From owner-FreeBSD-net-jp@jp.FreeBSD.org Wed Oct  2 21:58:48 2002
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) id g92CwmK24811;
	Wed, 2 Oct 2002 21:58:48 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from r-ff.iij4u.or.jp (r-ff.iij4u.or.jp [210.130.0.71])
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) with ESMTP/inet id g92Cwm324805
	for <FreeBSD-net-jp@jp.FreeBSD.org>; Wed, 2 Oct 2002 21:58:48 +0900 (JST)
	(envelope-from you@dearest.net)
Received: from localhost (41.161.138.210.slde.2iij.net [210.138.161.41])
	by r-ff.iij4u.or.jp (8.11.6+IIJ/8.11.6) with ESMTP id g92CwlQ10212
	for <FreeBSD-net-jp@jp.FreeBSD.org>; Wed, 2 Oct 2002 21:58:47 +0900 (JST)
Message-Id: <20021002.215847.112622761.you@auxo.dearest.net>
To: FreeBSD-net-jp@jp.FreeBSD.org
From: Yu Ooasa <you@dearest.net>
In-Reply-To: <F08F1170-D5FC-11D6-87FF-000393B282E6@excalibur.jp>
References: <20021002.140105.112606885.you@auxo.dearest.net>
	<F08F1170-D5FC-11D6-87FF-000393B282E6@excalibur.jp>
X-Mailer: Mew version 3.0.67 on Emacs 21.2 / Mule 5.0 (SAKAKI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Reply-To: FreeBSD-net-jp@jp.FreeBSD.org
Precedence: list
Date: Wed, 02 Oct 2002 21:58:47 +0900
X-Sequence: FreeBSD-net-jp 3812
Subject: [FreeBSD-net-jp 3812] Re: ppp + IP Filter
 =?ISO-2022-JP?B?GyRCJE4layE8JWskSztIJCYlJCVzGyhC?= 
Errors-To: owner-FreeBSD-net-jp@jp.FreeBSD.org
Sender: owner-FreeBSD-net-jp@jp.FreeBSD.org
X-Originator: you@dearest.net
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+020902

Wed, 2 Oct 2002 20:48:59 +0900
	"M.Yamaji" <m_yamaji@excalibur.jp> said:
>$B$H$$$&$3$H$G!"$3$3$G$OK|$,0l5-F~O3$l$,$"$C$?>l9g$KM=4|$7$J$$%Q%1%C%H(B
>$B$,4V0c$C$FDL$C$F$7$^$o$J$$$?$a$K(B block all $B$H$7$F$$$k$D$b$j$G$9!#(B
(snip
>$B$G!"$=$l0J9_$N(B block quick... $B$O!"5qH]$9$k>r7o$,3NDj$7(B-$B$?;~E@$G(B
>$B$5$C$5$H5qH]$7$F$7$^$$!"B>$N%k!<%k$HHf3S$9$k<j4V$r>J$/$?$a$N(B
>$B%7%g!<%H%+%C%H$N$D$b$j$G;XDj$7$F$$$^$9!#(B

$B$=$l$OH=$j$^$9$1$I!"(Bpass $B$9$k%Q%1%C%H$K3]$+$k%3%9%H$,9b$/$J$j$^$;$s$+(B
domain(53)$B$@$1$G$J$/!"F1MM$KB>$N$?$/$5$s$N(B port $B$K$D$$$F$b=q$$$F$$$k(B
$B$o$1$G$9$h$M(B

block in quick private/multicast$BEy(B
block in quick tcp dst 53
block in quick udp dst 53
block in quick      :
                    :
               many many ports
                    :
                    :
pass  in quick some ports
block in quick all

$B$H$$$C$?>uBV$K$J$C$F$7$^$&$N$G$O!#(BDoS$B$K$J$k$/$i$$KDBg$JNL$N(B block $B$9$Y$-(B
$B%Q%1%C%H$,2!$74s$;$F$$$k$N$J$i$H$b$+$/!"NL$NB?$$(B($B$?$$$F$$$O(B pass $B$9$Y$-(B)
$B%Q%1%C%H$O%k!<%k$N@hF,$NJ}$G0z$C$+$1$k$H$$$&$N$,$?$V$s0lHLE*$@$H;W$$$^$9!#(B

>>> $B$G$b$3$l$@$H30$KLd$$9g$o$;$?5"$j$N%Q%1%C%H$b<WCG$9$k$+$J!D!)(B
>> keep state $B$O;H$o$J$$$N$G$7$g$&$+(B
>$B;H$C$?J}$,$h$5$=$&$G$9$M!#(B

$B;H$o$J$$$H$$$&%]%j%7!<$b$b$A$m$s$"$j$@$H;W$$$^$9$,!";H$C$?J}$,%7%s%W%k$K(B
$B$J$k$H;W$$$^$9!#$=$&$G$J$$$H:#EY$O(B pass $B$b$?$/$5$s=q$/$3$H$K$J$j$^$;$s$+(B
$BM>7W$J7j$b3+$/$7!#(B

--
Yu Ooasa  E-mail: you@dearest.net
