From owner-man-jp-reviewer@jp.freebsd.org  Sun Nov 12 11:42:57 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id LAA33529;
	Sun, 12 Nov 2000 11:42:57 +0900 (JST)
	(envelope-from owner-man-jp-reviewer@jp.FreeBSD.org)
Received: from localhost (localhost [127.0.0.1])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id LAA33524
	for <man-jp-reviewer@jp.FreeBSD.org>; Sun, 12 Nov 2000 11:42:56 +0900 (JST)
	(envelope-from horikawa@jp.freebsd.org)
To: man-jp-reviewer@jp.FreeBSD.org
X-Mailer: Mew version 1.93 on Emacs 19.34 / Mule 2.3 (SUETSUMUHANA)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Message-Id: <20001112114256H.horikawa@jp.freebsd.org>
Date: Sun, 12 Nov 2000 11:42:56 +0900
From: Kazuo Horikawa <horikawa@jp.freebsd.org>
X-Dispatcher: imput version 980905(IM100)
Lines: 241
Reply-To: man-jp-reviewer@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: man-jp-reviewer 3116
Subject: [man-jp-reviewer 3116] (man15678) rc.conf.5
Errors-To: owner-man-jp-reviewer@jp.freebsd.org
Sender: owner-man-jp-reviewer@jp.freebsd.org
X-Originator: horikawa@jp.freebsd.org

$BKY@n$G$9!#(B

RELENG_4 $BDI=>$N0Y!"<!$N:9J,$rE,MQ$7$^$7$?!#(B

Index: rc.conf.5
===================================================================
RCS file: /home/ncvs/doc/ja_JP.eucJP/man/man5/rc.conf.5,v
retrieving revision 1.25
diff -u -r1.25 rc.conf.5
--- rc.conf.5	2000/10/29 01:30:20	1.25
+++ rc.conf.5	2000/11/12 02:29:55
@@ -22,7 +22,7 @@
 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 .\" SUCH DAMAGE.
 .\"
-.\" %FreeBSD: src/share/man/man5/rc.conf.5,v 1.64.2.8 2000/10/20 13:02:46 sanpei Exp %
+.\" %FreeBSD: src/share/man/man5/rc.conf.5,v 1.64.2.9 2000/11/11 20:34:25 jkh Exp %
 .\"
 .\" jpman %Id: rc.conf.5,v 1.3 1998/06/26 09:39:58 jsakai Stab %
 .\"
@@ -167,6 +167,8 @@
 .Ar YES
 $B$K%;%C%H$7!"$+$D%+!<%M%k$,(B IPFIREWALL $BIU$-$G:n$i$l$J$+$C$?>l9g!"(B
 ipfw $B%+!<%M%k%b%8%e!<%k$,%m!<%I$5$l$^$9!#(B
+.Ar ipfilter_enable
+$B$b;2>H$7$F$/$@$5$$!#(B
 .It Ar firewall_script
 ($BJ8;zNs(B)
 .Pa /etc/rc.firewall
@@ -226,6 +228,209 @@
 $B$N%U%i%0$O>e5-(B
 .Ar natd_interface
 $B$H$H$b$K<+F0E*$K0z?t$H$7$FDI2C$5$l$^$9!#(B
+.\" ----- ipfilter_enable seting --------------------------------
+.It Ar ipfilter_enable
+($B%V!<%kCM(B) $B%G%U%)%k%H$O(B
+.Ar NO
+$B$K%;%C%H$5$l$^$9!#(B
+.Ar YES
+$B$K%;%C%H$9$k$H!"(B
+.Xr ipf 8
+$B%Q%1%C%H%U%#%k%?%j%s%0$rM-8z$K$7$^$9!#(B
+$B87L)$K8@$($P!"$3$N@_Dj$H!"(B
+.Ar ipfilter_program ,
+.Ar ipfilter_rules ,
+.Ar ipfilter_flags
+$B$,O"7k$5$l$F%3%^%s%I$H$J$k$$$&;v<B$H$r(B "$BMtMQ(B" $B$7$F!"(B
+$B$*$h$=$I$s$J%U%#%k%?$G$b9=C[2DG=$G$9!#(B
+$B$?$@$7!"(B
+.Ar ipfilter_rules
+$B$G;XDj$5$l$k%U%!%$%k$,FI$a$k$3$H$,I,MW$G$9!#(B
+.Ar ipfilter_enable
+$B$H(B
+.Ar ipnat_enable
+$B$,(B
+.Ar YES
+$B$K%;%C%H$5$l!"(B
+.Ar ipnat_rules
+$B$G;XDj$5$l$?%U%!%$%k$,FI$a$k>l9g!"(B
+.Ar ipnat_program ,
+.Ar ipnat_rules ,
+.Ar ipnat_flags
+$B$,!"(B
+$B%M%C%H%o!<%/%"%I%l%9JQ49%W%m%0%i%`$N5/F0$N$?$a$N%3%^%s%I%i%$%s$r9=@.$7$^$9!#(B
+.Ar ipfilter_enable
+$B$H(B
+.Ar ipmon_enable
+$B$,(B
+.Ar YES
+$B$K%;%C%H$5$l$?>l9g!"(B
+.Ar ipmon_program
+$B$H(B
+.Ar ipmon_flags
+$B$,!">e5-%3%^%s%I$NF0:n$r4F;k$9$k$?$a$NJL$N%3%^%s%I%i%$%s$r9=@.$7$^$9!#(B
+$B>\:Y$O(B
+.Pa /etc/rc.network
+$B$r;2>H$7$F$/$@$5$$!#(B
+.Pp
+$BE57?E*$JMQES$G$O!"(B
+.Bd -literal
+ipfilter_enable="YES"
+ipfilter_flags=""
+ipnat_enable="YES"
+ipmon_enable="YES"
+
+.Ed
+$B$r(B
+.Pa /etc/rc.conf
+$B$K5-=R$7!"(B
+.Pa /etc/ipf.rules
+$B$H(B
+.Pa /etc/ipnat.rules
+$B$rE,@Z$KJT=8$9$kI,MW$,$"$k$G$7$g$&!#(B
+ipf $B;HMQ;~$K$O!"(B
+.Ar firewall_enable
+$B$r%*%U$K$9$k$3$H$r?d>)$7$^$9!#(B
+$B%+!<%M%k9=@.%U%!%$%kCf$K(B
+.Bd -literal
+options  IPFILTER
+options  IPFILTER_LOG
+options  IPFILTER_DEFAULT_BLOCK
+
+.Ed
+$B$rCV$/$3$H$bNI$$9M$($G$9!#(B
+.\" ----- ipfilter_program setting ------------------------------
+.It Ar ipfilter_program
+($BJ8;zNs(B) $B%G%U%)%k%H$G(B
+.Ar /sbin/ipf -Fa -f
+$B$K%;%C%H$5$l$^$9!#(B
+$B$3$NJQ?t$O!"%U%#%k%?%k!<%k(B ($BJL$N%U%!%$%kCf$K$"$k$b$N$H4|BT$5$l$^$9(B)
+$B$^$G$N%3%^%s%I%i%$%s$r4^$_$^$9(B ($B%U%#%k%?%k!<%k$O4^$_$^$;$s(B)$B!#(B
+$B>\:Y$O(B
+.Ar ipfilter_enable
+$B$r;2>H$7$F$/$@$5$$!#(B
+.\" ----- ipfilter_rules setting --------------------------------
+.It Ar ipfilter_rules
+($BJ8;zNs(B) $B%G%U%)%k%H$G(B
+.Ar /etc/ipf.rules
+$B$K%;%C%H$5$l$^$9!#(B
+$B$3$NJQ?t$O!"%U%#%k%?%k!<%kDj5A%U%!%$%k$NL>A0$r4^$_$^$9!#(B
+$B$3$N%U%!%$%k$O!"<B9T$9$k%U%#%k%?%3%^%s%I$+$iFI$a$k$3$H$,4|BT$5$l$^$9!#(B
+$B>\:Y$O(B
+.Ar ipfilter_enable
+$B$r;2>H$7$F$/$@$5$$!#(B
+.\" ----- ipfilter_flags setting --------------------------------
+.It Ar ipfilter_flags
+($BJ8;zNs(B) $B%G%U%)%k%H$G(B
+.Ar -E
+$B$K%;%C%H$5$l$^$9!#(B
+$B$3$NJQ?t$O!"%U%#%k%?%3%^%s%I$KDI2C$5$l$k%U%i%0$r4^$_$^$9!#(B
+$B$3$N%U%i%0$O%k!<%kDj5A%U%!%$%k$N8e$KDI2C$5$l$^$9!#(B
+$B%G%U%)%k%H@_Dj$G$O!"%*%s%G%^%s%I$G%m!<%I$5$l$k(B ipf $B%b%8%e!<%k$r=i4|2=$7$^$9!#(B
+ipfilter $B$rD>@\%+!<%M%k$KAH$_9~$`$H$-$K$O(B ($B$3$l$,?d>)$G$9(B)$B!"(B
+$B$3$NJQ?t$r6u$K$7$F%3!<%I=i4|2=$,J#?t2s9T$o$l$J$$$h$&$K$9$Y$-$G$9!#(B
+$B>\:Y$O(B
+.Ar ipfilter_enable
+$B$r;2>H$7$F$/$@$5$$!#(B
+.\" ----- ipnat_enable setting ----------------------------------
+.It Ar ipnat_enable
+($B%V!<%kCM(B) $B%G%U%)%k%H$G(B
+.Ar NO
+$B$K%;%C%H$5$l$^$9!#(B
+.Ar YES
+$B$K%;%C%H$9$k$H!"(B
+.Xr ipnat 8
+$B%M%C%H%o!<%/%"%I%l%9JQ49$rM-8z$K$7$^$9!#(B
+$B$3$NJQ?t$r%;%C%H$9$k>l9g!"(B
+.Ar ipfilter_enable
+$B$b%;%C%H$9$k$3$H$,I,MW$G$9!#(B
+$B>\:Y$O(B
+.Ar ipfilter_enable
+$B$r;2>H$7$F$/$@$5$$!#(B
+.\" ----- ipnat_program setting ---------------------------------
+.It Ar ipnat_program
+($BJ8;zNs(B) $B%G%U%)%k%H$G(B
+.Ar /sbin/ipnat -CF -f
+$B$K%;%C%H$5$l$^$9!#(B
+$B$3$NJQ?t$O!"JQ49%k!<%kDj5A(B ($BJL$N%U%!%$%kCf$K$"$k$b$N$H4|BT$5$l$^$9(B)
+$B$^$G$N%3%^%s%I%i%$%s$r4^$_$^$9(B ($BJQ49%k!<%kDj5A$O4^$_$^$;$s(B)$B!#(B
+$B>\:Y$O(B
+.Ar ipfilter_enable
+$B$r;2>H$7$F$/$@$5$$!#(B
+.\" ----- ipnat_rules setting -----------------------------------
+.It Ar ipnat_rules
+($BJ8;zNs(B) $B%G%U%)%k%H$G(B
+.Ar /etc/ipnat.rules
+$B$K%;%C%H$5$l$^$9!#(B
+$B$3$NJQ?t$O!"%M%C%H%o!<%/%"%I%l%9JQ49$rDj5A$9$k%U%!%$%k$NL>A0$r4^$_$^$9!#(B
+$B$3$N%U%!%$%k$O!"<B9T$9$k(B NAT $B%W%m%0%i%`$+$iFI$a$k$3$H$r4|BT$7$F$$$^$9!#(B
+$B>\:Y$O(B
+.Ar ipfilter_enable
+$B$r;2>H$7$F$/$@$5$$!#(B
+.\" ----- ipnat_flags setting -----------------------------------
+.It Ar ipnat_flags
+($BJ8;zNs(B) $B%G%U%)%k%H$G6u$G$9!#(B
+$B$3$NJQ?t$O!"(Bipnat $B$N%3%^%s%I%i%$%s$KDI2C$5$l$k%U%i%0$r4^$_$^$9!#(B
+$B$3$N%U%i%0$O%k!<%kDj5A%U%!%$%k$N8e$KDI2C$5$l$^$9!#(B
+$B>\:Y$O(B
+.Ar ipfilter_enable
+$B$r;2>H$7$F$/$@$5$$!#(B
+.\" ----- ipmon_enable setting ----------------------------------
+.It Ar ipmon_enable
+($B%V!<%kCM(B) $B%G%U%)%k%H$G(B
+.Ar NO
+$B$K%;%C%H$5$l$^$9!#(B
+.Ar YES
+$B$K%;%C%H$9$k$H!"(B
+.Xr ipmon 8
+$B%b%K%?%j%s%0(B (
+.Xr ipf 8
+$B$H(B
+.Xr ipnat 8
+$B$N%$%Y%s%H$N%m%0(B) $B$rM-8z$K$7$^$9!#(B
+$B$3$NJQ?t$r%;%C%H$9$k>l9g!"(B
+.Ar ipfilter_enable
+$B$b%;%C%H$9$k$3$H$,I,MW$G$9!#(B
+$B>\:Y$O(B
+.Ar ipfilter_enable
+$B$r;2>H$7$F$/$@$5$$!#(B
+.\" ----- ipmon_program setting ---------------------------------
+.It Ar ipmon_program
+($BJ8;zNs(B) $B%G%U%)%k%H$G(B
+.Ar /sbin/ipmon
+$B$K%;%C%H$5$l$^$9!#(B
+$B$3$NJQ?t$O(B
+.Xr ipmon 8
+$B<B9T7A<0$N%U%!%$%kL>$r4^$_$^$9!#(B
+$B>\:Y$O(B
+.Ar ipfilter_enable
+$B$r;2>H$7$F$/$@$5$$!#(B
+.\" ----- ipmon_flags setting -----------------------------------
+.It Ar ipmon_flags
+($BJ8;zNs(B) $B%G%U%)%k%H$G(B
+.Ar -Ds
+$B$K%;%C%H$5$l$^$9!#(B
+$B$3$NJQ?t$O!"(B
+.Xr ipmon 8
+$B%W%m%0%i%`$KEO$5$l$k%U%i%0$r4^$_$^$9!#(B
+$BB>$NE57?E*$JNc$O(B
+.Ar -D /var/log/ipflog
+$B$G$"$j!"$3$l$O(B
+.Xr ipmon 8
+$B$K(B
+.Xr syslogd 8
+$B$r%P%$%Q%9$5$;$F!"D>@\%U%!%$%k$K%m%0$5$;$^$9!#(B
+$B$3$N$h$&$J>l9g!"I,$:(B
+.Pa /etc/newsyslog.conf
+$B$r<!$N$h$&$K=$@5$7$F$/$@$5$$(B:
+.Bd -literal
+/var/log/ipflog  640  10  100  *  Z  /var/run/ipmon.pid
+
+.Ed
+$B>\:Y$O(B
+.Ar ipfilter_enable
+$B$r;2>H$7$F$/$@$5$$!#(B
+.\" ----- end of added ipf hook ---------------------------------
 .It Ar tcp_extensions
 ($B%V!<%kCM(B) $B%G%U%)%k%H$G$O(B
 .Ar NO
--
$BKY@nOBM:(B
