From owner-FreeBSD-net-jp@jp.FreeBSD.org Mon Nov 20 12:43:54 2006
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) id kAK3hsn12682;
	Mon, 20 Nov 2006 12:43:54 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from tako.octopath.co.jp (3bbe85c1.octopath.co.jp [59.190.133.193])
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) with ESMTP/inet id kAK3hrw12676
	for <FreeBSD-net-jp@jp.FreeBSD.org>; Mon, 20 Nov 2006 12:43:54 +0900 (JST)
	(envelope-from macky@octopath.co.jp)
Received: (qmail 50281 invoked by uid 90); 20 Nov 2006 03:43:53 -0000
Received: from unknown (HELO tako.octopath.co.jp) (127.0.0.1)
  by mail.octopath.co.jp with ESMTP; 20 Nov 2006 03:43:53 -0000
Message-ID: <84ejryn5om.wl%macky@octopath.co.jp>
From: Ken Makimura <macky@octopath.co.jp>
To: FreeBSD-net-jp@jp.FreeBSD.org
In-Reply-To: <D5C70B233ED707daisaito@lares.dti.ne.jp>
References: <D5C70B233ED707daisaito@lares.dti.ne.jp>
User-Agent: SEMI/1.14.6 (Maruoka) FLIM/1.14.8 (=?ISO-8859-4?Q?Shij=F2?=)
 APEL/10.6 Emacs/21.3 (i386--freebsd) MULE/5.0 (SAKAKI)
MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka")
Content-Type: text/plain; charset=ISO-2022-JP
Reply-To: FreeBSD-net-jp@jp.FreeBSD.org
Precedence: list
Date: Mon, 20 Nov 2006 12:43:53 +0900
X-Sequence: FreeBSD-net-jp 4204
Subject: [FreeBSD-net-jp 4204] Re: 1 =?ISO-2022-JP?B?GyRCJEQkThsoQg==?=
 network =?ISO-2022-JP?B?GyRCJEsjMiREJE4layE8JT8kTjRENi0bKEI=?=
 =?ISO-2022-JP?B?GyRCJEckThsoQg==?=
 dns server =?ISO-2022-JP?B?GyRCJE5AX0RqJEskRCQkJEYbKEI=?= 
Sender: owner-FreeBSD-net-jp@jp.FreeBSD.org
X-Originator: macky@octopath.co.jp
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+060209

On Sun, 19 Nov 2006 00:07:20 +0900, daisaito@lares.dti.ne.jp wrote:
> router1$B$H(Brouter2$B$rJL!9$N(BISP$B$K@\B3$7$F$$$F(B
> $B$=$l$>$l$N(Bport53(tcp/udp)$B$r(Bserver$B$K9T$/$h$&$K$7$F$$$^$9!#(B
> $B;d$N;}$C$F$$$k%I%a%$%s$N%W%i%$%^%j(Bdns$B$r(Ba.b.c.d$B$K$7$F$$$F!"(B
> $B%;%+%s%@%j(Bdns$B$r(Bw.x.y.z$B$K@_Dj$7$?$s$G$9$1$I!"$&$^$/$$$-$^$;$s!#(B
> 
> $B!!(B    ISP1                     ISP2
> $B!!(B     |                        |
> $B!!(B+----+----+a.b.c.d       +----+----+w.x.y.z
> $B!!(B| router1 |              | router2 |
> $B!!(B+----+----+192.168.1.1   +----+----+192.168.1.2
> $B!!(B     |                        |
> -------+---------+--------------+----+-----192.168.1.0/24
> $B!!(B               |                   |
> $B!!(B               |                   |
> 192.168.1.10+----+----+         +----+----+192.168.1.20
> $B!!(B          | server  |         | windows |
> $B!!(B          +---------+         +---------+

server$B$O(BFreeBSD$B$J$s$G$9$h$M(B? network interface$B$K(BIP$B%"%I%l%9$rJ#?t3d$jEv(B
$B$F$F!"%=!<%9%"%I%l%9$K$h$k(Bpolicy routing$B$r$5$;$l$PNI$$$N$G$O$J$$$G$7$g(B
$B$&$+!#Nc$($P(B

  ISP1$B$`$1(BIP$B%"%I%l%9(B - 192.168.1.11
  ISP2$B$`$1(BIP$B%"%I%l%9(B - 192.168.1.12

$B$H$7$F!"(Bname server$B$ON>J}$N%"%I%l%9$K(Bbind$B$7$F(Blisten$B$5$;$k!#(BBIND$B$J$i(B

  listen-on { 127.0.0.1; 192.168.1.11; 192.168.1.12; ... };

$B$b$7$/$O(B

  listen-on { localhost; };

$B$H$7$^$9!#$=$7$F!"(Bipfw$B$N(B"forward"$B$r;H$C$F(B

      :
  ipfw add fwd 192.168.1.1 udp from 192.168.1.11 53 to any
  ipfw add fwd 192.168.1.1 tcp from 192.168.1.11 53 to any
      :
  ipfw add fwd 192.168.1.2 udp from 192.168.1.12 53 to any
  ipfw add fwd 192.168.1.2 tcp from 192.168.1.12 53 to any
      :

$B$H$$$C$?$U$&$J%k!<%k$rE,@Z$J>l=j$K5-=R$9$l$P<B8=$G$-$k$+$H;W$$$^$9!#(B

  http://kewl.phear.org/policy/index.html.en
  http://lists.freebsd.org/pipermail/freebsd-security/2004-April/001839.html
  http://lists.freebsd.org/pipermail/freebsd-security/2004-April/001842.html

$B$"$?$j$,;29M$K$J$k$N$G$O$J$$$G$7$g$&$+!#(B

> tcp$B$J$i(Bp2p$B@\B3$5$l$k$N$G$3$&$$$&LdBj$OH/@8$7$J$$$H;W$&$s$G$9$,!"(B
> upd$B$N>l9g$NLa$j%Q%1%C%H$O$I$&$7$F$b(Bdefault gateway$B$K9T$C$F$7$^$$$^$9$7!"(B
> $B$=$l$,O@M}E*$K$O@5$7$$$H;W$$$^$9!#(B

TCP$B$G$b(Bdefault gateway$B$KEj$2$i$l$^$9$h!#(B

-- 
 -O-O-     $BKRB<(B $B82(B      $B3t<02q<R%*%/%H%Q%9(B
   -     Ken Makimura <macky@octopath.co.jp>
