From owner-FreeBSD-users-jp@jp.freebsd.org  Sun Oct 10 22:32:47 1999
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id WAA09086;
	Sun, 10 Oct 1999 22:32:47 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from ns0.akasaka-rodfbs.omiya.saitama.jp (ns0.akasaka-rodfbs.omiya.saitama.jp [210.230.183.237])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id WAA09081
	for <FreeBSD-users-jp@jp.freebsd.org>; Sun, 10 Oct 1999 22:32:46 +0900 (JST)
	(envelope-from eakasaka@akasaka-rodfbs.omiya.saitama.jp)
Received: from i-fwgw.akasaka-rodfbs.omiya.saitama.jp (i-fwgw.akasaka-rodfbs.omiya.saitama.jp [210.230.183.234])
	by ns0.akasaka-rodfbs.omiya.saitama.jp (8.9.3+3.2W/3.7W-rodfbs-1.0-99051321) with ESMTP id WAA06546
	for <FreeBSD-users-jp@jp.freebsd.org>; Sun, 10 Oct 1999 22:32:44 +0900 (JST)
	(envelope-from eakasaka@akasaka-rodfbs.omiya.saitama.jp)
Received: from akasaka-rodfbs.omiya.saitama.jp (gw1.akasaka-rodfbs.omiya.saitama.jp [210.230.183.236])
	by i-fwgw.akasaka-rodfbs.omiya.saitama.jp (8.9.3+3.2W/3.7W-rodfbs-1.0-99051408) with ESMTP id WAA52997
	for <FreeBSD-users-jp@jp.freebsd.org>; Sun, 10 Oct 1999 22:32:42 +0900 (JST)
	(envelope-from eakasaka@akasaka-rodfbs.omiya.saitama.jp)
Received: from localhost (i-fwgw-i.akasaka-rodfbs.omiya.saitama.jp [192.168.203.193])
	by akasaka-rodfbs.omiya.saitama.jp (8.9.3+3.2W/3.7W-rodfbs-1.0-99051407) with ESMTP id WAA59566
	for <FreeBSD-users-jp@jp.freebsd.org>; Sun, 10 Oct 1999 22:32:41 +0900 (JST)
	(envelope-from eakasaka@akasaka-rodfbs.omiya.saitama.jp)
To: FreeBSD-users-jp@jp.freebsd.org
From: Eriya Akasaka (=?iso-2022-jp?B?GyRCQFY6ZEEqOkgbKEI=?=)
 <eakasaka@akasaka-rodfbs.omiya.saitama.jp>
In-Reply-To: <199910101259.VAA09189@edge.sky.yamashina.kyoto.jp>
References: <19991008021230O.aya@pepper.int.ddt.co.jp>
	<af670ivb5g.fsf@orange.kick.gr.jp>
	<199910101259.VAA09189@edge.sky.yamashina.kyoto.jp>
X-Mailer: Mew version 1.94 on XEmacs 21.1 (Big Bend)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Message-Id: <19991010223239V.eakasaka@akasaka-rodfbs.omiya.saitama.jp>
Date: Sun, 10 Oct 1999 22:32:39 +0900
X-Dispatcher: imput version 990905(IM130)
Lines: 30
Reply-To: FreeBSD-users-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+990727
X-Sequence: FreeBSD-users-jp 46465
Subject: [FreeBSD-users-jp 46465] Re: FreeBSD
 =?ISO-2022-JP?B?GyRCJHI7SCRDJD8bKEI=?= FireWall
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org
X-Originator: eakasaka@akasaka-rodfbs.omiya.saitama.jp

$BBg5\;T$N$"$+$5$+$G$9!#(B

>>>>> In article <199910101259.VAA09189@edge.sky.yamashina.kyoto.jp>,
	On Sun, 10 Oct 1999 21:59:26 +0900
	"[FreeBSD-users-jp 46462] Re: FreeBSD $B$r;H$C$?(B FireWall" $B$K$F(B
	Takahiro Kambe <taca@sky.yamashina.kyoto.jp> $B$5$s$O6D$j$^$7$?(B:

taca> In message <af670ivb5g.fsf@orange.kick.gr.jp>
taca> 	on 08 Oct 1999 11:28:27 +0900,
taca> 	Tomoyuki Okazaki <okazaki@kick.gr.jp> wrote:
taca> > freebsd-net $B$G$_$?5-21$,$"$k$s$G$9$,!"(B
taca> > ipfw $B$N@_Dj$G(BPORT command$B$rDL$9$3$H$O$G$-$^$9!#(B
taca> > 
taca> > $BNc$($P(B /etc/natd.cf$B$G(B
taca> > deny_incoming no
taca> > $B$H$7$F$*$$$F"-$3$s$J46$8$N(Bipfw$B$N(Brule$B$r@_Dj$7$F$*$1$PDL$j$^$9!#(B
taca> > 
taca> > allow log tcp from any 20 to xxx.xxx.xxx.xxx/yy 1024-65535 setup
taca> ipfw$B$N$3$H$O7h$7$FNI$/$OCN$i$J$$$N$G$9$,!"$3$l$G%=!<%9$N%]!<%H$,(B20$BHV$@$C(B
taca> $B$?$i!"FbIt$NG$0U$N%]!<%H$X@\B3$G$-$k$H$$$&$3$H$K$O$J$i$J$$$N$G$7$g$&$+(B?

$B$3$N%9%l%C%I$NA08e$r8+$F$$$J$$$N$G$b$7%T%s%H30$l$@$C$?$i$4$a$s$J$5$$!#(B
$B$3$N(B allow $B9T$NA0$K(B deny $B9T$r2?9T$+F~$l$l$P$"$kDxEY5$5Y$a$K$O$J$j$^$9!#(B
$BNc$($P(B X $B$H(B ssh $B$N(B X ($B<B:]$K;H$o$l$F$$$k(B port $BHV9f$O4D6-$K$h$C$FJQ$o$k$N$G(B
netstat $BEy$G3NG'$7$F$+$i(B) $B$KMh$k@\B3$rMn$7$?$$;~$O!"(B
deny log tcp from any 20 to xxx.xxx.xxx.xxx/yy 6000-6100
allow log tcp from any 20 to xxx.xxx.xxx.xxx/yy 1024-65535 setup

--$B$"$+$5$+$($j$d(B <eakasaka@akasaka-rodfbs.uinet.or.jp>
<eakasaka@akasaka-rodfbs.omiya.saitama.jp>
