[FUG-BR] Problemas Gateway / Firewall

[Rodrigo G. Crescencio]

Olá amigo boa noite,



Entaum tanto faz ser www ou http, pq o pf, vai ler o arquivo
/etc/services, e os dois protocolos fazem referencia para a mesma
porta.



Voces nao teriam nehum modelo de um dhcpd.conf, funcional nao neh, pq
estou axando que o problema pode estar no meu arquivo.



Obrigado

-- 

Rodrigo G. Crescencio

Analista de TI.

RC - Soluções Inteligentes em TI.

www.rcsolucoesinteligentes.com.br









> Boa tarde meu amigo,

> 

> 

> da uma olhada no protocolo que você está utilizando no
rdr, não é pra ser

> http no lugar de www?

> 

> 

> 

> 

> 

> Em 6 de abril de 2010 17:49, Rodrigo G. Crescencio <

> rodrigo em rcsolucoesinteligentes.com.br> escreveu:

> 

>>

>>

>> Olá amigo,

>>

>>

>>

>> o resolv.conf, esta assumindo o gateway do link da NET Virtua.

>>

>>

>>

>> Segue um arquivo meu de testes do pf.conf

>>

>>

>>

>> ext_if="re0"

>>

>> int_if="xl0"

>>

>> int_net="192.168.1.0/24"

>>

>>

>>

>> tcp_services="{1985}"

>>

>> icmp_types="echoreq"

>>

>>

>>

>> # SCRUB

>>

>> scrub in all no-df

>>

>>

>>

>> # NAT

>>

>> nat on $ext_if from $int_net to any -> ($ext_if)

>>

>>

>>

>> # RDR

>>

>> rdr on $int_if inet proto tcp from any to any port www ->
127.0.0.1

>> port 3128

>>

>>

>>

>> # Block

>>

>> block in on $ext_if

>>

>>

>>

>> # Pass loopback

>>

>> pass quick on lo0 all

>>

>> pass out keep state

>>

>>

>>

>> # Internet

>>

>> pass in log on $int_if inet proto tcp from any to 127.0.0.1 port
3128

>> keep

>> state

>>

>> pass out log on $ext_if inet proto tcp from any to any port www
keep

>> state

>>

>>

>>

>> # SSH

>>

>> pass in on $ext_if inet proto tcp from any to any port 1985 flags
S/SA

>> keep state

>>

>> pass in on $int_if inet proto tcp from any to any port 1985 flags
S/SA

>> keep state

>>

>>

>>

>> # ICMP/TRACEROUTE

>>

>> pass out inet proto icmp all icmp-type $icmp_types keep state

>>

>>

>>

>> com relação ao squid, esta aki

>>

>>

>>

>> http_port 127.0.0.1:3128 transparent

>>

>> visible_hostname Proxy_Server

>>

>> error_directory /usr/local/etc/squid/errors/pt-br

>>

>>

>>

>> cache_mem 1024 MB

>>

>> cache_swap_low 90

>>

>> cache_swap_high 95

>>

>> maximum_object_size 40000 KB

>>

>> minimum_object_size 0 KB

>>

>>

>>

>> cache_dir ufs /usr/local/squid/cache 1024 64 256

>>

>> cache_access_log /usr/local/squid/logs/access.log

>>

>> cache_log /usr/local/squid/logs/store.log

>>

>>

>>

>>

>>

>> pid_filename /usr/local/squid/logs/squid.pid

>>

>>

>>

>> refresh_pattern ^ftp: 15 20% 2280

>>

>> refresh_pattern ^gopher: 15 0% 2280

>>

>> refresh_pattern . 15 20% 2280

>>

>>

>>

>> acl to_localhost dst 127.0.0.0/8

>>

>>

>>

>> acl manager proto cache_object

>>

>> acl Safe_ports port 80

>>

>> acl SSL_ports port 443 563

>>

>> acl CONNECT method CONNECT

>>

>>

>>

>> acl rede src 192.168.1.0/24

>>

>> http_access allow rede

>>

>> http_access allow manager

>>

>> http_access allow !Safe_ports

>>

>> http_access allow CONNECT !SSL_ports

>>

>>

>>

>>

>>

>> Agradeço a ajuda

>>

>>

>>

>> --

>>

>> Rodrigo G. Crescencio

>>

>> Analista de TI.

>>

>> RC - Soluções Inteligentes em TI.

>>

>> www.rcsolucoesinteligentes.com.br

>>

>>

>>

>>

>>

>>

>>

>>

>>

>> > Precisa mandar as regras de firewall.

>>

>> > Só que veja o seu resolv.conf

>>

>> > e o squid.conf

>>

>> >

>>

>> > Em 6 de abril de 2010 17:35, Rodrigo G. Crescencio

>>

>> >

>> -------------------------

>> Histórico:
http://www.fug.com.br/historico/html/freebsd/

>> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd

>>

> 

> 

> 

> --

> Atenciosamente,

> 

> Diego Bulsing

> -------------------------

> Histórico: http://www.fug.com.br/historico/html/freebsd/

> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd

>