From owner-FreeBSD-users-jp@jp.freebsd.org  Thu Jul  8 12:08:14 1999
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id MAA09877;
	Thu, 8 Jul 1999 12:08:14 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from itg-inet-01.tv-asahi.co.jp (itg-inet-01.tv-asahi.co.jp [158.207.31.41])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id MAA09872
	for <FreeBSD-users-jp@jp.freebsd.org>; Thu, 8 Jul 1999 12:08:13 +0900 (JST)
	(envelope-from c3po@snow.tv-asahi.co.jp)
Received: by itg-inet-01.tv-asahi.co.jp (8.9.1a/3.7W99031015) id MAA08007; Thu, 8 Jul 1999 12:08:08 +0900 (JST)
Received: by itg-inet-11.tv-asahi.co.jp (8.9.1a/3.7W99031416) id MAA16635; Thu, 8 Jul 1999 12:08:12 +0900 (JST)
Received: (from c3po@localhost)
	by mikan.snow.tv-asahi.co.jp (SMI-8.6/3.6Wmikan980312) id MAA00775
	for FreeBSD-users-jp@jp.freebsd.org; Thu, 8 Jul 1999 12:08:09 +0900
Date: Thu, 8 Jul 1999 12:08:09 +0900
From: C3PO <c3po@snow.tv-asahi.co.jp>
Message-Id: <199907080308.MAA00775@mikan.snow.tv-asahi.co.jp>
To: FreeBSD-users-jp@jp.freebsd.org
Content-Type: text
X-Sun-Charset: ja_JP.iso2022-7
Reply-To: FreeBSD-users-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+990625
X-Sequence: FreeBSD-users-jp 43922
Subject: [FreeBSD-users-jp 43922] Re: ftp for ipfw
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org
X-Originator: c3po@snow.tv-asahi.co.jp

$B1~Ez$,CY$/$J$C$F$9$_$^$;$s!#(J
$B!V(JFreeBSD$B$N(Jipfw$B$G!"(Jftp$B$rDL$9$K$O$I$&$9$l$P$$$$$s$G$7$g$&$+!W(J
$B$H$$$&$N$,<ALd$G$7$?!#(J
$B$_$J$5$s$N%U%)%m!<$G$[$\5?Ld$,I92r$7$^$7$?!#(J

$B;d$NJ}$K@bL@ITB-$J$H$3$m$,$"$C$?$h$&$G!"(J
$B$3$N7o$O!"<B$O(Jman$B$r8+$?$@$1$G$O$h$/$o$+$i$:!"(J
$B!V(JUNIX Magazine 1998.4$B7n9f!W$K!"(J
$BJ,$+$j$d$9$$(J($B<B$O8e$G(J???$B$N85$K$J$C$?(J)$B5-;v$,$"$j$^$9!#(J

                    -----
                   | PC1 |
                    -----
                      |
----------------------------------
        |
   -----------      ftp  1024-
  |   ipfw    |     $B"-(J    $B",(J
   -----------      21   data
        |
----------------------------------
                      |
                    -----
                   | PC2 |
                    -----

$B>e5-$N$h$&$J%M%C%H%o!<%/$G!"(J
PC1$B$+$i(JPC2$B$X(Jftp$B$r$+$1$k(J(PC2$B$,%5!<%P$K$J$k(J)$B>l9g(J
1. allow tcp from any to any established
2. allow tcp from PC1 to PC2 21 setup
$B$N$h$&$K(Jipfw$B$r@_Dj$9$k$H!"(Jftp$B$N%;%C%7%g%s$O@.N)$7$^$9$,!"(J
$B99$K(JPC2$BB&$+$i$N%G!<%?MQ$N%;%C%7%g%s$r2DG=$K$9$k$?$a$K!"(J
3. allow tcp from PC2 to PC1 1024-65535 setup
$B$H$$$&@_Dj$,I,MW$G$9!#(J

$B$b$7$5$i$K(JPC2$B$+$i(JPC1$B$X$N(Jftp$B$r9MN8$KF~$l$k$H!"(J
4. allow tcp from PC1 to PC2 1024-65535 setup
$B$H$$$&@_Dj$,I,MW$K$J$j$^$9!#(J
$B$3$&$9$k$HMW$9$k$K!"(JPC1/PC2$B4V$O(J1024$B%]!<%H0J>e$,DL!9$K$J$C$F$7$^$$$^$9!#(J

?$B$3$l$G$$$$$N(J?
$B$H$$$&$N$,;d$N:G=i$N5?Ld$G$7$?!#(J
$B>e5-%f%K%^%,;o$N5-;v$G$O!"(J
passive$B%b!<%I$r;H$&$H!"(J3,4$BHVL\$N$h$&$J7j$r3+$1$J$/$F:Q$`!"(J
$B$H$$$&$h$&$KFI$a$k$N$G!"99$K(J???? $B$H$J$C$?$N$G$9!#(J

PC1$B$r(Jpassive$B%b!<%I$G$N(Jftp$B%5!<%P$H$9$k>l9g$O!"(J
$B%G!<%?%;%C%7%g%s$NJ}8~$,0lJ}8~$G:Q$`$N$G!"(J
4$BHVL\$N7j$OITMW$K$J$j$^$9!#(J
PC1$B$r30It$H9M$($l$P!"(JFireWall$B$N0UL#$,$"$j$^$9!#(J
$B;d$N$H$3$m$G$O!"$=$N$h$&$K$7$F;H$$;O$a$^$7$?!#(J

$B%U%)%m!<$r$/$@$5$C$?J}!9!"$"$j$,$H$&$4$6$$$^$7$?!#(J

				c3po@snow.tv-asahi.co.jp	$BNkLZ$R$m$7(J

