+++ /dev/null
-#!/bin/sh\r
-\r
-#######################################\r
-##\r
-## input data for MRTG\r
-##\r
-## 1 line : IPv6 Users\r
-## 2 line : Total Users\r
-## 3 line : uptime\r
-## 4 line : comment for data\r
-##\r
-#######################################\r
-\r
-# tmp file name\r
-file="/tmp/opengate.tmp"\r
-\r
-# URL of output.sh at opengate\r
-url="https://opengate12.edu.cc.saga-u.ac.jp/cgi-bin/output.sh"\r
-\r
-fetch -o $file $url &> /dev/null\r
-\r
-more $file\r
+++ /dev/null
-##################################################
-# opengate user counter
-
-WorkDir: /usr/local/www/mrtg/opengate/
-
-Options[^]: growright,gauge,nopercent,integer
-
-Target[opengate]:`/usr/home/user/bin/input.sh`
-Title[opengate]: Opengate user counter
-
-PageTop[opengate]: <h1>Opengate user counter</h1>
-
-MaxBytes[opengate]: 200
-
-YLegend[opengate]: Opengate User
-
-ShortLegend[opengate]: people
-
-LegendI[opengate]: IPv6 User
-LegendO[opengate]: Total User
+++ /dev/null
-##################################################
-# opengate user counter
-
-WorkDir: /usr/local/www/mrtg/opengate/
-Language: euc-jp
-
-##### ¥ª¥×¥·¥ç¥ó
-# growright: X¼´¤Î¸¶ÅÀ¤òº¸¤Ë integer: À°¿ôɽ¼¨ info: 3,4ÈÖÌܤνÐÎϤÎÈóɽ¼¨
-# gauge: ¸½ºß¤ÎÃÍ=ÆþÎÏÃÍ-Á°²ó¤ÎÆþÎÏÃͤò¤·¤Ê¤¤ nopercent: ¥Ñ¡¼¥»¥ó¥ÈÈóɽ¼¨
-Options[^]: growright,gauge,nopercent,integer
-
-Target[opengate]:`/usr/home/user/bin/input.sh`
-Title[opengate]: Opengate user counter
-
-PageTop[opengate]: <h1>Opengate user counter</h1>
- <p>Opengate12 ¤òÍøÍѤ·¤Æ¤¤¤ë¿Í¿ô¤òɽ¼¨¤·¤Æ¤¤¤Þ¤¹¡£</p>
-
-# Ãͤξå¸Â
-MaxBytes[opengate]: 200
-# ³Æ¥°¥é¥Õ¤Ë¤ª¤¤¤Æ¡¢¥°¥é¥Õ¤Î¾å¸Â¤òÃͤκÇÂçÃͤǤʤ¯Ãͤξå¸Â¤Ë¤¹¤ë
-#Unscaled[opengate]: ymwd
-
-# ¥°¥é¥Õ¤ÎY¼´¤Ë¤Ä¤¯¥¿¥¤¥È¥ë
-YLegend[opengate]: Opengate User
-# ÃͤÎñ°Ì
-ShortLegend[opengate]: ¿Í
-# ÃͤΥ¿¥¤¥È¥ë LegendI: 1ÈÖÌÜ LegendO: 2ÈÖÌÜ
-LegendI[opengate]: IPv6 User
-LegendO[opengate]: Total User
+++ /dev/null
-#!/bin/sh
-
-#######################################
-##
-## shwo opengate status for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-LANG=C
-COLUMNS=256
-
-export LANG
-export COLUMNS
-
-### opengate process name
-process="opengatesrv.cgi"
-
-### tmp file name
-tmp_all="/tmp/og_count_all.tmp"
-tmp_6="/tmp/og_count_6.tmp"
-
-######################################################
-
-ps ax | grep $process > $tmp_all
-
-COUNT=`wc -l $tmp_all | awk '{print $1}'`
-
-grep "(useIPv6)" $tmp_all > $tmp_6
-
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`
-
-UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`
-
-rm $tmp_all
-rm $tmp_6
-
-echo "$COUNT6"
-echo "$COUNT"
-echo "$UPTIME"
-echo "Opengate User Counter"
+++ /dev/null
-#!/bin/sh\r
-\r
-#######################################\r
-##\r
-## shwo opengate status for syslog\r
-##\r
-#######################################\r
-\r
-LANG=C\r
-COLUMNS=256\r
-\r
-export LANG\r
-export COLUMNS\r
-\r
-process="opengatesrv.cgi"\r
-facility="local3.info"\r
-\r
-tmp_all="/tmp/og_count_all.tmp"\r
-tmp_6="/tmp/og_count_6.tmp"\r
-\r
-######################################################\r
-\r
-ps ax | grep $prosess > $tmp_all\r
-\r
-COUNT=`wc -l $tmp_all | awk '{print $1}'`\r
-\r
-grep "(useIPv6)" $tmp_all > $tmp_6\r
-\r
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`\r
-\r
-rm $tmp_all\r
-rm $tmp_6\r
-\r
-echo "$COUNT $COUNT6" | /usr/bin/logger -p $facility\r
+++ /dev/null
-#!/bin/sh
-
-#######################################
-##
-## shwo opengate status for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-##
-#######################################
-
-
-LANG=C
-COLUMNS=256
-
-export LANG
-export COLUMNS
-
-tmp_all="/tmp/og_count_all.tmp"
-tmp_6="/tmp/og_count_6.tmp"
-
-process="opengatesrv.cgi"
-
-
-######################################################3
-
-ps ax | grep $process > $tmp_all
-
-COUNT=`wc -l $tmp_all | awk '{print $1}'`
-
-grep "(useIPv6)" $tmp_all > $tmp_6
-
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`
-
-UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`
-
-rm $tmp_all
-rm $tmp_6
-
-echo "Content-type: text/plain; charset=iso-8859-1"
-echo
-
-echo "$COUNT6"
-echo "$COUNT"
-echo "$UPTIME"
-echo "Opengate User Counter"
+++ /dev/null
-<HTML>
-<BODY>
-
-<body bgcolor=#BBEECC>
-
-<H3>Opengate History</H3>
-
-<DL>
-<DT>Ver.0.10 at 1999.8.30
-<DD>
-Scratch Version. In this version, Java applet is sent first, and the applet accept password.
-<DT>
-Ver.0.11 at 1999.9.19
-<DD>
-Stable Version. Reform program.
-<DT>
-Ver.0.12 at 1999.11.2
-<DD>
-Support firewalls IPF and ipfw.
-<DT>
-Ver.0.20 at 1999.9.16
-<DD>
-Abandoned version.
-<DT>
-Ver.0.30 at 1999.10.16
-<DD>
-Change to accept password with CGI. IPF support is disarded.
-<DT>
-Ver.0.31 at 1999.10.26
-<DD>
-Reform User Interface. Java applet shows own window.
-<DT>
-Ver.0.32 at 1999.11.1
-<DD>
-Support IPF.
-<DT>
-Ver.0.33 at 2000.6.17
-<DD>
-Support IP forwarding. Discard IPF support.
-<DT>
-Ver.0.40 at 2000.6.19
-<DD>
-Support multiple authentication servers.
-<DT>
-Ver.0.41 at 2000.6.23
-<DD>
-Add fuction to close firewall, when no packet passed for a while.
-<DT>
-Ver.0.42 at 2000.6.28
-<DD>
-Add function to close firewall at abnormal server termination.
-<DT>
-Ver.0.50 at 2000.12.11
-<DD>
-Add fuction to exchange hello message with terminal. Firewall is closed, when the client does not reply. Java output is included in html window.
-<DT>
-Ver.0.51 at 2000.12.22
-<DD>
-Support pop3 authentication.
-<DT>
-Ver.0.52a at 2001.1.19
-<DD>
-Exclusive execution of ipfw command.
-Deny multiple authentication requests from a terminal.
-Change the method to get Java connection address.
-Modify string sizes in the program.
-Many small modifications.
-<DT>
-Ver.0.52b at 2001.1.24
-<DD>
-Reform unp library.
-<DT>
-Ver.0.52c at 2001.1.26
-<DD>
-Add DEBUG flag. Modify Directory setting.
-<DT>
-Ver.0.52d at 2001.1.30
-<DD>
-Modify no packet time setting.
-<DT>
-Ver.0.52e at 2001.2.5
-<DD>
-Correct mistake comment.
-<DT>
-Ver.0.53a at 2001.2.7
-<DD>
-Directory setting is integrated in Makefile.
-Support logging MAC address.
-<DT>
-Ver.0.53b at 2001.2.8
-<DD>
-Add the check of null userID or password.
-<DT>
-Ver.0.53c at 2001.2.10
-<DD>
-Replace one accept window to two overlapped windows.
-<DT>
-Ver.0.53d at 2001.2.13
-<DD>
-Small modification on MAC address acquisition.
-<DT>
-Ver.0.54a at 2001.2.15
-<DD>
-Serious error(Ports are wasted in long execution) found and fixed.
-<DT>
-Ver.0.55a at 2001.3.19
-<DD>
-Show messages on JavaApplet field.
-<DT>
-Ver.0.56a at 2001.3.29
-<DD>
-Detach unp library (Many modifications in source)
-<DT>
-Ver.0.56b at 2001.4.14
-<DD>
-Modify document.(No modification in source)
-<DT>
-Ver.0.56c at 2001.4.24
-<DD>
-Reform HTML to improve authentication response time.(Modification in accept.html)
-<DT>
-Ver.0.56d at 2001.4.29
-<DD>
-Declaration of GPL. Add English documentations.(No modification in source)
-<DT>
-Ver.0.57a at 2001.5.10
-<DD>
-Remove loop at ipfw-delete. (Modification in comm-ipfw.c)
-<DT>
-Ver.0.57b at 2001.5.11
-<DD>
-Change Lockout time for ipfw exec. (Modification in opengatesrv.h)
-<DT>
-Ver.0.57c at 2001.5.25
-<DD>
-Put out message at Java/JavaScript disabled. (Modification in accept.html)
-<DT>
-Ver.0.57d at 2001.11.21
-<DD>
-Change timeout values (Modification in opengatesrv.h)
-<DT>
-Ver.0.57e at 2002.2.13
-<DD>
-Care for redirect error on IE (Modification in topindex.html)
-<DT>
-Ver.0.60a at 2002.6.17
-<DD>
-Add authentication protocols - RADIUS,PAM,POP3S (Modifications: Makefile, comm-auth.c, utilities.c, opengatesrv.h, opengatesrv.conf. Additions: auth-pam.c, auth-pop3s.c, auth-rad.c)
-<DT>
-Ver.0.60b at 2002.6.18
-<DD>
-Add comments.
-<DT>
-Ver.0.70a at 2002.6.19
-<DD>
-Modify to control multi-language environment (Modifications: Makefile, comm-cgi.c *.html Opengate.java)
-<DT>
-Ver.0.71a at 2002.6.24
-<DD>
-Refine installation procedure (Modifications: Makefile, comm-cgi.c *.html)
-<DT>
-Ver.0.72a at 2002.7.1
-<DD>
-Messages are terminated with CR and LF (Modifications: comm-cgi.c Opengate.java)
-<DT>
-Ver.0.73a at 2002.7.4
-<DD>
-Add jar(java archive) file, modify some documents (Modifications: comm-cgi.c Makefile Add: Opengate.jar)
-<DT>
-Ver.0.73b at 2002.7.10
-<DD>
-Recover error messages added in Ver.0.57c but forgotten in Ver.0.70a (Modifications: accept.html)
-<DT>
-Ver.0.73c at 2002.7.12
-<DD>
-Changes in some documents
-<DT>
-Ver.0.73d at 2002.7.15
-<DD>
-More careful detaching from web server. (Modifications: main.c comm-cgi.c)
-<DT>
-Ver.0.73e at 2002.8.7
-<DD>
-Fix a serious bug in java applet entered at Ver.0.70a. The applet did not return hello to hello request in english message mode.(Modifications: Opengate.java)
-Save index.html created at web server installation. (Modifications: Makefile)
-<DT>
-Ver.0.80a at 2002.8.19
-<DD>
-Add perl script for more flexible firewall control(Modifications: main.c comm-ipfw.c opengatesrv.h Makefile, Additions: conf/opengatefw.pl)
-Fix a small mistake at debug mode (Modifications: auth-pam.c)
-Modify installation procecure. Opengate directory can be set in Makefile(Modifications: Makefile, *.html). Add document to describe the system flow (Additions: doc/progflow.html).
-<DT>
-Ver.0.80b at 2002.8.26
-<DD>
-Fix a bug at checking overlapped request (Modifications: comm-ipfw.c)
-<DT>
-Ver.0.81a at 2002.8.26
-<DD>
-Add link to close network available at No-java mode (Modifications: accept.html, Makefile, comm-cgi.c, comm-java.c, main.c ,opengatesrv.h)
-<DT>
-Ver.0.81b at 2002.8.27
-<DD>
-Remove userid from terminate link string (Modifications: comm-cgi.c, comm-java.c), Modify accept page design (Modifications: accept.html)
-<DT>
-Ver.0.81c at 2002.9.5
-<DD>
-Version up is mistaked. Removed.
-<DT>
-Ver.0.81d at 2002.9.9
-<DD>
-Fix a mistake about URL string in a HTML file. (Modifications: ja/accept.html)
-Remove reference HTML document from archive. Add description about maxuser=0 in installation document.
-<DT>
-Ver.0.81e at 2002.9.10
-<DD>
-Add checking for execl failure (Modifications: comm-ipfw.c, comm-arp.c, main.c)
-<DT>
-Ver.0.82a at 2002.9.25
-<DD>
-Add skeleton routine to get user property (Modifications: opengatesrv.h, Makefile, main.c, comm-ipfw.c, opengatefw.pl, Additions: comm-userdb.c)
-<DT>
-Ver.0.83a at 2002.10.7
-<DD>
-Permit no reply to hello more than one time (Modifications: comm-java.c, opengatesrv.h)
-<DT>
-Ver.0.83b at 2003.1.6
-<DD>
-Add documentation about maximum number of TCP connections (Modifications: install.html, install-e.html)
-<DT>
-Ver.0.90a at 2003.5.6
-<DD>
-Add duration input field in auth page for the demand of long usage without java. To cope with hijacking and notting, mac-address and packet-count are checked periodically. (Modifications: index.html, index-ssl.html, accept.html, comm-cgi.c comm-java.c, comm-arp.c, main.c, opengatesrv.h)
-<DT>
-Ver.0.90b at 2003.5.7
-<DD>
-Reset the DEBUG option. It was misset in the previous version.(Modification: opengatesrv.h)
-<DT>
-Ver.0.90c at 2003.5.15
-<DD>
-Simplify the logic.(Modification: comm-java.c)
-<DT>
-Ver.0.90d at 2003.8.27
-<DD>
-Change message in auth page.(Modification: index.html, index-ssl.html)
-<DT>
-Ver.0.90e at 2003.9.24
-<DD>
-Display (firewall-rule-Number,userID,IPaddress) in process title.(Modification: main.c)
-<DT>
-Ver.0.90f at 2003.9.25
-<DD>
-Add documentation(Modification: errcheck.html,errcheck-e.html)
-<DT>
-Ver.0.90g at 2003.11.28
-<DD>
-Fix PAM-include error occured on FreeBSD 5 (Modification: auth-pam.c)
-<DT>
-Ver.0.90h at 2003.12.8
-<DD>
-Fix Applet-NoReply error occured on some browsers at removing applet page. Modify install document (Modification: Opengate.java and the compiled files, install.html,install-e.html)
-<DT>
-Ver.0.90i at 2003.12.16
-<DD>
-Modify parameters and documentations (Modification: opengatesrv.h, makefile, index.html, index-ssl.html, accept.html, accept2.html, install.html, install-e.html, qa.html, qa-e.html, errcheck.html, errcheck-e.html)
-<DT>
-Ver.0.90j at 2004.9.21
-<DD>
-Fix communication error occured in some pop3/pop3s server (Modification: comm-auth.c, auth-pop3s.c)
-<DT>
-Ver.0.90k at 2005.2.3
-<DD>
-Add links in accept.html to cope with popup-blocked and java-optional browser (Modification: accept.html)
-<DT>
-Ver.0.90l at 2005.2.4
-<DD>
-Fix communication error with ftpserver sent back multi-line greeting. Add error reporting code at fork/exec (Modification:comm-auth.c, comm-ipfw.c)
-<DT>
-Ver.0.90m at 2005.2.7
-<DD>
-Add error check code for ipfw response (Modification:comm-ipfw.c)
-<DT>
-Ver.0.90n at 2005.3.21
-<DD>
-Add no-cache option in authentication pages (Modification:index.html, index-ssl.html)
-<DT>
-Ver.1.0.0 at 2005.5.21
-<DD>
-Stable version is released (Modification;README)
-<DT>
-Ver.1.1.0 at 2005.5.27
-<DD>
-Add many parameters in conf file. Add programs for test. (Addition;get-param.c,test-get-param.c,test-comm-auth.c,test-comm-ipfw.c,test-comm-java.c,test-console.sh Modification;README,main.c,comm-auth.c,comm-ipwf.c,comm-java.c,Makefile)
-<DT>
-Ver.1.1.1 and 1.0.1 at 2005.5.30
-<DD>
-Recompile Java Applet with option '-target 1.1' to be compatible with MicrosoftVM (Modification: Opengate.class, OpengateClient.class, Opengate.jar)
-<DT>
-Ver.1.1.2 at 2005.7.13
-<DD>
-Comment out server parameter setting in config file (modification:opengatesrv.conf)
-<DT>
-Ver.1.1.3 at 2005.12.1
-<DD>
-Fix Error at executing the child process, Thanks to k.Eguchi and S.Uematsu (modification:comm-java.c, opengatefw.pl)
-<DT>
-Ver.1.2.0 at 2005.12.2
-<DD>
-Add IPv6 support [contributed by K.Eguchi]
-<DT>
-Ver.1.2.1 at 2005.12.15
-<DD>
-Change NDP command option to be recognized by new NDP [contributed by K.Eguchi]
-<DT>
-Ver.1.2.2 at 2006.1.6
-<DD>
-Fix an error when a cgi has no argument. Add MRTG function [contributed by K.Eguchi]
-<DT>
-Ver.1.1.4 & Ver.1.2.3 at 2006.2.2
-<DD>
-Add FTPS authentication.
-</DL>
-</BODY>
-</HTML>
+++ /dev/null
- GNU GENERAL PUBLIC LICENSE
- Version 2, June 1991
-
- Copyright (C) 1989, 1991 Free Software Foundation, Inc.
- 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
- Everyone is permitted to copy and distribute verbatim copies
- of this license document, but changing it is not allowed.
-
- Preamble
-
- The licenses for most software are designed to take away your
-freedom to share and change it. By contrast, the GNU General Public
-License is intended to guarantee your freedom to share and change free
-software--to make sure the software is free for all its users. This
-General Public License applies to most of the Free Software
-Foundation's software and to any other program whose authors commit to
-using it. (Some other Free Software Foundation software is covered by
-the GNU Library General Public License instead.) You can apply it to
-your programs, too.
-
- When we speak of free software, we are referring to freedom, not
-price. Our General Public Licenses are designed to make sure that you
-have the freedom to distribute copies of free software (and charge for
-this service if you wish), that you receive source code or can get it
-if you want it, that you can change the software or use pieces of it
-in new free programs; and that you know you can do these things.
-
- To protect your rights, we need to make restrictions that forbid
-anyone to deny you these rights or to ask you to surrender the rights.
-These restrictions translate to certain responsibilities for you if you
-distribute copies of the software, or if you modify it.
-
- For example, if you distribute copies of such a program, whether
-gratis or for a fee, you must give the recipients all the rights that
-you have. You must make sure that they, too, receive or can get the
-source code. And you must show them these terms so they know their
-rights.
-
- We protect your rights with two steps: (1) copyright the software, and
-(2) offer you this license which gives you legal permission to copy,
-distribute and/or modify the software.
-
- Also, for each author's protection and ours, we want to make certain
-that everyone understands that there is no warranty for this free
-software. If the software is modified by someone else and passed on, we
-want its recipients to know that what they have is not the original, so
-that any problems introduced by others will not reflect on the original
-authors' reputations.
-
- Finally, any free program is threatened constantly by software
-patents. We wish to avoid the danger that redistributors of a free
-program will individually obtain patent licenses, in effect making the
-program proprietary. To prevent this, we have made it clear that any
-patent must be licensed for everyone's free use or not licensed at all.
-
- The precise terms and conditions for copying, distribution and
-modification follow.
-\f
- GNU GENERAL PUBLIC LICENSE
- TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
-
- 0. This License applies to any program or other work which contains
-a notice placed by the copyright holder saying it may be distributed
-under the terms of this General Public License. The "Program", below,
-refers to any such program or work, and a "work based on the Program"
-means either the Program or any derivative work under copyright law:
-that is to say, a work containing the Program or a portion of it,
-either verbatim or with modifications and/or translated into another
-language. (Hereinafter, translation is included without limitation in
-the term "modification".) Each licensee is addressed as "you".
-
-Activities other than copying, distribution and modification are not
-covered by this License; they are outside its scope. The act of
-running the Program is not restricted, and the output from the Program
-is covered only if its contents constitute a work based on the
-Program (independent of having been made by running the Program).
-Whether that is true depends on what the Program does.
-
- 1. You may copy and distribute verbatim copies of the Program's
-source code as you receive it, in any medium, provided that you
-conspicuously and appropriately publish on each copy an appropriate
-copyright notice and disclaimer of warranty; keep intact all the
-notices that refer to this License and to the absence of any warranty;
-and give any other recipients of the Program a copy of this License
-along with the Program.
-
-You may charge a fee for the physical act of transferring a copy, and
-you may at your option offer warranty protection in exchange for a fee.
-
- 2. You may modify your copy or copies of the Program or any portion
-of it, thus forming a work based on the Program, and copy and
-distribute such modifications or work under the terms of Section 1
-above, provided that you also meet all of these conditions:
-
- a) You must cause the modified files to carry prominent notices
- stating that you changed the files and the date of any change.
-
- b) You must cause any work that you distribute or publish, that in
- whole or in part contains or is derived from the Program or any
- part thereof, to be licensed as a whole at no charge to all third
- parties under the terms of this License.
-
- c) If the modified program normally reads commands interactively
- when run, you must cause it, when started running for such
- interactive use in the most ordinary way, to print or display an
- announcement including an appropriate copyright notice and a
- notice that there is no warranty (or else, saying that you provide
- a warranty) and that users may redistribute the program under
- these conditions, and telling the user how to view a copy of this
- License. (Exception: if the Program itself is interactive but
- does not normally print such an announcement, your work based on
- the Program is not required to print an announcement.)
-\f
-These requirements apply to the modified work as a whole. If
-identifiable sections of that work are not derived from the Program,
-and can be reasonably considered independent and separate works in
-themselves, then this License, and its terms, do not apply to those
-sections when you distribute them as separate works. But when you
-distribute the same sections as part of a whole which is a work based
-on the Program, the distribution of the whole must be on the terms of
-this License, whose permissions for other licensees extend to the
-entire whole, and thus to each and every part regardless of who wrote it.
-
-Thus, it is not the intent of this section to claim rights or contest
-your rights to work written entirely by you; rather, the intent is to
-exercise the right to control the distribution of derivative or
-collective works based on the Program.
-
-In addition, mere aggregation of another work not based on the Program
-with the Program (or with a work based on the Program) on a volume of
-a storage or distribution medium does not bring the other work under
-the scope of this License.
-
- 3. You may copy and distribute the Program (or a work based on it,
-under Section 2) in object code or executable form under the terms of
-Sections 1 and 2 above provided that you also do one of the following:
-
- a) Accompany it with the complete corresponding machine-readable
- source code, which must be distributed under the terms of Sections
- 1 and 2 above on a medium customarily used for software interchange; or,
-
- b) Accompany it with a written offer, valid for at least three
- years, to give any third party, for a charge no more than your
- cost of physically performing source distribution, a complete
- machine-readable copy of the corresponding source code, to be
- distributed under the terms of Sections 1 and 2 above on a medium
- customarily used for software interchange; or,
-
- c) Accompany it with the information you received as to the offer
- to distribute corresponding source code. (This alternative is
- allowed only for noncommercial distribution and only if you
- received the program in object code or executable form with such
- an offer, in accord with Subsection b above.)
-
-The source code for a work means the preferred form of the work for
-making modifications to it. For an executable work, complete source
-code means all the source code for all modules it contains, plus any
-associated interface definition files, plus the scripts used to
-control compilation and installation of the executable. However, as a
-special exception, the source code distributed need not include
-anything that is normally distributed (in either source or binary
-form) with the major components (compiler, kernel, and so on) of the
-operating system on which the executable runs, unless that component
-itself accompanies the executable.
-
-If distribution of executable or object code is made by offering
-access to copy from a designated place, then offering equivalent
-access to copy the source code from the same place counts as
-distribution of the source code, even though third parties are not
-compelled to copy the source along with the object code.
-\f
- 4. You may not copy, modify, sublicense, or distribute the Program
-except as expressly provided under this License. Any attempt
-otherwise to copy, modify, sublicense or distribute the Program is
-void, and will automatically terminate your rights under this License.
-However, parties who have received copies, or rights, from you under
-this License will not have their licenses terminated so long as such
-parties remain in full compliance.
-
- 5. You are not required to accept this License, since you have not
-signed it. However, nothing else grants you permission to modify or
-distribute the Program or its derivative works. These actions are
-prohibited by law if you do not accept this License. Therefore, by
-modifying or distributing the Program (or any work based on the
-Program), you indicate your acceptance of this License to do so, and
-all its terms and conditions for copying, distributing or modifying
-the Program or works based on it.
-
- 6. Each time you redistribute the Program (or any work based on the
-Program), the recipient automatically receives a license from the
-original licensor to copy, distribute or modify the Program subject to
-these terms and conditions. You may not impose any further
-restrictions on the recipients' exercise of the rights granted herein.
-You are not responsible for enforcing compliance by third parties to
-this License.
-
- 7. If, as a consequence of a court judgment or allegation of patent
-infringement or for any other reason (not limited to patent issues),
-conditions are imposed on you (whether by court order, agreement or
-otherwise) that contradict the conditions of this License, they do not
-excuse you from the conditions of this License. If you cannot
-distribute so as to satisfy simultaneously your obligations under this
-License and any other pertinent obligations, then as a consequence you
-may not distribute the Program at all. For example, if a patent
-license would not permit royalty-free redistribution of the Program by
-all those who receive copies directly or indirectly through you, then
-the only way you could satisfy both it and this License would be to
-refrain entirely from distribution of the Program.
-
-If any portion of this section is held invalid or unenforceable under
-any particular circumstance, the balance of the section is intended to
-apply and the section as a whole is intended to apply in other
-circumstances.
-
-It is not the purpose of this section to induce you to infringe any
-patents or other property right claims or to contest validity of any
-such claims; this section has the sole purpose of protecting the
-integrity of the free software distribution system, which is
-implemented by public license practices. Many people have made
-generous contributions to the wide range of software distributed
-through that system in reliance on consistent application of that
-system; it is up to the author/donor to decide if he or she is willing
-to distribute software through any other system and a licensee cannot
-impose that choice.
-
-This section is intended to make thoroughly clear what is believed to
-be a consequence of the rest of this License.
-\f
- 8. If the distribution and/or use of the Program is restricted in
-certain countries either by patents or by copyrighted interfaces, the
-original copyright holder who places the Program under this License
-may add an explicit geographical distribution limitation excluding
-those countries, so that distribution is permitted only in or among
-countries not thus excluded. In such case, this License incorporates
-the limitation as if written in the body of this License.
-
- 9. The Free Software Foundation may publish revised and/or new versions
-of the General Public License from time to time. Such new versions will
-be similar in spirit to the present version, but may differ in detail to
-address new problems or concerns.
-
-Each version is given a distinguishing version number. If the Program
-specifies a version number of this License which applies to it and "any
-later version", you have the option of following the terms and conditions
-either of that version or of any later version published by the Free
-Software Foundation. If the Program does not specify a version number of
-this License, you may choose any version ever published by the Free Software
-Foundation.
-
- 10. If you wish to incorporate parts of the Program into other free
-programs whose distribution conditions are different, write to the author
-to ask for permission. For software which is copyrighted by the Free
-Software Foundation, write to the Free Software Foundation; we sometimes
-make exceptions for this. Our decision will be guided by the two goals
-of preserving the free status of all derivatives of our free software and
-of promoting the sharing and reuse of software generally.
-
- NO WARRANTY
-
- 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
-FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN
-OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
-PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
-OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS
-TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE
-PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
-REPAIR OR CORRECTION.
-
- 12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
-REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
-INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
-OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
-TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
-YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
-PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
-POSSIBILITY OF SUCH DAMAGES.
-
- END OF TERMS AND CONDITIONS
-\f
- How to Apply These Terms to Your New Programs
-
- If you develop a new program, and you want it to be of the greatest
-possible use to the public, the best way to achieve this is to make it
-free software which everyone can redistribute and change under these terms.
-
- To do so, attach the following notices to the program. It is safest
-to attach them to the start of each source file to most effectively
-convey the exclusion of warranty; and each file should have at least
-the "copyright" line and a pointer to where the full notice is found.
-
- <one line to give the program's name and a brief idea of what it does.>
- Copyright (C) <year> <name of author>
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
-
-
-Also add information on how to contact you by electronic and paper mail.
-
-If the program is interactive, make it output a short notice like this
-when it starts in an interactive mode:
-
- Gnomovision version 69, Copyright (C) year name of author
- Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
- This is free software, and you are welcome to redistribute it
- under certain conditions; type `show c' for details.
-
-The hypothetical commands `show w' and `show c' should show the appropriate
-parts of the General Public License. Of course, the commands you use may
-be called something other than `show w' and `show c'; they could even be
-mouse-clicks or menu items--whatever suits your program.
-
-You should also get your employer (if you work as a programmer) or your
-school, if any, to sign a "copyright disclaimer" for the program, if
-necessary. Here is a sample; alter the names:
-
- Yoyodyne, Inc., hereby disclaims all copyright interest in the program
- `Gnomovision' (which makes passes at compilers) written by James Hacker.
-
- <signature of Ty Coon>, 1 April 1989
- Ty Coon, President of Vice
-
-This General Public License does not permit incorporating your program into
-proprietary programs. If your program is a subroutine library, you may
-consider it more useful to permit linking proprietary applications with the
-library. If this is what you want to do, use the GNU Library General
-Public License instead of this License.
-
+++ /dev/null
-<html>
-<head>
-<title>Opegnate Install</title>
-<meta http-equiv="content-type" content="text/html">
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">
-</head>
-
-<body bgcolor="#BBEECC">
-
-<!-- Start:Install Opengate -->
-<h3>A Install Opegnate<a name="opengate0" href="#opengate0" class="anchor">†</a></h3>
-<ul>
- <li class="list_num"><a href="#opengate1">Install Procedure</a></li>
- <li class="list_num"><a href="#opengate2">Install FreeBSD</a></li>
- <li class="list_num"><a href="#opengate3">Install Opengate</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>A.1 Install Procedure<a name="opengate1" href="#opengate1" class="anchor">†</a></h4>
-
-<p>List of Install Procedure.(*:Necessary by all means)</p>
-
-<ul>
- <li class="list_num">Gateway Machine *</li>
- <li class="list_num">Install FreeBSD *</li>
- <li class="list_num">Prepare kernel *</li>
- <li class="list_num">Setup ipfw,ip6fw *</li>
- <li class="list_num">Setup NAT</li>
- <li class="list_num">Install Apache2 *</li>
- <li class="list_num">Install DHCP</li>
- <li class="list_num">Install BIND9</li>
-</ul>
-
-<div align="right"><a href="#opengate0">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>A.2 Install FreeBSD<a name="opengate2" href="#opengate2" class="anchor">†</a></h4>
-
-<ul>
- <li>Gateway Machine</li>
- <uL>
- <li>FreeBSD Ver 4.x, 5.x, or 6.x</li>
- <li>Having Two more EtherBoard</li>
- </uL>
-</ul>
-
-<p>Choose distribution Developer(Full sorces, binaries and doc), because we have to prepare a kernel.</p>
-<p>Add next line to "/etc/rc.conf", because you validate a function of a gateway.</p>
-
-<table>
-<td><code>gateway_enable="YES"</code></td>
-</table>
-
-<div align="right"><a href="#opengate0">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>A.3 Install Opengate<a name="opengate3" href="#opengate3" class="anchor">†</a></h4>
-
-<h5>A.3.1 Package of Opengate<a name="opengate4" href="#opengate4" class="anchor">†</a></h5>
-
-<p>Unfolds the latest package of Opengate. It have next directory.</p>
-
-<table>
-<tr><td>
-<pre>
-doc\81FDocumentations
-conf\81Fconfiguration file sample and firewall control perl script sample
-javahtml\81FClient Java Programs and HTML files
-opengatesrv\81FServer CGI program
-</pre>
-</td></tr>
-</table>
-
-<h5>A.3.2 Compile<a name="opengate5" href="#opengate5" class="anchor">†</a></h5>
-
-<p>Edit Makefile and opengatesrv.h in opengatesrv before carry out compile.</p>
-<p>Opengate needs tow FQDNs(FQDN_4 and FQDN_64). For example, FQDN_4 is "opengate.saga-u.ac.jp"
-(IPv4 address: 133.49.31.1). FQDN_64 is "opengate.saga-u.ac.jp"(IPv4 address: 192.168.55.1, IPv6 address: 2001:e38:100:100::1).</p>
-
-<p>Makefile</p>
-<ul>
- <li class="list_none">HOSTNAME</li>
- <ul>
- <li>Set FQDN_64</li>
- </ul>
- <li class="list_none">HOSTNAME4</li>
- <ul>
- <li>Set FQDN_4</li>
- </ul>
- <li class="list_none">OPENGATEDIR</li>
- <ul>
- <li>Opengate install directory (from Web top)</li>
- </ul>
- <li class="list_none">HTMLTOP1,HTMLTOP2</li>
- <ul>
- <li>Web top directory</li>
- <li>Web top directory (for HTTPS)</li>
- </ul>
- <li class="list_none">CGIPATH,CGIPROG,CGIURL</li>
- <ul>
- <li>CGI directory</li>
- <li>CGI program name</li>
- <li>URL of CGI program</li>
- </ul>
- <li class="list_none">AUTHCGIPROG,AUTHCGIURL</li>
- <ul>
- <li>Authentication CGI program name</li>
- <li>URL of Authentication CGI program</li>
- </ul>
- <li class="list_none">CONFIGFILE</li>
- <ul>
- <li>Configuration file name</li>
- </ul>
- <li class="list_none">USEFWSCRIPT,FWSCRIPT,FWSCRIPTFILE</li>
- <ul>
- <li>Enable(1) or disable(0) Perl script to control firewall open</li>
- <li>Firewall control Perl script name</li>
- <li>Path to fireall control Perl script</li>
- </ul>
- <li class="list_none">LOCKFILE</li>
- <ul>
- <li>Lock file for exclusive execution</li>
- </ul>
- <li class="list_none">HTMLDOCS,DENYDOC,DENYDOCSSL,ACCEPTDOC,ACCEPTDOC2</li>
- <ul>
- <li>HTML files listing</li>
- <li>HTML file sent at dynying</li>
- <li>HTML file sent at dynying(For HTTPS)</li>
- <li>HTML file sent at accepting</li>
- <li>HTML file sent at accepting in popup window (can chenge this in URL. Refer INFOMATION)</li>
- </ul>
- <li class="list_none">INFOMATION</li>
- <ul>
- <li>Enable(1) or disable(0), Instead of ACCEPTDOC2, Call other URL in popup window</li>
- </ul>
- <li class="list_none">INFOMATIONURL</li>
- <ul>
- <li>URL instead of ACCEPTDOC2</li>
- </ul>
- <li class="list_none">AUTHHTMLJA,AUTHHTMLEN,AUTHHTMLJASSL,AUTHHTMLENSSL</li>
- <ul>
- <li>Authentication HTML file in Japanese</li>
- <li>Authentication HTML file in English</li>
- <li>Authentication HTML file in Japanese (For HTTPS)</li>
- <li>Authentication HTML file in English (For HTTPS)</li>
- <li>When you add other languages, add other languages to "javahtml", add HTMLDOCS, DENYDOC, DENYDOCSSL,
- ACCEPTDOC, ACCEPTDOC2. And edit opengateauth.h, add AUTHMLXX lines.</li>
- </ul>
- <li class="list_none">ARPPATH</li>
- <ul>
- <li>Path to arp command</li>
- </ul>
- <li class="list_none">NDPPAHT</li>
- <ul>
- <li>Path to ndp command</li>
- </ul>
- <li class="list_none">IPFW,IP6FW</li>
- <ul>
- <li>Path to ipfw and ip6fw commands</li>
- </ul>
-</ul>
-
-<p>opengatesrv.h</p>
-
-<ul>
- <li class="list_none">DEBUG</li>
- <ul>
- <li>If set to 1, function call trace log is put out to syslog</li>
- </ul>
- <li class="list_none">DURATIONDEFAULT</li>
- <ul>
- <li>Default time duration to wait for Java Applet connect.(second)
- If no connection in the duration, the network is closed.
- The duration can be changed in auth page by the user.</li>
- </ul>
- <li class="list_none">DURATIONMAX</li>
- <ul>
- <li>Maximum duration to wait for Java Applet connect. (second)
- Under this value, the Applet waiting duration (= duration of
- network open without Java Applet) can be specified by the user
- on the authentication page.
- If user specified duration is not agreeable, set it the same
- value as DURATIONDEFAULT and remove the field in auth page.</li>
- </ul>
- <li class="list_none">ACTIVECHECKINTERVAL</li>
- <ul>
- <li>Time interval of checking the terminal.(second)
- In no java mode, check by MAC address and packet count for the
- terminal's IP address.
- In java mode, check by HELLO exchange and packet count.</li>
- </ul>
- <li class="list_none">COMMWAITTIMEOUT</li>
- <ul>
- <li>Server waiting time for communication reply.(second)</li>
- </ul>
- <li class="list_none">NOREPLYMAX</li>
- <ul>
- <li>Permitted count of no reply to HELLO. If the client does not
- send back HELLO more than NOREPLYMAX times, then the network
- is closed.</li>
- </ul>
- <li class="list_none">NOPAKETINTERVAL</li>
- <ul>
- <li>If no packet is passed for this time interval, then
- the network is closed.(second)</li>
- </ul>
- <li class="list_none">LOCKTIMEOUT</li>
- <ul>
- <li>Maximum locking time for exclusive ipfw action.(second)</li>
- </ul>
- <li class="list_none">IPFWMIN</li>
- <ul>
- <li>Minimum ipfw rule number used by opengate.</li>
- </ul>
- <li class="list_none">IPFWMAX</li>
- <ul>
- <li>Maximum ipfw rule number used by opengate.</li>
- </ul>
- <li class="list_none">IPFWINTERVAL</li>
- <ul>
- <li>Rule number interval used by opengate.
- The maximum terminals/processes can be controled by these value.</li>
- </ul>
- <li class="list_none">PORTMIN</li>
- <ul>
- <li>Minimum port value used by opengate.</li>
- </ul>
- <li class="list_none">PORTMAX</li>
- <ul>
- <li>Maximum port value used by opengate. Set unused port range.</li>
- </ul>
- <li class="list_none">FACILITY</li>
- <ul>
- <li>syslog facility</li>
- </ul>
-</ul>
-
-<p>Compile and Install after finishing the above-mentioned setting.</p>
-
-<table><tr><td><pre>
-#make
-cc -DCONFIGFILE=\"/etc/opengatesrv.conf\"
--DOPENGATEDIR=\"/opengate\" -DDENYDOC=\"deny.html\"
--DDENYDOC=\"deny.html\" -DDENYDOCSSL=\"deny-ssl.html\"
------------------
------------------
------------------
-# make install
-</pre></td></tr></table>
-
-<h5>A.3.3 Setup authentication server<a name="opengate6" href="#opengate6" class="anchor">†</a></h5>
-
-<p>It is described the details of a setting method in a configuration file (opengatesrv.conf).</p>
-
-<div align="right"><a href="#opengate0">top</a></div>
-
-</body>
-</html>
\ No newline at end of file
+++ /dev/null
-<html>
-<head>
-<title>Opegnate Install</title>
-<meta http-equiv="content-type" content="text/html;charset=Shift_JIS">
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">
-</head>
-
-<body bgcolor="#BBEECC">
-
-<!-- Start:Setup ipfw,ip6fw -->
-<h3>B Setup ipfw,ip6fw<a name="ipfw0" href="#ipfw0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#ipfw1">Prepare kernel</a></li>
- <li class="list_num"><a href="#ipfw2">Setup ipfw</a></li>
- <li class="list_num"><a href="#ipfw3">Setup ip6fw</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>B.1 Prepare kernel<a name="ipfw1" href="#ipfw1" class="anchor">†</a></h4>
-
-<p>Prepare kernel having ipfw and ip6fw functions.</p>
-
-<p>Copy kernel options file.</p>
-
-<table><tr><td><pre>
-# cd /usr/src/sys/i386/conf
-# cp GENERIC MYKERNEL
-</pre></td></tr></table>
-
-<p>Add next lines.</p>
-
-<table><tr><td><pre>
-options IPDIVERT
-
-options IPFIREWALL
-options IPFIREWALL_FORWARD
-options IPFIREWALL_VERBOSE
-options IPFIREWALL_VERBOSE_LIMIT=100
-
-options IPV6FIREWALL
-options IPV6FIREWALL_VERBOSE
-options IPV6FIREWALL_VERBOSE_LIMIT=100
-
-options IPSEC
-options IPSEC_ESP
-options TCP_DROP_SYSFIN
-</pre></td></tr></table>
-
-<li>When use NAT, IPDIVERT is necessary.</li>
-<li>When need firewal log, *VERBOSE is necessary.</li>
-<li>When use IPSEC, *IPSEC is nnecessary.</li>
-
-<p>compile and install kernel having ipfw and ip6fw functions.</p>
-
-<table><tr><td><pre>
-# config MYKERNEL
-# cd ../compile/MYKERNEL
-# make depend
-# make
-# make install
-</pre></td></tr></table>
-
-<p>Add next lines to "/etc/rc.conf".</p>
-
-<table><tr><td><pre>
-firewall_enable="YES"
-firewall_script="/etc/rc.firewall"
-
-ipv6_firewall_enable="YES"
-ipv6_firewall_script="/etc/rc.firewall6"
-
-natd_enable="YES"
-natd_interface="em0"
-</pre></td></tr></table>
-
-<p>Validate a ipfw and ip6fw. And setup configuration script path.
-When use NAT, Validate natd and setup natd interface.</p>
-
-<div align="right"><a href="#ipfw0">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>B.2 Setup ipfw<a name="ipfw2" href="#ipfw2" class="anchor">†</a></h4>
-
-<p>Write a rule of ipfw for Opengate. This is example "/etc/rc.firewall".</p>
-
-<table><tr><td><pre>
-### set these to your outside interface network and netmask and ip
-oif="em0"
-onet="192.168.0.0"
-omask="255.255.255.0"
-oip="192.168.0.34"
-
-### set these to your inside interface network and netmask and ip
-iif="bge0"
-inet="192.168.55.0"
-imask="255.255.255.0"
-iip="192.168.55.1"
-
-fwcmd="/sbin/ipfw"
-
-### divert packet to NATD
-$fwcmd add 1 divert natd ip from any to any via ${oif}
-
-### Stop spoofing
-$fwcmd add deny all from ${inet}:${imask} to any in via ${oif}
-$fwcmd add deny all from ${onet}:${omask} to any in via ${iif}
-
-### Stop http from softeather
-$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 80
-$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 443
-
-### Allow from / to myself
-$fwcmd add pass all from ${iip} to any via ${iif}
-$fwcmd add pass all from ${oip} to any via ${oif}
-$fwcmd add pass all from any to ${iip} via ${iif}
-$fwcmd add pass all from any to ${oip} via ${oif}
-
-### Allow DNS queries out in the world
-### (if DNS is on localhost, delete passDNS)
-$fwcmd add pass udp from any 53 to any
-$fwcmd add pass udp from any to any 53
-$fwcmd add pass tcp from any to any 53
-$fwcmd add pass tcp from any 53 to any
-
-### Forwarding http connection from unauth client
-$fwcmd add 60000 fwd localhost tcp from ${inet}:${imask} to any 80
-$fwcmd add 60010 fwd localhost tcp from ${inet}:${imask} to any 443
-
-### Allow TCP through if setup succeeded
-$fwcmd add 60100 pass tcp from any to any established
-</pre></td></tr></table>
-
-<p>Rule number for [forward] Command must be larger than the rule numbers used in opengate(10000-40000).
-Rule number for [divert to natd] must be smaller than most rules.</p>
-
-<p>The file [conf/opengatefw.conf] is the script describing the above rules.
- You can edit and use this script instead of rc.firewall. </p>
-
-<p>Be falimiar with ipfw command. Opengate is a software to send out the ipfw command like above one.</p>
-
-<div align="right"><a href="#ipfw0">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>B.3 Setup ip6fw<a name="ipfw3" href="#ipfw3" class="anchor">†</a></h4>
-
-<p>Write a rule of ip6fw for Opengate. This is example "/etc/rc.firewall6".</p>
-
-<table><tr><td><pre>
-### set these to your outside interface network and prefixlen and ip
-oif="em0"
-onet="2001:e38:3661:1a0::"
-oprefixlen="64"
-oip="2001:e38:3661:1a0::34"
-
-### set these to your inside interface network and prefixlen and ip
-iif="bge0"
-inet="2001:e38:3661:1a5::"
-iprefixlen="64"
-iip="2001:e38:3661:1a5::1"
-
-### path to command "ip6fw"
-fw6cmd="/sbin/ip6fw"
-
-${fw6cmd} add pass all from ${iip} to any
-${fw6cmd} add pass all from any to ${iip}
-${fw6cmd} add pass all from ${oip} to any
-${fw6cmd} add pass all from any to ${oip}
-
-### Allow RA RS NS NA Redirect...
-${fw6cmd} add pass ipv6-icmp from any to any
-
-# Allow IP fragments to pass through
-${fw6cmd} add pass all from any to any frag
-
-# Allow RIPng
-${fw6cmd} add pass udp from fe80::/10 521 to ff02::9 521
-${fw6cmd} add pass udp from fe80::/10 521 to fe80::/10 521
-
-### Allow TCP through if setup succeeded
-${fw6cmd} add 60100 pass tcp from any to any established
-
-# TCP reset notice message
-${fw6cmd} add 60200 reset tcp from any to any 80
-${fw6cmd} add 60300 reset tcp from any to any 443
-</pre></td></tr></table>
-
-<p>ip6fw dose not have [forward] function. Threrfore Opengate waits for
-timeout of IPv6 HTTP request. And uses [forward] function of ipfw.</p>
-
-<p>When use FreeBSD 5.2 more, ip6fw has TCP reset function.
-TCP reset try to send a TCP reset (RST) notice.</p>
-
-<p>The file [conf/opengatefw6.conf] is the script describing the above rules.
- You can edit and use this script instead of rc.firewall6. </p>
-
-<p>Be falimiar with ip6fw command too.</p>
-
-
-<div align="right"><a href="#ipfw0">top</a></div>
-
-</body>
-</html>
\ No newline at end of file
+++ /dev/null
-<html>
-<head>
-<title>Opegnate Install</title>
-<meta http-equiv="Content-Type" content="text/html; charset=shift_jis">
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">
-</head>
-
-<body bgcolor="#BBEECC">
-
-<!-- Start:Install Apache2 -->
-<h3>C Install Apache2<a name="apache0" href="#apache0" class="anchor">†</a></h3>
-<ul>
- <li class="list_num"><a href="#apache1">Install (ports)</a></li>
- <li class="list_num"><a href="#apache2">Install (source)</a></li>
- <li class="list_num"><a href="#apache3">Make Private key, Certificate</a></li>
- <li class="list_num"><a href="#apache4">Setup VirtualHost</a></li>
- <li class="list_num"><a href="#apache5">Setup HTTP_ERROR 404</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>C.1 Install (ports)<a name="apache1" href="#apache1" class="anchor">†</a></h4>
-
-<p>Opengate needs Apache2 supporting IPv6. Because Opengate does authentication, Apache2
-had better support SSL. But you don't have to install mod_ssl because
-Apache2 support SSL with a standard.</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/www/apache2
-# make clean
-===> Cleaning for autoconf-2.53_1
-===> Cleaning for libtool-1.3.5_1
-===> Cleaning for m4-1.4_1
-===> Cleaning for help2man-1.29
-===> Cleaning for expat-1.95.6_1
-===> Cleaning for apache-2.0.48_3
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<p>Add next lines to "/etc/rc.conf"</p>
-
-<table><tr><td><pre>
-apache2_enable="YES"
-apache2ssl_enable="YES"
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>C.2 Install (source)<a name="apache2" href="#apache2" class="anchor">†</a></h4>
-
-<p>You can get a source of Apache2 from "www.apache.org".</p>
-
-<p>Validate a SSL module in configure.</p>
-
-<table><tr><td><pre>
-# tar xvfz httpd-2.0.55.tar.gz
-# cd httpd-2.0.55
-# ./configure --enable-modules="so ssl"
-# make
-# make install
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>C.3 Make private key, certificate<a name="apache3" href="#apache3" class="anchor">†</a></h4>
-
-<p>Make two Private keys and Certificates for Apache2 because Opengate needs
-two FQDNs.</p>
-
-<table><tr><td><pre>
-# cd /usr/local/etc/apache2
-# mkdir ssl.key ssl.crt
-# chmod 700 ssl.key ssl.crt
-
-# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server1.key 1024
-# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server2.key 1024
-</pre></td></tr></table>
-
-<br>
-
-<table><tr><td><pre>
-# /usr/bin/openssl req -new -x509 -days 365 \
- -key /usr/local/etc/apache2/ssl.key/server1.key \
- -out /usr/local/etc/apache2/ssl.crt/server1.crt
-
-You are about to be asked to enter information that will be incorporated
-into your certificate request.
-What you are about to enter is what is called a Distinguished Name or a DN.
-There are quite a few fields but you can leave some blank
-For some fields there will be a default value,
-If you enter '.', the field will be left blank.
------
-Country Name (2 letter code) [AU]:JP
-State or Province Name (full name) [Some-State]:Saga
-Locality Name (eg, city) []:Saga-city
-Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university
-Organizational Unit Name (eg, subsection) []:Information Science
-Common Name (eg, YOUR name) []:opengate.is.saga-u.ac.jp
-Email Address []:administrator@opengate.is.saga-u.ac.jp
-
-Please enter the following 'extra' attributes
-to be sent with your certificate request
-A challenge password []:
-An optional company name []:
-
-# /usr/bin/openssl req -new -x509 -days 365 \
- -key /usr/local/etc/apache2/ssl.key/server2.key \
- -out /usr/local/etc/apache2/ssl.crt/server2.crt
-
-You are about to be asked to enter information that will be incorporated
-into your certificate request.
-What you are about to enter is what is called a Distinguished Name or a DN.
-There are quite a few fields but you can leave some blank
-For some fields there will be a default value,
-If you enter '.', the field will be left blank.
------
-Country Name (2 letter code) [AU]:JP
-State or Province Name (full name) [Some-State]:Saga
-Locality Name (eg, city) []:Saga-city
-Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university
-Organizational Unit Name (eg, subsection) []:Information Science
-Common Name (eg, YOUR name) []:opengate4.is.saga-u.ac.jp
-Email Address []:administrator@opengate.is.saga-u.ac.jp
-
-Please enter the following 'extra' attributes
-to be sent with your certificate request
-A challenge password []:
-An optional company name []:
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">top</a></div>
-
-<!-- ************ 4 ************** -->
-<h4>C.4 Setup VirtualHost<a name="apache4" href="#apache4" class="anchor">†</a></h4>
-
-<p>Name-based virtual hosting cannot be used with SSL secure servers
-because of the nature of the SSL protocol. Therefore, use IP-based virtual host.</p>
-
-<p>Edit httpd.conf and ssl.conf like an example.</p>
-
-<table><tr><td>httpd.conf</td></tr><tr><td><pre>
-NameVirtualHost 192.168.55.1:80
-<VirtualHost 192.168.55.1:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-
-NameVirtualHost [2001:e38:3661:1a5::1]:80
-<VirtualHost [2001:e38:3661:1a5::1]:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-
-NameVirtualHost 192.168.0.34:80
-<VirtualHost 192.168.0.34:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate4.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-</pre></td></tr></table>
-<br>
-<table><tr><td>ssl.conf</td></tr><tr><td><pre>
-NameVirtualHost 192.168.55.1:443
-<VirtualHost 192.168.55.1:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key
-</VirtualHost>
-
-NameVirtualHost [2001:e38:3661:1a5::1]:443
-<VirtualHost [2001:e38:3661:1a5::1]:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key
-</VirtualHost>
-
-NameVirtualHost 192.168.0.34:443
-<VirtualHost 192.168.0.34:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate4.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server2.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server2.key
-</VirtualHost>
-</pre></td></tr></table>
-
-<p>You have to edit other directive. Be familiar with apache2 configuration.</p>
-
-<div align="right"><a href="#apache0">top</a></div>
-
-<!-- ************ 5 ************** -->
-<h4>C.5 Setup HTTP_ERROR 404<a name="apache5" href="#apache5" class="anchor">†</a></h4>
-
-<p>Opengate must always send authentication page for any kind of HTTP request. Therefore
-Add next line "to httpd.conf".</p>
-
-<table><tr><td><pre>
-ErrorDocument 404 /
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">top</a></div>
-
-</body>
-</html>
\ No newline at end of file
+++ /dev/null
-<html>
-<head>
-<title>Opegnate Install</title>
-<meta http-equiv="Content-Type" content="text/html; charset=shift_jis">
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">
-</head>
-
-<body bgcolor="#BBEECC">
-
-<!-- Start:Install isc-dhcp3 -->
-<h3>D Install isc-dhcp3<a name="dhcp0" href="#dhcp0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#dhcp1">Install (ports)</a></li>
- <li class="list_num"><a href="#dhcp2">Setup DHCP</a></li>
-</ul>
-
-<!-- *********** 1 ************* -->
-<h4>D.1 Install (ports)<a name="dhcp1" href="#dhcp1" class="anchor">†</a></h4>
-
-<table><tr><td><pre>
-# cd /usr/ports/net/isc-dhcp3-server
-# make
-===> Cleaning for isc-dhcp3-server-3.0.1.r14_3
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<div align="right"><a href="#dhcp0">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>D.2 Setup DHCP<a name="dhcp2" href="#dhcp2" class="anchor">†</a></h4>
-
-<p>There is "/usr/local/etc/dhcpd.conf.sample" as configuration file after instalation.
-Copy dhcpd.conf.sample to dhcpd.conf and edit configuration file.</p>
-
-<table><tr><td><pre>
-option domain-name "saga-u.ac.jp";
-option domain-name-servers 192.168.0.2;
-option subnet-mask 255.255.255.0;
-option broadcast-address 192.168.55.255;
-option routers 192.168.55.1;
-
-default-lease-time 600;
-max-lease-time 7200;
-ddns-update-style none;
-log-facility local7;
-
-subnet 192.168.55.0 netmask 255.255.255.0 {
- range 192.168.55.100 192.168.55.200;
-}
-</pre></td></tr></table>
-
-<p>Add next lines to "/etc/rc.conf".</p>
-
-<table><tr><td><pre>
-dhcpd_enable="YES"
-dhcpd_ifaces="bge0"
-dhcpd_conf="/usr/local/etc/dhcpd.conf"
-</pre></td></tr></table>
-
-<p>dhcpd_ifaces : interfaces ID that send DHCP.</p>
-
-<div align="right"><a href="#dhcp0">top</a></div>
-
-</body>
-</html>
\ No newline at end of file
+++ /dev/null
-<html>
-<head>
-<title>Opegnate Install</title>
-<meta http-equiv="Content-Type" content="text/html; charset=shift_jis">
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">
-</head>
-
-<body bgcolor="#BBEECC">
-
-<!-- Start:Instal BIND9 -->
-<h3>E Install BIND9<a name="bind0" href="#bind0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#bind1">Install (ports)</a></li>
- <li class="list_num"><a href="#bind2">Make RNDC key</a></li>
- <li class="list_num"><a href="#bind3">Setup named.conf</a></li>
- <li class="list_num"><a href="#bind4">Setup zone</a></li>
- <li class="list_num"><a href="#bind5">Start confirmation</a></li>
-</ul>
-
-<!-- ********** 1 *********** -->
-<h4>E.1 Install (ports)<a name="bind1" href="#bind1" class="anchor">†</a></h4>
-
-<p>Opengate needs two FQDNs. It can be settled even to register FQDN for Opengate with
-existing DNS. When use NAT, you had not better regist an address of IPv4 private network
-with outside DNS.</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/dns/bind9/
-# make clean
-===> Cleaning for bind9-9.3.1
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<p>There is "/etc/namedb(/var/named/etc/namedb)" after installation.</p>
-
-<div align="right"><a href="#bind0">top</a></div>
-
-<!-- ********** 2 ********** -->
-<h4>E.2 Make RNDC key<a name="bind2" href="#bind2" class="anchor">†</a></h4>
-
-<p>BIND9 is controlled by rndc command for security.</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/dnssec-keygen -a hmac-md5 -b 512 -n user rndc
-</pre></td></tr></table>
-<p>When error "out of entropy", try with next method.</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/dnssec-keygen -r /dev/urandom -a hmac-md5 -b 512 -n user rndc
-</pre></td></tr></table>
-
-<ul>
- <li><pre>Krndc.+157+60849.key</pre></li>
- <li><pre>Krndc.+157+60849.private</pre></li>
-</ul>
-
-<p>There is "/usr/local/etc/rndc.conf.sample" after BIND9 installation.
-And copy to "rndc.conf".</p>
-
-<p>Edit "key" directive as like "key" directive of "Krndc.+xxxxxxxx.private.</p>
-
-<table><tr><td><pre>
-options {
- default-server localhost;
- default-key "key";
-};
-
-server localhost {
- key "key";
-};
-
-key "key" {
- algorithm hmac-md5;
- secret "...";
-};
-</pre></td></tr></table>
-
-<div align="right"><a href="#bind0">top</a></div>
-
-<!-- ********* 3 ********* -->
-<h4>E.3 Setup named.conf<a name="bind3" href="#bind3" class="anchor">†</a></h4>
-
-<p>There is "/etc/namedb/named.conf" after installation.</p>
-
-<p>Edit "key" directive as like "key" directive of "rndc.conf"</p>
-
-<table><tr><td><pre>
-key "rndc_key" {
- algorithm hmac-md5;
- secret "...";
-};
-
-controls {
- inet ::1 allow {
- ::1;
- }
- keys {
- "rndc_key";
- };
- inet 127.0.0.1 allow {
- 127.0.0.1;
- }
- keys {
- "rndc_key";
- };
-};
-</pre></td></tr></table>
-
-<p>Write "key" directive in the other file. And you had better include it in "named.conf".
-You can secure security more by setting a permission of the other file adequately.</p>
-
-<p>Edit "options" directive.</p>
-
-<table><tr><td><pre>
-options {
- directory "/etc/namedb";
- pid-file "/var/run/named/named.pid";
- auth-nxdomain yes;
- listen-on-v6 { any; };
-};
-</pre></td></tr></table>
-
-<p>Make a directory to put "named.pid" properly.</p>
-
-<div align="right"><a href="#bind0">top</a></div>
-
-<!-- ******** 4 ********* -->
-<h4>E.4 Setup Zone<a name="bind4" href="#bind4" class="anchor">†</a></h4>
-
-<p>Edit "view" and "zone" directive.</p>
-
-<p>"view" directive is implemented in BIND9. "zone" is child directive of "view".
-BIND9 can choose zone which answers client by a DNS inquiry IP address by setting "view" adequately.</p>
-
-<table><tr><td><pre>
-view "og" {
- match-clients
- {
- 10.0.0.0/16;
- };
-
- recursion yes;
-
- zone "." {
- type hint;
- file "named.root";
- };
-
- zone "og.saga-u.ac.jp" {
- type master;
- file "og.saga-u.ac.jp";
- };
-
- zone "0.0.127.IN-ADDR.ARPA" {
- type master;
- file "master/localhost.rev";
- };
-
- // RFC 3152
- zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\
- 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA" {
- type master;
- file "master/localhost-v6.rev";
- };
-
- // RFC 1886 -- deprecated
- zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\
- 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.INT" {
- type master;
- file "master/localhost-v6.rev";
- };
-};
-</pre></td></tr></table>
-
-<p>Make a "zone" file of domain as "og.saga-u.ac.jp".</p>
-
-<table><tr><td><pre>
-$TTL 3600
-$ORIGIN og.saga-u.ac.jp.
-
-@ IN SOA ns.og.saga-u.ac.jp. postmaster (
- 2005051702 ;
- 3600
- 1200
- 2419200
- 86400 )
- IN NS ns.og.saga-u.ac.jp.
- IN A 10.0.0.2
- IN MX 10 opengate.og.saga-u.ac.jp.
-
-ns IN A 10.0.0.2
-
-opengate IN A 10.0.0.2
- AAAA 2001:2f8:10:1::1
-
-opengate4 IN A 133.49.1.2
-</pre></td></tr></table>
-
-<div align="right"><a href="#bind0">top</a></div>
-
-<!-- ********* 5 ********* -->
-<h4>E.5 Start confirmation<a name="bind5" href="#bind5" class="anchor">†</a></h4>
-
-<p>Confirm starting "named" after setting was completed.</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/named/ -u bind -c /etc/namedb/named.conf
-</pre></td></tr></table>
-
-<p>If "named" starts without a problem, Add next lines to "/etc/rc.conf".</p>
-
-<table><tr><td><pre>
-named_enable="YES"
-named_program="/usr/local/sbin/named"
-named_flags="-u bind -c /etc/namedb/named.conf"
-</pre></td></tr></table>
-
-<p>Because management of a DNS server is too complicatedly, You had better read manual of BIND9 carefully, and
-refer to other document.</p>
-
-<div align="right"><a href="#bind0">top</a></div>
-
-</body>
-</html>
\ No newline at end of file
+++ /dev/null
-<html>
-<head>
-<title>Opegnate Install</title>
-<meta http-equiv="content-type" content="text/html;charset=Shift_JIS">
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">
-</head>
-
-<body bgcolor="#BBEECC">
-
-<!-- Start:Install MRTG -->
-<h3>B MRTG<a name="mrtg0" href="#mrtg0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#mrtg1">Install (ports)</a></li>
- <li class="list_num"><a href="#mrtg2">Setup MRTG</a></li>
- <li class="list_num"><a href="#mrtg3">Start confirmation</a></li>
- <li class="list_num"><a href="#mrtg4">Setup crontab</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>F.1 Install MRTG<a name="mrtg1" href="#mrtg1" class="anchor">†</a></h4>
-
-<p>You can use MRTG to watch a state of Opengate. If you do not wath a state of Opengate, you
-do not have to install MRTG.</p>
-
-<p><a href="http://people.ee.ethz.ch/~oetiker/webtools/mrtg/" target="_blank">MRTG</a>(Multi Router Traffic Grapher) is system to watch network traffic.
-MRTG makes graphic images and HTML files. </p>
-
-<p>You can install MRTG to gateway server or another server. If you must watch plural Opengate, you
-had better install MRTG to another server.</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/net-mgmt/mrtg/
-# make clean
-===> Cleaning for mrtg-2.12.2,1
-# make install clean ; rehash
-</pre></td></tr></table>
-
-
-<!-- ************ 2 ************** -->
-<h4>F.2 Setup MRTG<a name="mrtg2" href="#mrtg2" class="anchor">†</a></h4>
-
-<p>There is "/usr/local/etc/mrtg/mrtg.cfg.sample" as configuration file after instalation.
-Copy mrtg.cfg.sample to opengate.cfg and edit configuration file.</p>
-
-<table><tr><td><pre>
-##################################################
-# opengate user counter
-
-WorkDir: /usr/home/user/public_html/mrtg/opengate/
-
-##### Options
-Options[^]: growright,gauge,nopercent,integer
-
-Target[opengate]:`/usr/home/user/bin/input.sh`
-Title[opengate]: Opengate user counter
-
-PageTop[opengate]: <h1>Opengate user counter</h1>
- <p>Show the number of people using Opengate</p>
-
-# Max Number
-MaxBytes[opengate]: 200
-
-# Title of Y axis
-YLegend[opengate]: Opengate User
-# unit
-ShortLegend[opengate]: s
-# Title of graph LegendI: first line LegendO: second line
-LegendI[opengate]: IPv6 Users
-LegendO[opengate]: Total Users
-</pre></td></tr></table>
-
-<p>make a directory which you appointed in "WorkDir". MRTG makes graphic images and HTML files in WorkDir.</p>
-
-<p>"Target[opengate]" is path to program to hand data to MRTG. explain below th details.</p>
-
-
-
-<h5>F.2.1 Case of gateway server<a name="mrtg21" href="#mrtg21" class="anchor">†</a></h5>
-
-<p>Put this shellscript as "/usr/home/user/bin/input.sh".</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## shwo opengate status for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-LANG=C
-COLUMNS=256
-
-export LANG
-export COLUMNS
-
-### IPv6 prefix
-prefix="2001:2f8:22:801:"
-
-### opengate process name
-process="opengatesrv.cgi"
-
-### tmp file name
-tmp_all="/tmp/og_count_all.tmp"
-tmp_6="/tmp/og_count_6.tmp"
-
-######################################################
-
-ps ax | grep $process > $tmp_all
-COUNT=`wc -l $tmp_all | awk '{print $1}'`
-grep $prefix $tmp_all > $tmp_6
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`
-UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`
-
-rm $tmp_all
-rm $tmp_6
-
-echo "$COUNT6"
-echo "$COUNT"
-echo "$UPTIME"
-echo "Opengate User Counter"
-</pre></td></tr></table>
-
-<p>carry out this shell script alone and confirm that you can acquire the following data.</p>
-
-<table><tr><td><pre>
-5
-48
-10days
-Opengate User Counter
-</pre></td></tr></table>
-
-
-<h5>F.2.2 Case of another server<a name="mrtg22" href="#mrtg22" class="anchor">†</a></h5>
-
-<p>Put this shellscript as "/usr/home/user/bin/input.sh" on another server.</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## input data for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-# tmp file name
-file="/tmp/opengate.tmp"
-
-# URL of output.sh at opengate
-url="http://opengate.saga-u.ac.jp/cgi-bin/output.sh"
-
-fetch -o $file $url &> /dev/null
-
-more $file
-</pre></td></tr></table>
-
-<p>Put this shell script as "/usr/local/apache2/cgi-bin/output.sh" on Opengate server.
-And set this URL to $url in script explained by the above.</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## shwo opengate status for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-LANG=C
-COLUMNS=256
-
-export LANG
-export COLUMNS
-
-### IPv6 prefix
-prefix="2001:2f8:22:801:"
-
-### opengate process name
-process="opengatesrv.cgi"
-
-### tmp file name
-tmp_all="/tmp/og_count_all.tmp"
-tmp_6="/tmp/og_count_6.tmp"
-
-######################################################3
-
-ps ax | grep $process > $tmp_all
-COUNT=`wc -l $tmp_all | awk '{print $1}'`
-grep $prefix $tmp_all > $tmp_6
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`
-UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`
-rm $tmp_all
-rm $tmp_6
-
-echo "Content-type: text/plain; charset=iso-8859-1"
-echo
-
-echo "$COUNT6"
-echo "$COUNT"
-echo "$UPTIME"
-echo "Opengate User Counter"
-</pre></td></tr></table>
-
-<p>carry out "input.sh" shell script on another server and confirm that you can acquire the following data.</p>
-
-<table><tr><td><pre>
-5
-48
-10days
-Opengate User Counter
-</pre></td></tr></table>
-
-<!-- ************ 3 ************** -->
-<h4>F.3 Start confirmation<a name="mrtg3" href="#mrtg3" class="anchor">†</a></h4>
-
-<p>Confirm after setting was completed.</p>
-
-<table><tr><td><pre>
-# /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg
-</pre></td></tr></table>
-
-<p>Various WARNING is output the first time and second.</p>
-
-<p>There is some files in "WorkDir".</p>
-
-<table><tr><td><pre>
-> ls -l
--rw-r--r-- 1 root wheel 538 12 14 04:40 mrtg-l.png
--rw-r--r-- 1 root wheel 414 12 14 04:40 mrtg-m.png
--rw-r--r-- 1 root wheel 1759 12 14 04:40 mrtg-r.png
--rw-r--r-- 1 root wheel 2941 12 20 15:15 opengate-day.png
--rw-r--r-- 1 root wheel 2146 12 20 14:35 opengate-month.png
--rw-r--r-- 1 root wheel 2867 12 20 14:55 opengate-week.png
--rw-r--r-- 1 root wheel 1897 12 20 05:00 opengate-year.png
--rw-r--r-- 1 root wheel 5961 12 20 15:15 opengate.html
--rw-r--r-- 1 root wheel 48786 12 20 15:15 opengate.log
--rw-r--r-- 1 root wheel 48784 12 20 15:10 opengate.old
-</pre></td></tr></table>
-
-<!-- ************ 4 ************** -->
-<h4>F.4 Setup crontab<a name="mrtg4" href="#mrtg4" class="anchor">†</a></h4>
-
-<p>Add next line to "/etc/crontab".</p>
-
-<table><tr><td><pre>
-*/5 * * * * root /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">top</a></div>
-
-</body>
-</html>
+++ /dev/null
-<html>
-<head>
-<title>Opegnate Install</title>
-<meta http-equiv="content-type" content="text/html">
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">
-</head>
-
-<body bgcolor="#BBEECC">
-
-<h2>Opengate Install Procedure<a name="top" href="#top" class="anchor">†</a></h2>
-
-<!-- Start:Content Table -->
-<ul>
- <li class="list_alpha"><a href="#opengate0">Opengate Install Procedure</a></li>
- <ul>
- <li class="list_num"><a href="#opengate1">Install Procedure</a></li>
- <li class="list_num"><a href="#opengate2">Install FreeBSD</a></li>
- <li class="list_num"><a href="#opengate3">Install Opengate</a></li>
- </ul>
- <li class="list_alpha"><a href="#ipfw0">Setup ipfw,ip6fw</a></li>
- <ul>
- <li class="list_num"><a href="#ipfw1">Prepare Kernel</a></li>
- <li class="list_num"><a href="#ipfw2">Setup ipfw</a></li>
- <li class="list_num"><a href="#ipfw3">Setup ip6fw</a></li>
- </ul>
- <li class="list_alpha"><a href="#apache0">Install Apache2</a></li>
- <ul>
- <li class="list_num"><a href="#apache1">Install (ports)</a></li>
- <li class="list_num"><a href="#apache2">Install (source)</a></li>
- <li class="list_num"><a href="#apache3">Make ricate key, Certificate</a></li>
- <li class="list_num"><a href="#apache4">Setup VirtualHost</a></li>
- <li class="list_num"><a href="#apache5">Setup HTTP_ERROR 404</a></li>
- </ul>
- <li class="list_alpha"><a href="#dhcp0">Install isc-dhcp3</a></li>
- <ul>
- <li class="list_num"><a href="#dhcp1">Install (ports)</a></li>
- <li class="list_num"><a href="#dhcp2">Setup dhcpd.conf</a></li>
- </ul>
- <li class="list_alpha"><a href="#bind0">Install BIND9</a></li>
- <ul>
- <li class="list_num"><a href="#bind1">Install (ports)</a></li>
- <li class="list_num"><a href="#bind2">Make RNDC key</a></li>
- <li class="list_num"><a href="#bind3">Setup named.conf</a></li>
- <li class="list_num"><a href="#bind4">Setup Zone</a></li>
- <li class="list_num"><a href="#bind5">Start confirmation</a></li>
- </ul>
- <li class="list_alpha"><a href="#mrtg0">Install MRTG</a></li>
- <ul>
- <li class="list_num"><a href="#mrtg1">Install (ports)</a></li>
- <li class="list_num"><a href="#mrtg2">Setup MRTG</a></li>
- <li class="list_num"><a href="#mrtg3">Start confirmation</a></li>
- <li class="list_num"><a href="#mrtg4">Setup crontab</a></li>
- </ul>
-</ul>
-
-<!-- End:Content Table -->
-<hr>
-
-<!-- Start:Install Opengate -->
-<h3>A Install Opegnate<a name="opengate0" href="#opengate0" class="anchor">†</a></h3>
-<ul>
- <li class="list_num"><a href="#opengate1">Install Procedure</a></li>
- <li class="list_num"><a href="#opengate2">Install FreeBSD</a></li>
- <li class="list_num"><a href="#opengate3">Install Opengate</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>A.1 Install Procedure<a name="opengate1" href="#opengate1" class="anchor">†</a></h4>
-
-<p>List of Install Procedure.(*:Necessary by all means)</p>
-
-<ul>
- <li class="list_num">Gateway Machine *</li>
- <li class="list_num">Install FreeBSD *</li>
- <li class="list_num">Prepare kernel *</li>
- <li class="list_num">Setup ipfw,ip6fw *</li>
- <li class="list_num">Setup NAT</li>
- <li class="list_num">Install Apache2 *</li>
- <li class="list_num">Install DHCP</li>
- <li class="list_num">Install BIND9</li>
-</ul>
-
-<div align="right"><a href="#opengate0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>A.2 Install FreeBSD<a name="opengate2" href="#opengate2" class="anchor">†</a></h4>
-
-<ul>
- <li>Gateway Machine</li>
- <uL>
- <li>FreeBSD Ver 4.x, 5.x, or 6.x</li>
- <li>Having Two more EtherBoard</li>
- </uL>
-</ul>
-
-<p>Choose distribution Developer(Full sorces, binaries and doc), because we have to prepare a kernel.</p>
-<p>Add next line to "/etc/rc.conf", because you validate a function of a gateway.</p>
-
-<table>
-<td><code>gateway_enable="YES"</code></td>
-</table>
-
-<div align="right"><a href="#opengate0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>A.3 Install Opengate<a name="opengate3" href="#opengate3" class="anchor">†</a></h4>
-
-<h5>A.3.1 Package of Opengate<a name="opengate4" href="#opengate4" class="anchor">†</a></h5>
-
-<p>Unfolds the latest package of Opengate. It have next directory.</p>
-
-<table>
-<tr><td>
-<pre>
-doc\81FDocumentations
-conf\81Fconfiguration file sample and firewall control perl script sample
-javahtml\81FClient Java Programs and HTML files
-opengatesrv\81FServer CGI program
-</pre>
-</td></tr>
-</table>
-
-<h5>A.3.2 Compile<a name="opengate5" href="#opengate5" class="anchor">†</a></h5>
-
-<p>Edit Makefile and opengatesrv.h in opengatesrv before carry out compile.</p>
-<p>Opengate needs tow FQDNs(FQDN_4 and FQDN_64). For example, FQDN_4 is "opengate.saga-u.ac.jp"
-(IPv4 address: 133.49.31.1). FQDN_64 is "opengate.saga-u.ac.jp"(IPv4 address: 192.168.55.1, IPv6 address: 2001:e38:100:100::1).</p>
-
-<p>Makefile</p>
-<ul>
- <li class="list_none">HOSTNAME</li>
- <ul>
- <li>Set FQDN_64</li>
- </ul>
- <li class="list_none">HOSTNAME4</li>
- <ul>
- <li>Set FQDN_4</li>
- </ul>
- <li class="list_none">OPENGATEDIR</li>
- <ul>
- <li>Opengate install directory (from Web top)</li>
- </ul>
- <li class="list_none">HTMLTOP1,HTMLTOP2</li>
- <ul>
- <li>Web top directory</li>
- <li>Web top directory (for HTTPS)</li>
- </ul>
- <li class="list_none">CGIPATH,CGIPROG,CGIURL</li>
- <ul>
- <li>CGI directory</li>
- <li>CGI program name</li>
- <li>URL of CGI program</li>
- </ul>
- <li class="list_none">AUTHCGIPROG,AUTHCGIURL</li>
- <ul>
- <li>Authentication CGI program name</li>
- <li>URL of Authentication CGI program</li>
- </ul>
- <li class="list_none">CONFIGFILE</li>
- <ul>
- <li>Configuration file name</li>
- </ul>
- <li class="list_none">USEFWSCRIPT,FWSCRIPT,FWSCRIPTFILE</li>
- <ul>
- <li>Enable(1) or disable(0) Perl script to control firewall open</li>
- <li>Firewall control Perl script name</li>
- <li>Path to fireall control Perl script</li>
- </ul>
- <li class="list_none">LOCKFILE</li>
- <ul>
- <li>Lock file for exclusive execution</li>
- </ul>
- <li class="list_none">HTMLDOCS,DENYDOC,DENYDOCSSL,ACCEPTDOC,ACCEPTDOC2</li>
- <ul>
- <li>HTML files listing</li>
- <li>HTML file sent at dynying</li>
- <li>HTML file sent at dynying(For HTTPS)</li>
- <li>HTML file sent at accepting</li>
- <li>HTML file sent at accepting in popup window (can chenge this in URL. Refer INFOMATION)</li>
- </ul>
- <li class="list_none">INFOMATION</li>
- <ul>
- <li>Enable(1) or disable(0), Instead of ACCEPTDOC2, Call other URL in popup window</li>
- </ul>
- <li class="list_none">INFOMATIONURL</li>
- <ul>
- <li>URL instead of ACCEPTDOC2</li>
- </ul>
- <li class="list_none">AUTHHTMLJA,AUTHHTMLEN,AUTHHTMLJASSL,AUTHHTMLENSSL</li>
- <ul>
- <li>Authentication HTML file in Japanese</li>
- <li>Authentication HTML file in English</li>
- <li>Authentication HTML file in Japanese (For HTTPS)</li>
- <li>Authentication HTML file in English (For HTTPS)</li>
- <li>When you add other languages, add other languages to "javahtml", add HTMLDOCS, DENYDOC, DENYDOCSSL,
- ACCEPTDOC, ACCEPTDOC2. And edit opengateauth.h, add AUTHMLXX lines.</li>
- </ul>
- <li class="list_none">ARPPATH</li>
- <ul>
- <li>Path to arp command</li>
- </ul>
- <li class="list_none">NDPPAHT</li>
- <ul>
- <li>Path to ndp command</li>
- </ul>
- <li class="list_none">IPFW,IP6FW</li>
- <ul>
- <li>Path to ipfw and ip6fw commands</li>
- </ul>
-</ul>
-
-<p>opengatesrv.h</p>
-
-<ul>
- <li class="list_none">DEBUG</li>
- <ul>
- <li>If set to 1, function call trace log is put out to syslog</li>
- </ul>
- <li class="list_none">DURATIONDEFAULT</li>
- <ul>
- <li>Default time duration to wait for Java Applet connect.(second)
- If no connection in the duration, the network is closed.
- The duration can be changed in auth page by the user.</li>
- </ul>
- <li class="list_none">DURATIONMAX</li>
- <ul>
- <li>Maximum duration to wait for Java Applet connect. (second)
- Under this value, the Applet waiting duration (= duration of
- network open without Java Applet) can be specified by the user
- on the authentication page.
- If user specified duration is not agreeable, set it the same
- value as DURATIONDEFAULT and remove the field in auth page.</li>
- </ul>
- <li class="list_none">ACTIVECHECKINTERVAL</li>
- <ul>
- <li>Time interval of checking the terminal.(second)
- In no java mode, check by MAC address and packet count for the
- terminal's IP address.
- In java mode, check by HELLO exchange and packet count.</li>
- </ul>
- <li class="list_none">COMMWAITTIMEOUT</li>
- <ul>
- <li>Server waiting time for communication reply.(second)</li>
- </ul>
- <li class="list_none">NOREPLYMAX</li>
- <ul>
- <li>Permitted count of no reply to HELLO. If the client does not
- send back HELLO more than NOREPLYMAX times, then the network
- is closed.</li>
- </ul>
- <li class="list_none">NOPAKETINTERVAL</li>
- <ul>
- <li>If no packet is passed for this time interval, then
- the network is closed.(second)</li>
- </ul>
- <li class="list_none">LOCKTIMEOUT</li>
- <ul>
- <li>Maximum locking time for exclusive ipfw action.(second)</li>
- </ul>
- <li class="list_none">IPFWMIN</li>
- <ul>
- <li>Minimum ipfw rule number used by opengate.</li>
- </ul>
- <li class="list_none">IPFWMAX</li>
- <ul>
- <li>Maximum ipfw rule number used by opengate.</li>
- </ul>
- <li class="list_none">IPFWINTERVAL</li>
- <ul>
- <li>Rule number interval used by opengate.
- The maximum terminals/processes can be controled by these value.</li>
- </ul>
- <li class="list_none">PORTMIN</li>
- <ul>
- <li>Minimum port value used by opengate.</li>
- </ul>
- <li class="list_none">PORTMAX</li>
- <ul>
- <li>Maximum port value used by opengate. Set unused port range.</li>
- </ul>
- <li class="list_none">FACILITY</li>
- <ul>
- <li>syslog facility</li>
- </ul>
-</ul>
-
-<p>Compile and Install after finishing the above-mentioned setting.</p>
-
-<table><tr><td><pre>
-#make
-cc -DCONFIGFILE=\"/etc/opengatesrv.conf\"
--DOPENGATEDIR=\"/opengate\" -DDENYDOC=\"deny.html\"
--DDENYDOC=\"deny.html\" -DDENYDOCSSL=\"deny-ssl.html\"
------------------
------------------
------------------
-# make install
-</pre></td></tr></table>
-
-<h5>A.3.3 Setup authentication server<a name="opengate6" href="#opengate6" class="anchor">†</a></h5>
-
-<p>It is described the details of a setting method in a configuration file (opengatesrv.conf).</p>
-
-<div align="right"><a href="#opengate0">back</a> <a href="#top">top</a></div>
-
-<hr>
-<!-- Start:Setup ipfw,ip6fw -->
-<h3>B Setup ipfw,ip6fw<a name="ipfw0" href="#ipfw0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#ipfw1">Prepare kernel</a></li>
- <li class="list_num"><a href="#ipfw2">Setup ipfw</a></li>
- <li class="list_num"><a href="#ipfw3">Setup ip6fw</a></li>
-</ul>
-
-
-<!-- ************ 1 ************** -->
-<h4>B.1 Prepare kernel<a name="ipfw1" href="#ipfw1" class="anchor">†</a></h4>
-
-<p>Prepare kernel having ipfw and ip6fw functions.</p>
-
-<p>Copy kernel options file.</p>
-
-<table><tr><td><pre>
-# cd /usr/src/sys/i386/conf
-# cp GENERIC MYKERNEL
-</pre></td></tr></table>
-
-<p>Add next lines.</p>
-
-<table><tr><td><pre>
-options IPDIVERT
-
-options IPFIREWALL
-options IPFIREWALL_FORWARD
-options IPFIREWALL_VERBOSE
-options IPFIREWALL_VERBOSE_LIMIT=100
-
-options IPV6FIREWALL
-options IPV6FIREWALL_VERBOSE
-options IPV6FIREWALL_VERBOSE_LIMIT=100
-
-options IPSEC
-options IPSEC_ESP
-options TCP_DROP_SYSFIN
-</pre></td></tr></table>
-
-<li>When use NAT, IPDIVERT is necessary.</li>
-<li>When need firewal log, *VERBOSE is necessary.</li>
-<li>When use IPSEC, *IPSEC is nnecessary.</li>
-
-<p>compile and install kernel having ipfw and ip6fw functions.</p>
-
-<table><tr><td><pre>
-# config MYKERNEL
-# cd ../compile/MYKERNEL
-# make depend
-# make
-# make install
-</pre></td></tr></table>
-
-<p>Add next lines to "/etc/rc.conf".</p>
-
-<table><tr><td><pre>
-firewall_enable="YES"
-firewall_script="/etc/rc.firewall"
-
-ipv6_firewall_enable="YES"
-ipv6_firewall_script="/etc/rc.firewall6"
-
-natd_enable="YES"
-natd_interface="em0"
-</pre></td></tr></table>
-
-<p>Validate a ipfw and ip6fw. And setup configuration script path.
-When use NAT, Validate natd and setup natd interface.</p>
-
-<div align="right"><a href="#ipfw0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>B.2 Setup ipfw<a name="ipfw2" href="#ipfw2" class="anchor">†</a></h4>
-
-<p>Write a rule of ipfw for Opengate. This is example "/etc/rc.firewall".</p>
-
-<table><tr><td><pre>
-### set these to your outside interface network and netmask and ip
-oif="em0"
-onet="192.168.0.0"
-omask="255.255.255.0"
-oip="192.168.0.34"
-
-### set these to your inside interface network and netmask and ip
-iif="bge0"
-inet="192.168.55.0"
-imask="255.255.255.0"
-iip="192.168.55.1"
-
-fwcmd="/sbin/ipfw"
-
-### divert packet to NATD
-$fwcmd add 1 divert natd ip from any to any via ${oif}
-
-### Stop spoofing
-$fwcmd add deny all from ${inet}:${imask} to any in via ${oif}
-$fwcmd add deny all from ${onet}:${omask} to any in via ${iif}
-
-### Stop http from softeather
-$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 80
-$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 443
-
-### Allow from / to myself
-$fwcmd add pass all from ${iip} to any via ${iif}
-$fwcmd add pass all from ${oip} to any via ${oif}
-$fwcmd add pass all from any to ${iip} via ${iif}
-$fwcmd add pass all from any to ${oip} via ${oif}
-
-### Allow DNS queries out in the world
-### (if DNS is on localhost, delete passDNS)
-$fwcmd add pass udp from any 53 to any
-$fwcmd add pass udp from any to any 53
-$fwcmd add pass tcp from any to any 53
-$fwcmd add pass tcp from any 53 to any
-
-### Forwarding http connection from unauth client
-$fwcmd add 60000 fwd localhost tcp from ${inet}:${imask} to any 80
-$fwcmd add 60010 fwd localhost tcp from ${inet}:${imask} to any 443
-
-### Allow TCP through if setup succeeded
-$fwcmd add 60100 pass tcp from any to any established
-</pre></td></tr></table>
-
-<p>Rule number for [forward] Command must be larger than the rule numbers used in opengate(10000-40000).
-Rule number for [divert to natd] must be smaller than most rules.</p>
-
-<p>The file [conf/opengatefw.conf] is the script describing the above rules.
- You can edit and use this script instead of rc.firewall. </p>
-
-<p>Be falimiar with ipfw command. Opengate is a software to send out the ipfw command like above one.</p>
-
-<div align="right"><a href="#ipfw0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>B.3 Setup ip6fw<a name="ipfw3" href="#ipfw3" class="anchor">†</a></h4>
-
-<p>Write a rule of ip6fw for Opengate. This is example "/etc/rc.firewall6".</p>
-
-<table><tr><td><pre>
-### set these to your outside interface network and prefixlen and ip
-oif="em0"
-onet="2001:e38:3661:1a0::"
-oprefixlen="64"
-oip="2001:e38:3661:1a0::34"
-
-### set these to your inside interface network and prefixlen and ip
-iif="bge0"
-inet="2001:e38:3661:1a5::"
-iprefixlen="64"
-iip="2001:e38:3661:1a5::1"
-
-### path to command "ip6fw"
-fw6cmd="/sbin/ip6fw"
-
-${fw6cmd} add pass all from ${iip} to any
-${fw6cmd} add pass all from any to ${iip}
-${fw6cmd} add pass all from ${oip} to any
-${fw6cmd} add pass all from any to ${oip}
-
-### Allow RA RS NS NA Redirect...
-${fw6cmd} add pass ipv6-icmp from any to any
-
-# Allow IP fragments to pass through
-${fw6cmd} add pass all from any to any frag
-
-# Allow RIPng
-${fw6cmd} add pass udp from fe80::/10 521 to ff02::9 521
-${fw6cmd} add pass udp from fe80::/10 521 to fe80::/10 521
-
-### Allow TCP through if setup succeeded
-${fw6cmd} add 60100 pass tcp from any to any established
-
-# TCP reset notice message
-${fw6cmd} add 60200 reset tcp from any to any 80
-${fw6cmd} add 60300 reset tcp from any to any 443
-</pre></td></tr></table>
-
-<p>ip6fw dose not have [forward] function. Threrfore Opengate waits for
-timeout of IPv6 HTTP request. And uses [forward] function of ipfw.</p>
-
-<p>When use FreeBSD 5.2 more, ip6fw has TCP reset function.
-TCP reset try to send a TCP reset (RST) notice.</p>
-
-<p>The file [conf/opengatefw6.conf] is the script describing the above rules.
- You can edit and use this script instead of rc.firewall6. </p>
-
-<p>Be falimiar with ip6fw command too.</p>
-
-<div align="right"><a href="#ipfw0">back</a> <a href="#top">top</a></div>
-
-<hr>
-<!-- Start:Install Apache2 -->
-<h3>C Install Apache2<a name="apache0" href="#apache0" class="anchor">†</a></h3>
-<ul>
- <li class="list_num"><a href="#apache1">Install (ports)</a></li>
- <li class="list_num"><a href="#apache2">Install (source)</a></li>
- <li class="list_num"><a href="#apache3">Make Private key, Certificate</a></li>
- <li class="list_num"><a href="#apache4">Setup VirtualHost</a></li>
- <li class="list_num"><a href="#apache5">Setup HTTP_ERROR 404</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>C.1 Install (ports)<a name="apache1" href="#apache1" class="anchor">†</a></h4>
-
-<p>Opengate needs Apache2 supporting IPv6. Because Opengate does authentication, Apache2
-had better support SSL. But you don't have to install mod_ssl because
-Apache2 support SSL with a standard.</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/www/apache2
-# make clean
-===> Cleaning for autoconf-2.53_1
-===> Cleaning for libtool-1.3.5_1
-===> Cleaning for m4-1.4_1
-===> Cleaning for help2man-1.29
-===> Cleaning for expat-1.95.6_1
-===> Cleaning for apache-2.0.48_3
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<p>Add next lines to "/etc/rc.conf"</p>
-
-<table><tr><td><pre>
-apache2_enable="YES"
-apache2ssl_enable="YES"
-</pre></td></tr></table>
-
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>C.2 Install (source)<a name="apache2" href="#apache2" class="anchor">†</a></h4>
-
-<p>You can get a source of Apache2 from "www.apache.org".</p>
-
-<p>Validate a SSL module in configure.</p>
-
-<table><tr><td><pre>
-# tar xvfz httpd-2.0.55.tar.gz
-# cd httpd-2.0.55
-# ./configure --enable-modules="so ssl"
-# make
-# make install
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>C.3 Make private key, certificate<a name="apache3" href="#apache3" class="anchor">†</a></h4>
-
-<p>Make two Private keys and Certificates for Apache2 because Opengate needs
-two FQDNs.</p>
-
-<table><tr><td><pre>
-# cd /usr/local/etc/apache2
-# mkdir ssl.key ssl.crt
-# chmod 700 ssl.key ssl.crt
-
-# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server1.key 1024
-# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server2.key 1024
-</pre></td></tr></table>
-
-<br>
-
-<table><tr><td><pre>
-# /usr/bin/openssl req -new -x509 -days 365 \
- -key /usr/local/etc/apache2/ssl.key/server1.key \
- -out /usr/local/etc/apache2/ssl.crt/server1.crt
-
-You are about to be asked to enter information that will be incorporated
-into your certificate request.
-What you are about to enter is what is called a Distinguished Name or a DN.
-There are quite a few fields but you can leave some blank
-For some fields there will be a default value,
-If you enter '.', the field will be left blank.
------
-Country Name (2 letter code) [AU]:JP
-State or Province Name (full name) [Some-State]:Saga
-Locality Name (eg, city) []:Saga-city
-Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university
-Organizational Unit Name (eg, subsection) []:Information Science
-Common Name (eg, YOUR name) []:opengate.is.saga-u.ac.jp
-Email Address []:administrator@opengate.is.saga-u.ac.jp
-
-Please enter the following 'extra' attributes
-to be sent with your certificate request
-A challenge password []:
-An optional company name []:
-
-# /usr/bin/openssl req -new -x509 -days 365 \
- -key /usr/local/etc/apache2/ssl.key/server2.key \
- -out /usr/local/etc/apache2/ssl.crt/server2.crt
-
-You are about to be asked to enter information that will be incorporated
-into your certificate request.
-What you are about to enter is what is called a Distinguished Name or a DN.
-There are quite a few fields but you can leave some blank
-For some fields there will be a default value,
-If you enter '.', the field will be left blank.
------
-Country Name (2 letter code) [AU]:JP
-State or Province Name (full name) [Some-State]:Saga
-Locality Name (eg, city) []:Saga-city
-Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university
-Organizational Unit Name (eg, subsection) []:Information Science
-Common Name (eg, YOUR name) []:opengate4.is.saga-u.ac.jp
-Email Address []:administrator@opengate.is.saga-u.ac.jp
-
-Please enter the following 'extra' attributes
-to be sent with your certificate request
-A challenge password []:
-An optional company name []:
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 4 ************** -->
-<h4>C.4 Setup VirtualHost<a name="apache4" href="#apache4" class="anchor">†</a></h4>
-
-<p>Name-based virtual hosting cannot be used with SSL secure servers
-because of the nature of the SSL protocol. Therefore, use IP-based virtual host.</p>
-
-<p>Edit httpd.conf and ssl.conf like an example.</p>
-
-<table><tr><td>httpd.conf</td></tr><tr><td><pre>
-NameVirtualHost 192.168.55.1:80
-<VirtualHost 192.168.55.1:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-
-NameVirtualHost [2001:e38:3661:1a5::1]:80
-<VirtualHost [2001:e38:3661:1a5::1]:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-
-NameVirtualHost 192.168.0.34:80
-<VirtualHost 192.168.0.34:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate4.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-</pre></td></tr></table>
-<br>
-<table><tr><td>ssl.conf</td></tr><tr><td><pre>
-NameVirtualHost 192.168.55.1:443
-<VirtualHost 192.168.55.1:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key
-</VirtualHost>
-
-NameVirtualHost [2001:e38:3661:1a5::1]:443
-<VirtualHost [2001:e38:3661:1a5::1]:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key
-</VirtualHost>
-
-NameVirtualHost 192.168.0.34:443
-<VirtualHost 192.168.0.34:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate4.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server2.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server2.key
-</VirtualHost>
-</pre></td></tr></table>
-
-<p>You have to edit other directive. Be familiar with apache2 configuration.</p>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 5 ************** -->
-<h4>C.5 Setup HTTP_ERROR 404<a name="apache5" href="#apache5" class="anchor">†</a></h4>
-
-<p>Opengate must always send authentication page for any kind of HTTP request. Therefore
-Add next line "to httpd.conf".</p>
-
-<table><tr><td><pre>
-ErrorDocument 404 /
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<hr>
-
-<!-- Start:Install isc-dhcp3 -->
-<h3>D Install isc-dhcp3<a name="dhcp0" href="#dhcp0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#dhcp1">Install (ports)</a></li>
- <li class="list_num"><a href="#dhcp2">Setup DHCP</a></li>
-</ul>
-
-
-<!-- *********** 1 ************* -->
-<h4>D.1 Install (ports)<a name="dhcp1" href="#dhcp1" class="anchor">†</a></h4>
-
-<table><tr><td><pre>
-# cd /usr/ports/net/isc-dhcp3-server
-# make
-===> Cleaning for isc-dhcp3-server-3.0.1.r14_3
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<div align="right"><a href="#dhcp0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>D.2 Setup DHCP<a name="dhcp2" href="#dhcp2" class="anchor">†</a></h4>
-
-<p>There is "/usr/local/etc/dhcpd.conf.sample" as configuration file after instalation.
-Copy dhcpd.conf.sample to dhcpd.conf and edit configuration file.</p>
-
-<table><tr><td><pre>
-option domain-name "saga-u.ac.jp";
-option domain-name-servers 192.168.0.2;
-option subnet-mask 255.255.255.0;
-option broadcast-address 192.168.55.255;
-option routers 192.168.55.1;
-
-default-lease-time 600;
-max-lease-time 7200;
-ddns-update-style none;
-log-facility local7;
-
-subnet 192.168.55.0 netmask 255.255.255.0 {
- range 192.168.55.100 192.168.55.200;
-}
-</pre></td></tr></table>
-
-<p>Add next lines to "/etc/rc.conf".</p>
-
-<table><tr><td><pre>
-dhcpd_enable="YES"
-dhcpd_ifaces="bge0"
-dhcpd_conf="/usr/local/etc/dhcpd.conf"
-</pre></td></tr></table>
-
-<p>dhcpd_ifaces : interfaces ID that send DHCP.</p>
-
-<div align="right"><a href="#dhcp0">back</a> <a href="#top">top</a></div>
-
-<hr>
-<!-- Start:Instal BIND9 -->
-<h3>E Install BIND9<a name="bind0" href="#bind0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#bind1">Install (ports)</a></li>
- <li class="list_num"><a href="#bind2">Make RNDC key</a></li>
- <li class="list_num"><a href="#bind3">Setup named.conf</a></li>
- <li class="list_num"><a href="#bind4">Setup zone</a></li>
- <li class="list_num"><a href="#bind5">Start confirmation</a></li>
-</ul>
-
-<!-- ********** 1 *********** -->
-<h4>E.1 Install (ports)<a name="bind1" href="#bind1" class="anchor">†</a></h4>
-
-<p>Opengate needs two FQDNs. It can be settled even to register FQDN for Opengate with
-existing DNS. When use NAT, you had not better regist an address of IPv4 private network
-with outside DNS.</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/dns/bind9/
-# make clean
-===> Cleaning for bind9-9.3.1
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<p>There is "/etc/namedb(/var/named/etc/namedb)" after installation.</p>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ********** 2 ********** -->
-<h4>E.2 Make RNDC key<a name="bind2" href="#bind2" class="anchor">†</a></h4>
-
-<p>BIND9 is controlled by rndc command for security.</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/dnssec-keygen -a hmac-md5 -b 512 -n user rndc
-</pre></td></tr></table>
-<p>When error "out of entropy", try with next method.</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/dnssec-keygen -r /dev/urandom -a hmac-md5 -b 512 -n user rndc
-</pre></td></tr></table>
-
-<ul>
- <li><pre>Krndc.+157+60849.key</pre></li>
- <li><pre>Krndc.+157+60849.private</pre></li>
-</ul>
-
-<p>There is "/usr/local/etc/rndc.conf.sample" after BIND9 installation.
-And copy to "rndc.conf".</p>
-
-<p>Edit "key" directive as like "key" directive of "Krndc.+xxxxxxxx.private.</p>
-
-<table><tr><td><pre>
-options {
- default-server localhost;
- default-key "key";
-};
-
-server localhost {
- key "key";
-};
-
-key "key" {
- algorithm hmac-md5;
- secret "...";
-};
-</pre></td></tr></table>
-
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ********* 3 ********* -->
-<h4>E.3 Setup named.conf<a name="bind3" href="#bind3" class="anchor">†</a></h4>
-
-<p>There is "/etc/namedb/named.conf" after installation.</p>
-
-<p>Edit "key" directive as like "key" directive of "rndc.conf"</p>
-
-<table><tr><td><pre>
-key "rndc_key" {
- algorithm hmac-md5;
- secret "...";
-};
-
-controls {
- inet ::1 allow {
- ::1;
- }
- keys {
- "rndc_key";
- };
- inet 127.0.0.1 allow {
- 127.0.0.1;
- }
- keys {
- "rndc_key";
- };
-};
-</pre></td></tr></table>
-
-<p>Write "key" directive in the other file. And you had better include it in "named.conf".
-You can secure security more by setting a permission of the other file adequately.</p>
-
-<p>Edit "options" directive.</p>
-
-<table><tr><td><pre>
-options {
- directory "/etc/namedb";
- pid-file "/var/run/named/named.pid";
- auth-nxdomain yes;
- listen-on-v6 { any; };
-};
-</pre></td></tr></table>
-
-<p>Make a directory to put "named.pid" properly.</p>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ******** 4 ********* -->
-<h4>E.4 Setup Zone<a name="bind4" href="#bind4" class="anchor">†</a></h4>
-
-<p>Edit "view" and "zone" directive.</p>
-
-<p>"view" directive is implemented in BIND9. "zone" is child directive of "view".
-BIND9 can choose zone which answers client by a DNS inquiry IP address by setting "view" adequately.</p>
-
-<table><tr><td><pre>
-view "og" {
- match-clients
- {
- 10.0.0.0/16;
- };
-
- recursion yes;
-
- zone "." {
- type hint;
- file "named.root";
- };
-
- zone "og.saga-u.ac.jp" {
- type master;
- file "og.saga-u.ac.jp";
- };
-
- zone "0.0.127.IN-ADDR.ARPA" {
- type master;
- file "master/localhost.rev";
- };
-
- // RFC 3152
- zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\
- 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA" {
- type master;
- file "master/localhost-v6.rev";
- };
-
- // RFC 1886 -- deprecated
- zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\
- 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.INT" {
- type master;
- file "master/localhost-v6.rev";
- };
-};
-</pre></td></tr></table>
-
-<p>Make a "zone" file of domain as "og.saga-u.ac.jp".</p>
-
-<table><tr><td><pre>
-$TTL 3600
-$ORIGIN og.saga-u.ac.jp.
-
-@ IN SOA ns.og.saga-u.ac.jp. postmaster (
- 2005051702 ;
- 3600
- 1200
- 2419200
- 86400 )
- IN NS ns.og.saga-u.ac.jp.
- IN A 10.0.0.2
- IN MX 10 opengate.og.saga-u.ac.jp.
-
-ns IN A 10.0.0.2
-
-opengate IN A 10.0.0.2
- AAAA 2001:2f8:10:1::1
-
-opengate4 IN A 133.49.1.2
-</pre></td></tr></table>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ********* 5 ********* -->
-<h4>E.5 Start confirmation<a name="bind5" href="#bind5" class="anchor">†</a></h4>
-
-<p>Confirm starting "named" after setting was completed.</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/named/ -u bind -c /etc/namedb/named.conf
-</pre></td></tr></table>
-
-<p>If "named" starts without a problem, Add next lines to "/etc/rc.conf".</p>
-
-<table><tr><td><pre>
-named_enable="YES"
-named_program="/usr/local/sbin/named"
-named_flags="-u bind -c /etc/namedb/named.conf"
-</pre></td></tr></table>
-
-<p>Because management of a DNS server is too complicatedly, You had better read manual of BIND9 carefully, and
-refer to other document.</p>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-<hr>
-
-<!-- Start:Install MRTG -->
-<h3>B MRTG<a name="mrtg0" href="#mrtg0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#mrtg1">Install (ports)</a></li>
- <li class="list_num"><a href="#mrtg2">Setup MRTG</a></li>
- <li class="list_num"><a href="#mrtg3">Start confirmation</a></li>
- <li class="list_num"><a href="#mrtg4">Setup crontab</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>F.1 Install MRTG<a name="mrtg1" href="#mrtg1" class="anchor">†</a></h4>
-
-<p>You can use MRTG to watch a state of Opengate. If you do not wath a state of Opengate, you
-do not have to install MRTG.</p>
-
-<p><a href="http://people.ee.ethz.ch/~oetiker/webtools/mrtg/" target="_blank">MRTG</a>(Multi Router Traffic Grapher) is system to watch network traffic.
-MRTG makes graphic images and HTML files. </p>
-
-<p>You can install MRTG to gateway server or another server. If you must watch plural Opengate, you
-had better install MRTG to another server.</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/net-mgmt/mrtg/
-# make clean
-===> Cleaning for mrtg-2.12.2,1
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>F.2 Setup MRTG<a name="mrtg2" href="#mrtg2" class="anchor">†</a></h4>
-
-<p>There is "/usr/local/etc/mrtg/mrtg.cfg.sample" as configuration file after instalation.
-Copy mrtg.cfg.sample to opengate.cfg and edit configuration file.</p>
-
-<table><tr><td><pre>
-##################################################
-# opengate user counter
-
-WorkDir: /usr/home/user/public_html/mrtg/opengate/
-
-##### Options
-Options[^]: growright,gauge,nopercent,integer
-
-Target[opengate]:`/usr/home/user/bin/input.sh`
-Title[opengate]: Opengate user counter
-
-PageTop[opengate]: <h1>Opengate user counter</h1>
- <p>Show the number of people using Opengate</p>
-
-# Max Number
-MaxBytes[opengate]: 200
-
-# Title of Y axis
-YLegend[opengate]: Opengate User
-# unit
-ShortLegend[opengate]: s
-# Title of graph LegendI: first line LegendO: second line
-LegendI[opengate]: IPv6 Users
-LegendO[opengate]: Total Users
-</pre></td></tr></table>
-
-<p>make a directory which you appointed in "WorkDir". MRTG makes graphic images and HTML files in WorkDir.</p>
-
-<p>"Target[opengate]" is path to program to hand data to MRTG. explain below th details.</p>
-
-
-
-<h5>F.2.1 Case of gateway server<a name="mrtg21" href="#mrtg21" class="anchor">†</a></h5>
-
-<p>Put this shellscript as "/usr/home/user/bin/input.sh".</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## shwo opengate status for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-LANG=C
-COLUMNS=256
-
-export LANG
-export COLUMNS
-
-### IPv6 prefix
-prefix="2001:2f8:22:801:"
-
-### opengate process name
-process="opengatesrv.cgi"
-
-### tmp file name
-tmp_all="/tmp/og_count_all.tmp"
-tmp_6="/tmp/og_count_6.tmp"
-
-######################################################
-
-ps ax | grep $process > $tmp_all
-COUNT=`wc -l $tmp_all | awk '{print $1}'`
-grep $prefix $tmp_all > $tmp_6
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`
-UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`
-
-rm $tmp_all
-rm $tmp_6
-
-echo "$COUNT6"
-echo "$COUNT"
-echo "$UPTIME"
-echo "Opengate User Counter"
-</pre></td></tr></table>
-
-<p>carry out this shell script alone and confirm that you can acquire the following data.</p>
-
-<table><tr><td><pre>
-5
-48
-10days
-Opengate User Counter
-</pre></td></tr></table>
-
-
-<h5>F.2.2 Case of another server<a name="mrtg22" href="#mrtg22" class="anchor">†</a></h5>
-
-<p>Put this shellscript as "/usr/home/user/bin/input.sh" on another server.</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## input data for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-# tmp file name
-file="/tmp/opengate.tmp"
-
-# URL of output.sh at opengate
-url="http://opengate.saga-u.ac.jp/cgi-bin/output.sh"
-
-fetch -o $file $url &> /dev/null
-
-more $file
-</pre></td></tr></table>
-
-<p>Put this shell script as "/usr/local/apache2/cgi-bin/output.sh" on Opengate server.
-And set this URL to $url in script explained by the above.</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## shwo opengate status for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-LANG=C
-COLUMNS=256
-
-export LANG
-export COLUMNS
-
-### IPv6 prefix
-prefix="2001:2f8:22:801:"
-
-### opengate process name
-process="opengatesrv.cgi"
-
-### tmp file name
-tmp_all="/tmp/og_count_all.tmp"
-tmp_6="/tmp/og_count_6.tmp"
-
-######################################################3
-
-ps ax | grep $process > $tmp_all
-COUNT=`wc -l $tmp_all | awk '{print $1}'`
-grep $prefix $tmp_all > $tmp_6
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`
-UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`
-rm $tmp_all
-rm $tmp_6
-
-echo "Content-type: text/plain; charset=iso-8859-1"
-echo
-
-echo "$COUNT6"
-echo "$COUNT"
-echo "$UPTIME"
-echo "Opengate User Counter"
-</pre></td></tr></table>
-
-<p>carry out "input.sh" shell script on another server and confirm that you can acquire the following data.</p>
-
-<table><tr><td><pre>
-5
-48
-10days
-Opengate User Counter
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-
-<!-- ************ 3 ************** -->
-<h4>F.3 Start confirmation<a name="mrtg3" href="#mrtg3" class="anchor">†</a></h4>
-
-<p>Confirm after setting was completed.</p>
-
-<table><tr><td><pre>
-# /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg
-</pre></td></tr></table>
-
-<p>Various WARNING is output the first time and second.</p>
-
-<p>There is some files in "WorkDir".</p>
-
-<table><tr><td><pre>
-> ls -l
--rw-r--r-- 1 root wheel 538 12 14 04:40 mrtg-l.png
--rw-r--r-- 1 root wheel 414 12 14 04:40 mrtg-m.png
--rw-r--r-- 1 root wheel 1759 12 14 04:40 mrtg-r.png
--rw-r--r-- 1 root wheel 2941 12 20 15:15 opengate-day.png
--rw-r--r-- 1 root wheel 2146 12 20 14:35 opengate-month.png
--rw-r--r-- 1 root wheel 2867 12 20 14:55 opengate-week.png
--rw-r--r-- 1 root wheel 1897 12 20 05:00 opengate-year.png
--rw-r--r-- 1 root wheel 5961 12 20 15:15 opengate.html
--rw-r--r-- 1 root wheel 48786 12 20 15:15 opengate.log
--rw-r--r-- 1 root wheel 48784 12 20 15:10 opengate.old
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-
-<!-- ************ 4 ************** -->
-<h4>F.4 Setup crontab<a name="mrtg4" href="#mrtg4" class="anchor">†</a></h4>
-
-<p>Add next line to "/etc/crontab".</p>
-
-<table><tr><td><pre>
-*/5 * * * * root /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-<hr>
-</body>
-</html>
\ No newline at end of file
+++ /dev/null
-\r
-body {\r
- width : 800px;\r
- margin-left:30px;\r
-}\r
-\r
-p {\r
- text-indent : 10px;\r
-}\r
-\r
-table {\r
- border-style : solid;\r
- border-bottom-color : #CCCCCC;\r
- border-width : thin;\r
- width : 90%;\r
- border-spacing : 10px;\r
-}\r
-\r
-.anchor {\r
- font-size : xx-small;\r
- vertical-align : super;\r
-}\r
-\r
-.list_alpha {\r
- list-style-type : upper-alpha;\r
-}\r
-.list_num {\r
- list-style : decimal;\r
-}\r
-\r
-.list_none {\r
- list-style : none;\r
- font-weight : bold;\r
-}\r
-\r
+++ /dev/null
-<HTML>
-<head>
-<title>Opengate Error Check</title>
-</head>
-
-<BODY>
-
-<body bgcolor=#BBEECC>
-
-<H3>Opengate Error Check</H3>
-
-<P>
-As opengate interacts with many software, it is diffcult to recognize the behavior. Then this memo is prepared to assist debug.
-<P>
-When error occured, check the stand alone action of each related software. Especially setting of ipfw is difficult and affects to many sides. At first, debug with ipfw fully open state. Then close it little by little.
-<P>
-Opengate uses following files, where the directorys are default. Is these files correctly settled.
-
-<PRE>
- /usr/local/www/cgi-bin/opengate/opengatesrv.cgi
- /usr/local/www/data/index.html.*
- /usr/local/www/data/opengate/Opengate.class
- /usr/local/www/data/opengate/OpengateClient.class
- /usr/local/www/data/opengate/*/index.html
- /usr/local/www/data/opengate/*/index-ssl.html
- /usr/local/www/data/opengate/*/accept.html
- /usr/local/www/data/opengate/*/accept2.html
- /usr/local/www/data/opengate/*/deny.html
- /etc/opengatesrv.conf
- /etc/opengatefw.pl
- /var/log/opengate.log
-</PRE>
-And Opengate creates a lock file [/tmp/opengate.lock] at execution.
-It can be removed.
-<P>
-Please understand the basic flow of the system by reading <A HREF=progflow.html>the description of system flow</A>.
-<P>
-Test programs are prepared as opengatesrv/test-*.
-<P>
-
-Following are the checking list for debugging.
-<UL>
-<LI>Japanese characters in html and java files cannot be understood.
-<P>
-<UL>
-<LI>Html sample files in English are saved in sub directory. Java messages are described in program comments.
-</UL>
-<P>
-<LI>Compiler tells the lack of librarys or headers.
-<P>
-<UL>
-<LI>Opengate after Ver.0.56 can be compiled on FreeBSD Ver.4.1.
-</UL>
-<P>
-
-<LI>Cannot redirect web access to gateway machine.
-<P>
-<UL>
-<LI>Opengatesrv.cgi is not yet loaded in this moment.
-
-<LI>Try to access opengate URL directly. If no response is returned, check the setting of Apache and HTML document directory. Check the Apache access log and Apache error log.
-
-<LI>Check default directory of Apache document. It may be different to this document.
-
-<LI>Check ipfw setting. Rule number of foward command must be larger than opengate rule numbers.
-
-<LI>If error occurs only when accessing sub page(not top page), [PageNotFound] setting in Apache httpd.conf may not be correct.
-
-<LI> In Microsoft Internet Explorer 5 or later, redirection to a page at [PageNotFound] cannot be done, when the size of the page is less than 512Bytes. Try to increase the size of the top page file larger than 512Bytes by adding space chacters. Reference <a href=http://support.microsoft.com/default.aspx?scid=kb;EN-US;q218155>http://support.microsoft.com/default.aspx?scid=kb;EN-US;q218155</a>.
-
-<LI>Does the web access pass through the gateway? Only the packet passing through the gateway is redirected.
-
-<LI>Try to access by IP address. If domain name is not recognized, check the DNS setting.
-
-<LI>The top page cannot be settled under SSL.
-</UL>
-<P>
-
-<LI>Cannot jump to authentication page.
-<P>
-<UL>
-<LI>Many ADDRESS descriptions in HTML files must be changed to your site.
-
-<LI>Try manual jump. If sccess, check jump description of html.
-
-<LI>Try non SSL setting. If success, check about SSL.
-
-<LI>URL in authentication page must be described with full/absolute pass.
-</UL>
-
-<P>
-<LI>No reply or error reply to posting userID and password.
-<P>
-<UL>
-<LI>At this moment, [opengatesrv.cgi] is loaded.
-
-<LI>The authentication page cannot be the top page. Set up some top page from which authentication page is jumped.
-
-<LI>Check processes by [ps ax]. If [opengatesrv.cgi] is not loaded, check the directory of CGI and URL description in html file. Check Apache setting about CGI enable and CGI directory.
-
-<LI>If [opengatesrv.cgi] is loaded, check [/var/log/opengate.log]. Set [#define DEBUG 1] in [opengatesrv.h] for debug output to syslog.
-
-<LI>Check the firewall rule for the accessed terminal by entering [ipfw list]. Ipfw command requires root permission. Check [opengatesrv.cgi] has root permission.
-
-<LI>Check [opengatesrv.h] and [Makefile]. Does the settings match to the positions of files?
-
-<LI>Check applet insertion mark in [accept.html]. Does it match to the [#DEFINE] in [opengatesrv.h]?
-
-<LI>Check setting of web browser. Is Java Enabled?
-
-<LI>Check with other web browsers or other OSs. Error may be caused by browser's bug.
-
-<LI>Check the directory of Java Applet. Does it recognized by web server? Does the Java Applet run normally.
-
-<LI>Change the host description in [opengatesrv.conf] from domain name to IP address. If success, an error may occur in the name resolution.
-</UL>
-
-<P>
-<LI>Access is rejected, even though I send correct password.
-<P>
-<UL>
-<LI>Check [/var/log/opengate.log].
-
-<LI>Check [opengatesrv.conf]. Is the setting correct? The file must ended with return key.
-
-<LI>Try to access from gateway console to the authentication server. Does the server reply normally?
-
-<LI>Opengate assumes that the welcome message of FTP server is only one line. If the server puts out multiple lines, change the server setting or the routine in opengatesrv. Opengate(Ver.0.90l) is modeified to communicate such servers.
-
-<LI>If the client is already opened, the request form same client is rejected. Check the firewall state by accessing outside. At mulfunction of JavaApplet, the server side program waits for Java Applet connection, and closes firewall after fixed duration.
-</UL>
-
-<P>
-<LI>The accept page is displayed and the network is opened. But the network is closed after a while.
-<P>
-<UL>
-<LI>If userID is not shown in the yellow frame layouted in the page, Java Applet loading might be failed. Check the setting relating Java. Standard instalation of Netscape6 and InternetExplorer6 does not include JavaVM. At accessing Java page, download of JavaVM is requested. Please follow the messages. If it does not work, try other browser or other version. Some browser in some version cannot run Java Applet well. It might work after installation of SunJava2.
-<LI>If userID is shown, check message displayed by Java Applet. It might be caused by following.
-(1)No connection request comes from Java Applet. (2)No reply to hello message comes from Java Applet. (3)No packet from/to the terminal is passed through the gateway for a while. (4) Java Applet is terminated by unknown cause. (5)Server process is terminated by unknown cause.
-<LI>At no connection from Java Applet, the network is closed in the following cases. (1)The duration entered in auth page is passed. (2)No packet from/to the terminal is passed through the gateway for a while. (3)Arp command replys the different MAC address. (4)The TERMINATE link in accept page is clicked.
-
-<LI>
-If internet connection firewall(ICF) in WindowsXP is enabled, the connection is closed in some condition, but we cannot identify the condition. If occured, disable the firewall.
-
-<LI>
-In some browser, the connection was closed when the java applet page is removed. The behavior is dissolved in version 0.90h.
-
-<LI>Check [/var/log/opengate.log].
-
-<LI> Check above notes relating Java. Check network state with [netstat] or other tools. Check message displayed on web browser.
-
-<LI>If address translation system such as NAT or Proxy is inserted between the terminal and the gateway, opengate cannot work normally.
-</UL>
-
-<P>
-<LI>Accept page may be not normal.
-<P>
-<UL>
-<LI>In normal state, 2pages are displayed. In the first page, java Applet layouts yellow frame and shows user ID. In the second page, some links and cautions are displayed.
-<LI>If the yellow frame is not shown, Java Applet might not work normally. Check the items above.
-<LI>Second page is started by JavaScript. Check the javaScript setting at mulfunction. The second page exists only for convenience and is not needed for network control. If the window.open is denied only by Internet Explorer, the setting of the browser might corrupt. Reffer <A HREF=http://support.microsoft.com/support/kb/articles/q180/1/76.asp> http://support.microsoft.com/support/kb/articles/q180/1/76.asp </A> It is occured in IE6 also.
-</UL>
-
-<P>
-<LI>The network is opened without authentication.
-<P>
-<UL>
-<LI>Check the application in client(terminal) machine. Is the web browser really terminated? For example,in MacOS, application can be resident in hidden state. In some OS, the application is resident forever. In this case, Java Applet is needed to modify such as adding close button.
-
-<LI>When the network is cut off or the terminal system is suddenly terminated, TCP close signal cannot be sent to gateway. Thus detection is delayed until next message exchange.
-
-<LI>When ipfw rule is failed to be removed, permanently open state is occured. In such case, remove the rule manually or reboot the system. After Ver.0.90e, a <A HREF=rulechk.txt>script</A> can remove the rules failed to remove at terminating the process.
-</UL>
-<P>
-
-<LI>Accept page is displayed, but the network is closed.
-<P>
-<UL>
-<LI>Check ipfw rule with command [ipfw list]. Is the rule sequence correct?
-
-<LI>Check [/var/log/opengate.log].
-
-<LI>If redirect page does not include [NoCache] setting, the cached page is loaded responding to the another access. For example, if yahoo access is redirected to the opengate page, another yahoo access loads the cached opengate page, even if the network is opened.
-</UL>
-
-<P>
-<LI>I sent correct password, but denied.
-<P>
-<UL>
-<LI>Check the authentication server by sending request from console.
-<LI>Check the description in opengatesrv.conf, radius.conf and pam.conf.
-<LI>Check [/var/log/opengate.log].
-</UL>
-
-<P>
-<LI>Displayed page is not my desired language.
-<P>
-<UL>
-<LI>Check index.html, its directory and Makefile. These language IDs must be same The ID is case sensitive and is two bytes length.
-<LI>If you want to add new language, add new directory and files. Then add its ID in makefile.
-</UL>
-
-<P>
-<LI>Network troubles increased after the installation of this soft.
-<P>
-<UL>
-Please use latter versions. Do not use before Ver.0.54 which includes a serious bug.
-</UL>
-
-<P>
-<LI>Sometimes, there are very long response time (60sec or more) for authentication request.
-<P>
-<UL>
-Please discover the part waisting long time. We experienced following case. The setting "HostnameLookups" in httpd.conf is "On", and DNS servers do not have sufficient informations about clients. Then, very long time is wasted in name lookup. The trouble is canceled by setting the above switch "Off".
-</UL>
-<P>
-<LI>All is checked. I cannot know what to do.
-<P>
-<UL>
-<LI>Set [#define DEBUG 1] in [opengatesrv.h]. Program tracing is put out in syslog.
-<LI>Insert [err_msg()] in proper place in the program to get debug print. The function put out message to syslog. The sample usage exists in the program. Format is same as [printf()].
-<P>
-</UL>
-</UL>
-</BODY>
-</HTML>
+++ /dev/null
-<html LANG="jp">
-<head>
-<META HTTP-EQUIV="Content-Type" CONTENT="text/html;charset=Shift_JIS">
-
-<title>Opengate Error Check</title>
-</head>
-
-<BODY>
-
-<body bgcolor=#BBEECC>
-
-<H3>Opengate \83G\83\89\81[\83`\83F\83b\83N\8d\80\96Ú</H3>
-
-<P>
-Opengate \82Í\91½\82\82Ì\83\\83t\83g\83E\83F\83A\82Ì\8aÔ\82Ì\92\87\89î\82ð\8ds\82¤\82à\82Ì\82Å\82·\82Ì\82Å\81A\89½\82ª\8bN\82«\82Ä\82¢\82é\82Ì\82©\94»\92f\82ª\93ï\82µ\82¢\82Å\82·\81B\82Ü\82½\8c»\8fó\82Å\82Í\83f\83o\83b\83O\82Ì\82½\82ß\82É\90ê\97p\82Ì\8b@\94\\82Í\90Ý\92è\82µ\82Ä\82 \82è\82Ü\82¹\82ñ\81B\82»\82±\82Å\81A\82±\82Ì\83\81\83\82\82Í\81A\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82à Opengate \82ª\93®\82©\82È\82¢\8e\9e\82Ì\8eQ\8dl\82Ì\82½\82ß\82É\8bL\82µ\82Ü\82·\81B
-<P>
-\82¤\82Ü\82\93®\82©\82È\82¢\8fê\8d\87\81A\82Ü\82¸\81A\8aÖ\98A\82·\82é\83\\83t\83g\83E\83F\83A\82ª\8ae\81X\92P\93Æ\82Å\90³\8fí\93®\8dì\82·\82é\82©\8am\94F\82µ\82Ä\82\82¾\82³\82¢\81B\93Á\82É ipfw \82Ì\90Ý\92è\82Í\82 \82¿\82±\82¿\82É\89e\8b¿\82µ\82Ü\82·\82Ì\82Å\8f\\95ª\92\8d\88Ó\82ª\95K\97v\82Å\82·\81B\8dÅ\8f\89\82Íipfw\82ð\91S\8aJ\95ú\82É\8bß\82\90Ý\92è\82µ\82Ä\82¤\82Ü\82\93®\82\82Ì\82ð\8am\94F\82µ\82Ä\82©\82ç\95Â\82¶\82Ä\82\82¾\82³\82¢\81B
-<P>
-Opengate\82Í\88È\89º\82Ì\83t\83@\83C\83\8b\82ð\97\98\97p\82µ\82Ü\82·\81B\82±\82ê\82ç\82Í\90³\82µ\82\94z\92u\82³\82ê\82Ä\82¢\82Ü\82·\82©\81B
-\83f\83B\83\8c\83N\83g\83\8a\82Ídefault\88Ê\92u\82Å\82·\81B
-<PRE>
- /usr/local/www/cgi-bin/opengate/opengatesrv.cgi
- /usr/local/www/data/index.html.*
- /usr/local/www/data/opengate/Opengate.class
- /usr/local/www/data/opengate/OpengateClient.class
- /usr/local/www/data/opengate/*/index.html
- /usr/local/www/data/opengate/*/index-ssl.html
- /usr/local/www/data/opengate/*/accept.html
- /usr/local/www/data/opengate/*/accept2.html
- /usr/local/www/data/opengate/*/deny.html
- /etc/opengatesrv.conf
- /etc/opengatefw.pl
- /var/log/opengate.log
-</PRE>
-\82³\82ç\82É\81A\83\8d\83b\83N\83t\83@\83C\83\8b\82Æ\82µ\82Ä /tmp/opengate.lock\82ð\8eg\97p\82µ\82Ü\82·\82ª\81A\8dì\90¬\82Í\95s\97v
-\82Å\82·\81B\8fÁ\82µ\82Ä\82à\8d\\82¢\82Ü\82¹\82ñ\81B
-<P>
-
\95Ê
\82É
\81A<A HREF=progflow.html>
\83v
\83\8d\83O
\83\89\83\80\83t
\83\8d\81[
\89ð
\90à</A>
\82ð
\97p
\88Ó
\82µ
\82Ä
\82¢
\82Ü
\82·
\81B
\83v
\83\8d\83O
\83\89\83\80\82Ì
\8aî
\96{
\93I
\82È
\93®
\82«
\82ð
\94c
\88¬
\82µ
\82Ä
\82
\82¾
\82³
\82¢
\81B
-<P>
-\93®\82«\83`\83F\83b\83N\82Ì\82½\82ß\82É\83e\83X\83g\83v\83\8d\83O\83\89\83\80\82ð\97p\88Ó\82µ\82Ü\82µ\82½\81Bopengatesrv\92\86\82Étest-*\82Æ\82µ\82Ä\92u\82¢\82Ä\82¢\82Ü\82·\81B
-<P>
-
-\88È\89º\81A\8fÇ\8fó\96\88\82É\97ñ\8b\93\82µ\82Ü\82·\81B
-<UL>
-<LI>\83\89\83C\83u\83\89\83\8a\93\99\82ª\95s\91«\82µ\82Ä\82¢\82é\82Æ\82Ì\83R\83\93\83p\83C\83\8b\83G\83\89\81[\82ª\8fo\82Ü\82·\81B
-<P>
-<UL>
-<LI>Ver.0.56\88È\8d~\82Í\81AFreeBSDv4\82É\82Ä\93®\8dì\8am\94F\82µ\82Ä\82¢\82Ü\82·\81BFreeBSD3\82Å\82Í\83R\83\93\83p\83C\83\8b\83G\83\89\81[\82ª\94\90¶\82µ\82Ü\82·\81B
-</UL>
-<P>
-
-<LI>\83Q\81[\83g\83E\83F\83C\82Ì\83z\81[\83\80\83y\81[\83W\82Ö\83\8a\83_\83C\83\8c\83N\83g\82µ\82È\82¢\81B
-<P>
-<UL>
-<LI>\82±\82Ì\92i\8aK\82Å\82ÍOpengatesrv.cgi\82Ì\96{\91Ì\82Í\96³\8aÖ\8cW\82Å\82·\81B
-
-<LI>\93\96\83z\81[\83\80\83y\81[\83W\82ð\8ew\92è\82µ\82½\82Æ\82«\82Í\90³\8fí\82É\95\\8e¦\82³\82ê\82Ü\82·\82©\81B\82»\82¤\82Å\82È\82¢\82Æ\82«\82Í Apache \82Ì\90Ý\92è\82Ü\82½\82Í\83h\83L\83\85\83\81\83\93\83g\83t\83@\83C\83\8b\82Ì\88Ê\92u\90Ý\92è\82ð\8am\94F\82\82¾\82³\82¢\81B\82Ü\82½Apache\82Ì\83A\83N\83Z\83X\83\8d\83O\82¨\82æ\82Ñ\83G\83\89\81[\83\8d\83O\82ð\8am\94F\89º\82³\82¢\81B
-
-<LI>Apache\82Í\83o\81[\83W\83\87\83\93\82É\82æ\82Á\82Ä\83f\83B\83\8c\83N\83g\83\8a\82Ì\88Ê\92u\82ª\95Ï\82í\82Á\82Ä\82¢\82Ü\82·\81B\83C\83\93\83X\83g\81[\83\8b\83\81\83\82\82Æ\82Í\88Ù\82È\82é\82©\82à\92m\82ê\82Ü\82¹\82ñ\81B
-
-<LI>ipfw \82Ì\90Ý\92è\82Í\90³\82µ\82¢\82Å\82·\82©\81B\93Á\82Éfwd\82Ì\88Ê\92u\82ª\92Ç\89Á\83\8b\81[\83\8b\82æ\82è\97D\90æ\8f\87\88Ê\82ª\92á\82\82È\82Á\82Ä\82¢\82é\82©\8am\94F\82\82¾\82³\82¢\81B
-
-<LI>\90Ú\91±\82µ\82æ\82¤\82Æ\82µ\82½\82Ì\82ª\83T\83C\83g\82Ì\83g\83b\83v\83y\81[\83W\88È\8aO\82Ì\8fê\8d\87\81A\83g\83b\83v\83y\81[\83W\82Å\8e\8e\82µ\82Ä\82\82¾\82³\82¢\81B\82±\82ê\82Å\82¤\82Ü\82\82¢\82\82Ì\82Å\82 \82ê\82Î\81AApache httpd.conf\82É\82¨\82¢\82Ä PageNotFound \83G\83\89\81[\82Ì\82Æ\82«\82É\83g\83b\83v\83y\81[\83W\82ð\95\\8e¦\82·\82é\82æ\82¤\90Ý\92è\82³\82ê\82Ä\82¢\82é\82©\8am\94F\82\82¾\82³\82¢\81B
-
-<LI>Microsoft Internet Explorer 5
\88È
\8d~
\82Í
\81A
\83\8a\83_
\83C
\83\8c\83N
\83g
\90æ
\82Ì
\83y
\81[
\83W
\82ª512
\83o
\83C
\83g
\88È
\8fã
\82Å
\82È
\82¢
\82Æ
\81APageNotFound
\8e\9e\82Ì
\83\8a\83_
\83C
\83\8c\83N
\83g
\95\
\8e¦
\82ª
\82¤
\82Ü
\82
\82¢
\82«
\82Ü
\82¹
\82ñ
\81B
\83g
\83b
\83v
\83y
\81[
\83W
\82É
\8bó
\94\92\82ð
\90\94\95S
\83o
\83C
\83g
\92Ç
\89Á
\82µ
\82Ä
\82Ý
\82Ä
\82
\82¾
\82³
\82¢
\81B
\8eQ
\8dl
\8fî
\95ñ
\82Í<a href=http://www.microsoft.com/japan/support/kb/articles/JP218/1/55.asp>http://www.microsoft.com/japan/support/kb/articles/JP218/1/55.asp</a>
\82Å
\82·
\81B
-
-<LI>\90Ú\91±\82µ\82æ\82¤\82Æ\82µ\82½\83T\83C\83g\82Í\93\96\83Q\81[\83g\83E\83F\83C\82ð\92Ê\82Á\82½\90æ\82É\90Ý\92è\82³\82ê\82Ä\82¢\82Ü\82·\82©\81B\83Q\81[\83g\83E\83F\83C\82ð\92Ê\82é\92Ê\90M\82µ\82©\83\8a\83_\83C\83\8c\83N\83g\82Å\82«\82Ü\82¹\82ñ\81B
-
-<LI>\96¼\91O\82ª\89ð\8eß\82Å\82«\82È\82¢\82Ì\82È\82ç\81ADNS\82Ì\90Ý\92è\82ð\8am\94F\82\82¾\82³\82¢\81B
-
-<LI>\8dÅ\8f\89\82Ì\89æ\96Ê\82ÍSSL\89»\82µ\82È\82¢\82Å\82\82¾\82³\82¢\81B
-</UL>
-<P>
-
-<LI>\83\86\81[\83UID\82Æ\83p\83X\83\8f\81[\83h\82Ì\93ü\97Í\89æ\96Ê\82Ö\88Ú\8ds\82µ\82È\82¢\81B
-<P>
-<UL>
-<LI>HTML\83t\83@\83C\83\8b\82Ì\82 \82¿\82±\82¿\82É\83A\83h\83\8c\83X\82ª\8f\91\82©\82ê\82Ä\82¢\82Ü\82·\81B\82à\82ê\82È\82\8e©\95ª\82Ì\82Æ\82±\82ë\82Ì\83A\83h\83\8c\83X\82É\8f\91\82«\8a·\82¦\82Ä\82\82¾\82³\82¢\81B
-
-<LI>\8e©\93®\88Ú\93®\82ð\90Ý\92è\82µ\82Ä\82¢\82é\8fê\8d\87\82Í\8eè\93®\88Ú\93®\82Å\82Í\82Ç\82¤\82©\8am\94F\82\82¾\82³\82¢\81B
-
-<LI>\82r\82r\82k\89»\82µ\82Ä\82 \82ê\82Î\81A\82Ü\82¸\82Í\82r\82r\82k\96³\82µ\82Å\93®\82\82±\82Æ\82ð\8am\94F\82\82¾\82³\82¢\81B
-
-<LI>\88Ú\8ds\90æ\83A\83h\83\8c\83X\82Ì\8bL\8fq\82Í\81A\91\8a\91Î\83p\83X\82Å\82Í\82È\82\83t\83\8b\83p\83X\82Å\8ew\92è\82\82¾\82³\82¢\81B
-</UL>
-<P>
-<LI>\83\86\81[\83U ID \82Æ\83p\83X\83\8f\81[\83h\82ð\91\97\82Á\82Ä\82à\95Ô\8e\96\82ª\82È\82¢\81B\82Ü\82½\82Í\81AWeb \82ª\83G\83\89\81[\82ð\8bA\82·\81B
-<P>
-<UL>
-<LI>\82±\82Ì\92i\8aK\82Å Opengatesrv.cgi \83v\83\8d\83O\83\89\83\80\82ª\8bN\93®\82µ\82Ü\82·\81B\82æ\82Á\82Ä\97l\81X\82È\83G\83\89\81[\82Ì\89Â\94\\90«\82ª\82 \82è\82Ü\82·\81B
-
-<LI>\83g\83b\83v\83y\81[\83W\82ð\8fÈ\97ª\82µ\82Ä\92¼\90Ú\82É\83p\83X\83\8f\81[\83h\93ü\97Í\89æ\96Ê\82Ö\83\8a\83_\83C\83\8c\83N\83g\82·\82é\82æ\82¤\82É\90Ý\92è\82µ\82Ä\82¢\82é\82Æ\93®\82«\82Ü\82¹\82ñ\81B\95K\82¸\82P\83y\81[\83W\8co\97R\82µ\82Ä\82\82¾\82³\82¢\81B
-
-<LI>\81ups ax\81v\82É\82Ä\83v\83\8d\83Z\83X\8fó\8bµ\82ð\8am\94F\82\82¾\82³\82¢\81Bopengatesrv.cgi \82ª\8bN\93®\82³\82ê\82Ä\82¢\82Ü\82·\82©\81B\8bN\93®\82³\82ê\82Ä\82¢\82È\82¢\82È\82ç\81Acgi \82Ì\92u\82«\8fê\8f\8a\82ª\81A\83p\83X\83\8f\81[\83h\93ü\97Í\89æ\96Ê\93à\82Ì\8ew\92è\82Æ\8b¶\82Á\82Ä\82¢\82È\82¢\82©\8am\94F\82\82¾\82³\82¢\81B\82³\82ç\82É Apache \82Ì\90Ý\92è\82É\82¨\82¢\82Ä\81Acgi \82Ì\8fê\8f\8a\82â\89Ò\93®\8b\96\89Â\82Ì\90Ý\92è\82ª\8aÔ\88á\82Á\82Ä\82¢\82È\82¢\82©\8am\94F\82\82¾\82³\82¢\81B
-
-<LI>opengatesrv.cgi \82Ì\83v\83\8d\83Z\83X\82ª\8bN\93®\82³\82ê\82Ä\82¢\82é\82È\82ç /var/log/opengate.log \82ð\8am\94F\82\82¾\82³\82¢\81B\83G\83\89\81[\82ª\8fo\82Ä\82¢\82ê\82Î\82»\82ê\82É\91Î\89\9e\82\82¾\82³\82¢\81B\82Ü\82½\81Aopengatesrv.h\92\86\82Å\81u#define DEBUG 1\81v\82ð\8ew\92è\82·\82é\82Æ\81A\8dì\90¬\8aÖ\90\94\8aÔ\82Ì\8cÄ\82Ñ\8fo\82µ\82ªlog\82É\8bL\98^\82³\82ê\82Ü\82·\82Ì\82Å\81A\96â\91è\82Ì\90Ø\82è\95ª\82¯\82É\97\98\97p\82Å\82«\82Ü\82·\81B
-
-<LI>\81uipfw list\81v\82É\82Ä\81A\83A\83N\83Z\83X\82µ\82½\92[\96\96\82É\91Î\82·\82é\83\8b\81[\83\8b\82ª\92Ç\89Á\82³\82ê\82Ä\82¢\82é\82©\8am\94F\82\82¾\82³\82¢\81Bipfw \82Í root \8c \8cÀ\82ª\95K\97v\82Å\82·\81B\82à\82µ\92Ç\89Á\82³\82ê\82Ä\82¢\82È\82¢\8fê\8d\87\82É\82Í\81Aopengatesrv.cgi \82ª root \8c \8cÀ\82Å\93®\82\82æ\82¤\82É\82È\82Á\82Ä\82¢\82é\82©\8am\94F\82\82¾\82³\82¢\81B
-
-<LI>\83w\83b\83_\81[\83t\83@\83C\83\8b opengatesrv.h \81AMakefile\93à\82Ì\90Ý\92è\82ð\8am\94F\82\82¾\82³\82¢\81B\82»\82ê\82Æ Web \83h\83L\83\85\83\81\83\93\83g\93\99\82Ì\83t\83@\83C\83\8b\88Ê\92u\82Í\8d\87\92v\82µ\82Ä\82¢\82Ü\82·\82©\81B
-
-<LI>accept.html \82Ì\92\86\82É\81AApplet \91}\93ü\88Ê\92u\8ew\92è\82ª\90³\82µ\82\8ew\92è\82³\82ê\82Ä\82¢\82Ü\82·\82©\81B
-
-<LI>Web\83u\83\89\83E\83U\82ÍJava\82ª\89Ò\93®\89Â\94\\82Ì\90Ý\92è\82É\82È\82Á\82Ä\82¢\82Ü\82·\82©\81B
-
-<LI>\91¼\82ÌWeb\83u\83\89\83E\83U\82âOS\82Å\8am\94F\82\82¾\82³\82¢\81B
-
-<LI>Java \82Í\90³\82µ\82¢\88Ê\92u\82É\95Û\91¶\82µ\82Ä\82¢\82Ü\82·\82©\81B\82»\82Ì Java \82Í\90³\8fí\82É\93®\82\83v\83\8d\83O\83\89\83\80\82Å\82·\82©\81B
-
-<LI>conf\83t\83@\83C\83\8b\92\86\82Ì\83T\81[\83o\83A\83h\83\8c\83X\82ð\96¼\91O\82Å\82Í\82È\82\81A\90\94\8e\9a\95\\8bL\82É\82µ\82Ä\82Ý\82Ä\82\82¾\82³\82¢\81B
-</UL>
-<P>
-<LI>\90³\82µ\82\83p\83X\83\8f\81[\83h\82ð\93ü\82ê\82Ä\82¢\82é\82Í\82¸\82È\82Ì\82É\8b\91\94Û\82³\82ê\82é\81B
-<P>
-<UL>
-<LI>/var/log/opengate.log\82ð\92²\82×\82Ä\82\82¾\82³\82¢\81B
-
-<LI>server\96¼\82ªconf\83t\83@\83C\83\8b\82É\82 \82é\82Ì\82É\96³\82¢\82Ælog\83\81\83b\83Z\81[\83W\82ª\8fo\82é\82Æ\82«\81Aconf\83t\83@\83C\83\8b\82Ì\96\96\94ö\82É\89ü\8ds\82ª\94²\82¯\82Ä\82¢\82é\82±\82Æ\82ª\82 \82è\82Ü\82µ\82½\81B
-
-<LI>\83R\83\93\83\\81[\83\8b\82©\82ç\94F\8fØ\83T\81[\83o\82Ö\83A\83N\83Z\83X\82µ\82Ä\82Ý\82Ä\90³\82µ\82\93®\82\82©\8am\94F\89º\82³\82¢\81B
-
-<LI>FTP\83T\81[\83o\82É\82æ\82Á\82Ä\82Í\81AWelcome\83\81\83b\83Z\81[\83W\82È\82Ç\82ª\95¡\90\94\8ds\82É\82È\82Á\82Ä\82¢\82é\82±\82Æ\82ª\82 \82è\82Ü\82·\82ª\81AOpengate\82Í\88ê\8ds\82ð\89¼\92è\82µ\82Ä\93®\8dì\82µ\82Ü\82·\81BFTP\83T\81[\83o\82Ì\90Ý\92è\82ð\95Ï\8dX\82µ\82Ä\82\82¾\82³\82¢\81B
-\95Ï\8dX\95s\89Â\82È\82çOpengate\82Ì\89ï\98b\95\94\95ª\83\\81[\83X\82Ì\95Ï\8dX\82Å\91Î\89\9e\89º\82³\82¢\81BVer.0.90l\82Å\95¡\90\94\8ds\82É\91Î\89\9e\82µ\82Ü\82µ\82½\81B
-
-<LI>\8aJ\95ú\8dÏ\82Ì\92[\96\96\82©\82ç\8fd\95¡\82µ\82Ä\97v\8b\81\82ª\97\88\82é\82Æ\8b\91\94Û\82µ\82Ü\82·\81B\82»\82Ì\82Ü\82Ü\8aO\82Ì\83T\83C\83g\82ª\8c©\82¦\82é\82È\82ç\8aJ\95ú\82³\82ê\82Ä\82¢\82Ü\82·\81BJavaApplet\82ª\8bN\93®\82É\8e¸\94s\82µ\82½\8fê\8d\87\82Í\81A\83T\81[\83o\91¤\83v\83\8d\83Z\83X\82ÍJavaApplet\82ª\90Ú\91±\82µ\82Ä\82\82é\82Ì\82ðfirewall\82ð\8aJ\95ú\82µ\82Ä\88ê\92è\8e\9e\8aÔ\91Ò\82¿\81A\95Â\8d½\82µ\82Ä\8fI\97¹\82µ\82Ü\82·\81B
-
-</UL>
-
-<P>
-<LI>\97\98\97p\8b\96\89Â\82Ì\83y\81[\83W\82ª\95\\8e¦\82³\82ê\82é\82ª\82µ\82Î\82ç\82\8co\82Â\82Æ\83l\83b\83g\83\8f\81[\83N\82ª\90Ø\92f\82³\82ê\82é\81B
-<P>
-<UL>
-<LI>\97\98\97p\8b\96\89Â\82Ì\83y\81[\83W\82É\81A\89©\90F\82¢\83t\83\8c\81[\83\80\82Å\83\86\81[\83U\96¼\95\\8e¦\82ª\8fo\82Ä\82¢\82Ü\82·\82©\81B\8fo\82Ä\82¢\82È\82¯\82ê\82Î\81AJava\82Ì\8bN\93®\82É\8e¸\94s\82µ\82½\82æ\82¤\82Å\82·\81BJava\8aÖ\98A\82ð\8am\94F\82\82¾\82³\82¢\81B\82È\82¨Netscape6\81AInternetExplorer6\82Í\81A\95W\8f\80\83C\83\93\83X\83g\81[\83\8b\82Å\82ÍJava\82ª\93ü\82è\82Ü\82¹\82ñ\81B\8dÅ\8f\89\82ÌJava\83y\81[\83W\83A\83N\83Z\83X\8e\9e\82É\83_\83E\83\93\83\8d\81[\83h\82ª\97v\8b\81\82³\82ê\82Ü\82·\82Ì\82Å\83\81\83b\83Z\81[\83W\82É\8f]\82Á\82Ä\93±\93ü\82\82¾\82³\82¢\81B\82»\82ê\82Å\82à\93®\8dì\82ª\82¨\82©\82µ\82¢\8fê\8d\87\82Í\95Ê\82Ì\83u\83\89\83E\83U\82ð\8eg\82Á\82Ä\82Ý\82Ä\82\82¾\82³\82¢\81B\83o\81[\83W\83\87\83\93\82É\82æ\82Á\82Ä\82ÍJava\82ª\93®\82©\82È\82¢\8e\96\82ª\82 \82è\82Ü\82·\81BSunJava2\82ð\93±\93ü\82µ\82Ä\8c©\82Ä\82\82¾\82³\82¢\81B
-<LI>\8fo\82Ä\82¢\82ê\82Î\81AJavaApplet\82Ì\8fo\82·\83\81\83b\83Z\81[\83W\82ð\8am\94F\82\82¾\82³\82¢\81B\88È\89º\82Ì\8c´\88ö\82ª\8dl\82¦\82ç\82ê\82Ü\82·\81B(1)\83_\83E\83\93\83\8d\81[\83h\82µ\82½Java\82©\82ç\83T\81[\83o\82É\91Î\82µ\82Ä\83R\83l\83N\83g\82µ\82Ä\82±\82È\82¢\81B(2)Java\82ª\92è\8aú\92Ê\90M\82É\89\9e\93\9a\82µ\82È\82¢\81B(3)\93\96\92[\96\96\82Ì\83p\83P\83b\83g\82ª\88ê\92è\8aú\8aÔ\81A\83Q\81[\83g\83E\83F\83C\82ð\92Ê\89ß\82µ\82Ä\82¢\82È\82¢\81B(4)Java\8fI\97¹\82È\82Ç\82ÅTCP\83R\83l\83N\83V\83\87\83\93\82ª\95Â\82¶\82½\81B(5)\83T\81[\83o\83v\83\8d\83O\83\89\83\80\82ª\89½\82ç\82©\82Ì\8c´\88ö\82Å\8fI\97¹\82µ\82½\81B
-<LI>Java\82ª\83R\83l\83N\83g\82µ\82Ä\97\88\82È\82¢\8e\9e\82Í\81A\88È\89º\82Ì\8fê\8d\87\82É\95Â\8d½\82µ\82Ü\82·\81B(1)\94F\8fØ\83y\81[\83W\82Å\8ew\92è\82µ\82½\97\98\97p\8e\9e\8aÔ\82ª\8co\89ß\82µ\82½\81B(2)\93\96\92[\96\96\82Ì\83p\83P\83b\83g\82ª\88ê\92è\8aú\8aÔ\81A\83Q\81[\83g\83E\83F\83C\82ð\92Ê\89ß\82µ\82Ä\82¢\82È\82¢\81B(3)\94F\8fØ\8e\9e\82Æ\88Ù\82È\82éMAC\83A\83h\83\8c\83X\82ª\8c\9f\8fo\82³\82ê\82½\81B(4)\8b\96\89Â\83y\81[\83W\82Ì\97\98\97p\92\86\92f\83\8a\83\93\83N\82ª\89\9f\82³\82ê\82½\81B
-<LI>WindowsXP\82Ì\83C\83\93\83^\81[\83l\83b\83g\90Ú\91±\83t\83@\83C\83A\83E\83H\81[\83\8b(ICF)\82ª\90Ý\92è\82³\82ê\82Ä\82¢\82é\8fê\8d\87\82É\81A\90Ø\92f\82³\82ê\82é\82±\82Æ\82ª\82 \82è\82Ü\82·\81B\82µ\82©\82µ\81A\82Ç\82Ì\82æ\82¤\82È\8fð\8c\8f\89º\82Å\94\90¶\82·\82é\82©\82Í\94c\88¬\82Å\82«\82Ä\82¢\82Ü\82¹\82ñ\81B\94\90¶\82·\82é\8fê\8d\87\82Í\8aO\82µ\82Ä\82Ý\82Ä\82\82¾\82³\82¢\81B
-<LI>
-\83u\83\89\83E\83U\82É\82æ\82Á\82Ä\82Í\81AJavaApplet\95\\8e¦\83y\81[\83W\82©\82ç\83y\81[\83W\82ð\88Ú\93®\82·\82é\82Æ\90Ø\92f\82³\82ê\82é\82±\82Æ\82ª\82 \82è\82Ü\82µ\82½\82ª\81AVer0.90h\82Å\89ð\8fÁ\82µ\82Ü\82µ\82½\81B
-
-<LI>/var/log/opengate.log\82É\83G\83\89\81[\82ª\8fo\82Ä\82¢\82ê\82Î\82»\82ê\82ð\8eQ\8dl\82É\82µ\82Ä\82\82¾\82³\82¢\81B
-
-<LI>\8fã\8bL\8d\80\96Ú\82Ì Java \8aÖ\98A\82ð\8am\94F\82\82¾\82³\82¢\81B\82Ü\82½ netstat \93\99\82Å\83l\83b\83g\83\8f\81[\83N\8fó\8bµ\82ð\94c\88¬\82\82¾\82³\82¢\81BWeb\83u\83\89\83E\83U\89º\95\94\82Ì\83\81\83b\83Z\81[\83W\8ds\82É\89½\82©\8fo\82Ä\82È\82¢\82©\8am\94F\82\82¾\82³\82¢\81B
-
-<LI>\92[\96\96\82Æ\83Q\81[\83g\83E\83F\83C\83g\82Ì\8aÔ\82É\83L\83\83\83b\83V\83\85\83T\81[\83o\82âNAT\81CProxy\82È\82Ç\82ª\91¶\8dÝ\82·\82é\8fê\8d\87\81A\82»\82Ì\83T\81[\83o\82Ì IP \83A\83h\83\8c\83X\82ð\92[\96\96\83A\83h\83\8c\83X\82Æ\8cë\89ð\82·\82é\82½\82ß\81AApplet \82ª\90³\8fí\93®\8dì\82µ\82Ü\82¹\82ñ\81B\82±\82Ì\82æ\82¤\82È\8d\\90¬\82Í\94ð\82¯\82Ä\82\82¾\82³\82¢\81B
-
-</UL>
-<P>
-<LI>\97\98\97p\8b\96\89Â\83y\81[\83W\82Ì\95\\8e¦\82ª\82¨\82©\82µ\82¢\81B
-<P>
-<UL>
-<LI>\90³\8fí\82Å\82 \82ê\82Î\81A2\96\87\82Ì\83y\81[\83W\82ª\8fd\82È\82Á\82Ä\95\\8e¦\82³\82ê\82Ü\82·\81B\91æ1\83y\81[\83W\82É\82Í\81AJavaApplet\82ª\89©\90F\82Ì\98g\82Ì\92\86\82É\83\86\81[\83UID\93\99\82ð\95\\8e¦\82µ\82Ü\82·\81B\91æ2\83y\81[\83W\82É\82Í\81A\8ae\8eí\83\8a\83\93\83N\82Æ\97\98\97p\8fã\82Ì\92\8d\88Ó\82ª\92u\82©\82ê\82Ü\82·\81B
-<LI>\91æ1\83y\81[\83W\82É\89©\90F\82¢\98g\82ª\8fo\82È\82¢\8fê\8d\87\82Í\81AJavaApplet\82Ì\8bN\93®\82É\8e¸\94s\82µ\82½\82Æ\8dl\82¦\82ç\82ê\82Ü\82·\81B\8fã\8bL\82Ì\8d\80\96Ú\82ð\8eQ\8fÆ\82\82¾\82³\82¢\81B
-<LI>
\91æ2
\83y
\81[
\83W
\82ÍJavaScript
\82Å
\8fo
\82µ
\82Ä
\82¢
\82Ü
\82·
\81B
\8fo
\82È
\82¢
\8fê
\8d\87\82ÍJavaScript
\8aÖ
\98A
\82ª
\8b^
\82í
\82µ
\82¢
\82Å
\82·
\81B
\82½
\82¾
\82µ
\81A
\83y
\81[
\83W
\82ª
\8fo
\82È
\82
\82Ä
\82à
\97\98\97p
\82É
\8ex
\8fá
\82Í
\82 \82è
\82Ü
\82¹
\82ñ
\81B
\82È
\82¨
\81AInterner Explorer
\82Ì
\8fê
\8d\87\82Ì
\82Ý
\8bN
\82±
\82é
\82Ì
\82Å
\82 \82ê
\82Î
\81A
\83u
\83\89\83E
\83U
\82Ì
\90Ý
\92è
\82ª
\89ó
\82ê
\82Ä
\82¢
\82é
\82½
\82ß
\82©
\82à
\92m
\82ê
\82Ü
\82¹
\82ñ
\81B
\91¼
\82Ì
\83y
\81[
\83W
\82Å
\82à
\93¯
\8c»
\8fÛ
\82ª
\82 \82ê
\82Î
\88È
\89º
\82ð
\8c©
\82Ä
\82
\82¾
\82³
\82¢
\81B<A HREF=http://support.microsoft.com/support/kb/articles/q180/1/76.asp> http://support.microsoft.com/support/kb/articles/q180/1/76.asp </A>
\81BIE6
\82Å
\82à
\8bN
\82«
\82Ü
\82µ
\82½
\81B
-</UL>
-
-<P>
-<LI>\97\98\97p\94F\8fØ\82ð\92Ê\82ç\82È\82\82Ä\82à\8dÅ\8f\89\82©\82ç\83l\83b\83g\83\8f\81[\83N\82ª\97\98\97p\82Å\82«\82é\81B
-<P>
-<UL>
-<LI>\83N\83\89\83C\83A\83\93\83g\83}\83V\83\93\82ÉWeb\83u\83\89\83E\83U\82ª\8fí\92\93\82µ\82Ä\82¢\82Ü\82¹\82ñ\82©\81BMacintosh\82Å\82Í\81A\89æ\96Ê\8fã\82É\96³\82\82Ä\82à\89E\8fã\92[\82Ì\83A\83v\83\8a\83P\81[\83V\83\87\83\93\83\81\83j\83\85\81[\82É\8ec\82Á\82Ä\82¢\82é\82±\82Æ\82ª\82 \82è\82Ü\82·\81B\82Ü\82½\81A\82 \82é\8eí\82ÌOS\82Å\82Í\8fI\97¹\82Ì\8aT\94O\82Ì\82È\82¢\82à\82Ì\82ª\82 \82è\82Ü\82·\81B\82±\82Ì\8fê\8d\87\82Í\81Ajava\82É\8fI\97¹\83{\83^\83\93\82ð\95t\89Á\82·\82é\82È\82Ç\82Ì\83v\83\8d\83O\83\89\83\80\95Ï\8dX\82ª\95K\97v\82Å\82·\81B
-
-<LI>\83V\83X\83e\83\80\82Ì\93Ë\91R\92â\8e~\82â\83l\83b\83g\83\8f\81[\83N\82Ì\90Ø\92f\82Ì\82Æ\82«\82É\82Í\81A\83R\83l\83N\83V\83\87\83\93\82Ì\8fI\97¹\82ª\83T\81[\83o\82É\91Î\82µ\82Ä\91¦\8e\9e\82É\93`\82í\82è\82Ü\82¹\82ñ\81Bopengatesrv \82Í\81A\8e\9f\82Ì\92è\8aú\98A\97\8d\82Ì\8e\9e\82É\82»\82ê\82ð\8c\9f\8fo\82µ\82Ü\82·\82Ì\82Å\81A\82µ\82Î\82ç\82\91Ò\82Ä\82Î\95Â\8d½\82³\82ê\82é\82Í\82¸\82Å\82·\81B
-
-<LI>
\82¢
\82Â
\82Ü
\82Å
\82à
\95Â
\8d½
\82³
\82ê
\82È
\82¢
\8fê
\8d\87\82Í
\81A
\89½
\93\99\82©
\82Ì
\8c´
\88ö
\82Å ipfw
\82Ì
\83\8b\81[
\83\8b\82ª
\90¶
\82«
\8ec
\82Á
\82Ä
\82µ
\82Ü
\82Á
\82½
\82à
\82Ì
\82Æ
\8ev
\82í
\82ê
\82Ü
\82·
\81B
\8eè
\93®
\82Å
\8dí
\8f\9c\82·
\82é
\82©
\83V
\83X
\83e
\83\80\82ð
\83\8a\83u
\81[
\83g
\82µ
\82Ä
\82
\82¾
\82³
\82¢
\81BVer.0.90e
\88È
\8d~
\82Å
\82 \82ê
\82Î
\81A
\83v
\83\8d\83Z
\83X
\82Ì
\88Ù
\8fí
\8fI
\97¹
\8e\9e\82É
\90¶
\82«
\8ec
\82Á
\82½
\83\8b\81[
\83\8b\82ð
\92T
\82µ
\82Ä
\8dí
\8f\9c\82·
\82é<A HREF=rulechk.txt>
\83X
\83N
\83\8a\83v
\83g</A>
\82ª
\97\98\97p
\82Å
\82«
\82Ü
\82·
\81B
-
-<LI>\92[\96\96\82Æ\83Q\81[\83g\83E\83F\83C\83g\82Ì\8aÔ\82É NAT \82ª\91¶\8dÝ\82·\82é\8fê\8d\87\81A\93¯\88ê\83A\83h\83\8c\83X\82ð\8b¤\97L\82·\82é\82±\82Æ\82É\82È\82è\82Ü\82·\82Ì\82Å\81A\88ê\90l\82ª\8aJ\82¯\82ê\82Î\8b¤\97L\82³\82ê\82Ü\82·\81B\82±\82Ì\82æ\82¤\82È\8d\\90¬\82Í\94ð\82¯\82Ä\82\82¾\82³\82¢\81B
-</UL>
-<P>
-
-<LI>\97\98\97p\8b\96\89Â\82ð\92Ê\82Á\82½\82Ì\82É\83l\83b\83g\83\8f\81[\83N\82ª\97\98\97p\82Å\82«\82È\82¢\81B
-<P>
-<UL>
-<LI>\81uipfw list\81v\82Å ipfw \82Ì\83\8b\81[\83\8b\82ð\8am\94F\82\82¾\82³\82¢\81B\83\8b\81[\83\8b\82Ì\97D\90æ\8f\87\93\99\82Å\96µ\8f\82\82Í\82È\82¢\82Å\82·\82©\81B\83u\81[\83g\8e\9e\82Éipfw \8bN\93®\83G\83\89\81[\83\81\83b\83Z\81[\83W\82Í\8fo\82Ä\82È\82¢\82Å\82µ\82å\82¤\82©\81B
-
-<LI>/var/log/opengate.log\82É\83G\83\89\81[\82ª\8fo\82Ä\82¢\82ê\82Î\82»\82ê\82ð\8eQ\8dl\82É\82µ\82Ä\82\82¾\82³\82¢\81B
-
-<LI>Redirect\82³\82ê\82étoppage\82ª\81uNoCache\81v\82Ì\90Ý\92è\82ð\8e\9d\82Á\82Ä\82¢\82È\82¢\82Æ\81A\8dÄ\93x\82Ì\83A\83N\83Z\83X\82Å\82Í\83L\83\83\83b\83V\83\85\82ª\8eg\82í\82ê\82é\81B\97á\82¦\82Î\81AYahoo\83A\83N\83Z\83X\82ªOpengate\82ÖRedirect\82³\82ê\82½\82Æ\82«\82Í\81A\97á\82¦\83l\83b\83g\83\8f\81[\83N\82ª\8aJ\82¢\82Ä\82¢\82Ä\82à\81AYahoo\83A\83N\83Z\83X\82É\91Î\82µ\82ÄOpengate\82Ì\83y\81[\83W\82ª\83L\83\83\83b\83V\83\85\82©\82ç\8eæ\82è\8fo\82³\82ê\82é\81B
-</UL>
-<P>
-
-<LI>\90³\82µ\82¢\83p\83X\83\8f\81[\83h\82ð\91\97\82Á\82Ä\82¢\82é\82Í\82¸\82È\82Ì\82É\8b\91\94Û\82³\82ê\82é\81B
-<P>
-<UL>
-<LI>\97\98\97p\82µ\82Ä\82¢\82é\94F\8fØ\83T\81[\83o\82É\91Î\82µ\82Ä\92¼\90Ú\82É\83p\83X\83\8f\81[\83h\82ð\91\97\82Á\82Ä\94F\8fØ\83T\81[\83o\82Ì\8fó\91Ô\82ð\8am\94F\82\82¾\82³\82¢\81B
-
-<LI>/etc/opengatesrv.conf, radius.conf, pam.conf \82Ì\94F\8fØ\83T\81[\83o\90Ý\92è\82ª\82¨\82©\82µ\82\82È\82¢\82Å\82·\82©\81B
-
-<LI>/var/log/opengate.log\82É\83G\83\89\81[\82ª\8fo\82Ä\82¢\82ê\82Î\82»\82ê\82ð\8eQ\8dl\82É\82µ\82Ä\82\82¾\82³\82¢\81B
-</UL>
-
-<P>
-<LI>\83y\81[\83W\82ª\96]\82Þ\8c¾\8cê\88È\8aO\82Å\95\\8e¦\82³\82ê\82é\81B
-<P>
-<UL>
-<LI>index.html\93à\82Ì\8bL\8fq\81A \82»\82Ì\83f\83B\83\8c\83N\83g\83\8a\96¼\81A makefile\93à\82Ì\8bL\8fq\82ð\8am\82©\82ß\82Ä\82\82¾\82³\82¢\81B\8c¾\8cê\8ew\92è\82ÌID\82Í\88ê\92v\82·\82é\95K\97v\82ª\82 \82è\82Ü\82·\81BID\82Í\91å\95¶\8e\9a\81A\8f¬\95¶\8e\9a\82à\8bæ\95Ê\82µ\82Ü\82·\81BID\82Í2\95¶\8e\9a\82ð\8eg\97p\82µ\82Ü\82·\81B
-<LI>\90V\82µ\82¢\8c¾\8cê\82ð\92Ç\89Á\82·\82é\8e\9e\82Í\81A\93¯\97l\82È\8c`\8e®\82Å\83f\83B\83\8c\83N\83g\83\8a\82É\83t\83@\83C\83\8b\82ð\94z\92u\82µ\81AMakefile\82ÉID\82ð\92Ç\89Á\82\82¾\82³\82¢\81B
-</UL>
-
-<P>
-<LI>\93±\93ü\88È\8d~\81A\83T\81[\83o\82Ì\83l\83b\83g\83\8f\81[\83N\83g\83\89\83u\83\8b\82ª\91½\82¢\82æ\82¤\82¾\81B
-<P>
-<UL>
-<LI>
-\82Å\82«\82é\82¾\82¯\90V\82µ\82¢\82à\82Ì\82ð\97\98\97p\89º\82³\82¢\81B\93Á\82ÉVer.0.54\88È\91O\82É\82Í\81C\92·\8aú\89^\97p\82É\8dÛ\82µ\82Ä\92v\96½\93I\82È\83G\83\89\81[\82ð\8bN\82±\82·\83v\83\8d\83O\83\89\83\80\83~\83X\82ð\8aÜ\82ñ\82Å\82¢\82Ü\82µ\82½\81B
-</UL>
-<P>
-
-<LI>\94F\8fØ\92Ê\89ß\82É1\95ª\88È\8fã\82à\8a|\82©\82é\82±\82Æ\82ª\82 \82é\81B
-<P>
-<UL>
-<LI>
-\82Ü\82¸\82Í\82Ç\82±\82Å\8e\9e\8aÔ\82ð\97v\82µ\82Ä\82¢\82é\82©\82ð\90Ø\82è\95ª\82¯\82Ä\89º\82³\82¢\81B\93\96\95û\82Å\82Í\81AApache\82Ìhttpd.conf\82É\82¨\82¢\82Ä"HostnameLookups On"\82ª\90Ý\92è\82³\82ê\82Ä\82¢\82½\82½\82ß\81A\96¼\91O\89ð\8c\88\82É\8e\9e\8aÔ\82ð\97v\82µ\82½\82±\82Æ\82ª\82 \82è\82Ü\82·\81BOff\82É\90Ý\92è\82µ\82Ä\89ð\8c\88\82µ\82Ü\82µ\82½\81B
-</UL>
-<P>
-
-<LI>\82Ç\82¤\82µ\82æ\82¤\82à\82È\82\82È\82Á\82½\82Æ\82«
-<P>
-<UL>
-<LI>
-opengatesrv/opengatesrv.h\92\86\82É\81u#define DEBUG\81v\82Ì\92è\8b`\82ª\82 \82è\82Ü\82·\81B\82±\82ê\82ð\81u1\81v\82É\90Ý\92è\82·\82é\82Æ\81Aopengate.log\82É\83f\83o\83b\83O\8fo\97Í\82ª\8fo\82Ü\82·\81B\82Ü\82½\81Aerr_msg()\8aÖ\90\94\82Í\81A\8fo\97Í\82ðopengate.log\82É\8fo\82µ\82Ü\82·\81B\93K\93\96\82È\88Ê\92u\82É\91}\93ü\82µ\82Ä\89º\82³\82¢\81B\8eg\82¢\95û\82Í\81A\83v\83\8d\83O\83\89\83\80\92\86\82Ì\97á\82ð\8c©\82ê\82Î\95ª\82©\82é\82Æ\8ev\82¢\82Ü\82·\82ª\81Aprintf()\8aÖ\90\94\82Æ\93¯\82¶\95¶\96@\82Å\82·\81B
-</UL>
-</UL>
-</BODY>
-</HTML>
+++ /dev/null
-<HTML>\r
-\r
-<body bgcolor=#FAFFF0>\r
-\r
-<H3>Opengate Install Procedure</H3>\r
-\r
-<UL>\r
-<LI>Machines and Networks\r
-\r
-<UL>\r
-<LI>Gateway Machine<BR>\r
-FreeBSD Ver4.x or 5.x, Having Two EtherBoard\r
-<P>\r
-<LI>Authentication Server<BR>\r
-Need POP3 server, POP3S server, FTP server, RADIUS server ,or some auth methods via PAM.\r
-<P>\r
-<LI>Network to which Client Terminals are connected<BR>\r
-Don't insert any address conversion system such as NAT or Proxy between gateway and client.\r
-</UL>\r
-<P>\r
-<LI>Prepare kernel having ipfw function<BR>\r
-<PRE>\r
-cd /usr/src/sys/i386/conf\r
-cp GENERIC MYKERNEL\r
-edit MYKERNEL\r
- insert following 3 lines\r
- options IPFIREWALL\r
- options IPFIREWALL_FORWARD\r
- options IPDIVERT\r
-\r
-config MYKERNEL\r
-cd ../compile/MYKERNEL\r
-make depend\r
-make\r
-make install\r
-</PRE>\r
-\r
-<LI>Tuning of network setting<BR>\r
-\r
-This section is needed when you apply this software to an environment \r
-where many clients are connected.\r
-In such case, modification is recommended about the following two values.\r
-<PRE>\r
-kern.ipc.somaxconn\r
- Maximum number of TCP connections(default=128).\r
- As Opengate server keeps TCP connection with each terminal, \r
- the number must be set larger than the number of terminals.\r
-\r
-kern.ipc.nmbclusters\r
- Maximum number of mbuf clusters (1cluster=2KB). It needs "send/recv \r
- buffer size(default=32KB)" x "number of connections". \r
- The usage statistics is shown by "netstat -m".\r
-</PRE>\r
-For example, these values are set as follows. \r
-Be care about the memory size for mbuf (following setting needs 128MB).\r
-<PRE>\r
-Add two lines in the file "/etc/sysctl.conf".\r
- kern.ipc.somaxconn=4096\r
- kern.ipc.nmbclusters=65536\r
-</PRE>\r
-\r
-<LI>Prepare related softwares<BR>\r
-<PRE>\r
- Essential: Apache, ipfw\r
- Optional: NATD, DHCP, SSL, Perl etc\r
-</PRE>\r
- * Check the installation carefully and be familiar with these softwares. \r
-Debugging is confused, if these softwares are incomplete.\r
-<P>\r
-\r
-<LI>Setup related softwares\r
-\r
-<UL>\r
-<LI>Modify /etc/rc.conf\r
-<PRE>\r
-gateway_enable="YES" <==If NATD is not used\r
-firewall_enable="YES"\r
-firewall_type="simple"\r
-natd_enable="YES" <==If NATD is used\r
-natd_interface="fxp0" <== ", the name must be matched to your interface.\r
-</PRE>\r
-\r
-<LI>Modify /etc/rc.firewall\r
-<BR>\r
-The file /etc/rc.firewall is the default firewall script.\r
-The script file can be changed as [firewall_script="/etc/xxxx"] in rc.conf.\r
-<BR>\r
-When [firewall_type="simple"], the firewall rules matched to [simple] is loaded. \r
-<P>\r
-\r
-Example description in /etc/rc.firewall.<BR> \r
-Be care that rules matched to [simple] are distributed in the file.\r
-Check the real setting by the command [ipfw list].\r
-The sample setting is not the ideal. \r
-Refer to the default rc.firewall and edit it properly.\r
-<PRE>\r
-[Ss][Ii][Mm][Pp][Ll][Ee])\r
- # set these to your outside interface network and netmask and ip\r
- oif="fxp0"\r
- onet="133.49.20.0"\r
- omask="255.255.252.0"\r
- oip="133.49.22.5"\r
-\r
- # set these to your inside interface network and netmask and ip\r
- iif="fxp1"\r
- inet="192.168.0.0"\r
- imask="255.255.255.0"\r
- iip="192.168.0.1"\r
-\r
- # divert packet to NATD ################################\r
- $fwcmd add 1 divert natd ip from any to any via ${oif}\r
-\r
- # Stop spoofing\r
- $fwcmd add deny all from ${inet}:${imask} to any in via ${oif}\r
- $fwcmd add deny all from ${onet}:${omask} to any in via ${iif}\r
-\r
- # Allow from / to myself\r
- $fwcmd add pass all from ${iip} to any via ${iif}\r
- $fwcmd add pass all from ${oip} to any via ${oif}\r
- $fwcmd add pass all from any to ${iip} via ${iif}\r
- $fwcmd add pass all from any to ${oip} via ${oif}\r
-\r
- # Allow DNS queries out in the world \r
- # (if DNS is on localhost, delete passDNS)\r
- $fwcmd add pass udp from any 53 to any\r
- $fwcmd add pass udp from any to any 53\r
-\r
- # Forwarding http connection from unauth client ###############\r
- $fwcmd add 60000 fwd localhost tcp from ${inet}:${imask} to any http\r
-\r
- # Allow TCP through if setup succeeded ########################\r
- $fwcmd add 60100 pass tcp from any to any established\r
- </PRE>\r
-\r
-Caution\r
-<BR>\r
-Rule number for [forward] Command must be larger than the rule numbers used \r
-in opengate(10000-40000).\r
-<BR>\r
-Rule number for [divert to natd] must be smaller than most rules.\r
-<P>\r
-The file [conf/opengatefw.conf] is the script describing the above rules.\r
-You can edit and use this script instead of rc.firewall. \r
-<P>\r
-<LI>Check the action of ipfw<BR>\r
-\r
-Check the firewall state by the command "ipfw list".<BR>\r
-By using ipfw command, add / delete the pass rules for a client(xx.xx.xx.xx) and check the network open / close for the client. \r
-\r
-<PRE>\r
- ipfw add 10000 allow ip from xx.xx.xx.xx to any <===Open outgoing\r
- ipfw add 10000 allow ip from any to xx.xx.xx.xx <===Open incoming\r
-\r
- ipfw del 10000 <===Close\r
-</PRE>\r
-Be falimiar with ipfw command. \r
-Opengate is a software to send out the ipfw command like above one.\r
-<P>\r
-<LI>Modify /usr/local/etc/apache/httpd.conf\r
-<P>\r
-Web access control\r
-<PRE>\r
-order deny,allow\r
-deny from all\r
-allow from 133.49.0.0/255.255.0.0 (Example, need to change address)\r
-allow from 192.168.0.0/255.255.0.0\r
-</PRE>\r
-\r
-CGI enable\r
-<PRE>\r
-#ScriptAlias /cgi-bin/ "/usr/local/www/cgi-bin/"\r
-|\r
-V\r
-ScriptAlias /cgi-bin/ "/usr/local/www/cgi-bin/"\r
-</PRE>\r
-\r
-Jump to Top at Page NotFound\r
-<PRE>\r
-#ErrorDocument 404 /missing.html\r
-|\r
-V\r
-ErrorDocument 404 /index.html\r
-</PRE>\r
-\r
-<LI>Modify /etc/syslog.conf to add opengate.log\r
-\r
-<PRE>\r
-local1.* /var/log/opengate.log\r
- --Separated by TAB key\r
-</PRE>\r
-\r
-<LI>Make log file.\r
-<PRE>\r
-touch /var/log/opengate.log\r
-</PRE>\r
-</UL>\r
-\r
-<LI>Expand the archive file: opengatexxx.tar.gz<BR>\r
-<PRE>\r
- tar zxvf opengatexxx.tar.gz\r
- (where xxx is the version. Use latest one) \r
-</PRE>\r
-Then, the following directorys are created. Check the files.\r
-Change the setting if you want(Most setting can be modified after installation).\r
-<PRE>\r
- doc: Documentations\r
- conf: configuration file sample, firewall control perl script sample\r
- javahtml: Client Java Programs and HTML files.\r
- opengatesrv: Server CGI program\r
-</PRE>\r
-\r
-<LI>Java setup: compile javahtml/Opengate.java, if jar file is not found.\r
-<PRE>\r
- javac Opengate.java\r
- jar cvf Opengate.jar *.class\r
-</PRE>\r
-<LI>Make Opengateserver\r
- <PRE>\r
- cd opengatesrv : Move to opengatesrv directory\r
- edit Makefile : Modify Makefile (parameters are described below)\r
- **HOSTADDR must be changed to IP address of your \r
- machine's client side interface.**\r
- edit opengatesrv.h : Modify header file(parameters are described below)\r
- make : Compile\r
- su : Change to Root\r
- make install : Install\r
- </PRE>\r
-<LI>Modify /etc/opengatesrv.conf\r
-\r
-Authentication server is indexed by opengatesrv.conf. \r
-The format is one of the following. Multiple servers can be set.\r
-("[..]" means optional, "|" means OR.)\r
-\r
-<PRE>\r
-ID:address=hostname|hostaddr:[port=portno:]protocol=ftp|pop3|pop3s:\r
-ID:protocol=radius:[conffile=filepath:]\r
-ID:protocol=pam:[servicename=name:]\r
-</PRE>\r
-where each term indicates following.\r
-\r
-<PRE>\r
-ID:Identification keyword for the authentication server.\r
-address: IP address(or domain name) of the authentication server.\r
-protocol: protocol for authentication, \r
- At present, ftp,pop3,pop3s,radius,pam are available.\r
-port: port number for authentication. If ignored, follows to /etc/services.\r
-conffile: path to config file at RADIUS. default is "/etc/radius.conf".\r
-servicename: service name at PAM. default is "opengate". \r
-</PRE>\r
-Examples of opengatesrv.conf\r
-<P>\r
-*This is a simple example. \r
-<BR>\r
-In this case, the user is checked by FTP accessing to the address xx.xx.xx.xx.\r
-At first, check the basic installation by the setting like this.\r
-<PRE>\r
- default:tc=as\r
- as:address=xx.xx.xx.xx:protocol=ftp:\r
- (FTP access to address xx.xx.xx.xx must be checked in advance)\r
-</PRE>\r
-\r
-\r
-*Following example sets four authentication servers. <BR>\r
-If the user entered as [userID] in userID field, authentication is turned to [default(=cs)] server. \r
-If entered as [userID@cc], authentication turned to [cc] server.\r
-If entered as [userID@pam], authentication turned to [pam] server.\r
-If entered as [userID@rad], authentication turned to [rad] server.\r
-\r
-<PRE>\r
- default:tc=cs\r
- cs:address=noah.cs.is.saga-u.ac.jp:protocol=pop3:\r
- cc:address=himiko.cc.saga-u.ac.jp:protocol=ftp:port=21:\r
- pam:protocol=pam:\r
- rad:protocol=radius:\r
-</PRE>\r
-*If protocol=pam is defined, you must setup [/etc/pam.conf] or [/etc/pam.d/opengate].\r
-Opengate checks auth and account.\r
-<BR>\r
-Following is an example setting in /etc/pam.conf. \r
-<PRE>\r
-opengate auth required pam_radius.so \r
-opengate account required pam_permit.so\r
-</PRE>\r
-Following is an example of /etc/pam.d/opengate \r
-<PRE>\r
-auth required pam_radius.so \r
-account required pam_permit.so\r
-</PRE>\r
-<P>\r
-*If protocol=radius is defined, you must setup [/etc/radius.conf]. \r
-Following is an example of radius.conf. \r
-\r
-<PRE>\r
-auth radius1.foo.bar "password1" 5 6\r
-auth radius2.foo.bar "password2" 5 6\r
-</PRE>\r
-\r
-<LI>Opengate action check<BR>\r
-1)Access to some external URL from client web browser.<BR>\r
-2)If authentication page is displayed, \r
-enter userid and password registered in auth server.<BR>\r
-3)If accept page is displayed, access external URL.<BR>\r
-4)If the external page is displayed, terminate the browser.<BR>\r
-5)Reload browser and access to external URL.<BR>\r
-6)If the authentication page is displayed, you complete the basic installation.<BR>\r
-\r
-Errors <BR>\r
-At 2) Try to access the Opengate server URL. \r
-If success, check ipfw fwd rule. \r
-If not, check www/data directory setting.<BR>\r
-At 3) Try authentication server access(eg. ftp xx.xx.xx.xx) from command line.\r
-If success, check opengatesrv.conf.\r
-If not, check access control and user registration in auth server.<BR>\r
-At 4)Check firewall setting with ipfw command.<BR>\r
-At 6)Try other URLs. \r
-If success, the first page is loaded from browser's cache.\r
-If not, check the firewall setting.<BR>\r
-*More debuging documentation exists in other file.\r
-<P>\r
-<LI>Html setup: change javahtml/++/*.html, if you want to modify message.\r
- Html documents are prepared for each languages (eg; ja en)\r
- <PRE>\r
- topindex.html : first html which describe the auto-jump to Authentication page.\r
- index.html : Authentication page\r
- deny.html : page sent at authentication denyed.\r
- accept.html,accept2.html : pages sent at authntication accepted.\r
- Don't remove mark "**OpengateAppletHere**", where\r
- Java Applet description is inserted.\r
- %%HOSTADDR%% is replaced with address at installation.\r
- %%OPENGATEDIR%% is replaced with install directory.\r
- </PRE>\r
-<LI>Firewall control script\r
-<P>\r
-If USEFWSCRIPT=0, CGI execs ipfw command directly. In this case, the\r
-all packets from/to the authenticated client is allowed. If 1, perl\r
-script controls the ipfw command. By editting opengatefw.pl, flexible\r
-control can be done. Be care to maintain it simple for better\r
-performance and security. The script runs under exclusive mode. \r
-Insertion of time comsuming logics may result in less performance.\r
-<P>\r
-If you want to control firewall state with some user property in a\r
-database, edit the skeleton routine comm-userdb.c to send property to this script.\r
-<P>\r
-<LI>Parameteres in Makefile\r
-<BR>\r
-<PRE>\r
-HOSTADDR = IP address of gateway interfaced to client network.\r
-HTMLTOP1 = Web top directory \r
-HTMLTOP2 = Web top directort (for SSL)\r
-OPENGATEDIR = Opengate install directory (from Web top)\r
-CGIPATH = CGI directory\r
-CGIPROG = CGi program name\r
-CONFIGFILE = Configuration file name\r
-USEFWSCRIPT= Enable(1) or disable(0) Perl script to control firewall open\r
-FWSCRIPT = Firewall control Perl script name\r
-FWSCRIPTPATH = Perl script path\r
-LOCKFILE= Lock file for exclusive execution\r
-HTMLDOCS= HTML files listing\r
-DENYDOC = HTML file sent at denying\r
-ACCEPTDOC = HTML file sent at accepting\r
-HTMLLANGS= Languages of HTML files\r
-ARPPATH= Path to arp command\r
-IPFWPATH= Path to ipfw command\r
-</PRE>\r
-<P>\r
-<LI>Parameters in opengatesrv.h\r
-<BR>\r
-<PRE>\r
- DEBUG : If set to 1, function call trace log is put out to syslog.\r
-\r
- DURATIONDEFAULT : Default time duration to wait for Java Applet connect.(second)\r
- If no connection in the duration, the network is closed. \r
- The duration can be changed in auth page by the user.\r
-\r
- DURATIONMAX : Maximum duration to wait for Java Applet connect. (second)\r
- Under this value, the Applet waiting duration (= duration of\r
- network open without Java Applet) can be specified by the user \r
- on the authentication page.\r
- If user specified duration is not agreeable, set it the same \r
- value as DURATIONDEFAULT and remove the field in auth page.\r
-\r
- ACTIVECHECKINTERVAL : Time interval of checking the terminal.(second)\r
- In no java mode, check by MAC address and packet count for the\r
- terminal's IP address.\r
- In java mode, check by HELLO exchange and packet count.\r
-\r
- COMMWAITTIMEOUT : Server waiting time for communication reply.(second)\r
-\r
- NOREPLYMAX : Permitted count of no reply to HELLO. If the client does not \r
- send back HELLO more than NOREPLYMAX times, then the network\r
- is closed.\r
-\r
- NOPACKETINTERVAL : If no packet is passed for this time interval, then \r
- the network is closed.(second)\r
-\r
- LOCKTIMEOUT : Maximum locking time for exclusive ipfw action.(second)\r
-\r
- IPFWMIN : Minimum ipfw rule number used by opengate.\r
- IPFWMAX : Maximum ipfw rule number used by opengate.\r
- IPFWINTERVAL : Rule number interval used by opengate.\r
- The maximum terminals/processes can be controled by these value.\r
-\r
- PORTMIN : minimum port value used by opengate.\r
- PORTMAX : maximum port value used by opengate.\r
- Set unused port range.\r
- \r
- FACILITY : syslog facility\r
-\r
- PAMSERVICENAME : default service name at PAM.\r
- RADIUSCONF : default path to radius.conf.\r
-\r
-</PRE>\r
-<P>\r
-<LI>Parameters in opengatesrv.conf\r
-<BR>\r
-If parameters exist in opengatesrv.conf, the value on conf overrides the above.\r
-\r
-</UL>\r
-</BODY>\r
-</HTML>\r
+++ /dev/null
-<html LANG="jp">\r
-<head>\r
-<META HTTP-EQUIV="Content-Type" CONTENT="text/html;charset=Shift_JIS">\r
-\r
-<title>Opengate INSTALL</title>\r
-</head>\r
-\r
-<body bgcolor=#FAFFF0>\r
-\r
-<H3> \83C\83\93\83X\83g\81[\83\8b\8eè\8f\87</H3>\r
-\r
-<UL>\r
-<LI>\91O\92ñ\8fð\8c\8f\r
-\r
-<UL>\r
-<LI>\83Q\81[\83g\83E\83F\83C\83}\83V\83\93<BR>\r
-FreeBSD Ver4.x\82Ü\82½\82Í5.x\81AEtherBoard2\96\87\95t\r
-<P>\r
-<LI>\94F\8fØ\83T\81[\83o<BR>\r
-\8e\9f\82Ì\82à\82Ì\82É\91Î\89\9e\81B\r
-POP3\83T\81[\83o\81APOP3S\83T\81[\83o\81AFTP\83T\81[\83o\81ARADIUS\83T\81[\83o\81APAM\91Î\89\9e\95û\8e®\r
-\r
-<P>\r
-<LI>\83N\83\89\83C\83A\83\93\83g\91¤\83l\83b\83g\83\8f\81[\83N<BR>\r
-\83N\83\89\83C\83A\83\93\83g\82Æ\82Ì\8aÔ\82É\81AIP\83A\83h\83\8c\83X\82Ì\95Ï\8a·\82ð\8ds\82¤NAT\82âProxy\82È\82Ç\82ª\91¶\8dÝ\82µ\82È\82¢\82±\82Æ\81B\r
-</UL>\r
-<P>\r
-<LI>ipfw\95t\82«\82Ì\83J\81[\83l\83\8b\82ð\8dì\90¬\82·\82é\81B<BR>\r
-\r
-<PRE>\r
-cd /usr/src/sys/i386/conf\r
-cp GENERIC MYKERNEL\r
-edit MYKERNEL\r
-\81@\8e\9f\82Ì3\8ds\82ð\92Ç\89Á\82·\82é\81B\r
- options IPFIREWALL\r
- options IPFIREWALL_FORWARD\r
- options IPDIVERT\r
-\r
-config MYKERNEL\r
-cd ../compile/MYKERNEL\r
-make depend\r
-make\r
-make install\r
-</PRE>\r
-\r
-<LI>\83l\83b\83g\83\8f\81[\83N\83`\83\85\81[\83j\83\93\83O\r
-<BR>\r
-\82±\82Ì\8d\80\82Í\91å\8bK\96Í\89^\97p\82Ì\82Æ\82«\82É\8eQ\8fÆ\82·\82é\8e\96\81B\r
-\r
-<PRE>\r
-kern.ipc.somaxconn\r
- \81@\8eó\82¯\95t\82¯\82éTCP\90Ú\91±\82Ì\8dÅ\91å\92l\81idefault=128\81j\81B\97\98\97p\92[\96\96\96\88\82ÉTCP\90Ú\91±\82ª\88Û\8e\9d\82³\82ê\r
- \82é\82Ì\82Å\81A\92[\96\96\90\94\82É\94ä\82×\82Ä\8f\\95ª\82É\91å\82«\82\82·\82é\95K\97v\82ª\82 \82é\81B\r
-\r
-kern.ipc.nmbclusters\r
-\81@mbuf\81i1cluster2KB\81j\82Ì\8dÅ\91å\90\94\81B\91\97\8eó\90M\83o\83b\83t\83@\83T\83C\83Y(default=32KB)x\90Ú\91±\90\94\r
-\81@\95ª\82ª\95K\97v\81B"netstat -m"\82Å\97\98\97p\8fó\8bµ\8am\94F\89Â\94\\81B\r
-</PRE>\r
-\r
-\82±\82ê\82ç\82Ì\90Ý\92è\95Ï\8dX\82Í\88È\89º\82Å\8ds\82¤\81B\88È\89º\82Ì\97á\82Å\82Ímbuf\97Ì\88æ\82Í128MB\82Æ\82È\82é\81B\95K\97v\82È\83\81\r
-\83\82\83\8a\97e\97Ê\82É\82à\92\8d\88Ó\82ð\82·\82é\82±\82Æ\81B\r
-<PRE>\r
-\81@/etc/sysctl.conf \82É\88È\89º\82ð\92Ç\89Á\r
-\81@\81@kern.ipc.somaxconn=4096\r
-\81@\81@kern.ipc.nmbclusters=65536\r
-</PRE>\r
-\r
-<LI>\8ae\8eí\83\\83t\83g\82Ì\83C\83\93\83X\83g\81[\83\8b\82Æ\93®\8dì\8am\94F\82ð\8ds\82¤\81B\r
-\r
-<PRE>\r
- \95K\90{\81FApache\81Aipfw\r
- \94C\88Ó\81FNATD\81ADHCP\81ASSL\81Aperl\82È\82Ç\r
-</PRE>\r
-\r
- \81\96\92\8d\88Ó\90[\82\83C\83\93\83X\83g\81[\83\8b\82Ì\83`\83F\83b\83N\82ð\8ds\82¢\81A\8ae\83\\83t\83g\82Ì\93®\8dì\82É\8fK\8fn\82·\82é\82±\82Æ\81B\r
-\82±\82ê\82ç\82Ì\83\\83t\83g\82Ì\8b\93\93®\82ª\8f\\95ª\94c\88¬\82³\82ê\82Ä\82¢\82È\82¢\82Æ\8cã\82Ì\83f\83o\83b\83O\82ª\8bê\98J\82·\82é\81B\r
-<P>\r
-<LI>\8aÖ\98A\83\\83t\83g\83E\83F\83A\82Ì\90Ý\92è\r
-\r
-<UL>\r
-<LI>/etc/rc.conf\82É\88È\89º\82ð\92Ç\89Á\82·\82é\81B\r
-<PRE>\r
-gateway_enable="YES" <==NATD\97\98\97p\8e\9e\95s\97v\r
-firewall_enable="YES"\r
-firewall_type="simple"\r
-natd_enable="YES" <==NATD\97\98\97p\8e\9e\r
-natd_interface="fxp0" <==\81@\81h\81A\96¼\91O\82Í\83C\83\93\83^\81[\83t\83F\81[\83X\82É\8d\87\82í\82¹\82é\82±\82Æ\81B\r
-</PRE>\r
-\r
-<LI>/etc/rc.firewall\82ð\95Ò\8fW\82·\82é\81B\r
-<BR>\r
-/etc/rc.firewall\82Ídefault\82Ì\83t\83@\83C\83A\83E\83I\81[\83\8b\83X\83N\83\8a\83v\83g\82Å\82 \82é\81B\r
-\82±\82ê\82Írc.conf \82Å [firewall_script="/etc/xxxx"]\82Æ\82µ\82Ä\95Ï\8dX\89Â\94\\81B <BR>\r
-\82Ü\82½rc.conf \82Å [firewall_type="simple"]\82Æ\82È\82Á\82Ä\82¢\82ê\82Î\81A \r
-\83X\83N\83\8a\83v\83g\92\86\82Å [simple]\82É\83}\83b\83`\82·\82é\83\8b\81[\83\8b\82ª\90Ý\92è\82³\82ê\82é\81B \r
-<P>\r
-/etc/rc.firewall\90Ý\92è\97á<BR> rc.firewall\92\86\82Å[simple]\82É\83}\83b\83`\82·\82é\83\8b\81[\83\8b\82Í\81A\r
-\95ª\8eU\82µ\82Ä\91¶\8dÝ\82·\82é\81B\8eÀ\8dÛ\82Ì\90Ý\92è\82Í\81A\81uipfw list\81v\83R\83}\83\93\83h\82Å\8am\94F\82·\82é\82±\82Æ\81B\r
-\89º\82Ì\83T\83\93\83v\83\8b\82Í\97\9d\91z\93I\82È\90Ý\92è\82ð\8e¦\82µ\82½\82à\82Ì\82Å\82Í\82È\82¢\81B\95W\8f\80\82Ìrc.firewall\82ð\8eQ\r
-\8dl\82É\82µ\82Ä\93K\90Ø\82É\95Ò\8fW\82·\82é\82±\82Æ\81B\r
-\r
-<BR>\r
-<PRE>\r
-[Ss][Ii][Mm][Pp][Ll][Ee])\r
- # set these to your outside interface network and netmask and ip\r
- oif="fxp0"\r
- onet="133.49.20.0"\r
- omask="255.255.252.0"\r
- oip="133.49.22.5"\r
-\r
- # set these to your inside interface network and netmask and ip\r
- iif="fxp1"\r
- inet="192.168.0.0"\r
- imask="255.255.255.0"\r
- iip="192.168.0.1"\r
-\r
- # divert packet to NATD ################################\r
- $fwcmd add 1 divert natd ip from any to any via ${oif}\r
-\r
- # Stop spoofing\r
- $fwcmd add deny all from ${inet}:${imask} to any in via ${oif}\r
- $fwcmd add deny all from ${onet}:${omask} to any in via ${iif}\r
-\r
- # Allow from / to myself\r
- $fwcmd add pass all from ${iip} to any via ${iif}\r
- $fwcmd add pass all from ${oip} to any via ${oif}\r
- $fwcmd add pass all from any to ${iip} via ${iif}\r
- $fwcmd add pass all from any to ${oip} via ${oif}\r
-\r
- # Allow DNS queries out in the world \r
- # (if DNS is on localhost, delete pass DNS)\r
- $fwcmd add pass udp from any 53 to any\r
- $fwcmd add pass udp from any to any 53\r
-\r
- # Forwarding http connection from unauth client ###############\r
- $fwcmd add 60000 fwd localhost tcp from ${inet}:${imask} to any http\r
- $fwcmd add 60010 fwd localhost tcp from ${inet}:${imask} to any https\r
-\r
- # Allow TCP through if setup succeeded ########################\r
- $fwcmd add 60100 pass tcp from any to any established\r
- </PRE>\r
-\r
-\90Ý\92è\8fã\82Ì\92\8d\88Ó\r
-<BR>\r
-opengate\82ª\91}\93ü\82·\82é\83\8b\81[\83\8b\94Ô\8d\86(10000\81`40000)\82æ\82è\8cã\82ë\82Éforward\96½\97ß\82ð\93ü\82ê\82é\81B\r
-Gate\82ª\8aJ\82¢\82½\8fê\8d\87\82É\82Í\81Aforward\82³\82¹\82È\82¢\82½\82ß\81B\r
-<BR>\r
-forward\96½\97ß\82Æ\8a±\8fÂ\82·\82é\96½\97ß\82Í\81A\97D\90æ\8f\87\88Ê\82É\92\8d\88Ó\82·\82é\81B\r
-\97á\82¦\82Îestablished\95t\82«\96½\97ß\82Í\81Aforward\96½\97ß\82Ì\8cã\82É\82µ\82È\82¢\82Æ\81A1\94Ô\96Ú\82Ì\83p\83P\83b\83g\r
-\82¾\82¯\82ªforward\82³\82ê\82é\82±\82Æ\82É\82È\82é\81B\r
-<BR>\r
-natd\82ð\8eg\82¤\82É\82Í\81A\8dÅ\8f\89\82Ì\83\8b\81[\83\8b\82Æ\82µ\82Änatd\82Ö\82ÌDIVERT\83\8b\81[\83\8b\82ð\93ü\82ê\82é\81B\r
-<P>\r
-\8fã\82Ì\90Ý\92è\82ð\94²\82«\82¾\82µ\82½Opengate\90ê\97p\82Ì\83X\83N\83\8a\83v\83g\82ðconf/opengatefw.conf\82É\r
-\97p\88Ó\82µ\82½\81B\82±\82ê\82ð\95Ò\8fW\82µ\82Ä\97\98\97p\82·\82é\82±\82Æ\82à\89Â\94\\82Å\82 \82é\81B\r
-<P>\r
-<LI>ipfw\82Ì\83`\83F\83b\83N\r
-\r
-\83t\83@\83C\83A\83E\83I\81[\83\8b\83\8b\81[\83\8b\82Í\81@"ipfw list"\82Å\83`\83F\83b\83N\82Å\82«\82é\81B\r
-ipfw\83R\83}\83\93\83h\82ð\8eg\82Á\82Ä\81A\82 \82é\92[\96\96(xx.xx.xx.xx)\82É\91Î\82·\82é\83\8b\81[\83\8b\82ð\92Ç\89Á\81A\8dí\8f\9c\82µ\82Ä\81A\r
-\82»\82Ì\82Æ\82«\82É\92[\96\96\82Ì\83l\83b\83g\83\8f\81[\83N\97\98\97p\82ª\8aJ\95ú\81A\95Â\8d½\82³\82ê\82é\82±\82Æ\82ð\8am\94F\82¹\82æ\81B\r
-\r
-<PRE>\r
- ipfw add 10000 allow ip from xx.xx.xx.xx to any <===\94\90M\8aJ\95ú\r
- ipfw add 10000 allow ip from any to xx.xx.xx.xx <===\8eó\90M\8aJ\95ú\r
- \r
- ipfw del 10000 <===\95Â\8d½\r
-</PRE>\r
-ipfw\83R\83}\83\93\83h\82É\82Í\8f\\95ª\82É\90¸\92Ê\82·\82é\82±\82Æ\81B\r
-Opengate\82Í\81A\8fã\8bL\82Ì\82æ\82¤\82È\83R\83}\83\93\83h\82Ì\94\8ds\82ð\8ds\82¤\83\\83t\83g\82Å\82 \82é\81B\r
-<P>\r
-<LI>/usr/local/etc/apache/httpd.conf\82Ì\95Ï\8dX\r
-<BR>\r
-Web\8aO\95\94\83A\83N\83Z\83X\90§\8cÀ\81i\8aÂ\8b«\82É\8d\87\82í\82¹\82Ä\93K\90Ø\82È\90§\8cÀ\82ð\8ds\82¤\82±\82Æ)\r
-<PRE>\r
-order deny,allow\r
-deny from all\r
-allow from 133.49.0.0/255.255.0.0 (Example\81F\83A\83h\83\8c\83X\82Í\95Ï\8dX\97v)\r
-allow from 192.168.0.0/255.255.0.0\r
-</PRE>\r
-\r
-CGI\89Ò\93\82ð\97L\8cø\82É\r
-<PRE>\r
-#ScriptAlias /cgi-bin/ "/usr/local/www/cgi-bin/"\r
-\81«\r
-ScriptAlias /cgi-bin/ "/usr/local/www/cgi-bin/"\r
-</PRE>\r
-\r
-FileNotFound\8e\9e\82Étop\83y\81[\83W\82Ö\r
-<PRE>\r
-#ErrorDocument 404 /missing.html\r
-\81«\r
-ErrorDocument 404 /index.html\r
-</PRE>\r
-\r
-<LI>/etc/syslog.conf\82ÖOpengate\83\8d\83O\82Ì\92Ç\89Á\r
-\r
-<PRE>\r
-local1.* /var/log/opengate.log\r
- \81ª \82±\82±\82ÍTAB\82Å\8bæ\90Ø\82é\82±\82Æ\81B\r
-</PRE>\r
-\r
-<LI>\91Î\89\9e\82µ\82½\83\8d\83O\83t\83@\83C\83\8b\82ð\8dì\82é\81B\r
-<PRE>\r
-touch /var/log/opengate.log\r
-</PRE>\r
-</UL>\r
-<LI>opengatexxx.tar.gz\82ð\93K\93\96\82È\83f\83B\83\8c\83N\83g\83\8a\82Å\93W\8aJ\82·\82é\81B\r
-<PRE>\r
- tar zxvf opengatexxx.tar.gz\r
-\81@\81ixxx\82Í\83o\81[\83W\83\87\83\93\82ð\8e¦\82·\81B\8dÅ\90V\82Ì\82à\82Ì\82ð\97\98\97p\82·\82é\82±\82Æ\81j\r
-</PRE>\r
-\88È\89º\82Ì\83f\83B\83\8c\83N\83g\83\8a\82ª\8fo\97\88\82é\82Ì\82Å\81A\93à\97e\82ð\8am\94F\82·\82é\81B\r
-\82±\82±\82Å\90Ý\92è\82ð\95Ï\8dX\82·\82é\82±\82Æ\82à\82Å\82«\82é\82ª\83C\83\93\83X\83g\81[\83\8b\8cã\82Å\82à\97Ç\82¢\81B\r
-\r
-<PRE>\r
- doc: \8ae\8eí\95¶\8f\91\r
- conf: configuration file sample, firewall control perl script sample\r
- javahtml: \83N\83\89\83C\83A\83\93\83g java\82Æhtml\83t\83@\83C\83\8b\r
- opengatesrv: \83T\81[\83o CGI\83v\83\8d\83O\83\89\83\80\r
-</PRE>\r
-\r
-<LI>javahtml\82Ì\89º\82Éjar\83t\83@\83C\83\8b\82ª\82È\82¯\82ê\82Î\81AOpengate.java\82ð\83R\83\93\83p\83C\83\8b\82·\82é\81B\r
-<PRE>\r
- javac Opengate.java\r
- jar cvf Opengate.jar *.class\r
-</PRE>\r
-\r
-<LI>Opengate\83T\81[\83o\82ð\8dì\82é\81B\r
- <PRE>\r
- opengatesrv\82É\88Ú\93®\82·\82é\81B\r
-\81@\81@opengatesrv\89º\82ÌMakefile\82Æopengatesrv.h\82Ì\93à\97e\82ð\8am\94F\82µ\81A\r
- \83f\83B\83\8c\83N\83g\83\8a,\83A\83h\83\8c\83X\90Ý\92è\93\99\82ð\90Ý\92u\8aÂ\8b«\82É\82 \82í\82¹\82Ä\95Ï\8dX\82·\82é\81i\8fÚ\8d×\82Í\89º\8bL\81j\81B\r
- \81\96\81\96\82Æ\82\82ÉHOSTADDR\82Í\81A\83C\83\93\83X\83g\81[\83\8b\83}\83V\83\93\82Ì\92[\96\96\91¤\83C\83\93\83^\81[\83t\83F\81[\83X\82É\r
- \8d\87\82í\82¹\82é\82±\82Æ\82ð\96Y\82ê\82È\82¢\82±\82Æ\81B\81\96\81\96\r
- make\81@\83R\83\93\83p\83C\83\8b\82·\82é\81B\r
-\81@\81@su\81@\81@\83\8b\81[\83g\82É\82È\82é\81B\r
-\81@\81@make install\81@\83C\83\93\83X\83g\81[\83\8b\82·\82é\81B\r
- </PRE>\r
-\r
-<LI>\94F\8fØ\83T\81[\83o\82Ì\90Ý\92è<BR>\r
-\94F\8fØ\83T\81[\83o\82Í\81Aopengatesrv.conf\82É\82Ä\90Ý\92è\82·\82é\81B\83t\83H\81[\83}\83b\83g\82Í\88È\89º\82Ì\82¢\82¸\82ê\82©\82Ì\8c`\8e®\81B\r
-\95¡\90\94\8ds\82ð\8ew\92è\82·\82é\82±\82Æ\82à\89Â\94\\81B\81i"[..]"\82Í\8fÈ\97ª\89Â\94\\81A"|"\82ÍOR\82ð\88Ó\96¡\82·\82é\81j\r
-<PRE>\r
-ID:address=hostname|hostaddr:[port=portno:]protocol=ftp|pop3|pop3s:\r
-ID:protocol=radius:[conffile=filepath:]\r
-ID:protocol=pam:[servicename=name:]\r
-</PRE>\r
-\8ae\8d\80\96Ú\82Í\88È\89º\82ð\88Ó\96¡\82·\82é\81B\r
-\r
-<PRE>\r
-ID\81F\94F\8fØ\83T\81[\83o\82Ì\8e¯\95Ê\8eq\81B\94C\88Ó\92·\95¶\8e\9a\97ñ\82Å\82·\82ª\97\98\95Ö\90«\82ð\8dl\82¦\82é\82Æ\81A1\81`3\95¶\8e\9a\92ö\93x\82ª\93K\93\96\82¾\82ë\82¤\81B\r
-address: \94F\8fØ\83T\81[\83o\82ÌIPaddress\82Ü\82½\82Í\83h\83\81\83C\83\93\96¼\81B\96¼\91O\89ð\8c\88\82ª\82Å\82«\82È\82¢\82Æ\82«\82Í\81A\r
- IPaddress\82Å\8e\8e\82·\82±\82Æ\81B\r
-port: \94F\8fØ\83\8a\83N\83G\83X\83g\82ð\91\97\82é\90æ\82Ì\83|\81[\83g\94Ô\8d\86\81B\8fÈ\97ª\8e\9e\82Í/etc/services\93o\98^\83|\81[\83g\94Ô\8d\86\81B\r
-protocol: \94F\8fØ\82É\97p\82¢\82é\83v\83\8d\83g\83R\83\8b\81B\r
- \8c»\8dÝ\81Apop3,ftp,pop3s,pam,radius\82ð\83T\83|\81[\83g\81B\r
-conffile:RADIUS\8e\9e\82É\90Ý\92èfile \82Ì\83p\83X\82ð\8ew\92è\81B\r
- \8fÈ\97ª\82·\82é\82Æ\81u/etc/radius.conf\81v\81B\r
-servicename:PAM\8e\9e\82Éservicename\82ð\8ew\92è\81B/etc/pam.conf\82É\82¨\82¯\82é\8e¯\95Ê\8eq\82Å\82 \82é\81B\r
- \8fÈ\97ª\82·\82é\82Æ\81uopengate\81v\81B\r
-</PRE>\r
-\r
-\88È\89º\82Íopengatesrv.conf\82Ì\97á\81B\r
-<P>\r
-\81\96\82±\82Ì\97á\82Å\82Í\81A\83A\83h\83\8c\83Xxx.xx.xx.xx\82Ö\82Ìftp\82ª\89Â\94\\82©\94Û\82©\82Å\94F\8fØ\82ð\8ds\82¤\81B\8dÅ\8f\89\82Í\81A\82±\82Ì\82æ\82¤\82È\r
-\92P\8f\83\82È\90Ý\92è\82ÅOpengate\82Ì\93®\8dì\82ð\8am\94F\82·\82é\82±\82Æ\81B\r
-<PRE>\r
-default:tc=as\r
-as:address=xx.xx.xx.xx:protocol=ftp:\r
-\81@\81i\83A\83h\83\8c\83Xxx.xx.xx.xx\82Ö\82ÌFTP\83A\83N\83Z\83X\82ð\91O\82à\82Á\82Ä\8am\94F\82Ì\82±\82Æ\81j\r
-</PRE>\r
-\r
-<P>\r
-\81\96\82±\82Ì\97á\82Å\82Í\81A4\82Â\82Ì\94F\8fØ\83T\81[\83o\82ª\90Ý\92è\82³\82ê\82Ä\82¨\82è\81A\r
-cs\82ðdefault\82Æ\82µ\82Ä\82¢\82é\81B\r
-\97\98\97p\8eÒ\82ª\83\86\81[\83UID\82Ì\83t\83B\81[\83\8b\83h\82É[userID]\82Ì\82Ý\82ð\93ü\97Í\82·\82é\82Ædefault\82Ì\81ucs\81v\83T\81[\83o\82É\94F\8fØ\82É\8ds\82\81B\r
-[userID@cc]\82Ì\8c`\8e®\82Å\93ü\97Í\82·\82é\82Æ\81A\81ucc\81v\82Å\8ew\92è\82³\82ê\82½\94F\8fØ\83T\81[\83o\82Ö\94F\8fØ\82ð\89ñ\82·\81B[userID@pam] \82Æ\93ü\82ê\82é\82Æ\81upam\81v\8ew\92è\83T\81[\83o\82Ö\81A[userID@rad]\82Æ\93ü\82ê\82é\82Æ\81urad\81v\8ew\92è\82Ì\83T\81[\83o\82Ö\89ñ\82·\81B\r
-\r
-<PRE>\r
-default:tc=cs\r
-cs:address=noah.cs.is.saga-u.ac.jp:protocol=pop3:\r
-cc:address=himiko.cc.saga-u.ac.jp:protocol=ftp:port=21:\r
-pam:protocol=pam:\r
-rad:protocol=radius:\r
-</PRE>\r
-\81\96protocol=pam\82ª\90Ý\92è\82³\82ê\82Ä\82¢\82é\82Æ\82«\82Í\81A/etc/pam.conf\82Ü\82½\82Í/etc/pam.d/opengate\r
-\82ð\90Ý\92è\82·\82é\95K\97v\82ª\82 \82é\81B\r
-opengate\82Íauth\82Æaccount\82Ì\83`\83F\83b\83N\82ð\8ds\82¤\81B\r
-account\82ð\97\98\97p\82µ\82È\82¢\8e\9e\82Í\81Apermit\82ð\8ew\92è\82·\82é\82±\82Æ\81B\r
-<BR>\r
-\88È\89º\82Í\81A/etc/pam.conf\82Ì\90Ý\92è\97á\r
-<PRE>\r
-opengate auth required pam_radius.so \r
-opengate account required pam_permit.so\r
-</PRE>\r
-\88È\89º\82Í\81A/etc/pam.d/opengate\82Ì\90Ý\92è\97á\r
-<PRE>\r
-auth required pam_radius.so \r
-account required pam_permit.so\r
-</PRE>\r
-<P>\r
-\81\96protocol=radius\82ª\90Ý\92è\82³\82ê\82Ä\82¢\82é\82Æ\82«\82Í\81A/etc/radius.conf\82ð\90Ý\92è\82·\82é\95K\97v\82ª\82 \82é\81B\r
-\88È\89º\82Íradius.conf\82Ì\90Ý\92è\97á\81B\r
-\r
-<PRE>\r
-auth radius1.somewhere.com "password1" 5 6\r
-auth radius2.somewhere.com "password2" 5 6\r
-</PRE>\r
-\r
-<LI>Opengate\93®\8dì\83`\83F\83b\83N\r
-<P>\r
-1)\92[\96\96\82Ì\83u\83\89\83E\83U\82©\82ç\8aO\95\94URL\82Ö\83A\83N\83Z\83X\82·\82é<BR>\r
-2)\94F\8fØ\83y\81[\83W\82ª\95\\8e¦\82³\82ê\82½\82ç\81A\83\86\81[\83UID\82Æ\83p\83X\83\8f\81[\83h\82ð\93ü\97Í\82·\82é\81B<BR>\r
-3)\8b\96\89Â\83y\81[\83W\82ª\95\\8e¦\82³\82ê\82½\82ç\81A\8aO\95\94URL\82Ö\83A\83N\83Z\83X\82·\82é<BR>\r
-4)\8aO\95\94\83y\81[\83W\82ª\95\\8e¦\82³\82ê\82½\82ç\81A\83u\83\89\83E\83U\82ð\8fI\97¹\82·\82é\81B<BR>\r
-5)\8dÄ\93x\81A\83u\83\89\83E\83U\82ð\8bN\93®\82µ\82Ä\81A\8aO\95\94URL\82Ö\83A\83N\83Z\83X\82·\82é<BR>\r
-6)\94F\8fØ\83y\81[\83W\82ª\95\\8e¦\82³\82ê\82½\82ç\81A\8aî\96{\83C\83\93\83X\83g\81[\83\8b\82ª\8a®\97¹\81B<BR>\r
-\r
-\83G\83\89\81[<BR>\r
-At 2) Opengate\83T\81[\83o\82ÌURL\82ð\8ew\92è\82µ\82Ä\83A\83N\83Z\83X\82·\82é\81B\r
-\90¬\8c÷\82È\82çipfw fwd rule\82ð\8b^\82¤\81B\8e¸\94s\82È\82çwww/data\83f\83B\83\8c\83N\83g\83\8a\82Ì\90Ý\92è\82ð\8b^\82¤\81B<BR>\r
-At 3) \94F\8fØ\83T\81[\83o\83A\83N\83Z\83X\82ð\83R\83}\83\93\83h\83\89\83C\83\93\82Å\8e\8e\82·(eg. ftp xx.xx.xx.xx)\81B\r
-\90¬\8c÷\82È\82çopengatesrv.conf\82ð\8b^\82¤\81B\r
-\8e¸\94s\82È\82ç\81A\94F\8fØ\83T\81[\83o\82Ì\83A\83N\83Z\83X\90§\8cÀ\82â\83\86\81[\83U\93o\98^\82ð\8b^\82¤<BR>\r
-At 4)\83t\83@\83C\83A\83E\83I\81[\83\8b\90Ý\92è\82ð\8b^\82¤\81B<BR>\r
-At 6)\91¼\82Ì\90V\82µ\82¢\8aO\95\94URL\82ð\83A\83N\83Z\83X\82·\82é\81B\r
-\90¬\8c÷\82È\82ç\81A\83u\83\89\83E\83U\82Ì\83L\83\83\83b\83V\83\85\8cø\89Ê\82Å\82 \82é\81B\r
-\8e¸\94s\82È\82ç\81A\83t\83@\83C\83A\83E\83I\81[\83\8b\90Ý\92è\82ðipfw\82Å\83`\83F\83b\83N\82·\82é<BR>\r
-*\82æ\82è\8fÚ\8d×\82È\83f\83o\83b\83O\8bL\8fq\82ð\95Ê\83t\83@\83C\83\8b\82É\97p\88Ó\82µ\82½\81B\r
-<P>\r
-\r
-<LI>javahtml\89º\82Ìhtml\83h\83L\83\85\83\81\83\93\83g\82ð\95K\97v\82É\89\9e\82¶\82Ä\95Ï\8dX\82·\82é\81B\r
- <PRE>\r
- \8c¾\8cê\96\88\82É\83f\83B\83\8c\83N\83g\83\8a\82ª\82 \82é(en(english),ja(japanese)\82È\82Ç)\r
- \82»\82Ì\92\86\82ÌHTML\82ð\95Ï\8dX\81B\r
-\81@\81@topindex.html\81i\8dÅ\8f\89\82É\91\97\82ç\82ê\82é\89æ\96Ê\81B\94F\8fØ\93ü\97Í\82Ö\8e©\93®JUMP)\r
-\81@\81@index.html\81i\94F\8fØ\93ü\97Í\89æ\96Ê\81j\r
-\81@\81@deny.html\81i\94F\8fØ\8b\91\94Û\8e\9e\82Ì\89æ\96Ê\81j\r
-\81@\81@accept.html,accept2.html\81i\94F\8fØ\8b\96\89Â\8e\9e\82Ì\89æ\96Ê\81j\r
- \82±\82ê\82ç\82Í\81A\95K\97v\82É\89\9e\82¶\82Ä\93à\97e\82Ì\95Ï\8dX\82ð\8ds\82¤\82±\82Æ\81B\r
- accept.html\92\86\82Ì"**OpengateAppletHere**"\82Í\8dí\8f\9c\82µ\82Ä\82Í\82È\82ç\82È\82¢\81B\r
- \82±\82±\82ÉJavaApplet\82ª\91}\93ü\82³\82ê\82é\81B\r
- \82Ü\82½%%HOSTADDR%%\82Í\81A\83C\83\93\83X\83g\81[\83\8b\8e\9e\82É\83A\83h\83\8c\83X\82É\92u\82«\8a·\82¦\82ç\82ê\82é\81B\r
- %%OPENGATEDIR%%\82Í\81A\83C\83\93\83X\83g\81[\83\8b\83f\83B\83\8c\83N\83g\83\8a\82É\92u\82«\8a·\82¦\82ç\82ê\82é\81B\r
- </PRE>\r
-\r
-<LI>Firewall\90§\8cä\83X\83N\83\8a\83v\83g\r
-<P>\r
-\r
-Makefile\82É\82¨\82¢\82ÄUSEFWSCRIPT\82ª0\82Å\82 \82ê\82Î\81ACGI\82ª\92¼\90Ú\82Éipfw\83R\83}\83\93\83h\82ð\94\8ds\r
-\82·\82é\81B\82±\82Ì\82Æ\82«\82Í\81A\8b\96\89Â\8cã\82Í\91S\82Ä\82Ì\8fo\93ü\82è\83p\83P\83b\83g\82ª\92Ê\89ß\89Â\94\\82Æ\82È\82é\81B1\82Å\82 \r
-\82ê\82Î\81Aperl\83X\83N\83\8a\83v\83g\82ð\8co\97R\82µ\82Äipfw\83R\83}\83\93\83h\82ð\94\8ds\82·\82é\81B\83t\83@\83C\83A\83E\83I\81[\83\8b\r
-\8aJ\95ú\97p\83X\83N\83\8a\83v\83gconf/opengatefw.pl\82ð\8f\91\82«\8a·\82¦\82é\8e\96\82É\82æ\82è\8ae\8eí\90§\8cä\82ª\89Â\94\\82Å\r
-\82 \82é\81B\82½\82¾\82µ\81A\83p\83t\83H\81[\83}\83\93\83X\82¨\82æ\82Ñ\83Z\83L\83\85\83\8a\83e\83B\82ð\95Û\82Â\82½\82ß\81A\89Â\94\\82È\8cÀ\82è\83V\r
-\83\93\83v\83\8b\82È\8d\\90¬\82Æ\82·\82é\8e\96\81B\82±\82Ì\83X\83N\83\8a\83v\83g\82Í\94r\91¼\90§\8cä\89º\82Å\93®\82¢\82Ä\82¢\82é\81B\8e\9e\8aÔ\82Ì\82©\r
-\82©\82é\8f\88\97\9d\82ð\93ü\82ê\82é\82Æ\83p\83t\83H\81[\83}\83\93\83X\82É\91å\82«\82\89e\8b¿\82·\82é\81B\r
-<P>\r
-\97\98\97p\8eÒ\83f\81[\83^\83x\81[\83X\82ð\97\98\97p\82µ\82Ä\83t\83@\83C\83A\83E\83H\81[\83\8b\8aJ\95ú\82Ì\92ö\93x\82ð\8c\88\92è\82µ\82½\82¢\8fê\8d\87\81A\r
-\82±\82ÌSCRIPT\82Å\8ds\82¤\8e\96\82à\89Â\94\\82Å\82 \82é\82ª\81A\95Ê\93r\97p\88Ó\82µ\82½comm-userdb.c\82Åproperty\82ð\r
-\90Ý\92è\82µ\82Ä\82±\82ÌSCRIPT\82É\91\97\82é\95û\82ª\81A\83p\83t\83H\81[\83}\83\93\83X\8fã\82©\82ç\96]\82Ü\82µ\82¢\81B\r
-\r
-<P>\r
-<LI>Makefile\90Ý\92è\r
-<P>\r
-\95K\97v\82É\89\9e\82¶\82ÄMakefile\82É\82Ä\88È\89º\82Ì\8d\80\96Ú\82ª\90Ý\92è\89Â\94\\81B\r
-<PRE>\r
-HOSTADDR = \83Q\81[\83g\83E\83F\83C\82Ì\83N\83\89\83C\83A\83\93\83g\91¤IP\83A\83h\83\8c\83X\r
-HTMLTOP1 = HTML\83t\83@\83C\83\8b\82ð\92u\82\83f\83B\83\8c\83N\83g\83\8a\82Ì\83g\83b\83v\r
-HTMLTOP2 = HTML\83t\83@\83C\83\8b\82ð\92u\82\83f\83B\83\8c\83N\83g\83\8a\82Ì\83g\83b\83v(SSL\91¤)\r
-OPENGATEDIR = Opengate\8aÖ\98A\83t\83@\83C\83\8b\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\83f\83B\83\8c\83N\83g\83\8a\81AWeb\83g\83b\83v\91\8a\91Î\r
-CGIPATH = CGI\82ð\92u\82\83f\83B\83\8c\83N\83g\83\8a\r
-CGIPROG = CGI\83v\83\8d\83O\83\89\83\80\96¼\r
-CONFIGFILE = \90Ý\92è\83t\83@\83C\83\8b\96¼\r
-USEFWSCRIPT= Perl\83X\83N\83\8a\83v\83g\90§\8cä\82©\94Û\82©\r
-FWSCRIPT = Perl\83X\83N\83\8a\83v\83g\96¼\r
-FWSCRIPTPATH = Perl\83X\83N\83\8a\83v\83g\83p\83X\r
-LOCKFILE= \83\8d\83b\83N\83t\83@\83C\83\8b\96¼\r
-HTMLDOCS= HTML\83t\83@\83C\83\8b\88ê\97\97\r
-DENYDOC = \8b\91\94Û\8e\9e\82ÌHTML\83t\83@\83C\83\8b\r
-ACCEPTDOC = \8b\96\89Â\8e\9e\82ÌHTML\83t\83@\83C\83\8b\r
-HTMLLANGS= HTML\83t\83@\83C\83\8b\82Æ\82µ\82Ä\8f\80\94õ\82µ\82½\8c¾\8cê\88ê\97\97\81A\8dÅ\8f\89\82ªdefault\r
-ARPPATH= arp\83R\83}\83\93\83h\82Ì\83p\83X\r
-IPFWPATH= ipfw\83R\83}\83\93\83h\82Ì\83p\83X\r
-</PRE>\r
-\r
-<P>\r
-<LI>opengatesrv.h\90Ý\92è\r
-<BR>\r
-\95K\97v\82É\89\9e\82¶\82Ä\83w\83b\83_\81[\83t\83@\83C\83\8b\82É\82Ä\88È\89º\82Ì\8d\80\96Ú\82ª\90Ý\92è\89Â\94\\81B\r
-<PRE>\r
- DEBUG :\81@\81@\81@\81@\81@\81@ \81@\82P\82É\90Ý\92è\82·\82é\82Æ\83f\83o\83b\83O\83\81\83b\83Z\81[\83W\82ð\83\8d\83O\82É\8fo\97Í\r
-\81@\81@\81@\81@\81@\81@\81@\81@\81@\81@ \81@\8aÖ\90\94\8aÔ\82Ì\8cÄ\82Ñ\8fo\82µ\82Æ\82»\82Ì\8e\9e\82Ì\88ø\90\94\92l\82ª\8fo\82é\81B\r
-\r
- DURATIONDEFAULT : java\82ð\91\97\82Á\82Ä\82©\82ç\90Ú\91±\82µ\82Ä\82\82é\82Ü\82Å\82Ì\91Ò\82¿\8e\9e\8aÔ(\95b)\r
- default\92l\81B\89\9e\93\9a\82ª\82È\82¢\82Æ\83l\83b\83g\83\8f\81[\83N\82ð\95Â\8d½\82·\82é\81B\r
- \91Ò\82¿\8e\9e\8aÔ\82Í\94F\8fØ\83y\81[\83W\82Å\95Ï\8dX\89Â\94\\81B\r
-\r
- DURATIONMAX \81F java\82ª\90Ú\91±\82µ\82Ä\97\88\82È\82¢\8e\9e\82É\82Í\81A\97\98\97p\8eÒ\82ª\94F\8fØ\83y\81[\83W\82Å\r
- \8ew\92è\82µ\82½\97\98\97p\8cp\91±\8e\9e\8aÔ\82Ì\8aÔ\82ð\97\98\97p\89Â\94\\82Æ\82·\82é\81B\r
- DURATIONMAX\82Í\8ew\92è\89Â\94\\82È\8dÅ\91å\92l(\95b) \r
- \97\98\97p\8eÒ\82É\82æ\82é\8ew\92è\82ª\95s\97v\82Å\82 \82ê\82Î\81ADURATIONDEFAULT\82Æ\93¯\88ê\92l\82É\82µ\82Ä\81A\r
- \94F\8fØ\83y\81[\83W\82©\82ç\93ü\97Í\97\93\82ð\8dí\82é\82±\82Æ\81B\r
-\r
- ACTIVECHECKINTERVAL : \92[\96\96\82Ì\90¶\91¶\8am\94F\82Ì\82½\82ß\82Ì\83`\83F\83b\83N\8aÔ\8au(\95b)\r
- java\96³\82µ\82Ì\82Æ\82«\82Í\81A\91Î\89\9eIP\83A\83h\83\8c\83X\82É\91Î\82·\82éMAC\83A\83h\83\8c\83X\r
- \82¨\82æ\82Ñ\83Q\81[\83g\83E\83F\83C\92Ê\89ß\82ÌPacket\90\94\82Å\83`\83F\83b\83N\81B\r
- java\97L\82è\82Ì\82Æ\82«\82Í\81Ajava\82Æ\82ÌHELLO\8cð\8a·\82¨\82æ\82Ñ\83Q\81[\83g\83E\83F\83C\r
- \92Ê\89ß\82ÌPacket\90\94\82Å\83`\83F\83b\83N\81B\r
-\r
- COMMWAITTIMEOUT :\81@ \81@\92Ê\90M\95Ô\93\9a\82Ü\82Å\82Ì\8dÅ\91å\91Ò\82¿\8e\9e\8aÔ(\95b)\r
-\r
- NOREPLYMAX : \8fã\8bL\81A\83\81\83b\83Z\81[\83W\8cð\8a·\82Å\82Ì\96³\95Ô\93\9a\82ð\8b\96\82·\89ñ\90\94\r
-\r
- NOPACKETINTERVAL :\81@\81@\95ú\92u\82Æ\94»\92f\82·\82é\92Ê\90M\83p\83P\83b\83g\92Ê\89ß\96³\82µ\8e\9e\8aÔ(\95b)\81i\82½\82¾\82µ\81A\82±\82Ì\r
-\81@\81@\81@\81@\81@\81@\81@\81@\81@\81@\81@ \83`\83F\83b\83N\82Í\81AACTIVECHECKINTERVAL\82²\82Æ\82É\8ds\82¤\82Ì\82Å\81A\r
-\81@\81@\81@\81@\81@\81@\81@\81@\81@\81@\81@ \8eÀ\8dÛ\82Í\90Ø\82è\8fã\82°\82ÄACTIVECHECKINTERVAL\82Ì\90®\90\94\94{\82Æ\82È\82é\81j\r
-\r
- LOCKTIMEOUT :\81@\81@\81@\81@ ipfw\82Ì\94r\91¼\90§\8cä\8dÅ\91å\91Ò\82¿\8e\9e\8aÔ\81B\r
-\r
- IPFWMIN : \81@\81@\81@\81@\81@\81@Opengate\82Ì\97\98\97p\82·\82éipfw\82Ì\83\8b\81[\83\8b\94Ô\8d\86\94Í\88Í\r
- IPFWMAX :\81@\81@\81@\81@\81@\81@ \8dÅ\8f¬IPFWMIN\82©\82ç\8dÅ\91åIPFWMAX\82Ü\82Å\8aÔ\8auIPFWINTERVAL\r
- IPFWINTERVAL : \82²\82Æ\82É\97\98\97p\82·\82é\81B\82±\82ê\82ð\8eg\82¢\82«\82é\82Æ\82»\82ê\88È\8fã\93o\98^\82µ\82È\82¢\81B\r
- \81@\81@\81@\81@\81@\81@\81@\81@\81@\81@ \82æ\82Á\82Ä\81A\83N\83\89\83C\83A\83\93\83g\90\94\90§\8cÀ\82É\97\98\97p\89Â\94\\81B\r
-\r
- PORTMIN :\81@\81@\81@\81@\81@\81@ Opengate\83T\81[\83o\82Ì\97\98\97p\82·\82é\83|\81[\83g\94Ô\8d\86\82Ì\94Í\88Í\81i\8dÅ\8f¬\92l\81|\8dÅ\91å\92l\81j\r
- PORTMAX :\81@\81@\81@\81@\81@ \81@\91¼\82Ì\97p\93r\82Å\97\98\97p\82µ\82È\82¢\94Í\88Í\82ð\8ew\92è\81B\93¯\8e\9e\97\98\97p\92[\96\96\90\94\88È\8fã\95K\97v\81B\r
-\r
- FACILITY :\81@\81@\81@\81@\81@\81@syslog\82Ì\8fo\97Í\90æ\r
-</PRE>\r
-<P>\r
-<LI>opengatesrv.conf\90Ý\92è\r
-<BR>\r
-opengatesrv.conf\82É\8fã\8bL\82É\91Î\89\9e\82·\82é\90Ý\92è\82ð\8ds\82¤\82Æ\8fã\8f\91\82«\82³\82ê\82é\81B\r
-\r
-</UL>\r
-\r
-</BODY>\r
-</HTML>\r
+++ /dev/null
-<html>
-<head>
-<title>Opegnate Install</title>
-<meta http-equiv="content-type" content="text/html">
-<link rel="stylesheet" type="text/css" media="screen" href="./install/en/style.css">
-</head>
-
-<body bgcolor="#BBEECC">
-
-<h2>Opengate Install Procedure</h2>
-
-<!-- Start:Content Table -->
-<ul>
- <li class="list_alpha"><a href="./install/en/a.html#opengate0">Opengate Install Procedure</a></li>
- <ul>
- <li class="list_num"><a href="./en/a.html#opengate1">Install Procedure</a></li>
- <li class="list_num"><a href="./en/a.html#opengate2">Install FreeBSD</a></li>
- <li class="list_num"><a href="./en/a.html#opengate3">Install Opengate</a></li>
- </ul>
- <li class="list_alpha"><a href="./en/b.html#ipfw0">Setup ipfw,ip6fw</a></li>
- <ul>
- <li class="list_num"><a href="./en/b.html#ipfw1">Prepare kernel</a></li>
- <li class="list_num"><a href="./en/b.html#ipfw2">Setup ipfw</a></li>
- <li class="list_num"><a href="./en/b.html#ipfw3">Setup ip6fw</a></li>
- </ul>
- <li class="list_alpha"><a href="./en/c.html#apache0">Install Apache2</a></li>
- <ul>
- <li class="list_num"><a href="./en/c.html#apache1">Install (ports)</a></li>
- <li class="list_num"><a href="./en/c.html#apache2">Install (source)</a></li>
- <li class="list_num"><a href="./en/c.html#apache3">Make Private key, Certificate</a></li>
- <li class="list_num"><a href="./en/c.html#apache4">Setup VirtualHost</a></li>
- <li class="list_num"><a href="./en/c.html#apache5">Setup HTTP_ERROR 404</a></li>
- </ul>
- <li class="list_alpha"><a href="./en/d.html#dhcp0">Install isc-dhcp3</a></li>
- <ul>
- <li class="list_num"><a href="./en/d.html#dhcp1">Install (ports)</a></li>
- <li class="list_num"><a href="./en/d.html#dhcp2">Setup dhcpd.conf</a></li>
- </ul>
- <li class="list_alpha"><a href="./en/e.html#bind0">Install BIND9</a></li>
- <ul>
- <li class="list_num"><a href="./en/e.html#bind1">Install (ports)</a></li>
- <li class="list_num"><a href="./en/e.html#bind2">Make RNDC key</a></li>
- <li class="list_num"><a href="./en/e.html#bind3">Setup named.conf</a></li>
- <li class="list_num"><a href="./en/e.html#bind4">Setup zone</a></li>
- <li class="list_num"><a href="./en/e.html#bind5">Start confirmation</a></li>
- </ul>
- <li class="list_alpha"><a href="./en/f.html#mrtg0">Install MRTG</a></li>
- <ul>
- <li class="list_num"><a href="./en/f.html#mrtg1">Install (ports)</a></li>
- <li class="list_num"><a href="./en/f.html#mrtg2">Setup MRTG</a></li>
- <li class="list_num"><a href="./en/f.html#mrtg3">Start confirmation</a></li>
- <li class="list_num"><a href="./en/f.html#mrtg4">Setup crontab</a></li>
-</ul>
-
-<!-- End:Content Table -->
-</body>
-</html>
\ No newline at end of file
+++ /dev/null
-<html>
-<head>
-<title>Opegnate Install</title>
-<meta http-equiv="content-type" content="text/html;charset=Shift_JIS">
-<link rel="stylesheet" type="text/css" media="screen" href="./install/ja/style.css" charset="Shift_JIS">
-</head>
-
-<body bgcolor="#BBEECC">
-
-<h2>Opengate \83C\83\93\83X\83g\81[\83\8b\8eè\8f\87</h2>
-
-<!-- Start:\96Ú\8e\9f -->
-<ul>
- <li class="list_alpha"><a href="./ja/a.html#opengate0">Opengate \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="./ja/a.html#opengate1">\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87</a></li>
- <li class="list_num"><a href="./ja/a.html#opengate2">FreeBSD \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <li class="list_num"><a href="./ja/a.html#opengate3">Opengate \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- </ul>
- <li class="list_alpha"><a href="./ja/b.html#ipfw0">ipfw,ip6fw\82Ì\90Ý\92è</a></li>
- <ul>
- <li class="list_num"><a href="./ja/b.html#ipfw1">\83J\81[\83l\83\8b\82Ì\8dÄ\8d\\92z</a></li>
- <li class="list_num"><a href="./ja/b.html#ipfw2">ipfw\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="./ja/b.html#ipfw3">ip6fw\82Ì\90Ý\92è</a></li>
- </ul>
- <li class="list_alpha"><a href="./ja/c.html#apache0">Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="./ja/c.html#apache1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="./ja/c.html#apache2">\83C\83\93\83X\83g\81[\83\8b\81i\83\\81[\83X\81j</a></li>
- <li class="list_num"><a href="./ja/c.html#apache3">\94é\96§\8c®\81A\8fØ\96¾\8f\91\82Ì\8dì\90¬</a></li>
- <li class="list_num"><a href="./ja/c.html#apache4">\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="./ja/c.html#apache5">HTTP_ERROR 404\82Ö\82Ì\91Î\89\9e</a></li>
- </ul>
- <li class="list_alpha"><a href="./ja/d.html#dhcp0">isc-dhcp3\82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="./ja/d.html#dhcp1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="./ja/d.html#dhcp2">DHCP\82Ì\90Ý\92è</a></li>
- </ul>
- <li class="list_alpha"><a href="./ja/e.html#bind0">BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="./ja/e.html#bind1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="./ja/e.html#bind2">\94F\8fØ\83L\81[\82Ì\8dì\90¬</a></li>
- <li class="list_num"><a href="./ja/e.html#bind3">named.conf\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="./ja/e.html#bind4">zone\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="./ja/e.html#bind5">\8bN\93®\8am\94F</a></li>
- </ul>
- <li class="list_alpha"><a href="./ja/f.html#mrtg0">MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="./ja/f.html#mrtg1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="./ja/f.html#mrtg2">MRTG\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="./ja/f.html#mrtg3">MRTG\82Ì\8bN\93®\8am\94F</a></li>
- <li class="list_num"><a href="./ja/f.html#mrtg4">crontab\82Ö\82Ì\93o\98^</a></li>
- </ul>
-</ul>
-
-<!-- End:\96Ú\8e\9f -->
-
-
-</body>
-</html>
\ No newline at end of file
+++ /dev/null
-<html>
-<head>
-<title>Opegnate Install</title>
-<meta http-equiv="content-type" content="text/html;charset=Shift_JIS">
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">
-</head>
-
-<body bgcolor="#BBEECC">
-
-<!-- Start:Opengate\82Ì\83C\83\93\83X\83g\81[\83\8b -->
-<h3>A Opegnate
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="opengate0" href="#opengate0" class="anchor">†</a></h3>
-<ul>
- <li class="list_num"><a href="#opengate1">\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87</a></li>
- <li class="list_num"><a href="#opengate2">FreeBSD \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <li class="list_num"><a href="#opengate3">Opengate \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>A.1
\83C
\83\93\83X
\83g
\81[
\83\8b\8eè
\8f\87<a name="opengate1" href="#opengate1" class="anchor">†</a></h4>
-
-<p>Opengate\82Ì\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87\82ð\88È\89º\82É\8e¦\82·\81B\82½\82¾\82µ\81A\81¦\82Í\95K\90{\8d\80\96Ú\82ð\8e¦\82µ\81A\82»\82ê\88È\8aO\82Ì\8eè\8f\87\82Í\95K\97v\82É\89\9e\82¶\82Ä\8ds\82È\82¤\81B</p>
-
-<ul>
- <li class="list_num">\83Q\81[\83g\83E\83F\83C\83}\83V\83\93\82Ì\8f\80\94õ \81¦</li>
- <li class="list_num">FreeBSD(OS)\82Ì\83C\83\93\83X\83g\81[\83\8b \81¦</li>
- <li class="list_num">\83J\81[\83l\83\8b\82Ì\8dÄ\8d\\92z \81¦</li>
- <li class="list_num">ipfw,ip6fw\82Ì\90Ý\92è \81¦</li>
- <li class="list_num">NAT\82Ì\90Ý\92è</li>
- <li class="list_num">Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b\81A\90Ý\92è \81¦</li>
- <li class="list_num">DHCP\82Ì\83C\83\93\83X\83g\81[\83\8b\81A\90Ý\92è</li>
- <li class="list_num">BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b\81A\90Ý\92è</li>
- <li class="list_num">MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b\81A\90Ý\92è</li>
-</ul>
-
-<div align="right"><a href="#opengate0">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>A.2 FreeBSD
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="opengate2" href="#opengate2" class="anchor">†</a></h4>
-
-<p>\83Q\81[\83g\83E\83F\83C\83}\83V\83\93\82Æ\82µ\82Ä\81ANIC\82ð\82Q\96\87\88È\8fã\8e\9d\82¿\81AFreeBSD\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\82±\82Æ\82ª\89Â\94\\82È\82à\82Ì\82ð\97p\88Ó\82·\82é\81B</p>
-<p>FreeBSD 4.x,5.x,6.x\82Ì\89½\82ê\82©\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\81B\8cã\82É\83J\81[\83l\83\8b\82ð\8dÄ\8d\\92z\82·\82é\95K\97v\82ª\82 \82é\82Ì\82Å\81A\83C\83\93\83X\83g\81[\83\8b\82·\82é
-Distributions\82ð\91I\91ð\82·\82é\8dÛ\82ÉDeveloper(Full sorces,binaries and doc)\82ð\91I\91ð\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>
-<p>FreeBSD\82ð\83C\83\93\83X\83g\81[\83\8b\82µ\82½\8cã\82É\81A\83Q\81[\83g\83E\83F\83C\82Æ\82µ\82Ä\82Ì\8b@\94\\82ð\97L\8cø\82É\82·\82é\82½\82ß\82É\81A/etc/rc.conf\82É\8e\9f\82Ì\90Ý\92è\82ð\8bL\8fq\82·\82é
-\81B\82à\82µ\82\82Í\81AFreeBSD\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8dÛ\82É\81A\83Q\81[\83g\83E\83F\83C\82Æ\82µ\82Ä\82Ì\8b@\94\\82ð\97L\8cø\82É\82·\82é\82©\94Û\82©\82ð\96â\82í\82ê\82é\82Ì\82Å\81A\82±\82±\82Å
-\83Q\81[\83g\83E\83F\83C\82Ì\8b@\94\\82ð\97L\8cø\82É\82µ\82Ä\82à\8d\\82í\82È\82¢\81B</p>
-
-<table>
-<td><code>gateway_enable="YES"</code></td>
-</table>
-
-<div align="right"><a href="#opengate0">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>A.3 Opengate
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="opengate3" href="#opengate3" class="anchor">†</a></h4>
-
-<h5>A.3.1 Opengate
\83p
\83b
\83P
\81[
\83W<a name="opengate4" href="#opengate4" class="anchor">†</a></h5>
-
-<p>Opengate\82Ì\8dÅ\90V\82Ì\83p\83b\83P\81[\83W\82ð\93K\93\96\82È\83f\83B\83\8c\83N\83g\83\8a\82É\93W\8aJ\82·\82é\81B\83p\83b\83P\81[\83W\82É\82Í\88È\89º\82Ì\83f\83B\83\8c\83N\83g\83\8a\82ª\8aÜ\82Ü\82ê\82é\81B</p>
-
-<table>
-<tr><td>
-<pre>
-doc\81F\8ae\8eí\95¶\8f\91
-conf\81F\90Ý\92è\83t\83@\83C\83\8b\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\83X\83N\83\8a\83v\83g
-javahtml\81F\83N\83\89\83C\83A\83\93\83gJava Applet\81AHTML\83t\83@\83C\83\8b
-opengatesrv\81F\83T\81[\83oCGI\83v\83\8d\83O\83\89\83\80
-</pre>
-</td></tr>
-</table>
-
-<h5>A.3.2
\83R
\83\93\83p
\83C
\83\8b<a name="opengate5" href="#opengate5" class="anchor">†</a></h5>
-
-<p>Opengate\83p\83b\83P\81[\83W\82É\8aÜ\82Ü\82ê\82éopengatesrv\83f\83B\83\8c\83N\83g\83\8a\82ÉMakefile\82ª\97p\88Ó\82³\82ê\82Ä\82¢\82é\81B
-\93¯\83f\83B\83\8c\83N\83g\83\8a\82É\82¨\82¢\82Ä\81AOpengate\82Ì\83R\83\93\83p\83C\83\8b\82Æ\83C\83\93\83X\83g\81[\83\8b\8dì\8bÆ\82ð\8ds\82È\82¤\82ª\81A\83R\83\93\83p\83C\83\8b
-\82ð\8ds\82È\82¤\91O\82É\81A\8ae\8eí\90Ý\92è\82ð\8ds\82È\82¤\95K\97v\82 \82ª\82é\81B\90Ý\92è\82Ì\82½\82ß\82É\82Í\81AMakefile\82Æopengatesrv.h\82ð\95Ò\8fW\82·\82é\81B</p>
-<p>Makefle\82É\82¨\82¢\82Ä\81A\88È\89º\82Ì\8d\80\96Ú\82ð\90Ý\92è\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>
-
-<ul>
- <li class="list_none">HOSTNAME</li>
- <ul>
- <li>Opengate\82ÌFQDN\82Å\81AIPv4/6\97¼\95û\82Ì\83A\83h\83\8c\83X\82ª\93o\98^\82³\82ê\82Ä\82¢\82é\82à\82Ì\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">HOSTNAME4</li>
- <ul>
- <li>Opengate\82ÌFQDN\82Å\81AIPv4\83A\83h\83\8c\83X\82Ì\82Ý\82ª\93o\98^\82³\82ê\82Ä\82¢\82é\82à\82Ì\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">OPENGATEDIR</li>
- <ul>
- <li>Opengate\8aÖ\98A\83t\83@\83C\83\8b\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8fê\8f\8a\82ð\81AApache2\82ÌDocumnetRoot\82©\82ç\82Ì\91\8a\91Î\83p\83X\82Å\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">HTMLTOP1,HTMLTOP2</li>
- <ul>
- <li>Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b\8fó\8bµ\82É\82æ\82Á\82Ä\81AHTMLTOP1\82ÉHTTP\97p\82ÌDocumentRoot\82ð\90Ý\92è\82·\82é\81B</li>
- <li>HTMLTOP1\82Æ\93¯\97l\82É\81AHTMLTOP2\82ÉHTTPS\97p\82ÌDocumentRoot\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">CGIPATH,CGIPROG,CGIURL</li>
- <ul>
- <li>CGIPATH\82É\81A\83T\81[\83oCGI\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8fê\8f\8a\82Ì\90â\91Î\83p\83X\82ð\90Ý\92è\82·\82é\81B\82½\82¾\82µ\81AApache2\82Ì\83C\83\93\83X\83g\81[\83\8b\8fó\8bµ\82É\82æ\82Á\82Ä\81A
- CGI\82ª\8eÀ\8ds\89Â\94\\82È\8fê\8f\8a\82Å\82 \82é\82±\82Æ\81B</li>
- <li>CGIPROG\82É\81A\83T\81[\83oCGI\82Ì\96¼\91O\82ð\90Ý\92è\82·\82é\81B</li>
- <li>CGIURL\82É\81A\83T\81[\83oCGI\82ð\8eÀ\8ds\82·\82é\82½\82ß\82ÌURL\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">AUTHCGIPROG,AUTHCGIURL</li>
- <ul>
- <li>AUTHCGIPROG\82É\81A\94F\8fØ\89æ\96Ê\92ñ\8b\9fCGI\82Ì\96¼\91O\82ð\90Ý\92è\82·\82é\81B</li>
- <li>AUTHCGIURL\82É\81A\83T\81[\83oCGI\82Æ\93¯\97l\82É\81A\94F\8fØ\89æ\96Ê\92ñ\8b\9fCGI\82ð\8eÀ\8ds\82·\82é\82½\82ß\82ÌURL\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">CONFIGFILE</li>
- <ul>
- <li>Opengate\82Ì\90Ý\92è\83t\83@\83C\83\8b\96¼\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">USEFWSCRIPT,FWSCRIPT,FWSCRIPTFILE</li>
- <ul>
- <li>USEFWSCRIPT\82É\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\90§\8cä\83X\83N\83\8a\83v\83g\82ð\97\98\97p\82·\82é\82©\94Û\82©\82ð\90Ý\92è\82·\82é\81B\81i\82P\81F\97\98\97p\82·\82é\81B\82O\81F\97\98\97p\82µ\82È\82¢\81B\81j</li>
- <li>FWSCRIPT\82É\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\90§\8cä\83X\83N\83\8a\83v\83g\82Ì\83t\83@\83C\83\8b\96¼\82ð\90Ý\92è\82·\82é\81B</li>
- <li>FWSCRIPTFILE\82É\81AFWSCRIPT\82É\90Ý\92è\82µ\82½\83t\83@\83C\83\8b\82Ö\82Ì\90â\91Î\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">LOCKFILE</li>
- <ul>
- <li>\94r\91¼\90§\8cä\97p\83\8d\83b\83N\83t\83@\83C\83\8b\96¼\81A\90â\91Î\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">HTMLDOCS,DENYDOC,DENYDOCSSL,ACCEPTDOC,ACCEPTDOC2</li>
- <ul>
- <li>HTMLDOCS\82É\81A\83T\81[\83oCGI\82Å\97p\82¢\82éHTML\83t\83@\83C\83\8b\96¼\91S\82Ä\82ð\90Ý\92è\82·\82é\81B</li>
- <li>DENYDOC\82É\81A\94F\8fØ\8e¸\94s\8e\9e\82É\95\\8e¦\82·\82éHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>DENYDOCSSL\82É\81AHTTPS\82ð\97p\82¢\82Ä\94F\8fØ\82É\8e¸\94s\82µ\82½\8fê\8d\87\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>ACCEPTDOC\82É\81A\94F\8fØ\90¬\8c÷\8e\9e\82É\95\\8e¦\82·\82éHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>ACCEPTDOC2\82É\81A\94F\8fØ\90¬\8c÷\8e\9e\82É\83|\83b\83v\83A\83b\83v\83E\83B\83\93\83h\83E\82Å\95\\8e¦\82³\82ê\82éHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B
- \81i\83|\83b\83v\83A\83b\83v\83E\83B\83\93\83h\83E\82ÌURL\82Í\95Ï\8dX\89Â\94\\81BINFOURL\8eQ\8fÆ\81j</li>
- </ul>
- <li class="list_none">INFOMATION</li>
- <ul>
- <li>ACCEPTDOC2\82Ì\91Ö\82í\82è\82É\81A\95ÊURL\82Ì\83y\81[\83W\82ð\95\\8e¦\82·\82é\82©\94Û\82©\82ð\90Ý\92è\82·\82é\81B\81i\82P\81F\97\98\97p\82·\82é\81B\82O\81F\97\98\97p\82µ\82È\82¢\81B\81j</li>
- </ul>
- <li class="list_none">INFOMATIONURL</li>
- <ul>
- <li>ACCEPTDOC2\82Ì\91Ö\82í\82è\82É\95\\8e¦\82³\82¹\82é\83y\81[\83W\82ÌURL\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">AUTHHTMLJA,AUTHHTMLEN,AUTHHTMLJASSL,AUTHHTMLENSSL</li>
- <ul>
- <li>AUTHHTMLJA\82É\81A\93ú\96{\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>AUTHHTMLEN\82É\81A\89p\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>AUTHHTMLJASSL\82É\81AHTTPS\82ð\97p\82¢\82½\93ú\96{\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>AUTHHTMLENSSL\82É\81AHTTPS\82ð\97p\82¢\82½\89p\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>\93ú\96{\8cê\81A\89p\8cê\88È\8aO\82É\94F\8fØ\8c¾\8cê\82ð\92Ç\89Á\82·\82é\8fê\8d\87\82Í\81Ajavahtml\83f\83B\83\8c\83N\83g\83\8a\93à\82Ì\8c¾\8cê\83f\83B\83\8c\83N\83g\83\8a\82Ì\92Ç\89Á\81AHTMLDOCS,DENYDOC,
- DENYDOCSSL,ACCESPTDOC,ACCEPTDOC2\82ð\95Ï\8dX\82µ\81A\82³\82ç\82Éopengateauth.h\93à\82Ì\90Ý\92è\82É\82 \82í\82¹\82ÄAUTHTHMLXX\82ð\92Ç\89Á\82·\82é\82±\82Æ\81B</li>
- </ul>
- <li class="list_none">ARPPATH</li>
- <ul>
- <li>ARP\83R\83}\83\93\83h\82Ì\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">NDPPAHT</li>
- <ul>
- <li>NDP\83R\83}\83\93\83h\82Ì\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">IPFW,IP6FW</li>
- <ul>
- <li>IPFW,IP6FW\83R\83}\83\93\83h\82Ì\82»\82ê\82¼\82ê\82Ì\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
-</ul>
-
-<p>opengatesrv.h\82É\82¨\82¢\82Ä\81A\88È\89º\82Ì\8d\80\96Ú\82ð\90Ý\92è\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>
-
-<ul>
- <li class="list_none">DEBUG</li>
- <ul>
- <li>\83f\83o\83b\83O\82ð\8ds\82È\82¤\82©\94Û\82©\82ð\90Ý\92è\82·\82é\81B\81i\82P\81F\83f\83o\83b\83O\83\8d\83O\82ð\8fo\97Í\82·\82é\81B\82O\81F\94F\8fØ\83\8d\83O\82Ì\82Ý\8fo\97Í\82·\82é\81B\81j</li>
- </ul>
- <li class="list_none">DURATIONDEFAULT</li>
- <ul>
- <li>Java Applet\82ð\91\97\90M\82µ\82Ä\82©\82ç\90Ú\91±\82µ\82Ä\82\82é\82Ü\82Å\82Ì\91Ò\82¿\8e\9e\8aÔ\81i\95b\81j\82ð\90Ý\92è\82·\82é\81B\90Ý\92è\92l\82Ì\8e\9e\8aÔ\82ª\8co\89ß\82·\82é\82Ü\82Å\82É\81A
- Java Applet\82©\82ç\82Ì\90Ú\91±\82ª\96³\82¯\82ê\82Î\92Ê\90M\98H\82ð\95Â\8d½\82·\82é\81B\82±\82Ì\91Ò\82¿\8e\9e\8aÔ\82Í\94F\8fØ\83y\81[\83W\82æ\82è\81A\97\98\97p\8eÒ\82ª\95Ï\8dX\82·\82é\82±\82Æ\82ª\89Â\94\\81B
- \82Ü\82½\81A\97\98\97p\8eÒ\82Ì\95Ï\8dX\82ð\8b\96\97e\82µ\82È\82¢\8fê\8d\87\82Í\81A\94F\8fØ\83y\81[\83W\82©\82ç\93ü\97Í\83t\83H\81[\83\80\82ð\8dí\8f\9c\82·\82é\82±\82Æ\81B</li>
- </ul>
- <li class="list_none">DURATIONMAX</li>
- <ul>
- <li>Java Applet\82©\82ç\82Ì\90Ú\91±\82ª\8am\94F\82Å\82«\82È\82¢\8fê\8d\87\82É\81A\97\98\97p\8eÒ\82ª\94F\8fØ\83y\81[\83W\82Å\8ew\92è\82µ\82½\97\98\97p\8cp\91±\8e\9e\8aÔ\81i\95b\81j\82Ì\8dÅ\91å\92l
- \82ð\90Ý\92è\82·\82é\81B\97\98\97p\8eÒ\82Ì\95Ï\8dX\82ð\8b\96\97e\82µ\82È\82¢\8fê\8d\87\82Í\81ADURATIONDEFAULT\82Æ\93¯\82¶\92l\82É\82·\82é\95K\97v\82ª\82 \82é\81B</li>
- </ul>
- <li class="list_none">ACTIVECHECKINTERVAL</li>
- <ul>
- <li> \92[\96\96\82Ì\97\98\97p\8fó\8bµ\82ð\8am\94F\82·\82é\8aÔ\8au(\95b)\82ð\90Ý\92è\82·\82é\81BJava Applet\82©\82ç\82Ì\90Ú\91±\82ª\96³\82¢\8fê\8d\87\82Í\81A
- \92Ê\89ß\83p\83P\83b\83g\90\94\82ÆMAC\83A\83h\83\8c\83X\82Ì\8am\94F\82ð\8ds\82È\82¤\81BJava Applet\82©\82ç\82Ì\92Ê\90M\82ª\82 \82é\8fê\8d\87\82Í\81AHELLO\83\81\83b\83Z\81[\83W\82Ì\8cð\8a·\82Æ
- \92Ê\89ß\83p\83P\83b\83g\90\94\82Ì\8am\94F\82ð\8ds\82È\82¤\81B</li>
- </ul>
- <li class="list_none">COMMWAITTIMEOUT</li>
- <ul>
- <li>HELLO\83\81\83b\83Z\81[\83W\95Ô\93\9a\82Ü\82Å\82Ì\8dÅ\91å\91Ò\82¿\8e\9e\8aÔ\81i\95b\81j\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">NOREPLYMAX</li>
- <ul>
- <li>HELLO\83\81\83b\83Z\81[\83W\82É\89\9e\93\9a\82µ\82È\82©\82Á\82½\8fê\8d\87\82ð\8b\96\97e\82·\82é\89ñ\90\94\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">NOPAKETINTERVAL</li>
- <ul>
- <li>\92Ê\89ß\83p\83P\83b\83g\82ª\8am\94F\82Å\82«\82È\82©\82Á\82½\8fê\8d\87\82É\81A\92Ê\90M\98H\82ð\95Â\8d½\82·\82é\82Ü\82Å\82Ì\8e\9e\8aÔ\81B\8eÀ\8dÛ\82É\82Í\81A\92Ê\89ß\83p\83P\83b\83g\82Ì\8am\94F\82Í
- ACTIVECHECKINTERVAL\82Ì\90Ý\92è\8e\9e\8aÔ\96\88\82É\8ds\82È\82í\82ê\82é\82Ì\82Å\81AACTIVECHECKINTERVAL\82Ì\90®\90\94\94{\82Ì\8e\9e\8aÔ\82É\90Ø\82è\8fã\82°\82ç\82ê\82é\81B</li>
- </ul>
- <li class="list_none">LOCKTIMEOUT</li>
- <ul>
- <li>ipfw,ip6fw\82Ì\94r\91¼\90§\8cä\82Ì\8dÅ\91å\91Ò\82¿\8e\9e\8aÔ\81i\95b\81j\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">IPFWMIN</li>
- <ul>
- <li>Opengate\82Å\97\98\97p\82·\82éipfw\82à\82µ\82\82Íip6fw\82Ì\83\8b\81[\83\8b\94Ô\8d\86\94Í\88Í\82Ì\8dÅ\8f¬\92l\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">IPFWMAX</li>
- <ul>
- <li>Opengate\82Å\97\98\97p\82·\82éipfw\82à\82µ\82\82Íip6fw\82Ì\83\8b\81[\83\8b\94Ô\8d\86\94Í\88Í\82Ì\8dÅ\91å\92l\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">IPFWINTERVAL</li>
- <ul>
- <li>ipfw\82à\82µ\82\82Íip6fw\82Ì\83\8b\81[\83\8b\94Ô\8d\86\94Í\88Í\82É\82¨\82¢\82Ä\81A\97\98\97p\82·\82é\94Ô\8d\86\82Ì\94Í\88Í\82ð\90Ý\92è\82·\82é\81B
- \83N\83\89\83C\83A\83\93\83g\82Ì\91ä\90\94\90§\8cÀ\82É\97p\82¢\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B</li>
- </ul>
- <li class="list_none">PORTMIN</li>
- <ul>
- <li>Java Applet\82Æ\82Ì\92Ê\90M\82É\97\98\97p\82·\82é\83|\81[\83g\82Ì\97\98\97p\94Í\88Í\82Ì\8dÅ\8f¬\92l\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">PORTMAX</li>
- <ul>
- <li>Java Applet\82Æ\82Ì\92Ê\90M\82É\97\98\97p\82·\82é\83|\81[\83g\82Ì\97\98\97p\94Í\88Í\82Ì\8dÅ\91å\92l\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">FACILITY</li>
- <ul>
- <li>SYSLOG\82É\83\8d\83O\82ð\8fo\97Í\82·\82é\8dÛ\82Ì\83t\83@\83V\83\8a\83e\83B\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
-</ul>
-
-<p>\88È\8fã\82Ì\90Ý\92è\82ð\8fI\82¦\82Ä\82©\82ç\81A\83R\83\93\83p\83C\83\8b\82Æ\83C\83\93\83X\83g\81[\83\8b\82ð\8ds\82È\82¤\81B</p>
-
-<table><tr><td><pre>
-#make
-cc -DCONFIGFILE=\"/etc/opengatesrv.conf\"
--DOPENGATEDIR=\"/opengate\" -DDENYDOC=\"deny.html\"
--DDENYDOC=\"deny.html\" -DDENYDOCSSL=\"deny-ssl.html\"
------------------
------------------
------------------
-# make install
-</pre></td></tr></table>
-
-<h5>A.3.3
\94F
\8fØ
\83T
\81[
\83o
\82Ì
\90Ý
\92è<a name="opengate6" href="#opengate6" class="anchor">†</a></h5>
-
-<p>
\94F
\8fØ
\83T
\81[
\83o
\82Ì
\90Ý
\92è
\82É
\82Â
\82¢
\82Ä
\82Í
\81A<a href="#opengate5">A.3.2</a>
\82Å
\82 \82°
\82½
\81ACONFIGFILE
\82É
\82æ
\82Á
\82Ä
\90Ý
\92è
\82·
\82é
\82±
\82Æ
\82ª
-\89Â\94\\82Å\82 \82é\81B</p>
-<p>\90Ý\92è\82Ì\8fÚ\8d×\82É\82Â\82¢\82Ä\82Í\81A\90Ý\92è\83t\83@\83C\83\8b\81iopengatesrv.conf\81j\93à\82É\8bL\8fq\82³\82ê\82Ä\82¢\82é\81B</p>
-
-<div align="right"><a href="#opengate0">top</a></div>
-
-</body>
-</html>
\ No newline at end of file
+++ /dev/null
-<html>\r
-<head>\r
-<title>Opegnate Install</title>\r
-<meta http-equiv="content-type" content="text/html;charset=Shift_JIS">\r
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">\r
-</head>\r
-\r
-<body bgcolor="#BBEECC">\r
-\r
-<!-- Start:ipfw,ip6fw\82Ì\90Ý\92è -->\r
-<h3>B ipfw,ip6fw
\82Ì
\90Ý
\92è<a name="ipfw0" href="#ipfw0" class="anchor">†</a></h3>
\r-\r
-<ul>\r
- <li class="list_num"><a href="#ipfw1">\83J\81[\83l\83\8b\82Ì\8dÄ\8d\\92z</a></li>\r
- <li class="list_num"><a href="#ipfw2">ipfw\82Ì\90Ý\92è</a></li>\r
- <li class="list_num"><a href="#ipfw3">ip6fw\82Ì\90Ý\92è</a></li>\r
-</ul>\r
-\r
-<!-- ************ 1 ************** -->\r
-<h4>B.1
\83J
\81[
\83l
\83\8b\82Ì
\8dÄ
\8d\
\92z<a name="ipfw1" href="#ipfw1" class="anchor">†</a></h4>
\r-\r
-<p>ipfw\82à\82µ\82\82Íip6fw\82ð\97\98\97p\82·\82é\82½\82ß\82É\82Í\81AFreeBSD\82Ì\83J\81[\83l\83\8b\82ð\8dÄ\8d\\92z\82·\82é\95K\97v\82ª\82 \82é\81BFreeBSD\83C\83\93\83X\83g\81[\83\8b\8e\9e\82É\r
-\83J\81[\83l\83\8b\93\99\82Ì\91S\82Ä\82Ì\83\\81[\83X\82ð\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82¢\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>\r
-<p>\88È\89º\82Ì\83f\83B\83\8c\83N\83g\83\8a\82É\82¨\82¢\82Ä\81AOpengate\97p\82Ì\83J\81[\83l\83\8b\83I\83v\83V\83\87\83\93\82ð\8dì\90¬\82·\82é\81B</p>\r
-\r
-<table><tr><td><pre>\r
-# cd /usr/src/sys/i386/conf\r
-# cp GENERIC MYKERNEL\r
-</pre></td></tr></table>\r
-\r
-<p>\83R\83s\81[\82µ\82½\83J\81[\83l\83\8b\83I\83v\83V\83\87\83\93\82É\81A\8e\9f\82Ì\83I\83v\83V\83\87\83\93\82ð\92Ç\89Á\82·\82é\81B</p>\r
-\r
-<table><tr><td><pre>\r
-options IPDIVERT\r
-\r
-options IPFIREWALL\r
-options IPFIREWALL_FORWARD\r
-options IPFIREWALL_VERBOSE\r
-options IPFIREWALL_VERBOSE_LIMIT=100\r
-\r
-options IPV6FIREWALL\r
-options IPV6FIREWALL_VERBOSE\r
-options IPV6FIREWALL_VERBOSE_LIMIT=100\r
-\r
-options IPSEC\r
-options IPSEC_ESP\r
-options TCP_DROP_SYSFIN\r
-</pre></td></tr></table>\r
-\r
-<p>IPDIVERT\82É\82Â\82¢\82Ä\82Í\81AIPv4\82ÌNAT\82ð\97p\82¢\82é\8fê\8d\87\82É\95K\97v\82Å\82 \82é\81B\82Ü\82½\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì\r
-\83\8d\83O\82ð\95K\97v\82Æ\82µ\82È\82¢\8fê\8d\87\82Í\81AVERBOSE\82Ì\8d\80\96Ú\82Í\95s\97v\82Å\82 \82é\81B\82³\82ç\82É\81AIPSEC\82ð\95K\97v\82Æ\82µ\82È\82¢\8fê\8d\87\82Í\81A\r
-IPSEC\82Ì\8d\80\96Ú\82Í\95s\97v\82Å\82 \82é\81B</p>\r
-<p>\82±\82ê\82ç\82Ì\83I\83v\83V\83\87\83\93\82ð\92Ç\89Á\82µ\82½\8cã\82É\81A\83J\81[\83l\83\8b\82Ì\83R\83\93\83p\83C\83\8b\82Æ\83C\83\93\83X\83g\81[\83\8b\82ð\8ds\82È\82¤\81B</p>\r
-\r
-<table><tr><td><pre>\r
-# config MYKERNEL\r
-# cd ../compile/MYKERNEL\r
-# make depend\r
-# make\r
-# make install\r
-</pre></td></tr></table>\r
-\r
-<p>FreeBSD 6.x\82Å\82Í\81A"make depend"\82ð\8eÀ\8ds\82·\82é\91O\82É\81A"make clean"\82ª\97v\8b\81\82³\82ê\82é\8fê\8d\87\82à\82 \82é\82Ì\82Å\81A\92\8d\88Ó\82·\82é\81B</p>\r
-\r
-<p>\8dÄ\8d\\92z\82µ\82½\83J\81[\83l\83\8b\82É\82æ\82Á\82Ä\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\97L\8cø\82É\82·\82é\82½\82ß\82É/etc/rc.conf\82É\88È\89º\82Ì\83I\83v\83V\83\87\83\93\82ð\r
-\8bL\8fq\82·\82é\81B</p>\r
-\r
-<table><tr><td><pre>\r
-firewall_enable="YES"\r
-firewall_script="/etc/rc.firewall"\r
-\r
-ipv6_firewall_enable="YES"\r
-ipv6_firewall_script="/etc/rc.firewall6"\r
-\r
-natd_enable="YES"\r
-natd_interface="em0"\r
-</pre></td></tr></table>\r
-\r
-<p>IPv4/6\82»\82ê\82¼\82ê\82Ì\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\97L\8cø\82É\82µ\81A\82»\82ê\82¼\82ê\82Ì\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì\83\8b\81[\83\8b\82ð\8bL\8fq\82µ\82½\r
-\83X\83N\83\8a\83v\83g\82ð\8ew\92è\82·\82é\81B\82Ü\82½\81ANAT\82ª\95K\97v\82Å\82 \82é\8fê\8d\87\82Í\81Anatd\82ð\97L\8cø\82É\82µ\81A\83A\83h\83\8c\83X\95Ï\8a·\82ð\8ds\82¤\r
-\83C\83\93\83^\83t\83F\81[\83X\82ÌID\82ð\8ew\92è\82·\82é\81B</p>\r
-\r
-<div align="right"><a href="#ipfw0">top</a></div>\r
-\r
-<!-- ************ 2 ************** -->\r
-<h4>B.2 ipfw
\82Ì
\90Ý
\92è<a name="ipfw2" href="#ipfw2" class="anchor">†</a></h4>
\r-\r
-<p>Opengate\82Ì\93®\8dì\82Ì\82½\82ß\82É\93K\90Ø\82É\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì\83\8b\81[\83\8b\82ð\8bL\8fq\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\r
-\88È\89º\82É\8bL\8fq\82·\82×\82«\83\8b\81[\83\8b\82Ì\97á\81i/etc/rc.firewall\81j\82ð\8e¦\82·\81B</p>\r
-\r
-<table><tr><td><pre>\r
-### set these to your outside interface network and netmask and ip\r
-oif="em0"\r
-onet="192.168.0.0"\r
-omask="255.255.255.0"\r
-oip="192.168.0.34"\r
-\r
-### set these to your inside interface network and netmask and ip\r
-iif="bge0"\r
-inet="192.168.55.0"\r
-imask="255.255.255.0"\r
-iip="192.168.55.1"\r
-\r
-fwcmd="/sbin/ipfw"\r
-\r
-### divert packet to NATD \r
-$fwcmd add 1 divert natd ip from any to any via ${oif}\r
-\r
-### Stop spoofing\r
-$fwcmd add deny all from ${inet}:${imask} to any in via ${oif}\r
-$fwcmd add deny all from ${onet}:${omask} to any in via ${iif}\r
-\r
-### Stop http from softeather\r
-$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 80\r
-$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 443\r
-\r
-### Allow from / to myself\r
-$fwcmd add pass all from ${iip} to any via ${iif}\r
-$fwcmd add pass all from ${oip} to any via ${oif}\r
-$fwcmd add pass all from any to ${iip} via ${iif}\r
-$fwcmd add pass all from any to ${oip} via ${oif}\r
-\r
-### Allow DNS queries out in the world\r
-### (if DNS is on localhost, delete passDNS)\r
-$fwcmd add pass udp from any 53 to any\r
-$fwcmd add pass udp from any to any 53\r
-$fwcmd add pass tcp from any to any 53\r
-$fwcmd add pass tcp from any 53 to any\r
-\r
-### Forwarding http connection from unauth client \r
-$fwcmd add 60000 fwd localhost tcp from ${inet}:${imask} to any 80\r
-$fwcmd add 60010 fwd localhost tcp from ${inet}:${imask} to any 443\r
-\r
-### Allow TCP through if setup succeeded \r
-$fwcmd add 60100 pass tcp from any to any established\r
-</pre></td></tr></table>\r
-\r
-<p>Opengate\82ð\93®\8dì\82³\82¹\82é\8dÛ\81A\83\8b\81[\83\8b\94Ô\8d\8660000,60010,60100\82ª\8fd\97v\82Æ\82È\82é\81B\94F\8fØ\83y\81[\83W\82ð\r
-\95\\8e¦\82³\82¹\82é\82½\82ß\82É\81AHTTP,HTTPS\83\8a\83N\83G\83X\83g\82ÍOpengate\82ÌWeb\83T\81[\83o\82É\93]\91\97\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\r
-\82\8d\82½\81A\8aù\82É\8am\97§\82³\82ê\82Ä\82¢\82éTCP\90Ú\91±\82É\8aÖ\82µ\82Ä\82Í\81AOpengate\82É\82æ\82é\92Ê\90M\98H\95Â\8d½\8cã\82à\97\98\97p\89Â\94\\82Æ\82·\82é\82½\82ß\81A\r
-60100\82Ì\83\8b\81[\83\8b\82ð\92Ç\89Á\82·\82é\81B</p>\r
-\r
-<p>\88È\8fã\81A\8e¦\82µ\82½\97á\82ÍOpengate\82ð\93®\8dì\82³\82¹\82é\82½\82ß\82Ì\90Ý\92è\97á\82Å\82 \82é\81B\8eÀ\8dÛ\82ÉOpengate\82ð\93±\93ü\82·\82é\8dÛ\82É\82Í\81A\r
-ipfw\82Ì\93®\8dì\82ð\8fn\92m\82µ\82½\8fã\81A\8ae\8eí\83l\83b\83g\83\8f\81[\83N\82É\93K\82µ\82½\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\90Ý\92u\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>\r
-\r
-<div align="right"><a href="#ipfw0">top</a></div>\r
-\r
-<!-- ************ 3 ************** -->\r
-<h4>B.3 ip6fw
\82Ì
\90Ý
\92è<a name="ipfw3" href="#ipfw3" class="anchor">†</a></h4>
\r-\r
-<p>Opengate\82Ì\93®\8dì\82Ì\82½\82ß\82É\93K\90Ø\82É\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì\83\8b\81[\83\8b\82ð\8bL\8fq\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\r
-\88È\89º\82É\8bL\8fq\82·\82×\82«\83\8b\81[\83\8b\82Ì\97á\81i/etc/rc.firewall6\81j\82ð\8e¦\82·\81B</p>\r
-\r
-<table><tr><td><pre>\r
-### set these to your outside interface network and prefixlen and ip\r
-oif="em0"\r
-onet="2001:e38:3661:1a0::"\r
-oprefixlen="64"\r
-oip="2001:e38:3661:1a0::34"\r
-\r
-### set these to your inside interface network and prefixlen and ip\r
-iif="bge0"\r
-inet="2001:e38:3661:1a5::"\r
-iprefixlen="64"\r
-iip="2001:e38:3661:1a5::1"\r
-\r
-### path to command "ip6fw"\r
-fw6cmd="/sbin/ip6fw"\r
-\r
-${fw6cmd} add pass all from ${iip} to any\r
-${fw6cmd} add pass all from any to ${iip}\r
-${fw6cmd} add pass all from ${oip} to any\r
-${fw6cmd} add pass all from any to ${oip}\r
-\r
-### Allow RA RS NS NA Redirect...\r
-${fw6cmd} add pass ipv6-icmp from any to any\r
-\r
-# Allow IP fragments to pass through\r
-${fw6cmd} add pass all from any to any frag\r
-\r
-# Allow RIPng\r
-${fw6cmd} add pass udp from fe80::/10 521 to ff02::9 521\r
-${fw6cmd} add pass udp from fe80::/10 521 to fe80::/10 521\r
-\r
-### Allow TCP through if setup succeeded\r
-${fw6cmd} add 60100 pass tcp from any to any established\r
-\r
-# TCP reset notice message\r
-${fw6cmd} add 60200 reset tcp from any to any 80\r
-${fw6cmd} add 60300 reset tcp from any to any 443\r
-</pre></td></tr></table>\r
-\r
-<p>ip6fw\82Í\81Aipfw\82Æ\82Í\88Ù\82È\82è\93]\91\97\82ð\8ds\82¤\82±\82Æ\82ª\82Å\82«\82È\82¢\81B\82»\82±\82Å\81AOpengate\82Å\82Í\r
-IPv6\82ÌHTTP\83\8a\83N\83G\83X\83g\82ª\83^\83C\83\80\83A\83E\83g\82µ\81AIPv4\82ÌHTTP\83\8a\83N\83G\83X\83g\82ð\93]\91\97\82µ\81A\94F\8fØ\r
-\82ð\8ds\82¤\8ed\91g\82Ý\82ð\82Æ\82Á\82Ä\82¢\82é\81B\82½\82¾\82µ\81AFreeBSD 5.2\88È\8d~\82Å\82Í\81Aip6fw\82ÅTCP reset\82ª\r
-\8eÀ\91\95\82³\82ê\82Ä\82¨\82è\81AIPv6 TCP\83p\83P\83b\83g\82É\91Î\82µ\82Ä\93\9e\92B\95s\94\\83\81\83b\83Z\81[\83W\82ð\95Ô\82·\82±\82Æ\82ª\89Â\94\\82Å\r
-\82 \82é\81B\83\8b\81[\83\8b\94Ô\8d\8660200,60300\82Ì\82æ\82¤\82É\81ATCP reset\82ð\97\98\97p\82·\82é\82±\82Æ\82É\82æ\82Á\82Ä\81AIPv6 HTTP\r
-\83\8a\83N\83G\83X\83g\82ª\83^\83C\83\80\83A\83E\83g\82·\82é\82Ü\82Å\82Ì\8e\9e\8aÔ\82ð\91Ò\82Â\95K\97v\82ª\82È\82\82È\82é\81B</p>\r
-\r
-<p>\82Ü\82½\81AIPv6\82Å\82ÍDHCP\82Ì\91Ö\82í\82è\82ÉRA\82É\82æ\82Á\82ÄIPv6\83A\83h\83\8c\83X\82ð\8e©\93®\90¶\90¬\82µ\81A\8co\98H\8fî\95ñ\r
-\92Ê\92m\83f\81[\83\82\83\93\82È\82Ç\81AICMP\82â\82»\82Ì\91¼\82Ì\83v\83\8d\83g\83R\83\8b\82Ì\88µ\82¢\82É\8bC\82ð\82Â\82¯\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\r
-ipfw\82Æ\93¯\97l\82É\81Aip6fw\82É\82Â\82¢\82Ä\82à\93®\8dì\82ð\8fn\92m\82µ\82½\8fã\82Å\81A\8ae\8eí\83l\83b\83g\83\8f\81[\83N\82É\93K\82µ\82½\r
-\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\90Ý\92u\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>\r
-\r
-<div align="right"><a href="#ipfw0">top</a></div>\r
-\r
-</body>\r
-</html>
\ No newline at end of file
+++ /dev/null
-<html>\r
-<head>\r
-<title>Opegnate Install</title>\r
-<meta http-equiv="Content-Type" content="text/html; charset=shift_jis">\r
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">\r
-</head>\r
-\r
-<body bgcolor="#BBEECC">\r
-\r
-<!-- Start:Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b -->\r
-<h3>C Apache2
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="apache0" href="#apache0" class="anchor">†</a></h3>
\r-<ul>\r
- <li class="list_num"><a href="#apache1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>\r
- <li class="list_num"><a href="#apache2">\83C\83\93\83X\83g\81[\83\8b\81i\83\\81[\83X\81j</a></li>\r
- <li class="list_num"><a href="#apache3">\94é\96§\8c®\81A\8fØ\96¾\8f\91\82Ì\8dì\90¬</a></li>\r
- <li class="list_num"><a href="#apache4">\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è</a></li>\r
- <li class="list_num"><a href="#apache5">HTTP_ERROR 404\82Ö\82Ì\91Î\89\9e</a></li>\r
-</ul>\r
-\r
-<!-- ************ 1 ************** -->\r
-<h4>C.1
\83C
\83\93\83X
\83g
\81[
\83\8b\81iports
\81j<a name="apache1" href="#apache1" class="anchor">†</a></h4>
\r-\r
-<p>Opengate\82Å\82Í\81AIPv6\82ð\83T\83|\81[\83g\82µ\82½Apache2\82ª\95K\90{\82Å\82 \82é\81B\82Ü\82½\81A\94F\8fØ\82ð\8ds\82¤\82±\82Æ\82©\82ç\r
-SSL\82ð\83T\83|\81[\83g\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81BApache2\82Í\95W\8f\80\82ÅSSL\82ð\83T\83|\81[\83g\82µ\82Ä\82¢\82é\82Ì\82Å\81Amod_ssl\r
-\82ð\95Ê\93r\83C\83\93\83X\83g\81[\83\8b\82·\82é\95K\97v\82Í\82È\82¢\81B</p>\r
-<p>\88È\89º\82É\81Aports\82ð\97\98\97p\82µ\82Ä\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\88È\89º\82É\8bL\82·\81B</p>\r
-\r
-<table><tr><td><pre>\r
-# cd /usr/ports/www/apache2\r
-# make clean\r
-===> Cleaning for autoconf-2.53_1\r
-===> Cleaning for libtool-1.3.5_1\r
-===> Cleaning for m4-1.4_1\r
-===> Cleaning for help2man-1.29\r
-===> Cleaning for expat-1.95.6_1\r
-===> Cleaning for apache-2.0.48_3\r
-# make install clean ; rehash\r
-</pre></td></tr></table>\r
-\r
-<p>\83C\83\93\83X\83g\81[\83\8b\8dì\8bÆ\82ª\8a®\97¹\82µ\82½\8cã\81AApache2\82Ì\8bN\93®\82ÆSSL\82ð\97L\8cø\82É\82·\82é\82½\82ß\82É\81A\r
-\88È\89º\82Ì\8d\80\96Ú\82ð/etc/rc.conf\82É\8bL\8fq\82·\82é\81B</p>\r
-\r
-<table><tr><td><pre>\r
-apache2_enable="YES"\r
-apache2ssl_enable="YES"\r
-</pre></td></tr></table>\r
-\r
-\r
-<div align="right"><a href="#apache0">top</a></div>\r
-\r
-<!-- ************ 2 ************** -->\r
-<h4>C.2
\83C
\83\93\83X
\83g
\81[
\83\8b\81i
\83\
\81[
\83X
\81j<a name="apache2" href="#apache2" class="anchor">†</a></h4>
\r-\r
-<p>Apache2\82ð\83\\81[\83X\82©\82ç\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\88È\89º\82É\8bL\82·\81B</p>\r
-<p>Apache2\82Ì\83\\81[\83X\82Í\81Aftp.apache.or.jp\93\99\82©\82ç\8eæ\93¾\82·\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B\82Ü\82½\81A\r
-Apache2\82ð\83R\83\93\83p\83C\83\8b\82·\82é\8dÛ\82É\81ASSL\83\82\83W\83\85\81[\83\8b\82ð\97L\8cø\82É\82·\82é\95K\97v\82ª\82 \82é\81B\82Ü\82½\81A\r
-\83\\81[\83X\82©\82ç\83C\83\93\83X\83g\81[\83\8b\82µ\82½\8dÛ\82Í\81A\95W\8f\80\82Å/usr/local/apache2\83f\83B\83\8c\83N\83g\83\8a\88È\89º\82É\83C\83\93\83X\83g\81[\83\8b\82³\82ê\82é\81B</p>\r
-\r
-<table><tr><td><pre>\r
-# tar xvfz httpd-2.0.55.tar.gz\r
-# cd httpd-2.0.55\r
-# ./configure --enable-modules="so ssl"\r
-# make\r
-# make install\r
-</pre></td></tr></table>\r
-\r
-<div align="right"><a href="#apache0">top</a></div>\r
-\r
-<!-- ************ 3 ************** -->\r
-<h4>C.3
\94é
\96§
\8c®
\81A
\8fØ
\96¾
\8f\91\82Ì
\8dì
\90¬<a name="apache3" href="#apache3" class="anchor">†</a></h4>
\r-\r
-<p>Apache2\82Å\81ASSL\82ð\97\98\97p\82·\82é\82½\82ß\82É\94é\96§\8c®\82Æ\8fØ\96¾\8f\91\82ð\97p\88Ó\82·\82é\95K\97v\82ª\82 \82é\81B\90³\8bK\82Ì\94F\8fØ\8bÇ\82©\82ç\r
-\94\8ds\82³\82ê\82½\8fØ\96¾\8f\91\82ð\97p\88Ó\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\82ª\81A\8e©\8cÈ\8f\90\96¼\82ð\8ds\82Á\82½\8fØ\96¾\8f\91\82Æ\94é\96§\8c®\82Å\82à\8f\\95ª\82É\r
-\83Z\83L\83\85\83\8a\83e\83B\82ð\8am\95Û\82·\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B</p>\r
-\r
-<p>Opengate\82Å\82Í\81A\93ñ\82Â\82ÌFQDN\82ð\97\98\97p\82·\82é\82±\82Æ\82©\82ç\81A\82»\82ê\82¼\82ê\82ÌFQDN\82É\91Î\89\9e\82·\82é\8fØ\96¾\8f\91\82Æ\r
-\94é\96§\8c®\82ª\95K\97v\82Æ\82È\82é\81B\88È\89º\82É\81A\94é\96§\8c®\82Æ\8fØ\96¾\8f\91\82ð\8dì\90¬\82·\82é\8eè\8f\87\82ð\8e¦\82·\81B</p>\r
-\r
-<table><tr><td><pre>\r
-# cd /usr/local/etc/apache2\r
-# mkdir ssl.key ssl.crt\r
-# chmod 700 ssl.key ssl.crt\r
-\r
-# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server1.key 1024\r
-# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server2.key 1024\r
-</pre></td></tr></table>\r
-\r
-<p>\8fã\8bL\82É\82¨\82¢\82Ä\8dì\90¬\82µ\82½\94é\96§\8c®\82ð\97p\82¢\82Ä\8f\90\96¼\82µ\82½\8fØ\96¾\8f\91\82ð\8dì\90¬\82·\82é\81B</p>\r
-\r
-<table><tr><td><pre>\r
-# /usr/bin/openssl req -new -x509 -days 365 \\r
- -key /usr/local/etc/apache2/ssl.key/server1.key \\r
- -out /usr/local/etc/apache2/ssl.crt/server1.crt\r
-\r
-You are about to be asked to enter information that will be incorporated\r
-into your certificate request.\r
-What you are about to enter is what is called a Distinguished Name or a DN.\r
-There are quite a few fields but you can leave some blank\r
-For some fields there will be a default value,\r
-If you enter '.', the field will be left blank.\r
------\r
-Country Name (2 letter code) [AU]:JP\r
-State or Province Name (full name) [Some-State]:Saga\r
-Locality Name (eg, city) []:Saga-city\r
-Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university\r
-Organizational Unit Name (eg, subsection) []:Information Science\r
-Common Name (eg, YOUR name) []:opengate.is.saga-u.ac.jp\r
-Email Address []:administrator@opengate.is.saga-u.ac.jp\r
-\r
-Please enter the following 'extra' attributes\r
-to be sent with your certificate request\r
-A challenge password []:\r
-An optional company name []:\r
-\r
-# /usr/bin/openssl req -new -x509 -days 365 \\r
- -key /usr/local/etc/apache2/ssl.key/server2.key \\r
- -out /usr/local/etc/apache2/ssl.crt/server2.crt\r
-\r
-You are about to be asked to enter information that will be incorporated\r
-into your certificate request.\r
-What you are about to enter is what is called a Distinguished Name or a DN.\r
-There are quite a few fields but you can leave some blank\r
-For some fields there will be a default value,\r
-If you enter '.', the field will be left blank.\r
------\r
-Country Name (2 letter code) [AU]:JP\r
-State or Province Name (full name) [Some-State]:Saga\r
-Locality Name (eg, city) []:Saga-city\r
-Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university\r
-Organizational Unit Name (eg, subsection) []:Information Science\r
-Common Name (eg, YOUR name) []:opengate4.is.saga-u.ac.jp\r
-Email Address []:administrator@opengate.is.saga-u.ac.jp\r
-\r
-Please enter the following 'extra' attributes\r
-to be sent with your certificate request\r
-A challenge password []:\r
-An optional company name []:\r
-</pre></td></tr></table>\r
-\r
-<div align="right"><a href="#apache0">top</a></div>\r
-\r
-<!-- ************ 4 ************** -->\r
-<h4>C.4
\83o
\81[
\83`
\83\83\83\8b\83z
\83X
\83g
\82Ì
\90Ý
\92è<a name="apache4" href="#apache4" class="anchor">†</a></h4>
\r-\r
-<p>Opengate\82Å\82Í\81A\93ñ\82Â\82ÌFQDN\82ð\97p\82¢\82é\81B\82±\82ê\82æ\82è\81AApache2\82Å\82Í\93ñ\82Â\82ÌFQDN\82É\91Î\89\9e\82·\82é\82½\82ß\82É\r
-\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è\82ð\8ds\82¤\95K\97v\82ª\82 \82é\81B</p>\r
-<p>Apache2\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82É\82Í\81AIP\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Æ\81A\83l\81[\83\80\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\r
-\83z\83X\83g\82Ì\93ñ\8eí\97Þ\82ª\82 \82é\81B\82µ\82©\82µ\81A\83l\81[\83\80\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82ð\97p\82¢\82½\8fê\8d\87\81A\90æ\8fq\82µ\82½\r
-\83o\81[\83`\83\83\83\8b\83z\83X\83g\82É\82Â\82¢\82Ä\82µ\82©SSL\8f\88\97\9d\82ð\8ds\82¤\82±\82Æ\82ª\82Å\82«\82È\82¢\81B</p>\r
-<p>Opengate\82Í\81A\93ñ\82Â\88È\8fã\82ÌNIC\82ð\8f\8a\8e\9d\82µ\81A\93ñ\82Â\88È\8fã\82ÌIP\83A\83h\83\8c\83X\82ð\8f\8a\8e\9d\82µ\82Ä\82¢\82é\82Ì\82Í\82¸\82È\82Ì\82Å\81A\r
-IP\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82ª\93K\97p\89Â\94\\82Å\82 \82é\81B</p>\r
-\r
-<p>\88È\89º\82É\81AIP\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82ð\93K\97p\82µ\82½\8fê\8d\87\82Ì\90Ý\92è\97á\r
-\81i/usr/local/etc/httpd.conf,ssl.conf\81j</p>\r
-\r
-<table><tr><td>httpd.conf</td></tr><tr><td><pre>\r
-NameVirtualHost 192.168.55.1:80\r
-<VirtualHost 192.168.55.1:80>\r
- ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
- DocumentRoot /usr/local/www\r
- ServerName opengate.is.saga-u.ac.jp\r
- ErrorLog "|/usr/bin/logger -p local6.info"\r
- CustomLog "|/usr/bin/logger -p local5.info" combined\r
-</VirtualHost>\r
-\r
-NameVirtualHost [2001:e38:3661:1a5::1]:80\r
-<VirtualHost [2001:e38:3661:1a5::1]:80>\r
- ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
- DocumentRoot /usr/local/www\r
- ServerName opengate.is.saga-u.ac.jp\r
- ErrorLog "|/usr/bin/logger -p local6.info"\r
- CustomLog "|/usr/bin/logger -p local5.info" combined\r
-</VirtualHost>\r
- \r
-NameVirtualHost 192.168.0.34:80\r
-<VirtualHost 192.168.0.34:80>\r
- ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
- DocumentRoot /usr/local/www\r
- ServerName opengate4.is.saga-u.ac.jp\r
- ErrorLog "|/usr/bin/logger -p local6.info"\r
- CustomLog "|/usr/bin/logger -p local5.info" combined\r
-</VirtualHost>\r
-</pre></td></tr></table>\r
-<br>\r
-<table><tr><td>ssl.conf</td></tr><tr><td><pre>\r
-NameVirtualHost 192.168.55.1:443\r
-<VirtualHost 192.168.55.1:443>\r
- DocumentRoot "/usr/local/www"\r
- ServerName opengate.is.saga-u.ac.jp:443\r
- ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
- ErrorLog "|/usr/bin/logger -p local6.info"\r
- CustomLog "|/usr/bin/logger -p local5.info" combined\r
-\r
- SSLEngine on\r
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL\r
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt\r
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key\r
-</VirtualHost>\r
-\r
-NameVirtualHost [2001:e38:3661:1a5::1]:443\r
-<VirtualHost [2001:e38:3661:1a5::1]:443>\r
- DocumentRoot "/usr/local/www"\r
- ServerName opengate.is.saga-u.ac.jp:443\r
- ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
- ErrorLog "|/usr/bin/logger -p local6.info"\r
- CustomLog "|/usr/bin/logger -p local5.info" combined\r
-\r
- SSLEngine on\r
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL\r
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt\r
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key\r
-</VirtualHost>\r
-\r
-NameVirtualHost 192.168.0.34:443\r
-<VirtualHost 192.168.0.34:443>\r
- DocumentRoot "/usr/local/www"\r
- ServerName opengate4.is.saga-u.ac.jp:443\r
- ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
- ErrorLog "|/usr/bin/logger -p local6.info"\r
- CustomLog "|/usr/bin/logger -p local5.info" combined\r
-\r
- SSLEngine on\r
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL\r
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server2.crt\r
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server2.key\r
-</VirtualHost>\r
-</pre></td></tr></table>\r
-\r
-<p>\8fã\8bL\82Ì\90Ý\92è\97á\82Í\81A\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è\82Ì\82½\82ß\82Ì\83f\83B\83\8c\83N\83e\83B\83u\82Ì\82Ý\8bL\8fq\82µ\82Ä\82¢\82é\81B\r
-\82±\82Ì\91¼\82É\82à\91½\82\82Ì\8d\80\96Ú\82ð\90Ý\92è\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\82Ì\82Å\81AApache2\82Ì\90Ý\92è\82ð\8fn\92m\82µ\82½\8fã\82Å\r
-\90Ý\92è\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>\r
-\r
-<div align="right"><a href="#apache0">top</a></div>\r
-\r
-<!-- ************ 5 ************** -->\r
-<h4>C.5 HTTP_ERROR 404
\82Ö
\82Ì
\91Î
\89\9e<a name="apache5" href="#apache5" class="anchor">†</a></h4>
\r-\r
-<p>Opengate\82Å\82Í\81A\97\98\97p\8eÒ\92[\96\96\82©\82ç\91\97\90M\82³\82ê\82Ä\82\82éHTTP\83\8a\83N\83G\83X\83g\82ð\81AOpengate\82ª\8e\9d\82Â\r
-Web\83T\81[\83o\82É\93]\91\97\82·\82é\82±\82Æ\82É\82æ\82Á\82Ä\81A\94F\8fØ\83y\81[\83W\82ð\92ñ\8b\9f\82µ\82Ä\82¢\82é\81B\82±\82Ì\82½\82ß\81A\97\98\97p\8eÒ\92[\96\96\r
-\82©\82ç\91\97\90M\82³\82ê\82Ä\82\82éHTTP\83\8a\83N\83G\83X\83g\82Í\97\\8aú\82·\82é\82±\82Æ\82ª\82Å\82«\82È\82¢\81B\82æ\82Á\82Ä\81A\82Ç\82Ì\82æ\82¤\82È\r
-HTTP\83\8a\83N\83G\83X\83g\82É\91Î\82µ\82Ä\82à\81A\94F\8fØ\83y\81[\83W\82ð\95Ô\82·\82½\82ß\82É\81A/usr/local/etc/httpd.conf\82É\r
-HTTP_ERROR 404\82ª\94\90¶\82µ\82½\8fê\8d\87\82É\81ADocumentRoot\82ð\95Ô\82·\82æ\82¤\82É\90Ý\92è\82·\82é\81B</p>\r
-\r
-<table><tr><td><pre>\r
-ErrorDocument 404 /\r
-</pre></td></tr></table>\r
-\r
-<div align="right"><a href="#apache0">top</a></div>\r
-\r
-</body>\r
-</html>
\ No newline at end of file
+++ /dev/null
-<html>\r
-<head>\r
-<title>Opegnate Install</title>\r
-<meta http-equiv="Content-Type" content="text/html; charset=shift_jis">\r
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">\r
-</head>\r
-\r
-<body bgcolor="#BBEECC">\r
-\r
-<!-- Start:isc-dhcp3\82Ì\83C\83\93\83X\83g\81[\83\8b -->\r
-<h3>D isc-dhcp3
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="dhcp0" href="#dhcp0" class="anchor">†</a></h3>
\r-\r
-<ul>\r
- <li class="list_num"><a href="#dhcp1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>\r
- <li class="list_num"><a href="#dhcp2">DHCP\82Ì\90Ý\92è</a></li>\r
-</ul>\r
-\r
-<!-- *********** 1 ************* -->\r
-<h4>D.1
\83C
\83\93\83X
\83g
\81[
\83\8b\81iports
\81j<a name="dhcp1" href="#dhcp1" class="anchor">†</a></h4>
\r-\r
-<p>Opengate\82ð\93±\93ü\82·\82é\83l\83b\83g\83\8f\81[\83N\82Å\82Í\81A\97\98\97p\8eÒ\92[\96\96\82ª\95p\94É\82É\93ü\82ê\91Ö\82í\82é\82±\82Æ\82ª\97\\91ª\82Å\82«\82é\81B\r
-\82»\82±\82Å\81A\97l\81X\82È\97\98\97p\8eÒ\92[\96\96\82É\91Î\82µ\82Ä\8e©\93®\93I\82ÉIPv4\83A\83h\83\8c\83X\82ð\8a\84\82è\93\96\82Ä\82é\82±\82Æ\82ª\82Å\82«\82éDHCP\83T\81[\83o\82ð\r
-\93±\93ü\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>\r
-<p>\88È\89º\82Éisc-dhcp3\82Ì\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87\82ð\8bL\82·\81B</p>\r
-\r
-<table><tr><td><pre>\r
-# cd /usr/ports/net/isc-dhcp3-server\r
-# make\r
-===> Cleaning for isc-dhcp3-server-3.0.1.r14_3\r
-# make install clean ; rehash\r
-</pre></td></tr></table>\r
-\r
-<div align="right"><a href="#dhcp0">top</a></div>\r
-\r
-<!-- ************ 2 ************** -->\r
-<h4>D.2 DHCP
\82Ì
\90Ý
\92è<a name="dhcp2" href="#dhcp2" class="anchor">†</a></h4>
\r-\r
-<p>\83C\83\93\83X\83g\81[\83\8b\8dì\8bÆ\82ª\8a®\97¹\82·\82é\82Æ\81A/usr/local/etc\88È\89º\82Édhcpd.conf.sample\82ª\90¶\90¬\82³\82ê\82Ä\82¢\82é\81B\r
-\93¯\83f\83B\83\8c\83N\83g\83\8a\82Édhcpd.conf\82Æ\82µ\82Ä\83R\83s\81[\82µ\81Adhcpd\97p\82Ì\90Ý\92è\83t\83@\83C\83\8b\82ð\8dì\90¬\82·\82é\81B</p>\r
-<p>\88È\89º\82É\81A\90Ý\92è\97á\82ð\8e¦\82·\81B</p>\r
-\r
-<table><tr><td><pre>\r
-option domain-name "ai.is.saga-u.ac.jp";\r
-option domain-name-servers 192.168.0.2;\r
-option subnet-mask 255.255.255.0;\r
-option broadcast-address 192.168.55.255;\r
-option routers 192.168.55.1;\r
-\r
-default-lease-time 600;\r
-max-lease-time 7200;\r
-ddns-update-style none;\r
-log-facility local7;\r
-\r
-subnet 192.168.55.0 netmask 255.255.255.0 {\r
- range 192.168.55.100 192.168.55.200;\r
-}\r
-</pre></td></tr></table>\r
-\r
-<p>\82Ü\82½\81Adhcpd\82ð\8e©\93®\8bN\93®\82·\82é\82½\82ß\82É\81A/etc/rc.conf\82É\88È\89º\82Ì\8d\80\96Ú\82ð\8bL\8fq\82·\82é\81B</p>\r
-\r
-<table><tr><td><pre>\r
-dhcpd_enable="YES"\r
-dhcpd_ifaces="bge0"\r
-dhcpd_conf="/usr/local/etc/dhcpd.conf"\r
-</pre></td></tr></table>\r
-\r
-<p>dhcpd_ifaces\82É\82Â\82¢\82Ä\82Í\81Adhcp\82ð\91\97\90M\82·\82é\83C\83\93\83^\83t\83F\81[\83XID\82ð\8bL\8fq\82·\82é\81B</p>\r
-\r
-<div align="right"><a href="#dhcp0">top</a></div>\r
-\r
-</body>\r
-</html>
\ No newline at end of file
+++ /dev/null
-<html>\r
-<head>\r
-<title>Opegnate Install</title>\r
-<meta http-equiv="Content-Type" content="text/html; charset=shift_jis">\r
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">\r
-</head>\r
-\r
-<body bgcolor="#BBEECC">\r
-\r
-<!-- Start:BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b -->\r
-<h3>E BIND9
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="bind0" href="#bind0" class="anchor">†</a></h3>
\r-\r
-<ul>\r
- <li class="list_num"><a href="#bind1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>\r
- <li class="list_num"><a href="#bind2">\94F\8fØ\83L\81[\82Ì\8dì\90¬</a></li>\r
- <li class="list_num"><a href="#bind3">named.conf\82Ì\90Ý\92è</a></li>\r
- <li class="list_num"><a href="#bind4">zone\82Ì\90Ý\92è</a></li>\r
- <li class="list_num"><a href="#bind5">\8bN\93®\8am\94F</a></li>\r
-</ul>\r
-\r
-<!-- ********** 1 *********** -->\r
-<h4>E.1
\83C
\83\93\83X
\83g
\81[
\83\8b\81iports
\81j<a name="bind1" href="#bind1" class="anchor">†</a></h4>
\r-\r
-<p>Opengate\82Ì\82½\82ß\82É\93ñ\82Â\82ÌFQDN\82ð\97p\88Ó\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\8aù\91¶\82ÌDNS\82ÉOpengate\97p\82Ì\r
-FQDN\82ð\93o\98^\82·\82é\82±\82Æ\82Å\82à\89ð\8c\88\82Å\82«\82é\81B\82µ\82©\82µ\81ANAT\82È\82Ç\82ð\97p\82¢\82Ä\83A\83h\83\8c\83X\95Ï\8a·\82ð\8ds\82¤\8fê\8d\87\82ð\r
-\8dl\82¦\82é\82Æ\81A\83v\83\89\83C\83x\81[\83g\83l\83b\83g\83\8f\81[\83N\82Ì\83A\83h\83\8c\83X\82ð\8aO\95\94\82ÌDNS\82É\93o\98^\82·\82é\82±\82Æ\82Í\96]\82Ü\82µ\82\82È\82¢\81B\r
-\82»\82±\82Å\81AOpengate\97p\82Ì\83}\83V\83\93\82ÉDNS\82ð\93±\93ü\82·\82é\82±\82Æ\82à\8dl\82¦\82ç\82ê\82é\81B</p>\r
-<p>\88È\89º\82É\81ABIDN9\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\8bL\82·\81B</p>\r
-\r
-<table><tr><td><pre>\r
-# cd /usr/ports/dns/bind9/\r
-# make clean\r
-===> Cleaning for bind9-9.3.1\r
-# make install clean ; rehash\r
-</pre></td></tr></table>\r
-\r
-<p>\83C\83\93\83X\83g\81[\83\8b\82ª\8a®\97¹\82·\82é\82Æ\81A/etc/namedb(/var/named/etc/namaedb)\88È\89º\82Ì\83f\83B\83\8c\83N\83g\83\8a\82É\r
-\8ae\8eí\90Ý\92è\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82é\81B</p>\r
-\r
-<div align="right"><a href="#bind0">top</a></div>\r
-\r
-<!-- ********** 2 ********** -->\r
-<h4>E.2
\94F
\8fØ
\83L
\81[
\82Ì
\8dì
\90¬<a name="bind2" href="#bind2" class="anchor">†</a></h4>
\r-\r
-<p>BIND9\82Å\82Í\81A\83Z\83L\83\85\83\8a\83e\83B\82ð\8am\95Û\82·\82é\82½\82ß\82É\94F\8fØ\83L\81[\82ð\90Ý\92è\82µ\81Arndc\83R\83}\83\93\83h\82ð\97p\82¢\82Änamed\82ð\90§\8cä\82·\82é\81B</p>\r
-<p>\82»\82±\82Å\81A\82Ü\82¸\94F\8fØ\83L\81[\82Ì\8dì\90¬\82ð\8ds\82¤\81B\94F\8fØ\8b@\81[\82Ì\8dì\90¬\8eè\8f\87\82ð\88È\89º\82É\8e¦\82·\81B</p>\r
-\r
-<table><tr><td><pre>\r
-# /usr/local/sbin/dnssec-keygen -a hmac-md5 -b 512 -n user rndc\r
-</pre></td></tr></table>\r
-\r
-<p>\88È\8fã\82Ì\8dì\8bÆ\82É\82¨\82¢\82Ä\81A"out of entropy"\82Æ\82¢\82¤\83G\83\89\81[\82ª\94\90¶\82·\82é\8fê\8d\87\82Í\81A\8e\9f\82Ì\95û\96@\82Å\r
-\94F\8fØ\83L\81[\82ð\8dì\90¬\82·\82é\81B</p>\r
-\r
-<table><tr><td><pre>\r
-# /usr/local/sbin/dnssec-keygen -r /dev/urandom -a hmac-md5 -b 512 -n user rndc\r
-</pre></td></tr></table>\r
-\r
-<p>\94F\8fØ\83L\81[\82Ì\8dì\90¬\82É\90¬\8c÷\82·\82é\82Æ\81A\8e\9f\82Ì\93ñ\82Â\82Ì\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82é\81B\82½\82¾\82µ\81A\83t\83@\83C\83\8b\96¼\82É\r
-\8aÜ\82Ü\82ê\82é\90\94\8e\9a\82Í\83\89\83\93\83_\83\80\82É\90¶\90¬\82³\82ê\82é\81B</p>\r
-\r
-<ul>\r
- <li><pre>Krndc.+157+60849.key</pre></li>\r
- <li><pre>Krndc.+157+60849.private</pre></li>\r
-</ul>\r
-\r
-<p>BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b\8cã\82É\81A/usr/local/etc/rndc.conf.sample\82Æ\82¢\82¤\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82Ä\82¢\82é\81B\r
-\82±\82Ì\83t\83@\83C\83\8b\82ð\83R\83s\81[\82µ\82Ä\81A/usr/local/etc/rndc.conf\82ð\8dì\90¬\82·\82é\81B</p>\r
-<p>\82»\82µ\82Ä\81Arndc.conf\82Ìkey\83f\83B\83\8c\83N\83e\83B\83u\82ð\95Ò\8fW\82·\82é\81Bkey\83f\83B\83\8c\83N\83e\83B\83u\82Å\82Í\81A\94F\8fØ\83L\81[\82Ì\r
-\83A\83\8b\83S\83\8a\83Y\83\80\82Æ\90¶\90¬\82µ\82½\94F\8fØ\83L\81[\82ð\8ew\92è\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\94F\8fØ\83L\81[\82Ísecret\82Ì\8d\80\96Ú\82É\8ew\92è\82·\82é\81B\r
-
\82Ü
\82½
\81A
\94F
\8fØ
\83L
\81[
\82Æ
\8b¤
\82É
\8dì
\90¬
\82µ
\82½<pre>Krndc.+157+60849.private</pre>
\82Ìkey
\8d\80\96Ú
\82É
\95\
\8e¦
\82³
\82ê
\82Ä
\r-\82¢\82é\82à\82Ì\82ð\8ew\92è\82·\82é\81B</p>\r
-\r
-<table><tr><td><pre>\r
-options {\r
- default-server localhost;\r
- default-key "key";\r
-};\r
-\r
-server localhost {\r
- key "key";\r
-};\r
-\r
-key "key" {\r
- algorithm hmac-md5;\r
- secret "...";\r
-};\r
-</pre></td></tr></table>\r
-\r
-<p>\8d¡\89ñ\82ÌDNS\83T\81[\83o\82Í\81AOpengate\82ð\93±\93ü\82·\82é\83l\83b\83g\83\8f\81[\83N\82Ì\82Ý\82É\83T\81[\83r\83X\82ð\8ds\82¤\82à\82Ì\82Å\82 \82é\81B\82µ\82©\82µ\81A\r
-\90Ý\92è\83t\83@\83C\83\8b\82Ì\83p\81[\83~\83b\83V\83\87\83\93\82É\8f\\95ª\92\8d\88Ó\82µ\81A\94F\8fØ\83L\81[\82Ì\83t\83@\83C\83\8b\82Í\83T\81[\83o\8fã\82É\95Û\91¶\82¹\82¸\82É\81A\r
-\8dí\8f\9c\82à\82µ\82\82Í\83v\83\8a\83\93\83g\83A\83E\83g\82µ\82Ä\8cµ\8fd\82É\95Û\91¶\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>\r
-\r
-<div align="right"><a href="#bind0">top</a></div>\r
-\r
-<!-- ********* 3 ********* -->\r
-<h4>E.3 named.conf
\82Ì
\90Ý
\92è<a name="bind3" href="#bind3" class="anchor">†</a></h4>
\r-\r
-<p>named\82Ì\8eå\82È\93®\8dì\82ð\90§\8cä\82·\82é\82½\82ß\82Ì\90Ý\92è\83t\83@\83C\83\8b/etc/namedb/named.conf\82Ì\90Ý\92è\82ð\8ds\82¤\81B</p>\r
-<p>\82Ü\82¸\81A\94F\8fØ\83L\81[\82Ì\90Ý\92è\82Ì\82½\82ß\82Ékey\83f\83B\83\8c\83N\83e\83B\83u\82Ì\90Ý\92è\82ª\95K\97v\82Å\82 \82é\81B\91O\8fq\82µ\82½rndc.conf\82Ì\r
-key\83f\83B\83\8c\83N\83e\83B\83u\82Æ\93¯\97l\82Ì\90Ý\92è\82ð\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>\r
-\r
-<table><tr><td><pre>\r
-key "rndc_key" {\r
- algorithm hmac-md5;\r
- secret "...";\r
-};\r
-\r
-controls {\r
- inet ::1 allow {\r
- ::1;\r
- }\r
- keys {\r
- "rndc_key";\r
- };\r
- inet 127.0.0.1 allow {\r
- 127.0.0.1;\r
- }\r
- keys {\r
- "rndc_key";\r
- };\r
-};\r
-</pre></td></tr></table>\r
-\r
-<p>\82Ü\82½\81Akey\83f\83B\83\8c\83N\83e\83B\83u\82É\82Â\82¢\82Ä\82Í\95Ê\83t\83@\83C\83\8b\82É\8bL\8fq\82µ\81Anamed.conf\82Åinclude\r
-\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B\95Ê\83t\83@\83C\83\8b\82É\8bL\8fq\82·\82é\8fê\8d\87\82Í\81A\83p\81[\83~\83b\83V\83\87\83\93\82Ì\90Ý\92è\82æ\82Á\82Ä\82³\82ç\82É\r
-\83Z\83L\83\85\83\8a\83e\83B\82ð\8d\82\82ß\82é\82±\82Æ\82ª\89Â\94\\82Æ\82È\82é\81B</p>\r
-<p>\8e\9f\82É\81Aoptions\83f\83B\83\8c\83N\83e\83B\83u\82Ì\90Ý\92è\82ð\8ds\82¤\81B</p>\r
-\r
-<table><tr><td><pre>\r
-options {\r
- directory "/etc/namedb";\r
- pid-file "/var/run/named/named.pid";\r
- auth-nxdomain yes;\r
- listen-on-v6 { any; };\r
-};\r
-</pre></td></tr></table>\r
-\r
-<p>named.pid\83t\83@\83C\83\8b\82ð\92u\82\83f\83B\83\8c\83N\83g\83\8a\82Í\93K\93\96\82É\8dì\90¬\82·\82é\95K\97v\82ª\82 \82é\81B</p>\r
-\r
-<div align="right"><a href="#bind0">top</a></div>\r
-\r
-<!-- ******** 4 ********* -->\r
-<h4>E.4 zone
\82Ì
\90Ý
\92è<a name="bind4" href="#bind4" class="anchor">†</a></h4>
\r-\r
-<p>Opengate\82Å\8aÇ\97\9d\82·\82é\83h\83\81\83C\83\93\82É\82Â\82¢\82Ä\90Ý\92è\82ð\8ds\82¤\81B\8ae\83h\83\81\83C\83\93\82Ínamed.conf\82Ìzone\83f\83B\83\8c\83N\83e\83B\83u\82É\r
-\82æ\82Á\82Ä\8aÇ\97\9d\82³\82ê\82é\81B\82Ü\82½\81ABIND9\82Å\82Íview\82Æ\82¢\82¤\83f\83B\83\8c\83N\83e\83B\83u\82ª\8eÀ\91\95\82³\82ê\82Ä\82¨\82è\81A\82±\82Ì\8eq\83f\83B\83\8c\83N\83e\83B\83u\82É\r
-zone\82Æ\82µ\82Ä\90Ý\92è\82·\82é\82±\82Æ\82É\82æ\82Á\82Ä\81ADNS\96â\82¢\8d\87\82í\82¹\8c³\82ÌIP\83A\83h\83\8c\83X\82â\83h\83\81\83C\83\93\82É\82æ\82Á\82Ä\95Ô\93\9a\82·\82ézone\82ð\r
-\95Ï\8dX\82·\82é\82±\82Æ\82ª\89Â\94\\82Æ\82È\82é\81B</p>\r
-\r
-<table><tr><td><pre>\r
-view "og" {\r
- match-clients\r
- {\r
- 10.0.0.0/16;\r
- };\r
-\r
- recursion yes;\r
-\r
- zone "." {\r
- type hint;\r
- file "named.root";\r
- };\r
-\r
- zone "og.saga-u.ac.jp" {\r
- type master;\r
- file "og.saga-u.ac.jp";\r
- };\r
-\r
- zone "0.0.127.IN-ADDR.ARPA" {\r
- type master;\r
- file "master/localhost.rev";\r
- };\r
-\r
- // RFC 3152\r
- zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\\r
- 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA" {\r
- type master;\r
- file "master/localhost-v6.rev";\r
- };\r
-\r
- // RFC 1886 -- deprecated\r
- zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\\r
- 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.INT" {\r
- type master;\r
- file "master/localhost-v6.rev";\r
- };\r
-};\r
-</pre></td></tr></table>\r
-\r
-<p>\88È\8fã\82Ì\90Ý\92è\82É\82¨\82¢\82Ä\81A"og.saga-u.ac.jp"\82Æ\82¢\82¤zone\82ð\90Ý\92è\82µ\82½\81B\82±\82Ì\90Ý\92è\82É\82¨\82¢\82Ä\81A\r
-\83h\83\81\83C\83\93"og.saga-u.ac.jp"\82É\91®\82·\82é\83z\83X\83g\82ð\90Ý\92è\82µ\82½og.saga-u.ac.jp\82Æ\82¢\82¤\83t\83@\83C\83\8b\82ð\r
-\93Ç\82Ý\8d\9e\82Þ\82æ\82¤\82É\90Ý\92è\82µ\82Ä\82¢\82é\81B\82»\82±\82Å\81Aog.saga-u.ac.jp\82Æ\82¢\82¤\81A\8e\9f\82Ì\82æ\82¤\82È\83t\83@\83C\83\8b\82ð\r
-\97p\88Ó\82·\82é\81B</p>\r
-\r
-<table><tr><td><pre>\r
-$TTL 3600\r
-$ORIGIN og.saga-u.ac.jp.\r
-\r
-@ IN SOA ns.og.saga-u.ac.jp. postmaster (\r
- 2005051702 ;\r
- 3600\r
- 1200\r
- 2419200\r
- 86400 )\r
- IN NS ns.og.saga-u.ac.jp.\r
- IN A 10.0.0.2\r
- IN MX 10 opengate.og.saga-u.ac.jp.\r
-\r
-ns IN A 10.0.0.2\r
-\r
-opengate IN A 10.0.0.2\r
- AAAA 2001:2f8:10:1::1\r
-\r
-opengate4 IN A 133.49.1.2\r
-</pre></td></tr></table>\r
-\r
-<div align="right"><a href="#bind0">top</a></div>\r
-\r
-<!-- ********* 5 ********* -->\r
-<h4>E.5
\8bN
\93®
\8am
\94F<a name="bind5" href="#bind5" class="anchor">†</a></h4>
\r-\r
-<p>\88È\8fã\81A\91S\82Ä\82Ì\90Ý\92è\82ª\8a®\97¹\82µ\82½\8cã\82É\81A\8bN\93®\8am\94F\82ð\8ds\82¤\81B</p>\r
-\r
-<table><tr><td><pre>\r
-# /usr/local/sbin/named/ -u bind -c /etc/namedb/named.conf\r
-</pre></td></tr></table>\r
-\r
-<p>\88È\8fã\82ð\8eÀ\8ds\82µ\81A\96â\91è\82È\82named\82ª\8bN\93®\82µ\82Ä\82¢\82ê\82Î\90¬\8c÷\82Å\82 \82é\81B\8bN\93®\8am\94F\82Å\96â\91è\82ª\82È\82¯\82ê\82Î\81A\r
-/etc/rc.conf\82É\88È\89º\82Ì\8d\80\96Ú\82ð\8bL\8fq\82µ\81A\8e©\93®\8bN\93®\82·\82é\82æ\82¤\82É\90Ý\92è\82·\82é\81B</p>\r
-\r
-<table><tr><td><pre>\r
-named_enable="YES"\r
-named_program="/usr/local/sbin/named"\r
-named_flags="-u bind -c /etc/namedb/named.conf"\r
-</pre></td></tr></table>\r
-\r
-<p>DNS\83T\81[\83o\82Í\8aÇ\97\9d\82ª\95¡\8eG\82Å\82 \82é\82½\82ß\81A\82±\82Ì\91¼\82Ì\8e\91\97¿\82à\8eQ\8dl\82É\82µ\81A\83}\83j\83\85\83A\83\8b\82ð\r
-\8fn\93Ç\82µ\82½\8fã\82Å\90Ý\92è\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>\r
-\r
-<div align="right"><a href="#bind0">top</a></div>\r
-\r
-</body>\r
-</html>
\ No newline at end of file
+++ /dev/null
-<html>
-<head>
-<title>Opegnate Install</title>
-<meta http-equiv="content-type" content="text/html;charset=Shift_JIS">
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">
-</head>
-
-<body bgcolor="#BBEECC">
-
-<!-- Start:MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b -->
-<h3>B MRTG
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="mrtg0" href="#mrtg0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#mrtg1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#mrtg2">MRTG\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#mrtg3">MRTG\82Ì\8bN\93®\8am\94F</a></li>
- <li class="list_num"><a href="#mrtg4">crontab\82Ö\82Ì\93o\98^</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>F.1 MRTG
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="mrtg1" href="#mrtg1" class="anchor">†</a></h4>
-
-<p>Opengate \82Ì\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\82½\82ß\82É\81AMRTG\82ð\97p\82¢\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B\97\98\97p\8fó\8bµ\82Ì\8aÄ\8e\8b\82ð\8ds\82È\82í\82È\82¢\8fê\8d\87\82Í\81A
-MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b\82Í\95s\97v\82Å\82 \82é\81B</p>
-
-<p>MRTG(Multi Router Traffic Grapher)\82Æ\82Í\81A\96{\97\88\83l\83b\83g\83\8f\81[\83N\82Ì\95\89\89×\82ð\8aÄ\8e\8b\82·\82é\83c\81[\83\8b\82Å\82 \82é\81B
-SNMP\83G\81[\83W\83F\83\93\83g\82æ\82è\83g\83\89\83t\83B\83b\83N\82Ì\92l\82ð\8eæ\93¾\82µ\81A\83O\83\89\83t\83B\83b\83N\83C\83\81\81[\83W\82ð\8aÜ\82ÞHTML\83y\81[\83W\82ð\90¶\90¬\82·\82é\81B
-<a href="http://www.mrtg.jp/" target="_blank">\8fÚ\8d×</a></p>
-
-<p>MRTG\82ð\97p\82¢\82Ä\81AOpengate\82Ì\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\82É\82 \82½\82Á\82Ä\82Í\81AOpengate\82ð\93±\93ü\82µ\82½\83Q\81[\83g\83E\83F\83C\82É\82¨\82¢\82Ä
-MRTG\82ð\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82à\8d\\82í\82È\82¢\82ª\81A\8aÄ\8e\8b\97p\82Ì\95Ê\82Ì\83T\81[\83o\82É\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82à\8d\\82í\82È\82¢\81B\82Ü\82½\81A
-Opengate\82ð\95ª\8eU\94z\92u\82·\82é\82æ\82¤\82É\90Ý\8cv\82³\82ê\82Ä\82¢\82é\82½\82ß\81A\95¡\90\94\82ÌOpengate\82ð\8aÇ\97\9d\82·\82é\82É\82 \82½\82Á\82Ä\82Í\8aÄ\8e\8b\97p\82Ì\83T\81[\83o\82É
-\82¨\82¢\82ÄMRTG\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\82±\82Æ\82ð\90\84\8f§\82·\82é\81B</p>
-
-<p>\88È\89º\82É\81AMRTG\82ðports\82ð\97p\82¢\82Ä\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/net-mgmt/mrtg/
-# make clean
-===> Cleaning for mrtg-2.12.2,1
-# make install clean ; rehash
-</pre></td></tr></table>
-
-
-<!-- ************ 2 ************** -->
-<h4>F.2 MRTG
\82Ì
\90Ý
\92è<a name="mrtg2" href="#mrtg2" class="anchor">†</a></h4>
-
-<p>MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b\82ª\8a®\97¹\82·\82é\82Æ\81A/usr/local/etc/mrtg/\88È\89º\82É\90Ý\92è\83t\83@\83C\83\8b\82ª\97p\88Ó\82³\82ê\82Ä\82¢\82é\81B
-\93¯\83f\83B\83\8c\83N\83g\83\8a\82É\81Aopengate.cfg\82Æ\82µ\82Ä\90V\82½\82É\90Ý\92è\83t\83@\83C\83\8b\82ð\97p\88Ó\82·\82é\81B</p>
-
-<table><tr><td><pre>
-##################################################
-# opengate user counter
-
-WorkDir: /usr/home/user/public_html/mrtg/opengate/
-Language: euc-jp
-
-##### \83I\83v\83V\83\87\83\93
-# growright: X\8e²\82Ì\8c´\93_\82ð\8d¶\82É integer: \90®\90\94\95\\8e¦ info: 3,4\94Ô\96Ú\82Ì\8fo\97Í\82Ì\94ñ\95\\8e¦
-# gauge: \8c»\8dÝ\82Ì\92l=\93ü\97Í\92l-\91O\89ñ\82Ì\93ü\97Í\92l\82ð\82µ\82È\82¢ nopercent: \83p\81[\83Z\83\93\83g\94ñ\95\\8e¦
-Options[^]: growright,gauge,nopercent,integer
-
-Target[opengate]:`/usr/home/user/bin/input.sh`
-Title[opengate]: Opengate user counter
-
-PageTop[opengate]: <h1>Opengate user counter</h1>
- <p>Opengate12 \82ð\97\98\97p\82µ\82Ä\82¢\82é\90l\90\94\82ð\95\\8e¦\82µ\82Ä\82¢\82Ü\82·\81B</p>
-
-# \92l\82Ì\8fã\8cÀ
-MaxBytes[opengate]: 200
-# \8ae\83O\83\89\83t\82É\82¨\82¢\82Ä\81A\83O\83\89\83t\82Ì\8fã\8cÀ\82ð\92l\82Ì\8dÅ\91å\92l\82Å\82È\82\92l\82Ì\8fã\8cÀ\82É\82·\82é
-#Unscaled[opengate]: ymwd
-
-# \83O\83\89\83t\82ÌY\8e²\82É\82Â\82\83^\83C\83g\83\8b
-YLegend[opengate]: Opengate User
-# \92l\82Ì\92P\88Ê
-ShortLegend[opengate]: \90l
-# \92l\82Ì\83^\83C\83g\83\8b LegendI: 1\94Ô\96Ú LegendO: 2\94Ô\96Ú
-LegendI[opengate]: IPv6 Users
-LegendO[opengate]: Total Users
-</pre></td></tr></table>
-
-<p>WorkDir\82É\8ew\92è\82µ\82½\83f\83B\83\8c\83N\83g\83\8a\82ð\8dì\90¬\82·\82é\81B\93¯\83f\83B\83\8c\83N\83g\83\8a\82É\81AMRTG\82ª\8ae\8eíHTML\83t\83@\83C\83\8b\82Æ\83O\83\89\83t\83B\83b\83N\83C\83\81\81[\83W\82ð\8dì\90¬\82·\82é\81B</p>
-
-<p>Target[opengate]\82É\82Í\81AMRTG\82É\83f\81[\83^\82ð\93n\82·\82½\82ß\82Ì\83v\83\8d\83O\83\89\83\80\82ð\90Ý\92u\82·\82é\81B\88È\89º\82É\8fÚ\8d×\82ð\90à\96¾\82·\82é\81B</p>
-
-
-
-<h5>F.2.1 Opengate
\83T
\81[
\83o
\82Å
\8aÄ
\8e\8b\82·
\82é
\8fê
\8d\87<a name="mrtg21" href="#mrtg21" class="anchor">†</a></h5>
-
-<p>\88È\89º\82ÉOpengate\82ð\93±\93ü\82µ\82½\83Q\81[\83g\83E\83F\83C\82É\82¨\82¢\82Ä\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\8fê\8d\87\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\8bL\82·\81B</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## shwo opengate status for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-LANG=C
-COLUMNS=256
-
-export LANG
-export COLUMNS
-
-### IPv6 prefix
-prefix="2001:2f8:22:801:"
-
-### opengate process name
-process="opengatesrv.cgi"
-
-### tmp file name
-tmp_all="/tmp/og_count_all.tmp"
-tmp_6="/tmp/og_count_6.tmp"
-
-######################################################
-
-ps ax | grep $process > $tmp_all
-COUNT=`wc -l $tmp_all | awk '{print $1}'`
-grep $prefix $tmp_all > $tmp_6
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`
-UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`
-
-rm $tmp_all
-rm $tmp_6
-
-echo "$COUNT6"
-echo "$COUNT"
-echo "$UPTIME"
-echo "Opengate User Counter"
-</pre></td></tr></table>
-
-<p>\82³\82ç\82É\81A\82±\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\92P\93Æ\82Å\8eÀ\8ds\82µ\81A\88È\89º\82Ì\82æ\82¤\82È\83f\81[\83^\82ª\8eæ\93¾\82Å\82«\82Ä\82¢\82é\82±\82Æ\82ð\8am\94F\82·\82é\81B</p>
-
-<table><tr><td><pre>
-5
-48
-10days
-Opengate User Counter
-</pre></td></tr></table>
-
-
-<h5>F.2.2
\8aO
\95\94\83T
\81[
\83o
\82Å
\8aÄ
\8e\8b\82·
\82é
\8fê
\8d\87<a name="mrtg22" href="#mrtg22" class="anchor">†</a></h5>
-
-<p>\88È\89º\82É\8aO\95\94\83T\81[\83o\82É\82¨\82¢\82Ä\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\8fê\8d\87\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## input data for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-# tmp file name
-file="/tmp/opengate.tmp"
-
-# URL of output.sh at opengate
-url="http://opengate.saga-u.ac.jp/cgi-bin/output.sh"
-
-fetch -o $file $url &> /dev/null
-
-more $file
-</pre></td></tr></table>
-
-<p>\82³\82ç\82É\81A\8aÄ\8e\8b\82·\82éOpengate\83T\81[\83o\82É\82¨\82¢\82Ä\81ACGI\82ª\8eÀ\8ds\89Â\94\\82È\83f\83B\83\8c\83N\83g\83\8a\82É\8e\9f\82Ì\82æ\82¤\82È\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð
-\97p\88Ó\82·\82é\81B\82±\82ê\82ð\81A\8fã\8bL\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82Ì"url"\82É\8ew\92è\82·\82é\81B</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## shwo opengate status for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-LANG=C
-COLUMNS=256
-
-export LANG
-export COLUMNS
-
-### IPv6 prefix
-prefix="2001:2f8:22:801:"
-
-### opengate process name
-process="opengatesrv.cgi"
-
-### tmp file name
-tmp_all="/tmp/og_count_all.tmp"
-tmp_6="/tmp/og_count_6.tmp"
-
-######################################################3
-
-ps ax | grep $process > $tmp_all
-COUNT=`wc -l $tmp_all | awk '{print $1}'`
-grep $prefix $tmp_all > $tmp_6
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`
-UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`
-rm $tmp_all
-rm $tmp_6
-
-echo "Content-type: text/plain; charset=iso-8859-1"
-echo
-
-echo "$COUNT6"
-echo "$COUNT"
-echo "$UPTIME"
-echo "Opengate User Counter"
-</pre></td></tr></table>
-
-<p>Opengate\83T\81[\83o\82É\81A\88È\8fã\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\97p\88Ó\82µ\82½\8cã\82É\81A\8aÄ\8e\8b\97p\82Ì\8aO\95\94\83T\81[\83o\82É\82¨\82¢\82Ä\81A
-input.sh\82ð\92P\93Æ\82Å\8eÀ\8ds\82µ\82½\8dÛ\82É\81A\88È\89º\82Ì\82æ\82¤\82È\83f\81[\83^\82ª\8eæ\93¾\82Å\82«\82Ä\82¢\82é\82±\82Æ\82ð\8am\94F\82·\82é\81B</p>
-
-<table><tr><td><pre>
-5
-48
-10days
-Opengate User Counter
-</pre></td></tr></table>
-
-<!-- ************ 3 ************** -->
-<h4>F.3 MRTG
\82Ì
\8bN
\93®
\8am
\94F<a name="mrtg3" href="#mrtg3" class="anchor">†</a></h4>
-
-<p>\88È\8fã\82Ì\90Ý\92è\82ª\8a®\97¹\82µ\82½\8cã\82É\81Amrtg\82ð\8eÀ\8ds\82·\82é\82±\82Æ\82ª\89Â\94\\82©\8am\94F\82·\82é\81B</p>
-
-<table><tr><td><pre>
-# /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg
-</pre></td></tr></table>
-
-<p>\88È\8fã\82ð\8eÀ\8ds\82·\82é\82Æ\81A\82P\89ñ\96Ú\82Æ\82Q\89ñ\96Ú\82Í\97l\81X\82ÈWARNING\82ª\8fo\97Í\82³\82ê\82é\81B</p>
-
-<p>mrtg\82ð\95¡\90\94\89ñ\8eÀ\8ds\82µ\8cã\82É\81AWorkDir\82É\8ew\92è\82µ\82½\83f\83B\83\8c\83N\83g\83\8a\82É\88È\89º\82Ì\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82Ä\82¢\82ê\82Î\90¬\8c÷\82Å\82 \82é\81B</p>
-
-<table><tr><td><pre>
-> ls -l
--rw-r--r-- 1 root wheel 538 12 14 04:40 mrtg-l.png
--rw-r--r-- 1 root wheel 414 12 14 04:40 mrtg-m.png
--rw-r--r-- 1 root wheel 1759 12 14 04:40 mrtg-r.png
--rw-r--r-- 1 root wheel 2941 12 20 15:15 opengate-day.png
--rw-r--r-- 1 root wheel 2146 12 20 14:35 opengate-month.png
--rw-r--r-- 1 root wheel 2867 12 20 14:55 opengate-week.png
--rw-r--r-- 1 root wheel 1897 12 20 05:00 opengate-year.png
--rw-r--r-- 1 root wheel 5961 12 20 15:15 opengate.html
--rw-r--r-- 1 root wheel 48786 12 20 15:15 opengate.log
--rw-r--r-- 1 root wheel 48784 12 20 15:10 opengate.old
-</pre></td></tr></table>
-
-<!-- ************ 4 ************** -->
-<h4>F.4 crontab
\82Ö
\82Ì
\93o
\98^<a name="mrtg4" href="#mrtg4" class="anchor">†</a></h4>
-
-<p>\88È\8fã\82Ì\90Ý\92è\82ª\8a®\97¹\82µ\82½\82Ì\82¿\82É\81Amrtg\82ðcrontab\82É\82æ\82Á\82Ä\92è\8aú\93I\82É\8eÀ\8ds\82·\82é\81B</p>
-
-<p>/etc/crontab\82É\8e\9f\82Ì\8ds\82ð\92Ç\89Á\82·\82é\81B</p>
-
-<table><tr><td><pre>
-*/5 * * * * root /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg
-</pre></td></tr></table>
-
-<p>\8aO\95\94\83T\81[\83o\82É\82¨\82¢\82Ä\81A\95¡\90\94\82ÌOpengate\82ð\8aÇ\97\9d\82·\82é\8fê\8d\87\82Í\81A\90Ý\92è\83t\83@\83C\83\8b\82ð\90V\82½\82É\8dì\90¬\82·\82é\89ß\92ö\82©\82ç\8ds\82È\82¤\81B</p>
-
-
-<div align="right"><a href="#mrtg0">top</a></div>
-
-</body>
-</html>
+++ /dev/null
-<html>
-<head>
-<title>Opegnate Install</title>
-<meta http-equiv="content-type" content="text/html;charset=Shift_JIS">
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">
-</head>
-
-<body bgcolor="#BBEECC">
-
-<h2>Opengate
\83C
\83\93\83X
\83g
\81[
\83\8b\8eè
\8f\87<a name="top" href="#top" class="anchor">†</a></h2>
-
-<!-- Start:\96Ú\8e\9f -->
-<ul>
- <li class="list_alpha"><a href="#opengate0">Opengate \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="#opengate1">\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87</a></li>
- <li class="list_num"><a href="#opengate2">FreeBSD \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <li class="list_num"><a href="#opengate3">Opengate \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- </ul>
- <li class="list_alpha"><a href="#ipfw0">ipfw,ip6fw\82Ì\90Ý\92è</a></li>
- <ul>
- <li class="list_num"><a href="#ipfw1">\83J\81[\83l\83\8b\82Ì\8dÄ\8d\\92z</a></li>
- <li class="list_num"><a href="#ipfw2">ipfw\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#ipfw3">ip6fw\82Ì\90Ý\92è</a></li>
- </ul>
- <li class="list_alpha"><a href="#apache0">Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="#apache1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#apache2">\83C\83\93\83X\83g\81[\83\8b\81i\83\\81[\83X\81j</a></li>
- <li class="list_num"><a href="#apache3">\94é\96§\8c®\81A\8fØ\96¾\8f\91\82Ì\8dì\90¬</a></li>
- <li class="list_num"><a href="#apache4">\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#apache5">HTTP_ERROR 404\82Ö\82Ì\91Î\89\9e</a></li>
- </ul>
- <li class="list_alpha"><a href="#dhcp0">isc-dhcp3\82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="#dhcp1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#dhcp2">DHCP\82Ì\90Ý\92è</a></li>
- </ul>
- <li class="list_alpha"><a href="#bind0">BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="#bind1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#bind2">\94F\8fØ\83L\81[\82Ì\8dì\90¬</a></li>
- <li class="list_num"><a href="#bind3">named.conf\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#bind4">zone\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#bind5">\8bN\93®\8am\94F</a></li>
- </ul>
- <li class="list_alpha"><a href="#mrtg0">MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="#mrtg1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#mrtg2">MRTG\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#mrtg3">MRTG\82Ì\8bN\93®\8am\94F</a></li>
- <li class="list_num"><a href="#mrtg4">crontab\82Ö\82Ì\93o\98^</a></li>
- </ul>
-</ul>
-
-<!-- End:\96Ú\8e\9f -->
-<hr>
-
-<!-- Start:Opengate\82Ì\83C\83\93\83X\83g\81[\83\8b -->
-<h3>A Opegnate
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="opengate0" href="#opengate0" class="anchor">†</a></h3>
-<ul>
- <li class="list_num"><a href="#opengate1">\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87</a></li>
- <li class="list_num"><a href="#opengate2">FreeBSD \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <li class="list_num"><a href="#opengate3">Opengate \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>A.1
\83C
\83\93\83X
\83g
\81[
\83\8b\8eè
\8f\87<a name="opengate1" href="#opengate1" class="anchor">†</a></h4>
-
-<p>Opengate\82Ì\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87\82ð\88È\89º\82É\8e¦\82·\81B\82½\82¾\82µ\81A\81¦\82Í\95K\90{\8d\80\96Ú\82ð\8e¦\82µ\81A\82»\82ê\88È\8aO\82Ì\8eè\8f\87\82Í\95K\97v\82É\89\9e\82¶\82Ä\8ds\82È\82¤\81B</p>
-
-<ul>
- <li class="list_num">\83Q\81[\83g\83E\83F\83C\83}\83V\83\93\82Ì\8f\80\94õ \81¦</li>
- <li class="list_num">FreeBSD(OS)\82Ì\83C\83\93\83X\83g\81[\83\8b \81¦</li>
- <li class="list_num">\83J\81[\83l\83\8b\82Ì\8dÄ\8d\\92z \81¦</li>
- <li class="list_num">ipfw,ip6fw\82Ì\90Ý\92è \81¦</li>
- <li class="list_num">NAT\82Ì\90Ý\92è</li>
- <li class="list_num">Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b\81A\90Ý\92è \81¦</li>
- <li class="list_num">DHCP\82Ì\83C\83\93\83X\83g\81[\83\8b\81A\90Ý\92è</li>
- <li class="list_num">BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b\81A\90Ý\92è</li>
-</ul>
-
-<div align="right"><a href="#opengate0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>A.2 FreeBSD
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="opengate2" href="#opengate2" class="anchor">†</a></h4>
-
-<p>\83Q\81[\83g\83E\83F\83C\83}\83V\83\93\82Æ\82µ\82Ä\81ANIC\82ð\82Q\96\87\88È\8fã\8e\9d\82¿\81AFreeBSD\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\82±\82Æ\82ª\89Â\94\\82È\82à\82Ì\82ð\97p\88Ó\82·\82é\81B</p>
-<p>FreeBSD 4.x,5.x,6.x\82Ì\89½\82ê\82©\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\81B\8cã\82É\83J\81[\83l\83\8b\82ð\8dÄ\8d\\92z\82·\82é\95K\97v\82ª\82 \82é\82Ì\82Å\81A\83C\83\93\83X\83g\81[\83\8b\82·\82é
-Distributions\82ð\91I\91ð\82·\82é\8dÛ\82ÉDeveloper(Full sorces,binaries and doc)\82ð\91I\91ð\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>
-<p>FreeBSD\82ð\83C\83\93\83X\83g\81[\83\8b\82µ\82½\8cã\82É\81A\83Q\81[\83g\83E\83F\83C\82Æ\82µ\82Ä\82Ì\8b@\94\\82ð\97L\8cø\82É\82·\82é\82½\82ß\82É\81A/etc/rc.conf\82É\8e\9f\82Ì\90Ý\92è\82ð\8bL\8fq\82·\82é
-\81B\82à\82µ\82\82Í\81AFreeBSD\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8dÛ\82É\81A\83Q\81[\83g\83E\83F\83C\82Æ\82µ\82Ä\82Ì\8b@\94\\82ð\97L\8cø\82É\82·\82é\82©\94Û\82©\82ð\96â\82í\82ê\82é\82Ì\82Å\81A\82±\82±\82Å
-\83Q\81[\83g\83E\83F\83C\82Ì\8b@\94\\82ð\97L\8cø\82É\82µ\82Ä\82à\8d\\82í\82È\82¢\81B</p>
-
-<table>
-<td><code>gateway_enable="YES"</code></td>
-</table>
-
-<div align="right"><a href="#opengate0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>A.3 Opengate
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="opengate3" href="#opengate3" class="anchor">†</a></h4>
-
-<h5>A.3.1 Opengate
\83p
\83b
\83P
\81[
\83W<a name="opengate4" href="#opengate4" class="anchor">†</a></h5>
-
-<p>Opengate\82Ì\8dÅ\90V\82Ì\83p\83b\83P\81[\83W\82ð\93K\93\96\82È\83f\83B\83\8c\83N\83g\83\8a\82É\93W\8aJ\82·\82é\81B\83p\83b\83P\81[\83W\82É\82Í\88È\89º\82Ì\83f\83B\83\8c\83N\83g\83\8a\82ª\8aÜ\82Ü\82ê\82é\81B</p>
-
-<table>
-<tr><td>
-<pre>
-doc\81F\8ae\8eí\95¶\8f\91
-conf\81F\90Ý\92è\83t\83@\83C\83\8b\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\83X\83N\83\8a\83v\83g
-javahtml\81F\83N\83\89\83C\83A\83\93\83gJava Applet\81AHTML\83t\83@\83C\83\8b
-opengatesrv\81F\83T\81[\83oCGI\83v\83\8d\83O\83\89\83\80
-</pre>
-</td></tr>
-</table>
-
-<h5>A.3.2
\83R
\83\93\83p
\83C
\83\8b<a name="opengate5" href="#opengate5" class="anchor">†</a></h5>
-
-<p>Opengate\83p\83b\83P\81[\83W\82É\8aÜ\82Ü\82ê\82éopengatesrv\83f\83B\83\8c\83N\83g\83\8a\82ÉMakefile\82ª\97p\88Ó\82³\82ê\82Ä\82¢\82é\81B
-\93¯\83f\83B\83\8c\83N\83g\83\8a\82É\82¨\82¢\82Ä\81AOpengate\82Ì\83R\83\93\83p\83C\83\8b\82Æ\83C\83\93\83X\83g\81[\83\8b\8dì\8bÆ\82ð\8ds\82È\82¤\82ª\81A\83R\83\93\83p\83C\83\8b
-\82ð\8ds\82È\82¤\91O\82É\81A\8ae\8eí\90Ý\92è\82ð\8ds\82È\82¤\95K\97v\82 \82ª\82é\81B</p>
-<p>Makefle\82É\82¨\82¢\82Ä\81A\88È\89º\82Ì\8d\80\96Ú\82ð\90Ý\92è\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>
-
-<ul>
- <li class="list_none">HOSTNAME</li>
- <ul>
- <li>Opengate\82ÌFQDN\82Å\81AIPv4/6\97¼\95û\82Ì\83A\83h\83\8c\83X\82ª\93o\98^\82³\82ê\82Ä\82¢\82é\82à\82Ì\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">HOSTNAME4</li>
- <ul>
- <li>Opengate\82ÌFQDN\82Å\81AIPv4\83A\83h\83\8c\83X\82Ì\82Ý\82ª\93o\98^\82³\82ê\82Ä\82¢\82é\82à\82Ì\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">OPENGATEDIR</li>
- <ul>
- <li>Opengate\8aÖ\98A\83t\83@\83C\83\8b\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8fê\8f\8a\82ð\81AApache2\82ÌDocumnetRoot\82©\82ç\82Ì\91\8a\91Î\83p\83X\82Å\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">HTMLTOP1,HTMLTOP2</li>
- <ul>
- <li>Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b\8fó\8bµ\82É\82æ\82Á\82Ä\81AHTMLTOP1\82ÉHTTP\97p\82ÌDocumentRoot\82ð\90Ý\92è\82·\82é\81B</li>
- <li>HTMLTOP1\82Æ\93¯\97l\82É\81AHTMLTOP2\82ÉHTTPS\97p\82ÌDocumentRoot\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">CGIPATH,CGIPROG,CGIURL</li>
- <ul>
- <li>CGIPATH\82É\81A\83T\81[\83oCGI\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8fê\8f\8a\82Ì\90â\91Î\83p\83X\82ð\90Ý\92è\82·\82é\81B\82½\82¾\82µ\81AApache2\82Ì\83C\83\93\83X\83g\81[\83\8b\8fó\8bµ\82É\82æ\82Á\82Ä\81A
- CGI\82ª\8eÀ\8ds\89Â\94\\82È\8fê\8f\8a\82Å\82 \82é\82±\82Æ\81B</li>
- <li>CGIPROG\82É\81A\83T\81[\83oCGI\82Ì\96¼\91O\82ð\90Ý\92è\82·\82é\81B</li>
- <li>CGIURL\82É\81A\83T\81[\83oCGI\82ð\8eÀ\8ds\82·\82é\82½\82ß\82ÌURL\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">AUTHCGIPROG,AUTHCGIURL</li>
- <ul>
- <li>AUTHCGIPROG\82É\81A\94F\8fØ\89æ\96Ê\92ñ\8b\9fCGI\82Ì\96¼\91O\82ð\90Ý\92è\82·\82é\81B</li>
- <li>AUTHCGIURL\82É\81A\83T\81[\83oCGI\82Æ\93¯\97l\82É\81A\94F\8fØ\89æ\96Ê\92ñ\8b\9fCGI\82ð\8eÀ\8ds\82·\82é\82½\82ß\82ÌURL\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">CONFIGFILE</li>
- <ul>
- <li>Opengate\82Ì\90Ý\92è\83t\83@\83C\83\8b\96¼\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">USEFWSCRIPT,FWSCRIPT,FWSCRIPTFILE</li>
- <ul>
- <li>USEFWSCRIPT\82É\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\90§\8cä\83X\83N\83\8a\83v\83g\82ð\97\98\97p\82·\82é\82©\94Û\82©\82ð\90Ý\92è\82·\82é\81B\81i\82P\81F\97\98\97p\82·\82é\81B\82O\81F\97\98\97p\82µ\82È\82¢\81B\81j</li>
- <li>FWSCRIPT\82É\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\90§\8cä\83X\83N\83\8a\83v\83g\82Ì\83t\83@\83C\83\8b\96¼\82ð\90Ý\92è\82·\82é\81B</li>
- <li>FWSCRIPTFILE\82É\81AFWSCRIPT\82É\90Ý\92è\82µ\82½\83t\83@\83C\83\8b\82Ö\82Ì\90â\91Î\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">LOCKFILE</li>
- <ul>
- <li>\94r\91¼\90§\8cä\97p\83\8d\83b\83N\83t\83@\83C\83\8b\96¼\81A\90â\91Î\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">HTMLDOCS,DENYDOC,DENYDOCSSL,ACCEPTDOC,ACCEPTDOC2</li>
- <ul>
- <li>HTMLDOCS\82É\81A\83T\81[\83oCGI\82Å\97p\82¢\82éHTML\83t\83@\83C\83\8b\96¼\91S\82Ä\82ð\90Ý\92è\82·\82é\81B</li>
- <li>DENYDOC\82É\81A\94F\8fØ\8e¸\94s\8e\9e\82É\95\\8e¦\82·\82éHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>DENYDOCSSL\82É\81AHTTPS\82ð\97p\82¢\82Ä\94F\8fØ\82É\8e¸\94s\82µ\82½\8fê\8d\87\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>ACCEPTDOC\82É\81A\94F\8fØ\90¬\8c÷\8e\9e\82É\95\\8e¦\82·\82éHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>ACCEPTDOC2\82É\81A\94F\8fØ\90¬\8c÷\8e\9e\82É\83|\83b\83v\83A\83b\83v\83E\83B\83\93\83h\83E\82Å\95\\8e¦\82³\82ê\82éHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B
- \81i\83|\83b\83v\83A\83b\83v\83E\83B\83\93\83h\83E\82ÌURL\82Í\95Ï\8dX\89Â\94\\81BINFOURL\8eQ\8fÆ\81j</li>
- </ul>
- <li class="list_none">INFOMATION</li>
- <ul>
- <li>ACCEPTDOC2\82Ì\91Ö\82í\82è\82É\81A\95ÊURL\82Ì\83y\81[\83W\82ð\95\\8e¦\82·\82é\82©\94Û\82©\82ð\90Ý\92è\82·\82é\81B\81i\82P\81F\97\98\97p\82·\82é\81B\82O\81F\97\98\97p\82µ\82È\82¢\81B\81j</li>
- </ul>
- <li class="list_none">INFOMATIONURL</li>
- <ul>
- <li>ACCEPTDOC2\82Ì\91Ö\82í\82è\82É\95\\8e¦\82³\82¹\82é\83y\81[\83W\82ÌURL\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">AUTHHTMLJA,AUTHHTMLEN,AUTHHTMLJASSL,AUTHHTMLENSSL</li>
- <ul>
- <li>AUTHHTMLJA\82É\81A\93ú\96{\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>AUTHHTMLEN\82É\81A\89p\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>AUTHHTMLJASSL\82É\81AHTTPS\82ð\97p\82¢\82½\93ú\96{\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>AUTHHTMLENSSL\82É\81AHTTPS\82ð\97p\82¢\82½\89p\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>\93ú\96{\8cê\81A\89p\8cê\88È\8aO\82É\94F\8fØ\8c¾\8cê\82ð\92Ç\89Á\82·\82é\8fê\8d\87\82Í\81Ajavahtml\83f\83B\83\8c\83N\83g\83\8a\93à\82Ì\8c¾\8cê\83f\83B\83\8c\83N\83g\83\8a\82Ì\92Ç\89Á\81AHTMLDOCS,DENYDOC,
- DENYDOCSSL,ACCESPTDOC,ACCEPTDOC2\82ð\95Ï\8dX\82µ\81A\82³\82ç\82Éopengateauth.h\93à\82Ì\90Ý\92è\82É\82 \82í\82¹\82ÄAUTHTHMLXX\82ð\92Ç\89Á\82·\82é\82±\82Æ\81B</li>
- </ul>
- <li class="list_none">ARPPATH</li>
- <ul>
- <li>ARP\83R\83}\83\93\83h\82Ì\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">NDPPAHT</li>
- <ul>
- <li>NDP\83R\83}\83\93\83h\82Ì\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">IPFW,IP6FW</li>
- <ul>
- <li>IPFW,IP6FW\83R\83}\83\93\83h\82Ì\82»\82ê\82¼\82ê\82Ì\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">DEBUG</li>
- <ul>
- <li>\83f\83o\83b\83O\82ð\8ds\82È\82¤\82©\94Û\82©\82ð\90Ý\92è\82·\82é\81B\81i\82P\81F\83f\83o\83b\83O\83\8d\83O\82ð\8fo\97Í\82·\82é\81B\82O\81F\94F\8fØ\83\8d\83O\82Ì\82Ý\8fo\97Í\82·\82é\81B\81j</li>
- </ul>
- <li class="list_none">DURATIONDEFAULT</li>
- <ul>
- <li>Java Applet\82ð\91\97\90M\82µ\82Ä\82©\82ç\90Ú\91±\82µ\82Ä\82\82é\82Ü\82Å\82Ì\91Ò\82¿\8e\9e\8aÔ\81i\95b\81j\82ð\90Ý\92è\82·\82é\81B\90Ý\92è\92l\82Ì\8e\9e\8aÔ\82ª\8co\89ß\82·\82é\82Ü\82Å\82É\81A
- Java Applet\82©\82ç\82Ì\90Ú\91±\82ª\96³\82¯\82ê\82Î\92Ê\90M\98H\82ð\95Â\8d½\82·\82é\81B\82±\82Ì\91Ò\82¿\8e\9e\8aÔ\82Í\94F\8fØ\83y\81[\83W\82æ\82è\81A\97\98\97p\8eÒ\82ª\95Ï\8dX\82·\82é\82±\82Æ\82ª\89Â\94\\81B
- \82Ü\82½\81A\97\98\97p\8eÒ\82Ì\95Ï\8dX\82ð\8b\96\97e\82µ\82È\82¢\8fê\8d\87\82Í\81A\94F\8fØ\83y\81[\83W\82©\82ç\93ü\97Í\83t\83H\81[\83\80\82ð\8dí\8f\9c\82·\82é\82±\82Æ\81B</li>
- </ul>
- <li class="list_none">DURATIONMAX</li>
- <ul>
- <li>Java Applet\82©\82ç\82Ì\90Ú\91±\82ª\8am\94F\82Å\82«\82È\82¢\8fê\8d\87\82É\81A\97\98\97p\8eÒ\82ª\94F\8fØ\83y\81[\83W\82Å\8ew\92è\82µ\82½\97\98\97p\8cp\91±\8e\9e\8aÔ\81i\95b\81j\82Ì\8dÅ\91å\92l
- \82ð\90Ý\92è\82·\82é\81B\97\98\97p\8eÒ\82Ì\95Ï\8dX\82ð\8b\96\97e\82µ\82È\82¢\8fê\8d\87\82Í\81ADURATIONDEFAULT\82Æ\93¯\82¶\92l\82É\82·\82é\95K\97v\82ª\82 \82é\81B</li>
- </ul>
- <li class="list_none">ACTIVECHECKINTERVAL</li>
- <ul>
- <li> \92[\96\96\82Ì\97\98\97p\8fó\8bµ\82ð\8am\94F\82·\82é\8aÔ\8au(\95b)\82ð\90Ý\92è\82·\82é\81BJava Applet\82©\82ç\82Ì\90Ú\91±\82ª\96³\82¢\8fê\8d\87\82Í\81A
- \92Ê\89ß\83p\83P\83b\83g\90\94\82ÆMAC\83A\83h\83\8c\83X\82Ì\8am\94F\82ð\8ds\82È\82¤\81BJava Applet\82©\82ç\82Ì\92Ê\90M\82ª\82 \82é\8fê\8d\87\82Í\81AHELLO\83\81\83b\83Z\81[\83W\82Ì\8cð\8a·\82Æ
- \92Ê\89ß\83p\83P\83b\83g\90\94\82Ì\8am\94F\82ð\8ds\82È\82¤\81B</li>
- </ul>
- <li class="list_none">COMMWAITTIMEOUT</li>
- <ul>
- <li>HELLO\83\81\83b\83Z\81[\83W\95Ô\93\9a\82Ü\82Å\82Ì\8dÅ\91å\91Ò\82¿\8e\9e\8aÔ\81i\95b\81j\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">NOREPLYMAX</li>
- <ul>
- <li>HELLO\83\81\83b\83Z\81[\83W\82É\89\9e\93\9a\82µ\82È\82©\82Á\82½\8fê\8d\87\82ð\8b\96\97e\82·\82é\89ñ\90\94\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">NOPAKETINTERVAL</li>
- <ul>
- <li>\92Ê\89ß\83p\83P\83b\83g\82ª\8am\94F\82Å\82«\82È\82©\82Á\82½\8fê\8d\87\82É\81A\92Ê\90M\98H\82ð\95Â\8d½\82·\82é\82Ü\82Å\82Ì\8e\9e\8aÔ\81B\8eÀ\8dÛ\82É\82Í\81A\92Ê\89ß\83p\83P\83b\83g\82Ì\8am\94F\82Í
- ACTIVECHECKINTERVAL\82Ì\90Ý\92è\8e\9e\8aÔ\96\88\82É\8ds\82È\82í\82ê\82é\82Ì\82Å\81AACTIVECHECKINTERVAL\82Ì\90®\90\94\94{\82Ì\8e\9e\8aÔ\82É\90Ø\82è\8fã\82°\82ç\82ê\82é\81B</li>
- </ul>
- <li class="list_none">LOCKTIMEOUT</li>
- <ul>
- <li>ipfw,ip6fw\82Ì\94r\91¼\90§\8cä\82Ì\8dÅ\91å\91Ò\82¿\8e\9e\8aÔ\81i\95b\81j\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">IPFWMIN</li>
- <ul>
- <li>Opengate\82Å\97\98\97p\82·\82éipfw\82à\82µ\82\82Íip6fw\82Ì\83\8b\81[\83\8b\94Ô\8d\86\94Í\88Í\82Ì\8dÅ\8f¬\92l\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">IPFWMAX</li>
- <ul>
- <li>Opengate\82Å\97\98\97p\82·\82éipfw\82à\82µ\82\82Íip6fw\82Ì\83\8b\81[\83\8b\94Ô\8d\86\94Í\88Í\82Ì\8dÅ\91å\92l\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">IPFWINTERVAL</li>
- <ul>
- <li>ipfw\82à\82µ\82\82Íip6fw\82Ì\83\8b\81[\83\8b\94Ô\8d\86\94Í\88Í\82É\82¨\82¢\82Ä\81A\97\98\97p\82·\82é\94Ô\8d\86\82Ì\94Í\88Í\82ð\90Ý\92è\82·\82é\81B
- \83N\83\89\83C\83A\83\93\83g\82Ì\91ä\90\94\90§\8cÀ\82É\97p\82¢\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B</li>
- </ul>
- <li class="list_none">PORTMIN</li>
- <ul>
- <li>Java Applet\82Æ\82Ì\92Ê\90M\82É\97\98\97p\82·\82é\83|\81[\83g\82Ì\97\98\97p\94Í\88Í\82Ì\8dÅ\8f¬\92l\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">PORTMAX</li>
- <ul>
- <li>Java Applet\82Æ\82Ì\92Ê\90M\82É\97\98\97p\82·\82é\83|\81[\83g\82Ì\97\98\97p\94Í\88Í\82Ì\8dÅ\91å\92l\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">FACILITY</li>
- <ul>
- <li>SYSLOG\82É\83\8d\83O\82ð\8fo\97Í\82·\82é\8dÛ\82Ì\83t\83@\83V\83\8a\83e\83B\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
-</ul>
-
-<p>\88È\8fã\82Ì\90Ý\92è\82ð\8fI\82¦\82Ä\82©\82ç\81A\83R\83\93\83p\83C\83\8b\82Æ\83C\83\93\83X\83g\81[\83\8b\82ð\8ds\82È\82¤\81B</p>
-
-<table><tr><td><pre>
-#make
-cc -DCONFIGFILE=\"/etc/opengatesrv.conf\"
--DOPENGATEDIR=\"/opengate\" -DDENYDOC=\"deny.html\"
--DDENYDOC=\"deny.html\" -DDENYDOCSSL=\"deny-ssl.html\"
------------------
------------------
------------------
-# make install
-</pre></td></tr></table>
-
-<h5>A.3.3
\94F
\8fØ
\83T
\81[
\83o
\82Ì
\90Ý
\92è<a name="opengate6" href="#opengate6" class="anchor">†</a></h5>
-
-<p>
\94F
\8fØ
\83T
\81[
\83o
\82Ì
\90Ý
\92è
\82É
\82Â
\82¢
\82Ä
\82Í
\81A<a href="#opengate5">A.3.2</a>
\82Å
\82 \82°
\82½
\81ACONFIGFILE
\82É
\82æ
\82Á
\82Ä
\90Ý
\92è
\82·
\82é
\82±
\82Æ
\82ª
-\89Â\94\\82Å\82 \82é\81B</p>
-<p>\90Ý\92è\82Ì\8fÚ\8d×\82É\82Â\82¢\82Ä\82Í\81A\90Ý\92è\83t\83@\83C\83\8b\81iopengatesrv.conf\81j\93à\82É\8bL\8fq\82³\82ê\82Ä\82¢\82é\81B</p>
-
-<div align="right"><a href="#opengate0">back</a> <a href="#top">top</a></div>
-
-<hr>
-<!-- Start:ipfw,ip6fw\82Ì\90Ý\92è -->
-<h3>B ipfw,ip6fw
\82Ì
\90Ý
\92è<a name="ipfw0" href="#ipfw0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#ipfw1">\83J\81[\83l\83\8b\82Ì\8dÄ\8d\\92z</a></li>
- <li class="list_num"><a href="#ipfw2">ipfw\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#ipfw3">ip6fw\82Ì\90Ý\92è</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>B.1
\83J
\81[
\83l
\83\8b\82Ì
\8dÄ
\8d\
\92z<a name="ipfw1" href="#ipfw1" class="anchor">†</a></h4>
-
-<p>ipfw\82à\82µ\82\82Íip6fw\82ð\97\98\97p\82·\82é\82½\82ß\82É\82Í\81AFreeBSD\82Ì\83J\81[\83l\83\8b\82ð\8dÄ\8d\\92z\82·\82é\95K\97v\82ª\82 \82é\81BFreeBSD\83C\83\93\83X\83g\81[\83\8b\8e\9e\82É
-\83J\81[\83l\83\8b\93\99\82Ì\91S\82Ä\82Ì\83\\81[\83X\82ð\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82¢\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>
-<p>\88È\89º\82Ì\83f\83B\83\8c\83N\83g\83\8a\82É\82¨\82¢\82Ä\81AOpengate\97p\82Ì\83J\81[\83l\83\8b\83I\83v\83V\83\87\83\93\82ð\8dì\90¬\82·\82é\81B</p>
-
-<table><tr><td><pre>
-# cd /usr/src/sys/i386/conf
-# cp GENERIC MYKERNEL
-</pre></td></tr></table>
-
-<p>\83R\83s\81[\82µ\82½\83J\81[\83l\83\8b\83I\83v\83V\83\87\83\93\82É\81A\8e\9f\82Ì\83I\83v\83V\83\87\83\93\82ð\92Ç\89Á\82·\82é\81B</p>
-
-<table><tr><td><pre>
-options IPDIVERT
-
-options IPFIREWALL
-options IPFIREWALL_FORWARD
-options IPFIREWALL_VERBOSE
-options IPFIREWALL_VERBOSE_LIMIT=100
-
-options IPV6FIREWALL
-options IPV6FIREWALL_VERBOSE
-options IPV6FIREWALL_VERBOSE_LIMIT=100
-
-options IPSEC
-options IPSEC_ESP
-options TCP_DROP_SYSFIN
-</pre></td></tr></table>
-
-<p>IPDIVERT\82É\82Â\82¢\82Ä\82Í\81AIPv4\82ÌNAT\82ð\97p\82¢\82é\8fê\8d\87\82É\95K\97v\82Å\82 \82é\81B\82Ü\82½\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì
-\83\8d\83O\82ð\95K\97v\82Æ\82µ\82È\82¢\8fê\8d\87\82Í\81AVERBOSE\82Ì\8d\80\96Ú\82Í\95s\97v\82Å\82 \82é\81B\82³\82ç\82É\81AIPSEC\82ð\95K\97v\82Æ\82µ\82È\82¢\8fê\8d\87\82Í\81A
-IPSEC\82Ì\8d\80\96Ú\82Í\95s\97v\82Å\82 \82é\81B</p>
-<p>\82±\82ê\82ç\82Ì\83I\83v\83V\83\87\83\93\82ð\92Ç\89Á\82µ\82½\8cã\82É\81A\83J\81[\83l\83\8b\82Ì\83R\83\93\83p\83C\83\8b\82Æ\83C\83\93\83X\83g\81[\83\8b\82ð\8ds\82È\82¤\81B</p>
-
-<table><tr><td><pre>
-# config MYKERNEL
-# cd ../compile/MYKERNEL
-# make depend
-# make
-# make install
-</pre></td></tr></table>
-
-<p>FreeBSD 6.x\82Å\82Í\81A"make depend"\82ð\8eÀ\8ds\82·\82é\91O\82É\81A"make clean"\82ª\97v\8b\81\82³\82ê\82é\8fê\8d\87\82à\82 \82é\82Ì\82Å\81A\92\8d\88Ó\82·\82é\81B</p>
-
-<p>\8dÄ\8d\\92z\82µ\82½\83J\81[\83l\83\8b\82É\82æ\82Á\82Ä\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\97L\8cø\82É\82·\82é\82½\82ß\82É/etc/rc.conf\82É\88È\89º\82Ì\83I\83v\83V\83\87\83\93\82ð
-\8bL\8fq\82·\82é\81B</p>
-
-<table><tr><td><pre>
-firewall_enable="YES"
-firewall_script="/etc/rc.firewall"
-
-ipv6_firewall_enable="YES"
-ipv6_firewall_script="/etc/rc.firewall6"
-
-natd_enable="YES"
-natd_interface="em0"
-</pre></td></tr></table>
-
-<p>IPv4/6\82»\82ê\82¼\82ê\82Ì\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\97L\8cø\82É\82µ\81A\82»\82ê\82¼\82ê\82Ì\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì\83\8b\81[\83\8b\82ð\8bL\8fq\82µ\82½
-\83X\83N\83\8a\83v\83g\82ð\8ew\92è\82·\82é\81B\82Ü\82½\81ANAT\82ª\95K\97v\82Å\82 \82é\8fê\8d\87\82Í\81Anatd\82ð\97L\8cø\82É\82µ\81A\83A\83h\83\8c\83X\95Ï\8a·\82ð\8ds\82¤
-\83C\83\93\83^\83t\83F\81[\83X\82ÌID\82ð\8ew\92è\82·\82é\81B</p>
-
-<div align="right"><a href="#ipfw0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>B.2 ipfw
\82Ì
\90Ý
\92è<a name="ipfw2" href="#ipfw2" class="anchor">†</a></h4>
-
-<p>Opengate\82Ì\93®\8dì\82Ì\82½\82ß\82É\93K\90Ø\82É\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì\83\8b\81[\83\8b\82ð\8bL\8fq\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B
-\88È\89º\82É\8bL\8fq\82·\82×\82«\83\8b\81[\83\8b\82Ì\97á\81i/etc/rc.firewall\81j\82ð\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-### set these to your outside interface network and netmask and ip
-oif="em0"
-onet="192.168.0.0"
-omask="255.255.255.0"
-oip="192.168.0.34"
-
-### set these to your inside interface network and netmask and ip
-iif="bge0"
-inet="192.168.55.0"
-imask="255.255.255.0"
-iip="192.168.55.1"
-
-fwcmd="/sbin/ipfw"
-
-### divert packet to NATD
-$fwcmd add 1 divert natd ip from any to any via ${oif}
-
-### Stop spoofing
-$fwcmd add deny all from ${inet}:${imask} to any in via ${oif}
-$fwcmd add deny all from ${onet}:${omask} to any in via ${iif}
-
-### Stop http from softeather
-$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 80
-$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 443
-
-### Allow from / to myself
-$fwcmd add pass all from ${iip} to any via ${iif}
-$fwcmd add pass all from ${oip} to any via ${oif}
-$fwcmd add pass all from any to ${iip} via ${iif}
-$fwcmd add pass all from any to ${oip} via ${oif}
-
-### Allow DNS queries out in the world
-### (if DNS is on localhost, delete passDNS)
-$fwcmd add pass udp from any 53 to any
-$fwcmd add pass udp from any to any 53
-$fwcmd add pass tcp from any to any 53
-$fwcmd add pass tcp from any 53 to any
-
-### Forwarding http connection from unauth client
-$fwcmd add 60000 fwd localhost tcp from ${inet}:${imask} to any 80
-$fwcmd add 60010 fwd localhost tcp from ${inet}:${imask} to any 443
-
-### Allow TCP through if setup succeeded
-$fwcmd add 60100 pass tcp from any to any established
-</pre></td></tr></table>
-
-<p>Opengate\82ð\93®\8dì\82³\82¹\82é\8dÛ\81A\83\8b\81[\83\8b\94Ô\8d\8660000,60010,60100\82ª\8fd\97v\82Æ\82È\82é\81B\94F\8fØ\83y\81[\83W\82ð
-\95\\8e¦\82³\82¹\82é\82½\82ß\82É\81AHTTP,HTTPS\83\8a\83N\83G\83X\83g\82ÍOpengate\82ÌWeb\83T\81[\83o\82É\93]\91\97\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B
-\82Ü\82½\81A\8aù\82É\8am\97§\82³\82ê\82Ä\82¢\82éTCP\90Ú\91±\82É\8aÖ\82µ\82Ä\82Í\81AOpengate\82É\82æ\82é\92Ê\90M\98H\95Â\8d½\8cã\82à\97\98\97p\89Â\94\\82Æ\82·\82é\82½\82ß\81A
-60100\82Ì\83\8b\81[\83\8b\82ð\92Ç\89Á\82·\82é\81B</p>
-
-<p>\88È\8fã\81A\8e¦\82µ\82½\97á\82ÍOpengate\82ð\93®\8dì\82³\82¹\82é\82½\82ß\82Ì\90Ý\92è\97á\82Å\82 \82é\81B\8eÀ\8dÛ\82ÉOpengate\82ð\93±\93ü\82·\82é\8dÛ\82É\82Í\81A
-ipfw\82Ì\93®\8dì\82ð\8fn\92m\82µ\82½\8fã\81A\8ae\8eí\83l\83b\83g\83\8f\81[\83N\82É\93K\82µ\82½\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\90Ý\92u\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>
-
-<div align="right"><a href="#ipfw0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>B.3 ip6fw
\82Ì
\90Ý
\92è<a name="ipfw3" href="#ipfw3" class="anchor">†</a></h4>
-
-<p>Opengate\82Ì\93®\8dì\82Ì\82½\82ß\82É\93K\90Ø\82É\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì\83\8b\81[\83\8b\82ð\8bL\8fq\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B
-\88È\89º\82É\8bL\8fq\82·\82×\82«\83\8b\81[\83\8b\82Ì\97á\81i/etc/rc.firewall6\81j\82ð\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-### set these to your outside interface network and prefixlen and ip
-oif="em0"
-onet="2001:e38:3661:1a0::"
-oprefixlen="64"
-oip="2001:e38:3661:1a0::34"
-
-### set these to your inside interface network and prefixlen and ip
-iif="bge0"
-inet="2001:e38:3661:1a5::"
-iprefixlen="64"
-iip="2001:e38:3661:1a5::1"
-
-### path to command "ip6fw"
-fw6cmd="/sbin/ip6fw"
-
-${fw6cmd} add pass all from ${iip} to any
-${fw6cmd} add pass all from any to ${iip}
-${fw6cmd} add pass all from ${oip} to any
-${fw6cmd} add pass all from any to ${oip}
-
-### Allow RA RS NS NA Redirect...
-${fw6cmd} add pass ipv6-icmp from any to any
-
-# Allow IP fragments to pass through
-${fw6cmd} add pass all from any to any frag
-
-# Allow RIPng
-${fw6cmd} add pass udp from fe80::/10 521 to ff02::9 521
-${fw6cmd} add pass udp from fe80::/10 521 to fe80::/10 521
-
-### Allow TCP through if setup succeeded
-${fw6cmd} add 60100 pass tcp from any to any established
-
-# TCP reset notice message
-${fw6cmd} add 60200 reset tcp from any to any 80
-${fw6cmd} add 60300 reset tcp from any to any 443
-</pre></td></tr></table>
-
-<p>ip6fw\82Í\81Aipfw\82Æ\82Í\88Ù\82È\82è\93]\91\97\82ð\8ds\82¤\82±\82Æ\82ª\82Å\82«\82È\82¢\81B\82»\82±\82Å\81AOpengate\82Å\82Í
-IPv6\82ÌHTTP\83\8a\83N\83G\83X\83g\82ª\83^\83C\83\80\83A\83E\83g\82µ\81AIPv4\82ÌHTTP\83\8a\83N\83G\83X\83g\82ð\93]\91\97\82µ\81A\94F\8fØ
-\82ð\8ds\82¤\8ed\91g\82Ý\82ð\82Æ\82Á\82Ä\82¢\82é\81B\82½\82¾\82µ\81AFreeBSD 5.2\88È\8d~\82Å\82Í\81Aip6fw\82ÅTCP reset\82ª
-\8eÀ\91\95\82³\82ê\82Ä\82¨\82è\81AIPv6 TCP\83p\83P\83b\83g\82É\91Î\82µ\82Ä\93\9e\92B\95s\94\\83\81\83b\83Z\81[\83W\82ð\95Ô\82·\82±\82Æ\82ª\89Â\94\\82Å
-\82 \82é\81B\83\8b\81[\83\8b\94Ô\8d\8660200,60300\82Ì\82æ\82¤\82É\81ATCP reset\82ð\97\98\97p\82·\82é\82±\82Æ\82É\82æ\82Á\82Ä\81AIPv6 HTTP
-\83\8a\83N\83G\83X\83g\82ª\83^\83C\83\80\83A\83E\83g\82·\82é\82Ü\82Å\82Ì\8e\9e\8aÔ\82ð\91Ò\82Â\95K\97v\82ª\82È\82\82È\82é\81B</p>
-
-<p>\82Ü\82½\81AIPv6\82Å\82ÍDHCP\82Ì\91Ö\82í\82è\82ÉRA\82É\82æ\82Á\82ÄIPv6\83A\83h\83\8c\83X\82ð\8e©\93®\90¶\90¬\82µ\81A\8co\98H\8fî\95ñ
-\92Ê\92m\83f\81[\83\82\83\93\82È\82Ç\81AICMP\82â\82»\82Ì\91¼\82Ì\83v\83\8d\83g\83R\83\8b\82Ì\88µ\82¢\82É\8bC\82ð\82Â\82¯\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B
-ipfw\82Æ\93¯\97l\82É\81Aip6fw\82É\82Â\82¢\82Ä\82à\93®\8dì\82ð\8fn\92m\82µ\82½\8fã\82Å\81A\8ae\8eí\83l\83b\83g\83\8f\81[\83N\82É\93K\82µ\82½
-\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\90Ý\92u\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>
-
-<div align="right"><a href="#ipfw0">back</a> <a href="#top">top</a></div>
-
-<hr>
-<!-- Start:Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b -->
-<h3>C Apache2
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="apache0" href="#apache0" class="anchor">†</a></h3>
-<ul>
- <li class="list_num"><a href="#apache1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#apache2">\83C\83\93\83X\83g\81[\83\8b\81i\83\\81[\83X\81j</a></li>
- <li class="list_num"><a href="#apache3">\94é\96§\8c®\81A\8fØ\96¾\8f\91\82Ì\8dì\90¬</a></li>
- <li class="list_num"><a href="#apache4">\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#apache5">HTTP_ERROR 404\82Ö\82Ì\91Î\89\9e</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>C.1
\83C
\83\93\83X
\83g
\81[
\83\8b\81iports
\81j<a name="apache1" href="#apache1" class="anchor">†</a></h4>
-
-<p>Opengate\82Å\82Í\81AIPv6\82ð\83T\83|\81[\83g\82µ\82½Apache2\82ª\95K\90{\82Å\82 \82é\81B\82Ü\82½\81A\94F\8fØ\82ð\8ds\82¤\82±\82Æ\82©\82ç
-SSL\82ð\83T\83|\81[\83g\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81BApache2\82Í\95W\8f\80\82ÅSSL\82ð\83T\83|\81[\83g\82µ\82Ä\82¢\82é\82Ì\82Å\81Amod_ssl
-\82ð\95Ê\93r\83C\83\93\83X\83g\81[\83\8b\82·\82é\95K\97v\82Í\82È\82¢\81B</p>
-<p>\88È\89º\82É\81Aports\82ð\97\98\97p\82µ\82Ä\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\88È\89º\82É\8bL\82·\81B</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/www/apache2
-# make clean
-===> Cleaning for autoconf-2.53_1
-===> Cleaning for libtool-1.3.5_1
-===> Cleaning for m4-1.4_1
-===> Cleaning for help2man-1.29
-===> Cleaning for expat-1.95.6_1
-===> Cleaning for apache-2.0.48_3
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<p>\83C\83\93\83X\83g\81[\83\8b\8dì\8bÆ\82ª\8a®\97¹\82µ\82½\8cã\81AApache2\82Ì\8bN\93®\82ÆSSL\82ð\97L\8cø\82É\82·\82é\82½\82ß\82É\81A
-\88È\89º\82Ì\8d\80\96Ú\82ð/etc/rc.conf\82É\8bL\8fq\82·\82é\81B</p>
-
-<table><tr><td><pre>
-apache2_enable="YES"
-apache2ssl_enable="YES"
-</pre></td></tr></table>
-
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>C.2
\83C
\83\93\83X
\83g
\81[
\83\8b\81i
\83\
\81[
\83X
\81j<a name="apache2" href="#apache2" class="anchor">†</a></h4>
-
-<p>Apache2\82ð\83\\81[\83X\82©\82ç\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\88È\89º\82É\8bL\82·\81B</p>
-<p>Apache2\82Ì\83\\81[\83X\82Í\81Aftp.apache.or.jp\93\99\82©\82ç\8eæ\93¾\82·\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B\82Ü\82½\81A
-Apache2\82ð\83R\83\93\83p\83C\83\8b\82·\82é\8dÛ\82É\81ASSL\83\82\83W\83\85\81[\83\8b\82ð\97L\8cø\82É\82·\82é\95K\97v\82ª\82 \82é\81B\82Ü\82½\81A
-\83\\81[\83X\82©\82ç\83C\83\93\83X\83g\81[\83\8b\82µ\82½\8dÛ\82Í\81A\95W\8f\80\82Å/usr/local/apache2\83f\83B\83\8c\83N\83g\83\8a\88È\89º\82É\83C\83\93\83X\83g\81[\83\8b\82³\82ê\82é\81B</p>
-
-<table><tr><td><pre>
-# tar xvfz httpd-2.0.55.tar.gz
-# cd httpd-2.0.55
-# ./configure --enable-modules="so ssl"
-# make
-# make install
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>C.3
\94é
\96§
\8c®
\81A
\8fØ
\96¾
\8f\91\82Ì
\8dì
\90¬<a name="apache3" href="#apache3" class="anchor">†</a></h4>
-
-<p>Apache2\82Å\81ASSL\82ð\97\98\97p\82·\82é\82½\82ß\82É\94é\96§\8c®\82Æ\8fØ\96¾\8f\91\82ð\97p\88Ó\82·\82é\95K\97v\82ª\82 \82é\81B\90³\8bK\82Ì\94F\8fØ\8bÇ\82©\82ç
-\94\8ds\82³\82ê\82½\8fØ\96¾\8f\91\82ð\97p\88Ó\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\82ª\81A\8e©\8cÈ\8f\90\96¼\82ð\8ds\82Á\82½\8fØ\96¾\8f\91\82Æ\94é\96§\8c®\82Å\82à\8f\\95ª\82É
-\83Z\83L\83\85\83\8a\83e\83B\82ð\8am\95Û\82·\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B</p>
-
-<p>Opengate\82Å\82Í\81A\93ñ\82Â\82ÌFQDN\82ð\97\98\97p\82·\82é\82±\82Æ\82©\82ç\81A\82»\82ê\82¼\82ê\82ÌFQDN\82É\91Î\89\9e\82·\82é\8fØ\96¾\8f\91\82Æ
-\94é\96§\8c®\82ª\95K\97v\82Æ\82È\82é\81B\88È\89º\82É\81A\94é\96§\8c®\82Æ\8fØ\96¾\8f\91\82ð\8dì\90¬\82·\82é\8eè\8f\87\82ð\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-# cd /usr/local/etc/apache2
-# mkdir ssl.key ssl.crt
-# chmod 700 ssl.key ssl.crt
-
-# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server1.key 1024
-# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server2.key 1024
-</pre></td></tr></table>
-
-<p>\8fã\8bL\82É\82¨\82¢\82Ä\8dì\90¬\82µ\82½\94é\96§\8c®\82ð\97p\82¢\82Ä\8f\90\96¼\82µ\82½\8fØ\96¾\8f\91\82ð\8dì\90¬\82·\82é\81B</p>
-
-<table><tr><td><pre>
-# /usr/bin/openssl req -new -x509 -days 365 \
- -key /usr/local/etc/apache2/ssl.key/server1.key \
- -out /usr/local/etc/apache2/ssl.crt/server1.crt
-
-You are about to be asked to enter information that will be incorporated
-into your certificate request.
-What you are about to enter is what is called a Distinguished Name or a DN.
-There are quite a few fields but you can leave some blank
-For some fields there will be a default value,
-If you enter '.', the field will be left blank.
------
-Country Name (2 letter code) [AU]:JP
-State or Province Name (full name) [Some-State]:Saga
-Locality Name (eg, city) []:Saga-city
-Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university
-Organizational Unit Name (eg, subsection) []:Information Science
-Common Name (eg, YOUR name) []:opengate.is.saga-u.ac.jp
-Email Address []:administrator@opengate.is.saga-u.ac.jp
-
-Please enter the following 'extra' attributes
-to be sent with your certificate request
-A challenge password []:
-An optional company name []:
-
-# /usr/bin/openssl req -new -x509 -days 365 \
- -key /usr/local/etc/apache2/ssl.key/server2.key \
- -out /usr/local/etc/apache2/ssl.crt/server2.crt
-
-You are about to be asked to enter information that will be incorporated
-into your certificate request.
-What you are about to enter is what is called a Distinguished Name or a DN.
-There are quite a few fields but you can leave some blank
-For some fields there will be a default value,
-If you enter '.', the field will be left blank.
------
-Country Name (2 letter code) [AU]:JP
-State or Province Name (full name) [Some-State]:Saga
-Locality Name (eg, city) []:Saga-city
-Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university
-Organizational Unit Name (eg, subsection) []:Information Science
-Common Name (eg, YOUR name) []:opengate4.is.saga-u.ac.jp
-Email Address []:administrator@opengate.is.saga-u.ac.jp
-
-Please enter the following 'extra' attributes
-to be sent with your certificate request
-A challenge password []:
-An optional company name []:
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 4 ************** -->
-<h4>C.4
\83o
\81[
\83`
\83\83\83\8b\83z
\83X
\83g
\82Ì
\90Ý
\92è<a name="apache4" href="#apache4" class="anchor">†</a></h4>
-
-<p>Opengate\82Å\82Í\81A\93ñ\82Â\82ÌFQDN\82ð\97p\82¢\82é\81B\82±\82ê\82æ\82è\81AApache2\82Å\82Í\93ñ\82Â\82ÌFQDN\82É\91Î\89\9e\82·\82é\82½\82ß\82É
-\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è\82ð\8ds\82¤\95K\97v\82ª\82 \82é\81B</p>
-<p>Apache2\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82É\82Í\81AIP\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Æ\81A\83l\81[\83\80\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b
-\83z\83X\83g\82Ì\93ñ\8eí\97Þ\82ª\82 \82é\81B\82µ\82©\82µ\81A\83l\81[\83\80\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82ð\97p\82¢\82½\8fê\8d\87\81A\90æ\8fq\82µ\82½
-\83o\81[\83`\83\83\83\8b\83z\83X\83g\82É\82Â\82¢\82Ä\82µ\82©SSL\8f\88\97\9d\82ð\8ds\82¤\82±\82Æ\82ª\82Å\82«\82È\82¢\81B</p>
-<p>Opengate\82Í\81A\93ñ\82Â\88È\8fã\82ÌNIC\82ð\8f\8a\8e\9d\82µ\81A\93ñ\82Â\88È\8fã\82ÌIP\83A\83h\83\8c\83X\82ð\8f\8a\8e\9d\82µ\82Ä\82¢\82é\82Ì\82Í\82¸\82È\82Ì\82Å\81A
-IP\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82ª\93K\97p\89Â\94\\82Å\82 \82é\81B</p>
-
-<p>\88È\89º\82É\81AIP\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82ð\93K\97p\82µ\82½\8fê\8d\87\82Ì\90Ý\92è\97á
-\81i/usr/local/etc/httpd.conf,ssl.conf\81j</p>
-
-<table><tr><td>httpd.conf</td></tr><tr><td><pre>
-NameVirtualHost 192.168.55.1:80
-<VirtualHost 192.168.55.1:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-
-NameVirtualHost [2001:e38:3661:1a5::1]:80
-<VirtualHost [2001:e38:3661:1a5::1]:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-
-NameVirtualHost 192.168.0.34:80
-<VirtualHost 192.168.0.34:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate4.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-</pre></td></tr></table>
-<br>
-<table><tr><td>ssl.conf</td></tr><tr><td><pre>
-NameVirtualHost 192.168.55.1:443
-<VirtualHost 192.168.55.1:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key
-</VirtualHost>
-
-NameVirtualHost [2001:e38:3661:1a5::1]:443
-<VirtualHost [2001:e38:3661:1a5::1]:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key
-</VirtualHost>
-
-NameVirtualHost 192.168.0.34:443
-<VirtualHost 192.168.0.34:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate4.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server2.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server2.key
-</VirtualHost>
-</pre></td></tr></table>
-
-<p>\8fã\8bL\82Ì\90Ý\92è\97á\82Í\81A\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è\82Ì\82½\82ß\82Ì\83f\83B\83\8c\83N\83e\83B\83u\82Ì\82Ý\8bL\8fq\82µ\82Ä\82¢\82é\81B
-\82±\82Ì\91¼\82É\82à\91½\82\82Ì\8d\80\96Ú\82ð\90Ý\92è\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\82Ì\82Å\81AApache2\82Ì\90Ý\92è\82ð\8fn\92m\82µ\82½\8fã\82Å
-\90Ý\92è\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 5 ************** -->
-<h4>C.5 HTTP_ERROR 404
\82Ö
\82Ì
\91Î
\89\9e<a name="apache5" href="#apache5" class="anchor">†</a></h4>
-
-<p>Opengate\82Å\82Í\81A\97\98\97p\8eÒ\92[\96\96\82©\82ç\91\97\90M\82³\82ê\82Ä\82\82éHTTP\83\8a\83N\83G\83X\83g\82ð\81AOpengate\82ª\8e\9d\82Â
-Web\83T\81[\83o\82É\93]\91\97\82·\82é\82±\82Æ\82É\82æ\82Á\82Ä\81A\94F\8fØ\83y\81[\83W\82ð\92ñ\8b\9f\82µ\82Ä\82¢\82é\81B\82±\82Ì\82½\82ß\81A\97\98\97p\8eÒ\92[\96\96
-\82©\82ç\91\97\90M\82³\82ê\82Ä\82\82éHTTP\83\8a\83N\83G\83X\83g\82Í\97\\8aú\82·\82é\82±\82Æ\82ª\82Å\82«\82È\82¢\81B\82æ\82Á\82Ä\81A\82Ç\82Ì\82æ\82¤\82È
-HTTP\83\8a\83N\83G\83X\83g\82É\91Î\82µ\82Ä\82à\81A\94F\8fØ\83y\81[\83W\82ð\95Ô\82·\82½\82ß\82É\81A/usr/local/etc/httpd.conf\82É
-HTTP_ERROR 404\82ª\94\90¶\82µ\82½\8fê\8d\87\82É\81ADocumentRoot\82ð\95Ô\82·\82æ\82¤\82É\90Ý\92è\82·\82é\81B</p>
-
-<table><tr><td><pre>
-ErrorDocument 404 /
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<hr>
-<!-- Start:isc-dhcp3\82Ì\83C\83\93\83X\83g\81[\83\8b -->
-<h3>D isc-dhcp3
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="dhcp0" href="#dhcp0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#dhcp1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#dhcp2">DHCP\82Ì\90Ý\92è</a></li>
-</ul>
-
-<!-- *********** 1 ************* -->
-<h4>D.1
\83C
\83\93\83X
\83g
\81[
\83\8b\81iports
\81j<a name="dhcp1" href="#dhcp1" class="anchor">†</a></h4>
-
-<p>Opengate\82ð\93±\93ü\82·\82é\83l\83b\83g\83\8f\81[\83N\82Å\82Í\81A\97\98\97p\8eÒ\92[\96\96\82ª\95p\94É\82É\93ü\82ê\91Ö\82í\82é\82±\82Æ\82ª\97\\91ª\82Å\82«\82é\81B
-\82»\82±\82Å\81A\97l\81X\82È\97\98\97p\8eÒ\92[\96\96\82É\91Î\82µ\82Ä\8e©\93®\93I\82ÉIPv4\83A\83h\83\8c\83X\82ð\8a\84\82è\93\96\82Ä\82é\82±\82Æ\82ª\82Å\82«\82éDHCP\83T\81[\83o\82ð
-\93±\93ü\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>
-<p>\88È\89º\82Éisc-dhcp3\82Ì\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87\82ð\8bL\82·\81B</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/net/isc-dhcp3-server
-# make
-===> Cleaning for isc-dhcp3-server-3.0.1.r14_3
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<div align="right"><a href="#dhcp0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>D.2 DHCP
\82Ì
\90Ý
\92è<a name="dhcp2" href="#dhcp2" class="anchor">†</a></h4>
-
-<p>\83C\83\93\83X\83g\81[\83\8b\8dì\8bÆ\82ª\8a®\97¹\82·\82é\82Æ\81A/usr/local/etc\88È\89º\82Édhcpd.conf.sample\82ª\90¶\90¬\82³\82ê\82Ä\82¢\82é\81B
-\93¯\83f\83B\83\8c\83N\83g\83\8a\82Édhcpd.conf\82Æ\82µ\82Ä\83R\83s\81[\82µ\81Adhcpd\97p\82Ì\90Ý\92è\83t\83@\83C\83\8b\82ð\8dì\90¬\82·\82é\81B</p>
-<p>\88È\89º\82É\81A\90Ý\92è\97á\82ð\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-option domain-name "ai.is.saga-u.ac.jp";
-option domain-name-servers 192.168.0.2;
-option subnet-mask 255.255.255.0;
-option broadcast-address 192.168.55.255;
-option routers 192.168.55.1;
-
-default-lease-time 600;
-max-lease-time 7200;
-ddns-update-style none;
-log-facility local7;
-
-subnet 192.168.55.0 netmask 255.255.255.0 {
- range 192.168.55.100 192.168.55.200;
-}
-</pre></td></tr></table>
-
-<p>\82Ü\82½\81Adhcpd\82ð\8e©\93®\8bN\93®\82·\82é\82½\82ß\82É\81A/etc/rc.conf\82É\88È\89º\82Ì\8d\80\96Ú\82ð\8bL\8fq\82·\82é\81B</p>
-
-<table><tr><td><pre>
-dhcpd_enable="YES"
-dhcpd_ifaces="bge0"
-dhcpd_conf="/usr/local/etc/dhcpd.conf"
-</pre></td></tr></table>
-
-<p>dhcpd_ifaces\82É\82Â\82¢\82Ä\82Í\81Adhcp\82ð\91\97\90M\82·\82é\83C\83\93\83^\83t\83F\81[\83XID\82ð\8bL\8fq\82·\82é\81B</p>
-
-<div align="right"><a href="#dhcp0">back</a> <a href="#top">top</a></div>
-
-<hr>
-
-<!-- Start:BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b -->
-<h3>E BIND9
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="bind0" href="#bind0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#bind1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#bind2">\94F\8fØ\83L\81[\82Ì\8dì\90¬</a></li>
- <li class="list_num"><a href="#bind3">named.conf\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#bind4">zone\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#bind5">\8bN\93®\8am\94F</a></li>
-</ul>
-
-<!-- ********** 1 *********** -->
-<h4>E.1
\83C
\83\93\83X
\83g
\81[
\83\8b\81iports
\81j<a name="bind1" href="#bind1" class="anchor">†</a></h4>
-
-<p>Opengate\82Ì\82½\82ß\82É\93ñ\82Â\82ÌFQDN\82ð\97p\88Ó\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\8aù\91¶\82ÌDNS\82ÉOpengate\97p\82Ì
-FQDN\82ð\93o\98^\82·\82é\82±\82Æ\82Å\82à\89ð\8c\88\82Å\82«\82é\81B\82µ\82©\82µ\81ANAT\82È\82Ç\82ð\97p\82¢\82Ä\83A\83h\83\8c\83X\95Ï\8a·\82ð\8ds\82¤\8fê\8d\87\82ð
-\8dl\82¦\82é\82Æ\81A\83v\83\89\83C\83x\81[\83g\83l\83b\83g\83\8f\81[\83N\82Ì\83A\83h\83\8c\83X\82ð\8aO\95\94\82ÌDNS\82É\93o\98^\82·\82é\82±\82Æ\82Í\96]\82Ü\82µ\82\82È\82¢\81B
-\82»\82±\82Å\81AOpengate\97p\82Ì\83}\83V\83\93\82ÉDNS\82ð\93±\93ü\82·\82é\82±\82Æ\82à\8dl\82¦\82ç\82ê\82é\81B</p>
-<p>\88È\89º\82É\81ABIDN9\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\8bL\82·\81B</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/dns/bind9/
-# make clean
-===> Cleaning for bind9-9.3.1
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<p>\83C\83\93\83X\83g\81[\83\8b\82ª\8a®\97¹\82·\82é\82Æ\81A/etc/namedb(/var/named/etc/namaedb)\88È\89º\82Ì\83f\83B\83\8c\83N\83g\83\8a\82É
-\8ae\8eí\90Ý\92è\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82é\81B</p>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ********** 2 ********** -->
-<h4>E.2
\94F
\8fØ
\83L
\81[
\82Ì
\8dì
\90¬<a name="bind2" href="#bind2" class="anchor">†</a></h4>
-
-<p>BIND9\82Å\82Í\81A\83Z\83L\83\85\83\8a\83e\83B\82ð\8am\95Û\82·\82é\82½\82ß\82É\94F\8fØ\83L\81[\82ð\90Ý\92è\82µ\81Arndc\83R\83}\83\93\83h\82ð\97p\82¢\82Änamed\82ð\90§\8cä\82·\82é\81B</p>
-<p>\82»\82±\82Å\81A\82Ü\82¸\94F\8fØ\83L\81[\82Ì\8dì\90¬\82ð\8ds\82¤\81B\94F\8fØ\8b@\81[\82Ì\8dì\90¬\8eè\8f\87\82ð\88È\89º\82É\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/dnssec-keygen -a hmac-md5 -b 512 -n user rndc
-</pre></td></tr></table>
-
-<p>\88È\8fã\82Ì\8dì\8bÆ\82É\82¨\82¢\82Ä\81A"out of entropy"\82Æ\82¢\82¤\83G\83\89\81[\82ª\94\90¶\82·\82é\8fê\8d\87\82Í\81A\8e\9f\82Ì\95û\96@\82Å
-\94F\8fØ\83L\81[\82ð\8dì\90¬\82·\82é\81B</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/dnssec-keygen -r /dev/urandom -a hmac-md5 -b 512 -n user rndc
-</pre></td></tr></table>
-
-<p>\94F\8fØ\83L\81[\82Ì\8dì\90¬\82É\90¬\8c÷\82·\82é\82Æ\81A\8e\9f\82Ì\93ñ\82Â\82Ì\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82é\81B\82½\82¾\82µ\81A\83t\83@\83C\83\8b\96¼\82É
-\8aÜ\82Ü\82ê\82é\90\94\8e\9a\82Í\83\89\83\93\83_\83\80\82É\90¶\90¬\82³\82ê\82é\81B</p>
-
-<ul>
- <li><pre>Krndc.+157+60849.key</pre></li>
- <li><pre>Krndc.+157+60849.private</pre></li>
-</ul>
-
-<p>BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b\8cã\82É\81A/usr/local/etc/rndc.conf.sample\82Æ\82¢\82¤\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82Ä\82¢\82é\81B
-\82±\82Ì\83t\83@\83C\83\8b\82ð\83R\83s\81[\82µ\82Ä\81A/usr/local/etc/rndc.conf\82ð\8dì\90¬\82·\82é\81B</p>
-<p>\82»\82µ\82Ä\81Arndc.conf\82Ìkey\83f\83B\83\8c\83N\83e\83B\83u\82ð\95Ò\8fW\82·\82é\81Bkey\83f\83B\83\8c\83N\83e\83B\83u\82Å\82Í\81A\94F\8fØ\83L\81[\82Ì
-\83A\83\8b\83S\83\8a\83Y\83\80\82Æ\90¶\90¬\82µ\82½\94F\8fØ\83L\81[\82ð\8ew\92è\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\94F\8fØ\83L\81[\82Ísecret\82Ì\8d\80\96Ú\82É\8ew\92è\82·\82é\81B
-
\82Ü
\82½
\81A
\94F
\8fØ
\83L
\81[
\82Æ
\8b¤
\82É
\8dì
\90¬
\82µ
\82½<pre>Krndc.+157+60849.private</pre>
\82Ìkey
\8d\80\96Ú
\82É
\95\
\8e¦
\82³
\82ê
\82Ä
-\82¢\82é\82à\82Ì\82ð\8ew\92è\82·\82é\81B</p>
-
-<table><tr><td><pre>
-options {
- default-server localhost;
- default-key "key";
-};
-
-server localhost {
- key "key";
-};
-
-key "key" {
- algorithm hmac-md5;
- secret "...";
-};
-</pre></td></tr></table>
-
-<p>\8d¡\89ñ\82ÌDNS\83T\81[\83o\82Í\81AOpengate\82ð\93±\93ü\82·\82é\83l\83b\83g\83\8f\81[\83N\82Ì\82Ý\82É\83T\81[\83r\83X\82ð\8ds\82¤\82à\82Ì\82Å\82 \82é\81B\82µ\82©\82µ\81A
-\90Ý\92è\83t\83@\83C\83\8b\82Ì\83p\81[\83~\83b\83V\83\87\83\93\82É\8f\\95ª\92\8d\88Ó\82µ\81A\94F\8fØ\83L\81[\82Ì\83t\83@\83C\83\8b\82Í\83T\81[\83o\8fã\82É\95Û\91¶\82¹\82¸\82É\81A
-\8dí\8f\9c\82à\82µ\82\82Í\83v\83\8a\83\93\83g\83A\83E\83g\82µ\82Ä\8cµ\8fd\82É\95Û\91¶\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ********* 3 ********* -->
-<h4>E.3 named.conf
\82Ì
\90Ý
\92è<a name="bind3" href="#bind3" class="anchor">†</a></h4>
-
-<p>named\82Ì\8eå\82È\93®\8dì\82ð\90§\8cä\82·\82é\82½\82ß\82Ì\90Ý\92è\83t\83@\83C\83\8b/etc/namedb/named.conf\82Ì\90Ý\92è\82ð\8ds\82¤\81B</p>
-<p>\82Ü\82¸\81A\94F\8fØ\83L\81[\82Ì\90Ý\92è\82Ì\82½\82ß\82Ékey\83f\83B\83\8c\83N\83e\83B\83u\82Ì\90Ý\92è\82ª\95K\97v\82Å\82 \82é\81B\91O\8fq\82µ\82½rndc.conf\82Ì
-key\83f\83B\83\8c\83N\83e\83B\83u\82Æ\93¯\97l\82Ì\90Ý\92è\82ð\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>
-
-<table><tr><td><pre>
-key "rndc_key" {
- algorithm hmac-md5;
- secret "...";
-};
-
-controls {
- inet ::1 allow {
- ::1;
- }
- keys {
- "rndc_key";
- };
- inet 127.0.0.1 allow {
- 127.0.0.1;
- }
- keys {
- "rndc_key";
- };
-};
-</pre></td></tr></table>
-
-<p>\82Ü\82½\81Akey\83f\83B\83\8c\83N\83e\83B\83u\82É\82Â\82¢\82Ä\82Í\95Ê\83t\83@\83C\83\8b\82É\8bL\8fq\82µ\81Anamed.conf\82Åinclude
-\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B\95Ê\83t\83@\83C\83\8b\82É\8bL\8fq\82·\82é\8fê\8d\87\82Í\81A\83p\81[\83~\83b\83V\83\87\83\93\82Ì\90Ý\92è\82æ\82Á\82Ä\82³\82ç\82É
-\83Z\83L\83\85\83\8a\83e\83B\82ð\8d\82\82ß\82é\82±\82Æ\82ª\89Â\94\\82Æ\82È\82é\81B</p>
-<p>\8e\9f\82É\81Aoptions\83f\83B\83\8c\83N\83e\83B\83u\82Ì\90Ý\92è\82ð\8ds\82¤\81B</p>
-
-<table><tr><td><pre>
-options {
- directory "/etc/namedb";
- pid-file "/var/run/named/named.pid";
- auth-nxdomain yes;
- listen-on-v6 { any; };
-};
-</pre></td></tr></table>
-
-<p>named.pid\83t\83@\83C\83\8b\82ð\92u\82\83f\83B\83\8c\83N\83g\83\8a\82Í\93K\93\96\82É\8dì\90¬\82·\82é\95K\97v\82ª\82 \82é\81B</p>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ******** 4 ********* -->
-<h4>E.4 zone
\82Ì
\90Ý
\92è<a name="bind4" href="#bind4" class="anchor">†</a></h4>
-
-<p>Opengate\82Å\8aÇ\97\9d\82·\82é\83h\83\81\83C\83\93\82É\82Â\82¢\82Ä\90Ý\92è\82ð\8ds\82¤\81B\8ae\83h\83\81\83C\83\93\82Ínamed.conf\82Ìzone\83f\83B\83\8c\83N\83e\83B\83u\82É
-\82æ\82Á\82Ä\8aÇ\97\9d\82³\82ê\82é\81B\82Ü\82½\81ABIND9\82Å\82Íview\82Æ\82¢\82¤\83f\83B\83\8c\83N\83e\83B\83u\82ª\8eÀ\91\95\82³\82ê\82Ä\82¨\82è\81A\82±\82Ì\8eq\83f\83B\83\8c\83N\83e\83B\83u\82É
-zone\82Æ\82µ\82Ä\90Ý\92è\82·\82é\82±\82Æ\82É\82æ\82Á\82Ä\81ADNS\96â\82¢\8d\87\82í\82¹\8c³\82ÌIP\83A\83h\83\8c\83X\82â\83h\83\81\83C\83\93\82É\82æ\82Á\82Ä\95Ô\93\9a\82·\82ézone\82ð
-\95Ï\8dX\82·\82é\82±\82Æ\82ª\89Â\94\\82Æ\82È\82é\81B</p>
-
-<table><tr><td><pre>
-view "og" {
- match-clients
- {
- 10.0.0.0/16;
- };
-
- recursion yes;
-
- zone "." {
- type hint;
- file "named.root";
- };
-
- zone "og.saga-u.ac.jp" {
- type master;
- file "og.saga-u.ac.jp";
- };
-
- zone "0.0.127.IN-ADDR.ARPA" {
- type master;
- file "master/localhost.rev";
- };
-
- // RFC 3152
- zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\
- 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA" {
- type master;
- file "master/localhost-v6.rev";
- };
-
- // RFC 1886 -- deprecated
- zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\
- 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.INT" {
- type master;
- file "master/localhost-v6.rev";
- };
-};
-</pre></td></tr></table>
-
-<p>\88È\8fã\82Ì\90Ý\92è\82É\82¨\82¢\82Ä\81A"og.saga-u.ac.jp"\82Æ\82¢\82¤zone\82ð\90Ý\92è\82µ\82½\81B\82±\82Ì\90Ý\92è\82É\82¨\82¢\82Ä\81A
-\83h\83\81\83C\83\93"og.saga-u.ac.jp"\82É\91®\82·\82é\83z\83X\83g\82ð\90Ý\92è\82µ\82½og.saga-u.ac.jp\82Æ\82¢\82¤\83t\83@\83C\83\8b\82ð
-\93Ç\82Ý\8d\9e\82Þ\82æ\82¤\82É\90Ý\92è\82µ\82Ä\82¢\82é\81B\82»\82±\82Å\81Aog.saga-u.ac.jp\82Æ\82¢\82¤\81A\8e\9f\82Ì\82æ\82¤\82È\83t\83@\83C\83\8b\82ð
-\97p\88Ó\82·\82é\81B</p>
-
-<table><tr><td><pre>
-$TTL 3600
-$ORIGIN og.saga-u.ac.jp.
-
-@ IN SOA ns.og.saga-u.ac.jp. postmaster (
- 2005051702 ;
- 3600
- 1200
- 2419200
- 86400 )
- IN NS ns.og.saga-u.ac.jp.
- IN A 10.0.0.2
- IN MX 10 opengate.og.saga-u.ac.jp.
-
-ns IN A 10.0.0.2
-
-opengate IN A 10.0.0.2
- AAAA 2001:2f8:10:1::1
-
-opengate4 IN A 133.49.1.2
-</pre></td></tr></table>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ********* 5 ********* -->
-<h4>E.5
\8bN
\93®
\8am
\94F<a name="bind5" href="#bind5" class="anchor">†</a></h4>
-
-<p>\88È\8fã\81A\91S\82Ä\82Ì\90Ý\92è\82ª\8a®\97¹\82µ\82½\8cã\82É\81A\8bN\93®\8am\94F\82ð\8ds\82¤\81B</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/named/ -u bind -c /etc/namedb/named.conf
-</pre></td></tr></table>
-
-<p>\88È\8fã\82ð\8eÀ\8ds\82µ\81A\96â\91è\82È\82named\82ª\8bN\93®\82µ\82Ä\82¢\82ê\82Î\90¬\8c÷\82Å\82 \82é\81B\8bN\93®\8am\94F\82Å\96â\91è\82ª\82È\82¯\82ê\82Î\81A
-/etc/rc.conf\82É\88È\89º\82Ì\8d\80\96Ú\82ð\8bL\8fq\82µ\81A\8e©\93®\8bN\93®\82·\82é\82æ\82¤\82É\90Ý\92è\82·\82é\81B</p>
-
-<table><tr><td><pre>
-named_enable="YES"
-named_program="/usr/local/sbin/named"
-named_flags="-u bind -c /etc/namedb/named.conf"
-</pre></td></tr></table>
-
-<p>DNS\83T\81[\83o\82Í\8aÇ\97\9d\82ª\95¡\8eG\82Å\82 \82é\82½\82ß\81A\82±\82Ì\91¼\82Ì\8e\91\97¿\82à\8eQ\8dl\82É\82µ\81A\83}\83j\83\85\83A\83\8b\82ð
-\8fn\93Ç\82µ\82½\8fã\82Å\90Ý\92è\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-<hr>
-
-
-
-<!-- Start:MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b -->
-<h3>F MRTG
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="mrtg0" href="#mrtg0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#mrtg1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#mrtg2">MRTG\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#mrtg3">MRTG\82Ì\8bN\93®\8am\94F</a></li>
- <li class="list_num"><a href="#mrtg4">crontab\82Ö\82Ì\93o\98^</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>F.1 MRTG
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="mrtg1" href="#mrtg1" class="anchor">†</a></h4>
-
-<p>Opengate \82Ì\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\82½\82ß\82É\81AMRTG\82ð\97p\82¢\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B\97\98\97p\8fó\8bµ\82Ì\8aÄ\8e\8b\82ð\8ds\82È\82í\82È\82¢\8fê\8d\87\82Í\81A
-MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b\82Í\95s\97v\82Å\82 \82é\81B</p>
-
-<p>MRTG(Multi Router Traffic Grapher)\82Æ\82Í\81A\96{\97\88\83l\83b\83g\83\8f\81[\83N\82Ì\95\89\89×\82ð\8aÄ\8e\8b\82·\82é\83c\81[\83\8b\82Å\82 \82é\81B
-SNMP\83G\81[\83W\83F\83\93\83g\82æ\82è\83g\83\89\83t\83B\83b\83N\82Ì\92l\82ð\8eæ\93¾\82µ\81A\83O\83\89\83t\83B\83b\83N\83C\83\81\81[\83W\82ð\8aÜ\82ÞHTML\83y\81[\83W\82ð\90¶\90¬\82·\82é\81B
-<a href="http://www.mrtg.jp/" target="_blank">\8fÚ\8d×</a></p>
-
-<p>MRTG\82ð\97p\82¢\82Ä\81AOpengate\82Ì\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\82É\82 \82½\82Á\82Ä\82Í\81AOpengate\82ð\93±\93ü\82µ\82½\83Q\81[\83g\83E\83F\83C\82É\82¨\82¢\82Ä
-MRTG\82ð\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82à\8d\\82í\82È\82¢\82ª\81A\8aÄ\8e\8b\97p\82Ì\95Ê\82Ì\83T\81[\83o\82É\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82à\8d\\82í\82È\82¢\81B\82Ü\82½\81A
-Opengate\82ð\95ª\8eU\94z\92u\82·\82é\82æ\82¤\82É\90Ý\8cv\82³\82ê\82Ä\82¢\82é\82½\82ß\81A\95¡\90\94\82ÌOpengate\82ð\8aÇ\97\9d\82·\82é\82É\82 \82½\82Á\82Ä\82Í\8aÄ\8e\8b\97p\82Ì\83T\81[\83o\82É
-\82¨\82¢\82ÄMRTG\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\82±\82Æ\82ð\90\84\8f§\82·\82é\81B</p>
-
-<p>\88È\89º\82É\81AMRTG\82ðports\82ð\97p\82¢\82Ä\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/net-mgmt/mrtg/
-# make clean
-===> Cleaning for mrtg-2.12.2,1
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>F.2 MRTG
\82Ì
\90Ý
\92è<a name="mrtg2" href="#mrtg2" class="anchor">†</a></h4>
-
-<p>MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b\82ª\8a®\97¹\82·\82é\82Æ\81A/usr/local/etc/mrtg/\88È\89º\82É\90Ý\92è\83t\83@\83C\83\8b\82ª\97p\88Ó\82³\82ê\82Ä\82¢\82é\81B
-\93¯\83f\83B\83\8c\83N\83g\83\8a\82É\81Aopengate.cfg\82Æ\82µ\82Ä\90V\82½\82É\90Ý\92è\83t\83@\83C\83\8b\82ð\97p\88Ó\82·\82é\81B</p>
-
-<table><tr><td><pre>
-##################################################
-# opengate user counter
-
-WorkDir: /usr/home/user/public_html/mrtg/opengate/
-Language: euc-jp
-
-##### \83I\83v\83V\83\87\83\93
-# growright: X\8e²\82Ì\8c´\93_\82ð\8d¶\82É integer: \90®\90\94\95\\8e¦ info: 3,4\94Ô\96Ú\82Ì\8fo\97Í\82Ì\94ñ\95\\8e¦
-# gauge: \8c»\8dÝ\82Ì\92l=\93ü\97Í\92l-\91O\89ñ\82Ì\93ü\97Í\92l\82ð\82µ\82È\82¢ nopercent: \83p\81[\83Z\83\93\83g\94ñ\95\\8e¦
-Options[^]: growright,gauge,nopercent,integer
-
-Target[opengate]:`/usr/home/user/bin/input.sh`
-Title[opengate]: Opengate user counter
-
-PageTop[opengate]: <h1>Opengate user counter</h1>
- <p>Opengate12 \82ð\97\98\97p\82µ\82Ä\82¢\82é\90l\90\94\82ð\95\\8e¦\82µ\82Ä\82¢\82Ü\82·\81B</p>
-
-# \92l\82Ì\8fã\8cÀ
-MaxBytes[opengate]: 200
-# \8ae\83O\83\89\83t\82É\82¨\82¢\82Ä\81A\83O\83\89\83t\82Ì\8fã\8cÀ\82ð\92l\82Ì\8dÅ\91å\92l\82Å\82È\82\92l\82Ì\8fã\8cÀ\82É\82·\82é
-#Unscaled[opengate]: ymwd
-
-# \83O\83\89\83t\82ÌY\8e²\82É\82Â\82\83^\83C\83g\83\8b
-YLegend[opengate]: Opengate User
-# \92l\82Ì\92P\88Ê
-ShortLegend[opengate]: \90l
-# \92l\82Ì\83^\83C\83g\83\8b LegendI: 1\94Ô\96Ú LegendO: 2\94Ô\96Ú
-LegendI[opengate]: IPv6 Users
-LegendO[opengate]: Total Users
-</pre></td></tr></table>
-
-<p>WorkDir\82É\8ew\92è\82µ\82½\83f\83B\83\8c\83N\83g\83\8a\82ð\8dì\90¬\82·\82é\81B\93¯\83f\83B\83\8c\83N\83g\83\8a\82É\81AMRTG\82ª\8ae\8eíHTML\83t\83@\83C\83\8b\82Æ\83O\83\89\83t\83B\83b\83N\83C\83\81\81[\83W\82ð\8dì\90¬\82·\82é\81B</p>
-
-<p>Target[opengate]\82É\82Í\81AMRTG\82É\83f\81[\83^\82ð\93n\82·\82½\82ß\82Ì\83v\83\8d\83O\83\89\83\80\82ð\90Ý\92u\82·\82é\81B\88È\89º\82É\8fÚ\8d×\82ð\90à\96¾\82·\82é\81B</p>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-
-<h5>F.2.1 Opengate
\83T
\81[
\83o
\82Å
\8aÄ
\8e\8b\82·
\82é
\8fê
\8d\87<a name="mrtg21" href="#mrtg21" class="anchor">†</a></h5>
-
-<p>\88È\89º\82ÉOpengate\82ð\93±\93ü\82µ\82½\83Q\81[\83g\83E\83F\83C\82É\82¨\82¢\82Ä\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\8fê\8d\87\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\8bL\82·\81B</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## shwo opengate status for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-LANG=C
-COLUMNS=256
-
-export LANG
-export COLUMNS
-
-### IPv6 prefix
-prefix="2001:2f8:22:801:"
-
-### opengate process name
-process="opengatesrv.cgi"
-
-### tmp file name
-tmp_all="/tmp/og_count_all.tmp"
-tmp_6="/tmp/og_count_6.tmp"
-
-######################################################
-
-ps ax | grep $process > $tmp_all
-COUNT=`wc -l $tmp_all | awk '{print $1}'`
-grep $prefix $tmp_all > $tmp_6
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`
-UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`
-
-rm $tmp_all
-rm $tmp_6
-
-echo "$COUNT6"
-echo "$COUNT"
-echo "$UPTIME"
-echo "Opengate User Counter"
-</pre></td></tr></table>
-
-<p>\82³\82ç\82É\81A\82±\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\92P\93Æ\82Å\8eÀ\8ds\82µ\81A\88È\89º\82Ì\82æ\82¤\82È\83f\81[\83^\82ª\8eæ\93¾\82Å\82«\82Ä\82¢\82é\82±\82Æ\82ð\8am\94F\82·\82é\81B</p>
-
-<table><tr><td><pre>
-5
-48
-10days
-Opengate User Counter
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-<h5>F.2.2
\8aO
\95\94\83T
\81[
\83o
\82Å
\8aÄ
\8e\8b\82·
\82é
\8fê
\8d\87<a name="mrtg22" href="#mrtg22" class="anchor">†</a></h5>
-
-<p>\88È\89º\82É\8aO\95\94\83T\81[\83o\82É\82¨\82¢\82Ä\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\8fê\8d\87\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## input data for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-# tmp file name
-file="/tmp/opengate.tmp"
-
-# URL of output.sh at opengate
-url="http://opengate.saga-u.ac.jp/cgi-bin/output.sh"
-
-fetch -o $file $url &> /dev/null
-
-more $file
-</pre></td></tr></table>
-
-<p>\82³\82ç\82É\81A\8aÄ\8e\8b\82·\82éOpengate\83T\81[\83o\82É\82¨\82¢\82Ä\81ACGI\82ª\8eÀ\8ds\89Â\94\\82È\83f\83B\83\8c\83N\83g\83\8a\82É\8e\9f\82Ì\82æ\82¤\82È\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð
-\97p\88Ó\82·\82é\81B\82±\82ê\82ð\81A\8fã\8bL\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82Ì"url"\82É\8ew\92è\82·\82é\81B</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## shwo opengate status for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-LANG=C
-COLUMNS=256
-
-export LANG
-export COLUMNS
-
-### IPv6 prefix
-prefix="2001:2f8:22:801:"
-
-### opengate process name
-process="opengatesrv.cgi"
-
-### tmp file name
-tmp_all="/tmp/og_count_all.tmp"
-tmp_6="/tmp/og_count_6.tmp"
-
-######################################################3
-
-ps ax | grep $process > $tmp_all
-COUNT=`wc -l $tmp_all | awk '{print $1}'`
-grep $prefix $tmp_all > $tmp_6
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`
-UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`
-rm $tmp_all
-rm $tmp_6
-
-echo "Content-type: text/plain; charset=iso-8859-1"
-echo
-
-echo "$COUNT6"
-echo "$COUNT"
-echo "$UPTIME"
-echo "Opengate User Counter"
-</pre></td></tr></table>
-
-<p>Opengate\83T\81[\83o\82É\81A\88È\8fã\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\97p\88Ó\82µ\82½\8cã\82É\81A\8aÄ\8e\8b\97p\82Ì\8aO\95\94\83T\81[\83o\82É\82¨\82¢\82Ä\81A
-input.sh\82ð\92P\93Æ\82Å\8eÀ\8ds\82µ\82½\8dÛ\82É\81A\88È\89º\82Ì\82æ\82¤\82È\83f\81[\83^\82ª\8eæ\93¾\82Å\82«\82Ä\82¢\82é\82±\82Æ\82ð\8am\94F\82·\82é\81B</p>
-
-<table><tr><td><pre>
-5
-48
-10days
-Opengate User Counter
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-
-<!-- ************ 3 ************** -->
-<h4>F.3 MRTG
\82Ì
\8bN
\93®
\8am
\94F<a name="mrtg3" href="#mrtg3" class="anchor">†</a></h4>
-
-<p>\88È\8fã\82Ì\90Ý\92è\82ª\8a®\97¹\82µ\82½\8cã\82É\81Amrtg\82ð\8eÀ\8ds\82·\82é\82±\82Æ\82ª\89Â\94\\82©\8am\94F\82·\82é\81B</p>
-
-<table><tr><td><pre>
-# /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg
-</pre></td></tr></table>
-
-<p>\88È\8fã\82ð\8eÀ\8ds\82·\82é\82Æ\81A\82P\89ñ\96Ú\82Æ\82Q\89ñ\96Ú\82Í\97l\81X\82ÈWARNING\82ª\8fo\97Í\82³\82ê\82é\81B</p>
-
-<p>mrtg\82ð\95¡\90\94\89ñ\8eÀ\8ds\82µ\8cã\82É\81AWorkDir\82É\8ew\92è\82µ\82½\83f\83B\83\8c\83N\83g\83\8a\82É\88È\89º\82Ì\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82Ä\82¢\82ê\82Î\90¬\8c÷\82Å\82 \82é\81B</p>
-
-<table><tr><td><pre>
-> ls -l
--rw-r--r-- 1 root wheel 538 12 14 04:40 mrtg-l.png
--rw-r--r-- 1 root wheel 414 12 14 04:40 mrtg-m.png
--rw-r--r-- 1 root wheel 1759 12 14 04:40 mrtg-r.png
--rw-r--r-- 1 root wheel 2941 12 20 15:15 opengate-day.png
--rw-r--r-- 1 root wheel 2146 12 20 14:35 opengate-month.png
--rw-r--r-- 1 root wheel 2867 12 20 14:55 opengate-week.png
--rw-r--r-- 1 root wheel 1897 12 20 05:00 opengate-year.png
--rw-r--r-- 1 root wheel 5961 12 20 15:15 opengate.html
--rw-r--r-- 1 root wheel 48786 12 20 15:15 opengate.log
--rw-r--r-- 1 root wheel 48784 12 20 15:10 opengate.old
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-
-<!-- ************ 4 ************** -->
-<h4>F.4 crontab
\82Ö
\82Ì
\93o
\98^<a name="mrtg4" href="#mrtg4" class="anchor">†</a></h4>
-
-<p>\88È\8fã\82Ì\90Ý\92è\82ª\8a®\97¹\82µ\82½\82Ì\82¿\82É\81Amrtg\82ðcrontab\82É\82æ\82Á\82Ä\92è\8aú\93I\82É\8eÀ\8ds\82·\82é\81B</p>
-
-<p>/etc/crontab\82É\8e\9f\82Ì\8ds\82ð\92Ç\89Á\82·\82é\81B</p>
-
-<table><tr><td><pre>
-*/5 * * * * root /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg
-</pre></td></tr></table>
-
-<p>\8aO\95\94\83T\81[\83o\82É\82¨\82¢\82Ä\81A\95¡\90\94\82ÌOpengate\82ð\8aÇ\97\9d\82·\82é\8fê\8d\87\82Í\81A\90Ý\92è\83t\83@\83C\83\8b\82ð\90V\82½\82É\8dì\90¬\82·\82é\89ß\92ö\82©\82ç\8ds\82È\82¤\81B</p>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-</body>
-</html>
\ No newline at end of file
+++ /dev/null
-\r
-body {\r
- width : 800px;\r
- margin-left:30px;\r
-}\r
-\r
-p {\r
- text-indent : 10px;\r
-}\r
-\r
-table {\r
- border-style : solid;\r
- border-bottom-color : #CCCCCC;\r
- border-width : thin;\r
- width : 90%;\r
- border-spacing : 10px;\r
-}\r
-\r
-.anchor {\r
- font-size : xx-small;\r
- vertical-align : super;\r
-}\r
-\r
-.list_alpha {\r
- list-style-type : upper-alpha;\r
-}\r
-.list_num {\r
- list-style : decimal;\r
-}\r
-\r
-.list_none {\r
- list-style : none;\r
- font-weight : bold;\r
-}\r
-\r
+++ /dev/null
-<HTML>
-<head>
-<title>Flow of Opengate</title>
-</head>
-
-<BODY>
-
-<body bgcolor=#BBEECC>
-
-<H3>Flow of Opengate</H3>
-
-Following is the flow of the Opengate system.
-
-<OL>
-
-<LI>
-An user on the client machine accesses to some URL such as
- [eg., http://www.some.site/ or http://www.some.site/some/path].
-(Suppose that some URL has an IPv6 address and an IPv4 address.)
-
-<LI>
-The client machine gives priority to IPv6 HTTP and use it. But
-ip6fw is all clesed. IPv6 HTTP is timeout.
-
-<LI>
-The client machine retry to access with IPv4 HTTP.
-
-<LI>
-Ipfw in gateway checks the packet passing though the gateway. For
-packets from closed client, the forward rule as [ipfw add 60000 fwd
-localhost tcp from 192.168.0.0/16 to any http] is applied.
-
-<LI>
-The web server in localhost(gateway) receives the packet as [GET / or
-/some/path]
-
-<LI>
-The /index.html file is returned in both cases, because the httpd.conf
- is set as [ErrorDocument 404 /index.html]
-
-<LI>
-The browser receives /index.html. But the browser misunderstands
-that the reply is returned from www.some.site.
-
-<LI>
-To remove the misunderstanding, the /index.html jumps to full URL
-description of gateway as [META HTTP-EQUIV="Refresh" CONTENT="0;
-URL=http://opengate4.saga-u.ac.jp/cgi-bin/opengateauth.cgi?en"] with IPv4 HTTP.
-
-<P>("opengate4.saga-u.ac.jp" has only IPv4 address. "opengate.saga-u.ac.jp" has both
-an IPv6 address and an IPv4 address.)</P>
-
-<LI>
-The returned page is the authentication request page.
-The browser understands the site of this page correctly.
-Then authentiaction CGI put IPv4 address with hidden tag in authentication request page.
-
-<LI>
-The user enters userid and password to this page, and clicks button to
-call Opengate CGI [FORM METHOD="POST"
-ACTION="http://opengate.saga-u.ac.jp/cgi-bin/opengate/opengatesrv.cgi"] with IPv6 HTTP.
-
-<LI>
-The CGI starts and processes the following.
-
-<LI>
-CGI gets the userid[eg., user1 or user1@id1], password, IPv4 address[eg., 192.168.0.111]
-from POST data, and gets IPv6 address[eg., 2001:e38:10::111] from "REMOTE_ADDR".
-And CGI gets MAC address from NDP or ARP.
-
-<LI>
-CGI reads configuration file[opengatesrv.conf] and gets the
-information about the authentication server[default(if @xx is not
-entered) or id1].
-
-<LI>
-CGI sends userid[user1] and password to the authentication server.
-
-<LI>
-After passing the authentication, CGI inserts IPv4 firewall rule before the
-forward rule [ipfw add 10000 allow ip from 192.168.0.111 to any] and
-[ipfw add 10000 allow ip from any to 192.168.0.111], and inserts IPv6 firewall
-rule [ip6fw add 10000 allow ipv6 from 2001:e38:10::111 to any] and
-[ip6fw add 10000 allow ipv6 from any to 2001:e38:10::111]. The rules
-indicate the pass of packet to/from the client. At the insertion, CGI
-searchs an unused rule number[eg., 10000] and uses. The perl script
-can be modified, if more flexible ipfw control is desired.
-
-<LI>
-CGI reports to syslog that the firewall is opened
-[Jun 16 19:14:11 ... START: user user1 use IPv6 and IPv4 at 00:00:00:00:00:00],
-[Jun 16 19:14:11 ... OPEN: user user1 from 192.168.0.111...] and
-[Jun 16 19:14:11 ... OPEN: user user1 from 2001:e38:10::111].
-
-<LI>
-CGI reads reply page file [accept.html], inserts specific information
-[userid, server address and port] and sends it to the client. The page
-describes the dowloading of java applet [applet
-code='Opengate.class'...] and the opening of second page
-[window.open("http://.../accept2.html")].
-
-<LI>
-CGI closes STDOUT to terminates the web server process.
-
-<LI>
-CGI waits for the java applet to connect.
-
-<LI>
-If no connection in DURATIONDEFAULT seconds, CGI removes the firewall rule
-{ipfw del 10000] and terminates. (If duration is entered in auth page, the time is extended to the time. To cope with hijacking and notting, periodical execution of arp command and firewall packet inquiry.)
-
-<LI>
-If connected, CGI watchs the TCP connection linking between gateway and client.
- If the TCP connection is closed, CGI removes the firewall rule and terminates.
-
-<LI>
-CGI sends 'hello' to the client every ACTIVECHECKINTERVAL seconds.
- If no reply in HELLOWAITTIMEOUT seconds, CGI removes the firewall rule and terminates.
-
-<LI>
-CGI gets number of passed packets for inserted rule from IPv4 and IPv6 firewall
-[ipfw -a list 10000], [ip6fw -a list 10000] every ACTIVECHECKINTERVAL seconds. If the packet
-count does not increase in NOPACKETINTERVAL seconds, CGI removes the
-firewall rule and terminates.
-
-<LI>
-At termination, CGI reports to syslog the filewall close
-[Jun 16 22:11:55 ... CLOS: user user1 from 192.168.0.111...],
-[Jun 16 22:11:55 ... CLOS: user user1 from 2001:e38:10::111...] and
-[Jun 16 22:11:55 ... END: user user1 at 00:00:00:00:00:00].
-
-</OL>
-
-</BODY>
-</HTML>
-
-
-
-
+++ /dev/null
-Authentication Protocol
-
-
-User--|--userTerminal--|------GatewayMachine --------------------------|Authentication|
- server
-
- (WWWbrowser) (ipfw) (ip6fw)
- AnyURL IPv6 HTTP Timeout
- ------->|-----------------------------------------------------|------->|
- | IPv4 HTTP (Retry) | |
- |---------------------------------------------------->| |
- | connect (WWWserver) | |
- |<----------------------|<----------------------------| |
- | WebPage | IP Forward : :
- | HTML Refresh(IPv4) |
- --------|---------------------->| Authentication CGI
- | IPv4 Address in | put IPv4 address in hidden tag
- | Authentication HTML |
- |<----------------------|
- | |
- ---->| |
-userID | |
- ---->| |
-passwd | |
- ---->| POST(IPv6) |
-SendBtn |---------------------->|
- |<userID>,<passwd> | (CGI)
- |<IPv4 address>(hidden) |------------->| request (arp or ndp)
- | | <userID>|--------->|
- | | <passwd>|<---------|
- | | <MAC address>| reply :
- | |<IPv6 address>|IPv6 address form "REMOTE_ADDR"
- | |<IPv4 address>|IPv4 address form POST data
- | | | (Auth server)
- | | | AuthRequest :
- | | |---------------------------->|
- | | |<----------------------------|
- | | | AuthReply :
- | | | (ipfw) (ip6fw)
- | | | : :
- | | |------------->| |
- | | | add rule | |
- | | |---------------------->|
- | | | add rule | |
- | | (fork) | |
- | | | | | |
- | | |(set timer) | |
- | | |(listen) | |
- |<----------------------|<-------------| | | |
- | WebPage (include JavaApplet) # | | |
- | : | | |
- | (Applet) | | |
- |--->| <userID> | | |
- : |---------------------------------->| | |
- |<----------------------------------| | |
- | "accept" | | |
- | | | |
- | "hello" | request log| |
- Network |<--------------------------------- |----------->| |
- Use | (Priodec Check) | | |
- |---------------------------------->|<-----------| |
- | "hello" | log list | |
- | | (ndp) | |
- | IPv6 address check |---->| | |
- | |<----| | |
- | Add new IPv6 address|-------------------->|
- | | add rule | |
- | Del expired IPv6 address|-------------------->|
- | | del rule | |
- ---------->|---------------------------------->|----------->| |
- Kill Web | close | del rule | |
- | |-------------------->|
- | | del rule | |
- # # : :
-
-
+++ /dev/null
-<html>
-<head>
-<title>Opengate Q & A</title>
-</head>
-
-<BODY>
-
-<body bgcolor=#BBEECC>
-
-<H3>Opengate Q & A</H3>
-
-Concept
-<UL>
-<LI>
-Why is the authentication needed?
-
-<BLOCKQUOTE>
-There are many incidents such as computer cracking or copyright infringement in the network. The organization might be caughted by many troubles caused by such incidents. In these cases, it is needed to identify the related person. The other reason is the restriction required by payment or aim of the network
-</BLOCKQUOTE>
-
-<LI>Why don't you use the authentication function inherent in the terminal?
-
-<BLOCKQUOTE>
-Unified system can depend on such function. But it cannot be applied to the open network envoronment where various hardwares and users are connected with various formats, such as wireless connection of his/her own portable PC.
-</BLOCKQUOTE>
-
-<LI>
-Why do you try to authenticate at client site? Is the authentication at server site essential?
-
-<BLOCKQUOTE>
-Yes it is essential. But to prevent trouble occured by unknown user of your site, authentication and usage log systems are required.
-</BLOCKQUOTE>
-
-<LI>
-Why does the target include open-use terminal that is settled by the organization for open usage? It can be protected by the system software.
-
-<BLOCKQUOTE>
-It is difficult for network control section to maintain many terminals distributed in wide campus. Moreover there are already various terminals settled by various sections. Some do not have such function and some are leaved with no control.
-</BLOCKQUOTE>
-
-<LI>
-Why don't you use the log obtained at gateway or firewall?
-
-<BLOCKQUOTE>
-The log does not include user identification.
-</BLOCKQUOTE>
-
-<LI>
-What is the merit compared with the identification by MAC address.
-
-<BLOCKQUOTE>
-The cost might be large to maitain the matching between user and MAC address.
-</BLOCKQUOTE>
-
-<LI>
-What is the merit compared with various authentication systems for network usage proposed recently.
-<BLOCKQUOTE>
-The merits of Opengate are as follows. Wide applicability about terminals, such as its hardware, software, management and connection. Minimum cost for user guidance and management. Easy implementation to existing network. Quick open at start usage and quick close at stop usage.
-</BLOCKQUOTE>
-
-<LI>
-Is there any other application of the system?
-<BLOCKQUOTE>
-For example, it might be used as the gateway from intra-net to extra-net or the contrary.
-</BLOCKQUOTE>
-
-<LI>
-What to do for No Java terminals?
-<BLOCKQUOTE>
-The no Java user can enters the usage duraion in auth page. To cope with hijacking and notting, the connection state is checked periodically by ARP command and packet count passing the firewall. The user can also close the network by clicking the TERMINATE link in accept page.
-
-</BLOCKQUOTE>
-
-
-</UL>
-
-
-Usage
-<UL>
-<LI>
-Is the system compatible with wireless LAN?
-
-<BLOCKQUOTE>
-Yes. But do not use the host station having NAT.
-</BLOCKQUOTE>
-
-<LI>
-Can the system coexists with NAT or DHCP.
-
-<BLOCKQUOTE>
-Yes. But do not insert NAT between the server and client.
-</BLOCKQUOTE>
-
-<LI>
-Can the MAC address be obtained?
-<BLOCKQUOTE>
-Yes. But the address is restricted to the one aquired from server on ethernet.
-</BLOCKQUOTE>
-
-<LI>
-I want to supply some services without authentication, or I do not want to supply some services even after authentication.
-
-<BLOCKQUOTE>
-The both can be realized by firewall rule set.
-</BLOCKQUOTE>
-
-<LI>
-I want to separate the commission range by the user rank.
-
-<BLOCKQUOTE>
-Firewall can be controled by Perl script. If the user rank is discriminated with userID pattern, authentication server, or IP address, it might be done. The function is added in Ver.0.80.
-</BLOCKQUOTE>
-
-<LI>
-I want manage temporal users.
-
-<BLOCKQUOTE>
-It is needed to register to an authentication server. As the system comminucates with plural servers, you can make specific server for temporal users and maintain it.
-</BLOCKQUOTE>
-
-<LI>
-Can the password secret be maintained?
-
-<BLOCKQUOTE>
-Yes. Communication between client and opengate server can be protected by SSL. Communication between opengate server and authentication server can be protected by secure auth protocol.We implement pop3s, radius, and pam(which supports many secure protocols).
-</BLOCKQUOTE>
-
-<LI>
-How are the scalability and performance?
-
-<BLOCKQUOTE>
-We are using the system in environments including active 50 or above terminals.
-</BLOCKQUOTE>
-
-</UL>
-Installation and Development
-<UL>
-<LI>
-I meet bugs on installation.
-
-<BLOCKQUOTE>
-See other document.
-</BLOCKQUOTE>
-
-<LI>
-Am I permited to use, modify or distribute the program?
-
-<BLOCKQUOTE>
-Yes it is permitted under GPL.
-</BLOCKQUOTE>
-
-<LI>
-Can I modify the web page design.
-
-<BLOCKQUOTE>
-As the web pages are described in html files, it is easy to modify the design.
-</BLOCKQUOTE>
-
-
-<LI>
-Can I avoid atacks such as IP spoofing or DoS(Denial of Service)?
-
-<BLOCKQUOTE>
-IP spoofing has no merit, because the system permits the address from which user information sended. DoS can be avoided, because each client uses different port in the system.
-</BLOCKQUOTE>
-
-<LI>
-Why the archive file is disorder?
-
-<BLOCKQUOTE>
-Sorry. I am trying to order.
-</BLOCKQUOTE>
-
-<LI>
-Can the server run on other OSs than FreeBSD.
-
-<BLOCKQUOTE>
-No. The system uses ipfw command which is specific to FreeBSD. The ipchains command in Linux can be used instead of ipwf.
-</BLOCKQUOTE>
-
-<LI>
-It is not smart that many processes resident. Can these be integrated to one process?
-
-<BLOCKQUOTE>
-Yes. But in the present version, we take priority on simplicity of program.
-</BLOCKQUOTE>
-
-
-<LI>
-Is the system compatible with IPv6?
-
-<BLOCKQUOTE>
-It might be realized by controlling both ipfw and ip6fw. But, in ipv4/IPv6 dual stack state, it is not so easy to get all IP addresses for the requested terminal. Thus, it is not yet programmed.
-
-For the present, following method might be the solution, though there is a restriction. Modify the ipfw control script opengatefw.pl as to allow IPv6 packet from/to the requested terminal's MAC address. The method can be used when the gateway and the terminal stay in the same ethernet link.
-</BLOCKQUOTE>
-
-</UL>
-</BODY>
-</HTML>
+++ /dev/null
-<html LANG="jp">
-<head>
-<META HTTP-EQUIV="Content-Type" CONTENT="text/html;charset=Shift_JIS">
-
-<title>Opengate Q & A</title>
-</head>
-
-<BODY>
-
-<body bgcolor=#BBEECC>
-
-<H3>Opengate Q & A</H3>
-
-\88Ó\8b`
-<UL>
-<LI>
-\82»\82à\82»\82à\89½\8cÌ\94F\8fØ\82È\82Ç\82ª\95K\97v\82È\82Ì\82Å\82·\82©\81B\92N\82Å\82à\83l\83b\83g\83\8f\81[\83N\82ª\8eg\82¦\82Ä\97Ç\82¢\82Å\82Í\82È\82¢\82Å\82·\82©\81B
-
-<BLOCKQUOTE>
-\8ae\83l\83b\83g\83\8f\81[\83N\82Í\81A\82»\82Ì\90Ý\92u\8eï\8e|\82Æ\8co\94ï\95\89\92S\82É\8f]\82Á\82½\97\98\97p\82ª\8b\81\82ß\82ç\82ê\82Ü\82·\81B\8c\88\82µ\82Ä\8e©\97R\97\98\97p\82ª\91O\92ñ\82Å\82Í\82 \82è\82Ü\82¹\82ñ\81B\82³\82ç\82É\81A\83C\83\93\83^\81[\83l\83b\83g\8fã\82Å\82Í\81A\94îæ\8e\92\86\8f\9d\82â\8d¼\8b\\81A\95s\90³\83A\83^\83b\83N\93\99\82Ì\94½\8eÐ\89ï\93I\8ds\93®\82ª\94\90¶\82µ\82Ä\82¢\82Ü\82·\81B\91g\90D\82Æ\82µ\82Ä\82Í\82»\82Ì\82æ\82¤\82È\8ds\93®\82ð\8d\\90¬\88õ\82É\8bN\82±\82µ\82Ä\97~\82µ\82\82 \82è\82Ü\82¹\82ñ\81B\8ae\8e©\82ª\90Ó\94C\82ð\8e\9d\82Á\82Ä\8ds\93®\82µ\82Ä\82¢\82½\82¾\82\82½\82ß\82Ì\88ê\82Â\82Ì\95û\96@\82Æ\82µ\82Ä\96{\83V\83X\83e\83\80\82ª\82 \82è\82Ü\82·\81B
-</BLOCKQUOTE>
-
-<LI>
-\92[\96\96\82ÌOS\82É\95t\90\8f\82·\82é\94F\8fØ\82ð\97\98\97p\82·\82é\82Ì\82Å\82Í\83_\83\81\82È\82Ì\82Å\82·\82©\81B
-
-<BLOCKQUOTE>
-\93\9d\88ê\82µ\82½PC\8aÂ\8b«\82Ì\8d\\92z\82Æ\88Û\8e\9d\82ª\89Â\94\\82È\83V\83X\83e\83\80\82Ì\8fê\8d\87\82É\82Í\81A\92[\96\96OS\82Ì\94F\8fØ\83V\83X\83e\83\80\82ð\97\98\97p\82µ\82½\95û\82ª\97Ç\82¢\82Æ\8ev\82¢\82Ü\82·\81B\82µ\82©\82µ\95s\93Á\92è\91½\90\94\82ª\95s\93Á\92è\8b@\8aí\82ð\90Ú\91±\82·\82é\82æ\82¤\82È\8aÂ\8b«\82Å\82Í\8b@\94\\82µ\82Ü\82¹\82ñ\81B
-</BLOCKQUOTE>
-
-<LI>
-\83A\83N\83Z\83X\82³\82ê\82é\91¤\82Ì\83T\81[\83o\82ª\8ae\8e©\82Å\94í\8aQ\82ð\8eó\82¯\82È\82¢\82æ\82¤\82É\81A\94F\8fØ\82»\82Ì\91¼\82Ì\83Z\83L\83\85\83\8a\83e\83B\95Û\8e\9d\82ð\8ds\82¤\82±\82Æ\82ª\96{\97\88\82Å\82Í\82È\82¢\82Å\82·\82©\81B
-
-<BLOCKQUOTE>
-\82»\82ê\82à\95K\97v\82Å\82µ\82å\82¤\81B\82µ\82©\82µ\91å\8aw\82Ì\82æ\82¤\82É\91½\90\94\82Ì\91½\97l\82È\90l\8aÔ\82ª\94ä\8ar\93I\8e©\97R\82É\97\98\97p\82Å\82«\82é\83l\83b\83g\83\8f\81[\83N\8aÂ\8b«\82ð\92ñ\8b\9f\82µ\82Ä\82¢\82é\91g\90D\82Å\82Í\81A\8aO\95\94\82É\91Î\82µ\82Ä\97l\81X\82È\83g\83\89\83u\83\8b\82ð\8bN\82±\82µ\8bê\8fî\82ª\8añ\82¹\82ç\82ê\82é\89Â\94\\90«\82ª\8d\82\82\82È\82è\82Ü\82·\81B\82»\82Ì\90Ó\94C\82Í\83g\83\89\83u\83\8b\8c´\88ö\82ð\8dì\82Á\82½\96{\90l\82É\8eæ\82Á\82Ä\82¢\82½\82¾\82\95K\97v\82ª\82 \82è\82Ü\82·\81B\82Ü\82½\81A\83l\83b\83g\83\8f\81[\83N\97\98\97p\82É\82Í\81A\82»\82Ì\96Ú\93I\82É\8d\87\82Á\82½\97\98\97p\8eÒ\82Ì\90§\8cÀ\82ª\82 \82é\82±\82Æ\82ª\92Ê\8fí\82¾\82Æ\8ev\82¢\82Ü\82·\81B\82æ\82Á\82Ä\83A\83N\83Z\83X\82·\82é\91¤\82Å\82Ì\94F\8fØ\82à\95K\97v\82Æ\8dl\82¦\82Ü\82·\81B
-</BLOCKQUOTE>
-
-<LI>
-\89½\8cÌ\81A\8cö\8aJ\8cÅ\92è\92[\96\96\82Æ\8fî\95ñ\83R\83\93\83Z\83\93\83g\82Ì\97¼\95û\82ð\91Î\8fÛ\82Æ\82·\82é\95K\97v\82ª\82 \82é\82Ì\82Å\82·\82©\81B
-\8cö\8aJ\8cÅ\92è\92[\96\96\82Í\92[\96\96OS\82Ì\94F\8fØ\82ª\89Â\94\\82Å\82Í\82È\82¢\82Å\82·\82©\81B
-
-<BLOCKQUOTE>
-\91S\82Ä\82Ì\8cö\8aJ\8cÅ\92è\92[\96\96\82ð\83l\83b\83g\83\8f\81[\83N\8aÇ\97\9d\95\94\96å\82ª\93\9d\88ê\93I\82É\94z\92u\82µ\81A\82»\82Ì\83n\81[\83h\83E\83F\83A\82ð\95s\90³\91\80\8dì\82©\82ç\8eç\82ê\82é\8fó\8bµ\82ª\89Â\94\\82Å\82 \82ê\82Î\82»\82ê\82Å\82à\97Ç\82¢\82Æ\8ev\82¢\82Ü\82·\81B\82µ\82©\82µ\8c»\8eÀ\93I\82É\82Í\8ag\8eU\82µ\82½\8cö\8aJ\8fê\8f\8a\82Ö\91½\90\94\94z\92u\82·\82é\82±\82Æ\82ª\91½\82\81A\97l\81X\82È\8d¢\93ï\82ª\94º\82¢\82Ü\82·\81B\82Ü\82½\8aù\82É\94z\92u\82³\82ê\82½\94F\8fØ\8b@\94\\82Ì\96³\82¢\92[\96\96\82â\95s\8f\\95ª\82È\8aÇ\97\9d\89º\82Ì\92[\96\96\82ª\90\94\91½\82\82 \82è\82Ü\82·\81B\82±\82ê\82ç\82É\82à\91Î\89\9e\82·\82é\95K\97v\82ª\82 \82è\82Ü\82·\81B
-</BLOCKQUOTE>
-
-<LI>
-\83\8b\81[\83^\82â\83t\83@\83C\83A\83E\83I\81[\83\8b\93\99\81A\92Ê\89ß\93_\82Å\82Ì\8bL\98^\8eæ\93¾\82Å\82Í\82¢\82¯\82È\82¢\82Ì\82Å\82·\82©\81B
-<BLOCKQUOTE>
-\82±\82Ì\8bL\98^\82Å\82ÍIP\83A\83h\83\8c\83X\82Í\95ª\82©\82è\82Ü\82·\81B\82µ\82©\82µ\95s\93Á\92è\91½\90\94\82ª\8fo\93ü\82è\82·\82é\8fê\8f\8a\82Ì\8fê\8d\87\82Í\92N\82ª\97\98\97p\82µ\82½\82Ì\82©\95ª\82©\82è\82Ü\82¹\82ñ\81B\97\98\97p\8eÒ\82ª\93Á\92è\82Å\82«\82é\95\94\89®\82Ì\8fê\8d\87\82Í\82±\82Ì\82æ\82¤\82È\8bL\98^\82Å\82à\97Ç\82¢\82Å\82µ\82å\82¤\81B
-</BLOCKQUOTE>
-
-<LI>
-MAC\83A\83h\83\8c\83X\82Å\8cÂ\90l\8e¯\95Ê\82ð\82·\82é\95û\8e®\82à\82 \82é\82æ\82¤\82Å\82·\82ª\81B
-<BLOCKQUOTE>
-Opengate\82Í\8cÂ\90l\8e¯\95Ê\82ð\83\86\81[\83UID\82Æ\83p\83X\83\8f\81[\83h\82Å\8ds\82Á\82Ä\82¢\82Ü\82·\81B\82±\82Ì\94F\8fØ\93ü\97Í\82Ì\91ã\82í\82è\82ÉMAC\83A\83h\83\8c\83X\82ð\8eg\82¤\82±\82Æ\82Í\89Â\94\\82Å\82µ\82å\82¤\81B<BR>
-\82µ\82©\82µMAC\83A\83h\83\8c\83X\82ð\97\98\97p\82·\82é\95û\8e®\82Í\81AMAC\83A\83h\83\8c\83X\82Æ\82»\82Ì\8f\8a\97L\8eÒ\82Æ\82Ì\8aÖ\8cW\82ð\91O\82à\82Á\82Ä\93o\98^\82·\82é\95K\97v\82ª\82 \82è\82Ü\82·\81B\82Ü\82½\8b@\8aí\8f÷\93n\81E\94p\8aü\82Ì\8dÛ\82É\93o\98^\8fÁ\8b\8e\81A\8b@\8aí\8dX\90V\82Ì\8dÛ\82É\93o\98^\8dX\90V\82ð\8ds\82¤\95K\97v\82ª\82 \82è\82Ü\82·\82ª\81A\97\98\97p\8eÒ\82É\93o\98^\8fÁ\8b\8e\82ð\97ã\8ds\82³\82¹\82é\82Ì\82Í\93ï\82µ\82¢\82Æ\8ev\82í\82ê\82Ü\82·\81B\82±\82ê\82ç\82Ì\89^\97p\8fã\82Ì\96â\91è\93_\82ð\89ð\8c\88\82µ\82È\82¯\82ê\82Î\82È\82è\82Ü\82¹\82ñ\81B\82Ü\82½MAC\83A\83h\83\8c\83X\82Í\83C\81[\83T\83l\83b\83g\90Ú\91±\92[\96\96\82Ì\82Ý\82É\91¶\8dÝ\82·\82é\93_\81A\83\8b\81[\83^\82ð\92´\82¦\82Ä\93`\82í\82ç\82È\82¢\93_\81A\8bU\91\95\82ª\89Â\94\\82Å\82 \82é\93_\82È\82Ç\82à\93ï\93_\82Æ\8c¾\82¦\82Ü\82·\81B
-</BLOCKQUOTE>
-
-<LI>
-\8dÅ\8bß\81A\82³\82Ü\82´\82Ü\82È\83l\83b\83g\83\8f\81[\83N\94F\8fØ\83V\83X\83e\83\80\82ª\94\95\\82³\82ê\82Ä\82¢\82é\82æ\82¤\82Å\82·\82ª\81B
-<BLOCKQUOTE>
-Opengate\82Í\88È\89º\82Ì\93_\82ð\96\9e\82½\82µ\82Ä\82¢\82é\93_\82ª\93Á\92¥\82Æ\8dl\82¦\82Ü\82·\81B\92[\96\96\82É\91Î\82·\82é\83\\83t\83g\81A\83n\81[\83h\81A\90Ý\92u\8c`\91Ô\81A\90Ú\91±\95û\96@\82È\82Ç\82Ì\90§\8cÀ\82ª\8f\82È\82¢\8e\96\81B\97\98\97p\8eÒ\82Ì\8ew\93±\82â\8aÇ\97\9d\82ª\8dÅ\8f¬\8cÀ\82Å\8dÏ\82Þ\8e\96\81B\88ê\94Ê\93I\82È\83\\83t\83g/\83n\81[\83h\82Å\8d\\90¬\82³\82ê\82Ä\82¨\82è\81A\8aù\91¶\83l\83b\83g\83\8f\81[\83N\82Ö\82Ì\93±\93ü\82ª\97e\88Õ\82Å\82 \82é\8e\96\81B\97\98\97p\8aJ\8en/\8fI\97¹\82É\8dÛ\82µ\82Ä\91¦\8dÀ\82É\83l\83b\83g\83\8f\81[\83N\82Ì\8aJ\95ú/\95Â\8d½\82ª\8ds\82í\82ê\82é\8e\96\81B
-</BLOCKQUOTE>
-
-<LI>
-\91¼\82Ì\97p\93r\82É\82Í\97\98\97p\82Å\82«\82Ü\82·\82©\81B
-<BLOCKQUOTE>
-\96{\83V\83X\83e\83\80\82Í\81A\83\86\81[\83UID\82Æ\83p\83X\83\8f\81[\83h\82ðWeb\8co\97R\82Å\8eó\82¯\95t\82¯\81A\82»\82ÌIP\83A\83h\83\8c\83X\82Æ\82Ì\83p\83P\83b\83g\82Ì\92Ê\89ß\82ð\8b\96\89Â\82·\82é\83V\83X\83e\83\80\82Å\82·\81B\82»\82Ì\98g\91g\82Ý\82Ì\8aÂ\8b«\82Å\82 \82ê\82Î\97\98\97p\82Å\82«\82é\82Æ\8ev\82¢\82Ü\82·\81B\97á\82¦\82Î\81A\83G\83N\83X\83g\83\89\83l\83b\83g\82©\82ç\83C\83\93\83g\83\89\83l\83b\83g\82É\91Î\82µ\82Ä\83A\83N\83Z\83X\82·\82é\82½\82ß\82Ì\83o\83C\83p\83X\91\8b\8cû\82ð\90Ý\92u\82·\82é\82±\82Æ\82É\82à\97\98\97p\82Å\82«\82é\82Å\82µ\82å\82¤\81B\93\96\91R\82È\82ª\82ç\8bÉ\82ß\82Ä\8d\82\93x\82È\83Z\83L\83\85\83\8a\83e\83B\83\8c\83x\83\8b\82ð\95K\97v\82Æ\82·\82é\83l\83b\83g\83\8f\81[\83N\82Å\82È\82¢\8fê\8d\87\82Å\82·\82ª\81B
-</BLOCKQUOTE>
-
-<LI>
-Java\82ª\93®\82©\82È\82¢\92[\96\96\82à\82 \82è\82Ü\82·\82ª\81B
-<BLOCKQUOTE>
-Java\82ª\93®\82©\82È\82¢\82à\82µ\82\82Í\83C\83\93\83X\83g\81[\83\8b\82³\82ê\82Ä\82¢\82È\82¢\92[\96\96\82Å\82à\81A\97\98\97p\8eÒ\82ª\94F\8fØ\83y\81[\83W\82É\82¨\82¢\82Ä\97v\8b\81\82µ\82½\90Ú\91±\8cp\91±\8e\9e\8aÔ\82¾\82¯\83l\83b\83g\83\8f\81[\83N\82ð\8aJ\95ú\82µ\82Ü\82·\81B\82½\82¾\82µ\81A\8fæ\82Á\8eæ\82è\82â\95ú\92u\82É\91Î\89\9e\82·\82é\82½\82ß\81A\88ê\92è\8e\9e\8aÔ\8aÔ\8au\82Å\81AARP\83R\83}\83\93\83h\82Æ\83t\83@\83C\83A\83E\83H\81[\83\8b\92Ê\89ß\83p\83P\83b\83g\90\94\82Å\83`\83F\83b\83N\82µ\82Ü\82·\81B\82Ü\82½\81A\8b\96\89Â\83y\81[\83W\82Ì\97\98\97p\92\86\92f\82Ì\83\8a\83\93\83N\82ð\83N\83\8a\83b\83N\82·\82é\82±\82Æ\82Å\83l\83b\83g\83\8f\81[\83N\82ð\95Â\8d½\82Å\82«\82Ü\82·\81B
-</BLOCKQUOTE>
-
-
-</UL>
-
-
-\97\98\97p
-<UL>
-<LI>
-\96³\90üLAN\82Å\8eg\82¦\82Ü\82·\82©\81B
-
-<BLOCKQUOTE>
-\8eg\82¦\82Ü\82·\81B\82½\82¾\82µ\81A\90e\8bÇ\93à\82ÅNAT\93\99\82É\82æ\82éIP\83A\83h\83\8c\83X\95Ï\8a·\82ª\82È\82³\82ê\82Ä\82¢\82È\82¢\82±\82Æ\82ª\95K\97v\82Å\82·\81B
-</BLOCKQUOTE>
-
-<LI>
-DHCP\82âNAT\82Æ\82Ì\8b¤\97p\82Í\82Å\82«\82Ü\82·\82©\81B
-
-<BLOCKQUOTE>
-\82Å\82«\82Ü\82·\81B\82»\82Ì\82æ\82¤\82È\8eg\82¢\95û\82ª\91½\82¢\82Æ\8ev\82¢\82Ü\82·\81B\82½\82¾\82µNAT\82Í\93¯\88ê\83Q\81[\83g\83E\83F\83C\83}\83V\83\93\8fã\82Å\93®\82©\82·\8fê\8d\87\82Å\82·\81B\96{\83Q\81[\83g\83E\83F\83C\82Æ\92[\96\96\8cQ\82Æ\82Ì\8aÔ\82ÉNAT\91\95\92u\82ð\8b²\82Þ\82±\82Æ\82Í\82Å\82«\82Ü\82¹\82ñ\81B\93¯\82¶IP\83A\83h\83\8c\83X\82ð\91½\90l\90\94\82ª\8eg\97p\82·\82é\8c`\82É\82È\82é\82½\82ß\82Å\82·\81B
-</BLOCKQUOTE>
-
-<LI>
-MAC\83A\83h\83\8c\83X\82Í\8eæ\93¾\82Å\82«\82Ü\82·\82©\81B
-<BLOCKQUOTE>
-Ver0.53\82É\82Ä\91Î\89\9e\82µ\82Ü\82µ\82½\81B\82½\82¾\82µ\81A\83T\81[\83o\91¤\82ÅARP\82©\82ç\8eæ\93¾\82·\82é\82½\82ß\81A\83T\81[\83o\91¤\82©\82ç\8c©\82¦\82é\83A\83h\83\8c\83X\82Ì\82Ý\82Å\82·\81B\91ã\97\9dARP\82ª\82 \82é\82Æ\82»\82Ì\92\86\8cp\83A\83h\83\8c\83X\82Æ\82È\82è\82Ü\82·\81B\82Ü\82½\81A\93\96\91R\82È\82ª\82ç\81A\83C\81[\83T\83l\83b\83g\82Å\82Ì\82Ý\97L\8cø\82Å\82·\81B
-</BLOCKQUOTE>
-
-<LI>
-\88ê\95\94\82Ì\83T\81[\83r\83X\82Í\94F\8fØ\96³\82µ\82É\82µ\82½\82¢\82Ì\82Å\82·\82ª\81B\82à\82µ\82\82Í\94F\8fØ\8cã\82à\88ê\95\94\82Ì\83T\81[\83r\83X\82ð\90§\8cÀ\82µ\82½\82¢\82Ì\82Å\82·\82ª\81B
-
-<BLOCKQUOTE>
-\8f\89\8aú\8fó\91Ô\82Ì\83t\83@\83C\83A\83E\83I\81[\83\8b\83\8b\81[\83\8b\82É\95K\97v\82È\82à\82Ì\82ð\92Ç\89Á\82·\82ê\82Î\89Â\94\\82Å\82·\81BOpengate\82Í\82±\82Ì\8f\89\8aú\8fó\91Ô\82É\83\8b\81[\83\8b\82ð\91}\93ü\81E\8dí\8f\9c\82µ\82Ü\82·\81B\82æ\82Á\82Ä\81A\92Ç\89Á\88Ê\92u\82ð\8dH\95v\82·\82ê\82Î\97l\81X\82È\90§\8cä\82ª\89Â\94\\82Å\82·\81B\97á\82¦\82Î\81A\93Á\92è\82Ì\83T\83C\83g\82ð\83A\83N\83Z\83X\8b\96\89Â\82à\82µ\82\82Í\95s\8b\96\89Â\82É\8cÅ\92è\82·\82é\82±\82Æ\82à\82Å\82«\82Ü\82·\81B
-</BLOCKQUOTE>
-
-<LI>
-\97\98\97p\8eÒ\82Ì\83\8c\83x\83\8b\82É\82æ\82Á\82Ä\83T\81[\83r\83X\82ð\90§\8cÀ\82µ\82½\82¢\82Ì\82Å\82·\82ª\81B
-
-<BLOCKQUOTE>
-Firewall\90§\8cä\82ÉPerl\83X\83N\83\8a\83v\83g\82ª\97\98\97p\82Å\82«\82Ü\82·\81B\83\86\81[\83U\96¼\82â\94F\8fØ\83T\81[\83o\81AIP\83A\83h\83\8c\83X\82È\82Ç\82Å\8bæ\95Ê\82Å\82«\82é\82È\82ç\82Î\81A\83X\83N\83\8a\83v\83g\92\86\82É\8bL\8fq\89Â\94\\82Å\82·\81BVer.0.80\82Å\91Î\89\9e\82µ\82Ü\82µ\82½\81B
-</BLOCKQUOTE>
-
-<LI>
-\88ê\8e\9e\93I\97\98\97p\8eÒ\82Ö\82Ì\91Î\89\9e\82Í\82Ç\82¤\82µ\82Ü\82·\82©\81B
-
-<BLOCKQUOTE>
-\94F\8fØ\83T\81[\83o\82Ö\82Ì\88ê\8e\9e\93I\82È\97\98\97p\8eÒ\93o\98^\82ª\95K\97v\82Å\82·\81BOpengate\82Í\81A\95¡\90\94\82Ì\94F\8fØ\83T\81[\83o\82É\83\86\81[\83U\82ð\90U\82è\95ª\82¯\82é\82æ\82¤\82É\8ew\92è\82Å\82«\82Ü\82·\82Ì\82Å\81A\95Ê\93r\82É\88ê\8e\9e\97\98\97p\8eÒ\82Ì\82½\82ß\82Ì\94F\8fØ\83T\81[\83o\82ð\90Ý\92u\82·\82é\82±\82Æ\82à\82Å\82«\82Ü\82·\81Bftp\83T\81[\83o\82ª\93®\82¯\82Î\97Ç\82¢\82Ì\82ÅWindows\82È\82Ç\82Ì\8aÈ\88Õ\83T\81[\83o\82Å\82à\89Â\94\\82Æ\8dl\82¦\82Ü\82·\81B
-<BR>
-\93\96\91å\8aw\82Å\82Í\81A\8c»\8dÝ\82Ì\82Æ\82±\82ë\81A\90}\8f\91\8aÙ\8aO\95\94\97\98\97p\8eÒ\82â\8aw\89ï\8eQ\89Á\8eÒ\82È\82Ç\82Ì\88ê\8e\9e\93I\97\98\97p\8eÒ\82É\91Î\82µ\82Ä\88È\89º\82Ì\89^\97p\82ð\8ds\82Á\82Ä\82¢\82Ü\82·\81B\88ê\8e\9e\97\98\97p\8eÒ\97p\82Ì\94F\8fØ\83T\81[\83o\82ð\97p\88Ó\82·\82é\81B\95K\97v\90\94\82Ì\97\98\97p\8eÒID\82ð\97\98\97p\8aú\8cÀ\95t\82«\82Å\93o\98^\82µ\81A\93¯\8e\9e\82É\97\98\97p\8eÒID\82Æ\83p\83X\83\8f\81[\83h\82¨\82æ\82Ñ\97\98\97p\8fã\82Ì\92\8d\88Ó\82ð\8f\91\82¢\82½\97p\8e\86\82ð\97\98\97p\8eÒID\96\88\82É\88ó\8dü\82·\82é\81B\97\98\97p\8aó\96]\8eÒ\82ª\97\88\96K\82·\82ê\82Î\81A\90g\8c³\82ð\8am\94F\82µ\82Ä\97p\8e\86\82ð1\96\87\93n\82·\81B\93\96\91R\82È\82ª\82ç\96{\97\98\97p\8eÒID\82Í\8aw\93à\82Ì\83T\81[\83o\82Ö\82Ì\83\8d\83O\83C\83\93\93\99\82É\82Í\97\98\97p\82Å\82«\82Ü\82¹\82ñ\81B
-</BLOCKQUOTE>
-
-<LI>
-\83p\83X\83\8f\81[\83h\82Ì\8eç\94é\82Í\95Û\82Ä\82Ü\82·\82©\81B
-
-<BLOCKQUOTE>
-\92[\96\96\82Æ\83Q\81[\83g\83E\83F\83C\8aÔ\82ÍWeb\92Ê\90M\82Å\83p\83X\83\8f\81[\83h\82ð\91\97\82è\82Ü\82·\81B\82æ\82Á\82ÄWeb\83T\81[\83o\82ðSSL\89»\82·\82ê\82Î\8eç\94é\82ª\95Û\82Ä\82Ü\82·\81B\83Q\81[\83g\83E\83F\83C\82Æ\94F\8fØ\83T\81[\83o\82Ì\8aÔ\82Í\81A\8eç\94é\8b@\94\\82Ì\82 \82é\94F\8fØ\83v\83\8d\83g\83R\83\8b\82É\82æ\82ê\82Î\89Â\94\\82Å\82·\81BOpengate\82Í\81Apop3s,Radius,PAM\82É\91Î\89\9e\82µ\82Ä\82¢\82Ü\82·\81BPAM\82Í\91½\82\82Ì\94F\8fØ\83v\83\8d\83g\83R\83\8b\82ð\83T\83|\81[\83g\82µ\82Ü\82·\81B
-</BLOCKQUOTE>
-
-<LI>
-\83X\83P\81[\83\89\83r\83\8a\83e\83B\82Í\82Ç\82¤\82Å\82·\82©\81B\83p\83t\83H\81[\83}\83\93\83X\82Í\82Ç\82¤\82Å\82·\82©\81B
-
-<BLOCKQUOTE>
-\90\94\8f\\91ä\82Ì\8eg\97p\82Å\82Í\96â\91è\96³\82\8eg\82¦\82Ä\82¢\82Ü\82·\81B\83N\83\89\83XC\92ö\93x\82Ì\97\98\97p\82Í\82Å\82«\82é\82Æ\8ev\82¢\82Ü\82·\81B\96{\83V\83X\83e\83\80\82Í\81A\83t\83@\83C\83A\83E\83I\81[\83\8b\83\\83t\83g\82Ì\83p\83P\83b\83g\83t\83B\83\8b\83^\83\8a\83\93\83O\8bK\91¥\82ð\92Ç\89Á\81E\8dí\8f\9c\82·\82é\95û\8e®\82Å\82 \82è\81A\8ae\83N\83\89\83C\83A\83\93\83g\82©\82ç\82Ì\97\98\97p\8aJ\8en\97v\8b\81\8e\9e\82ð\95Ê\82É\82·\82ê\82Î\96w\82Ç\95\89\89×\82Æ\82È\82è\82Ü\82¹\82ñ\81B\97\98\97p\92\86\82Ì\83p\83t\83H\81[\83}\83\93\83X\82Í\81A\83p\83P\83b\83g\83t\83B\83\8b\83^\83\8a\83\93\83O\82â\83p\83P\83b\83g\93]\91\97\82Ì\8f\88\97\9d\94\\97Í\82É\88Ë\91¶\82·\82é\82Æ\8ev\82¢\82Ü\82·\81B\82È\82¨\97Ê\93I\82È\90§\8cÀ\82Æ\82µ\82Ä\82Í\81A\97\98\97p\83N\83\89\83C\83A\83\93\83g\96\88\82É\82P\83v\83\8d\83Z\83X\82ª\8fí\92\93\82·\82é\82±\82Æ\82ª\82 \82è\82Ü\82·\81B\82µ\82©\82µ\83v\83\8d\83Z\83X\90\94\82Ì\8dÅ\91å\92l\82Í\83J\81[\83l\83\8b\82Å\92²\90®\82Å\82«\82Ü\82·\82µ\81A\83N\83\89\83XC\92ö\93x\96\88\82É\95ª\8a\84\82µ\82Ä\83V\83X\83e\83\80\89^\97p\82·\82é\95û\82ª\83Q\81[\83g\83E\83F\83C\82É\82¨\82¯\82é\83p\83P\83b\83g\83t\83B\83\8b\83^\83\8a\83\93\83O\93\99\82Ì\94\\97Í\82©\82ç\82·\82é\82Æ\8c»\8eÀ\93I\82Å\82µ\82å\82¤\81B
-</BLOCKQUOTE>
-
-</UL>
-\93±\93ü\81E\8aJ\94
-<UL>
-<LI>
-\83C\83\93\83X\83g\81[\83\8b\82µ\82½\82ª\93®\82«\82Ü\82¹\82ñ\81B
-
-<BLOCKQUOTE>
-\91½\90\94\82Ì\83\\83t\83g\83E\83F\83A\82Ì\92\87\89î\82ð\82·\82é\83V\83X\83e\83\80\82Å\82·\82Ì\82Å\83f\83o\83b\83O\82Í\96Ê\93|\82¾\82Æ\8ev\82¢\82Ü\82·\81B\95Ê\93r\82É\97p\88Ó\82µ\82½\83`\83F\83b\83N\8d\80\96Ú\8bL\8fq\82Ì\83t\83@\83C\83\8b\82ð\8c©\82Ä\82\82¾\82³\82¢\81B
-</BLOCKQUOTE>
-
-<LI>
-\97\98\97p\81E\89ü\95Ï\81E\94z\95z\82Í\89Â\94\\82Å\82·\82©\81B
-
-<BLOCKQUOTE>
-GPL\89º\82Å\89Â\94\\82Å\82·\81B\8d¡\8cã\82Ì\8aJ\94\82Ì\82½\82ß\82É\81A\8aJ\94\8eÒ\82Ü\82Å\98A\97\8d\92¸\82¯\82ê\82Î\8dK\82¢\82Å\82·\81B\83o\83O\81E\97v\96]\81E\89ü\95Ï\95ñ\8d\90\82ð\8a½\8c}\82µ\82Ü\82·\81B
-</BLOCKQUOTE>
-
-<LI>
-\94F\8fØWeb\83y\81[\83W\82Ì\83f\83U\83C\83\93\82ð\95Ï\82¦\82½\82¢\82Ì\82Å\82·\82ª\81B
-
-<BLOCKQUOTE>
-\8aeWeb\83y\81[\83W\82ÍHTML\83t\83@\83C\83\8b\82Æ\82µ\82Ä\93Æ\97§\82µ\82Ä\82¢\82Ü\82·\81B\82±\82ê\82ð\8f\91\82«\82©\82¦\82é\82±\82Æ\82Å\8aÈ\92P\82É\82Å\82«\82Ü\82·\81B
-</BLOCKQUOTE>
-
-
-<LI>
-IP\83A\83h\83\8c\83X\82É\82æ\82è\91\8a\8eè\82ð\8am\94F\82µ\82Ä\82¢\82é\82æ\82¤\82Å\82·\82ª\81AIP\83X\83v\81[\83t\83B\83\93\83O\82Í\96â\91è\82Å\82Í\82È\82¢\82Å\82·\82©\81B\82Ü\82½\83T\81[\83r\83X\96W\8aQ\8dU\8c\82\82É\82Í\91Î\89\9e\82Å\82«\82Ü\82·\82©\81B\82»\82Ì\91¼\82Ì\83A\83^\83b\83N\82É\91Î\82µ\82Ä\82Í\82Ç\82¤\82Å\82·\82©\81B
-
-<BLOCKQUOTE>
-IP\83X\83v\81[\83t\83B\83\93\83O\82Í\83t\83@\83C\83A\83E\83I\81[\83\8b\82Ì\95û\82Ì\90Ý\92è\82Å\94ð\82¯\82ç\82ê\82é\82Æ\8ev\82¢\82Ü\82·\81B\82Ü\82½Opengate\82Í\81A\90³\82µ\82¢\83p\83X\83\8f\81[\83h\82ð\91\97\82Á\82Ä\82«\82½\83A\83h\83\8c\83X\82É\91Î\82µ\82Ä\8c\8a\82ð\8aJ\82¯\82é\82Ì\82Å\81AIP\83A\83h\83\8c\83X\82ð\8bU\82Á\82Ä\82à\82 \82Ü\82è\93¾\82É\82Í\82È\82è\82Ü\82¹\82ñ\81B\91¼\82ª\94F\8fØ\82ð\8eó\82¯\82Ä\8eg\82Á\82Ä\82¢\82é\93¯\82¶IP\83A\83h\83\8c\83X\82ð\8d¼\8fÌ\82µ\82Ä\83p\83P\83b\83g\82ð\97¬\82·\82±\82Æ\82Í\89Â\94\\82Å\82µ\82å\82¤\82ª\81A\8c»\8eÀ\93I\82È\97\98\97p\82Í\93ï\82µ\82¢\82Æ\8ev\82Á\82Ä\82¢\82Ü\82·\81B\83T\81[\83r\83X\96W\8aQ\82É\82Â\82¢\82Ä\82Í\81A\8aeIP\83A\83h\83\8c\83X\82É\91Î\82µ\82Ä\93Æ\8e©\82Ì\83|\81[\83g\94Ô\8d\86\82ð\88ê\82Â\91\97\82è\82Â\82¯\8cð\90M\82·\82é\8c`\91Ô\82Å\82·\82Ì\82Å\94ð\82¯\82ç\82ê\82é\82Æ\8ev\82¢\82Ü\82·\81B\96W\8aQ\82ð\8a®\91S\82É\8f\9c\8b\8e\82·\82é\82±\82Æ\82Í\93ï\82µ\82¢\82Å\82·\82ª\81A\83Z\83L\83\85\83\8a\83e\83B\83z\81[\83\8b\82ª\82 \82ê\82Î\82²\8b³\8e¦\89º\82³\82¢\81B\88«\88Ó\82ð\8e\9d\82Á\82½\97\98\97p\82É\91Î\82µ\82Ä\82Í\81A\91Î\8dô\82Æ\82µ\82Ä\8dl\82¦\82ç\82ê\82Ä\82¢\82é\8b@\94\\82È\82Ç\82ð\91g\82Ý\8d\87\82í\82¹\82é\82±\82Æ\82à\89Â\94\\82Å\82 \82ë\82¤\82Æ\8ev\82¢\82Ü\82·\81B
-</BLOCKQUOTE>
-
-<LI>
-\83_\83E\83\93\83\8d\81[\83h\83t\83@\83C\83\8b\82Ì\92\86\90g\82ª\97\90\8eG\82È\82Ü\82Ü\82Å\82·\82ª\81B
-
-<BLOCKQUOTE>
-\93Á\82É\90®\97\9d\82¹\82¸\82É\81A\93®\82\82æ\82¤\82É\82È\82Á\82½\8fó\91Ô\82ð\95Û\91¶\82µ\82Ä\82¢\82Ü\82·\81B\96µ\8f\82\82à\82 \82é\82Æ\8ev\82¢\82Ü\82·\81B\82«\82ê\82¢\82É\90®\97\9d\82µ\82Ä\8fo\82µ\82½\82¢\82Ì\82Å\82·\82ª\97]\97T\82ª\96³\82\82Ä\8dÏ\82Ý\82Ü\82¹\82ñ\81B
-</BLOCKQUOTE>
-
-<LI>
-\83T\81[\83o\82ÍFreeBSD\88È\8aO\82Å\93®\82«\82Ü\82·\82©\81B
-
-<BLOCKQUOTE>
-\8c»\8fó\82Å\82Í\81AFreeBSD\90ê\97p\82Ì\83t\83@\83C\83A\83E\83I\81[\83\8b\83c\81[\83\8bipfw\82ð\97\98\97p\82µ\82Ä\82¢\82é\82Ì\82Å\81A\91¼\82ÌOS\82Å\82Í\93®\82«\82Ü\82¹\82ñ\81B\93¯\93\99\82Ì\8b@\94\\82ð\8e\9d\82Â\83t\83@\83C\83A\83E\83I\81[\83\8b\83c\81[\83\8b\82ª\82 \82ê\82Î\81A\91Î\89\9e\82·\82é\82æ\82¤\82É\8f\91\82«\82©\82¦\82é\82±\82Æ\82Í\89Â\94\\82Å\82·\81B\97á\82¦\82ÎLinux\82Ìipchains\82É\8f\91\82«\8a·\82¦\82é\82±\82Æ\82Í\89Â\94\\82Å\82·\81B
-</BLOCKQUOTE>
-
-<LI>
-\92[\96\96\96\88\82É\83v\83\8d\83Z\83X\82ª\90¶\90¬\82³\82ê\82Ä\91å\97Ê\82É\8fí\92\93\82µ\8bC\8e\9d\82¿\97Ç\82\82 \82è\82Ü\82¹\82ñ\81B\88ê\82Â\82É\82Ü\82Æ\82Ü\82è\82Ü\82¹\82ñ\82©\81B
-
-<BLOCKQUOTE>
-\83A\83\8b\83S\83\8a\83Y\83\80\82ð\8aÈ\92P\82É\82·\82é\82½\82ß\82É\8d¡\82Ì\95û\8e®\82ð\8eæ\82è\82Ü\82µ\82½\81B\8aÄ\8e\8b\83v\83\8d\83Z\83X\82ð\88ê\82Â\82É\82Ü\82Æ\82ß\82é\82±\82Æ\82à\89Â\94\\82Å\82µ\82å\82¤\82ª\81A\91½\90\94\82Ì\8e\9e\8aÔ\91Ò\82¿\82Æ\83A\83N\83Z\83X\91Ò\82¿\82ð\90§\8cä\82·\82é\82Ì\82Í\81A\83T\81[\83r\83X\96W\8aQ\82»\82Ì\91¼\82Ì\8dl\97¶\93_\82à\82 \82è\81A\82©\82È\82è\96Ê\93|\82Å\82·\81B\8aO\95\94\8fð\8c\8f\82ð\8a¨\88Ä\82·\82é\82Æ\88ê\82Â\82É\82Ü\82Æ\82ß\82é\8bÙ\8b}\93x\82ª\92á\82¢\82Æ\8dl\82¦\82Ä\8cã\89ñ\82µ\82É\82µ\82Ä\82¢\82Ü\82·\81B
-</BLOCKQUOTE>
-
-<LI>
-IPv6\82É\91Î\89\9e\82Å\82«\82Ü\82·\82©\81B
-
-<BLOCKQUOTE>
-ipfw\82Æ\82Æ\82à\82Éip6fw\82ð\90§\8cä\82·\82é\82æ\82¤\82É\82·\82ê\82Î\89Â\94\\82Å\82µ\82å\82¤\81B\82µ\82©\82µ\81AIpv4/IPv6\83f\83\85\83A\83\8b\83X\83^\83b\83N\82É\82¨\82¢\82Ä\81A\97v\8b\81\92[\96\96\82Ì\95¡\90\94IP\83A\83h\83\8c\83X\82ð\81A\91S\82Ä\94c\88¬\82µ\82Ä\93¯\8e\9e\82É\8aJ\95ú/\95Â\8d½\82·\82é\8e\96\82Í\97e\88Õ\82Å\82Í\82È\82¢\82½\82ß\81A\8c»\8fó\82Å\82Í\8eÀ\91\95\82µ\82Ä\82¢\82Ü\82¹\82ñ\81B\8c»\83v\83\8d\83O\83\89\83\80\82É\82¨\82¢\82Ä\82Í\81A\8fð\8c\8f\95t\82Å\82·\82ª\88È\89º\82Ì\95û\96@\82Å\8eÀ\8c»\82Å\82«\82Ü\82·\81B\83t\83@\83C\83A\83E\83H\81[\83\8b\90§\8cä\83X\83N\83\8a\83v\83gopengatefw.pl\82É\82¨\82¢\82Ä\81A\97v\8b\81\92[\96\96\82ÌMAC\83A\83h\83\8c\83X\82ð\91\97\90M\8c³\82Ü\82½\82Í\91\97\90M\90æ\82Æ\82·\82éIPv6\83p\83P\83b\83g\82ð\8b\96\89Â\82·\82éipfw\83R\83}\83\93\83h\82ð\92Ç\89Á\82µ\82Ä\82\82¾\82³\82¢\81B\82½\82¾\82µ\81A\83C\81[\83T\83l\83b\83g\82Ì\93¯\88ê\83\8a\83\93\83N\93à\82É\92[\96\96\82ª\82 \82é\8fê\8d\87\82É\8cÀ\92è\82³\82ê\82Ü\82·\81B
-</BLOCKQUOTE>
-
-</UL>
-</BODY>
-</HTML>
+++ /dev/null
-#!/usr/bin/perl
-#This is a script to remove superfluous rules left bihind at the abnormal termination of opengate process.
-
-#get opengate process information from 'ps x' output
-# and save it to $proc table.
-
-open(pspipe, "ps x|");
-while(<pspipe>){
- if(/opengatesrv.cgi: (.*),(.*),/){
- $rule=$1; $user=$2;
- $proc{$rule}=$user;
- }
-}
-close(pspipe);
-
-
-#get firewall rules from 'ipfw list' output,
-# and delete the superfluous rules that are not included in $proc table.
-
-open(ipfwpipe, "ipfw list|");
-$delcount=0;
-$rule=0;
-while(<ipfwpipe>){
- if(/^(\d*) allow/){
- $rulesave=$rule;
- $rule=$1;
- if($rule>=10000 and $rule<=40000 and $rule!=$rulesave){
- if(!defined($proc{$rule})){
- system "ipfw del $rule";
- $delcount++;
- }
- }
- }
-}
-close(ipfwpipe);
-
-print $delcount." rules are deleted.\n";
-
-
-
OSDN Git Service
