From owner-FreeBSD-net-jp@jp.freebsd.org  Thu Nov 18 00:09:50 1999
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id AAA72862;
	Thu, 18 Nov 1999 00:09:50 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from titanium.yy.ics.keio.ac.jp (titanium.yy.ics.keio.ac.jp [131.113.47.73])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id AAA72857
	for <FreeBSD-net-jp@jp.freebsd.org>; Thu, 18 Nov 1999 00:09:49 +0900 (JST)
	(envelope-from sanpei@sanpei.org)
Received: from lavender.yy.cs.keio.ac.jp (ppp087.dialup.st.keio.ac.jp [131.113.27.87])
	by titanium.yy.ics.keio.ac.jp (8.9.3+3.2W/3.7W) with ESMTP id AAA26654
	for <FreeBSD-net-jp@jp.freebsd.org>; Thu, 18 Nov 1999 00:09:47 +0900 (JST)
	(envelope-from sanpei@sanpei.org)
Received: (from sanpei@localhost)
	by lavender.yy.cs.keio.ac.jp (8.9.3/3.7W) id WAA19417;
	Wed, 17 Nov 1999 22:59:00 +0900 (JST)
Message-Id: <199911171359.WAA19417@lavender.yy.cs.keio.ac.jp>
To: FreeBSD-net-jp@jp.freebsd.org
In-Reply-To: Your message of "Wed, 17 Nov 1999 09:05:28 +0900"
References: <3831F14833E.47B3K-SHIRO@po.teleway.ne.jp>
X-Mailer: Mew version 1.70 on Emacs 19.34.1 / Mule 2.3
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Date: Wed, 17 Nov 1999 22:59:00 +0900
From: MIHIRA Sanpei Yoshiro <sanpei@sanpei.org>
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+990727
X-Sequence: FreeBSD-net-jp 2097
Subject: [FreeBSD-net-jp 2097] Re: ipfilter
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: sanpei@sanpei.org

>$B$3$l$O@N$3$N(BML$B$K=q$$$?$N$G$9$,!"(BFreeBSD$B5!$K(BNIC$BFsKg:9$7$r$7$F%k!<%?$r:n$j(B
>$B$^$7$?!"$=$N$H$-$K(Brouted$B$r(B"-s"$B$GF0$+$5$J$1$l$P%k!<%?$H$7$F%Q%1%C%H$r%U%)!<(B
>$B%o!<%I$7$F$/$l$J$+$C$?$N$G$3$N%*%W%7%g%s$r$D$1$F$$$k$@$1$J$N$G$9!#(B
>$B!t;d$b>\$7$$M}M3$OJ,$+$C$F$$$^$;$s!#(B

  $B7PO)>pJs$,$J$s$i$J$NJ}K!$GF@$F$$$l$P(B(defalut route $B$r@EE*$K@_Dj$7(B
$B$F$$$?$j(B, DHCP client $B$G@_Dj$9$k$G$bNI$$(B). routed $B$OI,?\$G$O$"$j$^$;(B
$B$s(B.

  $B%Q%1%C%H%U%)%o!<%I$KI,?\$J$N$O(B, /etc/rc.conf $B$K<!$N9T$NDI2C$G$9(B. 

gateway_enable="YES"

  $B<B:]$K%7%9%F%`$,$J$K$r$7$F$$$k$+$O(B, 

% grep gateway_enable /etc/rc*

$B$H$7$F(B /etc/rc.network $B$rN`?d$7(B, $B<!$N(B sysctl -w .... $B$,K\<A$@$H;W$$(B
$B$^$9(B.

    if [ "X$gateway_enable" = X"YES" ]; then
            echo -n ' IP gateway=YES'
            sysctl -w net.inet.ip.forwarding=1 >/dev/null 2>&1
    fi

MIHIRA Yoshiro
ip filter $B$N@_Dj$K$D$$$F$O(B, $B;~4V$,L5$$$N$G(B
$B$*JV;v$G$-$^$;$s(B^^;
