 192.168.17.254  port = 25 pass in quick on bce0 from any to 192.168.50.254  port = 25 pass in quick on bce0 proto tcp from any port = 25 to 192.168.17.254 pass in quick on bce0 proto tcp from any port = 25 to 192.168.50.254 pass in quick on bce0 proto udp from any to 192.168.17.254  port = 53 keep frags pass in quick on bce0 proto tcp from any to 192.168.17.254  port = 53 keep state keep frags pass in quick on bce0 proto udp from any to 192.168.50.254  port = 53 keep frags pass in quick on bce0 proto tcp from any to 192.168.50.254  port = 53 keep state keep frags pass in quick on bse0 proto icmp from 192.168.17.0 mask 255.255.255.0 to any pass in quick on bse0 proto icmp from 192.168.50.0 mask 255.255.255.0 to any pass in quick on bse0 proto icmp from any to 192.168.17.254 pass in quick on bse0 proto icmp from any to 192.168.50.254 pass in quick on bce0 proto icmp from 192.168.17.0 mask 255.255.255.0 to 192.168.17.254 icmp-type echo pass in quick on bce0 proto icmp from 192.168.50.0 mask 255.255.255.0 to 192.168.50.254 icmp-type echo pass in quick on bce0 proto tcp from 192.168.17.0 mask 255.255.255.0 port = 8081 to 192.168.17.254 port = 8081 pass in quick on bce0 proto tcp from 192.168.50.0 mask 255.255.255.0 port = 8081 to 192.168.50.254 port = 8081 pass in quick on bce0 proto icmp from any to 192.168.17.254 icmp-type echorep pass in quick on bce0 proto icmp from any to 192.168.50.254 icmp-type echorep pass in quick on bce0 proto tcp from any port = 80 to 192.168.17.254 pass in quick on bce0 proto tcp from any port = 80 to 192.168.50.254 pass in quick on bce0 proto udp from any port = 53 to 192.168.17.254 pass in quick on bce0 proto udp from any port = 53 to 192.168.50.254 pass in quick on bce0 proto tcp from any port = 443 to 192.168.17.254 pass in quick on bce0 proto tcp from any port = 443 to 192.168.50.254 pass in quick on bce0 proto tcp from any port = 21 to 192.168.17.254 pass in quick on bce0 proto tcp from any port = 21 to 192.168.50.254 pass in quick on bce0 proto tcp from any port = 20 to 192.168.17.254 pass in quick on bce0 proto tcp from any port = 20 to 192.168.50.254 block out quick on bce0 from any to any block in quick on bce0 from any to any