From owner-FreeBSD-net-jp@jp.freebsd.org  Mon Jul  9 19:40:02 2001
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id TAA49688;
	Mon, 9 Jul 2001 19:40:02 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from mail.mk.bsdclub.org (adsl2138.ea.rim.or.jp [202.247.148.138])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id TAA49679
	for <FreeBSD-net-jp@jp.freebsd.org>; Mon, 9 Jul 2001 19:40:00 +0900 (JST)
	(envelope-from motoyuki@mk.bsdclub.org)
Received: from sakura.mk.bsdclub.org (sakura.mk.bsdclub.org [3ffe:505:2022:0:2a0:c9ff:fe20:9aff])
	by mail.mk.bsdclub.org (8.11.4+3.4W/3.7W) with ESMTP/inet6 id f69AdCR83414
	for <FreeBSD-net-jp@jp.freebsd.org>; Mon, 9 Jul 2001 19:39:12 +0900 (JST)
Received: from sakura.mk.bsdclub.org (localhost.mk.bsdclub.org [127.0.0.1])
	by sakura.mk.bsdclub.org (8.11.4/3.7W) with ESMTP/inet id f69AdCG77688
	for <FreeBSD-net-jp@jp.freebsd.org>; Mon, 9 Jul 2001 19:39:12 +0900 (JST)
Message-Id: <200107091039.f69AdCG77688@sakura.mk.bsdclub.org>
To: FreeBSD-net-jp@jp.freebsd.org
From: Motoyuki Konno <motoyuki@bsdclub.org>
X-Mailer: mh-e on Mule 2.3 / Emacs 19.34.1
References: <20010709145039.3BE4.UEDA@Raomen.Net> <200107090706.f6976oG77362@sakura.mk.bsdclub.org>
	<20010709161326.3BED.UEDA@Raomen.Net>
Mime-Version: 1.0 (generated by tm-edit 7.106)
Content-Type: text/plain; charset=ISO-2022-JP
Date: Mon, 09 Jul 2001 19:39:12 +0900
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+010328
X-Sequence: FreeBSD-net-jp 3224
Subject: [FreeBSD-net-jp 3224] Re: ipfw + nat
 =?ISO-2022-JP?B?GyRCJEckTiVVJSElJCUiJSYlKSE8JWslayE8JWsbKEI=?=
 =?ISO-2022-JP?B?GyRCJE49cSQtSn0bKEI=?= 
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: motoyuki@mk.bsdclub.org

  $B:#Ln$G$9!#(B

$B!t(B  $B$3$N$"$?$j!"$A$c$s$H2r@b$7$?$b$N$,M_$7$$$J!"$H$$$&5$$,$7$^$9!#(B


  $B$4$a$s$J$5$$!#4V0c$$=q$$$F$^$7$?!#(B

$B?"EDM5G7(B <ueda@Raomen.Net> wrote:
> $B!!$3$l$O(B divert $B$h$j$bA0$N%k!<%k$K%^%C%A$7$?%Q%1%C%H$b(B divert $B$N%k!<%k$K(B
> $BF~$k!"$H$$$&0UL#$G$9$+!)(B

  $B$H$$$&0UL#$G$O$J$$$G$9!#(B


  $B@0M}$7$F=q$-$^$9!#(B

  ipfw $B$OHV9f$N=g=x$G%k!<%k$rI>2A$7$F$$$-$^$9!#(B divert $B$,$"$C$?(B
$B>l9g!"(B divert $B$G;XDj$5$l$?(B port $B$K(B packet $B$rAw$j$^$9!#(B ipfw $B$K4X(B
$B$9$k8B$j$O!"$3$l$G=*$o$j$G$9!#(B ipfw(8) $B$N(B divert $B$N@bL@$K$"$k!"(B
$B!V%^%C%A%s%0$r=*N;$7$^$9!#!W$O$3$N0UL#$G$9!#(B

  $B0lJ}!"(B divert $B$K=q$-9~$^$l$?(B packet $B$b(B ipfw $B$N(B packet filter
$B$KF~$j$^$9!#$3$N;~!"(B ipfw $B$N(B packet filter $B$r:G=i$+$iI>2A$7$F$$(B
$B$/$N$G$O$J$/!"!V(B"ipfw divert" $B$N%k!<%kHV9f$N<!$N%k!<%k!W$+$i=gHV(B
$B$KI>2A$7$^$9!#$3$N$"$?$j$O(B divert(4) $B$N(B "LOOP AVOIDANCE" $B$N9`$K(B
$B=q$$$F$"$kDL$j$G$9!#(B

  natd $B$O(B divert(4) $B$+$iFI$_=P$7$?(B packet $B$r(B NAT $BJQ49$7$F!":F$S(B
divert $B$K=q$-9~$_$^$9!#(B

==========
  ipfw, divert, natd $B$rAH$_9g$o$;$F;H$&>l9g!"(B

  1.  natd $B$GJQ49$5$l$kA0$N%"%I%l%9$G=q$$$?(B deny $B%k!<%k(B
  2.  divert
  3.  natd $B$GJQ49$5$l$?8e$N%"%I%l%9$G=q$$$?%k!<%k(B

$B$H$$$&=g=x$G(B ipfw $B$N%k!<%k$r=q$$$F9T$/$3$H$K$J$j$^$9!#(B
==========

  ipfw $B$N%k!<%k$G3P$($kI,MW$,$"$k$N$O!V(B==========$B!W$NItJ,$G$9!#(B
$B$G$b!"$3$l$O%^%K%e%"%kFI$s$@$@$1$G$OM}2r$7$K$/$$$N$,LdBj!#(B


  $B$G!"<B:]$N%k!<%k$N=q$-J}!#(B

I:  $B30$+$iMh$k(B packet $B$K$D$$$F$O!"(B ipfw $B$G(B divert $B$N8e$K%k!<%k$r(B
    $B=q$$$F9T$1$P(B OK $B$G$9!#08@h%"%I%l%9$O(B NAT $B2<$N$=$l$>$l$N%^%7(B
    $B%s$N%"%I%l%9$+!"$"$k$$$O(B firewall $B%^%7%s$N%"%I%l%9$K$J$j$^$9!#(B


O:  $BCf$+$i30$K=P$k(B packet $B$K$D$$$F$O!"(B ipfw $B$H(B natd $B$rF0$+$7$F$$(B
    $B$k%^%7%s(B ($B0J2<(B firewall $B%^%7%s$H$$$$$^$9(B) $B$H(B NAT $B2<$N%^%7%s(B
    $B$GF1$807$$$G$$$$$N$J$i$P07$$$OHf3SE*4JC1$G$9!#(B divert $B$h$j$b(B
    $B8e$K!V(Bnat$B$GJQ49$5$l$?8e$N%"%I%l%9$G=q$$$?%k!<%k!W$r=q$1$P(B OK$B!#(B
    $BAw?.85%"%I%l%9$O(B firewall $B%^%7%s$N%"%I%l%9$K$J$j$^$9!#(B

O1: $BLdBj$J$N$O(B firewall $B%^%7%s$H(B NAT $B2<$N%^%7%s$G07$$$rJQ$($?$$(B
    $B>l9g!#!V(Bfirewall $B%^%7%s$+$i30$K=P$k$N$O5v2D$9$k$,!"(B NAT $B2<$N(B
    $B%^%7%s$+$i30$K=P$k$N$OIT5v2D!W$H$$$&>l9g!"(B divert $B$h$j$bA0$G(B
    $B!V(Bnat $B$GJQ49$5$l$kA0$N%"%I%l%9$G=q$$$?%k!<%k!W$r=q$/$3$H$K$J(B
    $B$j$^$9!#(B

O2: $B$b$&0l$DLdBj$K$J$k$N$O!"Aw?.85(B port $B$r=q$$$?%k!<%k$r;H$$$?$$(B
    $B>l9g!#(B natd $B$GAw?.85(B port $B$,JQ$($i$l$F$7$^$&2DG=@-$,9b$$$N$G!"(B
    $B$3$N>l9g$b(B divert $B$h$j$bA0$K%k!<%k$r=q$/I,MW$,$"$j$^$9!#(B


  O1 $B$H(B O2 $B$N$h$&$J%1!<%9$r=|$1$P!"!V(Bdivert $B$N8e$K(B natd $B$GJQ49$5(B
$B$l$?8e$N%"%I%l%9$G%k!<%k$r=q$/!W$N$KE}0l$9$k$N$,3Z$@$H;W$$$^$9!#(B
divert $B$NA0$G$O(B allow $B$r;H$($J$$$H$$$&Bg$-$JLdBj$,$"$j$^$9$N$G!#(B

--
------------------------------------------------------------------------
$B:#Ln(B  $B85G7!w(BBSD CLUB          motoyuki@bsdclub.org              (Home)
                              http://www.FreeBSD.org/~motoyuki/ (Web)

