From owner-FreeBSD-users-jp@jp.freebsd.org  Sun Apr 27 11:32:34 1997
Received: by jaz.jp.freebsd.org (8.8.5+2.7Wbeta5/8.7.3) id LAA07160
	Sun, 27 Apr 1997 11:32:34 +0900 (JST)
Received: by jaz.jp.freebsd.org (8.8.5+2.7Wbeta5/8.7.3) with ESMTP id LAA07155
	for <FreeBSD-users-jp@jp.freebsd.org>; Sun, 27 Apr 1997 11:32:32 +0900 (JST)
Received: from mxs.meshnet.or.jp (oosk9DU15.osk.mesh.ad.jp [133.205.77.15]) by meshsv64.os.mesh.ad.jp (8.8.4+2.7Wbeta4/3.5Wpl1-) with ESMTP id LAA13340; Sun, 27 Apr 1997 11:32:29 +0900 (JST)
Message-Id: <199704270232.LAA13340@meshsv64.os.mesh.ad.jp>
To: FreeBSD-users-jp@jp.freebsd.org
Cc: mito@mxs.meshnet.or.jp
In-Reply-To: Your message of "Sat, 12 Apr 1997 15:24:00 +0900"
References: <199704120627.PAA18064@ms1.niftyserve.or.jp>
X-Mailer: Mew version 1.55 on Emacs 19.28.2, Mule 2.3
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Date: Sun, 27 Apr 1997 11:27:37 +0900
From: Masanori Ito <mito@mxs.meshnet.or.jp>
Reply-To: FreeBSD-users-jp@jp.freebsd.org
Precedence: bulk
X-Distribute: distribute [version 2.1 (Alpha) patchlevel=19]
X-Sequence: FreeBSD-users-jp 12195
Subject: [FreeBSD-users-jp 12195] Re: [Q] IP-filter on FreeBSD 2.1.5
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org

$B0KF#!w(Bipfilter$BF3F~M=Dj<T$G$9!#(B
$BMM!9$J$*JV;v$I$&$b$"$j$,$H$&$4$6$$$^$9!#(B

NCA03530> $B8^H?ED!w$K$U$F$$$G$9!#K\6Z$H$OA4$/4X78$N$J$$OC$G62=L$J$N$G$9$,!D(B
NCA03530> xftp $B$J$s$+$O$I$&$G$7$g$&!)(B  moxftp-$B$[$K$c$i$i(B $B$H$$$&L>A0$G(B 
NCA03530> ports/packages $B$,$"$k$H;W$$$^$9!#$3$l$r;H$($P!"(BWinFTP $B$"$?$j$H$=$s$J$K(B
NCA03530> $BA`:n@-$OJQ$o$i$J$$$H;W$$$^$9!#$"$k(B directory $B0J2<$r$^$k$4$H(B get $B$9$k$3(B
NCA03530> $B$H$b$G$-$^$9!#(B
NCA03530> $B!t(B $B8D?ME*$K$O:Y$+$$E@$GITK~$b$"$j$^$9$,!"7k9=K~B-$7$F$^$9!#(B

$B5!2q$r8+$F;H$C$F$_$?$$$H;W$$$^$9!#(B

$B$^$?!"(Bdirectory$B$^$k$4$H$N(Bget$B$O!"(Bm(?)get directory.tar.gz $B$9$l$P$G$-$k$3$H$K(B
$B$h$&$d$/:G6a5$$,$D$-$^$7$?!#;d$NMQES$K$O$3$l$G#O#K$+$bCN$l$^$;$s!#(B

mito> $B!t(BNFS$B$,DL$k$N$+$b5$$K$J$C$F$-$^$7$?!#(B
mito> $B!t$=$l$K$7$F$b$=$b$=$b(Bpassive$B$NF0:n$rM}2r$7$F$$$J$$$N$GD4$Y$J$-$c!#(B
sanpei>   NFS $B$O!D!D(B IP masquerade $B$G$O;H$($J$$$H;W$$$^$9(B. well-known port 
sanpei> $B$H$+%A%'%C%/$7$F$$$k$H;W$&$N$G(B.

NFS$B$O(B portmapper $B$,(Bport$B$rF0E*$K3d$jIU$1$F$$$k$i$7$$$N$G!"(B
$B$G$-$k$+$b$7$l$J$$$H$$$&5$$,$7$F$$$^$9!#(B

mito> $B$3$N(Brdr$B$H(Bproxy$B$rAH$_9g$o$;$k$H(Bpassive$B$G$J$$(Bftp$B$,$G$-$k$H9M$($?M}M3$G$9!#(B

simokawa> $B$?$7$+(B, ipfilter$B$N(Bdistribution$B$K$bF~$C$F$$$?$H;W$$$^$9$,(B,
simokawa> TIS$B$N(BFirewall Tool Kit$B$N(Bftp proxy$B$K(Bpatch$B$r$"$F$k$3$H$K$h$C$F(B,
simokawa> rdr$B$HAH$_9g$o$;$F(B, proxy$B$G$"$k$3$H$r0U<1$;$:$K;HMQ$9$k$3$H$,$G$-$^$9(B.

$B3N$+$K$O$$$C$F$$$^$7$?!#(B

simokawa> $B$U$D$&$N(Bftp$B$N(Bproxy$B$O(B, connect$B$7$?$"$H$K2?=h$K@\B3$9$k$+$r(Bproxy$B$K(B
simokawa> $BEA$($kI,MW$,$"$j$^$9$,(B, ipfilter$B$,F0$$$F$$$k(Bmachine$B$@$H(Bkernel$B$KLd$$9g(B
simokawa> $B$;$r$7$F(B, $B$I$3$K8~$1$i$l$?(Bpacket$B$,(B(redirect$B$5$l$F$-$?(B)$B$N$+$rD4$Y$F(B, $B$=(B
simokawa> $B$N(Bftp server$B$K(Bconnect$B$9$k$h$&$J;E3]$@$C$?$H;W$$$^$9(B.

ipfilter $B$H(B Firewall Tool Kit $B$N(Bftp-proxy $B$NAH9g$;$J$i(B
passive$B$G$J$$(Bftp$B$,DL$;$kMM$K$J$k$s$G$9$M!#(B

$B!t(B2.1.7.1 + ip-filter $B$r;H$C$F(B
$B%]!<%H%^%C%T%s%0$NJ}8~$KDL$;$k%W%m%H%3%k(B/$B%"%W%j%1!<%7%g%s$H$7$F$O!"(B

http                 $B!{(B
passive$B$G$J$$(Bftp     $B!{!J$@$@$7!"(BFWTK$B$,I,MW!"<B:]$K$OL$3NG'!K(B
passive$B$J(Bftp         $B!{(B
ping		     $B!{(B
pop		     $BB?J,!{(B
NFS                  $B!)!J!{$+$bCN$^$l$^$;$s!"<B:]$K$OL$3NG'!K(B
rlogin               $B!_(B

$B$H$J$kMM$G$9!#(B

$B7k6I!";d$N$H$3$m$G$O!"(Bip-filter$B$r;H$&$H(B
Appletalk$B$N%Q%1%C%H$,DL$i$J$/$J$j$=$&$J$N$G(B
$BMxMQ$r8+9g$o$;$F$$$^$9!#(B
$B%^%7%s$K$D$J$,$C$?#2$D$N%M%C%H%o!<%/%;%0%a%s%H>e$N(BAppletalk$B$N%>!<%s(B
$B$N4V$GDL?.$G$-$J$$$H:$$k$+$i$G$9!#(B

---mito
$B0KF#(B $B@55*(B
mito@mxs.meshnet.or.jp

