IPFW + SMPT 465 :: UNIX :: Компьютерный форум Ru.Board

На сервере фри стоит IPFW. Нужно установить медок и соответственно почту для отправки. Решил например ukr.net. Он использует 465 порт с TLS. Почта не уходит.

вот настройки IPFW в чем ошибка? Я во фри совсем не силен. Комп в 33 сети. Спасибо !

#!/bin/sh -
FwCMD="/sbin/ipfw -q"
LanOut="re0"
IpOut="195.*.*.*"

LanIn="re1"
LanIn2="re2"

ip_lan="192.168.3"
ip_lan2="192.168.33"

NetIn="192.168.3.0/24"
NetIn2="192.168.33.0/24"
#NetMask="24"

#Ip kompa kot. soedinyaetsya po Vtun
IpTun="192.168.3.32"

${FwCMD} -f flush
${FwCMD} -f pipe flush
${FwCMD} -f queue flush

#---zapret na inet po ip
#${FwCMD} add deny ip from 192.168.3.81 to any via ${LanOut}

#---Vtund
${FwCMD} add allow ip from any to any via tun0
${FwCMD} add allow tcp from 93.*.*.* to ${IpOut} 5000
${FwCMD} add allow ip from ${IpTun} to 192.168.0.1 via ${LanIn}
${FwCMD} add allow ip from 192.168.0.1 to ${IpTun} via ${LanIn}

#---------dostup po OpenVpn--------------------------------------------
#${FwCMD} add allow ip from any to any 1494
#${FwCMD} add allow ip from any to any 1604
#${FwCMD} add allow udp from any to any 5656
#${FwCMD} add allow ip from any to any via tun2

#${FwCMD} add allow udp from any to any 138
#${FwCMD} add allow tcp from any to any 139
#${FwCMD} add allow tcp from any to any 445
#${FwCMD} add allow tcp from any to 176.36.*.* 12121 in via ${LanOut}
#${FwCMD} add allow tcp from any to 176.36.*.* 5006 in via ${LanOut}
#----------------------------------------------------------------------

#-----------------------------------------------------
${FwCMD} add allow ip from any to any 1494
${FwCMD} add allow ip from any to any 1604
${FwCMD} add allow udp from any to any 137
${FwCMD} add allow udp from any to any 138
${FwCMD} add allow tcp from any to any 139
${FwCMD} add allow tcp from any to any 445
${FwCMD} add allow tcp from any to 195.*.*.* 12121 in via ${LanOut}
${FwCMD} add allow tcp from any to 195.*.*.* 5006 in via ${LanOut}
#----------------------------------------------------------------------
${FwCMD} add allow gre from any to any
${FwCMD} add allow tcp from any to me 1723
${FwCMD} add allow ip from any to any via lo0
${FwCMD} add deny ip from any to 127.0.0.0/8
${FwCMD} add deny ip from 127.0.0.0/8 to any

#---chastnye seti
${FwCMD} add deny ip from any to 10.0.0.0/8 in via ${LanOut}
${FwCMD} add deny ip from any to 172.16.0.0/12 in via ${LanOut}
${FwCMD} add deny ip from any to 192.168.0.0/16 in via ${LanOut}
${FwCMD} add deny ip from any to 0.0.0.0/8 in via ${LanOut}
${FwCMD} add deny ip from any to 169.254.0.0/16 in via ${LanOut}

#---mul'tikastovye rassylki
${FwCMD} add deny ip from any to 240.0.0.0/4 in via ${LanOut}

#---fragmentirovannye icmp
${FwCMD} add deny icmp from any to any frag

#---shirokoveschatil'nye icmp na vneshnem interface
${FwCMD} add deny log icmp from any to 255.255.255.255 in via ${LanOut}
${FwCMD} add deny log icmp from any to 255.255.255.255 out via ${LanOut}

#---NAT
#---for net 192.168.3
${FwCMD} add divert natd ip from ${NetIn} to any out via ${LanOut}
#---for net 192.168.33
${FwCMD} add divert natd ip from ${NetIn2} to any out via ${LanOut}
${FwCMD} add divert natd ip from any to ${IpOut} in via ${LanOut}

#---rubim trafik k chastnym setyam cherez vneshniy interfeys
${FwCMD} add deny ip from 10.0.0.0/8 to any out via ${LanOut}
${FwCMD} add deny ip from 172.16.0.0/12 to any out via ${LanOut}
#${FwCMD} add deny ip from 192.168.0.0/16 to any out via ${LanOut}
${FwCMD} add deny ip from 0.0.0.0/8 to any out via ${LanOut}

#---rubim avtokonfigurennuyu chastnuyu set'
${FwCMD} add deny ip from 169.254.0.0/16 to any out via ${LanOut}

#---rubim mul'tikastovye rassylki
${FwCMD} add deny ip from 224.0.0.0/4 to any out via ${LanOut}
${FwCMD} add deny ip from 240.0.0.0/4 to any out via ${LanOut}

#---razreshaem vse ustanovlennye soedineniya
${FwCMD} add allow tcp from any to any established

#---rareshaem ishodyaschiy trafik
${FwCMD} add allow ip from ${IpOut} to any out xmit ${LanOut}

#---DNS
${FwCMD} add allow udp from any 53 to any via ${LanOut}
${FwCMD} add allow udp from any to any 53 via ${LanOut}

#---UDP (dlya sinhronizacii vremeni - 123 port)
${FwCMD} add allow udp from any to any 123 via ${LanOut}

#ICMP trafik- echo zapros, echo otvet i vremya zhizni isteklo
${FwCMD} add allow icmp from any to any icmptypes 0,8,11

#---SSH
${FwCMD} add allow tcp from any to ${IpOut} 22 via ${LanOut}

#---tcp vnutri localki (na vnutrennem interface)
${FwCMD} add allow tcp from any to any via ${LanIn}
${FwCMD} add allow tcp from any to any via ${LanIn2}

#---udp vnutri localki (na vnutrennem interface)
${FwCMD} add allow udp from any to any via ${LanIn}
${FwCMD} add allow udp from any to any via ${LanIn2}

#---
${FwCMD} add allow udp from any to 192.168.3.2 258 via ${LanOut}
${FwCMD} add allow udp from any to 192.168.3.1 266 via ${LanOut}
${FwCMD} add allow udp from any to 192.168.3.3 274 via ${LanOut}
${FwCMD} add allow udp from any to 192.168.3.7 282 via ${LanOut}
${FwCMD} add allow udp from any to 192.168.3.8 278 via ${LanOut}
${FwCMD} add allow udp from any to 192.168.3.9 290 via ${LanOut}

#---
#${FwCMD} add allow udp from any 258 to any via ${LanOut}
#${FwCMD} add allow udp from any 266 to any via ${LanOut}
#${FwCMD} add allow udp from any 274 to any via ${LanOut}
#${FwCMD} add allow udp from any 282 to any via ${LanOut}
#${FwCMD} add allow udp from any 278 to any via ${LanOut}
#${FwCMD} add allow udp from any 290 to any via ${LanOut}

#TLS SSl
${FwCMD} add allow tcp from any to any 443 via ${LanOut}
${FwCMD} add allow tcp from any 443 to any via ${LanOut}

# smtp
${FwCMD} add allow tcp from any to any 25 via ${LanOut}
${FwCMD} add allow tcp from any 25 to any via ${LanOut}
${FwCMD} add allow tcp from any 465 to any via ${LanOut}
${FwCMD} add allow tcp from any 465 to any via ${LanIn2}
${FwCMD} add allow tcp from any to any 465 via ${LanOut}
${FwCMD} add allow tcp from any to any 465 via ${LanIn2}

# pop
${FwCMD} add allow tcp from any 110 to any via ${LanIn}
${FwCMD} add allow tcp from any 110 to any via ${LanIn2}

#---icmp vnutri localki (na vnutrennem interface)
${FwCMD} add allow icmp from any to any via ${LanIn}
${FwCMD} add allow icmp from any to any via ${LanIn2}

${FwCMD} add deny ip from any to any

Модерирует : ShriEkeR
Версия для печати • Подписаться • Добавить в закладки