# ipfw nat show config
ipfw nat 25 config ip XXX.XXX.122.10 redirect_port tcp 192.168.25.4:80 9001
redirect_port tcp 192.168.25.3:80 9000 redirect_port udp 192.168.25.3:161
9011

# ipfw show
00200     0       0 fwd 77.120.112.1 ip from XXX.XXX.122.10 to any out via
em1.201
01000    29    1171 nat 25 tcp from any to XXX.XXX.122.10 dst-port 9000-9100
01001    46    1840 nat 25 tcp from 192.168.25.0/24 80 to any
01002     0       0 nat 25 tcp from 192.168.25.0/24 53,123,161 to any
65533 13228 8362113 allow ip from any to any
65534     0       0 allow ip6 from any to any
65535   811  627505 allow ip from any to any

tcpdump не показывает пакетиков host 192.168.25.3 and port 161
Доступ-проброс к http (tcp 80) работает.

FreeBSD 10.1-PRERELEASE #0: Thu Oct 16 03:49:43 EEST 2014 amd64



-- 
 Vladislav V. Prodan
 System & Network Administrator
 support.od.ua

Ответить