From owner-FreeBSD-net-jp@jp.freebsd.org  Sun Jul 22 02:13:41 2001
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id CAA04645;
	Sun, 22 Jul 2001 02:13:41 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from mail.netwave.or.jp (mail.netwave.or.jp [202.214.48.114])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id CAA04640
	for <FreeBSD-net-jp@jp.freebsd.org>; Sun, 22 Jul 2001 02:13:40 +0900 (JST)
	(envelope-from kana@mail.netwave.or.jp)
Received: from fukp400.mail.netwave.or.jp (ppp229145.netwave.or.jp [210.142.229.145])
	by mail.netwave.or.jp (8.9.3+3.2W/3.7W) with ESMTP id CAA10340
	for <FreeBSD-net-jp@jp.freebsd.org>; Sun, 22 Jul 2001 02:13:35 +0900 (JST)
Message-Id: <4.3.2-J.20010722021038.00b54150@mail.netwave.or.jp>
X-Sender: kana/mail.netwave.or.jp@pop3.norton.antivirus
X-Mailer: QUALCOMM Windows Eudora Version 4.3.2-J
Date: Sun, 22 Jul 2001 02:13:06 +0900
To: FreeBSD-net-jp@jp.freebsd.org
From: Kana Akira <kana@mail.netwave.or.jp>
In-Reply-To: <004601c110b3$00afb4b0$0200a8c0@kema2>
References: <4.3.2-J.20010719010158.00c55b40@mail.netwave.or.jp>
Mime-Version: 1.0
Content-Type: text/plain; charset="ISO-2022-JP"
Content-Transfer-Encoding: 7bit
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+010328
X-Sequence: FreeBSD-net-jp 3240
Subject: [FreeBSD-net-jp 3240] Re: IPFW+NATD
 =?ISO-2022-JP?B?GyRCJEdGYkl0JEsbKEI=?= Firewall
 =?ISO-2022-JP?B?GyRCJHI5PUNbGyhC?= 
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: kana@mail.netwave.or.jp

$B2CL>(B $B$G$9!#(B

>$B$;$C$+$/(BMachine$B$rFsBfMQ0U$9$k$N$G$"$l$P!"0lBf$r%a!<%k(B[,www,dns]$B%5!<%P$K$9$k(B
>$B$N$O$$$$$H$7$F!"$b$&0lBf$K%M%C%H%o!<%/%+!<%I$r#3KgA^$7$K$7$F!"0l8D$r%0%m!<%P(B
>$B%kB&$K!"0l8D$r%/%i%$%"%s%HB&$K!"0l8D$r(BDMZ$B$H$7$F(Bmail,dns,www$B%5!<%P$K3d$jEv$F(B

$B;0KgA^$7$b:G=i9M$(;O$a$?$N$G$9$,!"$J$K$+J#;($=$&$K;W$($?$N$G$d$a$^$7$?!#(B
$B$,!"$h$/9M$($F$_$k$H0J2<$N9=@.$G$$$$$s$G$9$M!)(B

      | 211.XXX.YYY.ZZZ
  +---+--+
  | ipfw |      192.168.1.0 $B!J"((B DMZ $B!K(B
  | natd +-------+--------+--------+--------+------
  | DHCP |       |        |        |        |
  +---+--+    +--+--+  +--+--+  +--+--+  +--+--+
      |       |MAIL |  |DNS  |  |WWW  |  | POP |
      |       +-----+  +-----+  +-----+  +-----+
      |  192.168.2.0
 -----+---+--------+---------
          |        |  
       +--+--+  +--+--+
       |Win9x|  |w2k  | 
       +-----+  +-----+

$B!&(BFirewall$B%^%7%s$K!"(Bipfw+natd+DHCP$B$rF~$l(B
  a) $B30It$+$i!"(BDMZ$B$KCV$$$?(Bmail$B!"(BWWW$B%5!<%PEy$X$N%"%/%;%9$O(B
     natd$B$N(BREDIRECT_PORT$B5!G=$G?6$k(B
  b) Win$B7O%Q%=%3%s$O(BDHCP+natd$B$G%^%9%+%l!<%I$7$F30It$K=P$F9T$+$;$k(B
  c) Win$B7O%Q%=%3%s$+$i(BDMZ$B$X3+;O!J(BTCP:setup$B!K$9$k%Q%1%C%H$O5v$9$,!"(B
     DMZ$B$N%5!<%P$+$i(BWin$B7O$N%M%C%H%o!<%/$X3+;O$9$k$b$N$OIT@5?/F~$J$N$G(B
     $BGK4~$7$FNI$$$H$J$j!"(B192.168.2.0$B$r<i$k(Brule$B$,C1=cL@2r!)(B
  d) DMZ$B$N%^%7%s8D!9$K(Bipfw$B$rF~$l$F$5$i$K6/2=$9$k$bNI$7(B

$B$H$$$C$?$H$3$m$G$7$g$&$+!#!!;d$,9M$($?JQ$J!)9=@.$h$j$O$k$+$K$9$C$-$j$7$=$&(B
$B$G$9$M!#!!$3$N9=@.$b:FEY8!F$$7$?$$$H;W$$$^$9!#!!$"$j$,$H$&$4$6$$$^$7$?!#(B

>$B;d$O(Bpop3 over SSL(pop3s)$B$r;H$C$F$^$9!#DL?.O)$,0E9f2=$5$l$k$N$G$*4+$a$G$9!#(B

$B$3$l$N8!F$!&8!>Z$b$d$i$J$1$l$P$$$1$^$;$s$7!"(BDNS$B$r#1Bf$G1?MQ$9$k;~$N$3$H$b(B
$B9M$($J$1$l$P$$$1$^$;$s!&!&!&$$$C$Q$$$d$k$3$H$,$"$C$FBgJQ$G$9!#(B

