Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 16 Jan 2005 04:45:09 +0800
From:      CryBaby <guitar@jazzcafe.no-ip.org>
To:        CryBaby <guitar@jazzcafe.no-ip.org>
Cc:        freebsd-stable@freebsd.org
Subject:   Re: SSH Protocol mismatch
Message-ID:  <20050116044045.7FEB.GUITAR@jazzcafe.no-ip.org>
In-Reply-To: <20050116035709.AFCE.GUITAR@jazzcafe.no-ip.org>
References:  <20050116035709.AFCE.GUITAR@jazzcafe.no-ip.org>

next in thread | previous in thread | raw e-mail | index | archive | help
> OS: FreeBSD 4.11-STABLE #3: Fri Jan 14 23:53:07 CST 2005
Firewall: ipfilter + ipfw
NAT: ipnat

### % less /etc/ipnat.conf ###
map vr0 192.168.0.0/24 -> 0/32 portmap tcp/udp auto
map vr0 192.168.0.0/24 -> 0/32

### /etc/ipf.conf ### (vr0: outer interface, rl0: inner interface)
block in log quick all with short
block in log quick all with ipopts

pass in on rl0 all
pass out on rl0 all
pass in on lo0 all
pass out on lo0 all

pass in log on vr0 all
pass out log on vr0 all

pass out log on vr0 proto icmp all keep state
pass out log on vr0 proto tcp/udp from any to any keep state

pass in quick on vr0 proto tcp from any to any port = ftp-data keep state
pass in quick on vr0 proto tcp from any port = ftp-data to any port > 1023 keep state





---
CryBaby <mailinglist@ms94.url.com.tw>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050116044045.7FEB.GUITAR>