From owner-FreeBSD-net-jp@jp.freebsd.org  Sun Jul  8 16:01:58 2001
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id QAA50627;
	Sun, 8 Jul 2001 16:01:58 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from gateway.kema.Home.LAN (xdsl034217.061122.metallic.ne.jp [61.122.34.217])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with SMTP id QAA50622
	for <FreeBSD-net-jp@jp.freebsd.org>; Sun, 8 Jul 2001 16:01:57 +0900 (JST)
	(envelope-from kema@spica.ee.uec.ac.jp)
Received: (qmail 37692 invoked by uid 0); 8 Jul 2001 07:01:41 -0000
Received: from unknown (HELO metallic) (unknown)
  by unknown with SMTP; 8 Jul 2001 07:01:41 -0000
Message-ID: <00d201c1077c$0c914270$0200a8c0@co.jp>
From: "kema" <kema@spica.ee.uec.ac.jp>
To: <FreeBSD-net-jp@jp.freebsd.org>
References: <87elry9nw4.wl@miffy.taihei-dengyo.co.jp>
Date: Sun, 8 Jul 2001 16:03:10 +0900
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-2022-jp"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+010328
X-Sequence: FreeBSD-net-jp 3205
Subject: [FreeBSD-net-jp 3205] Re: ipfw + nat
 =?ISO-2022-JP?B?GyRCJEckTiVVJSElJCUiJSYlKSE8JWslayE8JWsbKEI=?=
 =?ISO-2022-JP?B?GyRCJE49cSQtSn0bKEI=?= 
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: kema@spica.ee.uec.ac.jp

$BEEDLBg$NLSGOFb$G$9!#(B
ipfw+nat$B$K4X$7$F$O!"?oJ,$H;n9T:x8m$r7+$jJV$7$^$7$?!#(B

> $B$*$=$i$/!";d$NF,$NCf$G$N(B $B%$%s%?!<%U%'%$%9(B, ipfw, natd $B$N(B
> $B0LCVIU$1$,$h$m$7$/$J$$$H;W$&$N$G$9$,(B...$B!#(B
>
> $B!&%W%i%$%Y!<%H%"%I%l%9$r;OE@$K$b$C$?%Q%1%C%H$,$d$C$F$-$?(B
> $B!&@hF,$K=q$$$?!V(Bdivert natd$B!W$K$h$j;OE@$r<+J,$N30B&$N%"%I%l%9$K(B
> $B!&;OE@$,%0%m!<%P%k%"%I%l%9$K$J$C$F$b$&0lEY$d$C$F$-$?(B($B$I$3$+$i(B?)
> $B!&<!$N(B(ipfw$B$N(B)$B9T$+$i%A%'%C%/B39T(B
>
> $B$C$F$J6q9g$K9M$($F$$$^$9!#(B

> $B$H$7$?>l9g!"(B192.168.1.2 $B$N%^%7%s$@$130It$N(Bsmtp$B%5!<%P$K(B
> $B%a!<%k$rEj$2$i$l$k$h$&$K$9$k$K$O(B
>
> /sbin/ipfw add divert natd all from any to any via ${oif}
>
> /sbin/ipfw add pass tcp from ${oip} to any 25 via ${iif}
> /sbin/ipfw add pass tcp from any 25 to ${oip} via ${oif} established
>
> $B$H$+=q$$$F$_$?$N$G$9$,!"$@$a$G$7$?!#(B
>
> $B$=$l$>$l$,$I$N$h$&$J0LCVIU$1$G!"$I$N$h$&$KHf3S$5$l$F(B
> $B=hM}$5$l$k$N$G$7$g$&$+!#(B

ipfw$B%k!<%k$O!"%U%!!<%9%H%^%C%A%s%0$GE,MQ$5$l$^$9!#$s$G!"(B"divert natd"$B%k!<%k(B
$B$N8e$K5-=R$5$l$?%k!<%k$K4X$7$F$O!"=q$-49$($i$l$?8e$N(BIP$B%"%I%l%9$KBP$7$FE,MQ$5(B
$B$l$k;v$H$J$j$^$9!#$9$J$o$A!"(B192.168.1.2 > 12.34.56.78 $B$N%Q%1%C%H$KBP$7$F!"(B

$B#1!'(B /sbin/ipfw add divert natd all from any to any via ${oif}

$B$3$N%Q%1%C%H$O(B${oif}$B$rDL2a$9$k$N$GBP>]$H$J$j!"4{$K$3$N;~E@$G!"(B
210.237.181.32 > 12.34.56.78
$B$H%"%I%l%9JQ49$5$l$F$7$^$$$^$9!#(B

$B#2!'(B /sbin/ipfw add pass tcp from ${oip} to any 25 via ${iif}

210.237.181.33 $B$+$i(B ${iif}$B7PM3$G$I$3$+$N%^%7%s$X$N(B25$B%]!<%H9T$-$N%Q%1%C%H$rDL(B
$B$9!"$H$$$&$3$H$O!"(BNAT$BH"<+?H$+$i%W%i%$%Y!<%H%"%I%l%96u4V$N%^%7%s$N(BSMTP$B%]!<%H(B
$B08$N%Q%1%C%H$r5v2D$9$k$H$$$&0UL#$K$J$j$^$9!#(B
$B!JNc!K(B210.237.181.33:1026 > 192.168.1.5:25

$B#3!'(B /sbin/ipfw add pass tcp from any 25 to ${oip} via ${oif} established

$BA4$F$N(BIP$B%"%I%l%9$N(B25$BHV%]!<%H$+$i!"(B210.237.181.33$B08$N3NN):Q$_%Q%1%C%H$r5v2D$9(B
$B$k$H$$$&0UL#$K$J$j$^$9!#$A$J$_$K!"(BSMTP$B%Q%1%C%H$O!"IaDL$O=*E@%]!<%H$O(B25$B$G$"$C(B
$B$F$b;OE@%]!<%H$O(B1024$B0J>e$NH&$J$N$G!"$3$N%k!<%k$O;v<B>e0UL#$,$"$j$^$;$s!#(B

$B$s$J$b$s$G!"$*K>$_$N5!G=$O<B8=$5$l$F$$$^$;$s(B(^^;

$B$G!"OC$r85$KLa$9$H!"%W%i%$%Y!<%H6u4VFb$NFCDj$N%^%7%s$+$i30It08$N%Q%1%C%H$J$N(B
$B$G!"(BNAT$B$7$?8e$O%k!<%k$,E,MQ$G$-$^$;$s!#$G$9$+$i(BNAT$B$9$kA0$K%U%#%k%?$9$l$P$$$$(B
$B$3$H$K$J$j$^$9!#Nc$($P!"(B

$B#1!'(Bipfw add deny tcp from not 192.168.1.2 to any 25 in via ${iif}
$B#2!'(Bipfw add divert natd from any to any via ${oif}

$B$3$NFs9T$G$*K>$_$NF0:n$r$9$k$H;W$&$N$G$9$,G!2?$G$7$g$&!#(B


