From owner-FreeBSD-users-jp@jp.freebsd.org  Wed Dec 13 21:32:18 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id VAA76923;
	Wed, 13 Dec 2000 21:32:18 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from ns.mmc.co.jp (ns.mmc.co.jp [202.33.246.162])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id VAA76918
	for <FreeBSD-users-jp@jp.freebsd.org>; Wed, 13 Dec 2000 21:32:18 +0900 (JST)
	(envelope-from ueno@mmc.co.jp)
Received: from mailhub.sys.mmc.co.jp ([172.17.10.2])
	by ns.mmc.co.jp (8.9.3/3.7W) with ESMTP id VAA17436;
	Wed, 13 Dec 2000 21:05:48 +0900
Received: from kueno.mmc.co.jp ([172.20.111.254]) by mailhub.sys.mmc.co.jp (8.8.8/HUB2.00) with ESMTP id VAA74280; Wed, 13 Dec 2000 21:20:56 +0900
Received: from localhost (localhost. [127.0.0.1]) by kueno.mmc.co.jp (8.9.3/3.7W-0012102225) with ESMTP id VAA06365; Wed, 13 Dec 2000 21:33:18 +0900 (JST)
To: FreeBSD-users-jp@jp.freebsd.org, markun@mb.kcom.ne.jp
From: =?iso-2022-jp?B?GyRCPmVMbjlAMGwbKEI=?= <kueno@mmc.co.jp>
In-Reply-To: <20001213001756.DEE3.MARKUN@mb.kcom.ne.jp>
References: <20001212233033N.ueno@mmc.co.jp>
	<20001212235031.70db81e7.teramoto@comm.eng.osaka-u.ac.jp>
	<20001213001756.DEE3.MARKUN@mb.kcom.ne.jp>
X-Mailer: Mew version 1.94.2 on Emacs 19.34 / Mule 2.3 (SUETSUMUHANA)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Message-Id: <20001213213317B.ueno@mmc.co.jp>
Date: Wed, 13 Dec 2000 21:33:17 +0900
X-Dispatcher: imput version 20000228(IM140)
Lines: 29
Reply-To: FreeBSD-users-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: FreeBSD-users-jp 57521
Subject: [FreeBSD-users-jp 57521] Re: NAT =?ISO-2022-JP?B?GyRCJEsbKEI=?=
 =?ISO-2022-JP?B?GyRCJEQkJCRGGyhC?= 
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org
X-Originator: ueno@mmc.co.jp

$B>eLn$G$9!#(B

> $BB>$K$O(B natd $B$HJ;MQ$9$k$H$-$O!"(Bnatd $B$K$h$C$FJQ49$5$l$?8e$K(B 
> ipfw $B$N%k!<%k$rDL2a$9$k$O$:$J$N$G!"@_7W$7$?$H$-$K$O%^%C%A$7(B
> $B$J$$$O$:$N%k!<%k(B(*1)$B$K%^%C%A$7$FCF$$$F$$$?$3$H$b$"$j$^$9!#(B
> 
> *1 $B30$+$iMh$?%W%i%$%Y!<%H%"%I%l%9$N<WCG%k!<%k$G$9(B


ipfw$B$N%k!<%k$O4|BTDL$j$KF0$$$F$$$k$N$K(Bnatd$B$rF0$+$7$?ESC<$K(BGW$B%^%7%s$K$J(B
$B$K$b=PMh$J$/$J$k7o2r7h$7$^$7$?!#(B

$BHSEg$5$s$N$4;XE&$I$*$j(Blog$B$r$_$F(B
>  -log_denied  $B$H$+;XDj$7$F$_$k$N$O$I$&$G$7$g$&$+!#(B

$B$-$,IU$$$?$N$G$9$,!"(B

/etc/natd.conf$B$NCf$G(B deny_incoming$B$,(B yes$B$K$J$C$F$$$^$7$?!#(B

# Setting to yes provides additional anti-crack protection
#
deny_incoming   no
#

$B$KJQ99$7$F(BNAT$B$rF0$+$7$J$,$i(BGW$B%^%7%s$X$N%"%/%;%9$b(Bipfw$B$N%k!<%kDL$j$K$$(B
$B$/$h$&$K$J$j$^$7$?!#(B

$B$"$H$O(B NAT$B7PM3$G30It$+$iFbIt$N%^%7%s$XD>@\%"%/%;%9$,=PMh$k$+$I$&$+$,2r(B
$B7h$7$F$$$^$;$s!#(B
