From owner-FreeBSD-users-jp@jp.freebsd.org  Wed Nov 27 11:05:33 1996
Received: by jaz.jp.freebsd.org (8.8.3+2.6Wbeta9/8.7.3) id LAA05692
	Wed, 27 Nov 1996 11:05:33 +0900 (JST)
Received: by jaz.jp.freebsd.org (8.8.3+2.6Wbeta9/8.7.3) with SMTP id LAA05687
	for <FreeBSD-users-jp@jp.freebsd.org>; Wed, 27 Nov 1996 11:05:25 +0900 (JST)
Received: from pcmiwa.lac.co.jp (pcmiwa.dev.lac.co.jp [172.16.18.11]) by lacgw.lac.co.jp (8.6.12/8.6.9) with SMTP id LAA08607 for <FreeBSD-users-jp@jp.freebsd.org>; Wed, 27 Nov 1996 11:05:19 +0900
Message-Id: <9611270204.AA00991@pcmiwa.lac.co.jp>
Date: Wed, 27 Nov 1996 11:04:50 +0900
From: Nobuo Miwa <n-miwa@lac.co.jp>
To: FreeBSD-users-jp@jp.freebsd.org
In-Reply-To: <199611262110.GAA18440@shiva.race.u-tokyo.ac.jp>
X-Mailer: AL-Mail 1.12
Reply-To: FreeBSD-users-jp@jp.freebsd.org
X-Distribute: distribute [version 2.1 (Alpha) patchlevel=19]
X-Sequence: FreeBSD-users-jp 6846
Subject: [FreeBSD-users-jp 6846] Re: IP Filter
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org

$B;0NX!w%i%C%/$G$9!#(J
$B;U!y$5$s!"AaB.$N%3%a%s%H$"$j$,$H$&$4$6$$$^$9!#(J

>$B$3$3$G!"8=:_%^%C%T%s%0$,9T$o$l$F$$$l$P(J ipnat -l $B$G$=$NFbMF$,=P$^$9!#(J
>$B$"$H$O(Jtcpdump$B$J$s$+$G$I$&$$$&%Q%1%C%H$,(Jgamera$B$+$i=P$F$$$/$+!"(Jkanegon$B$K(J
>$B$O%Q%1%C%H$,FO$/!J$+$D<u$1<h$i$l$k!K$+!"$r$_$k$3$H$G$7$g$&$+!#(J

$B$b$&0lEY9=@.$r=q$-$^$9!#(J

           +---------------+
           | FreeBSD2.1.5R |"kanegon" (192.168.1.0$B$N%M%C%H%o!<%/$OCN$i$J$$!K(J
           +-------+-------+
                   | 172.16.18.11/16
       *-----------+------+------------*
                          | 172.16.18.10/16 (ed1)
                    +-----+---------+
            "gamera"| FreeBSD2.1.5R | IP Filter 3.1.1
                    +-----+---------+
                          | 192.168.1.1/24 (ed0)
      *----------+--------+----------------*
                 |
             +---+--+ 192.168.1.10/24
             |  PC  | (Default gateway$B$O(J192.168.1.1)
             +------+

$B#1!%(Jtcpdump$B$7$?$H$3$m!"(J
        ed0 $B$G$O!"(JPC$B$+$i(Jkanegon$B08$F$N(Jtelnet$B%Q%1%C%H$O=P$F$$$k!#(J
        ed1 $B$G$O!"(Jkanegon$B08$F$N(Jtelnet$B%Q%1%C%H$O=P$F$$$J$$!#(J

$B#2!%(Jipf $B$N%U%#%k%?$OA4$/@_Dj$7$F$$$^$;$s!#(J

$B#3!%(Jipnat -l $B$G$O!"(J
        map ed1 192.168.1.0/24 -> 172.16.18.10/32 portmap tcp 10000:20000
    $B$H$J$C$F$$$^$9(J(ed1$B$r(Jed0$B$K$+$($F$_$^$7$?$,%@%a$G$7$?(J:-<$B!K!#(J

$B#4!%(Jipnat -s $B$G$O!"A4$F(J0$B$K$J$C$F$$$k!JJQ49$5$l$F$$$J$$!)!K!#(J

/etc/sysconfig$B$G$O!"(Jrouter=NO $B$K$7$F$$$^$9$,!"$3$l$O$$$$$N$G$7$g$&$+!)(J 

$B$*K;$7$$$H$3$m?=$7Lu$"$j$^$;$s$,!"$h$m$7$/%"%I%P%$%94j$$$^$9(Jm(_ _)m$B!#(J

<Nobuo Miwa>                    ( @ @ )
---------------------------o00o--(. .)--o00o----------------------------
n-miwa@lac.co.jp
LAC CO.,LTD.   TEL: +81-3-3431-3484   FAX: +81-3-3431-3586   
