From owner-FreeBSD-users-jp@jp.FreeBSD.org Thu Nov 18 00:06:08 2004
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) id iAHF68u74110;
	Thu, 18 Nov 2004 00:06:08 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from mail-gw.welllink.co.jp (ns1.exit.co.jp [211.10.3.2])
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) with ESMTP/inet id iAHF64874102
	for <FreeBSD-users-jp@jp.FreeBSD.org>; Thu, 18 Nov 2004 00:06:05 +0900 (JST)
	(envelope-from kana@exit.co.jp)
Received: from [192.168.0.136] (falsetto.exit.co.jp [211.10.3.59])
	by mail-gw.welllink.co.jp (Postfix) with ESMTP id A2B532E06C
	for <FreeBSD-users-jp@jp.FreeBSD.org>; Wed, 17 Nov 2004 23:57:16 +0900 (JST)
Mime-Version: 1.0 (Apple Message framework v619)
In-Reply-To: <419B4A2A.6070002@ua.airnet.ne.jp>
References: <F56E440F-3846-11D9-8703-000A95CD994C@exit.co.jp> <419AD507.6040403@ua.airnet.ne.jp> <DB44C447-3867-11D9-8703-000A95CD994C@exit.co.jp> <419B4A2A.6070002@ua.airnet.ne.jp>
Content-Type: text/plain; charset=ISO-2022-JP; delsp=yes; format=flowed
Message-Id: <2B43E1A5-38AA-11D9-8703-000A95CD994C@exit.co.jp>
Content-Transfer-Encoding: 7bit
From: =?ISO-2022-JP?B?GyRCQXAwZkVEMkNGYBsoQg==?= <kana@exit.co.jp>
To: FreeBSD-users-jp@jp.FreeBSD.org
X-Mailer: Apple Mail (2.619)
Reply-To: FreeBSD-users-jp@jp.FreeBSD.org
Precedence: list
Date: Thu, 18 Nov 2004 00:05:50 +0900
X-Sequence: FreeBSD-users-jp 81836
Subject: [FreeBSD-users-jp 81836] Re: IPsec
 =?ISO-2022-JP?B?GyRCJE4lSCVzJU0layViITwlSSRLJEQkJCRGGyhC?= 
Sender: owner-FreeBSD-users-jp@jp.FreeBSD.org
X-Originator: kana@exit.co.jp
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+041115

$BAp0fED(B@$B%$%0%8%C%H$G$9!#(B

$B7,L>MM!"2#EDMM!"El;VMM!"%"%I%P%$%9$"$j$,$H$&$4$6$$$^$9!#(B
$BCe4cE@$,9-$,$C$F!"8IFH$J]5$+$iH4$1=P$;$=$&$J5$$,$$$?$7$^$9(B;D

$B"t4V0c$C$FJL?M%"%+%&%s%H$+$iJV?.$7$F$$$^$7$?(B(; ;
$B"tFs=E%]%9%H$K$J$C$F$7$^$C$F$$$?$i$4MF<O$/$@$5$$!&!&(B


On 2004/11/17, at 14:15, Kazuhisa Yokota wrote:

> VPN$B$G$O(BMTU$B$,>.$5$/$J$k$3$H$,B?$$$?$a!$$3$3$r%U%k%5%$%:(B(1500$B%P%$%H(B)
> $B$N%Q%1%C%H$,DL2a$9$k$H%U%i%0%a%s%H$,5/$-$^$9!%(B


MTU$B$K$O!"(B*$B$^$C$?$/(B*$BL\$,$$$C$F$$$^$;$s$G$7$?!&!&!*(B
$B$H$$$&$h$j$b!";d$O$3$N$"$?$j$N$3$H$KM}2r$,Dc$$$h$&$G$9!#(B
$B$=$b$=$b(Broute$B%3%^%s%I$r$m$/$K;H$$$3$J$7$F$$$J$$$N$G!"(B
$B<h$jAH$s$G$_$^$9!&!&!#(B

$B$A$J$_$K!"(Bem$B%G%P%$%9!"(Bnge$B%G%P%$%9$K4X$7$F$O!"A4$F%G%U%)%k%H$N(B
1500$B$G$7$?!#(Bgif$B%G%P%$%9$O(B1280$B$G$7$?!#(B
$B:#2s!"LdBj$,5/$-$F$$$k$N$O%H%s%M%j%s%0$5$l$?%G!<%?$@$1$J$N$G!"(B
$B$3$N>l9g!"(BMTU$B$r9J$k<B83$O!"(Bgif$B%G%P%$%9$K$F9T$&$Y$-$J$N$G$7$g$&$+!)!)(B



> $BAw?.B&$G(BMTU$B$r(Bifconfig$B$G>.$5$/JQ99$7$FLdBj$,L5$/$J$l$P!$(B
> $B>e5-$NLdBj$N2DG=@-$,$"$j$^$9!%$3$N$H$-$O(BICMP$B$,$I$3$+$G(B
> $B%U%#%k%?%j%s%0$5$l$F$J$$$+3NG'$7$F$_$F$/$@$5$$!%(B


ICMP$B$H%U%i%0%a%s%F%C%I%Q%1%C%H$O!"APJ}$N(BGateway$B$G!"(BIPFW$B$G(B
$B9J$C$F$^$7$?!#(B
$B2<5-$N@_Dj$,4X78$9$k$+$H;W$$$^$9$,!"$"$^$j$/$o$7$/$O$"$j$^$;$s!#(B
icmptype$B!&!&(BICMP$B$K<oN`$,$"$k$H$$$&$N$,!"M}2r$G$-$F$$$^$;$s!#(B
$B!V(Bping$BGzCF$K$=$J$($h!W$H$N$3$H$+$i(B*$B$J$K$2$J$/(B*$B@_Dj$7$F$7$^$C$F$$$^$9(B:p
$B"t$=$l$G$J$/$F$b(Bssh$B$N%"%?%C%/$,$b$N$9$4$$$N$G$G$-$k$@$1(Bdeny$B$7$F$$$k(B
$B"t>u67$J$N$G$9$,!&!&(B(; ;
$B"t$^$@$^$@%U%#%k%?$N@_Dj$O;n9T:x8m$N>u67$G$9!#(B

------------------------------------------------------------------------ 
----------------
$BN>B&$N(BGateway$B$K6&DL$7$?(B/etc/ipfw.conf$B$+$iH4?h(B

fwcmd="/sbin/ipfw -q"
${fwcmd} add deny ip from any to any via ${oif} frag
${fwcmd} add pass icmp from any to any via ${iif}
${fwcmd} add pass icmp from any to any out via ${oif} icmptypes 8
${fwcmd} add pass icmp from any to any in via ${oif} icmptypes 0
${fwcmd} add pass icmp from any to any in via ${oif} icmptypes 3
${fwcmd} add deny log icmp from any to any
------------------------------------------------------------------------ 
----------------



On 2004/11/17, at 21:55, audrey wrote:


> $B3NG'$7$FD:$1$?$i$H;W$$$^$9!#>e5-$N%*%W%7%g%s$G%Q%1%C%H%5%$%:$r(B
> $BBg$-$/$7$F$d$C$F$_$FD:$1$?$i$H;W$$$^$9!#(B
>
> $B0JA0$KF1MM$N2s@~$GLdBjH/@8$7$?;vNc$r8+$F$$$^$9!#%H%i%U%#%C%/$,(B
> $B>/$7A}$($k$H(BTCP/IP$B%l%Y%k$G%j%H%i%$$,BgNLH/@8$7$F@5>oDL?.$,(B
> $B=PMh$J$/$J$k$H$$$&J*$G$7$?!#(B
>
> $B860x$O!"%a%G%#%"%3%s%P!<%?$O(B10M Full$B$rMW5a$7$F$$$k$N$G$9$,!"(B
> $B%k!<%?$N%$%s%?!<%U%'!<%9$r(B10M Half$B$K@_Dj$7$F$$$?$?$a$K(B
> $B!J(BAuto$B%M%4$@$H(B10M Full$B$J$s$F$J$i$J$$$G$9$h$M!K(B
> $BAPJ}8~DL?.;~$KJRDLOC>uBV$K$J$k$H8@$&$b$N$G$7$?!#(B
> $B2s@~$N7@Ls$O$I$&$J$C$F$$$^$9$+!)!!A4Fs=E$G$9$+H>Fs=E(B
> $B$G$9$+!)!!(B


$BA4Fs=E$@$H!&!&!&;W$C$F$^$7$?!"$,!"L@3N$J;qNA$,$J$$$3$H$K5$$,$D$-$^$7$?(B(-_-;
$BIaCJ$OF|>oE*$KBgNL$N5pBg%U%!%$%k!J?t(B10MB$B%/%i%9!A?t(B100MB$B%/%i%9!K$,(BFTP$B$G(B
$B$d$j$H$j$5$l$F$$$k!J$3$l$K4X$7$F$O%H%s%M%k%b!<%I$O;HMQ$7$F$$$^$;$s!K$N$G!"(B
$BIT6q9g$O$G$F$$$J$$$h$&$G$9$,!&!&!#(B

$B$?$@$7!"Aj<j@h$G0l<R$@$1!"(BFTP$B$K%"%/%;%9$G$-$J$$>I>u$,$"$k$N$r;W$$=P$7$^$7$?!#(B
$B$3$NAj<j$O$3$A$i$N(BFTP$B%5%$%H!J(Bvsftpd$B$r;HMQ$7$?(Bchroot$B%G%#%l%/%H%j!K$K$O%"%/%;%9(B
$B$G$-$k$b$N$N!"$3$A$i$+$i$O$"$A$i$N(BFTP$B$K%"%/%;%9$G$-$J$$!J(Bpassive$B%b!<%I$r(B
$B$-$j$+$($F$b!"(Bls$B$G$-$J$$!K$H$$$&>I>u$,$"$j$^$9!#(B
$B$"$^$j:#2s$NLdBj$H$O4X78$J$$$N$+$b$7$l$^$;$s$,!&!&!&!#(B



On 2004/11/17, at 13:50, HIGASHI Taku wrote:

> o $B!V(B[FreeBSD-users-jp 81802] 5.3-RELEASE $B$G$N(B em $B%G%P%$%9!W$N8=>](B
>   FreeBSD 5.2, 5.2.1, 5.3$B$,:.:_$H$N$3$H$J$N$G!"(B5.3$B$r4^$^$J$$7PO)$G(B
>   $BLdBj$,5/$-$J$$$h$&$G$"$l$P!"$3$l$+$b$7$l$^$;$s!#(B


$B$J$k$[$I!"D>A0$N%9%l%C%I$K$"$C$?$N$G$9$M!&!&(B
$B$5$i$C$HN.$7$F$7$^$C$F$$$^$7$?!#(B
$B$3$l$O$H$j$"$($:!"%I%i%$%P!<$N%"%C%W%G!<%H$GBP1~$7$F$$$-$?$$$H(B
$B;W$C$F$$$^$9!#(B


