Date: Tue, 15 Apr 2003 15:53:30 +0300 From: "Belov V." <vit@volia.com> To: freebsd-ipfw@freebsd.org Subject: allow vpn clients to connect to internal vpn server Message-ID: <1050411211.383975@smtp.top.net.ua>
next in thread | raw e-mail | index | archive | help
Hi My privat net is 192.168.0.0/24 and has Win VPN server in it. Natd has redirection: redirect_port tcp 192.168.0.1:1723 1723 What should be added to allow external vpn clients to connect to my internal vpn server? My current BSD router has the following ipfw rules: add allow ip from any to any via lo0 add deny all from any to 127.0.0.0/8 add deny all from 127.0.0.0/8 to any add deny all from 192.168.0.0/24 to any in recv de0 add deny all from any to 10.0.0.0/8 via de0 add deny all from any to 172.16.0.0/12 via de0 add deny all from any to 192.168.0.0/16 via de0 add deny all from any to 0.0.0.0/8 via de0 add deny all from any to 169.254.0.0/16 via de0 add deny all from any to 192.0.2.0/24 via de0 add deny all from any to 224.0.0.0/4 via de0 add deny all from any to 240.0.0.0/4 via de0 add deny tcp from any to any 137-139 via de0 add deny tcp from any to any 137-139 via de0 add fwd 192.168.0.10,3128 tcp from 192.168.0.0/24 to any 80 add divert 8668 all from any to any via de0 add pass tcp from any to any established add pass ip from any to any frag add pass tcp from any to ip_of_external_interface 25 setup add pass tcp from any to any 1723 setup add pass tcp from any to any 4899 setup add pass tcp from any to ip_of_external_interface 53 setup add pass udp from any to ip_of_external_interface 53 add pass udp from ip_of_external_interface 53 to any add deny log tcp from any to any in via de0 setup add pass tcp from any to any setup add pass udp from any to any 53 keep-state
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1050411211.383975>