FB下实现透明代理简单一例

FB下实现透明代理简单一例此例为一个试验,在192.168.33.0/24网段内的一台机子上(两块网卡)安装系统FreeBSD,加载防火墙和NAT规则,然后代理另一个网段192.168.1.0/24的计算机上网.这台机子的IP地址如下:
     外网卡rl0的IP为192.168.33.8
     内网卡fxp0的IP为   192.168.1.8
1.       系统
(1)光盘安装FB5.3,完成后,分别做了系统和内核的升级.
(2)内核中加载ipfilter
     cd /usr/src/sys/i386/conf
       cp GENERIC MYFIREWALL
ee MYFIREWALL
加入: options IPFILTER
     options IPFILTER_LOG
     options IPFILTER_DEFAULT_BLOCK
然后config MYFIREWALL
     cd  ../compile/MYFIREWALL
     make depend
     make
     make install
重启.
2.       配置文件
主要改写或创建的文件如下:
(1)    /etc/rc.conf
# -- sysinstall generated deltas -- # Sat Jun 18 08:08:00 2005
# -- sysinstall generated deltas -- # Sat Jun 18 13:25:55 2005
# Created: Sat Jun 18 08:08:00 2005
# Enable network daemons for user convenience.
# Please make all changes to this file, not to /etc/defaults/rc.conf.
# This file now contains just the overrides from /etc/defaults/rc.conf.
defaultrouter="192.168.33.6"
firewall_enable="NO"
gateway_enable="YES"
hostname="chen.chenchen.com"
ifconfig_rl0="inet 192.168.33.8  netmask 255.255.255.0"
ifconfig_fxp0="inet 192.168.1.8 netmask 255.255.255.0"
inetd_enable="YES"
linux_enable="YES"
sshd_enable="YES"
usbd_enable="YES"
portmap_enable="NO"
kern_securelevel_enable="YES"
kern_securelevel="2"
syslogd_enable="YES"
syslogd_flags="-ss"
ipfilter_enable="NO"
#ipfilter_program="/sbin/ipf"
#ipfilter_rules="/etc/ipf.rules"
ipmon_enable="YES"
ipmon_flags="-Ds"
ipmon -o N > /tmp/nat.log &
#ipnat_enable="YES"
#ipnat_program="/sbin/ipnat -CF -f"
#ipnat_rules="/etc/ipnat.rules"
(2)    /etc/ipf.rules
内容如下:
chen# more ipf.rules
/sbin/ipf -Fa -f -
#############################################################
#优化系统
#############################################################
block in quick all with ipopts
block in quick all with frag
block in quick all with short
#############################################################
# Resist the attack of the virus
#############################################################
block in quick proto tcp/udp from any to any port 134 >

标签：

版权申明：本站文章部分自网络，如有侵权，请联系：west999com@outlook.com
特别注意：本站所有转载文章言论不代表本站观点，本站所提供的摄影照片，插画，设计作品，如需使用，请与原作者联系，版权归原作者所有