From owner-FreeBSD-net-jp@jp.freebsd.org  Wed Nov 17 08:41:44 1999
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id IAA13409;
	Wed, 17 Nov 1999 08:41:44 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from ns1.kobelcosys.co.jp (root@ns1.kobelcosys.co.jp [163.48.1.1])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id IAA13404
	for <FreeBSD-net-jp@jp.freebsd.org>; Wed, 17 Nov 1999 08:41:43 +0900 (JST)
	(envelope-from toshi@he.kobelcosys.co.jp)
Received: from ns1.in.kobelcosys.co.jp (root@ns1.in.kobelcosys.co.jp [10.1.8.2])
	by ns1.kobelcosys.co.jp (8.9.1+3.0W/3.7W-99032600) with ESMTP id IAA29196
	for <FreeBSD-net-jp@jp.freebsd.org>; Wed, 17 Nov 1999 08:41:42 +0900 (JST)
Received: from he.kobelcosys.co.jp (he.kobelcosys.co.jp [10.16.128.2])
	by ns1.in.kobelcosys.co.jp (8.9.1+3.0W/3.7W-99110611) with ESMTP id IAA06795
	for <FreeBSD-net-jp@jp.freebsd.org>; Wed, 17 Nov 1999 08:41:41 +0900 (JST)
Received: from bsd.he.kobelcosys.co.jp (toshi@[10.16.128.103])
	by he.kobelcosys.co.jp (8.8.5+2.7Wbeta5/3.6Wbeta5-97080705) with ESMTP id IAA10882
	for <FreeBSD-net-jp@jp.freebsd.org>; Wed, 17 Nov 1999 08:41:39 +0900 (JST)
Received: (from toshi@localhost)
	by bsd.he.kobelcosys.co.jp (8.9.3/3.7W-99012414) id IAA17850;
	Wed, 17 Nov 1999 08:41:36 +0900 (JST)
Date: Wed, 17 Nov 1999 08:41:36 +0900 (JST)
Message-Id: <199911162341.IAA17850@bsd.he.kobelcosys.co.jp>
From: toshi@he.kobelcosys.co.jp (Toshihiko UEKI/=?ISO-2022-JP?B?GyRCPyJMWklSSScbKEI=?=)
References: <000001bf307f$b3653f00$a264a8c0@local.t13.com>
X-Mailer: cmail 2.60+19991029 on GNU Emacs 20.2.2 / Mule 3.0 (MOMIJINOGA)
To: FreeBSD-net-jp@jp.freebsd.org
In-reply-to: "Hiroshi Tsukada"'s message of "Wed, 17 Nov 1999 07:12:38 +0900"
	     <000001bf307f$b3653f00$a264a8c0@local.t13.com>
Mime-Version: 1.0 (generated by tm-edit 7.106)
Content-Type: text/plain; charset=ISO-2022-JP
Lines: 50
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+990727
X-Sequence: FreeBSD-net-jp 2094
Subject: [FreeBSD-net-jp 2094] Re: ipfilter
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: toshi@he.kobelcosys.co.jp

In message "[FreeBSD-net-jp 2093] Re: ipfilter"
	on 99/11/17, "Hiroshi Tsukada" <hiroshi@kiwi.ne.jp> writes:

>$B$D$+$@$G$9!#(B

$B?"LZ$G$9!#(B

>> natd $B$,M-8z$K$J$C$F$$$J$$$h$&$G$9$M!#$?$H$($P!"0J2<$N$h$&$J%(%s%H%j$r(B
>> (A) $B$N%^%7%s$N(B /etc/rc.conf $B$KDI2C$7$F$_$F$/$@$5$$!#$^$?!"(Bnatd $B$K$D$$(B
>natd $B$rMxMQ$9$k$K$O(B DIVERT $B$H(B IPFIREWALL $B$rM-8z$K$7$F!"(BKernel
>$B$r:F9=C[$9$kI,MW$b$"$k$H;W$$$^$9!#(B

$B<:Ni$7$^$7$?!#$&$C$+$jH4$+$7$F$7$^$$$^$7$?!#(Bm(_ _)m

natd $B$rMxMQ$9$k$?$a$K$O(B IPDIVERT $BIU$-$G(B kernel $B$r:F9=C[$9$kI,MW$,$"$j(B
$B$^$9$M!#$^$?!"(Bipfw divert $B$H$7$F;H$&$b$N$G$9$+$i!"F1;~$K(B IPFIREWALL $B$b(B
$B;XDj$7$F$*$/I,MW$,$"$j$^$9$h$M!#(B

IPFW_DIVERT_RESTART $B$H$$$&%*%W%7%g%s$b(B 2.2.8 $B$"$?$j$K$O$"$j$^$7$?$,!"(B
$B$3$l$O(B 3.x $B$G$O$3$N%*%W%7%g%s$O$J$/$J$j!">o$K$3$l$,;XDj$5$l$F$$$k$h$&(B
$B$K?6Iq$&$h$&$K$J$C$?$h$&$G$9!#(B

# $B$3$N%*%W%7%g%s$O;H$C$?$3$H$,$J$$$N$G!">\$7$/$OM}2r$7$F$$$^$;$s$,!D!D(B

>$B$?$@!"(Bipfilter $B$G$b(B natd $B$HF1MM$N5!G=$r<B8=$G$-$^$9$M!#(B
># ipnat $B$H$+8@$&$d$D!#$"$^$j>\$7$/$J$$$N$G(B rule $B$ONc<($G$-$^$;$s$G$9!#(B

NetBSD $B$d(B OpenBSD $B$G$O(B ipfilter + ipnat $B$,I8=`$G$9$M!#$^$?!"(BFreeBSD $B$G(B
$B$b(B 3.X $B$+$i$O$3$l$i$b;H$($k$h$&$K$J$j$^$7$?$h$M!#(B

$B$?$H$($P!"0J2<$N$h$&$J46$8$G(B /etc/ipnat.conf $B$N%^%C%W$O5-=R$G$-$^$9$,!"(B
$B;H$$9~$s$G$$$k$o$1$G$O$J$$$N$G!">\$7$$$3$H$O(B man $B$7$F$_$J$1$l$P$o$+$j(B
$B$^$;$s!#(B ;-)

map ed0 192.168.1.0/24 -> 210.XXX.YYY.1/32 portmap tcp/udp xxx:yyy
                                                           ^^^^^^^
                                                     map $B$9$k%]!<%HHV9f(B

>> $B$^$?!"(Bdefaultrouter $B$N$_$,@_Dj$5$l$F$$$^$9$,!"$3$N%^%7%s$O(B B $B$NG[2<$N(B
>> $B%M%C%H%o!<%/$X$N7PO)$rCN$i$J$$$3$H$K$J$j$^$9!#$G$9$N$G!"$3$l$K$D$$$F$b(B
>(B) $B$N%^%7%s$G(B routed $B$,M-8z$K$J$C$F$$$k$H$$$&$3$H$O!"F0E*%^%C%T%s%0(B
>$B$r$7$?$$$H9M$($F$*$i$l$k$h$&$K$b;W$($^$9!#(B(A) $B$N%^%7%s$G$b(B routed (-q?)
>$B$rM-8z$K$9$l$PNI$$$N$G$O$J$$$G$7$g$&$+!#(B

$B$b$A$m$s!"$=$N$h$&$J0U?^$,$"$k$N$J$i!"(Brouted $B$G$b2DG=$G$7$g$&$M!#(B
-- 
$B?"LZ(B $BIRI'(B / $B%3%Y%k%3%7%9%F%`3t<02q<R(B  $B%M%C%H%o!<%/%7%9%F%`K\It(B   EC $B%7%9%F%`It(B
E-mail: toshi@he.kobelcosys.co.jp                       Powered by OpenBSD 2.5
PGP: Fingerprint16 (2.Xi) = 37 C7 0E 7D 7A C8 E2 56   83 A7 B7 19 9C BF D9 27
     Fingerprint20 (5.0i) = BFE8 9E1A 310D E499 FA4B  50CD EAAB 2862 FED1 A2FB
