set policy id 94 from "Untrust" to "DMZ" "Any" "Any" "ANY" permit log set policy id 94 disable set policy id 94 exit set policy id 95 from "DMZ" to "Untrust" "Any" "Any" "ANY" nat src permit log set policy id 95 exit set policy id 96 from "Trust" to "DMZ" "Any" "Any" "ANY" permit set policy id 96 exit set policy id 97 from "DMZ" to "Trust" "Any" "Any" "ANY" permit log set policy id 97 exit
未设置nat src,DMZ 将不能访问外网
原文出处:Netkiller 系列 手札
本文作者:陈景峯
转载请与作者联系,同时请务必标明文章原始出处和作者信息及本声明。