From owner-FreeBSD-users-jp@jp.FreeBSD.org Fri Aug 19 20:56:13 2011
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) id p7JBuD175074;
	Fri, 19 Aug 2011 20:56:13 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from mail-qy0-f170.google.com (mail-qy0-f170.google.com [209.85.216.170])
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) with ESMTP/inet id p7JBuCK75069
	for <FreeBSD-users-jp@jp.freebsd.org>; Fri, 19 Aug 2011 20:56:12 +0900 (JST)
	(envelope-from toshimasa.matsuoka@gmail.com)
Received: by qyl38 with SMTP id 38so407344qyl.1
        for <FreeBSD-users-jp@jp.freebsd.org>; Fri, 19 Aug 2011 04:56:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=mime-version:date:message-id:subject:from:to:content-type
         :content-transfer-encoding;
        bh=L8ccPNmGM/NjAu0+YUcPo0ENS3ltG6Buv5MOMVS+J3k=;
        b=Qs92yniiuaIJIzOtKYw+vRchbULqtxKbetztrFJDaPXmmjW5LD1F99XprB69z8FdUZ
         kVmkxT6NP4uuWHFcwP34ZJqCfdt18BjYXL2QHwLpcbhj8Nx9O+2JLu3G+iFWuIg2hTBa
         re+aX/BH5YZNycw+xDxspMwDaZPhV92DbXxyk=
MIME-Version: 1.0
Received: by 10.224.194.132 with SMTP id dy4mr1812839qab.213.1313754965156;
 Fri, 19 Aug 2011 04:56:05 -0700 (PDT)
Received: by 10.229.186.81 with HTTP; Fri, 19 Aug 2011 04:56:05 -0700 (PDT)
Message-ID: <CAFpFMofs0iriff0T51HxU3oZun4LnFcCi_JJfnTuWapmnc-qZQ@mail.gmail.com>
From: =?ISO-2022-JP?B?GyRCPj4yLE14PjsbKEI=?= <toshimasa.matsuoka@gmail.com>
To: FreeBSD-users-jp@jp.FreeBSD.org
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
Reply-To: FreeBSD-users-jp@jp.FreeBSD.org
Precedence: list
Date: Fri, 19 Aug 2011 20:56:05 +0900
X-Sequence: FreeBSD-users-jp 93498
Subject: [FreeBSD-users-jp 93498] pf =?ISO-2022-JP?B?GyRCJE5AXxsoQg==?=
 =?ISO-2022-JP?B?GyRCRGokSyREJCQkRhsoQg==?= 
Sender: owner-FreeBSD-users-jp@jp.FreeBSD.org
X-Originator: toshimasa.matsuoka@gmail.com
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+060209

$B>>2,$H?=$7$^$9!#(B

pf$B$N@_Dj$,$&$^$/$$$+$:!"G:$s$G$*$j$^$9!#(B

$BF1MM$NLdBj$r2r7h$5$l$?J}$,$$$i$C$7$c$$$^$7$?$i!"(B
$B$b$7$/$O$4?F@Z$JJ}$,%"%I%P%$%9$$$?$@$1$k$H=u$+$j$^$9!#(B

$B!ZGX7J![(B

router(DC$BDs6!(B)     router(UCOM)
192.168.100.1     192.168.101.1
        |                         |
       +------------------------+
                     |
                 [HOST]
     jail1:www.example.com 192.168.100.2
     jail2:upload.example.com 192.168.101.2


jail$B$G2<5-$N$h$&$K#2$D$N%5%$%H$r2>A[2=$7$F$$$^$9!#(B
www.example.com 192.168.100.2/28
upload.example.com 192.168.101.2/29

www.example.com(192.168.100.2)$B$O%G!<%?%;%s%?!<$NBS0hJ]>Z2s@~$G@\B3$7$?$$!#(B
$B%2!<%H%&%'%$$O(B192.168.100.1$B$G$9!#(B

upload.example.com(192.168.101.2)$B$O0z$-9~$_$N2s@~(B(UCOM)$B$G@\B3$7$?$$!#(B
$B%2!<%H%&%'%$$O(B192.168.101.1$B$G$9!#(B

$B%[%9%HB&(B(dom0$B$_$?$$$JJ}(B)$B$N@_Dj$H$7$F$O!"(B
default gateway$B$G(B192.168.100.1$B$r@_Dj$7$F$$$^$9!#(B

192.168.100.0/28$B!"(B192.168.101.0/29$B$O$=$l$>$l!"(BFirewall$B!"%V%m!<%I%P%s%I%k!<%?$G(B
NAPT$B$5$l$F$$$^$9!#(B

$B!ZLdBj![(B

$B$3$N$^$^$@$H!"(B192.168.101.2$B$+$i$N1~Ez$,(B192.168.100.1$B$K9T$C$F$7$^$&$N$G!"(B
$B30It$+$i$N1~Ez$,$G$-$^$;$s!#(B

$B$=$3$G!"(Bpf$B$r;H$$!"(B192.168.101.2$B$+$i$N1~Ez$O(B192.168.101.1$B$K%k!<%F%#%s%0$9$k$h$&$K@_Dj$7$^$7$?!#(B
($B$7$?$D$b$j$G$9(B)

----- /etc/pf.conf
pass out log quick on em0 from 192.168.101.2 to 192.168.101.0/29
pass out log on em0 route-to (192.168.101.1 em0) from 192.168.101.2

-----/etc/rc.conf
defaultrouter="192.168.100.1"
ifconfig_em0="inet 192.168.100.2 netmask 255.255.255.224"
ifconfig_em0_alias0="inet 192.168.101.2 netmask 255.255.255.248"
-----

$B!Z8=:_$N8=>]![(B

$B%[%9%H>e$+$i(Bping$B$r$&$C$F$_$^$7$?!#(B
$B!&(Bping -S 192.168.101.2 192.168.101.1
$B"*1~Ez$9$k(B
$B!&(Bping -S 192.168.101.2 8.8.8.8
$B"*1~Ez$7$J$$"(LdBj(B
$B!&(Bping -S 192.168.100.2 8.8.8.8
$B"*1~Ez$9$k(B

$B$b$A$m$s30It$+$i$N(Bping$B$b1~Ez$7$^$;$s!#(B

$B%"%I%P%$%9!&%R%s%H$r$$$?$@$1$k$H9,$$$G$9!#(B

$B!Z4D6-![(B
FreeBSD 8.2 (x86)
