From owner-FreeBSD-users-jp@jp.FreeBSD.org Mon Sep 17 16:57:33 2007
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) id l8H7vXM46705;
	Mon, 17 Sep 2007 16:57:33 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from rv-out-0910.google.com (rv-out-0910.google.com [209.85.198.189])
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) with ESMTP/inet id l8H7vWB46700
	for <FreeBSD-users-jp@jp.freebsd.org>; Mon, 17 Sep 2007 16:57:33 +0900 (JST)
	(envelope-from masaya.nakamura@gmail.com)
Received: by rv-out-0910.google.com with SMTP id g11so1083438rvb
        for <FreeBSD-users-jp@jp.freebsd.org>; Mon, 17 Sep 2007 00:57:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=beta;
        h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        bh=iiRz9quM7jGbFj54rVi/JkUD3PPlvbV2Ts85G+EQq5s=;
        b=qU80fmlWkCj3cRb41xYkhbwp/cZ9hgoqQ6oFA+F34dGuq2LkiQr+C1ND3ryjUerjiYFO3IOdYagopxRcyYi5khThe/znhdr+K89p09J6sZ0XmjoKXp2+KrWZIePIDsFwXxSXhJj+djvFhlZ8+hR+T0eRlLhe6s9zUSrhrs3CuHw=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=at1HAJnMZuo1gHyuaPLh31QzhzGeom17asPNx8IFEIEhCRcXI76x/0sAfu7eVF4hA6LB/xwZT11LRfBu9Or8oAxOlZTA7je0ZLlxUfEbFE0PTLvHiKpsO9B+u6NyMZoQSYjr5693yrIMWr9aKdtnuRKQAX9g99apKfsIBPpYrDk=
Received: by 10.141.70.18 with SMTP id x18mr903766rvk.1190015849862;
        Mon, 17 Sep 2007 00:57:29 -0700 (PDT)
Received: by 10.141.122.4 with HTTP; Mon, 17 Sep 2007 00:57:29 -0700 (PDT)
Message-ID: <d8c974950709170057g55751be6sbf6ab001879d8a1c@mail.gmail.com>
From: "masaya nakamura" <masaya.nakamura@gmail.com>
To: FreeBSD-users-jp@jp.FreeBSD.org
In-Reply-To: <d8c974950709170012g181d56f2va2ba02f18366d4d9@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <20070916134935.GB14047@MysticWALL.COM>
	 <20070917001648.DCE8.IKESAN@1kw.jp>
	 <d8c974950709161414w448458c3r5fc7d67b14d3b1c4@mail.gmail.com>
	 <20070917.104354.27780404.yoshiaki@kt.rim.or.jp>
	 <d8c974950709170012g181d56f2va2ba02f18366d4d9@mail.gmail.com>
Reply-To: FreeBSD-users-jp@jp.FreeBSD.org
Precedence: list
Date: Mon, 17 Sep 2007 17:57:29 +1000
X-Sequence: FreeBSD-users-jp 91005
Subject: [FreeBSD-users-jp 91005] Re: =?ISO-2022-JP?B?GyRCJVElMRsoQg==?=
 =?ISO-2022-JP?B?GyRCJUMlSCVVJSMlayU/JEskRCQkJEYbKEI=?= 
Sender: owner-FreeBSD-users-jp@jp.FreeBSD.org
X-Originator: masaya.nakamura@gmail.com
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+060209

$BCfB<$G$9!#(B

$B%Q%1%C%H%U%#%k%?!<$K$D$$$F$_$J$5$s$+$i?'!9$J$*JV;v$r(B
$BD:$-!"$"$j$,$H$&$4$6$$$^$9!#(B

ipfw$B$N%k!<%k%U%!%$%k(B(/etc/rc.firewall)$B$N$$$8$jJ}$N:nK!$K(B
$B$D$$$F$_$J$5$s$N$40U8+$r$*J9$-$7$?$$$H;W$$$^$9!#(B

>############
># Define the firewall type in /etc/rc.conf.  Valid values are:
>#   open     - will allow anyone in
>#   client   - will try to protect just this machine
>#   simple   - will try to protect a whole network
>#   closed   - totally disables IP services except via lo0 interface
>#   UNKNOWN  - disables the loading of firewall rules.
>#   filename - will load the rules in the given filename (full path required)
>#
># For ``client'' and ``simple'' the entries below should be customized
># appropriately.

$B%k!<%k%U%!%$%k$K>e5-$N$h$&$K=q$+$l$F$$$^$9$,!";d$N%1!<%9$N(B
$B$h$&$J%5!<%P!<(B1$BBf$,C1FH$G%$%s%?!<%M%C%H$K@\B3$7$F$$$k>l9g!"(B
"client"$B$H$_$J$7$F4V0c$$$J$$$H;W$$$^$9$,!"(B/etc/rc.conf$B$K(B

firewall_type="client"
firewall_enable="YES"

$B!t(B> root $B$G!"(B
$B!t(B>
$B!t(B>   # kldlod ipfw
$B!t$3$l$bI,MW$G$9$M!#(B

$B$H=q$$$F$*$$$F<+J,$N%k!<%k$r(Bclient$B%(%s%H%j!<$NCf$K5-=R$9$k$N$,(B
$BIaDL$N$*:nK!$J$N$G$7$g$&$+!)$=$l$H$b<+J,$N%k!<%k$@$1$r5-=R$7$?(B
$B%U%!%$%k$rJL$K:n$C$F(B/etc/rc.firewall$B$HCV$-49$($k$N$,IaDL$J$N$G$7$g$&$+!)(B

$B$I$&$G$b$$$$$H8@$($P$I$&$G$b$$$$$3$H$J$N$+$b$7$l$^$;$s$,!"(B
$B$_$J$5$s$O$I$N$h$&$K$5$l$F$$$k$N$+$h$+$C$?$i65$($F2<$5$$!#(B

-- 
$BCfB<@5Li(B
