<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:arial,helvetica,sans-serif;font-size:12pt"><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;">Elküldöm az én pf.conf-at, lehet segítségedre válik:<br><br><b id="t3_v">/etc/pf.conf</b><br id="u2g0"><br id="n5ix">#macros<br id="kh2l">ext_if="fxp0"<br id="pl9i">int_if="re0"<br id="roxw">internal_net="192.168.1.0/24"<br id="d1xl">admin_ip = "{ 192.168.1.254, 192.168.1.113, 192.168.1.123, 192.168.1.213, 192.168.1.223 }"<br id="krgm">ssh_ip = "{ 192.168.1.254, 192.168.1.113, 192.168.1.213, 192.168.1.223 }"<br id="jx.l">engedelyezett
= "{ 194.102.208.22, 194.102.208.22, 194.102.208.22, 194.102.208.22,
194.102.208.22, 194.102.208.22, 194.102.208.22, 194.102.208.22,
194.102.208<br id="d1ql">.22, 194.102.208.22, 194.102.208.22,
194.102.208.22, 194.102.208.22, 194.102.208.22, 194.102.208.22,
194.102.208.22, 194.102.208.22, 194.102.208.22, 194.102.2<br id="mfqa">08.22,
194.102.208.22, 194.102.208.22, 194.102.208.22, 77.242.193.137,
77.242.192.193, 81.181.193.18, 207.46.225.221, 207.46.20.126,
205.128.69.126, 65.55.184<br id="ftk7">.93, 207.46.18.94,
207.46.225.221, 8.12.199.126, 207.46.209.246, 86.35.15.25, 64.4.21.91,
86.35.15.200, 80.97.216.131, 212.146.105.227, 86.35.15.202, 86.35.15<br id="n41e">.202,
217.156.52.49, 212.146.105.226, 80.96.153.2, 193.226.121.131,
193.226.121.131, 74.50.5.210, 72.29.71.131, 193.231.100.2,
193.231.100.130, 193.231.100.13<br id="o11c">4 }"<br id="q93y"><br id="xwex"><br id="bbw6"># options<br id="ei1m">set block-policy drop<br id="gytp">set state-policy if-bound<br id="n4mj"><br id="wr65"># scrub incoming packets<br id="vvbn">scrub all reassemble tcp fragment reassemble<br id="clf9"><br id="ab4_"><br id="vjo_">#nat<br id="l2j-">nat on $ext_if from $internal_net to $engedelyezett -> ($ext_if)<br id="ptw.">nat on $ext_if from $admin_ip to any -> ($ext_if)<br id="yl08"><br id="laa."><br id="rrla"><br id="ruag"># tables<br id="sncs">table <firewall> const { self }<br id="cj6."><br id="vr63"><br id="h0sa"># setup a default deny policy<br id="c22c">block drop log all<br id="lf2e"><br id="nc.-"><br id="x.:s"># pass traffic on the loopback interface in either direction<br id="c:_b">pass quick on lo0 all<br id="pj0k"><br id="es.:"># dns, ntp<br id="w-dl">pass out quick on $ext_if inet proto udp from ($ext_if) to any port {53, 123 } keep
state<br id="bh6v"><br id="t00a"># outgoing from firewall<br id="ddf-">pass out log quick on $ext_if inet proto tcp from ($ext_if) to any flags S/SA keep state<br id="ig2h">pass out log quick on $ext_if inet proto { udp, icmp } from ($ext_if) to any keep state<br id="k3cb">pass out log quick on $int_if inet proto tcp from ($int_if) to any flags S/SA keep state<br id="k-21"><br id="rdff"># incoming, ssh<br id="danp">pass in log quick on $ext_if inet proto tcp from any to ($ext_if) port 22 flags S/SA keep state<br id="g6eq">pass in log quick on $int_if inet proto tcp from $ssh_ip to ($int_if) port 22 flags S/SA keep state<br id="wkk2"><br id="fhom"># outgoing icmp<br id="si0e">pass out log quick on $int_if inet proto icmp from ($int_if) to $internal_net keep state<br id="rakx"><br id="zrhr"><br id="m-1i"># incoming tcp, udp, icmp from the internal network to the internet<br id="qs1e">pass in log quick on $int_if inet proto tcp from $internal_net to
!<firewall> flags S/SA modulate state<br id="a_zg">pass in log quick on $int_if inet proto icmp from $internal_net to !<firewall> keep state<br id="v7nd">pass in log quick on $int_if inet proto udp from $internal_net to !<firewall> keep state<br id="p_xk">pass in quick on $int_if inet proto { udp, icmp } from any to $int_if keep state<br id="c_cz"><br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Original Message ----<br>From: Péchy Gáspár <gpechy@ggg.hu><br>To: Magyar BSD levlista <bsd@hu.freebsd.org><br>Sent: Monday, April 21, 2008 3:58:11 PM<br>Subject: Re: [BSD] Intel SR1530AHLX server<br><br>
Berta Sándor írta:<br>> Péchy Gáspár írta:<br>>> Helli,<br>>> van valakinek tapasztalata Intel 1530AHLX serverrel ? ( S3000AHLX board )<br>>> Ha megy valahol, különosen érdekelne az internal RAID / AMT esetleges tapasztalat.<br>>> Köszönöm,<br>>> Gazsi<br>>><br>>> _______________________________________________<br>>> BSD levlista<br>>> <a ymailto="mailto:BSD@hu.freebsd.org" href="mailto:BSD@hu.freebsd.org">BSD@hu.freebsd.org</a><br>>> <a href="http://www.hu.freebsd.org/hu/mailman/listinfo/bsd" target="_blank">http://www.hu.freebsd.org/hu/mailman/listinfo/bsd</a><br>>><br>> 6.3-al és 7.0-al is kíválóan megy. Raid1-el használom őket.<br>> <br>> üdv<br>> berta<br>> <br>> _______________________________________________<br>> BSD levlista<br>> <a ymailto="mailto:BSD@hu.freebsd.org" href="mailto:BSD@hu.freebsd.org">BSD@hu.freebsd.org</a><br>> <a
href="http://www.hu.freebsd.org/hu/mailman/listinfo/bsd" target="_blank">http://www.hu.freebsd.org/hu/mailman/listinfo/bsd</a><br>> <br>Köszönöm :)<br>( Az AMT már ne érdekes, csak BIOS-boot-hwstatus-t tud )<br>Gazsi<br><br>_______________________________________________<br>BSD levlista<br><a ymailto="mailto:BSD@hu.freebsd.org" href="mailto:BSD@hu.freebsd.org">BSD@hu.freebsd.org</a><br><a href="http://www.hu.freebsd.org/hu/mailman/listinfo/bsd" target="_blank">http://www.hu.freebsd.org/hu/mailman/listinfo/bsd</a><br></div><br></div></div><br>
<hr size=1>Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. <a href="http://us.rd.yahoo.com/evt=51733/*http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ "> Try it now.</a></body></html>