FreeBSD: Firewall separado de proxy

<-------------- No GATEWAY (192.168.0.254) --------------------->
# sysctl -a | grep ip.redirect
net.inet.ip.redirect: 0

pf.conf on gateway (192.168.0.254):
pass in quick on $int_if route-to ($int_if 192.168.0.250) proto tcp from
! 192.168.0.250 to any port 80
<-------------- FIM GATEWAY (192.168.0.254) --------------------->


<-------------- NO PROXY SERVER (192.168.0.250) --------------------->
# sysctl -a | grep ip.redirect
net.inet.ip.redirect: 0

pf.conf (Proxy Server 192.168.0.250):
rdr inet proto tcp from ! 192.168.0.250 to any port www -> 192.168.0.250
port 8080
<-------------- FIM PROXY SERVER (192.168.0.250) --------------------->

FreeBSD: Shell

set prompt = '[%B%m%b] %B%~%b%# '
set prompt = '%m %# '
set prompt = '%n@%m%# '
set prompt = '%n@%m:%/%# '
set prompt = '%n@%m:%~%# '

FreeBSD: Liberando consulta ao servidor dns

ipfw -q add 0200 allow tcp from any to ip-do-servidor-dns 53 in via
interface-externa setup keep-state
ipfw -q add 0200 allow tcp from any to ip-do-servidor-dns 53 in via
interface-externa setup keep-state

FreeBSD: Redirecionar trafego do firewall para servidor proxy

No gateway:
IF_LAN = "ste0"
REDE = "192.168.1.0/24"
EXT_LAN = "ste1"
PROXY = "192.168.1.10"

pass in quick on $if_lan route-to ($if_lan) proto tcp from $REDE to any port 80

No proxy:

rdr pass on $if_lan proto tcp from $rede to $if_lan port 80 -> localhost port 3128



No gw
ipfw add fwd 192.168.1.10 tcp from 192.168.1.0/24 to not me 80

No proxy
ipfw add fwd localhost,3128 tcp from 192.168.1.0/24 to not me 80