From owner-FreeBSD-net-jp@jp.FreeBSD.org Wed Oct  2 20:49:06 2002
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) id g92Bn6P98779;
	Wed, 2 Oct 2002 20:49:06 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from via.excalibur.jp (eAc1Abt184.osk.mesh.ad.jp [218.227.119.184])
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) with SMTP/inet id g92Bn5398773
	for <FreeBSD-net-jp@jp.FreeBSD.org>; Wed, 2 Oct 2002 20:49:06 +0900 (JST)
	(envelope-from m_yamaji@excalibur.jp)
Received: (qmail 89280 invoked from network); 2 Oct 2002 11:49:00 -0000
Received: from mercury.excalibur.jp (HELO excalibur.jp) (192.168.1.21)
  by via.excalibur.jp with SMTP; 2 Oct 2002 11:49:00 -0000
Content-Type: text/plain; charset=ISO-2022-JP; format=flowed
Mime-Version: 1.0 (Apple Message framework v546)
From: "M.Yamaji" <m_yamaji@excalibur.jp>
To: FreeBSD-net-jp@jp.FreeBSD.org
Content-Transfer-Encoding: 7bit
In-Reply-To: <20021002.140105.112606885.you@auxo.dearest.net>
Message-Id: <F08F1170-D5FC-11D6-87FF-000393B282E6@excalibur.jp>
X-Mailer: Apple Mail (2.546)
Reply-To: FreeBSD-net-jp@jp.FreeBSD.org
Precedence: list
Date: Wed, 2 Oct 2002 20:48:59 +0900
X-Sequence: FreeBSD-net-jp 3810
Subject: [FreeBSD-net-jp 3810] Re: ppp + IP Filter
 =?ISO-2022-JP?B?GyRCJE4layE8JWskSztIJCYlJCVzGyhC?= 
Errors-To: owner-FreeBSD-net-jp@jp.FreeBSD.org
Sender: owner-FreeBSD-net-jp@jp.FreeBSD.org
X-Originator: m_yamaji@excalibur.jp
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+020902

$B;3CO$G$9!#%"%I%P%$%946<U$7$F$*$j$^$9!#(B

On 2002.10.2, at 14:01 Japan, Yu Ooasa wrote:

>> block in quick all on tun0 head 100
>> block in quick proto tcp from any to any port = 53 flags S group 100
>> block in quick proto udp from any to any port = 53 group 100
>>
>> $B$H$$$&46$8$G!"30$+$i$N%]!<%H(B53$B$X$N@\B33+;O$r5qH]$9$k$H$$$&$N$r(B
>> $B9M$($F$$$^$9!#(B
> ipf $B$G(B group $B$7$?$H$-$NF0$-$r$h$/CN$i$J$$$N$G30$7$F$k$N$+$bCN$l$^$;$s$,(B
> block in quick all $B$7$F$*$/$J$i$P!"8DJL$K(B block $B$r=q$/I,MW$O$J$$$N$G$O!#(B
> spoofing $B$H$+$r(B block $B$7$?8e$K!"(Bpass $B$9$k$b$N$@$1Ns5s$7$F$f$1$P!#(B

$B3N$+!"%0%k!<%W$NCf$G%^%C%A$9$k>r7o$,0l$D$b$J$+$C$?>l9g$K!"(B
head $B$,;XDj$5$l$F$$$k9T$N%k!<%k$rE,MQ$9$k$H$$$&F0:n$@$C$?$H;W$$$^$9!#(B
$B$H$$$&$3$H$G!"$3$3$G$OK|$,0l5-F~O3$l$,$"$C$?>l9g$KM=4|$7$J$$%Q%1%C%H(B
$B$,4V0c$C$FDL$C$F$7$^$o$J$$$?$a$K(B block all $B$H$7$F$$$k$D$b$j$G$9!#(B
$B$H$$$&$h$j!"??Aj$O(Bhead$B$r;XDj$9$k$?$a$NB>$KNI$$>r7o$N=q$-J}$,(B
$BJ,$+$i$J$+$C$?$N$G$=$&$7$F$$$k$N$G$9$,!"2?$+NI$$J}K!$O$"$l$P(B
$BCN$j$?$$$G$9!#(B

$B$G!"$=$l0J9_$N(B block quick... $B$O!"5qH]$9$k>r7o$,3NDj$7(B-$B$?;~E@$G(B
$B$5$C$5$H5qH]$7$F$7$^$$!"B>$N%k!<%k$HHf3S$9$k<j4V$r>J$/$?$a$N(B
$B%7%g!<%H%+%C%H$N$D$b$j$G;XDj$7$F$$$^$9!#(B

> # $BB>$K(B block $B$7$?$$$"$i$f$k(B port $B$K$D$$$F$b3F!9=q$/$o$1$G$O$J$$$G$9$h$M(B

$B:G=*E*$K$O(B
block in quick proto tcp all group 100
$B$H$$$&9T$GA4$F$N(BTCP$B%Q%1%C%H$r<WCG$7$F$$$^$9!#(B
$B$3$N9T$h$jA0$K$O5v2D$9$k(BTCP$B%Q%1%C%H$r(Bquick$B;XDj$7$F5-=R$7$F$$$^$9!#(B

>> $B$G$b$3$l$@$H30$KLd$$9g$o$;$?5"$j$N%Q%1%C%H$b<WCG$9$k$+$J!D!)(B
>
> keep state $B$O;H$o$J$$$N$G$7$g$&$+(B

$B;H$C$?J}$,$h$5$=$&$G$9$M!#(B
---
$B;3CO(B $B>-O/(B <alucard@excalibur.jp>

