From owner-FreeBSD-users-jp@jp.freebsd.org  Wed Nov 27 06:10:52 1996
Received: by jaz.jp.freebsd.org (8.8.3+2.6Wbeta9/8.7.3) id GAA04601
	Wed, 27 Nov 1996 06:10:52 +0900 (JST)
Received: by jaz.jp.freebsd.org (8.8.3+2.6Wbeta9/8.7.3) with ESMTP id GAA04596
	for <freebsd-users-jp@jp.freebsd.org>; Wed, 27 Nov 1996 06:10:51 +0900 (JST)
Received: from localhost (localhost.race.u-tokyo.ac.jp [127.0.0.1]) by shiva.race.u-tokyo.ac.jp (8.8.3+2.6Wbeta9/3.4W-96012612) with ESMTP id GAA18440; Wed, 27 Nov 1996 06:10:43 +0900 (JST)
Message-Id: <199611262110.GAA18440@shiva.race.u-tokyo.ac.jp>
To: FreeBSD-users-jp@jp.freebsd.org, n-miwa@lac.co.jp
In-Reply-To: Your message of "Tue, 26 Nov 1996 21:12:21 +0900"
References: <9611261212.AA00987@pcmiwa.lac.co.jp>
X-Mailer: Mew version 1.05+ on Emacs 19.34.1, Mule 2.3
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Date: Wed, 27 Nov 1996 06:10:43 +0900
From: MOROHOSHI Akihiko <moro@race.u-tokyo.ac.jp>
Reply-To: FreeBSD-users-jp@jp.freebsd.org
X-Distribute: distribute [version 2.1 (Alpha) patchlevel=19]
X-Sequence: FreeBSD-users-jp 6831
Subject: [FreeBSD-users-jp 6831] Re: IP Filter
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org

$BElBg$N;U!y$G$9!#(B

From: Nobuo Miwa <n-miwa@lac.co.jp>
Subject: [FreeBSD-users-jp 6813] IP Filter
Date: Tue, 26 Nov 1996 21:12:21 +0900

> $B$O$8$a$^$7$F!#(B
> $B;0NX!w%i%C%/$H$$$$$^$9!#=i$a$FH/8@!J<ALd!K$5$;$FD:$-$^$9!#(B
> $B$h$m$7$/$*4j$$$$$?$7$^$9!#(B
> 
> $B8=:_!"(BIP Filter$B$r%F%9%H$7$F$$$k$N$G$9$,!"(BNAT$B5!G=$,$&$^$/(B
> $BF0:n$7$^$;$s!#>u67$O!"0J2<$N$h$&$K$J$C$F$$$^$9!#(B
(snip)
> IP Filter3.1.1(ip_fil3.1.1.tar)$B$r0J2<$N<j=g$G%$%s%9%H!<%k$7$^$7$?!#(B

$B$"!"$A$c$s$H(B3.1.1$B$@(B
$B!t(Bweb page$B$K$@$^$5$l$F(B3.1.0$B$r;n$7$F$J$d$s$@;d(B

(snip)
>   6. pass in all
>      pass out all
>      $B$H$$$&FbMF$r(Bipf -f $B$K$F<B9T!#$3$l$OITMW$+!)(B

NAT$B$r$7$?$$$@$1$G$"$l$PITMW$G$9!#(B

>   7. map ed1 192.168.1.0/24 -> 172.16.18.10/32
>      $B$H$$$&FbMF$r(Bipnat -f $B$K$F<B9T!#(Bipnat -l $B$G3NG'!#(B

$B$3$3$G$?$H$($P(B
map ed1 192.168.1.0/24 -> 172.16.18.10/32 portmap tcp 10000:20000
$B$J$s$F$N$r2C$($k$H(BTCP$B$N(Bport$B$N%^%C%T%s%0$r$7$F$/$l$^$9!#(B

>   8. PC$B$+$i!"(Btelnet 172.16.18.11$B$r<B9T$7$F$b@\B3$G$-$J$$!#(B
>      PC$B$+$i!"(Btelnet 172.16.18.10$B$O@\B3$G$-$k!#(B

$B$3$3$G!"8=:_%^%C%T%s%0$,9T$o$l$F$$$l$P(B ipnat -l $B$G$=$NFbMF$,=P$^$9!#(B
$B$"$H$O(Btcpdump$B$J$s$+$G$I$&$$$&%Q%1%C%H$,(Bgamera$B$+$i=P$F$$$/$+!"(Bkanegon$B$K(B
$B$O%Q%1%C%H$,FO$/!J$+$D<u$1<h$i$l$k!K$+!"$r$_$k$3$H$G$7$g$&$+!#(B

$B;U!y(B $B6GI'(B (MOROHOSHI Akihiko) $BEl5~Bg3X(B $BEE5$EE;R>pJs7O(B
 //                           E-Mail: moro@race.u-tokyo.ac.jp
                    URL: http://www.race.u-tokyo.ac.jp/~moro/
