From owner-FreeBSD-users-jp@jp.FreeBSD.org Mon Jul 26 18:53:28 2004
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) id i6Q9rSm37940;
	Mon, 26 Jul 2004 18:53:28 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from ns4.sony.co.jp (NS4.Sony.CO.JP [137.153.0.44])
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) with ESMTP/inet id i6Q9rR837935
	for <FreeBSD-users-jp@jp.FreeBSD.org>; Mon, 26 Jul 2004 18:53:27 +0900 (JST)
	(envelope-from mistral@imasy.or.jp)
Received: from mail6.sony.co.jp (mail6.sony.co.jp [43.0.1.208])
Received: from mail6.sony.co.jp (localhost [127.0.0.1])
	by mail6.sony.co.jp (R8/Sony) with ESMTP id i6Q9rQLP007224
	for <FreeBSD-users-jp@jp.FreeBSD.org>; Mon, 26 Jul 2004 18:53:26 +0900 (JST)
Received: from shimako.yamayuri.org ([43.17.41.27])
	by mail6.sony.co.jp (R8/Sony) with ESMTP id i6Q9rQm8007221
	for <FreeBSD-users-jp@jp.FreeBSD.org>; Mon, 26 Jul 2004 18:53:26 +0900 (JST)
Received: from shimako.yamayuri.org (localhost [127.0.0.1])
	by shimako.yamayuri.org (8.12.11/8.12.11/mistral) with ESMTP id i6Q9rNtp006946
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <FreeBSD-users-jp@jp.FreeBSD.org>; Mon, 26 Jul 2004 18:53:23 +0900 (JST)
	(envelope-from mistral@imasy.or.jp)
Received: (from sarumaru@localhost)
	by shimako.yamayuri.org (8.12.11/8.12.11/Submit) id i6Q9rNah006945;
	Mon, 26 Jul 2004 18:53:23 +0900 (JST)
	(envelope-from sarumaru)
From: mistral@imasy.or.jp (Yoshihiko Sarumaru)
To: FreeBSD-users-jp@jp.FreeBSD.org
In-Reply-To: Your message of "Mon, 26 Jul 2004 15:49:51 +0900".
	<040726154948.M0160700@ushida.msa.biglobe.ne.jp>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
X-Mailer: mnews [version 1.22PL5] 2001-02/07(Wed)
Message-ID: <040726185323.M0106707@shimako.imasy.or.jp>
Reply-To: FreeBSD-users-jp@jp.FreeBSD.org
Precedence: list
Date: Mon, 26 Jul 2004 18:53:23 +0900
X-Sequence: FreeBSD-users-jp 80265
Subject: [FreeBSD-users-jp 80265] Re: firewall
 =?ISO-2022-JP?B?GyRCRmJJdCROGyhC?= ftp server (Windows,Warftpd)
	=?ISO-2022-JP?B?GyRCJHI4eDMrJDkkaxsoQg==?=
 =?ISO-2022-JP?B?GyRCSn1LIRsoQg==?= 
Sender: owner-FreeBSD-users-jp@jp.FreeBSD.org
X-Originator: mistral@imasy.or.jp
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+040717

$B!!1n4]$G$9!#(B

2004-07-26($B7n(B) 15:49:51.$B:"!"(Bushida@msa.biglobe.ne.jp$B$5$s$O=q$-$^$7$?!#(B

> $B0lJ}(B ftp-data $B$N$?$a$N@_Dj$J$N$G$9$,!"(B
> http://www.usupi.org/info/ipfil2.html
> $B$r;29M$K$7$F(B
> 
> bimap fxp0 172.26.168.1/32 -> 10.56.170.18/32 
> (172.26.168.1: firewall $BFbIt$N(Bftp server $B$N(B IP address)
> (10.56.170.18: firewall $B$N30B&(B NIC (fxp0)$B$N(B IP address)
> 
> $B$rIU$12C$($F$_$?$N$G$9$,!"$3$l$G$9$H!"(Bfirewall $B%^%7%s$K30It$+$iF~$C$FMh$?DL?.$N(B
> $B$9$Y$F$,(B 172.26.168.1 $B$KE>Aw$5$l$F$7$^$C$F$$$k$h$&$G!"(B
> firewall $B%^%7%s$K(B $B30It$+$i(B ssh $B$G7R$2$F(Blogin $B$9$k$3$H$,(B
> $B$G$-$J$/$J$C$F$7$^$$$^$7$?!#(B

map fxp0 from any to 172.26.168.1/32 port >= 49152 -> 10.56.170.18/32

$B$C$F46$8$G$9$+$M!D!D!#$?$V$s(B bimap $B$G$J$/$F(B map $B$G$$$$$h$&$J5$$,(B
$B$7$^$9$1$I!"B>$NMW7o$K$h$k$N$+$J!#(B

$B!!(B49152 $B$O(B warftp $B$,(B passive-mode $B$N;~$K$I$N(B port $BHV9f$r;H$&$N(B
$B$+$rD4$Y$F!"$=$N2<8B$HCV$-49$($F$/$@$5$$!#>e8B$,(B 65535 $B$G$J$$$J(B
$B$i!"(Bport 49151 >< 65536 $B$_$?$$$J=q$-J}$K$J$k$H;W$$$^$9(B(65536$B$O%((B
$B%i!<$K$J$k$N$G>e$N$h$&$K=q$$$F$^$9(B)$B!#(B

--
$B1n4]K'I'(B (Yoshihiko Sarumaru)
mail: mistral@imasy.or.jp       web: http://www.imasy.or.jp/~mistral/
