#-------------------------------------------------------------------- # Do 'normal' IP address translation. This line will take all packets # going out on your external NIC (bge0) that have a source address coming # from your internal network (192.168.1.0), and translate it to whatever # IP address your external NIC happens to have at that time #-------------------------------------------------------------------- # FTP map bge0 0.0.0.0/0 -> 0/32 proxy port 21 ftp/tcp # NAT map bge0 192.168.1.0/24 -> 0.0.0.0/32 portmap tcp/udp auto map bge0 192.168.1.0/24 -> 0.0.0.0/32 #-------------------------------------------------------------------- # If you have a system on your internal network that needs to be # 'reachable' by external systems on the internet, you'll need a rule # similar to the one below. This one takes all inbound http traffic # (TCP port 80) that hits the firewall's external interface (rl0) and # redirects it to port 80 on the 192.168.1.50 system on the internal network. # Simply uncomment the rule, change the IP address and port number so that # it does what you need. Remember that you have to enable the corresponding # inbound filter in your /etc/ipf.rules file, too. #-------------------------------------------------------------------- # rdr rl0 0.0.0.0/0 port 80 -> 192.168.1.50 port 80 tcp # Redireccion para el Squid # bge0 Internet # Inseguro www 80 rdr bge1 0.0.0.0/0 port 80 -> 127.0.0.1 port 3128 tcp # Seguro www 443 (esto no deja entrar a gmail.com, hotmail, etc) #rdr bge1 0.0.0.0/0 port 443 -> 127.0.0.1 port 3128 tcp # Redireccion para el aMule rdr bge0 0.0.0.0/0 port 4662 -> 192.168.7.100 port 4662 tcp rdr bge0 0.0.0.0/0 port 4711 -> 192.168.7.100 port 4711 tcp rdr bge0 0.0.0.0/0 port 4665 -> 192.168.7.100 port 4665 udp rdr bge0 0.0.0.0/0 port 4672 -> 192.168.7.100 port 4672 udp # Redireccion para el Azureus rdr bge0 0.0.0.0/0 port 6882 -> 192.168.7.100 port 6882 tcp rdr bge0 0.0.0.0/0 port 6882 -> 192.168.7.100 port 6882 udp rdr bge0 0.0.0.0/0 port 6883 -> 192.168.7.100 port 6883 tcp rdr bge0 0.0.0.0/0 port 6883 -> 192.168.7.100 port 6883 udp rdr bge0 0.0.0.0/0 port 6969 -> 192.168.7.100 port 6969 udp # Redireccion a la UPS rdr bge0 0.0.0.0/0 port 83 -> 192.168.1.252 port 80 tcp