merhaba arkadaşlar
ipfw.rules dosyamdaki kurallar aşağıdaki gibi olursa çalışmıyor
#define oif rl0
#define oip 1.2.3.4
#define onet 1.2.3.4:255.255.255.248
#define oip 1.2.3.4
#define onet 1.2.3.4:255.255.255.248
#define iif1 rl1
#define iip1 10.0.0.254
#define inet1 10.0.0.0/24
#define iip1 10.0.0.254
#define inet1 10.0.0.0/24
add divert natd all from any to any via oif
add allow tcp from any to any established
add allow all from any to any frag
add allow tcp from any to any 25
add allow tcp from any 25 to any
add allow tcp from any to any 110
add allow tcp from any 110 to any
add allow udp from any to any 53 via rl0
add allow udp from any 53 to any via rl0
add allow udp from any to any 53 via rl1
add allow udp from any 53 to any via rl1
add deny tcp from 10.0.0.28/32 to any 80
add deny tcp from 10.0.0.40/32 to any 80
add deny tcp from 10.0.0.52/32 to any 80
add deny tcp from 10.0.0.48/32 to any 80
add deny tcp from 10.0.0.48/32 to any 1863
add deny tcp from 10.0.0.48/32 to 207.46.104.20/24
add deny tcp from 10.0.0.48/32 to 207.46.110.20/24
add deny tcp from 10.0.0.48/32 to 64.4.13.0/24
add deny tcp from 10.0.0.31/32 to any 80
add deny tcp from 10.0.0.31/32 to any 1863
add deny tcp from 10.0.0.31/32 to 207.46.104.20/24
add deny tcp from 10.0.0.31/32 to 207.46.110.20/24
add deny tcp from 10.0.0.31/32 to 64.4.13.0/24
add deny tcp from 10.0.0.33/32 to any 80
add deny tcp from 10.0.0.33/32 to any 1863
add deny tcp from 10.0.0.33/32 to 207.46.104.20/24
add deny tcp from 10.0.0.33/32 to 207.46.110.20/24
add deny tcp from 10.0.0.33/32 to 64.4.13.0/24
add deny tcp from 10.0.0.50/32 to any 80
add deny tcp from 10.0.0.50/32 to any 1863
add deny tcp from 10.0.0.50/32 to 207.46.104.20/24
add deny tcp from 10.0.0.50/32 to 207.46.110.20/24
add deny tcp from 10.0.0.50/32 to 64.4.13.0/24
add deny tcp from 10.0.0.16/32 to any 80
add deny tcp from 10.0.0.41/32 to any 80
add deny tcp from 10.0.0.41/32 to any 1863
add deny tcp from 10.0.0.41/32 to 207.46.104.20/24
add deny tcp from 10.0.0.41/32 to 207.46.110.20/24
add deny tcp from 10.0.0.41/32 to 64.4.13.0/24
add deny tcp from 10.0.0.36/32 to any 80
add deny tcp from 10.0.0.36/32 to any 1863
add deny tcp from 10.0.0.36/32 to 207.46.104.20/24
add deny tcp from 10.0.0.36/32 to 207.46.110.20/24
add deny tcp from 10.0.0.36/32 to 64.4.13.0/24
add deny tcp from 10.0.0.45/32 to any 80
add deny tcp from 10.0.0.45/32 to any 25
add deny tcp from 10.0.0.45/32 to any 110
add deny tcp from 10.0.0.29/32 to any 1863
add deny tcp from 10.0.0.29/32 to any 207.46.104.20/24
add deny tcp from 10.0.0.29/32 to any 207.46.110.20/24
add deny tcp from 10.0.0.29/32 to 64.4.13.0/24
add deny tcp from 10.0.0.13/32 to any 80
add deny tcp from 10.0.0.7/32 to any 80
add deny tcp from 10.0.0.11/32 to any 80
add allow all from any to any
add allow udp from oip to any out via oif keep-state
add allow udp from oip to any in via oif keep-state
add allow icmp from any to any via rl0
add allow icmp from any to any via rl1
add allow tcp from any to any established
add allow all from any to any frag
add allow tcp from any to any 25
add allow tcp from any 25 to any
add allow tcp from any to any 110
add allow tcp from any 110 to any
add allow udp from any to any 53 via rl0
add allow udp from any 53 to any via rl0
add allow udp from any to any 53 via rl1
add allow udp from any 53 to any via rl1
add deny tcp from 10.0.0.28/32 to any 80
add deny tcp from 10.0.0.40/32 to any 80
add deny tcp from 10.0.0.52/32 to any 80
add deny tcp from 10.0.0.48/32 to any 80
add deny tcp from 10.0.0.48/32 to any 1863
add deny tcp from 10.0.0.48/32 to 207.46.104.20/24
add deny tcp from 10.0.0.48/32 to 207.46.110.20/24
add deny tcp from 10.0.0.48/32 to 64.4.13.0/24
add deny tcp from 10.0.0.31/32 to any 80
add deny tcp from 10.0.0.31/32 to any 1863
add deny tcp from 10.0.0.31/32 to 207.46.104.20/24
add deny tcp from 10.0.0.31/32 to 207.46.110.20/24
add deny tcp from 10.0.0.31/32 to 64.4.13.0/24
add deny tcp from 10.0.0.33/32 to any 80
add deny tcp from 10.0.0.33/32 to any 1863
add deny tcp from 10.0.0.33/32 to 207.46.104.20/24
add deny tcp from 10.0.0.33/32 to 207.46.110.20/24
add deny tcp from 10.0.0.33/32 to 64.4.13.0/24
add deny tcp from 10.0.0.50/32 to any 80
add deny tcp from 10.0.0.50/32 to any 1863
add deny tcp from 10.0.0.50/32 to 207.46.104.20/24
add deny tcp from 10.0.0.50/32 to 207.46.110.20/24
add deny tcp from 10.0.0.50/32 to 64.4.13.0/24
add deny tcp from 10.0.0.16/32 to any 80
add deny tcp from 10.0.0.41/32 to any 80
add deny tcp from 10.0.0.41/32 to any 1863
add deny tcp from 10.0.0.41/32 to 207.46.104.20/24
add deny tcp from 10.0.0.41/32 to 207.46.110.20/24
add deny tcp from 10.0.0.41/32 to 64.4.13.0/24
add deny tcp from 10.0.0.36/32 to any 80
add deny tcp from 10.0.0.36/32 to any 1863
add deny tcp from 10.0.0.36/32 to 207.46.104.20/24
add deny tcp from 10.0.0.36/32 to 207.46.110.20/24
add deny tcp from 10.0.0.36/32 to 64.4.13.0/24
add deny tcp from 10.0.0.45/32 to any 80
add deny tcp from 10.0.0.45/32 to any 25
add deny tcp from 10.0.0.45/32 to any 110
add deny tcp from 10.0.0.29/32 to any 1863
add deny tcp from 10.0.0.29/32 to any 207.46.104.20/24
add deny tcp from 10.0.0.29/32 to any 207.46.110.20/24
add deny tcp from 10.0.0.29/32 to 64.4.13.0/24
add deny tcp from 10.0.0.13/32 to any 80
add deny tcp from 10.0.0.7/32 to any 80
add deny tcp from 10.0.0.11/32 to any 80
add allow all from any to any
add allow udp from oip to any out via oif keep-state
add allow udp from oip to any in via oif keep-state
add allow icmp from any to any via rl0
add allow icmp from any to any via rl1
FAKAT BU AŞAĞIDAKİ GİBİ OLURSA ÇALIŞIYOR. BUNUN NEDENİ NE LABİLİR NERDE HATA YAPMIŞ OLABİLİRİM.
#define oif rl0
#define oip 1.2.3.4
#define onet 1.2.3.4:255.255.255.248
#define oip 1.2.3.4
#define onet 1.2.3.4:255.255.255.248
#define iif1 rl1
#define iip1 10.0.0.254
#define inet1 10.0.0.0/24
#define iip1 10.0.0.254
#define inet1 10.0.0.0/24
add divert natd all from any to any via oif
add allow tcp from any to any established
add allow all from any to any frag
add allow tcp from any to any 25
add allow tcp from any 25 to any
add allow tcp from any to any 110
add allow tcp from any 110 to any
add allow udp from any to any 53 via rl0
add allow udp from any 53 to any via rl0
add allow udp from any to any 53 via rl1
add allow udp from any 53 to any via rl1
add allow all from any to any
add allow udp from oip to any out via oif keep-state
add allow udp from oip to any in via oif keep-state
add allow icmp from any to any via rl0
add allow icmp from any to any via rl1
add allow tcp from any to any established
add allow all from any to any frag
add allow tcp from any to any 25
add allow tcp from any 25 to any
add allow tcp from any to any 110
add allow tcp from any 110 to any
add allow udp from any to any 53 via rl0
add allow udp from any 53 to any via rl0
add allow udp from any to any 53 via rl1
add allow udp from any 53 to any via rl1
add allow all from any to any
add allow udp from oip to any out via oif keep-state
add allow udp from oip to any in via oif keep-state
add allow icmp from any to any via rl0
add allow icmp from any to any via rl1
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
