13th_apostle
Junior Member | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору
SSV_RA
включил правило nat'ить все, выставил заносить применение всех правил в лог.
ядро:
freebsd# cat /usr/src/sys/i386/conf/CUBXL | grep options | more
# An exhaustive list of options and more detailed explanations of the
options SCHED_4BSD # 4BSD scheduler
options INET # InterNETworking
#options INET6 # IPv6 communications protocols
options FFS # Berkeley Fast Filesystem
options SOFTUPDATES # Enable FFS soft updates support
options UFS_ACL # Support for access control lists
options UFS_DIRHASH # Improve performance on big directories
options MD_ROOT # MD is a potential root device
options NFSCLIENT # Network Filesystem Client
options NFSSERVER # Network Filesystem Server
options NFS_ROOT # NFS usable as /, requires NFSCLIENT
options MSDOSFS # MSDOS Filesystem
options CD9660 # ISO 9660 Filesystem
options PROCFS # Process filesystem (requires PSEUDOFS)
options PSEUDOFS # Pseudo-filesystem framework
options GEOM_GPT # GUID Partition Tables.
options COMPAT_43 # Compatible with BSD 4.3 [KEEP THIS!]
options COMPAT_FREEBSD4 # Compatible with FreeBSD4
options SCSI_DELAY=15000 # Delay (in ms) before probing SCSI
options KTRACE # ktrace(1) support
options SYSVSHM # SYSV-style shared memory
options SYSVMSG # SYSV-style message queues
options SYSVSEM # SYSV-style semaphores
options _KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extension
s
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
options AHC_REG_PRETTY_PRINT # Print register bitfields in debug
options AHD_REG_PRETTY_PRINT # Print register bitfields in debug
options ADAPTIVE_GIANT # Giant mutex is adaptive.
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPDIVERT
options ATA_STATIC_ID # Static device numbering
#device dpt # DPT Smartcache III, IV - See NOTES for options
#options XSERVER # support for X server on a vt console
#options FAT_CURSOR # start with block cursor
# Power management support (see NOTES for more options)
лог firewall'а
/var/log/security
...
Nov 9 13:06:04 freebsd kernel: ipfw: 10 Divert 8668 TCP 10.0.2.32:13227 10.0.2.35:25 in via fxp1
...
и никаких записей с 10.0.2.35:25 или 192.168.0.11:25 (куда на данный момент я маплю входящие пакеты на 25ый порт) более.
где можно посмотреть логи самого natd? в мануалах грится про /var/log/alias.log, но его структура непонятна:
freebsd# cat /var/log/alias.log | more
PacketAlias/InitPacketAliasLog: Packet alias logging enabled.
icmp=0, udp=0, tcp=1, pptp=0, proto=0, frag_id=0 frag_ptr=0 / tot=1 (sock=0)
icmp=0, udp=1, tcp=1, pptp=0, proto=0, frag_id=0 frag_ptr=0 / tot=2 (sock=0)
icmp=0, udp=2, tcp=1, pptp=0, proto=0, frag_id=0 frag_ptr=0 / tot=3 (sock=0)
icmp=0, udp=3, tcp=1, pptp=0, proto=0, frag_id=0 frag_ptr=0 / tot=4 (sock=0)
icmp=0, udp=4, tcp=1, pptp=0, proto=0, frag_id=0 frag_ptr=0 / tot=5 (sock=0)
icmp=0, udp=5, tcp=1, pptp=0, proto=0, frag_id=0 frag_ptr=0 / tot=6 (sock=0)
icmp=0, udp=6, tcp=1, pptp=0, proto=0, frag_id=0 frag_ptr=0 / tot=7 (sock=0)
icmp=0, udp=7, tcp=1, pptp=0, proto=0, frag_id=0 frag_ptr=0 / tot=8 (sock=0)
icmp=0, udp=8, tcp=1, pptp=0, proto=0, frag_id=0 frag_ptr=0 / tot=9 (sock=0)
icmp=0, udp=9, tcp=1, pptp=0, proto=0, frag_id=0 frag_ptr=0 / tot=10 (sock=0) |
