From owner-FreeBSD-net-jp@jp.freebsd.org  Sat Apr 29 02:48:50 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id CAA46584;
	Sat, 29 Apr 2000 02:48:50 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from smtp5.dti.ne.jp (smtp5.dti.ne.jp [202.216.228.40])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id CAA46579
	for <FreeBSD-net-jp@jp.freebsd.org>; Sat, 29 Apr 2000 02:48:49 +0900 (JST)
	(envelope-from hideishi@ops.dti.ne.jp)
Received: from localhost (PPP40.matsudo-ap4.dti.ne.jp [210.170.230.232]) by smtp5.dti.ne.jp (8.9.3/3.7W) with ESMTP id CAA07324 for <FreeBSD-net-jp@jp.freebsd.org>; Sat, 29 Apr 2000 02:48:43 +0900 (JST)
To: FreeBSD-net-jp@jp.freebsd.org
X-Mailer: Mew version 1.94.2 on Emacs 19.34 / Mule 2.3 (SUETSUMUHANA)
Organization: S.C. MAGI-SYSTEM
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Message-Id: <20000429024800F.hideishi@ops.dti.ne.jp>
Date: Sat, 29 Apr 2000 02:48:00 +0900
From: Hidenori Ishikawa <hideishi@ops.dti.ne.jp>
X-Dispatcher: imput version 20000228(IM140)
Lines: 29
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: FreeBSD-net-jp 2493
Subject: [FreeBSD-net-jp 2493] iij-ppp filter
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: hideishi@ops.dti.ne.jp

$B@P@n!w@iMUBg$G$9!#(B

iij-ppp$B$N(Bfilter$B5!G=$r;H$*$&$H;W$&$N$G$9$,!"(B
$B$3$l$O(Bipfw$B$N$h$&$K@h$K8=$l$?%k!<%k$,M%@h$5$l$k$N$G$7$g$&$+!)(B

$BNc$($P!"(B
 set filter out 0  permit tcp src eq 53
 set filter out 1  permit udp src eq 53
 set filter out 3  deny   tcp src lt 1024
 set filter out 4  deny   udp src gt 1
 set filter out 5  permit 0 0
$B$H$7$?>l9g!"(BDNS$B$N%j%/%(%9%H$ODL$k$N$G$7$g$&$+!)(B

$B$=$l$H$b!"(B
 set filter out 0  deny   tcp src lt 1024
 set filter out 1  deny   udp src gt 1
 set filter out 2  permit tcp src eq 53
 set filter out 3  permit udp src eq 53
 set filter out 4  permit 0 0
$B$G==J,$J$N$G$7$g$&$+!)(B

# $B$"$H!"(BDNS$B$d(BHTTP$B$C$F(Btcp$B%Y!<%9$G$9$h$M!)(B
# $B$=$&9M$($k$H!"(Budp$B$C$FA4ItL58z$K$G$-$k$N$G$9$+!)(B

    /-------------------------------------------------/
   /(^^)/           Hidenori Ishikawa                /
  / (^^)/        <hideishi@ops.dti.ne.jp>           /
 /  (^^)/ URL http://www.ops.dti.ne.jp/~hideishi/  /
/-------------------------------------------------/
