From owner-FreeBSD-net-jp@jp.freebsd.org  Wed Dec  6 15:23:13 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id PAA94036;
	Wed, 6 Dec 2000 15:23:13 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from ns.takezo.co.jp ([210.224.242.10])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with SMTP id PAA94030
	for <FreeBSD-net-jp@jp.freebsd.org>; Wed, 6 Dec 2000 15:23:12 +0900 (JST)
	(envelope-from namaadmin@mail.takezo.co.jp)
Received: from pc1.takezo.co.jp (unverified [210.239.132.182]) by ns.takezo.co.jp
 (EMWAC SMTPRS 0.83) with SMTP id <B0000134684@ns.takezo.co.jp>;
 Wed, 06 Dec 2000 15:27:16 +0900
Message-ID: <00f501c05f4d$225cc700$b684efd2@takezo.co.jp>
From: =?iso-2022-jp?B?SGlyb3NlIFRha2Vub3JpKBskQlciQCUbKEIgGyRCPmZFNRsoQik=?= <namaadmin@mail.takezo.co.jp>
To: <FreeBSD-net-jp@jp.freebsd.org>
Date: Wed, 6 Dec 2000 15:24:05 +0900
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-2022-jp"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: FreeBSD-net-jp 2876
Subject: [FreeBSD-net-jp 2876] =?ISO-2022-JP?B?GyRCMGxCZiROGyhC?= Server
 =?ISO-2022-JP?B?GyRCJEchIhsoQg==?= Cache+QoS
 =?ISO-2022-JP?B?GyRCJHIkNyQ/JCQhIxsoQg==?= 
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: namaadmin@mail.takezo.co.jp

$BW"@%!w(BTAKEZO$B$G$9!#(B

$B0lBf$N%^%7!<%s$G!"%-%c%C%7%e!J%H%i%s%9%Z%"%l%s%H%b!<%I!K!\%H%i%U%#%C%/(B
$B%7%'%$%P!<$r$7$?$$$H;W$C$F$$$^$9!#(B
$B8=:_!"%F%9%HMQ$N4D6-$O!"2<5-$N$h$&$K$J$C$F$$$^$9!#(B

               +-------------------+      +--------------+
For Internet---+FreeBSD(98) R-4.1.1+------+PCG-C1S(Win98)|
            ed1+-------------------+ed2   +--------------+

ed1 : 210.169.zzz.xxx
ed2 : 192.168.1.1

$B%+!<%M%k$N>uBV$O!"2<5-$N%*%W%7%g%s$rDI2C$7$F$$$^$9!#(B
options         IPFIREWALL
options         IPFIREWALL_FORWARD
options         IPFIREWALL_DEFAULT_TO_ACCEPT
options         IPDIVERT
options         DUMMYNET

squid.conf
http_port 3128
icp_port 3130
hierarchy_stoplist cgi-bin ?
cache_mem  32 MB
maximum_object_size 10240 KB
cache_dir ufs /var/cache 500 64 128
cache_access_log /usr/local/squid/logs/access.log
cache_log /usr/local/squid/logs/cache.log
cache_store_log /usr/local/squid/logs/store.log
mime_table /usr/local/squid/etc/mime.conf
pid_filename /usr/local/squid/logs/squid.pid
ftp_user Squid@
dns_nameservers 210.232.55.65
refresh_pattern         ^ftp:           1440    20%     10080
refresh_pattern         ^gopher:        1440    0%      1440
refresh_pattern         .               0       20%     4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow all
icp_access allow all
miss_access allow all
cache_effective_user squid
cache_effective_group squid
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

$B$3$N>uBV$G!"(BNAT$B!"(BDHCP Server $B$rF0:n$5$;$?>l9g!"2?$bLdBj$J$/F0:n$7$^$9!#(B

$B<!$K!"(BSquid-2.3.STABLE4 $B$rF~$l$F!"(Bsquid-2.3.stable4-ftp_icon_not_found.pat
ch$B!"(Bsquid-2.3.stable4-ipfw_configure.patch $B$N%Q%C%A$rEv$F$F!"(Bipfw $B$r2<5-$N(B
$B$h$&$K@_Dj$7$^$7$?!#(B
ipfw -f flush
ipfw add 100 divert natd all from any to any via ed1
ipfw add 300 fwd 192.168.1.1,3128 tcp from any to any 80 in via ed2

$B$3$N>uBV$G$b!"2?$bLdBj$J$/%H%i%s%9%Z%"%l%s%H%-%c%C%7%e$,=PMh$F$$$^$9!#(B

$B<!$K>e5-$N>uBV$G!"2<5-$N$h$&$K(B ipfw $B$r:F@_Dj$7$?$i!"(B
ipfw -f flush
ipfw add 100 divert natd all from any to any via ed1
ipfw add 200 pipe 1 all from 192.168.1.0/24 to any out
ipfw add 210 pipe 2 all from any to 192.168.1.0/24 in
ipfw pipe 1 config bw 64Kbit/s queue 80KByes
ipfw pipe 2 config bw 64Kbit/s queue 80KByes
ipfw add 300 fwd 192.168.1.253,3128 tcp from any to any 80 in via ed2

80 $B%]!<%H0J30$O!"8+;v$K%7%'%$%P!<$,=PMh$^$7$?$,!"(B80 $B%]!<%H$O(B Squid $B7PM3(B
$B$G=P$F$$$/$i$7$/!"A4$/%7%'%$%P!<$,=PMh$^$;$s$G$7$?!#(B

$B$I$N$h$&$K(B ipfw $B$r=q$$$?$i!"%H%i%s%9%Z%"%l%s%H%-%c%C%7%e$r$7$?>uBV$G!"(B
80 $B$b!"%7%'%$%P!<=PMh$^$9$G$7$g$&$+!)(B

$B$G$O!"$h$m$7$/$*4j$$$7$^$9!#(B


