From owner-FreeBSD-net-jp@jp.FreeBSD.org Wed Oct  2 14:01:07 2002
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) id g92517Q25879;
	Wed, 2 Oct 2002 14:01:07 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from r-ff.iij4u.or.jp (r-ff.iij4u.or.jp [210.130.0.71])
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) with ESMTP/inet id g92516325874
	for <FreeBSD-net-jp@jp.FreeBSD.org>; Wed, 2 Oct 2002 14:01:06 +0900 (JST)
	(envelope-from you@dearest.net)
Received: from localhost (41.161.138.210.slde.2iij.net [210.138.161.41])
	by r-ff.iij4u.or.jp (8.11.6+IIJ/8.11.6) with ESMTP id g92516Q03482
	for <FreeBSD-net-jp@jp.FreeBSD.org>; Wed, 2 Oct 2002 14:01:06 +0900 (JST)
Message-Id: <20021002.140105.112606885.you@auxo.dearest.net>
To: FreeBSD-net-jp@jp.FreeBSD.org
From: Yu Ooasa <you@dearest.net>
In-Reply-To: <30A2BE95-D5B4-11D6-A5D2-000393B282E6@excalibur.jp>
References: <3D9A3434.9080208@ba2.so-net.ne.jp>
	<30A2BE95-D5B4-11D6-A5D2-000393B282E6@excalibur.jp>
X-Mailer: Mew version 3.0.67 on Emacs 21.2 / Mule 5.0 (SAKAKI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Reply-To: FreeBSD-net-jp@jp.FreeBSD.org
Precedence: list
Date: Wed, 02 Oct 2002 14:01:05 +0900
X-Sequence: FreeBSD-net-jp 3809
Subject: [FreeBSD-net-jp 3809] Re: ppp + IP Filter
 =?ISO-2022-JP?B?GyRCJE4layE8JWskSztIJCYlJCVzGyhC?= 
Errors-To: owner-FreeBSD-net-jp@jp.FreeBSD.org
Sender: owner-FreeBSD-net-jp@jp.FreeBSD.org
X-Originator: you@dearest.net
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+020902

Wed, 2 Oct 2002 12:08:14 +0900
	"M.Yamaji" <m_yamaji@excalibur.jp> said:
>$B<BAu$rA[Dj$7$F$$$^$9$N$G!"30It$+$i$N;2>H$OGK4~$7$FEz$($J$$(B
>$B$H$$$&F0:n$GNI$$$N$G$O$H;W$C$F$$$^$9$,!"$3$NG'<1$K(B
>$B4V0c$$$O$"$j$^$9$G$7$g$&$+!)(B
>
>block in quick all on tun0 head 100
>block in quick proto tcp from any to any port = 53 flags S group 100
>block in quick proto udp from any to any port = 53 group 100
>
>$B$H$$$&46$8$G!"30$+$i$N%]!<%H(B53$B$X$N@\B33+;O$r5qH]$9$k$H$$$&$N$r(B
>$B9M$($F$$$^$9!#(B

ipf $B$G(B group $B$7$?$H$-$NF0$-$r$h$/CN$i$J$$$N$G30$7$F$k$N$+$bCN$l$^$;$s$,(B
block in quick all $B$7$F$*$/$J$i$P!"8DJL$K(B block $B$r=q$/I,MW$O$J$$$N$G$O!#(B
spoofing $B$H$+$r(B block $B$7$?8e$K!"(Bpass $B$9$k$b$N$@$1Ns5s$7$F$f$1$P!#(B

# $BB>$K(B block $B$7$?$$$"$i$f$k(B port $B$K$D$$$F$b3F!9=q$/$o$1$G$O$J$$$G$9$h$M(B

>$B$G$b$3$l$@$H30$KLd$$9g$o$;$?5"$j$N%Q%1%C%H$b<WCG$9$k$+$J!D!)(B

keep state $B$O;H$o$J$$$N$G$7$g$&$+(B

--
Yu Ooasa  E-mail: you@dearest.net
