From owner-FreeBSD-net-jp@jp.freebsd.org  Fri Apr 21 13:32:19 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id NAA43737;
	Fri, 21 Apr 2000 13:32:19 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from kanabou.izumitrading.co.jp (kanabou.izumitrading.co.jp [210.145.213.211])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with SMTP id NAA43732
	for <FreeBSD-net-jp@jp.freebsd.org>; Fri, 21 Apr 2000 13:32:18 +0900 (JST)
	(envelope-from hid@izumitrading.co.jp)
Received: (qmail 1628 invoked from network); 21 Apr 2000 04:23:00 -0000
Received: from nerthe.izumitrading.co.jp (HELO localhost) ()
  by kanabou.izumitrading.co.jp with SMTP; 21 Apr 2000 04:23:00 -0000
To: FreeBSD-net-jp@jp.freebsd.org
X-Mailer: Mew version 1.93 on XEmacs 20.4 (Emerald)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Message-Id: <20000421133140A.hid@izumitrading.co.jp>
Date: Fri, 21 Apr 2000 13:31:40 +0900
From: Hideo FUJII <hid@izumitrading.co.jp>
X-Dispatcher: imput version 980905(IM100)
Lines: 79
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: FreeBSD-net-jp 2456
Subject: [FreeBSD-net-jp 2456] I can't setting ipfw and natd.
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: hid@izumitrading.co.jp

$B%$%:%_%H%l!<%G%#%s%0$NF#0f$H?=$7$^$9!#(B

FreeBSD 2.2.7 $B$r%$%s%9%H!<%k$7!"%G%e%"%k%[!<%`%[%9%H2=$5$l$?(B PC/AT $B5!>e(B
$B$G(B natd $B$rF0:n$5$;$k$Y$/@_Dj$r9T$C$F$$$?$N$G$9$,!"$I$&$b$&$^$/F0:n$7$J(B
$B$$$N$G%"%I%P%$%9$r$$$?$@$-$?$$$H;W$$$^$9!#(B


$BEv3:5!$N9=@.$O2<?^$NDL$j$G!"(B


 [Grobal Network]
        ~
        |
        |  de0  aaa.bbb.ccc.ddd
   +----+----+
   | FreeBSD |
   +----+----+
        |  fxp0 192.168.1.1
        |
        ~
 [Private Network]


$B%M%C%H%o!<%/%$%s%?%U%'!<%9$OAPJ}$H$b@5>o$KDL?.2DG=$J>uBV$G$9!#(B
$B8=>u!"$3$N%^%7%s>e$G(B qmail $B$H(B Squid $B$rF0:n$5$;$F$$$^$9!#(B
Private Network $B>e$K$"$k(B Web $B%5!<%P$r30It$K8x3+$7$?$$$H9M$($F$$$^$9!#(B


$B0J2<$N$h$&$J@_Dj$r9T$C$F$$$-$^$7$?!#(B

  1. $B%+!<%M%k$N:F9=C[(B
     options IPFIREWALL
     options IPDIVERT

  2. natd $B$N<}F@$H%3%s%Q%$%k(B
     ftp://ftp.suutari.iki.fi/pub/natd/OLD $B$h$j(B
     natd_1.9.tar.gz $B$r<}F@!#%3%s%Q%$%k=*N;8e(B /usr/sbin/natd $B$H$9$k!#(B

  3. /etc/rc.conf $B$N=$@5(B
     firewall_enable="YES"
     firewall_type="OPEN"
     firewall_quiet="NO"

     gateway_enable="YES"
     natd_enable="YES"
     natd_interface="de0"
     natd_flags="-f /etc/natd.cf"

  4. /etc/natd.cf $B$N=$@5(B
     log             yes
     deny_incoming   yes
     use_sockets     no
     same_ports      yes
     verbose         no
     port            8668
     interface       de0
     unregistered_only       no
     redirect_port tcp ***.***.***.***:25 25
     redirect_address 192.168.1.3 ***.***.***.***

  5. /etc/rc.firewall $B$N=$@5(B
     $fwcmd add 65000 pass all from any to any
     $B9T$r0J2<$N$h$&$K=$@5(B
     $fwcmd add pass all from any to any

  6. /etc/services $B$N=$@5(B
     natd 8668/divert $B9T$N%3%a%s%H$r30$9!#(B


$B$3$l$i$N@_Dj8e!":F5/F0$r9T$&$H0J2<$N%(%i!<%a%C%;!<%8$,I=<($5$l$^$9(B

  ip_fw_ctl: len=104, want 96
  ipfw: setsockopt (IP_FW_ADD): Invalid argument

ipfw list $B$H$7$F$b%k!<%k$,%;%C%H$5$l$F$$$^$;$s!#(B
$B$J$K$+=EBg$J4V0c$$!?H4$1!?4*0c$$$r$7$F$$$k$N$G$7$g$&$+!)(B
$BITL@E@Ey$"$j$^$7$?$i!"$4;XE&2<$5$$!#(B
--
                      $BF#0f(B $B=(M:(B   Hideo FUJII   <hid@izumitrading.co.jp>
