From owner-FreeBSD-net-jp@jp.freebsd.org  Wed Mar 22 13:29:13 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id NAA83721;
	Wed, 22 Mar 2000 13:29:13 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from siwsvr01.ski.siw.co.jp (siwsvr01.ski.siw.co.jp [202.235.207.41])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id NAA83716
	for <FreeBSD-net-jp@jp.FReeBSD.org>; Wed, 22 Mar 2000 13:29:13 +0900 (JST)
	(envelope-from matono@siw.co.jp)
Received: from 0430C.siw.co.jp ([172.16.2.3])
	by siwsvr01.ski.siw.co.jp (8.8.8/3.7W-siw-0.1) with SMTP id NAA13651
	for <FreeBSD-net-jp@jp.FReeBSD.org>; Wed, 22 Mar 2000 13:30:18 +0900 (JST)
Message-ID: <004701bf93b6$e8d0eb40$030210ac@0430C.siw.co.jp>
From: "=?iso-2022-jp?B?GyRCPz9FQkAvPkgbKEI=?=" <matono@siw.co.jp>
To: <FreeBSD-net-jp@jp.FReeBSD.org>
Date: Wed, 22 Mar 2000 13:27:11 +0900
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-2022-jp"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 4.72.3110.5
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: FreeBSD-net-jp 2371
Subject: [FreeBSD-net-jp 2371] IPFW =?ISO-2022-JP?B?GyRCJE4bKEI=?= Forward
 =?ISO-2022-JP?B?GyRCJEskRCQkJEY2NSQoJEYkLyRAJDUkJBsoQg==?= 
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: matono@siw.co.jp

$B<r0fE49)=j(B $B$N(B $B??EB$H?=$7$^$9(B
$B<RFb$N%$%s%?!<%M%C%H$N%5!<%P$r#F#r#e#e#b#s#d$r<gBN$K9=C[$7$F$$$^$9(B
$B%$%s%?!<%M%C%H$X$N%H%i%U%#%C%/$,A}2C$7$F$-$?0Y!"FbIt$N#H#T#T#P%W%m%-%7(B
$B$r7PM3$7$h$&$H9M$(#I#P#F#W$NCf$G(BForward$B$9$k$N$,$h$$$N$+$H?'!9%F%9%H(B
$B$r9T$C$?$N$G$9$,$&$^$/9T$-$^$;$s!#(B
$B$I$J$?$+$*65$($/$@$5$$$^$;$s$G$7$g$&$+!#(B

$B%F%9%H7k2L$O0J2<$NDL$j$G$9!#(B


$B!!!!#O#S%P!<%8%g%s!!!!!!(BFree bsd 3.2
    HTTP(IL_[7<$B!!!!!!!!!!(Bsquid-2.3.STABLE2
$B!!!!!!!!!!!!!!!!!!!!!!!!(Btransproxy-1.2$B$r;HMQ(B



                  $B%$%s%?!<%M%C%H(B
                       |
                       |
                    $B%k!<%?(B
                       |
                       |
  ------------------------------------------------
                     |            $B!!(B  $B!!(B|         |
                     |             $B!!!!(B |         |
               $B%2!<%H%&%'%$(B       $B#D#N#S(B    $B#W#E#B(B
                     |(ipfw)
                     |
        ------------------------------------
          |     |        |      |
             $B%/%i%$%"%s%H#P#C(B



$B!!%+!<%M%k@_Dj(B
$B!!!!!!(Boptions   IPFIREWALL
$B!!!!!!(Boptions   IPFIREWALL_VERBOSE
$B!!!!!!(Boptions   "IPFIREWALL_VERBOSE_LIMIT=100"
$B!!!!!!(Boptions   IPFIREWALL_FORWARD



$B!!%W%m%-%7@_Dj(B (squid.conf)
$B!!!!!!(Bhttp_port  8080
      httpd_accel_host  virtual
      httpd_accel_port  80
      httpd_accel_with_proxy  on
      httpd_accel_uses_host_header  on


  tproxy$BMQ(B
    /etc/services
$B!!!!!!(Btproxy           8081/tcp      #Transparent Proxy$B!!(B
    /etc/inetd.conf
      tproxy  stream  tcp     nowait  nobody  /usr/local/libexec/tcpd
                   /usr/local/sbin/tproxy 172.17.1.7 8080


$B%/%i%$%"%s%H#P#C$+$i(Btproxynode$B$KBP$7(B
$B!!!!(B# telnet tproxynode-ip  8081
$B!!!!(B $B!!!!(Bsquid$B$+$i$O%a%C%;!<%8$,5"$C$F$/$k(B
$B!!!!(B

$B%F%9%H(B
$B!J#1!K%2!<%H%&%'%$%[%9%H$G(Bsquid,tproxy$B$r5/F0$9$k(B $B!J$I$3$K$b@\B3$G$-$J$$!K(B
$B!!!!#I#P#F#W@_Dj(B
$B!!!!!!!!(Ballow ip from 127.0.0.1 to any
$B!!!!!!!!(Bfwd 127.0.0.1,8081 log tcp from any to any 80

$B!!!!#I#P#F#W$N#L#O#G(B
$B!!!!!!(B/kernel: ipfw: 4800 Forward to 127.0.0.1:8081 TCP
              $B%/%i%$%"%s%H#I#P(B:1032$B!!%Q%1%C%H$N85$N08@h#I#P(B:80 in via fxp0
$B!!!!!!(B/kernel: ipfw: 4800 Forward to 127.0.0.1:8081 TCP
             $B%/%i%$%"%s%H#I#P(B:1032$B!!%Q%1%C%H$N85$N08@h#I#P(B:80 out via lnc1

$B!!!!(B# netstat -Aan
$B!!!!!!(BActive Internet connections (including servers)
$B!!!!!!(BSocket   Proto Recv-Q Send-Q  Local Address      Foreign Address
$B!!!!!!(Bc55294e0 tcp        0       0      $B85$N08@h#I#P(B.80         $B%/%i%$%"%s(B
$B%H#I#P(B.1030
$B!!!!!!(Bc552aba0 tcp        0       0      *.8080                      *.*
 $B!!!!!!(Bc552a4e0 tcp        0      0      127.0.0.1.1048
127.0.0.1.1049
$B!!!!!!(Bc552a600 tcp        0      0       127.0.0.1.1049
127.0.0.1.1048
$B!!!!!!(Bc552a840 tcp        0      0       127.0.0.1.1046
127.0.0.1.1047



$B!J#2!K(Bsquid,tproxy$B$rJL!9$N%[%9%H$G5/F0$9$k(B $B!J$I$3$K$b@\B3$G$-$J$$!K(B
$B!!!!#I#P#F#W@_Dj(B
$B!!!!!!!!(Ballow ip from 127.0.0.1 to any
$B!!!!!!!!(Ballow ip from squidnode-ip to any
$B!!!!!!!!(Ballow ip from tproxynode-ip to any
$B!!!!!!!!(Bfwd tproxynode-ip,8081 log tcp from any to any 80

$B!!!!#I#P#F#W$N#L#O#G(B
$B!!!!!!(B/kernel: ipfw: 4800 Forward to tproxynode-ip:8081 TCP
           $B%/%i%$%"%s%H#I#P(B:1032$B!!%Q%1%C%H$N85$N08@h#I#P(B:80 in via fxp0
$B!!!!!!(B/kernel: ipfw: 4800 Forward to tproxynode-ip:8081 TCP
           $B%/%i%$%"%s%H#I#P(B:1032$B!!%Q%1%C%H$N85$N08@h#I#P(B:80 out via lnc1

$B!!!!(B# netstat -Aan
        tproxynode  8081 $B$N>pJsL5$7(B
$B!!!!!!!!(Bsquidnode   8080 $B$N>pJsL5$7(B

$B!J#3!KFbIt$N#W#E#B%5!<%P>e$G(Bsquid,tproxy$B$r5/F0$9$k(B
$B!!!!!!(BForward$B@h!!!a!!%Q%1%C%H$N85$N08@h#I#P!JFbIt#W#E#B!K$N>l9g$N$_(B
     $B@\B3$G$-$^$9!!!!!!%W%m%-%7$O7PM3$7$F$$$J$$$_$?$$$G$9(B


$B!!%/%i%$%"%s%HB&$G%W%m%-%7$r@_Dj$7$?>l9g$O@5>o$K%"%/%;%9$G$-$^$9(B

$B!!B>$K2?$+@_Dj$7$J$1$l$P$J$i$J$$$b$N$,$"$k$s$G$7$g$&$+!#(B
$B!!$h$m$7$/$*4j$$$7$^$9(B


