linux 端口回流,m0n0的FTP和WEB端口回流问题解决

此回流问题解决方法同样适用于pfsense

具体设置

FTP服务配置

1. 进入  Firewall--nat--outbound

2. 为你的内网添加外出规则

Interface:            WAN

Source:                A.B.C.0/24(内网网段)

Destination.Type:    any

3. 做 21 FTP服务映射

inbound rules 1:

Interface:            WAN

External address:    WAN Address

Protocol:            TCP

External port range.from:    21

NAT IP:                A.B.C.D1(FTP服务器地址)

Local port:            21

Auto Firewall rule: yes

inbound rules 2:

Interface:            LAN

External address:    WAN Address

Protocol:            TCP

External port range.from:    21

NAT IP:                A.B.C.D1(FTP服务器地址)

Local port:            21

outbound rules :

Interface:            LAN

Source:                A.B.C.0/24(内网网段)

Destination.Type:    A.B.C.D1/32(FTP服务器地址)

Policy NAT.Enable:    yes

Policy NAT.Protocol:TCP

Policy NAT.from:    21

4. 添加FTP服务被动工作模式NAT(经测试：此项可选 端口范围可以试着修改)

inbound rules 1:

Interface:            WAN

External address:    WAN Address

Protocol:            TCP

External port range.from:    65000

External port range.to:        65100

NAT IP:                A.B.C.D1(FTP服务器地址)

Local port:            65000

Auto Firewall rule: yes

inbound rules 2:

Interface:            LAN

External address:    WAN Address

Protocol:            TCP

External port range.from:    65000

External port range.to:        65100

NAT IP:                A.B.C.D1(FTP服务器地址)

Local port:            65000

outbound rules :

Interface:            LAN

Source:                A.B.C.0/24(内网网段)

Destination.Type:    A.B.C.D1/32(FTP服务器地址)

Policy NAT.Enable:    yes

Policy NAT.Protocol:TCP

Policy NAT.from:    65000

Policy NAT.to:        65100

FTP服务配置结束！

web服务配置

1. 添加WEB(80)端口映射

inbound rules 1:

Interface:            WAN

External address:    WAN Address

Protocol:            TCP

External port range.from:    80

NAT IP:                A.B.C.D2(WEB服务器地址)

Local port:            80

Load-balancing:        yes

Auto Firewall rule: yes

inbound rules 2:

Interface:            LAN

External address:    WAN Address

Protocol:            TCP

External port range.from:    80

NAT IP:                A.B.C.D2(WEB服务器地址)

Local port:            80

Load-balancing:        yes

outbound rules :

Interface:            LAN

Source:                A.B.C.0/24(内网网段)

Destination.Type:          A.B.C.D2/32(WEB服务器地址)

Policy NAT.Enable:    yes

Policy NAT.Protocol:TCP

Policy NAT.from:    80

WEB配置完成!