У меня реализовано несколько каналов в инет.
За сервером стояти 4 роутера в разных подсетях, на них смотрят 4 сетевые.
Имеется вот такой rc.firewall
#!/bin/sh -
f='/sbin/ipfw'
ifOut='vr1'
ifOur='rl0'
ifOuf='rl1'
ifOuh='vr2'
${f} -f flush
...............
...............
...............
${f} add 110 allow ip from any to any via lo0
${f} add 120 skipto 1000 ip from me to any
${f} add 130 deny icmp from any to any in icmptype 5,9,13,14,15,16,17
${f} add 160 skipto 2000 ip from any to me
${f} add 200 skipto 500 ip from any to any via ${ifOut}
${f} add 200 skipto 500 ip from any to any via ${ifOur}
${f} add 200 skipto 500 ip from any to any via ${ifOuf}
${f} add 200 skipto 500 ip from any to any via ${ifOuh}
${f} add 300 setfib 1 ip from "table(30)" to any in
${f} add 301 setfib 2 ip from "table(31)" to any in
${f} add 302 setfib 3 ip from "table(32)" to any in
${f} add 350 skipto 4500 ip from any to any in
${f} add 400 skipto 450 ip from any to any recv ${ifOut}
${f} add 400 skipto 450 ip from any to any recv ${ifOur}
${f} add 400 skipto 450 ip from any to any recv ${ifOuf}
${f} add 400 skipto 450 ip from any to any recv ${ifOuh}
#${f} add 420 divert 1 ip from any to any
#${f} add 450 divert 2 ip from any to any
${f} add 450 tee 2 ip from any to any
${f} add 490 allow ip from any to any
${f} add 500 skipto 32500 ip from any to any in
#${f} add 510 divert 1 ip from any to any
${f} add 510 tee 1 ip from any to any
#${f} add 540 allow ip from any to any
${f} add 600 allow ip from 172.16.0.0/16 to any setup limit src-addr 100
${f} add 605 allow ip from 192.168.0.0/16 to any setup limit src-addr 100
${f} add 1000 allow udp from any 53,7723 to any
${f} add 1010 allow tcp from any to any setup keep-state
${f} add 1020 allow udp from any to any keep-state
${f} add 1100 allow ip from any to any
${f} add 2000 check-state
${f} add 2010 allow icmp from any to any
${f} add 2020 allow tcp from any to any 80,443
${f} add 2050 deny ip from any to any via ${ifOut}
${f} add 2050 deny ip from any to any via ${ifOur}
${f} add 2050 deny ip from any to any via ${ifOuf}
${f} add 2050 deny ip from any to any via ${ifOuh}
${f} add 2060 allow udp from any to any 53,7723
${f} add 2100 deny ip from any to any
${f} add 32490 deny ip from any to any
Каким образом можно сделать, так что бы все роутеры загнать в одну подсеть и все внешние каналы роутились через один интерфейс (одну сетевую)?
