- 论坛徽章:
- 0
|
防火墙默认是拒绝任何连接的，但是我现在安装了SQUID因此必须打开3128端口，在防火墙上加了add allow tcp from any to me 3128 in,add allow tcp from me 3128 to any out ,之后为什么局域网中的计算机连接代理服务器的时候说是拒绝连接，上不了网。这是为什么？但是当我在后面加上add allow tcp from any to any 就可以上了，请问有没有更好的解决办法？不用add allow tcp from any to any，只是允许3128端口？/???谢谢！！我的防火墙起初配置如下：
add 30000 allow icmp from any to any icmptypes 3
add 30001 allow icmp from any to any icmptypes 4
add 30002 allow icmp from any to any icmptypes 8 out
add 30003 allow icmp from any to any icmptypes 0 in
add 30004 allow icmp from any to any icmptypes 11 in
add 00001 deny log ip from any to any ipopt rr
add 00002 deny log ip from any to any ipopt ts
add 00003 deny log ip from any to any ipopt ssrr
add 00004 deny log ip from any to any ipopt lsrr
add 00005 deny tcp from any to any in tcpflags syn,fin
add 20001 allow udp from any 53 to me in
add 29999 allow udp from any to any out
add 40000 allow tcp from 192.168.1.0/16 to any
add 40001 allow tcp from any to 192.168.1.0/16
add 40002 allow udp from any to 192.168.1.0/16
add 40003 allow udp from 192.168.1.0/16 to any
/etc/rc.firewall文件中加了：ipfw add 00500 fwd 127.0.0.1,3128 tcp from 192.168.0.0/24 to any 80 |
|
免费注册
发表于 2004-06-28 16:55
