m0n0的FTP和WEB端口回流问题解决

此回流问题解决方法同样适用于pfsense

具体设置

FTP服务配置
1. 进入  Firewall--nat--outbound
2. 为你的内网添加外出规则
    Interface:            WAN
    Source:                A.B.C.0/24（内网网段）
    Destination.Type:    any
    

3. 做 21 FTP服务映射
    inbound rules 1:
        Interface:            WAN
        External address:    WAN Address
        Protocol:            TCP
        External port range.from:    21
        NAT IP:                A.B.C.D1(FTP服务器地址)
        Local port:            21
        Auto Firewall rule: yes
    inbound rules 2:
        Interface:            LAN
        External address:    WAN Address
        Protocol:            TCP
        External port range.from:    21
        NAT IP:                A.B.C.D1(FTP服务器地址)
        Local port:            21
    outbound rules :
        Interface:            LAN
        Source:                A.B.C.0/24(内网网段)
        Destination.Type:    A.B.C.D1/32(FTP服务器地址)
        Policy NAT.Enable:    yes
        Policy NAT.Protocol:TCP
        Policy NAT.from:    21
       
4. 添加FTP服务被动工作模式NAT(经测试：此项可选 端口范围可以试着修改）
    inbound rules 1:
        Interface:            WAN
        External address:    WAN Address
        Protocol:            TCP
        External port range.from:    65000
        External port range.to:        65100
        NAT IP:                A.B.C.D1(FTP服务器地址)
        Local port:            65000
        Auto Firewall rule: yes
    inbound rules 2:
        Interface:            LAN
        External address:    WAN Address
        Protocol:            TCP
        External port range.from:    65000
        External port range.to:        65100
        NAT IP:                A.B.C.D1(FTP服务器地址)
        Local port:            65000
    outbound rules :
        Interface:            LAN
        Source:                A.B.C.0/24（内网网段）
        Destination.Type:    A.B.C.D1/32(FTP服务器地址)
        Policy NAT.Enable:    yes
        Policy NAT.Protocol:TCP
        Policy NAT.from:    65000
        Policy NAT.to:        65100

FTP服务配置结束！

web服务配置
       
1. 添加WEB（80）端口映射
    inbound rules 1:
        Interface:            WAN
        External address:    WAN Address
        Protocol:            TCP
        External port range.from:    80
        NAT IP:                A.B.C.D2（WEB服务器地址）
        Local port:            80
        Load-balancing:        yes
        Auto Firewall rule: yes
   
    inbound rules 2:
        Interface:            LAN
        External address:    WAN Address
        Protocol:            TCP
        External port range.from:    80
        NAT IP:                A.B.C.D2（WEB服务器地址）
        Local port:            80
        Load-balancing:        yes
   
    outbound rules :
        Interface:            LAN
        Source:                A.B.C.0/24（内网网段）
        Destination.Type:          A.B.C.D2/32（WEB服务器地址）
        Policy NAT.Enable:    yes
        Policy NAT.Protocol:TCP
        Policy NAT.from:    80
   

WEB配置完成!