[Nintando]

cat ipnat.rules
#----------------------------------
#Megapolis - сейчас пытаюсь поправить правила
#rdr ppp0 ip_INET2 port 80 -> 192.168.140.83 port 80 tcp
#rdr re0 192.168.140.83/32 port 80 -> 127.0.0.1 port 80 tcp
#rdr re0 127.0.0.1/32 port 80 -> 192.168.140.83 port 80 tcp
#rdr re0 192.168.140.83 port 80 -> ip_INET2 port 80 tcp
map tun0 0/0 -> 192.168.140.83/32 - попытка на конкретный подопытный ip
map tun0 192.168.140.83/32 -> ip_INET2 - попытка на конкретный подопытный ip
#---------
rdr re1 ip_INET1/32 port 1723 -> 192.168.140.97 port 1723
rdr re0 192.168.140.97/32 port 1723 -> 127.0.0.1 port 1723
rdr re1 ip_INET1/32 port 1723 -> 192.168.140.97 port 1723 gre
rdr re0 192.168.140.97/32 port 1723 -> 127.0.0.1 port 1723 gre
rdr re1 ip_INET1/32 port 500 -> 192.168.140.97 port 500
rdr re0 192.168.140.97/32 port 500 -> 127.0.0.1 port 500
rdr re1 ip_INET1/32 port 4500 -> 192.168.140.97 port 4500
rdr re0 192.168.140.97/32 port 4500 -> 127.0.0.1 port 4500
# Redirect to CRM
#rdr re1 ip_INET1/32 port 9991 -> 192.168.140.18 port 80 tcp
#rdr re0 192.168.140.99/32 port 80 -> 127.0.0.1 port 80
#----------------------------------
# Redirect to PROXY
rdr re0 0/0 port 80 -> 192.168.140.99 port 3128 tcp
rdr re0 0/0 port 8000 -> 127.0.0.1 port 3128 tcp
rdr re0 0/0 port 8080 -> 127.0.0.1 port 3128 tcp
rdr re0 0/0 port 8181 -> 127.0.0.1 port 3128 tcp
rdr re0 0/0 port 8888 -> 127.0.0.1 port 3128 tcp
#rdr re0 0/0 port 5190 -> 127.0.0.1 port 1080 tcp
#rdr re0 0/0 port 20 -> 127.0.0.1 port 3128 tcp
#rdr re0 0/0 port 21 -> 127.0.0.1 port 3128 tcp
rdr re1 from 194.193.182.0/16 to ip_INET1/32 port = 80 -> 0/0 port 80 tcp
#----------------------------------
#Managers Masquerade
#ALP
map re1 192.168.140.69/32 -> ip_INET1/32
map re1 192.168.140.101/32 -> ip_INET1/32
map re1 192.168.140.102/32 -> ip_INET1/32
map re1 192.168.140.100/32 -> ip_INET1/32
map re1 192.168.140.107/32 -> ip_INET1/32
map re1 192.168.140.185/32 -> ip_INET1/32
map re1 192.168.140.1/32 -> ip_INET1/32
map re1 192.168.140.56/32 -> ip_INET1/32
map re1 192.168.140.71/32 -> ip_INET1/32
map re1 192.168.140.33/32 -> ip_INET1/32
map re1 192.168.140.96/32 -> ip_INET1/32
map re1 192.168.140.80/32 -> ip_INET1/32
map re1 192.168.140.81/32 -> ip_INET1/32
#map re1 192.168.140.83/32 -> ip_INET1/32
map re1 192.168.140.47/32 -> ip_INET1/32
#pst
map re1 192.168.140.61/32 -> ip_INET1/32
map re1 192.168.140.94/32 -> ip_INET1/32
#pea
map re1 192.168.140.44/32 -> ip_INET1/32
#LAA
map re1 192.168.140.13/32 -> ip_INET1/32
#LAN
map re1 192.168.140.82/32 -> ip_INET1/32
#BKP
map re1 192.168.140.46/32 -> ip_INET1/32
#test
map re1 192.168.140.234/32 -> ip_INET1/32
#INDIA
map re1 192.168.140.105/32 -> ip_INET1/32
#SVS
map re1 192.168.140.24/32 -> ip_INET1/32
map re1 192.168.140.11/32 -> ip_INET1/32
map re1 192.168.140.35/32 -> ip_INET1/32
#LAK
map re1 192.168.140.16/32 -> ip_INET1/32
map re1 192.168.140.9/32 -> ip_INET1/32
map re1 192.168.140.36/32 -> ip_INET1/32
map re1 192.168.140.18/32 -> ip_INET1/32
map re1 192.168.140.38/32 -> ip_INET1/32
map re1 192.168.140.48/32 -> ip_INET1/32
#efa
map re1 192.168.140.43/32 -> ip_INET1/32
#laanote
map re1 192.168.140.66/32 -> ip_INET1/32
#mmv
map re1 192.168.140.57/32 -> ip_INET1/32
#avt
map re1 192.168.140.62/32 -> ip_INET1/32
map re1 192.168.140.87/32 -> ip_INET1/32
map re1 192.168.140.59/32 -> ip_INET1/32
map re1 192.168.140.112/32 -> ip_INET1/32
map re1 192.168.140.72/32 -> ip_INET1/32
map re1 192.168.140.77/32 -> ip_INET1/32
map re1 192.168.140.67/32 -> ip_INET1/32
#---------------------------------
#PSTEAM
#PSTEAM_AAV
map re1 192.168.140.60/32 -> ip_INET1/32
map re1 192.168.140.111/32 -> ip_INET1/32
map re1 192.168.140.113/32 -> ip_INET1/32
map re1 192.168.140.117/32 -> ip_INET1/32
map re1 192.168.140.110/32 -> ip_INET1/32
map re1 192.168.140.39/32 -> ip_INET1/32
map re1 192.168.140.97/32 -> ip_INET1/32
#---------------------------------
#PMPOST
#PMPOST_IKE
map re1 from 192.168.140.84/32 to 195.206.53.226/32 -> ip_INET1/32
map re1 192.168.140.89/32 -> ip_INET1/32
#FEATURE_TNA
map re1 192.168.140.21/32 -> ip_INET1/32
#BUBUBU
map re1 192.168.140.32/32 -> ip_INET1/32
#PROXY
map re1 192.168.140.199/32 -> ip_INET1/32
#PMPOST_ZIA
#map re1 192.168.140.27/32 -> ip_INET1/32
#BAA SKYPE
map re1 192.168.140.26/32 -> ip_INET1/32
map re1 192.168.140.22/32 -> ip_INET1/32
map re1 192.168.140.23/32 -> ip_INET1/32
map re1 192.168.140.25/32 -> ip_INET1/32
map re1 192.168.140.42/32 -> ip_INET1/32
#FIL
map re1 192.168.140.55/32 -> ip_INET1/32
#VAD
map re1 192.168.140.85/32 -> ip_INET1/32
#SGG
map re1 192.168.140.45/32 -> ip_INET1/32
#LAN SKYPE
map re1 192.168.140.41/32 -> ip_INET1/32
#---------------------------------
#Disabled Masquerade
#UNKNOWN
#map re1 192.168.140.17/32 -> ip_INET1/32
#PSA2
#map re1 192.168.140.12/32 -> ip_INET1/32
#LAPTOP
map re1 192.168.140.10/32 -> ip_INET1/32
#SIVWIN
map re1 192.168.140.58/32 -> ip_INET1/32
map re1 192.168.140.93/32 -> ip_INET1/32
map re1 192.168.140.88/32 -> ip_INET1/32
map re1 192.168.140.86/32 -> ip_INET1/32

файервол ipfw, видимо там стоят все завороты... уже голова кругом

[Nintando]

но, если ввести самым первым правилом:
${fwcmd} add deny all from ip_LAN_test to ip_INET_1
${fwcmd} add deny all from ip_INET_1 to ip_LAN_test

все равно работает инет на этом компе и выдает ip_INET_1 в браузере...


Еще же есть прозрачный прокси...

*закомментировал все в ipnat и rc.firewall связанное с этим ip - все равно пашет инет = ))

*netstat -rn
Routing tables

Internet:
Destination Gateway Flags Refs Use Netif Expire
default ip_INET1.169 UGS 1 12943902 re1
ip_INET1.168/30 link#2 UC 0 0 re1
ip_INET1.169 00:16:c7:57:bd:1b UHLW 2 0 re1 1125
ip_INET1.170 00:0c:76:74:07:d3 UHLW 1 48677 lo0
ip_INET2.176.236 ip_INET2.180.103 UGH 0 0 tun0
127.0.0.1 127.0.0.1 UH 0 3899 lo0
192.168.140.0/24 link#1 UC 0 0 re0

192.168.140.83 00:1d:7d:e5:48:2a UHLW 1 5549 re0 1198

*
# cat resolv.conf
domain DOMAIN.ru
nameserver 192.168.140.99
nameserver ip_INET2.176.253
nameserver ip_INET2.176.252