33.7. Port Forwarding / NAT / Firewall

33.7.1. Port Forwarding

			
fwd tcp <local_ip> <local_port> <remote_ip> <remote_port> [timeout]
fwd udp <local_ip> <local_port> <remote_ip> <remote_port> [timeout]
			
			

33.7.2. NAT

			
nat port <vip> <network_ip> <netmask> [timeout] [gateway]
			
			

33.7.3. Firewall

			
accessgroup <accesslist_id> <interface>
			
			

			
accesslist permit icmp echoreply <source_ip> <source_mask> <destination_ip> <destination_mask> <accesslist_id>
accesslist permit icmp echorequest <source_ip> <source_mask> <destination_ip> <destination_mask> <accesslist_id>
accesslist permit tcp <source_ip> <source_mask> <source_port> <destination_ip> <destination_mask> <destination_port> <accesslist_id>
accesslist permit udp <source_ip> <source_mask> <source_port> <destination_ip> <destination_mask> <destination_port> <accesslist_id>
accesslist deny icmp echoreply <source_ip> <source_mask> <destination_ip> <destination_mask> <accesslist_id>

accesslist deny icmp echorequest <source_ip> <source_mask> <destination_ip> <destination_mask> <accesslist_id>
accesslist deny tcp <source_ip> <source_mask> <source_port> <destination_ip> <destination_mask> <destination_port> <accesslist_id>
accesslist deny udp <source_ip> <source_mask> <source_port> <destination_ip> <destination_mask> <destination_port> <accesslist_id
			
			

原文出处：Netkiller 系列 手札
本文作者：陈景峯
转载请与作者联系，同时请务必标明文章原始出处和作者信息及本声明。