From owner-FreeBSD-net-jp@jp.freebsd.org  Mon Jul  9 09:30:55 2001
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id JAA02855;
	Mon, 9 Jul 2001 09:30:55 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from mfo00.iij.ad.jp (mfo00.iij.ad.jp [202.232.2.117])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id JAA02849
	for <FreeBSD-net-jp@jp.freebsd.org>; Mon, 9 Jul 2001 09:30:54 +0900 (JST)
	(envelope-from m-saki@rr.iij4u.or.jp)
Received: from rr.iij4u.or.jp (rr.iij4u.or.jp [210.130.0.42])
	by mfo00.iij.ad.jp (8.8.8/MFO1.3) with ESMTP id JAA07943
	for <FreeBSD-net-jp@jp.freebsd.org>; Mon, 9 Jul 2001 09:30:54 +0900 (JST)
Received: from localhost (gate2.taihei-dengyo.co.jp [210.237.181.36])
	by rr.iij4u.or.jp (8.8.8+2.2IIJ/4U1.1) with ESMTP id JAA02335
	for <FreeBSD-net-jp@jp.freebsd.org>; Mon, 9 Jul 2001 09:30:53 +0900 (JST)
Date: Mon, 09 Jul 2001 09:30:33 +0900
Message-ID: <87wv5jeyfq.wl@miffy.taihei-dengyo.co.jp>
From: Masaki Mizutani <m-saki@rr.iij4u.or.jp>
To: FreeBSD-net-jp@jp.freebsd.org
In-Reply-To: <00d201c1077c$0c914270$0200a8c0@co.jp>
References: <87elry9nw4.wl@miffy.taihei-dengyo.co.jp>
	<00d201c1077c$0c914270$0200a8c0@co.jp>
User-Agent: Wanderlust/2.5.8 (Smooth) SEMI/1.14.3 (Ushinoya) SLIM/1.14.5
 (=?ISO-2022-JP?B?GyRCMEJDI000PEIbKEI=?=) APEL/10.3 MULE XEmacs/21.1 (patch
 14) (Cuyahoga Valley) (i386--freebsd)
X-Face: DP-3apzI<SXXJs>,JOcx>nG;Fs;Mwu41fN=FKlS)v*@UCXto4?HI{:v@j|}_Na+S}Ot(-Q.
 y"4-bLy7Rk;b2_s&?}!Pye?I~\7Sf=j.;hcg.04R@:\{rR]79zY4zS-7+?#~!9_cyn:D@T0iIR;$6X
 gd5cUd[.][-0x'$(V8-pK?[7CW^^V>@'iNga\>Z'
MIME-Version: 1.0 (generated by SEMI 1.14.3 - "Ushinoya")
Content-Type: text/plain; charset=ISO-2022-JP
X-Dispatcher: imput version 20000228(IM140)
Lines: 38
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+010328
X-Sequence: FreeBSD-net-jp 3210
Subject: [FreeBSD-net-jp 3210] Re: ipfw + nat
 =?ISO-2022-JP?B?GyRCJEckTiVVJSElJCUiJSYlKSE8JWslayE8JWsbKEI=?=
 =?ISO-2022-JP?B?GyRCJE49cSQtSn0bKEI=?=
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: m-saki@rr.iij4u.or.jp

$B$7$D$3$/$F$4$a$s$J$5$$(B $B$_$:$?$K$G$9!#(B

$B:#!"(B

$fwcmd add divert natd all from any to any via ${oif}
$fwcmd add pass tcp from 192.168.1.2 to any 25 in via ${iif}
$fwcmd add pass tcp from ${oip} to any 25 out via ${oif}
$fwcmd add pass tcp from any 25 to 192.168.1.2 in via ${oif} established
$fwcmd add pass tcp from any 25 to 192.168.1.2 out via ${iif} established

$B$H$$$&%k!<%k$GF0$$$F$$$^$9!#(B# $B<B$O$A$g$C$H0c$&$1$I(B(192.168.1.2$B$NItJ,(B)

$B:G=i$N9T$N(B divert natd $B$O!"$"$/$^$G(B ${oif} $B$rDL2a$9$k;~$N$_$K(B
$BI>2A$5$l$k$H9M$($F$$$k$N$G$9$,!"$3$N9M$($G$h$$$N$G$7$g$&$+!#(B

$B$=$&$9$k$H!"(B
	192.168.1.2 -> 12.34.56.78:25
$B$H$+(B
	192.168.1.3 -> 12.34.56.78:25
$B$H$$$&%Q%1%C%H$,(B ${iif} $B$+$i$d$C$FMh$FA0<T$r5v2D$7$F8e<T$r$O$8$/(B
$B>l9g!"%k!<%k$N(B2$B9TL\$,$=$NLr3d$rC4$&$H;W$C$F$$$k$N$G$9$,!#(B


At Sun, 8 Jul 2001 16:03:10 +0900,
kema <kema@spica.ee.uec.ac.jp> wrote:
> $B#1!'(Bipfw add deny tcp from not 192.168.1.2 to any 25 in via ${iif}
> $B#2!'(Bipfw add divert natd from any to any via ${oif}
> 
> $B$3$NFs9T$G$*K>$_$NF0:n$r$9$k$H;W$&$N$G$9$,G!2?$G$7$g$&!#(B

$BA}ED$5$s$b(B Message-ID: <3B41D10D.DBDD8257@nextcom.co.jp> $B$NCf$G=q$+$l$F(B
$B$$$^$7$?$,!"$3$N=q$-J}(B($BFb$+$i30$X(B NAT $B$r$+$1$k;~!V$"$l$O$@$a!"$3$l$O$@$a!W(B
$B$H(B divert natd $B$NA0$K(B deny $B$rNs5sJ}<0(B)$B$NJ}$,$h$$$N$G$7$g$&$+!#(B

-- 
$B?eC+!!@5<y(B / m-saki@rr.iij4u.or.jp
PGP Fingerprint: E551 12B2 CF6B 50EA BD5C  CFD1 FF41 0F6E 595C 92CE
PGP Public Key : http://www.rr.iij4u.or.jp/%7Em-saki/mizutani_gpg.asc
