[FUGSPBR] FWD no IPFW

[Vitor de Matos Carvalho]

Boa tarde,

Pessoal estou aqui com uma pequena dúvida.

Meu firewall está configurado para negar tudo po default...

Qual seria o certo para fazer fwd de portas no ipfw? Fazer o fwd e liberar a porta ou liberar a porta e depois fazer o fwd?

EX.:
${fwcmd} add 1300 fwd ${dns1_dmz},53 tcp from any to ${dns1_publico} 53 in recv ${if_dns1} setup keep-state
${fwcmd} add 1301 fwd ${dns1_dmz},53 udp from any to ${dns1_publico} 53 in recv ${if_dns1} setup keep-state
${fwcmd} add 1302 pass tcp from any to ${dns1_publico} 53 in recv ${if_dns1} setup keep-state
${fwcmd} add 1303 pass udp from any to ${dns1_publico} 53 in recv ${if_dns1} setup keep-state

ou
${fwcmd} add 1300 pass tcp from any to ${dns1_publico} 53 in recv ${if_dns1} setup keep-state
${fwcmd} add 1301 pass udp from any to ${dns1_publico} 53 in recv ${if_dns1} setup keep-state
${fwcmd} add 1302 fwd ${dns1_dmz},53 tcp from any to ${dns1_publico} 53 in recv ${if_dns1} setup keep-state
${fwcmd} add 1303 fwd ${dns1_dmz},53 udp from any to ${dns1_publico} 53 in recv ${if_dns1} setup keep-state

Qual delas é a certa?

 Regards,

---------------------------------------------------
Vitor de Matos Carvalho - #5602098
Softinfo Network Administrator
Salvador - Bahia - Brazil
FreeBSD: The silent Workhorse

_______________________________________________________________
Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/