From owner-FreeBSD-net-jp@jp.freebsd.org  Tue Mar 27 03:40:37 2001
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id DAA47878;
	Tue, 27 Mar 2001 03:40:37 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from mx.yaya.forks.co.jp (51.96.149.210.economy.2iij.net [210.149.96.51])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id DAA47871
	for <FreeBSD-net-jp@jp.freebsd.org>; Tue, 27 Mar 2001 03:40:32 +0900 (JST)
	(envelope-from marina@yaya.forks.co.jp)
Received: by mx.yaya.forks.co.jp (8.9.3/3.7W-2.8compat.base) id DAA02494; Tue, 27 Mar 2001 03:40:31 +0900 (JST)
Date: Tue, 27 Mar 2001 03:40:31 +0900
From: Masanori Takeishi <marina@yaya.forks.co.jp>
To: FreeBSD-net-jp@jp.freebsd.org
In-Reply-To: <200103261616.BAA41278@castle.jp.freebsd.org>
References: <20010326210816.0F72.MARINA@yaya.forks.co.jp> <200103261616.BAA41278@castle.jp.freebsd.org>
Message-Id: <20010327032338.0F75.MARINA@yaya.forks.co.jp>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-2022-JP"
Content-Transfer-Encoding: 7bit
X-Mailer: Becky! ver. 2.00.01
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: FreeBSD-net-jp 3036
Subject: [FreeBSD-net-jp 3036] Re: about a PPPoE(ADSL)+nat problem
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: marina@yaya.forks.co.jp

$BIp@P$G$9!#(B

$B$*$*!"9M$($F$_$k$H!"2q<R$O(B4.2-STABLE$B$K$7$F$^$7$?!#(BIPFilter$B$,$i$_$N(BSA$B$,(B
$B$"$C$?$N$G!&!&!&!&(B
$B0c$$$O(B4.2R$B$+!"$=$l0J9_$+$H$$$&$3$H$J$k$+$b$7$l$^$;$s!#(B

$B2H$r(BSTABLE$B$+(B4.3$B$K$7$F$_$kI,MW$,$"$k$_$?$$$G$9$M!#(B
$B<1<T$NJ}$G!"%P%0$@$h$H8@$C$F$b$i$($k$H3Z$J$s$G$9$,!&!&!&!&(B
$B%"%J%&%s%9$,=P$F$?$i$4$a$s$J$5$$!#(B

$B9T$1$J$$%5%$%H$OJ#?t$"$j$^$9$,!":G=i$K8+$D$1$?%5%$%H$rNc$K$5$;$FD:$-$^(B
$B$7$?!#(B
homepage.nifty.com $B$b9T$1$^$;$s!#(Bhomepage2.nifty.com$B$O9T$1$k$N$K(B($B>P(B)

$B2q<R$G(B4.2R$B$J%5!<%P:n$C$F;n$9$N$,:GE,$+$b!&!&!&!&(B
$B$&$`!#!#(B

$B$A$J$_$K(Bppp.conf$B$O(B
 set device PPPoE:ed0
 set MRU 1454
 set MTU 1454
 set authname oredayoore
 set authkey naisyo
 set log Phase tun
 set dial
 set login
 set ifaddr 10.0.0.1/0 10.0.0.2/0
 delete ALL
 add default HISADDR
 nat enable yes
 nat use_sockets yes
 nat same_ports yes
 set filter in 0 deny 0/0 0/0 udp dst eq 520
 set filter in 1 deny 0/0 0/0 tcp dst eq 137
 set filter in 2 deny 0/0 0/0 udp dst eq 137
 set filter in 3 deny 0/0 0/0 tcp dst eq 138
 set filter in 4 deny 0/0 0/0 udp dst eq 138
 set filter in 5 deny 0/0 0/0 tcp dst eq 139
 set filter in 6 permit 127.0.0.1/8 0/0 tcp dst eq 3000
 set filter in 7 deny 0/0 0/0 tcp dst eq 3000 syn
 set filter in 8 deny 0/0 0/0 tcp dst eq telnet syn
 set filter in 9 permat 192.168.0.1/24 0/0 tcp dst eq 110 syn
 set filter in 10 deny 0/0 0/0 tcp dst eq 110 syn
 set filter in 11 deny 0/0 0/0 tcp dst eq 515 syn
 set filter in 12 deny 0/0 0/0 udp dst eq 515
 set filter in 13 permit 0/0 0/0
 set filter out 0 deny 0/0 0/0 udp dst eq 520
 set filter out 1 deny 0/0 0/0 tcp dst eq 137
 set filter out 2 deny 0/0 0/0 udp dst eq 137
 set filter out 3 deny 0/0 0/0 tcp dst eq 138
 set filter out 4 deny 0/0 0/0 udp dst eq 138
 set filter out 5 deny 0/0 0/0 tcp dst eq 139
 set filter out 6 permit 0/0 0/0


On Tue, 27 Mar 2001 01:16:05 +0900 (JST)
"HASEGAWA, Minoru" <smile@mh.club.ne.jp> wrote:

> $B$O$;$,$o!w@$EDC+$G$9!#(B
> 
> $B!t(B $B$"$^$j$*NO$K$J$l$=$&$b$J$/$F$9$$$^$;$s!#(B
> 
> >>>> At Mon, 26 Mar 2001 21:47:41 +0900
> >>>> Masanori Takeishi <marina@yaya.forks.co.jp> said:
> |$B<+Bp$r%U%l%C%D!&(BISDN$B$+$i%U%l%C%D!&(BADSL$B$KJQ99$7$F$^$+$i0l7n0J>e7P2a$7!"(B
> |$BLdBjL5$/;H$($F$$$k$H;W$C$F$$$?$N$G$9$,!"(Bnat$B7PM3$G%"%/%;%9$9$k$H8+$l$J$$(B
> |$B%5%$%H$,4v$D$+B8:_$9$k;v$K5$$,IU$-$^$7$?!#(BISDN$B$N;~$O8+$($F$$$?$H;W$$$^$9(B
> $B;d$O(B2$B=54VA0$+$iF1$8F;$rC)$j$^$7$?!#(B
> $B$G!"(BFreeBSD4.3-BETA+PPPoE(nat)+IPFilter $B$7$F$^$9$,!"A4A3LdBj$J$$$G$9!#(B
> $B$A$J$_$K(B member.nifty.ne.jp $B$X%"%/%;%9$7$F$_$^$7$?$,!"(B
> $BL^O@!"LdBj$J$/8+$l$^$7$?!#(B
> 
> w2k --> PPPoE(nat)+IPFilter --> Internet(NTT+ISP) --> member.nifty.ne.jp
> $B$H$$$&$+$s$8$G$9$M!#(B
> 
> ---->---- snip ---->----
> |$B$3$3$GBg$-$J0c$$$K5$$,IU$-$^$7$?!#(B
> |$B<+Bp$N(Btcpdump$B$O%/%i%$%"%s%H%^%7%s$N(BIP$B$J$N$K(B
> |$B2q<R$G$N(Btcpdump$B$O%0%m!<%P%k(BIP$B$G$9!#(B
> $B$3$l$J$s$G$9$,!";d$N$H$3$m$G$O(B ISP $B$,$U$C$F$/$l$?%0%m!<%P%k$,(B
> $B=P$^$9$M!&!&!&$=$A$i$G$N(B Squid $B7PM3$HF1$8$/!#(B
> 
> |ADSL$B0J30$N(Btun0$B$N(Btcpdump$B$,<h$l$J$$$N$G!"Hf3S$G$-$J$$$N$G$9$,!"$=$NJU$j$,(B
> |$BLdBj$J$N$G$7$g$&$+!)(B
> $B4X78$J$$$H;W$$$^$9$,!&!&!&(B
> 
> |$B<+Bp$r(BIPFilter+natd(dc0 - tun0)$B$K$9$l$P2r7h$9$k$N$+$b$7$l$^$;$s$,(B
> |ppp$B$G=PMh$J$$$b$N$+$H!&!&!&!&(B
> $B$($H!"(Bnatd $B$O(B IPFW $B$J$s$G(B IPFilter $B$OJL$K(B nat $B$7$J$/$F$bNI$$$N$G$O!)(B
> $B!t(B $B$o$?$7$b(B nat $B$O(B ppp $B$G$9!&!&!&$D!<$+!"(BIPCP $B$G(B IPFilter $B$N(B nat $B$r(B
> $B!t(B $B$I$&@_Dj$9$l$P;H$($k$N$+$o$+$i$s!#(B
> 
> |$BD9J8?=$7Lu$"$j$^$;$s$,!"$*CN7C$r!&!&!&(B
> $B$D!<$o$1$G!"%/%i%$%"%s%H$H$H$b$K(B DNS $B$N%j%>%k%P$"$?$j$r5?$C$F$_$F$O(B
> $B$$$+$,$G$7$g$&!#(B
> $B!t(B ppp.conf $B$r8+$;$F$/$l$k$H$+!&!&!&(B
> --
> HASEGAWA Minoru <smile@mh.club.ne.jp>
> Nifty-Serve: BYM01740
> 


