From owner-FreeBSD-net-jp@jp.freebsd.org  Mon May 25 23:48:55 1998
Received: (from daemon@localhost)
	by jaz.jp.freebsd.org (8.8.8+3.0Wbeta13/8.7.3) id XAA24117;
	Mon, 25 May 1998 23:48:55 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from smtp.dtinet.or.jp (smtp1.dti.ne.jp [202.216.224.185])
	by jaz.jp.freebsd.org (8.8.8+3.0Wbeta13/8.7.3) with ESMTP id XAA24108
	for <FreeBSD-net-jp@jp.freebsd.org>; Mon, 25 May 1998 23:48:52 +0900 (JST)
	(envelope-from morimo@remus.dti.ne.jp)
Received: from localhost (INS8.himeji.dti.ne.jp [210.159.140.8]) by smtp.dtinet.or.jp (8.8.4+2.7Wbeta4/3.5Wpl2) with ESMTP id XAA05349 for <FreeBSD-net-jp@jp.freebsd.org>; Mon, 25 May 1998 23:48:50 +0900 (JST)
Message-Id: <199805251448.XAA05349@smtp.dtinet.or.jp>
To: FreeBSD-net-jp@jp.freebsd.org
From: morimo@remus.dti.ne.jp (YOSHIHIRO MORIMO)
X-Mailer: mnews [version 1.21] 1997-12/23(Tue)
Date: Mon, 25 May 1998 22:14:01 +0900
X-Dispatcher: imput version 971024
Mime-Version: 1.0
Content-Type: Text/plain; charset=iso-2022-jp
Lines: 118
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute [version 2.1 (Alpha) patchlevel=24]
X-Sequence: FreeBSD-net-jp 670
Subject: [FreeBSD-net-jp 670] ppp filter setting
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org

$B$O$8$a$^$7$F!$?9K\$H$$$$$^$9!%(B

ppp $B$N%U%#%k%?$N@_Dj$GG:$s$G$$$^$9!%(B
$B;H$C$F$$$k%"%W%j%1!<%7%g%s$O(B ftp$B!$(Btelnet$B!$(Bfetchmail$B!$(Bwget$B!$(Bgnspool
cvsup$B!$(Brc5des$B!$(Bntpdate $BEy$G$9$,!$(Bcvsup$B!$(Bntpdate $B$rDL$9%U%#%k%?$N(B
$B@_DjJ}K!$,J,$+$j$^$;$s!%%U%#%k%?$rBT$C$?$/@_Dj$7$J$$;~$OA4$F@5>o$K(B
$BF0$/$N$G$9$,!$0J2<$N4D6-!$@_Dj$G(B cvsup$B!$(Bntpdate $B$,F0$$$F$/$l$^$;$s!%(B

ntpdate cesium.mtk.nao.ac.jp

$B$H$9$k$H!$(B

ntpdate: no server suitable for synchronization found

$B$C$F$J$j$^$9!%(Bntpdate $B$O(B ntp $B$r;H$&$H;W$&$N$G(B 123 port $B$r3+$1$F$$$^$9!%(B

cvsup -g -L 2 /usr/local/etc/ports-and-doc-supfile

$B$C$F$d$k$H(B

Parsing supfile "/usr/local/etc/ports-and-doc-supfile"
Looking up address of cvsup2.jp.freebsd.org
Connecting to cvsup2.jp.freebsd.org
Cannot connect to cvsup2.jp.freebsd.org: Connection refused
Will retry at 22:04:05

$B$C$F$J$j$^$9!%(Bman cvsup $B$H$9$k$H(B default port is 5999 $B$C$F$J$C$F$$$k(B
$B$N$G(B 5999 $B$O3+$1$F$$$^$9!%(B

$B4D6-$O(B FreeBSD 2.2.6-RELEASE$B!$(Bppp $B$O(B source $B$+$i(B make; make install
$B$7$^$7$?!%(B

ppp.conf $B$N@_Dj$G(B ifilter $B$H(B ofilter $B$O<!$N$h$&$K$7$F$$$^$9!%(B
# i/o filter
# auth (ident)
        set ifilter 0 permit tcp dst eq 113
        set ofilter 0 permit tcp src eq 113
# telnet
        set ifilter 1 permit tcp src eq 23 estab
        set ofilter 1 permit tcp dst eq 23
# http
        set ifilter 2 permit tcp src eq 80
        set ofilter 2 permit tcp dst eq 80
# ftp
        set ifilter 3 permit tcp src eq 21 estab
        set ofilter 3 permit tcp dst eq 21
# ftp-data
        set ifilter 4 permit tcp src eq 20 dst gt 1023
        set ofilter 4 permit tcp dst eq 20
# dns
        set ifilter 5 permit udp src eq 53
        set ofilter 5 permit udp dst eq 53
# smtp
        set ifilter 6 permit udp src eq 25 estab
        set ofilter 6 permit udp dst eq 25
# icmp
        set ifilter 7 permit icmp
        set ofilter 7 permit icmp
# other
        set ifilter 8 permit udp dst gt 33433
        set ofilter 8 permit udp dst gt 33433
# pop
        set ifilter 10 permit tcp src eq 110 estab
        set ofilter 10 permit tcp dst eq 110
# nntp
        set ifilter 11 permit tcp src eq 119 estab
        set ofilter 11 permit tcp dst eq 119
# ntp
        set ifilter 12 permit tcp src eq 123
        set ofilter 12 permit tcp dst eq 123
# proxy 
        set ifilter 13 permit tcp src eq 8080
        set ofilter 13 permit tcp dst eq 8080 
# rc5des
        set ifilter 14 permit tcp src eq 2064
        set ofilter 14 permit tcp dst eq 2064
# cvsup
        set ifilter 15 permit tcp src eq 5999
        set ofilter 15 permit tcp src eq 5999

$B$G!$(Bppp $B$rN)$A>e$2$F(B ifilter $B$H(B ofilter $B$rI=<($9$k$H!$(B
ppp ON lib> show ifilter
 0 permit      0.0.0.0/0 0.0.0.0/0 tcp dst eq 113
 1 permit      0.0.0.0/0 0.0.0.0/0 tcp src eq 23 estab
 2 permit      0.0.0.0/0 0.0.0.0/0 tcp src eq 80
 3 permit      0.0.0.0/0 0.0.0.0/0 tcp src eq 21 estab
 4 permit      0.0.0.0/0 0.0.0.0/0 tcp src eq 20 dst gt 1023
 5 permit      0.0.0.0/0 0.0.0.0/0 udp src eq 53
 7 permit      0.0.0.0/0 0.0.0.0/0 icmp
 8 permit      0.0.0.0/0 0.0.0.0/0 udp dst gt 33433
10 permit      0.0.0.0/0 0.0.0.0/0 tcp src eq 110 estab
11 permit      0.0.0.0/0 0.0.0.0/0 tcp src eq 119 estab
12 permit      0.0.0.0/0 0.0.0.0/0 tcp src eq 123
13 permit      0.0.0.0/0 0.0.0.0/0 tcp src eq 8080
14 permit      0.0.0.0/0 0.0.0.0/0 tcp src eq 2064
15 permit      0.0.0.0/0 0.0.0.0/0 tcp src eq 5999
ppp ON lib> show ofilter
 0 permit      0.0.0.0/0 0.0.0.0/0 tcp src eq 113
 1 permit      0.0.0.0/0 0.0.0.0/0 tcp dst eq 23
 2 permit      0.0.0.0/0 0.0.0.0/0 tcp dst eq 80
 3 permit      0.0.0.0/0 0.0.0.0/0 tcp dst eq 21
 4 permit      0.0.0.0/0 0.0.0.0/0 tcp dst eq 20
 5 permit      0.0.0.0/0 0.0.0.0/0 udp dst eq 53
 6 permit      0.0.0.0/0 0.0.0.0/0 udp dst eq 25
 7 permit      0.0.0.0/0 0.0.0.0/0 icmp
 8 permit      0.0.0.0/0 0.0.0.0/0 udp dst gt 33433
10 permit      0.0.0.0/0 0.0.0.0/0 tcp dst eq 110
11 permit      0.0.0.0/0 0.0.0.0/0 tcp dst eq 119
12 permit      0.0.0.0/0 0.0.0.0/0 tcp dst eq 123
13 permit      0.0.0.0/0 0.0.0.0/0 tcp dst eq 8080
14 permit      0.0.0.0/0 0.0.0.0/0 tcp dst eq 2064
15 permit      0.0.0.0/0 0.0.0.0/0 tcp src eq 5999

$B$[$+$K$b3+$1$J$/$A$c$$$1$J$$(B port $B$,$"$k$N$+$J!)(B
$B$3$s$J;v$d$C$F$k$H(B 20$B8D(B $B$J$s$F$9$0$K$J$/$J$C$A$c$$$=$&!D(B

--
MORIMOTO YOSHIHIRO ( $B?9K\(B $BK'9((B ) "http://www.remus.dti.ne.jp/~morimo/"
