freebsd双网卡共享上网的设置-pf

服务器1网卡接互联网,2网卡接交换机,工作站电脑也连接交换机

工作站配置
局域网 IP 192.168.16.20
掩码255.255.255.0
网关192.168.16.4

服务器2个网卡配置
1网卡设备名em0
公网IP 192.168.18.88
掩码 255.255.255.0
网关 192.168.18.1
dns 202.102.224.68

2网卡设备名em1
局域网 IP 192.168.16.4
掩码255.255.255.0

 

配置/etc/rc.conf如下：

ifconfig_em1="inet 192.168.16.4  netmask 255.255.255.0"

ifconfig_em0="inet 192.168.18.88  netmask 255.255.255.0"

gateway_enable="YES"

defaultrouter="192.168.18.1"

pf_enable="YES"

pf_rules="/etc/pf.conf"

sshd_enable="YES"

dhcpd_enable="YES"

hostname="god.com"

 

配置/etc/pf.conf如下：
wan="em0"

lan="em1"

nat pass on $wan from $lan:network to any -> $wan

pass in all

pass out all

 

配置/etc/sysctl.conf如下：
net.inet.ip.forwarding=1

net.inet.ip.sourceroute=0

net.inet.ip.accept_sourceroute=0

net.inet.tcp.drop_synfin=1

可以了