From owner-FreeBSD-users-jp@jp.freebsd.org  Wed Apr  9 23:43:43 1997
Received: by jaz.jp.freebsd.org (8.8.5+2.7Wbeta5/8.7.3) id XAA12993
	Wed, 9 Apr 1997 23:43:43 +0900 (JST)
Received: by jaz.jp.freebsd.org (8.8.5+2.7Wbeta5/8.7.3) with ESMTP id XAA12988
	for <FreeBSD-users-jp@jp.freebsd.org>; Wed, 9 Apr 1997 23:43:40 +0900 (JST)
Received: from mxs.meshnet.or.jp (oosk5DU14.osk.mesh.ad.jp [133.205.76.14]) by meshsv64.os.mesh.ad.jp (8.8.4+2.7Wbeta4/3.5Wpl1-) with ESMTP id XAA29998; Wed, 9 Apr 1997 23:43:34 +0900 (JST)
Message-Id: <199704091443.XAA29998@meshsv64.os.mesh.ad.jp>
To: FreeBSD-users-jp@jp.freebsd.org
Cc: mito@mxs.meshnet.or.jp
In-Reply-To: Your message of "Sun, 06 Apr 1997 23:41:26 +0900"
References: <199704061441.XAA06595@lavender.sanpei.org>
X-Mailer: Mew version 1.55 on Emacs 19.28.2, Mule 2.3
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Date: Wed, 09 Apr 1997 23:38:45 +0900
From: Masanori Ito <mito@mxs.meshnet.or.jp>
Reply-To: FreeBSD-users-jp@jp.freebsd.org
Precedence: bulk
X-Distribute: distribute [version 2.1 (Alpha) patchlevel=19]
X-Sequence: FreeBSD-users-jp 11671
Subject: [FreeBSD-users-jp 11671] Re: [Q] IP-filter on FreeBSD 2.1.5
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org

$B0KF#!w(Bipfilter$BF3F~M=Dj<T$G$9!#(B
$B$I$&$b$*JV;v$"$j$,$H$&$4$6$$$^$9!#(B

mito>$B0JA0!"(BIP-filter $B$,(B FreeBSD 2.1.5 $B$GF0:n$7$J$$$G!"(B
mito>2.1.6$B$K$7$F:F%$%s%9%H!<%k$7$?$i#O#K$K$J$C$?$H$$$&Js9p$,$"$j$^$7$?!#(B
mito>
mito>(1) FreeBSD 2.1.5$B$G@5>oF0:n$7$F$$$kJ}$O$$$i$C$7$c$$$^$;$s$+!)(B
mito>  $B$^$?!"$=$N(BIP-filter$B$N%P!<%8%g%s$O$$$/$D$G$9$+!)(B
mito>  
mito>  OS$B$r%P!<%8%g%s%"%C%W$7$J$$$G:Q$`J}$,=u$+$j$^$9!#(B
mito>
mito>(2)IP-filter$B$NF0:n$O0BDj$7$F$$$^$9$+!)(B

sanpei> 	$B;d$O(B, FreeBSD-2.1.7-RELEASE $B$H(B IP_Filter 3.1.4 $B$NAH9g$;$G(B
sanpei> 	NAT $B$r$7$F$$$^$9(B. IP_Filter 3.1.2 $B$J$I$O(B NAT $BItJ,$,IT0BDj$G(B
sanpei> 	$B$7$?$,(B, 3.1.4 $B$0$i$$$+$i0BDj$7$F$$$^$9(B. $B:G6a$N%P!<%8%g%s$O(B
sanpei> 	$B;n$7$F$$$^$;$s(B ^^;

$B$=$N8e!"(BAHA-2940$B$N%Q%C%A$,(B2.1.5$B0J9_$G$"$?$C$F$$$k$3$H$rCN$j(B
2.1.5$B$+$i(B2.1.7.1$B$^$G>e$2$k5$$K$J$j$^$7$?!#(B
$B$H$j$"$($:(BSNAPdiff$B$r;H$C$F%+!<%M%k$r(B2.1.7.1$B$^$G>e$2$h$&$H9M$($F$$$^$9!#(B
CDROM$B$,<j$KF~$C$?$i$-$A$s$H>e$2$k$+$bCN$l$^$;$s!#(B

sanpei> 	Firewall $B$K$9$k$J$i$P(B, 2.1.5-RELEASE $B$K$b3N$+IU$$$F$$$k(B
sanpei> 	IPFIREWALL $B$G$O$@$a$G$7$g$&$+(B??

FireWall$B$K$9$k$D$b$j$OL5$/!"(BIP$B%"%I%l%9@aLs$N$?$a$J$N$G(B
ipfilter$B$N(Bipnat$B$,(BBEST$B$@$H;W$C$F$$$^$9!#(B

sasaki>   $B$5$5$-$G$9!#$3$s$K$A$O!#(B
sasaki> 
sasaki>   NAT $B$b;HMQ$7$F$$$^$9$,!":#$N$H$3$m0BDj$7$F$$$k$h$&$G$9!#$?$@$7!"BgNL(B
sasaki> $BF1;~%"%/%;%9$H$+$O;n$7$F$J$$$N$G!"J,$+$j$^$;$s!#(B

$B0BDj@-$b$"$k$N$G$9$M!#(B

$B$H$3$m$G!"4XO"$9$k0JA0$N%a!<%kEy$rFI$s$G5?Ld$,M/$$$?$N$G$9$,!"(B

$BJ#?t$N%m!<%+%k(BIP$B$r;H$C$?%M%C%H%o!<%/(B $B$H(B $B@5<0(BIP$B$N%M%C%H%o!<%/4V$G(BNAT$B$r<B;\$9$k>l9g!"(B

map ep0 $B%m!<%+%k(BIP/24 -> $B@5<0(BIP/32 portmap tcp/udp 1000:2000

$B$H@_Dj$9$l$P$$$1$=$&$G$9$,!"%m!<%+%k(BIP$BB&$+$i(B

(1)ftp$B$rDL$9$K$O(B map$B%3%^%s%I$G$OL5$/!"(Brdr$B%3%^%s%I$r;H$&I,MW$,$"$k$N$G$7$g$&$+!)(B
(2)rlogin$B$O(Bmap$B%3%^%s%I$GDL$k$N$G$7$g$&$+!)(B
(3)$B$=$NB>DL$i$J$$%3%^%s%I$O$"$k$N$G$7$g$&$+!)(B

---mito
$B0KF#(B $B@55*(B
mito@mxs.meshnet.or.jp
