Есть шлюз на FreeBSD 8
rc.conf
scrnmap="win2cpp866"
keymap="ru.cp1251"
keychange="61 ^[[K"
font8x14="cp866-8x14"
font8x16="cp866b-8x16"
font8x8="cp866-8x8"
hostname="Server1"
ifconfig_re0="inet 192.168.0.2 netmask 255.255.255.0"
#ifconfig_vr0="inet 192.168.0.101 netmask 255.255.255.0"
defaultrouter="192.168.0.1"
ppp_enable="YES"
ppp_mode="ddial"
ppp_profile="mts"
#ppp_nat="no"
gateway_enable="YES"
firewall_enable="YES"
firewall_type="OPEN"
#firewall_script="/etc/conffw/s.sh"
natd_enable="YES"
natd_interface="tun0"
natd_flags="-dynamic"
#natd_flags="-f /etc/natd.conf"
#natd_program="/sbin/natd"
tcp_drop_synfin="YES"
tcp_extensions="NO"
icmp_drop_redirect="YES"
icmp_log_redirect="YES"
nmbd_enable="YES"
smbd_enable="YES"
#apache_enable="YES"
sshd_enable="YES"
usbd_enable="YES"
#fusefs_enable="YES"
# -- sysinstall generated deltas -- # Tue Apr 21 06:08:10 2009
keymap="ru.koi8-r"
ppp.conf
default:
set device /dev/cuaU0.0
mts:
set speed 115200
set timeout 0
set authname mts
set authkey mts
set dial "ABORT BUSY TIMEOUT 2 \
\"\" \
AT OK-AT-OK \
AT+CFUN=1 OK-AT-OK \
AT+CMEE=2 OK-AT-OK \
AT+CSQ OK \
AT^SYSCFG=14,2,300400000,1,2 OK-AT-OK\
AT+CGDCONT=1,\\\"IP\\\",\\\"internet\\\" OK \
AT+CGACT? OK-AT-OK \
AT+CGATT? OK \
AT+CGCLASS? OK \
AT+COPS? OK \
ATD*99# CONNECT"
## Lower the MTU as this seems to make the link more stable for GPRS connections.
#set mtu maximum 296
#set mru maximum 296
set crtscts on
disable vjcomp
disable acfcomp
disable deflate
disable deflate24
disable pred1
disable protocomp
disable mppe
disable ipv6cp
disable lqr
disable echo
# nat enable no
enable dns
resolv writable
#set dns 10.17.128.1 217.66.145.1
set ifaddr 10.1.0.2/0 10.1.0.1/0 255.255.255.255 0.0.0.0
# add default HISADDR # See ppp.link*
ifconfig
re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=389b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_UCAST,WOL_MCAST,WOL_MAGIC>
ether 00:24:21:37:63:c2
inet 192.168.0.2 netmask 0xffffff00 broadcast 192.168.0.255
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
vr0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=2808<VLAN_MTU,WOL_UCAST,WOL_MAGIC>
ether 00:22:b0:df:b4:2e
media: Ethernet autoselect (none)
status: no carrier
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=3<RXCSUM,TXCSUM>
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff000000
tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1500
inet 172.20.4.77 --> 10.1.0.1 netmask 0xffffffff
Opened by PID 1144
Routing tables
Internet:
Destination Gateway Flags Refs Use Netif Expire
default tun0 US 0 17532 tun0
10.1.0.1 link#4 UHS 0 0 tun0
127.0.0.1 link#3 UH 0 0 lo0
172.20.4.77 link#4 UHS 0 0 lo0
192.168.0.0/24 link#1 U 2 15623 re0
192.168.0.2 link#1 UHS 0 0 lo0
Internet6:
Destination Gateway Flags Netif Expire
::1 ::1 UH lo0
fe80::%lo0/64 link#3 U lo0
fe80::1%lo0 link#3 UHS lo0
ff01:3::/32 fe80::1%lo0 U lo0
ff02::%lo0/32 fe80::1%lo0 U lo0
ipfw show
00100 20799 13047383 divert 8668 ip from any to any via tun0
00200 0 0 allow ip from any to any via lo0
00300 22217 13178051 allow ip from any to any via re0
00400 370 17760 allow tcp from any to any out xmit tun0 setup
00500 19868 12960169 allow tcp from any to any via tun0 established
00600 0 0 allow tcp from any to any dst-port 80 setup
00700 0 0 allow tcp from any to any dst-port 22 setup
00800 0 0 allow tcp from any to any dst-port 110 setup
00900 0 0 allow tcp from any to any dst-port 25 setup
01000 0 0 reset log logamount 100 tcp from any to any dst-port 113 in recv tun0
01100 259 15691 allow udp from any to any dst-port 53 out xmit tun0
01200 252 50211 allow udp from any 53 to any in recv tun0
65435 12 1008 allow icmp from any to any
65535 41 2867 deny ip from any to any
суть такая
пинг со шлюза до яндекса идет, пинг с локальной тачки до яндекса идет
все веб адреса с локальной тачки прекрасно открываются, тобиш интернет в локальной сети как бы есть, но не работает почта не работает фтп
через другой шлюз с почтой и фтп все в порядке с локальных тачек
и кстати пробовал использовать встроенный nat в ppp при отключенном natd тот же результат
что делать?
