From owner-FreeBSD-net-jp@jp.FreeBSD.org Mon Nov 20 15:15:28 2006
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) id kAK6FSg44577;
	Mon, 20 Nov 2006 15:15:28 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from smtp12.dti.ne.jp (smtp12.dti.ne.jp [202.216.231.187])
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) with ESMTP/inet id kAK6FSw44572
	for <FreeBSD-net-jp@jp.FreeBSD.org>; Mon, 20 Nov 2006 15:15:28 +0900 (JST)
	(envelope-from daisaito@lares.dti.ne.jp)
Received: from lares.dti.ne.jp (hera.eole.jp [219.118.176.97]) by smtp12.dti.ne.jp (3.11s) with SMTP id kAK6FKNM009435;Mon, 20 Nov 2006 15:15:27 +0900 (JST)
From: =?iso-2022-jp?B?GyRCYzdGI0JnGyhC?= <daisaito@lares.dti.ne.jp>
To: FreeBSD-net-jp@jp.FreeBSD.org
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
X-Mailer: HidemaruMail 4.64 (WinNT,501)
In-Reply-To: <84ejryn5om.wl%macky@octopath.co.jp>
References: <D5C70B233ED707daisaito@lares.dti.ne.jp> <84ejryn5om.wl%macky@octopath.co.jp>
Message-Id: <84C70C6B3FEA8Ddaisaito@lares.dti.ne.jp>
Reply-To: FreeBSD-net-jp@jp.FreeBSD.org
Precedence: list
Date: Mon, 20 Nov 2006 15:15:17 +0900
X-Sequence: FreeBSD-net-jp 4205
Subject: [FreeBSD-net-jp 4205] Re: 1 =?ISO-2022-JP?B?GyRCJEQkThsoQg==?=
 network =?ISO-2022-JP?B?GyRCJEsjMiREJE4layE8JT8kTjRENi0bKEI=?=
 =?ISO-2022-JP?B?GyRCJEckThsoQg==?=
	dns server $B$N@_Dj$K$D$$$F(B 
Sender: owner-FreeBSD-net-jp@jp.FreeBSD.org
X-Originator: daisaito@lares.dti.ne.jp
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+060209

$Bc7F#!w2#IM$G$9!#(B
$B:#!";n$;$J$$$N$G!"5$$K$J$k$H$3$m$rJV?.$@$1$7$^$9!#(B

>server$B$O(BFreeBSD$B$J$s$G$9$h$M(B? 

$B$O$$!#(BFreeBSD5.5R$B$G$9!#(B


>network interface$B$K(BIP$B%"%I%l%9$rJ#?t3d$jEv$F$F!"(B
>$B%=!<%9%"%I%l%9$K$h$k(Bpolicy routing$B$r$5$;$l$PNI$$$N$G$O$J$$$G$7$g(B>$B$&$+!#(B
>$BNc$($P(B
>
>  ISP1$B$`$1(BIP$B%"%I%l%9(B - 192.168.1.11
>  ISP2$B$`$1(BIP$B%"%I%l%9(B - 192.168.1.12

$B$J$k$[$I!#$=$&$$$&H/A[$G$9$M!#(B



>  ipfw add fwd 192.168.1.1 udp from 192.168.1.11 53 to any
>  ipfw add fwd 192.168.1.1 tcp from 192.168.1.11 53 to any
>      :
>  ipfw add fwd 192.168.1.2 udp from 192.168.1.12 53 to any
>  ipfw add fwd 192.168.1.2 tcp from 192.168.1.12 53 to any

$B$?$V$s!";d$N4*0c$$$@$H;W$&$s$G$9$,!"0l1~3NG'$7$?$$$N$G!"=q$-$^$9!#(B

ipfw$B$N%k!<%k$K=q$/(Bfrom $B%"%I%l%9$H$$$&$N$O$$$o$f$k%Q%1%C%H$NAw?.85(B
$B$G$O$J$$$N$+$J!)$H;W$$$^$7$?!#$D$^$j!"(BISP[12]$B$N8~$3$&B&$+$iMh$?(B
$B%Q%1%C%H$N(Bfrom$B%"%I%l%9$H$$$&$N$O(B192.168.1.11|192.168.1.12$B$G$O$J$/!"(B
$BK\Ev$N(Bsrc$B%"%I%l%9$8$c$J$$$N$+$J$H!#4*0c$$$@$C$?$i$4$a$s$J$5$$!#(B




>  http://kewl.phear.org/policy/index.html.en
>  http://lists.freebsd.org/pipermail/freebsd-security/2004-April/001839.html
>  http://lists.freebsd.org/pipermail/freebsd-security/2004-April/001842.html

$B$3$3$O;29M$K$J$j$^$9!#=OFI$5$;$F$$$?$@$-$^$9!#(B


>> tcp$B$J$i(Bp2p$B@\B3$5$l$k$N$G$3$&$$$&LdBj$OH/@8$7$J$$$H;W$&$s$G$9$,!"(B
>> upd$B$N>l9g$NLa$j%Q%1%C%H$O$I$&$7$F$b(Bdefault gateway$B$K9T$C$F$7$^$$$^$9$7!"(B
>> $B$=$l$,O@M}E*$K$O@5$7$$$H;W$$$^$9!#(B
>

$B$"!"$=$&$J$s$G$9$+!#(B
$BMW$9$k$K7k2L$H$7$F(B3$B%O%s%I%7%'%$%/$K<:GT$9$k$H8@$&$3$H$G$9$M!#!#(B




