求pf做简单路由的NAT规则

banyao

机器环境b4.1 ppp拨号分别指定2个网卡的地址:rl0:192.168.1.2/23 ne3:192.168.1.3/24

1. 
   
2. cat /etc/mygate
   
3. 192.168.1.1
   

复制代码

客户机器环境:windows xp ip:192.168.1.8/24 网关设置成:192.168.1.1
rl0为拨号网卡
ne3为内网网卡,连接交换机
求个简单的pf规则可以让XP的机器通过OB上网

1. 
   
2. # ifconfig
   
3. lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33224
   
4.         groups: lo
   
5.         inet 127.0.0.1 netmask 0xff000000
   
6.         inet6 ::1 prefixlen 128
   
7.         inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
   
8. rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
   
9.         lladdr 00:0e:1f:01:13:3c
   
10.         media: Ethernet autoselect (100baseTX full-duplex)
    
11.         status: active
    
12.         inet 192.168.1.2 netmask 0xfffffe00 broadcast 192.168.1.255
    
13.         inet6 fe80::20e:1fff:fe01:133c%rl0 prefixlen 64 scopeid 0x1
    
14. ne3: flags=8863<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST> mtu 1500
    
15.         lladdr 00:40:26:5f:4d:9a
    
16.         media: Ethernet autoselect (10baseT)
    
17.         inet 192.168.1.3 netmask 0xffffff00 broadcast 192.168.1.255
    
18.         inet6 fe80::240:26ff:fe5f:4d9a%ne3 prefixlen 64 scopeid 0x2
    
19. pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33224
    
20. enc0: flags=0<> mtu 1536
    
21. tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1488
    
22.         groups: tun egress
    
23.         inet 10.10.10.195 --> 10.1.1.1 netmask 0xffffffff
    
24. 
    
25. ############################################
    
26. # cat /etc/pf.conf
    
27. int_if = "ne3"    #内网
    
28. ext_if = "tun0"   #外网
    
29. internal_net="192.168.1.3/24"
    
30. external_addr="192.168.1.2/23"
    
31. 
    
32. set optimization normal
    
33. scrub in all
    
34. 
    
35. nat on $ext_if from $internal_net to any -> ($ext_if)
    
36. pass all
    
37. #
    

复制代码

[ 本帖最后由 banyao 于 2007-9-15 16:02 编辑 ]

banyao

没人理我

马晓军

你可能共享不了

banyao

原帖由 马晓军 于 2007-9-18 09:27 发表
你可能共享不了

为什么???