*BSD中文用户社区

代码: 全选

ntpd_flags=""
named_flags=""

代码: 全选

acl clients {
	localnets;
	::1;
};

options {
	version "";	// remove this to allow version queries
	forward only;
	forwarders { 114.114.114.114; 8.8.8.8; };
	max-cache-size 2097152;   //not sure, optional.

	listen-on    { any; };
	listen-on-v6 { any; };

	empty-zones-enable yes;

	allow-recursion { clients; };
};

logging {
	category lame-servers { null; };
};

代码: 全选

    # increase default state limit from 10'000 states on busy systems
    #set limit states 100000

    int_if="em0"  ###修改为内网网卡

    set skip on lo

    match out on tun0 inet from !(tun0:network) to any nat-to (tun0:0)

    block in
    pass out quick

    antispoof quick for { lo $int_if }

    pass in on $int_if

    # By default, do not permit remote connections to X11
    block in on ! lo0 proto tcp to port 6000:6010

代码: 全选

###start(dial):ppp -auto chinatelcom, stop(disconnect):pkill ppp  
###(c) f5b
default:
  set log Phase Chat LCP IPCP CCP tun command
### chinatelcom, cdma 3g ok.
chinatelcom:
  set device /dev/cuaU0
  set speed 1843200
  set dial "ABORT BUSY ABORT NO\\sCARRIER TIMEOUT 5 \
           \"\" AT OK-AT-OK ATE1Q0 OK \\dATDT\\T TIMEOUT 40 CONNECT"
  set phone "#777"
  set login
  set authname [email protected]
  set authkey vnet.mobi
  set timeout 120
  set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.0 0.0.0.0
  add default HISADDR
  enable dns
### chinamobile, 2g only
chinamobile:
  set device /dev/cuaU0
  set dial "ABORT ERROR ABORT BUSY ABORT NO\\sCARRIER TIMEOUT 5 \
           \"\" ATZ OK-ATZ-OK AT+CGDCONT=1,\\\"IP\\\",\\\"cmnet\\\" OK \\dATD\\T TIMEOUT 40 CONNECT"
  set phone "*99#"
  set speed 460800
  set login
  set timeout 0
  set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.0 0.0.0.0
  add default HISADDR
  enable dns
### chinaunicom, 3g only
chinaunicom:
  set device /dev/cuaU0
  set dial "ABORT ERROR ABORT BUSY ABORT NO\\sCARRIER TIMEOUT 5 \
           \"\" ATZ OK-ATZ-OK AT+CGDCONT=1,\\\"IP\\\",\\\"3gnet\\\" OK \\dATD\\T TIMEOUT 40 CONNECT"
  set phone "*99#"
  set speed 7200000
  set login
  set timeout 0
  set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.0 0.0.0.0
  add default HISADDR
  enable dns
### China Telecom ADSL only, change bge0 to interface name connected to modem, change authname & authkey according.
adsl:
 set device "!/usr/sbin/pppoe -i bge0"
 set mtu max 1492
 set mru max 1492
 set speed sync
 disable acfcomp protocomp
 deny acfcomp
 set authname [email protected]
 set authkey 12345
 enable lqr
 enable mssfixup
 enable dns
 add! default HISADDR

代码: 全选

    # increase default state limit from 10'000 states on busy systems
    #set limit states 100000

    int_if="em0"  ###修改为内网网卡

    set skip on lo

    match out on tun0 inet from !(tun0:network) to any nat-to (tun0:0)
####
在openbsd 5.4 中，可不可以写成这样：
[color=#FF0040]# match rules

match out on egress inet from !(egress:network) to any nat-to (egress:0)[/color]

#####
    block in
    pass out quick

    antispoof quick for { lo $int_if }

    pass in on $int_if

    # By default, do not permit remote connections to X11
    block in on ! lo0 proto tcp to port 6000:6010