From owner-FreeBSD-net-jp@jp.FreeBSD.org Wed Oct  2 07:38:26 2002
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) id g91McQS98358;
	Wed, 2 Oct 2002 07:38:26 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from BUN.1YEN.CX (pl931.nas922.n-yokohama.nttpc.ne.jp [210.139.122.163])
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) with ESMTP/inet id g91McP398353
	for <FreeBSD-net-jp@jp.freebsd.org>; Wed, 2 Oct 2002 07:38:25 +0900 (JST)
	(envelope-from 1yen@sh.rim.or.jp)
Received: from [127.0.0.1] (localhost [127.0.0.1])
	by BUN.1YEN.CX (8.12.6/8.12.5) with ESMTP id g91McIfZ071160;
	Wed, 2 Oct 2002 07:38:19 +0900 (JST)
	(envelope-from 1yen@sh.rim.or.jp)
From: NAKAMURA Takeshi <1yen@sh.rim.or.jp>
To: FreeBSD-net-jp@jp.FreeBSD.org
In-Reply-To: <20021002.034342.41632620.you@auxo.dearest.net>
References: <951C0028-D560-11D6-92C3-000393B282E6@excalibur.jp> <20021002.034342.41632620.you@auxo.dearest.net>
Message-Id: <20021002073310.6229.1YEN@sh.rim.or.jp>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-2022-JP"
Content-Transfer-Encoding: 7bit
X-Mailer: Becky! ver. 2.05.04
Reply-To: FreeBSD-net-jp@jp.FreeBSD.org
Precedence: list
Date: Wed, 02 Oct 2002 07:38:20 +0900
X-Sequence: FreeBSD-net-jp 3804
Subject: [FreeBSD-net-jp 3804] Re: ppp + IP Filter
 =?ISO-2022-JP?B?GyRCJE4layE8JWskSztIJCYlJCVzJT8bKEI=?=
Errors-To: owner-FreeBSD-net-jp@jp.FreeBSD.org
Sender: owner-FreeBSD-net-jp@jp.FreeBSD.org
X-Originator: 1yen@sh.rim.or.jp
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+020902

$BCgB<$G$9!#(B

From: Yu Ooasa <you@dearest.net>
Date: Wed, 02 Oct 2002 03:43:42 +0900
Subject: [FreeBSD-net-jp 3803] Re: ppp + IP Filter $B$N%k!<%k$K;H$&%$%s%?(B

>>$BFbIt$K$"$k(BDNS$B!J%W%i%$%Y!<%H%"%I%l%9$,5-:\$5$l$?$b$N!K(B
>>$B$,FbIt$+$i$N;2>H$K$N$_1~$8$F!"(BDNS$B<+?H$O30It$N(BDNS$B$r;2>H$G$-$k(B
>>$B$h$&$J@_Dj$O2DG=$G$7$g$&$+!)(B
>>$B2DG=$J$i$I$N$h$&$J@_Dj$K$J$j$^$9$G$7$g$&$+!)(B
FreeBSD 4.x $BI8=`$N(B named8 $B$J$i(B $BFbItMQ(B named $B$H!"30ItMQ(Bnamed $B$N(B2$B$D$r5/F0$7(B
 named.conf $B$K(B
  $BFbItMQ(B named.conf   listen-on { local$B8~$1$N(BIP; };
  $B30ItMQ(B named.conf   listen-on { global$B8~$1$N(BIP; };
 $B$H$9$k;v$,B?$/!"(B named9 $B$J$i(B $B0l$D$N(B named.conf $B$G(B
acl local-machine{ 127.1; $B%m!<%+%k%^%7%s$N(BIP; ...};
view "local" {
   match-clients { local-machine; };
   zone ...
}
view "global" {
   match-clients { any; };
   zone ...
}
 $B$_$?$$$K!"=q$/$i$7$$$G$9!#(B


>> keep state $B$r;H$C$F%k!<%k$r:n@.$7$F$$$^$9$,!"@h$K5s$2$?(B
>> $B%Z!<%8$G$O$$$C$5$$;H$C$F$J$$$h$&$G$9!#$=$l$>$l$K%]%j%7!<$,(B
>> $B$"$k$N$G$7$g$&$,!"$I$A$i$NJ}$,!V0lHLE*!W$J$N$G$7$g$&$+!)(B
 ipfw$B$7$+J,$+$i$J$$$N$G30$7$F$$$k$+$bCN$l$^$;$s$,(B
 keep-state $B$,L5$$>l9g5"$j$N%Q%1%C%H$b9M$($F(B
     ipfw add allow udp from me     to any 53
     ifpw add allow udp from any 53 to me
 $B$H!"$J$j$=$&$G$9$,(B $BG$0U$N%[%9%H$+$i(B nmap -g53 -sU $B$G!"%]!<%H%9%-%c%s$,(B
$B$+$1$i$l$^$9$M!#B?J,(B...$B$"!"$&$A$bDL$k$J$!(B(^^;
     ifpw add allow udp from me     to any 53 keep-state
 $B$J$i!"Bg>fIW$=$&$H$+!#(B
# $B0lHLE*$+$I$&$+$h$j!"$3$&$$$&$3$H$r9M$($kI,MW$,$"$k$+$I$&$+$@$H;W$$$^$9(B

> $BM6F3$9$k$o$1$G$O$J$$$G$9$1$I!"$3$&$$$C$?OCBj$J$i$P(B users-jp $B$N$[$&$,H?1~(B
> $B$,NI$$$H;W$$$^$9$h!#K\Mh$I$A$i$K?6$k$Y$-$+$OHyL/$+$b$7$l$^$;$s$1$I!#(B
 $BK\Mh$O(B users-jp $B$X;}$C$F$$$C$F$bE\$i$l$J$$$1$I(B net-jp $B$NJ}$,$$$$$G$7$g$&!#(B
# $BH?1~$O$=$NDL$j$@$H;W$$$^$9!#(B
 net-jp $B$,$&$^$/5!G=$7$F$$$J$$$H$$$&$+!";H$$J,$1$i$l$F$$$J$/$F$A$g$C$H$b$C$?$$$J$$!#(B
users-jp $B$+$i(B net-jp $B$XM6F3$9$k$h$&$K$9$l$P$$$$$N$+$J!)(B

