From owner-man-jp-reviewer@jp.freebsd.org  Sun Jul  9 12:03:00 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id MAA05100;
	Sun, 9 Jul 2000 12:03:00 +0900 (JST)
	(envelope-from owner-man-jp-reviewer@jp.FreeBSD.org)
Received: from smtp1.interramp.com (smtp1.interramp.com [38.8.45.2])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id MAA05095
	for <man-jp-reviewer@jp.freebsd.org>; Sun, 9 Jul 2000 12:02:59 +0900 (JST)
	(envelope-from horikawa@psinet.com)
Received: from [38.26.194.149] (helo=localhost)
	by smtp1.interramp.com with esmtp (Exim 1.90 #1)
	for man-jp-reviewer@jp.freebsd.org
	id 13B7Ms-0004YJ-00; Sat, 8 Jul 2000 23:02:55 -0400
To: man-jp-reviewer@jp.freebsd.org
X-Mailer: Mew version 1.93 on Emacs 19.34 / Mule 2.3 (SUETSUMUHANA)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Message-Id: <20000708230007T.horikawa@psinet.com>
Date: Sat, 08 Jul 2000 23:00:07 -0400
From: Kazuo Horikawa <horikawa@psinet.com>
X-Dispatcher: imput version 980905(IM100)
Lines: 117
Reply-To: man-jp-reviewer@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: man-jp-reviewer 2715
Subject: [man-jp-reviewer 2715] (check) ipfirewall.4
Errors-To: owner-man-jp-reviewer@jp.freebsd.org
Sender: owner-man-jp-reviewer@jp.freebsd.org
X-Originator: horikawa@psinet.com

 $BKY@n$G$9!#(B
 ipfirewall.4 $B$N%A%'%C%/$G$9!#(B

 o $B!V!"!W$,>/$J$/!"$A$g$C$HFI$_$E$i$+$C$?$N$GJd$$$^$7$?!#(B
 o source -> $B;OE@(B
 o destination -> $B=*E@(B
--
$BKY@nOBM:(B

--- ipfirewall.4.bak	Sat Jul  8 02:34:37 2000
+++ ipfirewall.4	Sat Jul  8 21:26:20 2000
@@ -16,7 +16,7 @@
 .Ft int
 .Fn setsockopt raw_socket IPPROTO_IP "ipfw option" "struct ipfw" size
 .Sh $B2r@b(B
-ipfirewall ($BJLL>(B ipfw) $B$O%7%9%F%`$N%$%s%?%U%'!<%9$rDL2a$9$k(B IP $B%Q%1%C%H$K(B
+ipfirewall ($BJLL>(B ipfw) $B$O!"%7%9%F%`$N%$%s%?%U%'!<%9$rDL2a$9$k(B IP $B%Q%1%C%H$K(B
 $BBP$7$F%U%#%k%?%j%s%0$d%j%@%$%l%/%H$J$I$N=hM}$r9T$&%7%9%F%`$N5!G=$G$9!#(B
 $B%Q%1%C%H$OE,9g$9$k$b$N$,8+$D$+$k$^$G%Q%?!<%s%k!<%k$N=g%j%9%H$H>H$i$79g$o$5$l(B
 $B$^$9!#E,9g$9$k%k!<%k$,8+$D$+$C$?;~E@$G$=$l$KBP1~$9$kF0:n$r<B9T$7$^$9!#(B
@@ -29,22 +29,23 @@
 $BGK4~$5$l$^$9!#(B
 $B$7$+$7!"%+!<%M%k$r%3%s%Q%$%k$9$k;~$N%*%W%7%g%s(B
 .Dq IPFIREWALL_DEFAULT_TO_ACCEPT
-$B$r;XDj$9$k$H4IM}<T$O$9$Y$F(B ($B$N%Q%1%C%H$NDL2a$r(B) $B5v2D$9$k$h$&$K(B
+$B$r;XDj$9$k$H!"4IM}<T$O$9$Y$F(B ($B$N%Q%1%C%H$NDL2a$r(B) $B5v2D$9$k$h$&$K(B
 $B$3$N8GDj%k!<%k$rJQ99$9$k$3$H$,$G$-$^$9!#(B
 .Pp
 .Fn setsockopt
-$B$XEO$5$l$kCM$O%k!<%k$r5-=R$7$F$$$k(B ip_fw $B9=B$BN(B ($B2<5-;2>H(B) $B$G$9!#(B
+$B$XEO$5$l$kCM$O!"%k!<%k$r5-=R$7$F$$$k(B ip_fw $B9=B$BN(B ($B2<5-;2>H(B) $B$G$9!#(B
 (IP_FW_DEL $B$N$h$&$J(B) $B$$$/$D$+$N%1!<%9$G$O%k!<%kHV9f$N$_$,=EMW$K$J$j$^$9!#(B
 .Sh $B%3%^%s%I(B
 $B%k!<%k%j%9%H$r07$&$?$a$K<!$N%=%1%C%H%*%W%7%g%s$r;H$$$^$9(B:
 .Pp
-IP_FW_ADD $B%k!<%k%j%9%H$K%k!<%k$rA^F~$7$^$9!#(B
+IP_FW_ADD $B$O!"%k!<%k%j%9%H$K%k!<%k$rA^F~$7$^$9!#(B
 .Pp
-IP_FW_DEL $BE,9g$9$k%k!<%kHV9f$r;}$D%k!<%k$r$9$Y$F:o=|$7$^$9!#(B
+IP_FW_DEL $B$O!"E,9g$9$k%k!<%kHV9f$r;}$D%k!<%k$r$9$Y$F:o=|$7$^$9!#(B
 .Pp
-IP_FW_GET $BE,9g$9$k%k!<%kHV9f$N(B ($B:G=i$N(B) $B%k!<%k$rJV$7$^$9!#(B
+IP_FW_GET $B$O!"E,9g$9$k%k!<%kHV9f$N(B ($B:G=i$N(B) $B%k!<%k$rJV$7$^$9!#(B
 .Pp
-IP_FW_ZERO $BE,9g$9$k%k!<%kHV9f$r;}$D$9$Y$F$N%k!<%k$K4X$9$kE}7W$r(B 0 $B$K$7$^$9!#(B
+IP_FW_ZERO $B$O!"(B
+$BE,9g$9$k%k!<%kHV9f$r;}$D$9$Y$F$N%k!<%k$K4X$9$kE}7W$r(B 0 $B$K$7$^$9!#(B
 $B%k!<%kHV9f$,(B 0 $B$N>l9g$K$O$9$Y$F$N%k!<%k$r(B 0 $B$K$7$^$9!#(B
 .Pp
 IP_FW_FLUSH (65535 $B$r=|$/(B) $B$9$Y$F$N%k!<%k$r>C5n$7$^$9!#(B
@@ -67,8 +68,8 @@
 /* 1 $B8D$N(B ipfw $B%k!<%k(B */
 struct ip_fw {
     u_long fw_pcnt,fw_bcnt;         /* $B%Q%1%C%H$H%P%$%H?t$N%+%&%s%?(B */
-    struct in_addr fw_src, fw_dst;  /* $BAw?.85$H08@h$N(B IP $B%"%I%l%9(B */
-    struct in_addr fw_smsk, fw_dmsk;/* $BAw?.85$H08@h$N(B IP $B%"%I%l%9$N%^%9%/(B */
+    struct in_addr fw_src, fw_dst;  /* $B;OE@$H=*E@$N(B IP $B%"%I%l%9(B */
+    struct in_addr fw_smsk, fw_dmsk;/* $B;OE@$H=*E@$N(B IP $B%"%I%l%9$N%^%9%/(B */
     u_short fw_number;              /* $B%k!<%kHV9f(B */
     u_short fw_flg;                 /* $B%U%i%08l(B */
 #define IP_FW_MAX_PORTS 10          /* $BDxNI$$:GBgCM(B */
@@ -85,13 +86,13 @@
         u_short fu_reject_code;     /* REJECT $B1~Ez%3!<%I(B */
     } fw_un;
     u_char fw_prot;                 /* IP $B%W%m%H%3%k(B */
-    u_char fw_nports;               /* $B%]!<%HG[NsCf$N!"Aw?.85%]!<%H?t$H(B */
-                                    /* $B08@h%]!<%H?t(B ($B08@h%]!<%H$,Aw?.85(B */
+    u_char fw_nports;               /* $B%]!<%HG[NsCf$N!";OE@%]!<%H?t$H(B   */
+                                    /* $B=*E@%]!<%H?t(B ($B=*E@%]!<%H$,;OE@(B   */
                                     /* $B%]!<%H$K8eB3!#:GBg$G7W(B 10 $B%]!<%H(B */
                                     /* 0 $B$OA4%]!<%H%^%C%A$N0UL#(B)        */
 };
 
-/* $BAw?.85(B/$B08@h$N%]!<%H?t$r(B "fw_nports" $B$K%(%s%3!<%I(B */
+/* $B;OE@(B/$B=*E@$N%]!<%H?t$r(B "fw_nports" $B$K%(%s%3!<%I(B */
 
 #define IP_FW_GETNSRCP(rule)            ((rule)->fw_nports & 0x0f)
 #define IP_FW_SETNSRCP(rule, n)         do {                            \\
@@ -122,10 +123,10 @@
 
 #define IP_FW_F_PRN     0x0080  /* $B$3$N%k!<%k$,E,9g$7$?>l9g$KI=<((B       */
 
-#define IP_FW_F_SRNG    0x0100  /* $B:G=i$N(B 2 $B$D$NAw?.85%]!<%H$O!":G>.$H(B  *
+#define IP_FW_F_SRNG    0x0100  /* $B:G=i$N(B 2 $B$D$N;OE@%]!<%H$O!":G>.$H(B    *
                                  * $B:GBg$NHO0O(B ($B%[%9%H$N%P%$%H=g$G3JG<(B)  */
 
-#define IP_FW_F_DRNG    0x0200  /* $B:G=i$N(B 2 $B$D$N08@h%]!<%H$O!":G>.$H(B    *
+#define IP_FW_F_DRNG    0x0200  /* $B:G=i$N(B 2 $B$D$N=*E@%]!<%H$O!":G>.$H(B    *
                                  * $B:GBg$NHO0O(B ($B%[%9%H$N%P%$%H=g$G3JG<(B)  */
 
 #define IP_FW_F_IIFNAME 0x0400  /* $BF~NO%$%s%?%U%'!<%9$OL>A0(B/$B%f%K%C%H(B    *
@@ -133,8 +134,8 @@
 #define IP_FW_F_OIFNAME 0x0800  /* $B=PNO%$%s%?%U%'!<%9$OL>A0(B/$B%f%K%C%H(B    *
                                  * (IP $B$G$O$J$$(B)                        */
 
-#define IP_FW_F_INVSRC  0x1000  /* $BAw?.85%A%'%C%/$N0UL#$rH?E>(B           */
-#define IP_FW_F_INVDST  0x2000  /* $B08@h%A%'%C%/$N0UL#$rH?E>(B             */
+#define IP_FW_F_INVSRC  0x1000  /* $B;OE@%A%'%C%/$N0UL#$rH?E>(B             */
+#define IP_FW_F_INVDST  0x2000  /* $B=*E@%A%'%C%/$N0UL#$rH?E>(B             */
 
 #define IP_FW_F_FRAG    0x4000  /* $BCGJR(B                                 */
 
@@ -155,12 +156,12 @@
   IP_FW_F_SKIPTO        - $B%k!<%kHV9f(B fu_skipto_rule $B$X%9%-%C%W$7$^$9(B
 .Pp
 IP_FW_F_REJECT $B$N>l9g!"(Bfu_reject_code $B$NHV9f$,(B 0 $B$+$i(B 255 $B$J$i$P(B
-$BBP1~$9$k%3!<%I$H$H$b$K<u?.$7$?%Q%1%C%H$NH/?.85$N(B IP $B%"%I%l%9$X(B
+$BBP1~$9$k%3!<%I$H$H$b$K<u?.$7$?%Q%1%C%H$N;OE@$N(B IP $B%"%I%l%9$X(B
 ICMP unreachable $B%Q%1%C%H$rAw$jJV$7$^$9!#(B
 $B$=$&$G$O$J$$>l9g$K$O!"CM$O(B 256 $B$G%W%m%H%3%k$,(B IPPROTO_TCP $B$G$"$kI,MW$,$"$j!"(B
 $B$3$N>l9g(B TCP reset $B%Q%1%C%H$,Aw$i$l$^$9!#(B
 .Pp
-IP_FW_F_SKIPTO $B$r;HMQ$9$k$H(B fu_skipto_rule $B$h$j>.$5$$%k!<%kHV9f$r;}$D(B
+IP_FW_F_SKIPTO $B$r;HMQ$9$k$H!"(Bfu_skipto_rule $B$h$j>.$5$$%k!<%kHV9f$r;}$D(B
 $B$9$Y$F$NO"B3$9$k%k!<%k$,%9%-%C%W$5$l$^$9!#(B
 .Sh $B%+!<%M%k%*%W%7%g%s(B
 $B%+!<%M%k@_Dj%U%!%$%k$G$N%*%W%7%g%s(B:
