From owner-FreeBSD-users-jp@jp.freebsd.org  Sat Mar 25 23:35:52 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id XAA01862;
	Sat, 25 Mar 2000 23:35:52 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from smtp5.dti.ne.jp (smtp5.dti.ne.jp [202.216.228.40])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id XAA01857
	for <FreeBSD-users-jp@jp.freebsd.org>; Sat, 25 Mar 2000 23:35:52 +0900 (JST)
	(envelope-from hideishi@ops.dti.ne.jp)
Received: from localhost (PPP130.matsudo-ap4.dti.ne.jp [210.170.231.102]) by smtp5.dti.ne.jp (8.9.3/3.7W) with ESMTP id XAA17234 for <FreeBSD-users-jp@jp.freebsd.org>; Sat, 25 Mar 2000 23:35:51 +0900 (JST)
To: FreeBSD-users-jp@jp.freebsd.org
In-Reply-To: <20000325033129.3F2D.TAI@da.airnet.ne.jp>
References: <001001bf95ba$175279c0$0101a8c0@gravity.co.jp>
	<20000325033129.3F2D.TAI@da.airnet.ne.jp>
X-Mailer: Mew version 1.94.1 on Emacs 19.34 / Mule 2.3 (SUETSUMUHANA)
Organization: S.C. MAGI-SYSTEM
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Message-Id: <20000325233543R.hideishi@ops.dti.ne.jp>
Date: Sat, 25 Mar 2000 23:35:43 +0900
From: Hidenori Ishikawa <hideishi@ops.dti.ne.jp>
X-Dispatcher: imput version 991025(IM133)
Lines: 55
Reply-To: FreeBSD-users-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: FreeBSD-users-jp 50795
Subject: [FreeBSD-users-jp 50795] Re: ifilter 
 =?ISO-2022-JP?B?GyRCJE49cTwwGyhC?= 
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org
X-Originator: hideishi@ops.dti.ne.jp

$B@P@n!w@iMUBg$G$9!#(B

From: TAICHI ISHIKAWA <tai@da.airnet.ne.jp>
Subject: [FreeBSD-users-jp 50778] Re: ifilter  $B$N=q<0(B 
Date: Sat, 25 Mar 2000 03:57:31 +0900

tai> $B$A$J$_$K!"(B
tai> set filter out 0 permit 0/0 0/0 tcp
tai> $B$H$d$k$H!"(B
tai> ($B0lHV$O$8$a$KI>2A$5$l$k(B)$B308~$1(BTCP$B$G$"$i$f$k%"%I%l%9$KBP$7$F(Bpermit($B5v2D(B)
tai> $B$9$k(B
tai> $B$H$$$C$?0UL#$K$J$k$H;W$$$^$9!#(B

$B$($C$H!"(Bkernel$BAH$_9~$_$N(Bipfw$B$H;w$?=q<0$K$J$C$F$$$^$9!#(B

$BNc$($P!D(B
set filter out 0  permit 0/0 0/0 tcp eq 53
           #1  #2 #3     #4  #5  #6  #7
$B$H$9$k$H!"(B
#1 out/in/dial/alive $B$NCf$+$i0l$D!#(B
$B=g$K!"Fb8~$-!"308~$-!"%@%$%d%k%"%C%W%H%j%,!<!"%@%$%d%k%"%C%W$N7QB3(B

#2 filter$B%j%9%H$NHV9f!#4pK\E*$K(Bipfw$B$HF1$8$G!"@h$KE,MQ$5$l$?$b$N$,(B
$BM%@h$5$l$^$9!#=>$C$F!"8e$+$iDI2C$7$?$$$H$-$O!"$=$N4V$NHV9f$r(B
$B$D$1$F2<$5$$!#(B

#3 permit/deny $B$NCf$+$i0l$D!#(B
$B=g$K!"5v2D!"5qH]!#(B

#4 $BH/?.85%"%I%l%9(B("/"$B$N$"$H$O!"%M%C%H%^%9%/(B)

#5 $B08@h%"%I%l%9(B("/"$B$N$"$H$O!"%M%C%H%^%9%/(B)

#6 tcp/udp/icmp/all $B$+$i0l$D!#(B

#7 $B$3$l$O%*%W%7%g%s$G$9$,!"(Beq 53$B$H$9$k$3$H$G!"(Bport$BHV9f$r(B53$B$H(B
$B;XDj$G$-$^$9!#(B

$B$+$J$jE,Ev$G$9$,!"J,$+$j$^$9!)!J>P!K(B

tai> $B$=$l$H!"5$$K$J$C$?$N$G$9$,!"(BNAT$B$N%Q%C%A$H$$$&$N$O$I$&$$$&$b$N$G$7$g$&$+!)(B
tai> $B;d$N>l9g$O%$%s%9%H!<%k$5$l$?(Bppp$B$G$=$N$^$^(BNAT$B$,<B8=(B(*)$B$G$-$F$$$^$9!#(B
tai> $B2?$+4*0c$$$7$F$$$k$h$&$J5$$b$9$k$N$G$A$g$C$H65$($F$/$@$5$$!#!#!#(B

$B$$$D$+$i$+$OK:$l$^$7$?$,!"@N$N(BFreeBSD(2.2.1$B$/$i$$!)(B)$B$N:"$O!"(B
nat$BMQ$N(Bpatch$B$,8x3+$5$l$F$$$^$7$?!#(B

$B$G$b!":G6a(B(3.x)$B$+$i$OK\2H$K%^!<%8$5$l$F$$$k$N$G!"5$$K$7$J$/$F(B
$B$$$$$G$7$g$&!#(B

    /-------------------------------------------------/
   /(^^)/           Hidenori Ishikawa                /
  / (^^)/        <hideishi@ops.dti.ne.jp>           /
 /  (^^)/ URL http://www.ops.dti.ne.jp/~hideishi/  /
/-------------------------------------------------/
