|
||||||||
Hello; I've been using monowall for my home for quite some time, now I wish to use it for bigger things but I am baffled as to why I am unable to get outbound smtp from inside my LAN. I have very simple rules and setup. My internal network is 192.168.1.0, my m0n0 box is 192.168.1.1 Also, how do I clear my nat cache? Thanks in advance, .vp $ ipfstat -io pass out quick on lo0 from any to any pass out quick on sis1 proto udp from 192.168.1.1/32 port = 67 to any port = 68 pass out quick on sis0 proto udp from any port = 68 to any port = 67 pass out quick on sis1 from any to any keep state pass out quick on sis0 from any to any keep state block out log quick from any to any pass in quick on lo0 from any to any block in log quick from any to any with short block in log quick from any to any with ipopt pass in quick on sis1 proto udp from any port = 68 to 255.255.255.255/32 port = 67 pass in quick on sis1 proto udp from any port = 68 to 192.168.1.1/32 port = 67 block in log quick on sis0 from 192.168.1.0/24 to any block in log quick on sis0 proto udp from any port = 67 to 192.168.1.0/24 port = 68 pass in quick on sis0 proto udp from any port = 67 to any port = 68 block in log quick on sis1 from !192.168.1.0/24 to any block in log quick on sis0 from 10.0.0.0/8 to any block in log quick on sis0 from 127.0.0.0/8 to any block in log quick on sis0 from 172.16.0.0/12 to any block in log quick on sis0 from 192.168.0.0/16 to any skip 1 in proto tcp from any to any flags S/FSRA block in log quick proto tcp from any to any block in log quick on sis1 from any to any head 100 pass in quick from 192.168.1.0/24 to 192.168.1.1/32 keep state group 100 pass in quick from any to any keep state keep frags group 100 block in log quick on sis0 from any to any head 200 pass in quick proto gre from any to 192.168.1.20/32 keep state group 200 pass in quick proto tcp from any to 192.168.1.20/32 port = 1723 keep state group 200 pass in quick proto tcp from 12.226.174.109/32 to 192.168.1.58/32 port = 22 keep state group 200 pass in quick proto tcp from 83.62.45.121/32 to 192.168.1.58/32 port = 22 keep state group 200 pass in quick proto tcp from any to 192.168.1.58/32 port = 443 keep state group 200 pass in quick proto tcp from 56.10.191.3/32 to 192.168.1.58/32 port = 25 keep state group 200 block in log quick from any to any |