From owner-man-jp-reviewer@jp.freebsd.org  Tue Aug  8 12:59:54 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id MAA14115;
	Tue, 8 Aug 2000 12:59:54 +0900 (JST)
	(envelope-from owner-man-jp-reviewer@jp.FreeBSD.org)
Received: from smtp1.interramp.com (smtp1.interramp.com [38.8.45.2])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id MAA14107
	for <man-jp-reviewer@jp.freebsd.org>; Tue, 8 Aug 2000 12:59:52 +0900 (JST)
	(envelope-from horikawa@psinet.com)
Received: from [38.26.194.22] (helo=localhost)
	by smtp1.interramp.com with esmtp (Exim 1.90 #1)
	for man-jp-reviewer@jp.freebsd.org
	id 13M0YN-0005tT-00; Mon, 7 Aug 2000 23:59:48 -0400
To: man-jp-reviewer@jp.freebsd.org
X-Mailer: Mew version 1.93 on Emacs 19.34 / Mule 2.3 (SUETSUMUHANA)
Mime-Version: 1.0
Content-Type: Multipart/Mixed;
	boundary="--Next_Part(Mon_Aug__7_23:52:50_2000_809)--"
Content-Transfer-Encoding: 7bit
Message-Id: <20000807235603X.horikawa@psinet.com>
Date: Mon, 07 Aug 2000 23:56:03 -0400
From: Kazuo Horikawa <horikawa@psinet.com>
X-Dispatcher: imput version 980905(IM100)
Lines: 701
Reply-To: man-jp-reviewer@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: man-jp-reviewer 2884
Subject: [man-jp-reviewer 2884] (check) faith.8
Errors-To: owner-man-jp-reviewer@jp.freebsd.org
Sender: owner-man-jp-reviewer@jp.freebsd.org
X-Originator: horikawa@psinet.com

----Next_Part(Mon_Aug__7_23:52:50_2000_809)--
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit

 $BKY@n$G$9!#(B
 faith.8 $B$N%A%'%C%/7s(B 1.2.2.2 $B2=$G$9!#(B

 $B%A%'%C%/$K$D$$$F$O!"(B
 o $B<c43$N!V!"!W$NDI2C(B
 o $B!V%W%l%U%#%/%9!W(B->$B!V%W%l%U%#%C%/%9!W(B
$B0J30$OFC$K=$@5$7$F$$$^$;$s!#(B


----Next_Part(Mon_Aug__7_23:52:50_2000_809)--
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Content-Description: faithd.8.jdiff
Content-Disposition: attachment; filename=faithd.8.jdiff

--- faithd.8~	Mon Aug  7 22:56:24 2000
+++ faithd.8	Mon Aug  7 23:48:48 2000
@@ -1,6 +1,8 @@
+.\"	$KAME: faithd.8,v 1.12 2000/07/04 13:15:01 itojun Exp $
+.\"
 .\" Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
 .\" All rights reserved.
-.\" 
+.\"
 .\" Redistribution and use in source and binary forms, with or without
 .\" modification, are permitted provided that the following conditions
 .\" are met:
@@ -12,7 +14,7 @@
 .\" 3. Neither the name of the project nor the names of its contributors
 .\"    may be used to endorse or promote products derived from this software
 .\"    without specific prior written permission.
-.\" 
+.\"
 .\" THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
 .\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 .\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
@@ -25,10 +27,9 @@
 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 .\" SUCH DAMAGE.
 .\"
-.\"	$Id: faithd.8,v 1.3 1999/10/07 04:22:14 itojun Exp $
-.\" jpman %Id: faithd.8,v 1.2 2000/07/12 09:24:54 jsakai Stab %
-.\"	$FreeBSD: src/usr.sbin/faithd/faithd.8,v 1.2.2.1 2000/05/06 13:56:08 phantom Exp $
+.\"	$FreeBSD: src/usr.sbin/faithd/faithd.8,v 1.2.2.2 2000/07/15 07:36:21 kris Exp $
 .\"
+.\" jpman %Id: faithd.8,v 1.2 2000/07/12 09:24:54 jsakai Stab %
 .Dd January 27, 2000
 .Dt FAITHD 8
 .Os
@@ -41,32 +42,11 @@
 .Op Ar service Op Ar serverpath Op Ar serverargs
 .Sh $B2r@b(B
 .Nm
-$B$O;XDj$5$l$?(B
-.Ar service
-$B$KBP$9$k(B IPv6/v4 TCP $B%j%l!<5!G=$rDs6!$7$^$9!#(B
+$B$O(B IPv6 $B$+$i(B IPv4 $B$X$N(B TCP $B%j%l!<5!G=$rDs6!$7$^$9!#(B
 .Pp
 .Nm
 $B$O(B IPv4/v6 $B%G%e%"%k%9%?%C%/%k!<%?>e$G5/F0$7$J$1$l$P$J$j$^$;$s!#(B
-$B$3$N%k!<%?$O!"(B
-.Xr route 8
-$B$*$h$S(B
-.Xr sysctl 8
-$B%3%^%s%I$rMQ$$$F!"M=Ls$5$l$?(B
-.Tn IPv6
-$B%"%I%l%9%W%l%U%#%/%98~$1$NA4(B TCP $B%H%i%U%#%C%/$rJa3M$9$k$h$&$K(B
-$B9=C[$5$l$F$$$kI,MW$,$"$j$^$9!#(B
-.Nm
-$B$O5/F0;~$K<+J,<+?H$r%G!<%b%s2=$7$^$9!#(B
 .Pp
-.Nm
-$B$O(B
-.Tn TCPv6
-$B$N%]!<%H(B
-.Ar service
-$B$r(B listen $B$7$^$9!#(B
-$B%]!<%H(B
-.Ar service
-$B$X$N(B
 .Tn TCPv6
 $B%H%i%U%#%C%/$,8+$D$+$k$H!"(B
 .Nm
@@ -92,27 +72,55 @@
 .Li 10.1.1.1
 $B$K8~$1$F%j%l!<$5$l$^$9!#(B
 .Pp
-.Ar service
-$B$r>JN,$9$k$H(B
-.Li telnet
-$B$,2>Dj$5$l!"(B
 .Nm
-$B$O(B TCP $B$N(B
-.Li telnet
-$B%]!<%H$N(B TCP $B%H%i%U%#%C%/$r%j%l!<$7$^$9!#(B
-.Ar service
-$B$r;XDj$9$k$H!"(B
+$B$K$h$kJQ49%5!<%S%9$rMQ$$$k$K$O!"(B
+IPv4 $B%"%I%l%9$r%^%C%W$9$k$?$a$N(B IPv6 $B%"%I%l%9%W%l%U%#%C%/%9$r(B
+$BM=Ls$7$F$*$/I,MW$,$"$j$^$9!#(B
+$B%+!<%M%k$O!"$=$3$GM=Ls$7$?(B IPv6 $B%"%I%l%9%W%l%U%#%C%/%9$X$N(B
+$B$9$Y$F$N(B TCP $B%3%M%/%7%g%s$r!"(B
+.Xr route 8
+$B$rMQ$$$F5?;w%$%s%?!<%U%'!<%9(B
+.Xr faith 4
+$B$K%k!<%F%#%s%0$9$k$h$&$K!"E,@Z$K9=C[$5$l$F$$$J$1$l$P$J$j$^$;$s!#(B
+$B$^$?!"(B
+.Xr sysctl 8
+$B$rMQ$$$F(B
+.Dv net.inet6.ip6.keepfaith
+$B$r(B
+.Dv 1 
+$B$K@_Dj$7$F$*$/$Y$-$G$9!#(B
+.Pp
+$B%k!<%?$O!"M=Ls$5$l$?(B
+.Tn IPv6
+$B%"%I%l%9%W%l%U%#%C%/%99T$-$N$9$Y$F$N(B TCP $B%H%i%U%#%C%/$rJa$^$($k$h$&$K(B
+$B@_Dj$7$J$1$l$P$J$j$^$;$s!#$3$N$?$a$K$O(B
+.Xr route 8
+$B$H(B
+.Xr sysctl 8
+$B$N%3%^%s%I$r;HMQ$7$^$9!#(B
+.Ss $B%G!<%b%s%b!<%I(B
 .Nm
-$B$OA0=R$N$h$&$K!";XDj$5$l$?(B
+$B$,%9%?%s%I%"%m%s%W%m%0%i%`$H$7$F5/F0$5$l$k$H!"(B
+.Nm
+$B$O<+J,<+?H$r%G!<%b%s2=$7$^$9!#(B
+.Nm
+$B$O(B
+.Tn TCPv6
+$B$N%]!<%H(B
 .Ar service
-$B8~$1$N(B TCP $B%j%l!<%G!<%b%s$H$7$FF0:n$7$^$9!#(B
+$B$r(B listen $B$7$^$9!#(B
+$B%]!<%H(B
+.Ar service
+$B$X$N(B
+.Tn TCPv6
+$B%H%i%U%#%C%/$r8+IU$1$k$H!"%3%M%/%7%g%s$r%j%l!<$7$^$9!#(B
 .Pp
 .Nm
-$B$O(B TCP $B%]!<%H(B
+$B$,(B TCP $B%]!<%H(B
 .Ar service
 $B$r(B listen $B$9$k$N$G!"(B
 .Xr inetd 8
-$B$dB>$NI8=`E*$J;EAH$_$rMQ$$$F$=$N%k!<%?>e$G(B
+$B$dB>$NI8=`E*$J;EAH$_$rMQ$$$F!"$=$N%k!<%?>e$G(B
 .Ar service
 $B%]!<%H$r;H$&%m!<%+%k$J(B TCP $B%G!<%b%s$rF0:n$5$;$k$3$H$O$G$-$^$;$s!#(B
 .Nm
@@ -132,23 +140,20 @@
 .Ar serverargs
 $B$rMQ$$$F;XDj$9$k$3$H$,$G$-$^$9!#(B
 .Pp
+.Ar service
+$B$r>JN,$9$k$H(B
+.Li telnet
+$B$,2>Dj$5$l!"(B
 .Nm
-$B$K$h$kJQ49%5!<%S%9$rMQ$$$k$K$O!"(B
-IPv4 $B%"%I%l%9$r%^%C%W$9$k$?$a$N(B IPv6 $B%"%I%l%9%W%l%U%#%/%9$r(B
-$BM=Ls$7$F$*$/I,MW$,$"$j$^$9!#(B
-$B%+!<%M%k$O!"$=$3$GM=Ls$7$?(B IPv6 $B%"%I%l%9%W%l%U%#%/%9$X$N(B
-$B$9$Y$F$N(B TCP $B%3%M%/%7%g%s$r!"(B
-.Xr route 8
-$B$rMQ$$$F5?;w%$%s%?!<%U%'!<%9(B
-.Dv faith
-$B$K%k!<%F%#%s%0$9$k$h$&$K!"E,@Z$K9=C[$5$l$F$$$J$1$l$P$J$j$^$;$s!#(B
-$B$^$?!"(B
-.Xr sysctl 8
-$B$rMQ$$$F(B
-.Dv net.inet6.ip6.keepfaith
-$B$r(B
-.Dv 1 
-$B$K@_Dj$7$F$*$/$Y$-$G$9!#(B
+$B$O(B TCP $B$N(B
+.Li telnet
+$B%]!<%H$N(B TCP $B%H%i%U%#%C%/$r%j%l!<$7$^$9!#(B
+.Ar service
+$B$r;XDj$9$k$H!"(B
+.Nm
+$B$OA0=R$N$h$&$K!";XDj$5$l$?(B
+.Ar service
+$B8~$1$N(B TCP $B%j%l!<%G!<%b%s$H$7$FF0:n$7$^$9!#(B
 .Pp
 .Fl d
 $B%*%W%7%g%s$r;XDj$9$k$H!"(B
@@ -195,12 +200,52 @@
 $BKI$0$?$a$G$9!#(B
 $B%5!<%S%9$K$h$C$F$O$3$N5!G=$OE,@Z$G$J$$$+$b$7$l$^$;$s!#(B
 .Pq $B$3$N5!G=$r%3%s%U%#%.%e%l!<%7%g%s2DG=$K$9$Y$-$G$7$g$&$+(B?
+.Ss inetd $B%b!<%I(B
+.Nm
+$B$,(B
+.Xr inetd 8
+$B$+$i5/F0$5$l$k$H!"(B
+.Nm
+$B$OI8=`F~NO$+$iEO$5$l$k%3%M%/%7%g%s$r07$$$^$9!#(B
+$B%3%M%/%7%g%s$N=*E@$,!"M=Ls$7$?(B IPv6 $B%"%I%l%9%W%l%U%#%C%/%9$NHO0OFb$N>l9g!"(B
+.Nm
+$B$O%3%M%/%7%g%s$r%j%l!<$7$^$9!#(B
+$B$=$l0J30$N>l9g!"(B
+.Nm
+$B$O%5!<%S%9$KBP1~$9$k(B
+.Xr telnetd 8
+$B$N$h$&$J%G!<%b%s$r5/F0$7!"(B
+.Xr inetd 8
+$B$+$iEO$5$l$k%3%^%s%I0z?t$r;HMQ$7$^$9!#(B
+.Pp
+.Nm
+$B$O!"%m!<%+%k$J(B TCP $B%]!<%HHV9f$r85$KF0:n%b!<%I$r7hDj$7!"(B
+$BI,MW$J;~(B/$B2DG=$J;~$K$OFCJL$J%W%m%H%3%k=hM}$rM-8z$K$7$^$9!#(B
+$BNc$($P!"(B
+.Nm
+$B$,(B FTP $B%]!<%H>e$G(B
+.Xr inetd 8
+$B$+$i5/F0$5$l$k$H!"$3$l$O(B FTP $B%j%l!<$H$7$FF0:n$7$^$9!#(B
+.Pp
+$B$3$NF0:n%b!<%I$G$O!"(B
+.Xr inetd 8
+$BCf$K(B
+.Nm
+$BMQ$NFCJL$J%5%]!<%H$rI,MW$H$7$^$9!#(B
 .Sh $B;HMQNc(B
 .Nm
 $B$r5/F0$9$kA0$K!"(B
 .Xr faith 4
 $B%$%s%?%U%'!<%9$rE,@Z$K@_Dj$7$F$*$/I,MW$,$"$j$^$9!#(B
-.Pp
+.Bd -literal -offset
+# sysctl -w net.inet6.ip6.accept_rtadv=0
+# sysctl -w net.inet6.ip6.forwarding=1
+# sysctl -w net.inet6.ip6.keepfaith=1
+# ifconfig faith0 up
+# route add -inet6 3ffe:501:4819:ffff:: -prefixlen 96 ::1
+# route change -inet6 3ffe:501:4819:ffff:: -prefixlen 96 -ifp faith0
+.Ed
+.Ss $B%G!<%b%s%b!<%I$N%5%s%W%k(B
 .Li telnet
 $B%5!<%S%9$rJQ49$7!"$=$7$F%m!<%+%k$J(B telnet $B%5!<%S%9$rDs6!$7$J$$>l9g$O!"(B
 $B<!$N$$$:$l$+$N$h$&$K(B
@@ -208,30 +253,64 @@
 $B$r5/F0$7$^$9(B:
 .Bd -literal -offset
 # faithd
-# faithd telnet 
+# faithd telnet
 .Ed
 .Pp
 $B$b$7(B
-.Pa /usr/libexec/telnetd
+.Pa /usr/local/v6/libexec/telnetd
 $B$K$"$k(B
 .Xr telnetd 8
 $B$K$h$k%m!<%+%k(B telnet $B%5!<%S%9$rDs6!$7$?$$>l9g$O!"(B
 $B<!$N%3%^%s%I%i%$%s$r;HMQ$7$^$9(B:
 .Bd -literal -offset
-# faithd telnet /usr/libexec/telnetd telnetd
+# faithd telnet /usr/local/v6/libexec/telnetd telnetd
 .Ed
 .Pp
 $B%m!<%+%k%G!<%b%s$KDI2C$N0z?t$rEO$7$?$$>l9g$O(B:
 .Bd -literal -offset
-# faithd ftpd /usr/libexec/ftpd ftpd -l
+# faithd ftpd /usr/local/v6/libexec/ftpd ftpd -l
 .Ed
 .Pp
-$BB>$N;HMQNc(B:
+$BB>$N;HMQNc$G$9!#(B
+rsh/rlogin $B%5!<%S%9$rJQ49$9$k$K$O(B
+.Fl p
+$B$,I,MW$+$b$7$l$^$;$s!#(B
 .Bd -literal -offset
-# faithd login /usr/libexec/rlogin rlogind
-# faithd shell /usr/libexec/rshd rshd
 # faithd sshd
+# faithd login /usr/local/v6/libexec/rlogin rlogind
+# faithd shell /usr/local/v6/libexec/rshd rshd
+.Ed
+.Pp
+$B$7$+$7$J$,$i!"(Brlogin $B$d(B rsh $B$N%3%M%/%7%g%s$rJQ49$9$k$H$-$K$OCm0U$,I,MW$G$9!#(B
+$B99$J$k>\:Y$K$D$$$F$O(B
+.Sx $B%;%-%e%j%F%#>pJs(B
+$B$r;2>H$7$F$/$@$5$$!#(B
+.Ss inetd $B%b!<%I$N%5%s%W%k(B
+.Xr inetd.conf 5
+$B$K<!$N9T$rDI2C$7$^$9!#(B
+$B9=J8$O%*%Z%l!<%F%#%s%0%7%9%F%`$K$h$C$FMM!9$G$7$g$&!#(B
+.Bd -literal -offset
+telnet  stream  faith/tcp6  nowait  root  faithd  telnetd
+ftp     stream  faith/tcp6  nowait  root  faithd  ftpd -l
+ssh     stream  faith/tcp6  nowait  root  faithd  /usr/pkg/bin/sshd -i
 .Ed
+.Pp
+.Xr inetd 8
+$B$O!"(Blisten $B$9$k%=%1%C%H$r%*!<%W%s$7!"(B
+$B%+!<%M%k$N(B TCP $B%j%l!<%5%]!<%H$rM-8z2=$7$^$9!#(B
+$B%3%M%/%7%g%s$,E~Ce$9$k$H!"(B
+.Nm
+$B$,(B
+.Xr inetd 8
+$B$+$i5/F0$5$l$^$9!#(B
+$B%3%M%/%7%g%s$N=*E@$,!"M=Ls$7$?(B IPv6 $B%"%I%l%9%W%l%U%#%C%/%9$NHO0OFb$N>l9g!"(B
+.Nm
+$B$O%3%M%/%7%g%s$r%j%l!<$7$^$9!#(B
+$B$=$l0J30$N>l9g!"(B
+.Nm
+$B$O%5!<%S%9$KBP1~$9$k(B
+.Xr telnetd 8
+$B$N$h$&$J%G!<%b%s$r5/F0$7$^$9!#(B
 .Sh $BLa$jCM(B
 $B@.8y$9$k$H(B
 .Nm
@@ -250,8 +329,8 @@
 .%A Jun-ichiro itojun Hagino
 .%A Kazu Yamamoto
 .%T "An IPv6-to-IPv4 transport relay translator"
-.%R Internet draft
-.%N draft-ietf-ngtrans-tcpudp-relay-00.txt
+.%R internet draft
+.%N draft-ietf-ngtrans-tcpudp-relay-01.txt
 .%O work in progress material
 .Re
 .Sh $B%;%-%e%j%F%#>pJs(B
@@ -260,6 +339,22 @@
 $B$G%j%l!<$5$l$?%3%M%/%7%g%s$KBP$7!"(B
 .Xr rhosts 5
 $B$r$O$8$a$H$9$k(B IP $B%"%I%l%9%Y!<%9$NG'>Z$rMQ$$$k$N$OBgJQ4m81$G$9!#(B
+.Pp
+.Nm
+$B<+?H$O%"%/%;%9@)8f$r<BAu$7$F$$$^$;$s!#(B
+$B$3$l$O!"F)2a$J(B TCP $B%j%l!<%5!<%S%9$N<BAu$r0U?^$7$F$$$k$?$a$G$9!#(B
+$B4IM}<T$,(B IPv6 $B%"%I%l%9$K4p$E$$$F%Q%1%C%H%U%#%k%?%j%s%0$r9T$&$3$H$r!"(B
+$B$*4+$a$7$^$9!#(B
+IPv6 $B$N=*E@%"%I%l%9$K$D$$$F$O!"(B
+.Xr route 8
+$B$rMQ$$$F!"(B
+.Xr faith 4
+$B$r;X$97PO)%(%s%H%j$rCm0U?<$/@_Dj$9$k$3$H$G!"@)8B2DG=$G$9!#(B
+IPv6 $B$N;OE@%"%I%l%9$K$D$$$F$O!"(B
+$B%Q%1%C%H%U%#%k%?$G%U%#%k%?$9$kI,MW$,$"$j$^$9!#(B
+.Sx $B4XO"9`L\(B
+$B$KNs5s$7$?J8=q$K!"K\7o$K4X$9$k99$J$k5DO@$,5-=R$5$l$F$$$^$9!#(B
+.\"
 .Sh $BNr;K(B
 .Nm
 $B%3%^%s%I$O(B WIDE Hydrangea IPv6 $B%W%m%H%3%k%9%?%C%/%-%C%H$G(B

----Next_Part(Mon_Aug__7_23:52:50_2000_809)--
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Description: faithd.8.diff
Content-Disposition: attachment; filename=faithd.8.diff

===================================================================
RCS file: /home/ncvs/src/usr.sbin/faithd/faithd.8,v
retrieving revision 1.2.2.1
retrieving revision 1.2.2.2
diff -p -u -r1.2.2.1 -r1.2.2.2
--- src/usr.sbin/faithd/faithd.8	2000/05/06 13:56:08	1.2.2.1
+++ src/usr.sbin/faithd/faithd.8	2000/07/15 07:36:21	1.2.2.2
@@ -1,6 +1,8 @@
+.\"	$KAME: faithd.8,v 1.12 2000/07/04 13:15:01 itojun Exp $
+.\"
 .\" Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
 .\" All rights reserved.
-.\" 
+.\"
 .\" Redistribution and use in source and binary forms, with or without
 .\" modification, are permitted provided that the following conditions
 .\" are met:
@@ -12,7 +14,7 @@
 .\" 3. Neither the name of the project nor the names of its contributors
 .\"    may be used to endorse or promote products derived from this software
 .\"    without specific prior written permission.
-.\" 
+.\"
 .\" THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
 .\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 .\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
@@ -25,10 +27,9 @@
 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 .\" SUCH DAMAGE.
 .\"
-.\"	$Id: faithd.8,v 1.3 1999/10/07 04:22:14 itojun Exp $
-.\"	$FreeBSD: src/usr.sbin/faithd/faithd.8,v 1.2.2.1 2000/05/06 13:56:08 phantom Exp $
+.\"	$FreeBSD: src/usr.sbin/faithd/faithd.8,v 1.2.2.2 2000/07/15 07:36:21 kris Exp $
 .\"
-.Dd January 27, 2000
+.Dd May 17, 1998
 .Dt FAITHD 8
 .Os
 .Sh NAME
@@ -38,35 +39,18 @@
 .Nm
 .Op Fl dp
 .Op Ar service Op Ar serverpath Op Ar serverargs
+.Nm ""
 .Sh DESCRIPTION
 .Nm
-provides IPv6/v4 TCP relay for the specified
-.Ar service .
-.Pp
+provides IPv6-to-IPv4 TCP relay.
 .Nm
-must be invoked on IPv4/v6
-dual stack router.
-The router must be configured to capture all the TCP traffic
-toward reserved
-.Tn IPv6
-address prefix, by using
-.Xr route 8
-and
-.Xr sysctl 8
-commands.
-.Nm
-will daemonize itself on invocation.
+must be used on an IPv4/v6 dual stack router.
 .Pp
+When
 .Nm
-will listen to
+receives
 .Tn TCPv6
-port
-.Ar service .
-If
-.Tn TCPv6
-traffic to port
-.Ar service
-is found,
+traffic,
 .Nm
 will relay the
 .Tn TCPv6
@@ -88,20 +72,47 @@ destination address is
 the traffic will be relayed to IPv4 destination
 .Li 10.1.1.1 .
 .Pp
-If
-.Ar service
-is not given,
-.Li telnet
-is assumed, and
+To use
 .Nm
-will relay TCP traffic on TCP port
-.Li telnet .
-With
-.Ar service ,
+translation service,
+an IPv6 address prefix must be reserved for mapping IPv4 addresses into.
+Kernel must be properly configured to route all the TCP connection
+toward the reserved IPv6 address prefix into the
+.Xr faith 4
+pseudo interface, by using
+.Xr route 8
+command.
+Also,
+.Xr sysctl 8
+should be used to configure
+.Dv net.inet6.ip6.keepfaith
+to
+.Dv 1 .
+.Pp
+The router must be configured to capture all the TCP traffic
+toward reserved
+.Tn IPv6
+address prefix, by using
+.Xr route 8
+and
+.Xr sysctl 8
+commands.
+.Ss Daemon mode
+When
 .Nm
-will work as TCP relaying daemon for specified
+is invoked as a standalone program,
+.Nm
+will daemonize itself.
+.Nm
+will listen to
+.Tn TCPv6
+port
+.Ar service .
+If
+.Tn TCPv6
+traffic to port
 .Ar service
-as described above.
+is found, it relays the connection.
 .Pp
 Since
 .Nm
@@ -126,22 +137,20 @@ You can also specify
 .Ar serverargs
 for the arguments for the local daemon.
 .Pp
-To use
+If
+.Ar service
+is not given,
+.Li telnet
+is assumed, and
 .Nm
-translation service,
-an IPv6 address prefix must be reserved for mapping IPv4 addresses into.
-Kernel must be properly configured to route all the TCP connection 
-toward the reserved IPv6 address prefix into the
-.Dv faith
-pseudo interface, by using
-.Xr route 8
-command.
-Also,
-.Xr sysctl 8
-should be used to configure
-.Dv net.inet6.ip6.keepfaith
-to
-.Dv 1 .
+will relay TCP traffic on TCP port
+.Li telnet .
+With
+.Ar service ,
+.Nm
+will work as TCP relaying daemon for specified
+.Ar service
+as described above.
 .Pp
 If
 .Fl d
@@ -160,7 +169,7 @@ and
 .Fl p
 is not necessary as special program code is supplied.
 .Pp
-.Nm 
+.Nm
 will relay both normal and out-of-band TCP data.
 It is capable of emulating TCP half close as well.
 .Nm
@@ -187,12 +196,50 @@ Inactive sessions will be disconnected i
 to avoid stale sessions from chewing up resources.
 This may be inappropriate for some of the services
 .Pq should this be configurable? .
+.Ss inetd mode
+When
+.Nm
+is invoked via
+.Xr inetd 8 ,
+.Nm
+will handle connection passed from standard input.
+If it the connection endpoint is in the reserved IPv6 address prefix.
+.Nm
+will relay the connection.
+Otherwise,
+.Nm
+will invoke service-specific daemon like
+.Xr telnetd 8 ,
+by using the command argument passed from
+.Xr inetd 8 .
+.Pp
+.Nm
+determines operation mode by the local TCP port number,
+and enables special protocol handling whenever necessary/possible.
+For example, if
+.Nm
+is invoked via
+.Xr inetd 8
+on FTP port, it will operate as a FTP relay.
+.Pp
+The operation mode requires special support for
+.Nm
+in
+.Xr inetd 8 .
 .Sh EXAMPLES
 Before invoking
 .Nm Ns ,
 .Xr faith 4
 interface has to be configured properly.
-.Pp
+.Bd -literal -offset
+# sysctl -w net.inet6.ip6.accept_rtadv=0
+# sysctl -w net.inet6.ip6.forwarding=1
+# sysctl -w net.inet6.ip6.keepfaith=1
+# ifconfig faith0 up
+# route add -inet6 3ffe:501:4819:ffff:: -prefixlen 96 ::1
+# route change -inet6 3ffe:501:4819:ffff:: -prefixlen 96 -ifp faith0
+.Ed
+.Ss Daemon mode samples
 To translate
 .Li telnet
 service, and provide no local telnet service, invoke
@@ -200,29 +247,60 @@ service, and provide no local telnet ser
 as either of the following:
 .Bd -literal -offset
 # faithd
-# faithd telnet 
+# faithd telnet
 .Ed
 .Pp
 If you would like to provide local telnet service via
 .Xr telnetd 8
 on
-.Pa /usr/libexec/telnetd ,
-user the following command line:
+.Pa /usr/local/v6/libexec/telnetd ,
+use the following command line:
 .Bd -literal -offset
-# faithd telnet /usr/libexec/telnetd telnetd
+# faithd telnet /usr/local/v6/libexec/telnetd telnetd
 .Ed
 .Pp
 If you would like to pass extra arguments to the local daemon:
 .Bd -literal -offset
-# faithd ftpd /usr/libexec/ftpd ftpd -l
+# faithd ftpd /usr/local/v6/libexec/ftpd ftpd -l
 .Ed
 .Pp
-Here are some other examples:
+Here are some other examples.
+You may need
+.Fl p
+to translate rsh/rlogin services.
 .Bd -literal -offset
-# faithd login /usr/libexec/rlogin rlogind
-# faithd shell /usr/libexec/rshd rshd
 # faithd sshd
+# faithd login /usr/local/v6/libexec/rlogin rlogind
+# faithd shell /usr/local/v6/libexec/rshd rshd
 .Ed
+.Pp
+However, you should be careful when translating rlogin or rsh
+connections. See
+.Sx SECURITY NOTICE
+for more details.
+.Ss inetd mode samples
+Add the following lines into
+.Xr inetd.conf 5 .
+Syntax may vary depending upon your operating system.
+.Bd -literal -offset
+telnet  stream  faith/tcp6  nowait  root  faithd  telnetd
+ftp     stream  faith/tcp6  nowait  root  faithd  ftpd -l
+ssh     stream  faith/tcp6  nowait  root  faithd  /usr/pkg/bin/sshd -i
+.Ed
+.Pp
+.Xr inetd 8
+will open listening sockets with enabling kernel TCP relay support.
+Whenever connection comes in,
+.Nm
+will be invoked by
+.Xr inetd 8 .
+If it the connection endpoint is in the reserved IPv6 address prefix.
+.Nm
+will relay the connection.
+Otherwise,
+.Nm
+will invoke service-specific daemon like
+.Xr telnetd 8 .
 .Sh RETURN VALUES
 .Nm
 exits with
@@ -240,8 +318,8 @@ on error.
 .%A Jun-ichiro itojun Hagino
 .%A Kazu Yamamoto
 .%T "An IPv6-to-IPv4 transport relay translator"
-.%R Internet draft
-.%N draft-ietf-ngtrans-tcpudp-relay-00.txt
+.%R internet draft
+.%N draft-ietf-ngtrans-tcpudp-relay-01.txt
 .%O work in progress material
 .Re
 .Sh SECURITY NOTICE
@@ -250,6 +328,21 @@ It is very insecure to use
 and other IP-address based authentication, for connections relayed by
 .Nm
 .Pq and any other TCP relaying services .
+.Pp
+.Nm
+itself does not implement access controls, as
+it intends to implement transparent TCP relay services.
+Administrators are advised to filter packets based on IPv6 address.
+IPv6 destination address can be limited by
+carefully configuring routing entries that points to
+.Xr faith 4 ,
+using
+.Xr route 8 .
+IPv6 source address needs to be filtered by using packet filters.
+Documents listed in
+.Sx SEE ALSO
+have more discussions on this topic.
+.\"
 .Sh HISTORY
 The
 .Nm

----Next_Part(Mon_Aug__7_23:52:50_2000_809)----
