собсна вот, может что забыл?
xxx# cat /etc/rc.conf
# -- sysinstall generated deltas -- # Wed Sep 8 17:48:34 2010
# Created: Wed Sep 8 17:48:34 2010
# Enable network daemons for user convenience.
# Please make all changes to this file, not to /etc/defaults/rc.conf.
# This file now contains just the overrides from /etc/defaults/rc.conf.
firewall_enable="YES"
firewall_script="/etc/rc.firewall"
natd_enable="YES"
# tut ne znauy kakoy external or internal
firewall_nat_enable="YES"
natd_interface="nfe0"
natd_flags=" -m -u -f /etc/natd.conf"
defaultrouter="10.181.1.137"
gateway_enable="YES"
hostname="xxxxxxx.strace.net"
ifconfig_rl0="inet 192.168.1.1 netmask 255.255.255.0"
ifconfig_nfe0="inet 1xx.4x.2xx.1xx netmask 255.255.255.255"
ifconfig_nfe0_alias0="inet 10.181.1.138 netmask 255.255.255.252 -rxcsum"
ifconfig_nfe0_alias1="inet 1xx.4x.2xx.1xx netmask 255.255.255.0"
kern_securelevel="1"
kern_securelevel_enable="NO"
keymap="UTF-8"
#moused_enable="YES"
#saver="fire"
#scrnmap="UTF-8"
sshd_enable="YES"
webmin_enable=YES
#linux_enable=YES
###rus###
font8x14="cp866-8x14"
font8x16="cp866b-8x16"
font8x8="cp866-8x8"
scrnmap="koi8-r2cp866"
xxxx# cat /etc/rc.firewall
##############NEW1##############
###constants###
#ipfw='/sbin/ipfw -q'
#int='rl0'
#ext='nfe0'
#local='192.168.0.0/24'
###
ipfw -q flush
#########VS config NAT all#######
ipfw add divert natd all from any to any via nfe0
ipfw add allow all from any to any
xxxx# cat /etc/sysctl.conf
# $FreeBSD: src/etc/sysctl.conf,v 1.8.34.1.4.1 2010/06/14 02:09:06 kensmith Exp $
#
# This file is read when going to multi-user and its contents piped thru
# ``sysctl'' to adjust kernel values. ``man 5 sysctl.conf'' for details.
#
# Uncomment this to prevent users from seeing information about processes that
# are being run under another UID.
#security.bsd.see_other_uids=0
net.inet.ip.fw.one_pass=1
#13.10.2010 - moded by VS
net.inet.ip.forwarding=1
xxxx# cat /etc/natd.conf
redirect_port tcp 192.168.1.2:21 21
redirect_port tcp 192.168.1.2:23 23
redirect_port tcp 192.168.1.2:3389 3389
xxxx# cat main_kernell.2010-07-10
#
# GENERIC -- Generic kernel configuration file for FreeBSD/i386
#
# For more information on this file, please read the config(5) manual page,
# and/or the handbook section on Kernel Configuration Files:
#
# http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-config.html
#
# The handbook is also available locally in /usr/share/doc/handbook
# if you've installed the doc distribution, otherwise always see the
# FreeBSD World Wide Web server (http://www.FreeBSD.org/) for the
# latest information.
#
# An exhaustive list of options and more detailed explanations of the
# device lines is also present in the ../../conf/NOTES and NOTES files.
# If you are in doubt as to the purpose or necessity of a line, check first
# in NOTES.
#
# $FreeBSD: src/sys/i386/conf/GENERIC,v 1.519.2.10.2.1 2010/06/14 02:09:06 kensmith Exp $
#cpu I486_CPU
#cpu I586_CPU
cpu I686_CPU
ident main_kernell
# To statically compile in device wiring instead of /boot/device.hints
#hints "GENERIC.hints" # Default places to look for devices.
# Use the following to compile in values accessible to the kernel
# through getenv() (or kenv(1) in userland). The format of the file
# is 'variable=value', see kenv(1)
#
# env "GENERIC.env"
#makeoptions DEBUG=-g # Build kernel with gdb(1) debug symbols
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=100
options IPFIREWALL_FORWARD
options IPFIREWALL_NAT
options LIBALIAS
options IPDIVERT
options DUMMYNET
options SCHED_ULE # ULE scheduler
options PREEMPTION # Enable kernel thread preemption
options INET # InterNETworking
#options INET6 # IPv6 communications protocols
options SCTP # Stream Control Transmission Protocol
options FFS # Berkeley Fast Filesystem
options SOFTUPDATES # Enable FFS soft updates support
options UFS_ACL # Support for access control lists
options UFS_DIRHASH # Improve performance on big directories
options UFS_GJOURNAL # Enable gjournal-based UFS journaling
options MD_ROOT # MD is a potential root device
#options NFSCLIENT # Network Filesystem Client
#options NFSSERVER # Network Filesystem Server
#options NFSLOCKD # Network Lock Manager
#options NFS_ROOT # NFS usable as /, requires NFSCLIENT
#options MSDOSFS # MSDOS Filesystem
options CD9660 # ISO 9660 Filesystem
options PROCFS # Process filesystem (requires PSEUDOFS)
options PSEUDOFS # Pseudo-filesystem framework
options GEOM_PART_GPT # GUID Partition Tables.
options GEOM_LABEL # Provides labelization
options COMPAT_43TTY # BSD 4.3 TTY compat (sgtty)
options COMPAT_FREEBSD4 # Compatible with FreeBSD4
options COMPAT_FREEBSD5 # Compatible with FreeBSD5
options COMPAT_FREEBSD6 # Compatible with FreeBSD6
options COMPAT_FREEBSD7 # Compatible with FreeBSD7
#options SCSI_DELAY=5000 # Delay (in ms) before probing SCSI
options KTRACE # ktrace(1) support
options STACK # stack(9) support
options SYSVSHM # SYSV-style shared memory
options SYSVMSG # SYSV-style message queues
options SYSVSEM # SYSV-style semaphores
options P1003_1B_SEMAPHORES # POSIX-style semaphores
options _KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions
options PRINTF_BUFR_SIZE=128 # Prevent printf output being interspersed.
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
options HWPMC_HOOKS # Necessary kernel hooks for hwpmc(4)
options AUDIT # Security event auditing
options MAC # TrustedBSD MAC Framework
options FLOWTABLE # per-cpu routing cache
#options KDTRACE_HOOKS # Kernel DTrace hooks
options INCLUDE_CONFIG_FILE # Include this file in kernel