From owner-FreeBSD-net-jp@jp.FreeBSD.org Tue Feb  5 01:26:25 2002
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) id g14GQPG12279;
	Tue, 5 Feb 2002 01:26:25 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from rabbit.iware.ne.jp (mailer.iware.ne.jp [210.172.86.94])
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) with ESMTP/inet id g14GQP612274
	for <FreeBSD-net-jp@jp.FreeBSD.org>; Tue, 5 Feb 2002 01:26:25 +0900 (JST)
	(envelope-from mizutani@ma-navi.com)
Received: from HM_VAIO (monkey.iware.ne.jp [210.172.86.79])
	by rabbit.iware.ne.jp (8.9.3/3.7W) with ESMTP id BAA23999;
	Tue, 5 Feb 2002 01:26:22 +0900 (JST)
Date: Tue, 05 Feb 2002 01:28:09 +0900
From: MIZUTANI <mizutani@ma-navi.com>
To: FreeBSD-net-jp@jp.FreeBSD.org
Cc: harrier@seiryu.es.hkg.ac.jp
In-Reply-To: <20020205001435X.harrier@seiryu.es.hkg.ac.jp>
References: <20020204231734.CCDD.MIZUTANI@ma-navi.com> <20020205001435X.harrier@seiryu.es.hkg.ac.jp>
Message-Id: <20020205010433.3EE1.MIZUTANI@ma-navi.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-2022-JP"
Content-Transfer-Encoding: 7bit
X-Mailer: Becky! ver. 2.00.08
Reply-To: FreeBSD-net-jp@jp.FreeBSD.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+011218
X-Sequence: FreeBSD-net-jp 3535
Subject: [FreeBSD-net-jp 3535] Re: =?ISO-2022-JP?B?GyRCJWshPCU/ITwbKEI=?=
 =?ISO-2022-JP?B?GyRCJEswTUI4JDkkaxsoQg==?= SSH
 =?ISO-2022-JP?B?GyRCJEskRCQkJEYbKEI=?= 
Errors-To: owner-FreeBSD-net-jp@jp.FreeBSD.org
Sender: owner-FreeBSD-net-jp@jp.FreeBSD.org
X-Originator: mizutani@ma-navi.com

$B1-:,$5$s!"$"$j$,$H$&$4$6$$$^$9!#(B

> $B@\B3?^$,$J$$$N$GA[A|$GEz$($k$7$+$J$$$N$G$9$,!"(B
> $B$3$N<ALd$O!";vL3=jFbIt$N(B Windows $B%^%7%s$+$i!"(B
> ISDN/ADSL $B$G@\B3$5$l$F$$$k30It$N(B FreeBSD $B$K(B
> SSH $B$r;HMQ$7$F%m%0%$%s$7$?$$$H$$$&$3$H$J$s$G$9$h$M!)(B

$B$O$$!"$=$NDL$j$G$4$6$$$^$9!#@\B3?^$O0J2<$N$h$&$J46$8$G$9!#(B

  HOST1               HOST2
FreeBSD4.4R          Linux7.2
    |                    |
    +---------+----------+
              |
         YAMAHA ROUTER
              |($B@lMQ@~(B)
              |
           Internet-------------------------------------+
              |                                         |
              |                                         |
          ADSL($BEl5~$a$?$j$C$/(B,IP$BHs8GDj(B)     SDSL($BEl5~$a$?$j$C$/(B,$B8GDj(BIP)
              |                                         |
          ADSL$B%b%G%`(B                               ADSL$B%b%G%`(B($B%k!<%?(B)
              | Global IP                               |
         BroadBand Router                               |Global IP
              | Local IP                         +------+------+
              |                                  |             |
        Windows2000 $B%/%i%$%"%s%H(B          Windows2000$B%5!<%P(B    |
        (TTSSH$BMxMQ(B)                         (TTSSH$BMxMQ(B)        |
          CLIENT1                           CLIENT2        FreeBSD3.3R
                                                             CLIENT3


ADSL($BEl5~$a$?$j$C$/(B,IP$BHs8GDj(B)$B$NItJ,$,(BISDN$B%@%$%"%k%"%C%W$N$H$-$K$O(BCLIENT1
$B$+$i(BHOST1$B$X$N(BSSH$B$,@\B3$G$-$^$7$?!#$7$+$7!"(BADSL$B$K$7$?$i(BTTSSH$B$,8G$^$k$h$&(B
$B$K$J$j$^$7$?!#(B
$B$7$+$7!"(BHOST2$B$X$OLdBj$J$/@\B3$G$-$^$9!#(B
SSHD$B$N@_Dj$O(BHOST1$B$b(BHOST2$B$b2?$b<j$r2C$($F$$$J$$>uBV$G$9!#(B
plain passwod $B$G%m%0%$%s$G$-$l$P$H$$$$$H;W$$!"JQ99$;$:$KNI$$$b$N$H;W$C$F(B
$B$*$j$^$7$?!#(B

CLIENT2$B$d(BCLIENT3$B$+$i$O(BHOST1$B$b(BHOST2$B$X$b@\B3$G$-$^$9!#(B

> $B$R$g$C$H$7$?$i(B /etc/hosts.allow $B$G!"(B
> ADSL($B%U%l%C%D$G$9$h$M!)(B)$B@\B3$K;HMQ$7$F$$$k%W%m%P%$%@$,3d$jEv$F$?(B
> IP $B%"%I%l%9$+$i$N(B SSH $B%3%M%/%7%g%s$r5qH]$7$F$$$k$H$$$&2DG=@-$O$J$$$G$9$+!)(B
> $B!t$;$a$F$b$&>/$7>pJs$r2<$5$$!#(B

$B3N$+$K(Btcpwrapper$B$N@_Dj$O9T$C$F$$$^$9$,!"(BSSH$B$K4X$7$F$O=i4|CM$N$^$^$G$9!#(B

# Wrapping sshd(8) is not normally a good idea, but if you
# need to do it, here's how
#sshd : .evil.cracker.example.com : deny


---

$B@h$N$3$9$.$5$s$+$i$N%"%I%P%$%9$K$b$"$j$^$7$?$,!"(BLinux$B$N(Bsshd_config$B$H(B
FreeBSD$B$N$=$l$rHf$Y$F$_$^$9!#(B

