SMF - Just Installed!
# php -v# pkg_info | grep php# php /usr/local/share/cacti/poller.php
# netstat -an | grep 53
tcp4 0 0 127.0.0.1.953 *.* LISTEN
tcp4 0 0 172.20.0.1.53 *.* LISTEN
tcp4 0 0 10.200.0.1.53 *.* LISTEN
tcp4 0 0 195.3.158.206.53 *.* LISTEN
tcp4 0 0 127.0.0.1.53 *.* LISTEN
udp4 0 0 172.20.0.1.53 *.*
udp4 0 0 10.200.0.1.53 *.*
udp4 0 0 195.3.158.206.53 *.*
udp4 0 0 127.0.0.1.53 *.*
gateway_enable="YES"sysctl net.inet.ip.forwarding=1[Rr][Oo][Uu][Tt][Ee][Rr])
net="192.168.1.0/24"
# Allow me
${fwcmd} add pass udp from me to any 53 keep-state
${fwcmd} add pass all from me to any
# Allow ICMP to me
${fwcmd} add pass icmp from any to me icmptypes 0,3,8,11
# Allow incoming setup
${fwcmd} add pass tcp from ${net} to me 22 setup
${fwcmd} add pass tcp from ${net} to me 80 setup
# Allow DNS
${fwcmd} add pass udp from ${net} to me 53
# Allow established TCP
${fwcmd} add pass all from any to me established
# Allow internal network
${fwcmd} add pass all from ${net} to not me
${fwcmd} add pass all from not me to ${net}
# Deny all to me
${fwcmd} add deny all from any to me
# sh /etc/rc.firewall ROUTER# Firewall
firewall_enable="YES"
firewall_script="/etc/rc.firewall"
firewall_type="ROUTER"
#!/bin/sh
setup_loopback () {
${fwcmd} add 5 pass all from any to any via lo0
${fwcmd} add 5 deny all from any to 127.0.0.0/8
${fwcmd} add 5 deny ip from 127.0.0.0/8 to any
}
fwcmd="/sbin/ipfw -q"
${fwcmd} add 15 deny all from "table(5)" to anyoptions IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=50
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPFIREWALL_FORWARD
options IPFIREWALL_NAT
options LIBALIAS
options DUMMYNET
# локальный трафик
ipfw add 100 pass all from any to any via lo0
ipfw add 110 deny all from any to 127.0.0.0/8
ipfw add 120 deny ip from 127.0.0.0/8 to any
После этого блока добавь разрешающее правило для keep-state состояний:# Разрешаем keep-state
ipfw add check-state
mailq# tail -f /var/log/maillog | grep 1PdoNs-0000m2-Hгде 1PdoNs-0000m2-H - ID письма.
# telnet muff.kiev.ua 25
Trying 195.3.159.250...
Connected to muff.kiev.ua.
Escape character is '^]'.
220 muff.kiev.ua ESMTP
quit
221 2.0.0 Bye
Connection closed by foreign host.
У тебя же соединение обрывается по тайм-ауту.# telnet muff.kiev.ua 25
Trying 195.3.159.250...
Connected to muff.kiev.ua.
Escape character is '^]'.
220 muff.kiev.ua ESMTP
quit
221 2.0.0 Bye
Connection closed by foreign host.
# telnet muff.kiev.ua 25
Trying 195.3.159.250...
telnet: connect to address 195.3.159.250: Operation timed out
telnet: Unable to connect to remote host