[howto]m0n0wall 1.2b9 做端口'回流'，以及集成 3322.org 动态客户端

edwardj

a simple howto

1. 
   
2. 1. download my mods
   
3.     http://61.132.118.190/m0n0/1.2b9/etc/rc.newwanip
   
4.     http://61.132.118.190/m0n0/1.2b9/etc/inc/filter.inc
   
5.     http://61.132.118.190/m0n0/1.2b9/usr/local/www/firewall_nat.php
   
6.     http://61.132.118.190/m0n0/1.2b9/usr/local/www/firewall_nat_edit.php
   
7.     http://61.132.118.190/m0n0/1.2b9/usr/local/www/firewall_nat_out.php
   
8.     http://61.132.118.190/m0n0/1.2b9/usr/local/www/firewall_nat_out_edit.php
   
9.     http://61.132.118.190/m0n0/1.2b9/usr/local/www/services_dyndns.php
   
10. 
    
11. 2. download 3322.org dynamic dns client for freebsd and extract ez-ipupdate
    
12. 
    
13. 3. login to m0n0's web gui and goto exec.php then upload those files
    
14. 
    
15. 4. execute the following command in exec.php
    
16.     umount /cf; mount -rw /cf; mkdir /cf/patch
    
17.     cd /cf/patch; mkdir etc etc/inc user usr/local usr/local/bin usr/local/www
    
18.     cd /tmp; chmod +x ez* rc*; cp rc* /etc; cp *inc /etc/inc; cp *php /usr/local/www; cp ez* /usr/local/bin
    
19.     cd /cf/patch; cp /tmp/rc* etc; cp /tmp/*inc etc/inc; cp /tmp/*php usr/local/www; cp /tmp/ez* usr/local/bin
    
20.     sync; sync; sync; umount /cf; mount /cf
    
21. 
    
22. 5. download your config file, open it in a text editor, and add the following to the  section
    
23.     /bin/echo -n Applying patches... > /dev/console
    
24.     /bin/cp -R /cf/patch/* /
    
25.     /bin/echo -n done. > /dev/console
    
26. 
    
27. 6. save the config file and upload it back to m0n0
    
28. 
    
29. 7. enable dyndns, select 3322.org and setup your account. be sure to add a dns server in the general setup page first
    
30. 
    
31. 8. setup inbound and outbound nat rules to make the redirected service accessible to client from within lan. read my email in m0n0wall's mailing list for more detail
    
32.     http://m0n0.ch/wall/list/?action=show_msg&actionargs[]=186&actionargs[]=63
    
33.    
    
34. 9. please note, in that post, the inbound rule for transparent proxying working is wrong. here is the correct one
    
35. >
    
36. >3. add inbound/outbound nat rules for transparent proxying
    
37. >        inbound rules 1:
    
38. >                Interface:                        LAN
    
39. >+++                 Source:                        not A.B.C.D5/32
    
40. >                External address:                Any Address
    
41. >                Protocol:                        TCP
    
42. >                External port range.from:        80
    
43. >                NAT IP:                        A.B.C.D5
    
44. >                Local port:                        3128
    
45. 
    
46. 10. bugs? post here please. thank you
    

复制代码

[ 本帖最后由 analyst 于 2005-8-12 11:02 PM 编辑 ]

edwardj

自己座沙发

analyst

支持！

edwardj

板猪帮个忙，把主贴链接上的 [url][/url] 标记去掉，谢谢

Silence

我现在用 m0n0 内置的 hn.org，感觉也不错，就是更换 IP 后解析的速度稍慢一些。

edwardj

原帖由 Silence 于 2005-8-12 11:07 PM 发表
我现在用 m0n0 内置的 hn.org，感觉也不错，就是更换 IP 后解析的速度稍慢一些。

噢，用偶的 rc.newwanip 应该就可以了。原来的文件在获取新的 wan 口地址后只调用更新了 RFC 2136 动态 dns，对 3322 这类没有更新

xxxx-xxxx

学习一下
楼主能不能解释一下？
在搞个SSH进去就完美啦。

[ 本帖最后由 xxxx-xxxx 于 2005-8-12 11:58 PM 编辑 ]

czw1240

最近又想搞下应用了
哈哈

xzjt1982

看一下~

adslcool

不错

techart

看看

xteewfnh

hao kan me

阳光帆

好

wuxj

看一下！

huagai

回复才能看