From owner-FreeBSD-users-jp@jp.freebsd.org  Mon Apr  9 13:57:06 2001
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id NAA95284;
	Mon, 9 Apr 2001 13:57:06 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from gate.ryukoku.seikyou.ne.jp (gate.ryukoku.seikyou.ne.jp [202.211.149.17])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id NAA95278
	for <FreeBSD-users-jp@jp.freebsd.org>; Mon, 9 Apr 2001 13:57:05 +0900 (JST)
	(envelope-from kjm@ideon.st.ryukoku.ac.jp)
Received: from ideon.st.ryukoku.ac.jp (ideon.st.ryukoku.ac.jp [133.83.36.5])
	by gate.ryukoku.seikyou.ne.jp (Postfix) with ESMTP id 13D621AB20
	for <FreeBSD-users-jp@jp.freebsd.org>; Mon,  9 Apr 2001 13:56:35 +0900 (JST)
Received: from ideon.st.ryukoku.ac.jp (kjm@localhost [127.0.0.1])
	by ideon.st.ryukoku.ac.jp (8.11.1/3.7W/kjm-20010321) with ESMTP id f394uYN03156
	for <FreeBSD-users-jp@jp.freebsd.org>; Mon, 9 Apr 2001 13:56:34 +0900 (JST)
From: KOJIMA Hajime / =?ISO-2022-JP?B?GyRCPi5FZ0glGyhC?= <kjm@rins.ryukoku.ac.jp>
To: FreeBSD-users-jp@jp.freebsd.org
In-reply-to: Your message of "Sat, 07 Apr 2001 11:10:19 JST."
	<20010407.111019.00489987.ktg@aurora.ocn.ne.jp>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-2022-jp
Date: Mon, 09 Apr 2001 13:56:34 +0900
Message-ID: <3153.986792194@ideon.st.ryukoku.ac.jp>
Reply-To: FreeBSD-users-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+010328
X-Sequence: FreeBSD-users-jp 60680
Subject: [FreeBSD-users-jp 60680] Re: a serious bug in IPFilter
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org
X-Originator: kjm@ideon.st.ryukoku.ac.jp

<20010407.111019.00489987.ktg@aurora.ocn.ne.jp>$B$K$*$$$F(B
Kazu TAKAGI $B$5$s$,$*$C$7$c$k$K$O(B:
| FreeBSD-stable $B$G(B ipfilter $B$K4X$9$k(B bug $B>pJs$,Js9p$5$l$F$$$^$7$?!%(B
| $B>\$7$/$O!$(B
| http://false.net/ipfilter/2001_04/0087.html
| $B$r$4Mw2<$5$$!%%Q%C%A$bC)$l$k$h$&$K$J$C$F$$$^$9!%(B

  $B>pJs$"$j$,$H$&$4$6$$$^$9!#$$$^$$$A$h$/$o$+$i$J$$$N$G$9$,!"(B

* /etc/ipf.rules $B$K$*$$$F(B keep state keep frags $B$r;H$C$F$$$k>l9g$K(B
  $BLdBj$H$J$k!#(Bkeep state $B$@$1$J$iLdBj$H$J$i$J$$!#(B

* $B$,!"(BNAT $BMxMQ;~$K$O(B keep state keep frags $B$,<+F0E*$K9T$o$l$k$?$a(B
  $BLdBj$H$J$k!#(B

* ip filter 3.3.22 / 3.4.17 $B$G(B fix $B$5$l$F$$$k!#(BFreeBSD 4.3-RELEASE
  $B$K$O$3$N(B fix $B$,4^$^$l$k!#(B

  $B$H$$$&M}2r$G9g$C$F$^$9$+(B?

----
  
  4.2-RELEASE $BEy$G(B ip filter $B$r:G?7HG$K$$$l$+$($?$$>l9g$O!"$I$&$9(B
  $B$k$N$,(B smart $B$J$s$G$7$g$&!D!D!#(B
  /usr/src/contrib/ipfilter $B0J2<$r$4$=$C$H$$$l$+$($F(B kernel $B$r$D$/(B
  $B$j$J$*$7$?$j$9$l$P(B ok $B$J$s$G$7$g$&$+(B?

----
// $BLZ2<@'M:!VM}2J7O$N:nJ85;=Q!WCf8x?7=q(B 624 $B$rFI$b$&(B!!

$B>.Eg(B $BH%(B - KOJIMA Hajime
[Office] kjm@rins.ryukoku.ac.jp, http://www.st.ryukoku.ac.jp/~kjm/
         Phone: 077-543-7414  Fax: 077-543-0706
