This archive contains OPENGATE sources & documentations
-Copyright (C) 1999-2005 Yoshiaki Watanabe
- Modfied 2005 Katsuhiko Eguchi
+Copyright (C) 1999-2006 Opengate Project Team
+ Written by Yoshiaki Watanabe
+ Modfied by Katsuhiko Eguchi
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
-----------------------------------------------------
-install documentation is in doc/install_en.txt
- doc/install_ja.txt
+install documentation is in doc
-----------------------------------------------------
Content of this archive
doc/ Documentation files
Changes.html Change log
GPL.txt GNU General Public License
- install_ja.html Instruction of installation(Japanese)
- install_en.html Instruction of installation
- qa.html Questions and answers(Japanese)
- qa-e.html Questions and answers
- errcheck.html Error checking list(Japanese)
- errcheck-e.html Error checking list
progflow.html Program flow
+ en/ & ja/ documentation for each language
+ install_XX.html Instruction for installation
+ qa.html Questions and answers
+ errcheck.html Error checking list
+
javahtml/ Client Java Applet and HTML files
Opengate.class Java Applet main executable file
Opengate.jar Java Applet archive file
Opengate.java Java Applet source file
OpengateClient.class Java Applet sub executable file
- en/ HTML files in English
- accept.html First accept message page(for Applet)
- accept2.html Second accept message page(for potal)
- deny.html Deny message page
- deny-ssl.html Deny message page(in SSL)
- index-ssl.html Authentication request page(in SSL)
- index.html Authentication request page
- topindex.html Top page displayed at firewall forward
-
- ja/ HTML files in Japanese
+ en/ & ja/ HTML files for each language
accept.html First accept message page(for Applet)
accept2.html Second accept message page(for potal)
deny.html Deny message page
opengatesrv/ Opengate server program source files
Makefile make file
+ auth-ftps.c Authentication by FTPS
auth-pam.c Authentication by PAM
auth-pop3s.c Authentication by POP3S
auth-rad.c Authentication by RADIUS
<HTML>
-<BODY>
-<body bgcolor=#BBEECC>
+<body bgcolor=#fafff0>
<H3>Opengate History</H3>
<title>Opengate Error Check</title>
</head>
-<BODY>
-<body bgcolor=#BBEECC>
+<body bgcolor=#fafff0>
<H3>Opengate Error Check</H3>
<P>
-As opengate interacts with many software, it is diffcult to recognize the behavior. Then this memo is prepared to assist debug.
+As opengate interacts with many software, it is diffcult
+to recognize
+the behavior. Then this memo is prepared to assist debug. At now, this document describes for the system in version 1.1.x.
<P>
When error occured, check the stand alone action of each related software. Especially setting of ipfw is difficult and affects to many sides. At first, debug with ipfw fully open state. Then close it little by little.
<P>
Opengate uses following files, where the directorys are default. Is these files correctly settled.
-<PRE>
- /usr/local/www/cgi-bin/opengate/opengatesrv.cgi
+<PRE> /usr/local/www/cgi-bin/opengate/opengatesrv.cgi
/usr/local/www/data/index.html.*
/usr/local/www/data/opengate/Opengate.class
/usr/local/www/data/opengate/OpengateClient.class
And Opengate creates a lock file [/tmp/opengate.lock] at execution.
It can be removed.
<P>
-Please understand the basic flow of the system by reading <A HREF=progflow.html>the description of system flow</A>.
+Please understand the basic flow of the system by reading <A href="../progflow.html" >the description of system flow</A>.
<P>
Test programs are prepared as opengatesrv/test-*.
<P>
<LI>Japanese characters in html and java files cannot be understood.
<P>
<UL>
-<LI>Html sample files in English are saved in sub directory. Java messages are described in program comments.
+<LI>Html sample files in English are saved in sub
+ directory. Java messages are described in program comments.</LI>
</UL>
-<P>
+<P></P>
<LI>Compiler tells the lack of librarys or headers.
<P>
<UL>
-<LI>Opengate after Ver.0.56 can be compiled on FreeBSD Ver.4.1.
+<LI>Opengate after Ver.0.56 can be compiled on FreeBSD
+ Ver.4.1.</LI>
</UL>
-<P>
+<P></P>
<LI>Cannot redirect web access to gateway machine.
<P>
<LI>If error occurs only when accessing sub page(not top page), [PageNotFound] setting in Apache httpd.conf may not be correct.
-<LI> In Microsoft Internet Explorer 5 or later, redirection to a page at [PageNotFound] cannot be done, when the size of the page is less than 512Bytes. Try to increase the size of the top page file larger than 512Bytes by adding space chacters. Reference <a href=http://support.microsoft.com/default.aspx?scid=kb;EN-US;q218155>http://support.microsoft.com/default.aspx?scid=kb;EN-US;q218155</a>.
+<LI> In Microsoft Internet Explorer 5 or later, redirection to a page at [PageNotFound] cannot be done, when the size of the page is less than 512Bytes. Try to increase the size of the top page file larger than 512Bytes by adding space chacters. Reference <a href="http://support.microsoft.com/default.aspx?scid=kb;EN-US;q218155"
+ >http://support.microsoft.com/default.aspx?scid=kb;EN-US;q218155</a>.
<LI>Does the web access pass through the gateway? Only the packet passing through the gateway is redirected.
<LI>Try to access by IP address. If domain name is not recognized, check the DNS setting.
-<LI>The top page cannot be settled under SSL.
+<LI>The top page cannot be settled under SSL.</LI>
</UL>
-<P>
+<P></P>
<LI>Cannot jump to authentication page.
<P>
<LI>Try non SSL setting. If success, check about SSL.
-<LI>URL in authentication page must be described with full/absolute pass.
+<LI>URL in authentication page must be described with
+ full/absolute pass.</LI>
</UL>
-<P>
+<P></P>
<LI>No reply or error reply to posting userID and password.
<P>
<UL>
<LI>Check the directory of Java Applet. Does it recognized by web server? Does the Java Applet run normally.
-<LI>Change the host description in [opengatesrv.conf] from domain name to IP address. If success, an error may occur in the name resolution.
+<LI>Change the host description in [opengatesrv.conf]
+ from domain name to IP address. If success, an error may occur in the name
+ resolution.</LI>
</UL>
-<P>
+<P></P>
<LI>Access is rejected, even though I send correct password.
<P>
<UL>
<LI>Opengate assumes that the welcome message of FTP server is only one line. If the server puts out multiple lines, change the server setting or the routine in opengatesrv. Opengate(Ver.0.90l) is modeified to communicate such servers.
-<LI>If the client is already opened, the request form same client is rejected. Check the firewall state by accessing outside. At mulfunction of JavaApplet, the server side program waits for Java Applet connection, and closes firewall after fixed duration.
+<LI>If the client is already opened, the request form
+ same client is rejected. Check the firewall state by accessing outside. At
+ mulfunction of JavaApplet, the server side program waits for Java Applet
+ connection, and closes firewall after fixed duration.</LI>
</UL>
-<P>
+<P></P>
<LI>The accept page is displayed and the network is opened. But the network is closed after a while.
<P>
<UL>
<LI> Check above notes relating Java. Check network state with [netstat] or other tools. Check message displayed on web browser.
-<LI>If address translation system such as NAT or Proxy is inserted between the terminal and the gateway, opengate cannot work normally.
+<LI>If address translation system such as NAT or Proxy
+ is inserted between the terminal and the gateway, opengate cannot work
+ normally.</LI>
</UL>
-<P>
+<P></P>
<LI>Accept page may be not normal.
<P>
<UL>
<LI>In normal state, 2pages are displayed. In the first page, java Applet layouts yellow frame and shows user ID. In the second page, some links and cautions are displayed.
<LI>If the yellow frame is not shown, Java Applet might not work normally. Check the items above.
-<LI>Second page is started by JavaScript. Check the javaScript setting at mulfunction. The second page exists only for convenience and is not needed for network control. If the window.open is denied only by Internet Explorer, the setting of the browser might corrupt. Reffer <A HREF=http://support.microsoft.com/support/kb/articles/q180/1/76.asp> http://support.microsoft.com/support/kb/articles/q180/1/76.asp </A> It is occured in IE6 also.
+<LI>Second page is started by JavaScript. Check the javaScript setting at mulfunction. The second page exists only for convenience and is not needed for network control. If the window.open is denied only by Internet Explorer, the setting of the browser might corrupt. Reffer <A HREF="http://support.microsoft.com/support/kb/articles/q180/1/76.asp"
+ > http://support.microsoft.com/support/kb/articles/q180/1/76.asp </A>It is occured in IE6 also.</LI>
</UL>
-<P>
+<P></P>
<LI>The network is opened without authentication.
<P>
<UL>
<LI>When the network is cut off or the terminal system is suddenly terminated, TCP close signal cannot be sent to gateway. Thus detection is delayed until next message exchange.
-<LI>When ipfw rule is failed to be removed, permanently open state is occured. In such case, remove the rule manually or reboot the system. After Ver.0.90e, a <A HREF=rulechk.txt>script</A> can remove the rules failed to remove at terminating the process.
+<LI>When ipfw rule is failed to be removed, permanently
+ open state is occured. In such case, remove the rule manually or reboot the
+ system. After Ver.0.90e, a script(tools/rulechk) can remove the rules failed
+ to remove at terminating the process. Set this as cron.</LI>
</UL>
-<P>
+<P></P>
<LI>Accept page is displayed, but the network is closed.
<P>
<LI>Check [/var/log/opengate.log].
-<LI>If redirect page does not include [NoCache] setting, the cached page is loaded responding to the another access. For example, if yahoo access is redirected to the opengate page, another yahoo access loads the cached opengate page, even if the network is opened.
+<LI>If redirect page does not include [NoCache]
+ setting, the cached page is loaded responding to the another access. For
+ example, if yahoo access is redirected to the opengate page, another yahoo
+ access loads the cached opengate page, even if the network is opened.</LI>
</UL>
-<P>
+<P></P>
<LI>I sent correct password, but denied.
<P>
<UL>
<LI>Check the authentication server by sending request from console.
<LI>Check the description in opengatesrv.conf, radius.conf and pam.conf.
-<LI>Check [/var/log/opengate.log].
+<LI>Check [/var/log/opengate.log].</LI>
</UL>
-<P>
+<P></P>
<LI>Displayed page is not my desired language.
<P>
<UL>
<LI>Check index.html, its directory and Makefile. These language IDs must be same The ID is case sensitive and is two bytes length.
-<LI>If you want to add new language, add new directory and files. Then add its ID in makefile.
+<LI>If you want to add new language, add new directory
+ and files. Then add its ID in makefile.</LI>
</UL>
-<P>
+<P></P>
<LI>Network troubles increased after the installation of this soft.
<P>
<UL>
Please use latter versions. Do not use before Ver.0.54 which includes a serious bug.
</UL>
-<P>
+<P></P>
<LI>Sometimes, there are very long response time (60sec or more) for authentication request.
<P>
<UL>
Please discover the part waisting long time. We experienced following case. The setting "HostnameLookups" in httpd.conf is "On", and DNS servers do not have sufficient informations about clients. Then, very long time is wasted in name lookup. The trouble is canceled by setting the above switch "Off".
</UL>
-<P>
+<P></P>
<LI>All is checked. I cannot know what to do.
<P>
<UL>
<LI>Set [#define DEBUG 1] in [opengatesrv.h]. Program tracing is put out in syslog.
<LI>Insert [err_msg()] in proper place in the program to get debug print. The function put out message to syslog. The sample usage exists in the program. Format is same as [printf()].
-<P>
-</UL>
+<P></P></LI>
+</UL></LI>
</UL>
-</BODY>
+</body>
</HTML>
<UL>\r
<LI>Modify /etc/rc.conf\r
<PRE>\r
-gateway_enable="YES" <==If NATD is not used\r
+gateway_enable="YES" <==If NATD is not used\r
firewall_enable="YES"\r
firewall_type="simple"\r
-natd_enable="YES" <==If NATD is used\r
-natd_interface="fxp0" <== ", the name must be matched to your interface.\r
+natd_enable="YES" <==If NATD is used\r
+natd_interface="fxp0" <== the name must be matched to your interface.\r
</PRE>\r
\r
<LI>Modify /etc/rc.firewall\r
By using ipfw command, add / delete the pass rules for a client(xx.xx.xx.xx) and check the network open / close for the client. \r
\r
<PRE>\r
- ipfw add 10000 allow ip from xx.xx.xx.xx to any <===Open outgoing\r
- ipfw add 10000 allow ip from any to xx.xx.xx.xx <===Open incoming\r
+ ipfw add 10000 allow ip from xx.xx.xx.xx to any <===Open outgoing\r
+ ipfw add 10000 allow ip from any to xx.xx.xx.xx <===Open incoming\r
\r
- ipfw del 10000 <===Close\r
+ ipfw del 10000 <===Close\r
</PRE>\r
Be falimiar with ipfw command. \r
Opengate is a software to send out the ipfw command like above one.\r
-<html>
-<head>
-<title>Opegnate Install</title>
-<meta http-equiv="content-type" content="text/html">
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">
-</head>
-
-<body bgcolor="#BBEECC">
-
-<h2>Opengate Install Procedure<a name="top" href="#top" class="anchor">†</a></h2>
-
-<!-- Start:Content Table -->
-<ul>
- <li class="list_alpha"><a href="#opengate0">Opengate Install Procedure</a></li>
- <ul>
- <li class="list_num"><a href="#opengate1">Install Procedure</a></li>
- <li class="list_num"><a href="#opengate2">Install FreeBSD</a></li>
- <li class="list_num"><a href="#opengate3">Install Opengate</a></li>
- </ul>
- <li class="list_alpha"><a href="#ipfw0">Setup ipfw,ip6fw</a></li>
- <ul>
- <li class="list_num"><a href="#ipfw1">Prepare Kernel</a></li>
- <li class="list_num"><a href="#ipfw2">Setup ipfw</a></li>
- <li class="list_num"><a href="#ipfw3">Setup ip6fw</a></li>
- </ul>
- <li class="list_alpha"><a href="#apache0">Install Apache2</a></li>
- <ul>
- <li class="list_num"><a href="#apache1">Install (ports)</a></li>
- <li class="list_num"><a href="#apache2">Install (source)</a></li>
- <li class="list_num"><a href="#apache3">Make ricate key, Certificate</a></li>
- <li class="list_num"><a href="#apache4">Setup VirtualHost</a></li>
- <li class="list_num"><a href="#apache5">Setup HTTP_ERROR 404</a></li>
- </ul>
- <li class="list_alpha"><a href="#dhcp0">Install isc-dhcp3</a></li>
- <ul>
- <li class="list_num"><a href="#dhcp1">Install (ports)</a></li>
- <li class="list_num"><a href="#dhcp2">Setup dhcpd.conf</a></li>
- </ul>
- <li class="list_alpha"><a href="#bind0">Install BIND9</a></li>
- <ul>
- <li class="list_num"><a href="#bind1">Install (ports)</a></li>
- <li class="list_num"><a href="#bind2">Make RNDC key</a></li>
- <li class="list_num"><a href="#bind3">Setup named.conf</a></li>
- <li class="list_num"><a href="#bind4">Setup Zone</a></li>
- <li class="list_num"><a href="#bind5">Start confirmation</a></li>
- </ul>
- <li class="list_alpha"><a href="#mrtg0">Install MRTG</a></li>
- <ul>
- <li class="list_num"><a href="#mrtg1">Install (ports)</a></li>
- <li class="list_num"><a href="#mrtg2">Setup MRTG</a></li>
- <li class="list_num"><a href="#mrtg3">Start confirmation</a></li>
- <li class="list_num"><a href="#mrtg4">Setup crontab</a></li>
- </ul>
-</ul>
-
-<!-- End:Content Table -->
-<hr>
-
-<!-- Start:Install Opengate -->
-<h3>A Install Opegnate<a name="opengate0" href="#opengate0" class="anchor">†</a></h3>
-<ul>
- <li class="list_num"><a href="#opengate1">Install Procedure</a></li>
- <li class="list_num"><a href="#opengate2">Install FreeBSD</a></li>
- <li class="list_num"><a href="#opengate3">Install Opengate</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>A.1 Install Procedure<a name="opengate1" href="#opengate1" class="anchor">†</a></h4>
-
-<p>List of Install Procedure.(*:Necessary by all means)</p>
-
-<ul>
- <li class="list_num">Gateway Machine *</li>
- <li class="list_num">Install FreeBSD *</li>
- <li class="list_num">Prepare kernel *</li>
- <li class="list_num">Setup ipfw,ip6fw *</li>
- <li class="list_num">Setup NAT</li>
- <li class="list_num">Install Apache2 *</li>
- <li class="list_num">Install DHCP</li>
- <li class="list_num">Install BIND9</li>
-</ul>
-
-<div align="right"><a href="#opengate0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>A.2 Install FreeBSD<a name="opengate2" href="#opengate2" class="anchor">†</a></h4>
-
-<ul>
- <li>Gateway Machine</li>
- <uL>
- <li>FreeBSD Ver 4.x, 5.x, or 6.x</li>
- <li>Having Two more EtherBoard</li>
- </uL>
-</ul>
-
-<p>Choose distribution Developer(Full sorces, binaries and doc), because we have to prepare a kernel.</p>
-<p>Add next line to "/etc/rc.conf", because you validate a function of a gateway.</p>
-
-<table>
-<td><code>gateway_enable="YES"</code></td>
-</table>
-
-<div align="right"><a href="#opengate0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>A.3 Install Opengate<a name="opengate3" href="#opengate3" class="anchor">†</a></h4>
-
-<h5>A.3.1 Package of Opengate<a name="opengate4" href="#opengate4" class="anchor">†</a></h5>
-
-<p>Unfolds the latest package of Opengate. It have next directory.</p>
-
-<table>
-<tr><td>
-<pre>
-doc\81FDocumentations
-conf\81Fconfiguration file sample and firewall control perl script sample
-javahtml\81FClient Java Programs and HTML files
-opengatesrv\81FServer CGI program
-</pre>
-</td></tr>
-</table>
-
-<h5>A.3.2 Compile<a name="opengate5" href="#opengate5" class="anchor">†</a></h5>
-
-<p>Edit Makefile and opengatesrv.h in opengatesrv before carry out compile.</p>
-<p>Opengate needs tow FQDNs(FQDN_4 and FQDN_64). For example, FQDN_4 is "opengate.saga-u.ac.jp"
-(IPv4 address: 133.49.31.1). FQDN_64 is "opengate.saga-u.ac.jp"(IPv4 address: 192.168.55.1, IPv6 address: 2001:e38:100:100::1).</p>
-
-<p>Makefile</p>
-<ul>
- <li class="list_none">HOSTNAME</li>
- <ul>
- <li>Set FQDN_64</li>
- </ul>
- <li class="list_none">HOSTNAME4</li>
- <ul>
- <li>Set FQDN_4</li>
- </ul>
- <li class="list_none">OPENGATEDIR</li>
- <ul>
- <li>Opengate install directory (from Web top)</li>
- </ul>
- <li class="list_none">HTMLTOP1,HTMLTOP2</li>
- <ul>
- <li>Web top directory</li>
- <li>Web top directory (for HTTPS)</li>
- </ul>
- <li class="list_none">CGIPATH,CGIPROG,CGIURL</li>
- <ul>
- <li>CGI directory</li>
- <li>CGI program name</li>
- <li>URL of CGI program</li>
- </ul>
- <li class="list_none">AUTHCGIPROG,AUTHCGIURL</li>
- <ul>
- <li>Authentication CGI program name</li>
- <li>URL of Authentication CGI program</li>
- </ul>
- <li class="list_none">CONFIGFILE</li>
- <ul>
- <li>Configuration file name</li>
- </ul>
- <li class="list_none">USEFWSCRIPT,FWSCRIPT,FWSCRIPTFILE</li>
- <ul>
- <li>Enable(1) or disable(0) Perl script to control firewall open</li>
- <li>Firewall control Perl script name</li>
- <li>Path to fireall control Perl script</li>
- </ul>
- <li class="list_none">LOCKFILE</li>
- <ul>
- <li>Lock file for exclusive execution</li>
- </ul>
- <li class="list_none">HTMLDOCS,DENYDOC,DENYDOCSSL,ACCEPTDOC,ACCEPTDOC2</li>
- <ul>
- <li>HTML files listing</li>
- <li>HTML file sent at dynying</li>
- <li>HTML file sent at dynying(For HTTPS)</li>
- <li>HTML file sent at accepting</li>
- <li>HTML file sent at accepting in popup window (can chenge this in URL. Refer INFOMATION)</li>
- </ul>
- <li class="list_none">INFOMATION</li>
- <ul>
- <li>Enable(1) or disable(0), Instead of ACCEPTDOC2, Call other URL in popup window</li>
- </ul>
- <li class="list_none">INFOMATIONURL</li>
- <ul>
- <li>URL instead of ACCEPTDOC2</li>
- </ul>
- <li class="list_none">AUTHHTMLJA,AUTHHTMLEN,AUTHHTMLJASSL,AUTHHTMLENSSL</li>
- <ul>
- <li>Authentication HTML file in Japanese</li>
- <li>Authentication HTML file in English</li>
- <li>Authentication HTML file in Japanese (For HTTPS)</li>
- <li>Authentication HTML file in English (For HTTPS)</li>
- <li>When you add other languages, add other languages to "javahtml", add HTMLDOCS, DENYDOC, DENYDOCSSL,
- ACCEPTDOC, ACCEPTDOC2. And edit opengateauth.h, add AUTHMLXX lines.</li>
- </ul>
- <li class="list_none">ARPPATH</li>
- <ul>
- <li>Path to arp command</li>
- </ul>
- <li class="list_none">NDPPAHT</li>
- <ul>
- <li>Path to ndp command</li>
- </ul>
- <li class="list_none">IPFW,IP6FW</li>
- <ul>
- <li>Path to ipfw and ip6fw commands</li>
- </ul>
-</ul>
-
-<p>opengatesrv.h</p>
-
-<ul>
- <li class="list_none">DEBUG</li>
- <ul>
- <li>If set to 1, function call trace log is put out to syslog</li>
- </ul>
- <li class="list_none">DURATIONDEFAULT</li>
- <ul>
- <li>Default time duration to wait for Java Applet connect.(second)
- If no connection in the duration, the network is closed.
- The duration can be changed in auth page by the user.</li>
- </ul>
- <li class="list_none">DURATIONMAX</li>
- <ul>
- <li>Maximum duration to wait for Java Applet connect. (second)
- Under this value, the Applet waiting duration (= duration of
- network open without Java Applet) can be specified by the user
- on the authentication page.
- If user specified duration is not agreeable, set it the same
- value as DURATIONDEFAULT and remove the field in auth page.</li>
- </ul>
- <li class="list_none">ACTIVECHECKINTERVAL</li>
- <ul>
- <li>Time interval of checking the terminal.(second)
- In no java mode, check by MAC address and packet count for the
- terminal's IP address.
- In java mode, check by HELLO exchange and packet count.</li>
- </ul>
- <li class="list_none">COMMWAITTIMEOUT</li>
- <ul>
- <li>Server waiting time for communication reply.(second)</li>
- </ul>
- <li class="list_none">NOREPLYMAX</li>
- <ul>
- <li>Permitted count of no reply to HELLO. If the client does not
- send back HELLO more than NOREPLYMAX times, then the network
- is closed.</li>
- </ul>
- <li class="list_none">NOPAKETINTERVAL</li>
- <ul>
- <li>If no packet is passed for this time interval, then
- the network is closed.(second)</li>
- </ul>
- <li class="list_none">LOCKTIMEOUT</li>
- <ul>
- <li>Maximum locking time for exclusive ipfw action.(second)</li>
- </ul>
- <li class="list_none">IPFWMIN</li>
- <ul>
- <li>Minimum ipfw rule number used by opengate.</li>
- </ul>
- <li class="list_none">IPFWMAX</li>
- <ul>
- <li>Maximum ipfw rule number used by opengate.</li>
- </ul>
- <li class="list_none">IPFWINTERVAL</li>
- <ul>
- <li>Rule number interval used by opengate.
- The maximum terminals/processes can be controled by these value.</li>
- </ul>
- <li class="list_none">PORTMIN</li>
- <ul>
- <li>Minimum port value used by opengate.</li>
- </ul>
- <li class="list_none">PORTMAX</li>
- <ul>
- <li>Maximum port value used by opengate. Set unused port range.</li>
- </ul>
- <li class="list_none">FACILITY</li>
- <ul>
- <li>syslog facility</li>
- </ul>
-</ul>
-
-<p>Compile and Install after finishing the above-mentioned setting.</p>
-
-<table><tr><td><pre>
-#make
-cc -DCONFIGFILE=\"/etc/opengatesrv.conf\"
--DOPENGATEDIR=\"/opengate\" -DDENYDOC=\"deny.html\"
--DDENYDOC=\"deny.html\" -DDENYDOCSSL=\"deny-ssl.html\"
------------------
------------------
------------------
-# make install
-</pre></td></tr></table>
-
-<h5>A.3.3 Setup authentication server<a name="opengate6" href="#opengate6" class="anchor">†</a></h5>
-
-<p>It is described the details of a setting method in a configuration file (opengatesrv.conf).</p>
-
-<div align="right"><a href="#opengate0">back</a> <a href="#top">top</a></div>
-
-<hr>
-<!-- Start:Setup ipfw,ip6fw -->
-<h3>B Setup ipfw,ip6fw<a name="ipfw0" href="#ipfw0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#ipfw1">Prepare kernel</a></li>
- <li class="list_num"><a href="#ipfw2">Setup ipfw</a></li>
- <li class="list_num"><a href="#ipfw3">Setup ip6fw</a></li>
-</ul>
-
-
-<!-- ************ 1 ************** -->
-<h4>B.1 Prepare kernel<a name="ipfw1" href="#ipfw1" class="anchor">†</a></h4>
-
-<p>Prepare kernel having ipfw and ip6fw functions.</p>
-
-<p>Copy kernel options file.</p>
-
-<table><tr><td><pre>
-# cd /usr/src/sys/i386/conf
-# cp GENERIC MYKERNEL
-</pre></td></tr></table>
-
-<p>Add next lines.</p>
-
-<table><tr><td><pre>
-options IPDIVERT
-
-options IPFIREWALL
-options IPFIREWALL_FORWARD
-options IPFIREWALL_VERBOSE
-options IPFIREWALL_VERBOSE_LIMIT=100
-
-options IPV6FIREWALL
-options IPV6FIREWALL_VERBOSE
-options IPV6FIREWALL_VERBOSE_LIMIT=100
-
-options IPSEC
-options IPSEC_ESP
-options TCP_DROP_SYSFIN
-</pre></td></tr></table>
-
-<li>When use NAT, IPDIVERT is necessary.</li>
-<li>When need firewal log, *VERBOSE is necessary.</li>
-<li>When use IPSEC, *IPSEC is nnecessary.</li>
-
-<p>compile and install kernel having ipfw and ip6fw functions.</p>
-
-<table><tr><td><pre>
-# config MYKERNEL
-# cd ../compile/MYKERNEL
-# make depend
-# make
-# make install
-</pre></td></tr></table>
-
-<p>Add next lines to "/etc/rc.conf".</p>
-
-<table><tr><td><pre>
-firewall_enable="YES"
-firewall_script="/etc/rc.firewall"
-
-ipv6_firewall_enable="YES"
-ipv6_firewall_script="/etc/rc.firewall6"
-
-natd_enable="YES"
-natd_interface="em0"
-</pre></td></tr></table>
-
-<p>Validate a ipfw and ip6fw. And setup configuration script path.
-When use NAT, Validate natd and setup natd interface.</p>
-
-<div align="right"><a href="#ipfw0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>B.2 Setup ipfw<a name="ipfw2" href="#ipfw2" class="anchor">†</a></h4>
-
-<p>Write a rule of ipfw for Opengate. This is example "/etc/rc.firewall".</p>
-
-<table><tr><td><pre>
-### set these to your outside interface network and netmask and ip
-oif="em0"
-onet="192.168.0.0"
-omask="255.255.255.0"
-oip="192.168.0.34"
-
-### set these to your inside interface network and netmask and ip
-iif="bge0"
-inet="192.168.55.0"
-imask="255.255.255.0"
-iip="192.168.55.1"
-
-fwcmd="/sbin/ipfw"
-
-### divert packet to NATD
-$fwcmd add 1 divert natd ip from any to any via ${oif}
-
-### Stop spoofing
-$fwcmd add deny all from ${inet}:${imask} to any in via ${oif}
-$fwcmd add deny all from ${onet}:${omask} to any in via ${iif}
-
-### Stop http from softeather
-$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 80
-$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 443
-
-### Allow from / to myself
-$fwcmd add pass all from ${iip} to any via ${iif}
-$fwcmd add pass all from ${oip} to any via ${oif}
-$fwcmd add pass all from any to ${iip} via ${iif}
-$fwcmd add pass all from any to ${oip} via ${oif}
-
-### Allow DNS queries out in the world
-### (if DNS is on localhost, delete passDNS)
-$fwcmd add pass udp from any 53 to any
-$fwcmd add pass udp from any to any 53
-$fwcmd add pass tcp from any to any 53
-$fwcmd add pass tcp from any 53 to any
-
-### Forwarding http connection from unauth client
-$fwcmd add 60000 fwd localhost tcp from ${inet}:${imask} to any 80
-$fwcmd add 60010 fwd localhost tcp from ${inet}:${imask} to any 443
-
-### Allow TCP through if setup succeeded
-$fwcmd add 60100 pass tcp from any to any established
-</pre></td></tr></table>
-
-<p>Rule number for [forward] Command must be larger than the rule numbers used in opengate(10000-40000).
-Rule number for [divert to natd] must be smaller than most rules.</p>
-
-<p>The file [conf/opengatefw.conf] is the script describing the above rules.
- You can edit and use this script instead of rc.firewall. </p>
-
-<p>Be falimiar with ipfw command. Opengate is a software to send out the ipfw command like above one.</p>
-
-<div align="right"><a href="#ipfw0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>B.3 Setup ip6fw<a name="ipfw3" href="#ipfw3" class="anchor">†</a></h4>
-
-<p>Write a rule of ip6fw for Opengate. This is example "/etc/rc.firewall6".</p>
-
-<table><tr><td><pre>
-### set these to your outside interface network and prefixlen and ip
-oif="em0"
-onet="2001:e38:3661:1a0::"
-oprefixlen="64"
-oip="2001:e38:3661:1a0::34"
-
-### set these to your inside interface network and prefixlen and ip
-iif="bge0"
-inet="2001:e38:3661:1a5::"
-iprefixlen="64"
-iip="2001:e38:3661:1a5::1"
-
-### path to command "ip6fw"
-fw6cmd="/sbin/ip6fw"
-
-${fw6cmd} add pass all from ${iip} to any
-${fw6cmd} add pass all from any to ${iip}
-${fw6cmd} add pass all from ${oip} to any
-${fw6cmd} add pass all from any to ${oip}
-
-### Allow RA RS NS NA Redirect...
-${fw6cmd} add pass ipv6-icmp from any to any
-
-# Allow IP fragments to pass through
-${fw6cmd} add pass all from any to any frag
-
-# Allow RIPng
-${fw6cmd} add pass udp from fe80::/10 521 to ff02::9 521
-${fw6cmd} add pass udp from fe80::/10 521 to fe80::/10 521
-
-### Allow TCP through if setup succeeded
-${fw6cmd} add 60100 pass tcp from any to any established
-
-# TCP reset notice message
-${fw6cmd} add 60200 reset tcp from any to any 80
-${fw6cmd} add 60300 reset tcp from any to any 443
-</pre></td></tr></table>
-
-<p>ip6fw dose not have [forward] function. Threrfore Opengate waits for
-timeout of IPv6 HTTP request. And uses [forward] function of ipfw.</p>
-
-<p>When use FreeBSD 5.2 more, ip6fw has TCP reset function.
-TCP reset try to send a TCP reset (RST) notice.</p>
-
-<p>The file [conf/opengatefw6.conf] is the script describing the above rules.
- You can edit and use this script instead of rc.firewall6. </p>
-
-<p>Be falimiar with ip6fw command too.</p>
-
-<div align="right"><a href="#ipfw0">back</a> <a href="#top">top</a></div>
-
-<hr>
-<!-- Start:Install Apache2 -->
-<h3>C Install Apache2<a name="apache0" href="#apache0" class="anchor">†</a></h3>
-<ul>
- <li class="list_num"><a href="#apache1">Install (ports)</a></li>
- <li class="list_num"><a href="#apache2">Install (source)</a></li>
- <li class="list_num"><a href="#apache3">Make Private key, Certificate</a></li>
- <li class="list_num"><a href="#apache4">Setup VirtualHost</a></li>
- <li class="list_num"><a href="#apache5">Setup HTTP_ERROR 404</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>C.1 Install (ports)<a name="apache1" href="#apache1" class="anchor">†</a></h4>
-
-<p>Opengate needs Apache2 supporting IPv6. Because Opengate does authentication, Apache2
-had better support SSL. But you don't have to install mod_ssl because
-Apache2 support SSL with a standard.</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/www/apache2
-# make clean
-===> Cleaning for autoconf-2.53_1
-===> Cleaning for libtool-1.3.5_1
-===> Cleaning for m4-1.4_1
-===> Cleaning for help2man-1.29
-===> Cleaning for expat-1.95.6_1
-===> Cleaning for apache-2.0.48_3
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<p>Add next lines to "/etc/rc.conf"</p>
-
-<table><tr><td><pre>
-apache2_enable="YES"
-apache2ssl_enable="YES"
-</pre></td></tr></table>
-
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>C.2 Install (source)<a name="apache2" href="#apache2" class="anchor">†</a></h4>
-
-<p>You can get a source of Apache2 from "www.apache.org".</p>
-
-<p>Validate a SSL module in configure.</p>
-
-<table><tr><td><pre>
-# tar xvfz httpd-2.0.55.tar.gz
-# cd httpd-2.0.55
-# ./configure --enable-modules="so ssl"
-# make
-# make install
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>C.3 Make private key, certificate<a name="apache3" href="#apache3" class="anchor">†</a></h4>
-
-<p>Make two Private keys and Certificates for Apache2 because Opengate needs
-two FQDNs.</p>
-
-<table><tr><td><pre>
-# cd /usr/local/etc/apache2
-# mkdir ssl.key ssl.crt
-# chmod 700 ssl.key ssl.crt
-
-# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server1.key 1024
-# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server2.key 1024
-</pre></td></tr></table>
-
-<br>
-
-<table><tr><td><pre>
-# /usr/bin/openssl req -new -x509 -days 365 \
- -key /usr/local/etc/apache2/ssl.key/server1.key \
- -out /usr/local/etc/apache2/ssl.crt/server1.crt
-
-You are about to be asked to enter information that will be incorporated
-into your certificate request.
-What you are about to enter is what is called a Distinguished Name or a DN.
-There are quite a few fields but you can leave some blank
-For some fields there will be a default value,
-If you enter '.', the field will be left blank.
------
-Country Name (2 letter code) [AU]:JP
-State or Province Name (full name) [Some-State]:Saga
-Locality Name (eg, city) []:Saga-city
-Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university
-Organizational Unit Name (eg, subsection) []:Information Science
-Common Name (eg, YOUR name) []:opengate.is.saga-u.ac.jp
-Email Address []:administrator@opengate.is.saga-u.ac.jp
-
-Please enter the following 'extra' attributes
-to be sent with your certificate request
-A challenge password []:
-An optional company name []:
-
-# /usr/bin/openssl req -new -x509 -days 365 \
- -key /usr/local/etc/apache2/ssl.key/server2.key \
- -out /usr/local/etc/apache2/ssl.crt/server2.crt
-
-You are about to be asked to enter information that will be incorporated
-into your certificate request.
-What you are about to enter is what is called a Distinguished Name or a DN.
-There are quite a few fields but you can leave some blank
-For some fields there will be a default value,
-If you enter '.', the field will be left blank.
------
-Country Name (2 letter code) [AU]:JP
-State or Province Name (full name) [Some-State]:Saga
-Locality Name (eg, city) []:Saga-city
-Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university
-Organizational Unit Name (eg, subsection) []:Information Science
-Common Name (eg, YOUR name) []:opengate4.is.saga-u.ac.jp
-Email Address []:administrator@opengate.is.saga-u.ac.jp
-
-Please enter the following 'extra' attributes
-to be sent with your certificate request
-A challenge password []:
-An optional company name []:
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 4 ************** -->
-<h4>C.4 Setup VirtualHost<a name="apache4" href="#apache4" class="anchor">†</a></h4>
-
-<p>Name-based virtual hosting cannot be used with SSL secure servers
-because of the nature of the SSL protocol. Therefore, use IP-based virtual host.</p>
-
-<p>Edit httpd.conf and ssl.conf like an example.</p>
-
-<table><tr><td>httpd.conf</td></tr><tr><td><pre>
-NameVirtualHost 192.168.55.1:80
-<VirtualHost 192.168.55.1:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-
-NameVirtualHost [2001:e38:3661:1a5::1]:80
-<VirtualHost [2001:e38:3661:1a5::1]:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-
-NameVirtualHost 192.168.0.34:80
-<VirtualHost 192.168.0.34:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate4.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-</pre></td></tr></table>
-<br>
-<table><tr><td>ssl.conf</td></tr><tr><td><pre>
-NameVirtualHost 192.168.55.1:443
-<VirtualHost 192.168.55.1:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key
-</VirtualHost>
-
-NameVirtualHost [2001:e38:3661:1a5::1]:443
-<VirtualHost [2001:e38:3661:1a5::1]:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key
-</VirtualHost>
-
-NameVirtualHost 192.168.0.34:443
-<VirtualHost 192.168.0.34:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate4.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server2.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server2.key
-</VirtualHost>
-</pre></td></tr></table>
-
-<p>You have to edit other directive. Be familiar with apache2 configuration.</p>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 5 ************** -->
-<h4>C.5 Setup HTTP_ERROR 404<a name="apache5" href="#apache5" class="anchor">†</a></h4>
-
-<p>Opengate must always send authentication page for any kind of HTTP request. Therefore
-Add next line "to httpd.conf".</p>
-
-<table><tr><td><pre>
-ErrorDocument 404 /
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<hr>
-
-<!-- Start:Install isc-dhcp3 -->
-<h3>D Install isc-dhcp3<a name="dhcp0" href="#dhcp0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#dhcp1">Install (ports)</a></li>
- <li class="list_num"><a href="#dhcp2">Setup DHCP</a></li>
-</ul>
-
-
-<!-- *********** 1 ************* -->
-<h4>D.1 Install (ports)<a name="dhcp1" href="#dhcp1" class="anchor">†</a></h4>
-
-<table><tr><td><pre>
-# cd /usr/ports/net/isc-dhcp3-server
-# make
-===> Cleaning for isc-dhcp3-server-3.0.1.r14_3
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<div align="right"><a href="#dhcp0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>D.2 Setup DHCP<a name="dhcp2" href="#dhcp2" class="anchor">†</a></h4>
-
-<p>There is "/usr/local/etc/dhcpd.conf.sample" as configuration file after instalation.
-Copy dhcpd.conf.sample to dhcpd.conf and edit configuration file.</p>
-
-<table><tr><td><pre>
-option domain-name "saga-u.ac.jp";
-option domain-name-servers 192.168.0.2;
-option subnet-mask 255.255.255.0;
-option broadcast-address 192.168.55.255;
-option routers 192.168.55.1;
-
-default-lease-time 600;
-max-lease-time 7200;
-ddns-update-style none;
-log-facility local7;
-
-subnet 192.168.55.0 netmask 255.255.255.0 {
- range 192.168.55.100 192.168.55.200;
-}
-</pre></td></tr></table>
-
-<p>Add next lines to "/etc/rc.conf".</p>
-
-<table><tr><td><pre>
-dhcpd_enable="YES"
-dhcpd_ifaces="bge0"
-dhcpd_conf="/usr/local/etc/dhcpd.conf"
-</pre></td></tr></table>
-
-<p>dhcpd_ifaces : interfaces ID that send DHCP.</p>
-
-<div align="right"><a href="#dhcp0">back</a> <a href="#top">top</a></div>
-
-<hr>
-<!-- Start:Instal BIND9 -->
-<h3>E Install BIND9<a name="bind0" href="#bind0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#bind1">Install (ports)</a></li>
- <li class="list_num"><a href="#bind2">Make RNDC key</a></li>
- <li class="list_num"><a href="#bind3">Setup named.conf</a></li>
- <li class="list_num"><a href="#bind4">Setup zone</a></li>
- <li class="list_num"><a href="#bind5">Start confirmation</a></li>
-</ul>
-
-<!-- ********** 1 *********** -->
-<h4>E.1 Install (ports)<a name="bind1" href="#bind1" class="anchor">†</a></h4>
-
-<p>Opengate needs two FQDNs. It can be settled even to register FQDN for Opengate with
-existing DNS. When use NAT, you had not better regist an address of IPv4 private network
-with outside DNS.</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/dns/bind9/
-# make clean
-===> Cleaning for bind9-9.3.1
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<p>There is "/etc/namedb(/var/named/etc/namedb)" after installation.</p>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ********** 2 ********** -->
-<h4>E.2 Make RNDC key<a name="bind2" href="#bind2" class="anchor">†</a></h4>
-
-<p>BIND9 is controlled by rndc command for security.</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/dnssec-keygen -a hmac-md5 -b 512 -n user rndc
-</pre></td></tr></table>
-<p>When error "out of entropy", try with next method.</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/dnssec-keygen -r /dev/urandom -a hmac-md5 -b 512 -n user rndc
-</pre></td></tr></table>
-
-<ul>
- <li><pre>Krndc.+157+60849.key</pre></li>
- <li><pre>Krndc.+157+60849.private</pre></li>
-</ul>
-
-<p>There is "/usr/local/etc/rndc.conf.sample" after BIND9 installation.
-And copy to "rndc.conf".</p>
-
-<p>Edit "key" directive as like "key" directive of "Krndc.+xxxxxxxx.private.</p>
-
-<table><tr><td><pre>
-options {
- default-server localhost;
- default-key "key";
-};
-
-server localhost {
- key "key";
-};
-
-key "key" {
- algorithm hmac-md5;
- secret "...";
-};
-</pre></td></tr></table>
-
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ********* 3 ********* -->
-<h4>E.3 Setup named.conf<a name="bind3" href="#bind3" class="anchor">†</a></h4>
-
-<p>There is "/etc/namedb/named.conf" after installation.</p>
-
-<p>Edit "key" directive as like "key" directive of "rndc.conf"</p>
-
-<table><tr><td><pre>
-key "rndc_key" {
- algorithm hmac-md5;
- secret "...";
-};
-
-controls {
- inet ::1 allow {
- ::1;
- }
- keys {
- "rndc_key";
- };
- inet 127.0.0.1 allow {
- 127.0.0.1;
- }
- keys {
- "rndc_key";
- };
-};
-</pre></td></tr></table>
-
-<p>Write "key" directive in the other file. And you had better include it in "named.conf".
-You can secure security more by setting a permission of the other file adequately.</p>
-
-<p>Edit "options" directive.</p>
-
-<table><tr><td><pre>
-options {
- directory "/etc/namedb";
- pid-file "/var/run/named/named.pid";
- auth-nxdomain yes;
- listen-on-v6 { any; };
-};
-</pre></td></tr></table>
-
-<p>Make a directory to put "named.pid" properly.</p>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ******** 4 ********* -->
-<h4>E.4 Setup Zone<a name="bind4" href="#bind4" class="anchor">†</a></h4>
-
-<p>Edit "view" and "zone" directive.</p>
-
-<p>"view" directive is implemented in BIND9. "zone" is child directive of "view".
-BIND9 can choose zone which answers client by a DNS inquiry IP address by setting "view" adequately.</p>
-
-<table><tr><td><pre>
-view "og" {
- match-clients
- {
- 10.0.0.0/16;
- };
-
- recursion yes;
-
- zone "." {
- type hint;
- file "named.root";
- };
-
- zone "og.saga-u.ac.jp" {
- type master;
- file "og.saga-u.ac.jp";
- };
-
- zone "0.0.127.IN-ADDR.ARPA" {
- type master;
- file "master/localhost.rev";
- };
-
- // RFC 3152
- zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\
- 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA" {
- type master;
- file "master/localhost-v6.rev";
- };
-
- // RFC 1886 -- deprecated
- zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\
- 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.INT" {
- type master;
- file "master/localhost-v6.rev";
- };
-};
-</pre></td></tr></table>
-
-<p>Make a "zone" file of domain as "og.saga-u.ac.jp".</p>
-
-<table><tr><td><pre>
-$TTL 3600
-$ORIGIN og.saga-u.ac.jp.
-
-@ IN SOA ns.og.saga-u.ac.jp. postmaster (
- 2005051702 ;
- 3600
- 1200
- 2419200
- 86400 )
- IN NS ns.og.saga-u.ac.jp.
- IN A 10.0.0.2
- IN MX 10 opengate.og.saga-u.ac.jp.
-
-ns IN A 10.0.0.2
-
-opengate IN A 10.0.0.2
- AAAA 2001:2f8:10:1::1
-
-opengate4 IN A 133.49.1.2
-</pre></td></tr></table>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ********* 5 ********* -->
-<h4>E.5 Start confirmation<a name="bind5" href="#bind5" class="anchor">†</a></h4>
-
-<p>Confirm starting "named" after setting was completed.</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/named/ -u bind -c /etc/namedb/named.conf
-</pre></td></tr></table>
-
-<p>If "named" starts without a problem, Add next lines to "/etc/rc.conf".</p>
-
-<table><tr><td><pre>
-named_enable="YES"
-named_program="/usr/local/sbin/named"
-named_flags="-u bind -c /etc/namedb/named.conf"
-</pre></td></tr></table>
-
-<p>Because management of a DNS server is too complicatedly, You had better read manual of BIND9 carefully, and
-refer to other document.</p>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-<hr>
-
-<!-- Start:Install MRTG -->
-<h3>B MRTG<a name="mrtg0" href="#mrtg0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#mrtg1">Install (ports)</a></li>
- <li class="list_num"><a href="#mrtg2">Setup MRTG</a></li>
- <li class="list_num"><a href="#mrtg3">Start confirmation</a></li>
- <li class="list_num"><a href="#mrtg4">Setup crontab</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>F.1 Install MRTG<a name="mrtg1" href="#mrtg1" class="anchor">†</a></h4>
-
-<p>You can use MRTG to watch a state of Opengate. If you do not wath a state of Opengate, you
-do not have to install MRTG.</p>
-
-<p><a href="http://people.ee.ethz.ch/~oetiker/webtools/mrtg/" target="_blank">MRTG</a>(Multi Router Traffic Grapher) is system to watch network traffic.
-MRTG makes graphic images and HTML files. </p>
-
-<p>You can install MRTG to gateway server or another server. If you must watch plural Opengate, you
-had better install MRTG to another server.</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/net-mgmt/mrtg/
-# make clean
-===> Cleaning for mrtg-2.12.2,1
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>F.2 Setup MRTG<a name="mrtg2" href="#mrtg2" class="anchor">†</a></h4>
-
-<p>There is "/usr/local/etc/mrtg/mrtg.cfg.sample" as configuration file after instalation.
-Copy mrtg.cfg.sample to opengate.cfg and edit configuration file.</p>
-
-<table><tr><td><pre>
-##################################################
-# opengate user counter
-
-WorkDir: /usr/home/user/public_html/mrtg/opengate/
-
-##### Options
-Options[^]: growright,gauge,nopercent,integer
-
-Target[opengate]:`/usr/home/user/bin/input.sh`
-Title[opengate]: Opengate user counter
-
-PageTop[opengate]: <h1>Opengate user counter</h1>
- <p>Show the number of people using Opengate</p>
-
-# Max Number
-MaxBytes[opengate]: 200
-
-# Title of Y axis
-YLegend[opengate]: Opengate User
-# unit
-ShortLegend[opengate]: s
-# Title of graph LegendI: first line LegendO: second line
-LegendI[opengate]: IPv6 Users
-LegendO[opengate]: Total Users
-</pre></td></tr></table>
-
-<p>make a directory which you appointed in "WorkDir". MRTG makes graphic images and HTML files in WorkDir.</p>
-
-<p>"Target[opengate]" is path to program to hand data to MRTG. explain below th details.</p>
-
-
-
-<h5>F.2.1 Case of gateway server<a name="mrtg21" href="#mrtg21" class="anchor">†</a></h5>
-
-<p>Put this shellscript as "/usr/home/user/bin/input.sh".</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## shwo opengate status for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-LANG=C
-COLUMNS=256
-
-export LANG
-export COLUMNS
-
-### IPv6 prefix
-prefix="2001:2f8:22:801:"
-
-### opengate process name
-process="opengatesrv.cgi"
-
-### tmp file name
-tmp_all="/tmp/og_count_all.tmp"
-tmp_6="/tmp/og_count_6.tmp"
-
-######################################################
-
-ps ax | grep $process > $tmp_all
-COUNT=`wc -l $tmp_all | awk '{print $1}'`
-grep $prefix $tmp_all > $tmp_6
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`
-UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`
-
-rm $tmp_all
-rm $tmp_6
-
-echo "$COUNT6"
-echo "$COUNT"
-echo "$UPTIME"
-echo "Opengate User Counter"
-</pre></td></tr></table>
-
-<p>carry out this shell script alone and confirm that you can acquire the following data.</p>
-
-<table><tr><td><pre>
-5
-48
-10days
-Opengate User Counter
-</pre></td></tr></table>
-
-
-<h5>F.2.2 Case of another server<a name="mrtg22" href="#mrtg22" class="anchor">†</a></h5>
-
-<p>Put this shellscript as "/usr/home/user/bin/input.sh" on another server.</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## input data for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-# tmp file name
-file="/tmp/opengate.tmp"
-
-# URL of output.sh at opengate
-url="http://opengate.saga-u.ac.jp/cgi-bin/output.sh"
-
-fetch -o $file $url &> /dev/null
-
-more $file
-</pre></td></tr></table>
-
-<p>Put this shell script as "/usr/local/apache2/cgi-bin/output.sh" on Opengate server.
-And set this URL to $url in script explained by the above.</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## shwo opengate status for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-LANG=C
-COLUMNS=256
-
-export LANG
-export COLUMNS
-
-### IPv6 prefix
-prefix="2001:2f8:22:801:"
-
-### opengate process name
-process="opengatesrv.cgi"
-
-### tmp file name
-tmp_all="/tmp/og_count_all.tmp"
-tmp_6="/tmp/og_count_6.tmp"
-
-######################################################3
-
-ps ax | grep $process > $tmp_all
-COUNT=`wc -l $tmp_all | awk '{print $1}'`
-grep $prefix $tmp_all > $tmp_6
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`
-UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`
-rm $tmp_all
-rm $tmp_6
-
-echo "Content-type: text/plain; charset=iso-8859-1"
-echo
-
-echo "$COUNT6"
-echo "$COUNT"
-echo "$UPTIME"
-echo "Opengate User Counter"
-</pre></td></tr></table>
-
-<p>carry out "input.sh" shell script on another server and confirm that you can acquire the following data.</p>
-
-<table><tr><td><pre>
-5
-48
-10days
-Opengate User Counter
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-
-<!-- ************ 3 ************** -->
-<h4>F.3 Start confirmation<a name="mrtg3" href="#mrtg3" class="anchor">†</a></h4>
-
-<p>Confirm after setting was completed.</p>
-
-<table><tr><td><pre>
-# /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg
-</pre></td></tr></table>
-
-<p>Various WARNING is output the first time and second.</p>
-
-<p>There is some files in "WorkDir".</p>
-
-<table><tr><td><pre>
-> ls -l
--rw-r--r-- 1 root wheel 538 12 14 04:40 mrtg-l.png
--rw-r--r-- 1 root wheel 414 12 14 04:40 mrtg-m.png
--rw-r--r-- 1 root wheel 1759 12 14 04:40 mrtg-r.png
--rw-r--r-- 1 root wheel 2941 12 20 15:15 opengate-day.png
--rw-r--r-- 1 root wheel 2146 12 20 14:35 opengate-month.png
--rw-r--r-- 1 root wheel 2867 12 20 14:55 opengate-week.png
--rw-r--r-- 1 root wheel 1897 12 20 05:00 opengate-year.png
--rw-r--r-- 1 root wheel 5961 12 20 15:15 opengate.html
--rw-r--r-- 1 root wheel 48786 12 20 15:15 opengate.log
--rw-r--r-- 1 root wheel 48784 12 20 15:10 opengate.old
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-
-<!-- ************ 4 ************** -->
-<h4>F.4 Setup crontab<a name="mrtg4" href="#mrtg4" class="anchor">†</a></h4>
-
-<p>Add next line to "/etc/crontab".</p>
-
-<table><tr><td><pre>
-*/5 * * * * root /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-<hr>
-</body>
+<html>\r
+<head>\r
+<title>Opegnate Install</title>\r
+<meta http-equiv="content-type" content="text/html">\r
+<link rel="stylesheet" type="text/css" media="screen" href="style.css">\r
+</head>\r
+\r
+\r
+<body bgcolor="#fafff0">\r
+\r
+<h2>Opengate Install Procedure<A class=anchor href="#top" name=top>†</A></h2>\r
+\r
+<!-- Start:Content Table -->\r
+<ul>\r
+ <li class="list_alpha"><A href="#opengate0">Opengate Install Procedure</A>\r
+ <ul>\r
+ <li class="list_num"><A href="#opengate1">Install Procedure</A></li>\r
+ <li class="list_num"><A href="#opengate2">Install FreeBSD</A></li>\r
+ <li class="list_num"><A href="#opengate3">Install Opengate</A></li>\r
+ </ul></li>\r
+ <li class="list_alpha"><A href="#ipfw0">Setup ipfw,ip6fw</A>\r
+ <ul>\r
+ <li class="list_num"><A href="#ipfw1">Prepare Kernel</A></li>\r
+ <li class="list_num"><A href="#ipfw2">Setup ipfw</A></li>\r
+ <li class="list_num"><A href="#ipfw3">Setup ip6fw</A></li>\r
+ </ul></li>\r
+ <li class="list_alpha"><A href="#apache0">Install Apache2</A>\r
+ <ul>\r
+ <li class="list_num"><A href="#apache1">Install (ports)</A></li>\r
+ <li class="list_num"><A href="#apache2">Install (source)</A></li>\r
+ <li class="list_num"><A href="#apache3">Make ricate key, Certificate</A></li>\r
+ <li class="list_num"><A href="#apache4">Setup VirtualHost</A></li>\r
+ <li class="list_num"><A href="#apache5">Setup HTTP_ERROR 404</A></li>\r
+ </ul></li>\r
+ <li class="list_alpha"><A href="#dhcp0">Install isc-dhcp3</A>\r
+ <ul>\r
+ <li class="list_num"><A href="#dhcp1">Install (ports)</A></li>\r
+ <li class="list_num"><A href="#dhcp2">Setup dhcpd.conf</A></li>\r
+ </ul></li>\r
+ <li class="list_alpha"><A href="#bind0">Install BIND9</A>\r
+ <ul>\r
+ <li class="list_num"><A href="#bind1">Install (ports)</A></li>\r
+ <li class="list_num"><A href="#bind2">Make RNDC key</A></li>\r
+ <li class="list_num"><A href="#bind3">Setup named.conf</A></li>\r
+ <li class="list_num"><A href="#bind4">Setup Zone</A></li>\r
+ <li class="list_num"><A href="#bind5">Start confirmation</A></li>\r
+ </ul></li>\r
+ <li class="list_alpha"><A href="#mrtg0">Install MRTG</A>\r
+ <ul>\r
+ <li class="list_num"><A href="#mrtg1">Install (ports)</A></li>\r
+ <li class="list_num"><A href="#mrtg2">Setup MRTG</A></li>\r
+ <li class="list_num"><A href="#mrtg3">Start confirmation</A></li>\r
+ <li class="list_num"><A href="#mrtg4">Setup crontab</A></li>\r
+ </ul></li>\r
+ <li class="list_alpha"><A href="#rulechk">Install rulechk</A>\r
+ </li>\r
+</ul>\r
+<!-- End:Content Table -->\r
+<hr>\r
+\r
+\r
+<!-- Start:Install Opengate -->\r
+<h3>A Install Opegnate<A class=anchor href="#opengate0" name=opengate0>†</A></h3>\r
+<ul>\r
+ <li class="list_num"><A href="#opengate1">Install Procedure</A></li>\r
+ <li class="list_num"><A href="#opengate2">Install FreeBSD</A></li>\r
+ <li class="list_num"><A href="#opengate3">Install Opengate</A></li>\r
+</ul>\r
+\r
+<!-- ************ 1 ************** -->\r
+<h4>A.1 Install Procedure<A class=anchor href="#opengate1" name=opengate1>†</A></h4>\r
+\r
+<p>List of Install Procedure.(*:Necessary by all means)</p>\r
+\r
+<ul>\r
+ <li class="list_num">Gateway Machine * </li>\r
+ \r
+ <li class="list_num">Install FreeBSD * </li>\r
+ \r
+ <li class="list_num">Prepare kernel * </li>\r
+ \r
+ <li class="list_num">Setup ipfw,ip6fw * </li>\r
+ \r
+ <li class="list_num">Setup NAT </li>\r
+ \r
+ <li class="list_num">Install Apache2 * </li>\r
+ \r
+ <li class="list_num">Install DHCP </li>\r
+ \r
+ <li class="list_num">Install BIND9</li>\r
+</ul>\r
+\r
+<div align="right"><A href="#opengate0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 2 ************** -->\r
+<h4>A.2 Install FreeBSD<A class=anchor href="#opengate2" name=opengate2>†</A></h4>\r
+\r
+<ul>\r
+ <li>Gateway Machine \r
+ \r
+ <ul>\r
+ <li>FreeBSD Ver 4.x, 5.x, or 6.x </li>\r
+ \r
+ <li>Having Two more EtherBoard</li>\r
+ </ul> </li>\r
+</ul>\r
+\r
+<p>Choose distribution Developer(Full sorces, binaries and doc), because we have to prepare a kernel.</p>\r
+<p>Add next line to "/etc/rc.conf", because you validate a function of a gateway.</p>\r
+\r
+<table>\r
+ \r
+ <TR>\r
+<td><code>gateway_enable="YES"</code></td></TR>\r
+</table>\r
+\r
+<div align="right"><A href="#opengate0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 3 ************** -->\r
+<h4>A.3 Install Opengate<A class=anchor href="#opengate3" name=opengate3>†</A></h4>\r
+\r
+<h5>A.3.1 Package of Opengate<A class=anchor href="#opengate4" name=opengate4>†</A></h5>\r
+\r
+<p>Unfolds the latest package of Opengate. It have next directory.</p>\r
+\r
+<table>\r
+<tr><td>\r
+<pre>\r
+doc: Documentations\r
+conf: Fconfiguration file sample and firewall control perl script sample\r
+javahtml: Client Java Programs and HTML files\r
+opengatesrv: Server CGI program\r
+tools: Some related tools\r
+</pre>\r
+</td></tr>\r
+</table>\r
+\r
+<h5>A.3.2 Compile<A class=anchor href="#opengate5" name=opengate5>†</A></h5>\r
+\r
+<p>Edit Makefile and opengatesrv.h in opengatesrv before carry out compile. The following is the parameter list. But, except the HOSTNAME and HOSTNAME4, the default value might be used when the related application directory is not changed.</p>\r
+\r
+<p>If the IPv6 function is available, Opengate needs two FQDNs(FQDN_4 and FQDN_64). For example, FQDN_4 is "opengate4.saga-u.ac.jp"\r
+(IPv4 address: 133.49.31.1). FQDN_64 is "opengate.saga-u.ac.jp"(IPv4 address: 192.168.55.1, IPv6 address: 2001:e38:100:100::1).\r
+</p>\r
+<p>Set two FQDNs to HOSTNAME and HOSTNAME4 as indicated in the table. </p>\r
+<p>If the IPv6 function is not available, Set same FQDN (or IP address) to HOSTNAME and HOSTNAME4.</p>\r
+\r
+<p>Makefile</p>\r
+\r
+<table>\r
+ <tr>\r
+ <td>HOSTNAME</td>\r
+ <td>Set FQDN_64</td>\r
+ </tr>\r
+ <tr>\r
+ <td>HOSTNAME4</td>\r
+ <td>Set FQDN_4</td>\r
+ </tr>\r
+ <tr>\r
+ <td>OPENGATEDIR</td>\r
+ <td>Opengate install directory (from Web top)</td>\r
+ </tr>\r
+ <tr>\r
+ <td>HTMLTOP1</td>\r
+ <td>Web top directory</td>\r
+ </tr>\r
+ <tr>\r
+ <td>HTMLTOP2</td>\r
+ <td>Web top directory (for HTTPS)</td>\r
+ </tr>\r
+ <tr>\r
+ <td>CGIPATH</td>\r
+ <td>CGI directory</td>\r
+ </tr>\r
+ <tr>\r
+ <td>CGIPROG</td>\r
+ <td>CGI program name</td>\r
+ </tr>\r
+ <tr>\r
+ <td>CGIURL</td>\r
+ <td>URL of CGI program</td>\r
+ </tr>\r
+ <tr>\r
+ <td>AUTHCGIPROG</td>\r
+ <td>Authentication CGI program name</td>\r
+ </tr>\r
+ <tr>\r
+ <td>AUTHCGIURL</td>\r
+ <td>URL of Authentication CGI program</td>\r
+ </tr>\r
+ <tr>\r
+ <td>CONFIGFILE</td>\r
+ <td>Configuration file name</td>\r
+ </tr>\r
+ <tr>\r
+ <td>USEFWSCRIPT</td>\r
+ <td>Enable(1) or disable(0) Perl script to control \r
+ firewall open</td>\r
+ </tr>\r
+ <tr>\r
+ <td>FWSCRIPT</td>\r
+ <td>Firewall control Perl script name</td>\r
+ </tr>\r
+ <tr>\r
+ <td>FWSCRIPTFILE</td>\r
+ <td>Path to fireall control Perl script</td>\r
+ </tr>\r
+ <tr>\r
+ <td>LOCKFILE</td>\r
+ <td>Lock file for exclusive execution</td>\r
+ </tr>\r
+ <tr>\r
+ <td>HTMLDOCS</td>\r
+ <td>HTML files listing</td>\r
+ </tr>\r
+ <tr>\r
+ <td>DENYDOC</td>\r
+ <td>HTML file sent at dynying</td>\r
+ </tr>\r
+ <tr>\r
+ <td>DENYDOCSSL</td>\r
+ <td>HTML file sent at dynying(For HTTPS)</td>\r
+ </tr>\r
+ <tr>\r
+ <td>ACCEPTDOC</td>\r
+ <td>HTML file sent at accepting</td>\r
+ </tr>\r
+ <tr>\r
+ <td>ACCEPTDOC2</td>\r
+ <td>HTML file sent at accepting in popup window (can \r
+ chenge this in URL. Refer INFOMATION)</td>\r
+ </tr>\r
+ <tr>\r
+ <td>INFOMATION</td>\r
+ <td>Enable(1) or disable(0), Instead of ACCEPTDOC2, \r
+ Call other URL in popup window</td>\r
+ </tr>\r
+ <tr>\r
+ <td>INFOMATIONURL</td>\r
+ <td>URL instead of ACCEPTDOC2</td>\r
+ </tr>\r
+ <tr>\r
+ <td>AUTHHTMLJA</td>\r
+ <td>Authentication HTML file in Japanese</td>\r
+ </tr>\r
+ <tr>\r
+ <td>AUTHHTMLEN</td>\r
+ <td>Authentication HTML file in English</td>\r
+ </tr>\r
+ <tr>\r
+ <td>AUTHHTMLJASSL</td>\r
+ <td>Authentication HTML file in Japanese (For HTTPS)</td>\r
+ </tr>\r
+ <tr>\r
+ <td>AUTHHTMLENSSL</td>\r
+ <td>Authentication HTML file in English (For HTTPS)</td>\r
+ </tr>\r
+ <tr>\r
+ <td></td>\r
+ <td>When you add other languages, add other languages \r
+ to "javahtml", add HTMLDOCS, DENYDOC, DENYDOCSSL, ACCEPTDOC, ACCEPTDOC2. \r
+ And edit opengateauth.h, add AUTHMLXX lines</td>\r
+ </tr>\r
+ <tr>\r
+ <td>ARPPATH</td>\r
+ <td>Path to arp command</td>\r
+ </tr>\r
+ <tr>\r
+ <td>NDPPATH</td>\r
+ <td>Path to ndp command</td>\r
+ </tr>\r
+ <tr>\r
+ <td>IPFW</td>\r
+ <td>Path to ipfw command</td>\r
+ </tr>\r
+ <tr>\r
+ <td>IP6FW</td>\r
+ <td>Path to ip6fw command</td>\r
+ </tr>\r
+</table>\r
+\r
+<p>opengatesrv.h</p>\r
+<table>\r
+ <tr>\r
+ <td>DEBUG</td>\r
+ <td>If set to 1, function call trace log is put out \r
+ to syslog</td>\r
+ </tr>\r
+ <tr>\r
+ <td>DURATIONDEFAULT</td>\r
+ <td>Default time duration to wait for Java Applet \r
+ connect.(second) If no connection in the duration, the network is closed. \r
+ The duration can be changed in auth page by the user.</td>\r
+ </tr>\r
+ <tr>\r
+ <td>DURATIONMAX</td>\r
+ <td>Maximum duration to wait for Java Applet connect. \r
+ (second) Under this value, the Applet waiting duration (= duration of \r
+ network open without Java Applet) can be specified by the user on the \r
+ authentication page. If user specified duration is not agreeable, set it \r
+ the same value as DURATIONDEFAULT and remove the field in auth page.</td>\r
+ </tr>\r
+ <tr>\r
+ <td>ACTIVECHECKINTERVAL</td>\r
+ <td>Time interval of checking the terminal.(second) \r
+ In no java mode, check by MAC address and packet count for the terminal's \r
+ IP address. In java mode, check by HELLO exchange and packet count</td>\r
+ </tr>\r
+ <tr>\r
+ <td>COMMWAITTIMEOUT</td>\r
+ <td>Server waiting time for communication \r
+ reply.(second)</td>\r
+ </tr>\r
+ <tr>\r
+ <td>NOREPLYMAX</td>\r
+ <td>Permitted count of no reply to HELLO. If the \r
+ client does not send back HELLO more than NOREPLYMAX times, then the \r
+ network is closed.</td>\r
+ </tr>\r
+ <tr>\r
+ <td>NOPAKETINTERVAL</td>\r
+ <td>If no packet is passed for this time interval, \r
+ then the network is closed.(second)</td>\r
+ </tr>\r
+ <tr>\r
+ <td>LOCKTIMEOUT</td>\r
+ <td>Maximum locking time for exclusive ipfw \r
+ action.(second)</td>\r
+ </tr>\r
+ <tr>\r
+ <td>IPFWMIN</td>\r
+ <td>Minimum ipfw rule number used by opengate.</td>\r
+ </tr>\r
+ <tr>\r
+ <td>IPFWMAX</td>\r
+ <td>Maximum ipfw rule number used by opengate.</td>\r
+ </tr>\r
+ <tr>\r
+ <td>IPFWINTERVAL</td>\r
+ <td>Rule number interval used by opengate. The \r
+ maximum terminals/processes can be controled by these value.</td>\r
+ </tr>\r
+ <tr>\r
+ <td>PORTMIN</td>\r
+ <td>Minimum port value used by opengate.</td>\r
+ </tr>\r
+ <tr>\r
+ <td>PORTMAX</td>\r
+ <td>Maximum port value used by opengate. Set unused \r
+ port range</td>\r
+ </tr>\r
+ <tr>\r
+ <td>FACILITY</td>\r
+ <td>syslog facility</td>\r
+ </tr>\r
+</table>\r
+\r
+<p>Compile and Install after finishing the above-mentioned setting.</p>\r
+\r
+<table><tr><td><pre>#make\r
+cc -DCONFIGFILE=\"/etc/opengatesrv.conf\" \r
+-DOPENGATEDIR=\"/opengate\" -DDENYDOC=\"deny.html\"\r
+-DDENYDOC=\"deny.html\" -DDENYDOCSSL=\"deny-ssl.html\"\r
+-----------------\r
+-----------------\r
+-----------------\r
+# make install\r
+</pre></td></tr></table>\r
+\r
+<h5>A.3.3 Setup authentication server<A class=anchor href="#opengate6" name=opengate6>†</A></h5>\r
+\r
+<p>It is described the details of a setting method in a configuration file (opengatesrv.conf).</p>\r
+\r
+<div align="right"><A href="#opengate0">back</A> <A href="#top">top</A></div>\r
+\r
+<hr>\r
+<!-- Start:Setup ipfw,ip6fw -->\r
+<h3>B Setup ipfw,ip6fw<A class=anchor href="#ipfw0" name=ipfw0>†</A></h3>\r
+\r
+<ul>\r
+ <li class="list_num"><A href="#ipfw1">Prepare kernel</A></li>\r
+ <li class="list_num"><A href="#ipfw2">Setup ipfw</A></li>\r
+ <li class="list_num"><A href="#ipfw3">Setup ip6fw</A></li>\r
+</ul>\r
+\r
+<!-- ************ 1 ************** -->\r
+<h4>B.1 Prepare kernel<A class=anchor href="#ipfw1" name=ipfw1>†</A></h4>\r
+\r
+<p>Prepare kernel having ipfw and ip6fw functions.</p>\r
+\r
+<p>Copy kernel options file.</p>\r
+\r
+<table><tr><td><pre># cd /usr/src/sys/i386/conf\r
+# cp GENERIC MYKERNEL\r
+</pre></td></tr></table>\r
+\r
+<p>Add next lines.</p>\r
+\r
+<table><tr><td><pre>options IPDIVERT\r
+\r
+options IPFIREWALL\r
+options IPFIREWALL_FORWARD\r
+options IPFIREWALL_VERBOSE\r
+options IPFIREWALL_VERBOSE_LIMIT=100\r
+\r
+options IPV6FIREWALL\r
+options IPV6FIREWALL_VERBOSE\r
+options IPV6FIREWALL_VERBOSE_LIMIT=100\r
+\r
+options IPSEC\r
+options IPSEC_ESP\r
+options TCP_DROP_SYSFIN\r
+</pre></td></tr></table>\r
+\r
+<li>When use NAT, IPDIVERT is necessary. </li>\r
+<li>When need firewal log, *VERBOSE is necessary. </li>\r
+<li>When use IPSEC, IPSEC* is necessary. </li>\r
+<li>When use IPv6, IPV6* is necessary. </li>\r
+\r
+<p>compile and install kernel having ipfw and ip6fw functions.</p>\r
+\r
+<table><tr><td><pre># config MYKERNEL\r
+# cd ../compile/MYKERNEL\r
+# make depend\r
+# make\r
+# make install\r
+</pre></td></tr></table>\r
+\r
+<p>Add next lines to "/etc/rc.conf".</p>\r
+\r
+<table><tr><td><pre>firewall_enable="YES"\r
+firewall_script="/etc/rc.firewall"\r
+\r
+ipv6_firewall_enable="YES"\r
+ipv6_firewall_script="/etc/rc.firewall6"\r
+\r
+natd_enable="YES"\r
+natd_interface="em0"\r
+</pre></td></tr></table>\r
+\r
+<p>Validate a ipfw and ip6fw. And setup configuration script path. \r
+When use NAT, Validate natd and setup natd interface.</p>\r
+\r
+<div align="right"><A href="#ipfw0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 2 ************** -->\r
+<h4>B.2 Setup ipfw<A class=anchor href="#ipfw2" name=ipfw2>†</A></h4>\r
+\r
+<p>Write a rule of ipfw for Opengate. This is example "/etc/rc.firewall".</p>\r
+\r
+<table><tr><td><pre>### set these to your outside interface network and netmask and ip\r
+oif="em0"\r
+onet="192.168.0.0"\r
+omask="255.255.255.0"\r
+oip="192.168.0.34"\r
+\r
+### set these to your inside interface network and netmask and ip\r
+iif="bge0"\r
+inet="192.168.55.0"\r
+imask="255.255.255.0"\r
+iip="192.168.55.1"\r
+\r
+fwcmd="/sbin/ipfw"\r
+\r
+### divert packet to NATD \r
+$fwcmd add 1 divert natd ip from any to any via ${oif}\r
+\r
+### Stop spoofing\r
+$fwcmd add deny all from ${inet}:${imask} to any in via ${oif}\r
+$fwcmd add deny all from ${onet}:${omask} to any in via ${iif}\r
+\r
+### Stop http from softeather\r
+$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 80\r
+$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 443\r
+\r
+### Allow from / to myself\r
+$fwcmd add pass all from ${iip} to any via ${iif}\r
+$fwcmd add pass all from ${oip} to any via ${oif}\r
+$fwcmd add pass all from any to ${iip} via ${iif}\r
+$fwcmd add pass all from any to ${oip} via ${oif}\r
+\r
+### Allow DNS queries out in the world\r
+### (if DNS is on localhost, delete passDNS)\r
+$fwcmd add pass udp from any 53 to any\r
+$fwcmd add pass udp from any to any 53\r
+$fwcmd add pass tcp from any to any 53\r
+$fwcmd add pass tcp from any 53 to any\r
+\r
+### Forwarding http connection from unauth client \r
+$fwcmd add 60000 fwd localhost tcp from ${inet}:${imask} to any 80\r
+$fwcmd add 60010 fwd localhost tcp from ${inet}:${imask} to any 443\r
+\r
+### Allow TCP through if setup succeeded \r
+$fwcmd add 60100 pass tcp from any to any established\r
+</pre></td></tr></table>\r
+\r
+<p>Rule number for [forward] Command must be larger than the rule numbers used in opengate(10000-40000).\r
+Rule number for [divert to natd] must be smaller than most rules.</p>\r
+\r
+<p>The file [conf/opengatefw.conf] is the script describing the above rules.\r
+ You can edit and use this script instead of rc.firewall. </p>\r
+\r
+<p>Be falimiar with ipfw command. Opengate is a software to send out the ipfw command like above one.</p>\r
+\r
+<div align="right"><A href="#ipfw0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 3 ************** -->\r
+<h4>B.3 Setup ip6fw<A class=anchor href="#ipfw3" name=ipfw3>†</A></h4>\r
+\r
+<p>If the IPv6 function is not available, this section is not needed. Write a rule of ip6fw for Opengate. This is example "/etc/rc.firewall6".</p>\r
+\r
+<table><tr><td><pre>### set these to your outside interface network and prefixlen and ip\r
+oif="em0"\r
+onet="2001:e38:3661:1a0::"\r
+oprefixlen="64"\r
+oip="2001:e38:3661:1a0::34"\r
+\r
+### set these to your inside interface network and prefixlen and ip\r
+iif="bge0"\r
+inet="2001:e38:3661:1a5::"\r
+iprefixlen="64"\r
+iip="2001:e38:3661:1a5::1"\r
+\r
+### path to command "ip6fw"\r
+fw6cmd="/sbin/ip6fw"\r
+\r
+${fw6cmd} add pass all from ${iip} to any\r
+${fw6cmd} add pass all from any to ${iip}\r
+${fw6cmd} add pass all from ${oip} to any\r
+${fw6cmd} add pass all from any to ${oip}\r
+\r
+### Allow RA RS NS NA Redirect...\r
+${fw6cmd} add pass ipv6-icmp from any to any\r
+\r
+# Allow IP fragments to pass through\r
+${fw6cmd} add pass all from any to any frag\r
+\r
+# Allow RIPng\r
+${fw6cmd} add pass udp from fe80::/10 521 to ff02::9 521\r
+${fw6cmd} add pass udp from fe80::/10 521 to fe80::/10 521\r
+\r
+### Allow TCP through if setup succeeded\r
+${fw6cmd} add 60100 pass tcp from any to any established\r
+\r
+# TCP reset notice message\r
+${fw6cmd} add 60200 reset tcp from any to any 80\r
+${fw6cmd} add 60300 reset tcp from any to any 443\r
+</pre></td></tr></table>\r
+\r
+<p>ip6fw dose not have [forward] function. Threrfore Opengate waits for \r
+timeout of IPv6 HTTP request. And uses [forward] function of ipfw.</p>\r
+\r
+<p>When use FreeBSD 5.2 more, ip6fw has TCP reset function.\r
+TCP reset try to send a TCP reset (RST) notice.</p>\r
+\r
+<p>The file [conf/opengatefw6.conf] is the script describing the above rules.\r
+ You can edit and use this script instead of rc.firewall6. </p>\r
+\r
+<p>Be falimiar with ip6fw command too.</p>\r
+\r
+<div align="right"><A href="#ipfw0">back</A> <A href="#top">top</A></div>\r
+\r
+<hr>\r
+<!-- Start:Install Apache2 -->\r
+<h3>C Install Apache2<A class=anchor href="#apache0" name=apache0>†</A></h3>\r
+<ul>\r
+ <li class="list_num"><A href="#apache1">Install (ports)</A></li>\r
+ <li class="list_num"><A href="#apache2">Install (source)</A></li>\r
+ <li class="list_num"><A href="#apache3">Make Private key, Certificate</A></li>\r
+ <li class="list_num"><A href="#apache4">Setup VirtualHost</A></li>\r
+ <li class="list_num"><A href="#apache5">Setup HTTP_ERROR 404</A></li>\r
+</ul>\r
+\r
+<!-- ************ 1 ************** -->\r
+<h4>C.1 Install (ports)<A class=anchor href="#apache1" name=apache1>†</A></h4>\r
+\r
+<p>Opengate needs Apache2 supporting IPv6. Because Opengate does authentication, Apache2\r
+had better support SSL. But you don't have to install mod_ssl because \r
+Apache2 support SSL with a standard.</p>\r
+\r
+<table><tr><td><pre># cd /usr/ports/www/apache2\r
+# make clean\r
+===> Cleaning for autoconf-2.53_1\r
+===> Cleaning for libtool-1.3.5_1\r
+===> Cleaning for m4-1.4_1\r
+===> Cleaning for help2man-1.29\r
+===> Cleaning for expat-1.95.6_1\r
+===> Cleaning for apache-2.0.48_3\r
+# make install clean ; rehash\r
+</pre></td></tr></table>\r
+\r
+<p>Add next lines to "/etc/rc.conf"</p>\r
+\r
+<table><tr><td><pre>apache2_enable="YES"\r
+apache2ssl_enable="YES"\r
+</pre></td></tr></table>\r
+\r
+\r
+<div align="right"><A href="#apache0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 2 ************** -->\r
+<h4>C.2 Install (source)<A class=anchor href="#apache2" name=apache2>†</A></h4>\r
+\r
+<p>You can get a source of Apache2 from "www.apache.org".</p>\r
+\r
+<p>Validate a SSL module in configure.</p>\r
+\r
+<table><tr><td><pre># tar xvfz httpd-2.0.55.tar.gz\r
+# cd httpd-2.0.55\r
+# ./configure --enable-modules="so ssl"\r
+# make\r
+# make install\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#apache0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 3 ************** -->\r
+<h4>C.3 Make private key, certificate<A class=anchor href="#apache3" name=apache3>†</A></h4>\r
+\r
+<p>Make two Private keys and Certificates for Apache2 because Opengate needs \r
+two FQDNs.</p>\r
+\r
+<table><tr><td><pre># cd /usr/local/etc/apache2\r
+# mkdir ssl.key ssl.crt\r
+# chmod 700 ssl.key ssl.crt\r
+\r
+# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server1.key 1024\r
+# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server2.key 1024\r
+</pre></td></tr></table>\r
+\r
+<br>\r
+\r
+<table><tr><td><pre># /usr/bin/openssl req -new -x509 -days 365 \\r
+ -key /usr/local/etc/apache2/ssl.key/server1.key \\r
+ -out /usr/local/etc/apache2/ssl.crt/server1.crt\r
+\r
+You are about to be asked to enter information that will be incorporated\r
+into your certificate request.\r
+What you are about to enter is what is called a Distinguished Name or a DN.\r
+There are quite a few fields but you can leave some blank\r
+For some fields there will be a default value,\r
+If you enter '.', the field will be left blank.\r
+-----\r
+Country Name (2 letter code) [AU]:JP\r
+State or Province Name (full name) [Some-State]:Saga\r
+Locality Name (eg, city) []:Saga-city\r
+Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university\r
+Organizational Unit Name (eg, subsection) []:Information Science\r
+Common Name (eg, YOUR name) []:opengate.is.saga-u.ac.jp\r
+Email Address []:administrator@opengate.is.saga-u.ac.jp\r
+\r
+Please enter the following 'extra' attributes\r
+to be sent with your certificate request\r
+A challenge password []:\r
+An optional company name []:\r
+\r
+# /usr/bin/openssl req -new -x509 -days 365 \\r
+ -key /usr/local/etc/apache2/ssl.key/server2.key \\r
+ -out /usr/local/etc/apache2/ssl.crt/server2.crt\r
+\r
+You are about to be asked to enter information that will be incorporated\r
+into your certificate request.\r
+What you are about to enter is what is called a Distinguished Name or a DN.\r
+There are quite a few fields but you can leave some blank\r
+For some fields there will be a default value,\r
+If you enter '.', the field will be left blank.\r
+-----\r
+Country Name (2 letter code) [AU]:JP\r
+State or Province Name (full name) [Some-State]:Saga\r
+Locality Name (eg, city) []:Saga-city\r
+Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university\r
+Organizational Unit Name (eg, subsection) []:Information Science\r
+Common Name (eg, YOUR name) []:opengate4.is.saga-u.ac.jp\r
+Email Address []:administrator@opengate.is.saga-u.ac.jp\r
+\r
+Please enter the following 'extra' attributes\r
+to be sent with your certificate request\r
+A challenge password []:\r
+An optional company name []:\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#apache0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 4 ************** -->\r
+<h4>C.4 Setup VirtualHost<A class=anchor href="#apache4" name=apache4>†</A></h4>\r
+\r
+<p>If the IPv6 function is available, Opengate uses two FQDNs. So, set virtual hosting. </p>\r
+\r
+<p>Name-based virtual hosting cannot be used with SSL secure servers \r
+because of the nature of the SSL protocol. Therefore, use IP-based virtual host, as the gateway has more than two NIC.</p>\r
+\r
+<p>Edit httpd.conf and ssl.conf like an example.</p>\r
+\r
+<table><tr><td>httpd.conf</td></tr><tr><td><pre>NameVirtualHost 192.168.55.1:80\r
+<VirtualHost 192.168.55.1:80>\r
+ ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
+ DocumentRoot /usr/local/www\r
+ ServerName opengate.is.saga-u.ac.jp\r
+ ErrorLog "|/usr/bin/logger -p local6.info"\r
+ CustomLog "|/usr/bin/logger -p local5.info" combined\r
+</VirtualHost>\r
+\r
+NameVirtualHost [2001:e38:3661:1a5::1]:80\r
+<VirtualHost [2001:e38:3661:1a5::1]:80>\r
+ ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
+ DocumentRoot /usr/local/www\r
+ ServerName opengate.is.saga-u.ac.jp\r
+ ErrorLog "|/usr/bin/logger -p local6.info"\r
+ CustomLog "|/usr/bin/logger -p local5.info" combined\r
+</VirtualHost>\r
+ \r
+NameVirtualHost 192.168.0.34:80\r
+<VirtualHost 192.168.0.34:80>\r
+ ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
+ DocumentRoot /usr/local/www\r
+ ServerName opengate4.is.saga-u.ac.jp\r
+ ErrorLog "|/usr/bin/logger -p local6.info"\r
+ CustomLog "|/usr/bin/logger -p local5.info" combined\r
+</VirtualHost>\r
+</pre></td></tr></table>\r
+<br>\r
+<table><tr><td>ssl.conf</td></tr><tr><td><pre>NameVirtualHost 192.168.55.1:443\r
+<VirtualHost 192.168.55.1:443>\r
+ DocumentRoot "/usr/local/www"\r
+ ServerName opengate.is.saga-u.ac.jp:443\r
+ ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
+ ErrorLog "|/usr/bin/logger -p local6.info"\r
+ CustomLog "|/usr/bin/logger -p local5.info" combined\r
+\r
+ SSLEngine on\r
+ SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL\r
+ SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt\r
+ SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key\r
+</VirtualHost>\r
+\r
+NameVirtualHost [2001:e38:3661:1a5::1]:443\r
+<VirtualHost [2001:e38:3661:1a5::1]:443>\r
+ DocumentRoot "/usr/local/www"\r
+ ServerName opengate.is.saga-u.ac.jp:443\r
+ ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
+ ErrorLog "|/usr/bin/logger -p local6.info"\r
+ CustomLog "|/usr/bin/logger -p local5.info" combined\r
+\r
+ SSLEngine on\r
+ SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL\r
+ SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt\r
+ SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key\r
+</VirtualHost>\r
+\r
+NameVirtualHost 192.168.0.34:443\r
+<VirtualHost 192.168.0.34:443>\r
+ DocumentRoot "/usr/local/www"\r
+ ServerName opengate4.is.saga-u.ac.jp:443\r
+ ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
+ ErrorLog "|/usr/bin/logger -p local6.info"\r
+ CustomLog "|/usr/bin/logger -p local5.info" combined\r
+\r
+ SSLEngine on\r
+ SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL\r
+ SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server2.crt\r
+ SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server2.key\r
+</VirtualHost>\r
+</pre></td></tr></table>\r
+\r
+<p>You have to edit other directive. Be familiar with apache2 configuration.</p>\r
+\r
+<div align="right"><A href="#apache0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 5 ************** -->\r
+<h4>C.5 Setup HTTP_ERROR 404<A class=anchor href="#apache5" name=apache5>†</A></h4>\r
+\r
+<p>Opengate must always send authentication page for any kind of HTTP request. Therefore \r
+Add next line "to httpd.conf".</p>\r
+\r
+<table><tr><td><pre>\r
+ErrorDocument 404 /\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#apache0">back</A> <A href="#top">top</A></div>\r
+\r
+<hr>\r
+\r
+<!-- Start:Install isc-dhcp3 -->\r
+<h3>D Install isc-dhcp3<A class=anchor href="#dhcp0" name=dhcp0>†</A></h3>\r
+\r
+<ul>\r
+ <li class="list_num"><A href="#dhcp1">Install (ports)</A></li>\r
+ <li class="list_num"><A href="#dhcp2">Setup DHCP</A></li>\r
+</ul>\r
+\r
+<!-- *********** 1 ************* -->\r
+<h4>D.1 Install (ports)<A class=anchor href="#dhcp1" name=dhcp1>†</A></h4>\r
+\r
+<table><tr><td><pre># cd /usr/ports/net/isc-dhcp3-server\r
+# make\r
+===> Cleaning for isc-dhcp3-server-3.0.1.r14_3\r
+# make install clean ; rehash\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#dhcp0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 2 ************** -->\r
+<h4>D.2 Setup DHCP<A class=anchor href="#dhcp2" name=dhcp2>†</A></h4>\r
+\r
+<p>There is "/usr/local/etc/dhcpd.conf.sample" as configuration file after instalation.\r
+Copy dhcpd.conf.sample to dhcpd.conf and edit configuration file.</p>\r
+\r
+<table><tr><td><pre>option domain-name "saga-u.ac.jp";\r
+option domain-name-servers 192.168.0.2;\r
+option subnet-mask 255.255.255.0;\r
+option broadcast-address 192.168.55.255;\r
+option routers 192.168.55.1;\r
+\r
+default-lease-time 600;\r
+max-lease-time 7200;\r
+ddns-update-style none;\r
+log-facility local7;\r
+\r
+subnet 192.168.55.0 netmask 255.255.255.0 {\r
+ range 192.168.55.100 192.168.55.200;\r
+}\r
+</pre></td></tr></table>\r
+\r
+<p>Add next lines to "/etc/rc.conf".</p>\r
+\r
+<table><tr><td><pre>dhcpd_enable="YES"\r
+dhcpd_ifaces="bge0"\r
+dhcpd_conf="/usr/local/etc/dhcpd.conf"\r
+</pre></td></tr></table>\r
+\r
+<p>dhcpd_ifaces : interfaces ID that send DHCP.</p>\r
+\r
+<div align="right"><A href="#dhcp0">back</A> <A href="#top">top</A></div>\r
+\r
+<hr>\r
+\r
+\r
+<!-- Start:Instal BIND9 -->\r
+<h3>E Install BIND9<A class=anchor href="#bind0" name=bind0>†</A></h3>\r
+\r
+<ul>\r
+ <li class="list_num"><A href="#bind1">Install (ports)</A></li>\r
+ <li class="list_num"><A href="#bind2">Make RNDC key</A></li>\r
+ <li class="list_num"><A href="#bind3">Setup named.conf</A></li>\r
+ <li class="list_num"><A href="#bind4">Setup zone</A></li>\r
+ <li class="list_num"><A href="#bind5">Start confirmation</A></li>\r
+</ul>\r
+\r
+<!-- ********** 1 *********** -->\r
+<h4>E.1 Install (ports)<A class=anchor href="#bind1" name=bind1>†</A></h4>\r
+\r
+<p>If the IPv6 function is available, Opengate needs two FQDNs. It can be settled even to register FQDN for Opengate with existing DNS. When use NAT, you had not better regist an address of IPv4 private network with outside DNS.</p>\r
+<p>If the IPv6 function is not available, you might ignore DNS setting and control with IP address base.</p>\r
+\r
+<table><tr><td><pre># cd /usr/ports/dns/bind9/\r
+# make clean\r
+===> Cleaning for bind9-9.3.1\r
+# make install clean ; rehash\r
+</pre></td></tr></table>\r
+\r
+<p>There is "/etc/namedb(/var/named/etc/namedb)" after installation.</p>\r
+\r
+<div align="right"><A href="#bind0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ********** 2 ********** -->\r
+<h4>E.2 Make RNDC key<A class=anchor href="#bind2" name=bind2>†</A></h4>\r
+\r
+<p>BIND9 is controlled by rndc command for security.</p>\r
+\r
+<table><tr><td><pre>\r
+# /usr/local/sbin/dnssec-keygen -a hmac-md5 -b 512 -n user rndc\r
+</pre></td></tr></table>\r
+<p>When error "out of entropy", try with next method.</p>\r
+\r
+<table><tr><td><pre>\r
+# /usr/local/sbin/dnssec-keygen -r /dev/urandom -a hmac-md5 -b 512 -n user rndc\r
+</pre></td></tr></table>\r
+\r
+<ul>\r
+ <li><pre>Krndc.+157+60849.key</pre></li>\r
+ <li><pre>Krndc.+157+60849.private</pre></li>\r
+</ul>\r
+\r
+<p>There is "/usr/local/etc/rndc.conf.sample" after BIND9 installation. \r
+And copy to "rndc.conf".</p>\r
+\r
+<p>Edit "key" directive as like "key" directive of "Krndc.+xxxxxxxx.private.</p>\r
+\r
+<table><tr><td><pre>options {\r
+ default-server localhost;\r
+ default-key "key";\r
+};\r
+\r
+server localhost {\r
+ key "key";\r
+};\r
+\r
+key "key" {\r
+ algorithm hmac-md5;\r
+ secret "...";\r
+};\r
+</pre></td></tr></table>\r
+\r
+\r
+<div align="right"><A href="#bind0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ********* 3 ********* -->\r
+<h4>E.3 Setup named.conf<A class=anchor href="#bind3" name=bind3>†</A></h4>\r
+\r
+<p>There is "/etc/namedb/named.conf" after installation.</p>\r
+\r
+<p>Edit "key" directive as like "key" directive of "rndc.conf"</p>\r
+\r
+<table><tr><td><pre>key "rndc_key" {\r
+ algorithm hmac-md5;\r
+ secret "...";\r
+};\r
+\r
+controls {\r
+ inet ::1 allow {\r
+ ::1;\r
+ }\r
+ keys {\r
+ "rndc_key";\r
+ };\r
+ inet 127.0.0.1 allow {\r
+ 127.0.0.1;\r
+ }\r
+ keys {\r
+ "rndc_key";\r
+ };\r
+};\r
+</pre></td></tr></table>\r
+\r
+<p>Write "key" directive in the other file. And you had better include it in "named.conf". \r
+You can secure security more by setting a permission of the other file adequately.</p>\r
+\r
+<p>Edit "options" directive.</p>\r
+\r
+<table><tr><td><pre>options {\r
+ directory "/etc/namedb";\r
+ pid-file "/var/run/named/named.pid";\r
+ auth-nxdomain yes;\r
+ listen-on-v6 { any; };\r
+};\r
+</pre></td></tr></table>\r
+\r
+<p>Make a directory to put "named.pid" properly.</p>\r
+\r
+<div align="right"><A href="#bind0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ******** 4 ********* -->\r
+<h4>E.4 Setup Zone<A class=anchor href="#bind4" name=bind4>†</A></h4>\r
+\r
+<p>Edit "view" and "zone" directive.</p>\r
+\r
+<p>"view" directive is implemented in BIND9. "zone" is child directive of "view". \r
+BIND9 can choose zone which answers client by a DNS inquiry IP address by setting "view" adequately.</p>\r
+\r
+<table><tr><td><pre>view "og" {\r
+ match-clients\r
+ {\r
+ 10.0.0.0/16;\r
+ };\r
+\r
+ recursion yes;\r
+\r
+ zone "." {\r
+ type hint;\r
+ file "named.root";\r
+ };\r
+\r
+ zone "og.saga-u.ac.jp" {\r
+ type master;\r
+ file "og.saga-u.ac.jp";\r
+ };\r
+\r
+ zone "0.0.127.IN-ADDR.ARPA" {\r
+ type master;\r
+ file "master/localhost.rev";\r
+ };\r
+\r
+ // RFC 3152\r
+ zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\\r
+ 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA" {\r
+ type master;\r
+ file "master/localhost-v6.rev";\r
+ };\r
+\r
+ // RFC 1886 -- deprecated\r
+ zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\\r
+ 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.INT" {\r
+ type master;\r
+ file "master/localhost-v6.rev";\r
+ };\r
+};\r
+</pre></td></tr></table>\r
+\r
+<p>Make a "zone" file of domain as "og.saga-u.ac.jp".</p>\r
+\r
+<table><tr><td><pre>$TTL 3600\r
+$ORIGIN og.saga-u.ac.jp.\r
+\r
+@ IN SOA ns.og.saga-u.ac.jp. postmaster (\r
+ 2005051702 ;\r
+ 3600\r
+ 1200\r
+ 2419200\r
+ 86400 )\r
+ IN NS ns.og.saga-u.ac.jp.\r
+ IN A 10.0.0.2\r
+ IN MX 10 opengate.og.saga-u.ac.jp.\r
+\r
+ns IN A 10.0.0.2\r
+\r
+opengate IN A 10.0.0.2\r
+ AAAA 2001:2f8:10:1::1\r
+\r
+opengate4 IN A 133.49.1.2\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#bind0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ********* 5 ********* -->\r
+<h4>E.5 Start confirmation<A class=anchor href="#bind5" name=bind5>†</A></h4>\r
+\r
+<p>Confirm starting "named" after setting was completed.</p>\r
+\r
+<table><tr><td><pre>\r
+# /usr/local/sbin/named/ -u bind -c /etc/namedb/named.conf\r
+</pre></td></tr></table>\r
+\r
+<p>If "named" starts without a problem, Add next lines to "/etc/rc.conf".</p>\r
+\r
+<table><tr><td><pre>named_enable="YES"\r
+named_program="/usr/local/sbin/named"\r
+named_flags="-u bind -c /etc/namedb/named.conf"\r
+</pre></td></tr></table>\r
+\r
+<p>Because management of a DNS server is too complicatedly, You had better read manual of BIND9 carefully, and \r
+refer to other document.</p>\r
+\r
+<div align="right"><A href="#bind0">back</A> <A href="#top">top</A></div>\r
+<hr>\r
+<!-- Start:Install MRTG -->\r
+<h3>F MRTG<A class=anchor href="#mrtg0" name=mrtg0>†</A></h3>\r
+\r
+<ul>\r
+ <li class="list_num"><A href="#mrtg1">Install (ports)</A></li>\r
+ <li class="list_num"><A href="#mrtg2">Setup MRTG</A></li>\r
+ <li class="list_num"><A href="#mrtg3">Start confirmation</A></li>\r
+ <li class="list_num"><A href="#mrtg4">Setup crontab</A></li>\r
+</ul>\r
+\r
+<!-- ************ 1 ************** -->\r
+<h4>F.1 Install MRTG<A class=anchor href="#mrtg1" name=mrtg1>†</A></h4>\r
+\r
+<p>This is optional. You can use MRTG to watch a state of Opengate. If you do not want to watch the state of Opengate, you do not need to install MRTG.</p>\r
+\r
+<p><a href="http://people.ee.ethz.ch/~oetiker/webtools/mrtg/" target="_blank">MRTG</a>(Multi Router Traffic Grapher) is system to watch network traffic. \r
+MRTG makes graphic images and HTML files. </p>\r
+\r
+<p>You can install MRTG to gateway server or another server. If you must watch plural Opengate, you \r
+had better install MRTG to another server.</p>\r
+\r
+<table><tr><td><pre>\r
+# cd /usr/ports/net-mgmt/mrtg/\r
+# make clean\r
+===> Cleaning for mrtg-2.12.2,1\r
+# make install clean ; rehash\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#mrtg0">back</A> <A href="#top">top</A></div><!-- ************ 2 ************** -->\r
+<h4>F.2 Setup MRTG<A class=anchor href="#mrtg2" name=mrtg2>†</A></h4>\r
+\r
+<p>There is "/usr/local/etc/mrtg/mrtg.cfg.sample" as configuration file after instalation. \r
+Copy mrtg.cfg.sample to opengate.cfg and edit configuration file.</p>\r
+\r
+<table><tr><td><pre>\r
+##################################################\r
+# opengate user counter\r
+\r
+WorkDir: /usr/home/user/public_html/mrtg/opengate/\r
+\r
+##### Options\r
+Options[^]: growright,gauge,nopercent,integer\r
+\r
+Target[opengate]:`/usr/home/user/bin/input.sh`\r
+Title[opengate]: Opengate user counter\r
+\r
+PageTop[opengate]: <h1>Opengate user counter</h1>\r
+ <p>Show the number of people using Opengate</p>\r
+\r
+# Max Number\r
+MaxBytes[opengate]: 200\r
+\r
+# Title of Y axis\r
+YLegend[opengate]: Opengate User\r
+# unit\r
+ShortLegend[opengate]: s\r
+# Title of graph LegendI: first line LegendO: second line\r
+LegendI[opengate]: IPv6 Users\r
+LegendO[opengate]: Total Users\r
+</pre></td></tr></table>\r
+\r
+<p>make a directory which you appointed in "WorkDir". MRTG makes graphic images and HTML files in WorkDir.</p>\r
+\r
+<p>"Target[opengate]" is path to program to hand data to MRTG. explain below th details.</p>\r
+\r
+\r
+\r
+<h5>F.2.1 Case of gateway server<A class=anchor href="#mrtg21" name=mrtg21>†</A></h5>\r
+\r
+<p>Put this shellscript as "/usr/home/user/bin/input.sh".</p>\r
+\r
+<table><tr><td><pre>\r
+#!/bin/sh\r
+\r
+#######################################\r
+##\r
+## shwo opengate status for MRTG\r
+##\r
+## 1 line : IPv6 Users\r
+## 2 line : Total Users\r
+## 3 line : uptime\r
+## 4 line : comment for data\r
+##\r
+#######################################\r
+\r
+LANG=C\r
+COLUMNS=256\r
+\r
+export LANG\r
+export COLUMNS\r
+\r
+### IPv6 prefix\r
+prefix="2001:2f8:22:801:"\r
+###opengateprocessname\r
+process="opengatesrv.cgi" \r
+\r
+###tmp file name\r
+tmp_all="/tmp/og_count_all.tmp"\r
+tmp_6="/tmp/og_count_6.tmp"\r
+\r
+######################################################\r
+psax | grep $process > $tmp_all\r
+COUNT = `wc-l $tmp_all | awk '{print $1}'` \r
+grep $prefix $tmp_all > $tmp_6\r
+COUNT6=`wc -l $tmp_6 | awk '{print $1}'`\r
+UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`\r
+\r
+rm $tmp_all\r
+rm $tmp_6\r
+\r
+echo "$COUNT6"\r
+echo "$COUNT"\r
+echo "$UPTIME"\r
+echo "Opengate User Counter"\r
+</pre></td></tr></table>\r
+\r
+<p>carry out this shell script alone and confirm that you can acquire the following data.</p>\r
+\r
+<table><tr><td><pre>5\r
+48\r
+10days\r
+Opengate User Counter\r
+</pre></td></tr></table>\r
+\r
+\r
+<h5>F.2.2 Case of another server<A class=anchor href="#mrtg22" name=mrtg22>†</A></h5>\r
+\r
+<p>Put this shellscript as "/usr/home/user/bin/input.sh" on another server.</p>\r
+\r
+<table><tr><td><pre>\r
+#!/bin/sh\r
+\r
+#######################################\r
+##\r
+## input data for MRTG\r
+##\r
+## 1 line : IPv6 Users\r
+## 2 line : Total Users\r
+## 3 line : uptime\r
+## 4 line : comment for data\r
+##\r
+#######################################\r
+\r
+# tmp file name\r
+file="/tmp/opengate.tmp"\r
+\r
+# URL of output.sh at opengate\r
+url="http://opengate.saga-u.ac.jp/cgi-bin/output.sh"\r
+\r
+fetch -o $file $url &> /dev/null\r
+\r
+more $file\r
+</pre></td></tr></table>\r
+\r
+<p>Put this shell script as "/usr/local/apache2/cgi-bin/output.sh" on Opengate server. \r
+And set this URL to $url in script explained by the above.</p>\r
+\r
+<table><tr><td><pre>\r
+#!/bin/sh\r
+\r
+#######################################\r
+##\r
+## shwo opengate status for MRTG\r
+##\r
+## 1 line : IPv6 Users\r
+## 2 line : Total Users\r
+## 3 line : uptime\r
+## 4 line : comment for data\r
+##\r
+#######################################\r
+\r
+LANG=C\r
+COLUMNS=256\r
+\r
+export LANG\r
+export COLUMNS\r
+\r
+### IPv6 prefix\r
+prefix="2001:2f8:22:801:"\r
+###opengateprocessname\r
+process="opengatesrv.cgi" \r
+\r
+###tmp file name\r
+tmp_all="/tmp/og_count_all.tmp"\r
+tmp_6="/tmp/og_count_6.tmp"\r
+\r
+######################################################\r
+psax | grep $process > $tmp_all \r
+COUNT = `wc-l $tmp_all | awk '{print $1}'` \r
+grep $prefix $tmp_all > $tmp_6\r
+COUNT6=`wc -l $tmp_6 | awk '{print $1}'`\r
+UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`\r
+rm $tmp_all\r
+rm $tmp_6\r
+\r
+echo "Content-type: text/plain; charset=iso-8859-1"\r
+echo\r
+\r
+echo "$COUNT6"\r
+echo "$COUNT"\r
+echo "$UPTIME"\r
+echo "Opengate User Counter"\r
+</pre></td></tr></table>\r
+\r
+<p>carry out "input.sh" shell script on another server and confirm that you can acquire the following data.</p>\r
+\r
+<table><tr><td><pre>5\r
+48\r
+10days\r
+Opengate User Counter\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#mrtg0">back</A> <A href="#top">top</A></div><!-- ************ 3 ************** -->\r
+<h4>F.3 Start confirmation<A class=anchor href="#mrtg3" name=mrtg3>†</A></h4>\r
+\r
+<p>Confirm after setting was completed.</p>\r
+\r
+<table><tr><td><pre>\r
+# /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg\r
+</pre></td></tr></table>\r
+\r
+<p>Various WARNING is output the first time and second.</p>\r
+\r
+<p>There is some files in "WorkDir".</p>\r
+\r
+<table><tr><td><pre>> ls -l\r
+-rw-r--r-- 1 root wheel 538 12 14 04:40 mrtg-l.png\r
+-rw-r--r-- 1 root wheel 414 12 14 04:40 mrtg-m.png\r
+-rw-r--r-- 1 root wheel 1759 12 14 04:40 mrtg-r.png\r
+-rw-r--r-- 1 root wheel 2941 12 20 15:15 opengate-day.png\r
+-rw-r--r-- 1 root wheel 2146 12 20 14:35 opengate-month.png\r
+-rw-r--r-- 1 root wheel 2867 12 20 14:55 opengate-week.png\r
+-rw-r--r-- 1 root wheel 1897 12 20 05:00 opengate-year.png\r
+-rw-r--r-- 1 root wheel 5961 12 20 15:15 opengate.html\r
+-rw-r--r-- 1 root wheel 48786 12 20 15:15 opengate.log\r
+-rw-r--r-- 1 root wheel 48784 12 20 15:10 opengate.old\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#mrtg0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 4 ************** -->\r
+<h4>F.4 Setup crontab<A class=anchor href="#mrtg4" name=mrtg4>†</A></h4>\r
+\r
+<p>Add next line to "/etc/crontab".</p>\r
+\r
+<table><tr><td><pre>\r
+*/5 * * * * root /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#mrtg0">back</A> <A href="#top">top</A></div>\r
+\r
+<hr>\r
+\r
+<!-- ************ 1 ************** -->\r
+<h3>G Install rulechk<A class=anchor href="#rulechk" name=rulechk>†</A></h3>\r
+\r
+<p>This is optional. At the abnormal termination of Opengate process, superfluous rule might be left bihind. Though it is very rare, a script dealing with the case is prepared in tools/rulechk. The script compares the Opengate process list and the firewall rule list, and deletes the superfluous rules.\r
+</p>\r
+<div align="right"><A href="#rulechk">back</A> <A href="#top">top</A></div>\r
+\r
+</body>\r
</html>
\ No newline at end of file
<title>Opengate Q & A</title>
</head>
-<BODY>
-<body bgcolor=#BBEECC>
+<body bgcolor=#fafff0>
-<H3>Opengate Q & A</H3>
+<H3>Opengate Q & A</H3>
Concept
<UL>
<BLOCKQUOTE>
The no Java user can enters the usage duraion in auth page. To cope with hijacking and notting, the connection state is checked periodically by ARP command and packet count passing the firewall. The user can also close the network by clicking the TERMINATE link in accept page.
-</BLOCKQUOTE>
+</BLOCKQUOTE></LI>
</UL>
<BLOCKQUOTE>
We are using the system in environments including active 50 or above terminals.
-</BLOCKQUOTE>
+</BLOCKQUOTE></LI>
</UL>
Installation and Development
Is the system compatible with IPv6?
<BLOCKQUOTE>
-It might be realized by controlling both ipfw and ip6fw. But, in ipv4/IPv6 dual stack state, it is not so easy to get all IP addresses for the requested terminal. Thus, it is not yet programmed.
+
-For the present, following method might be the solution, though there is a restriction. Modify the ipfw control script opengatefw.pl as to allow IPv6 packet from/to the requested terminal's MAC address. The method can be used when the gateway and the terminal stay in the same ethernet link.
-</BLOCKQUOTE>
+ Yes. IPv6 support is added in Version 1.2.0.
+</BLOCKQUOTE></LI>
</UL>
-</BODY>
+</body>
</HTML>
\r
.list_none {\r
list-style : none;\r
- font-weight : bold;\r
+ font-weight : none;\r
}\r
\r
+<META HTTP-EQUIV="Content-Type" CONTENT="text/html;charset=Shift_JIS">
<html LANG="jp">
<head>
-<META HTTP-EQUIV="Content-Type" CONTENT="text/html;charset=Shift_JIS">
<title>Opengate Error Check</title>
</head>
-<BODY>
-<body bgcolor=#BBEECC>
+<body bgcolor=#fafff0>
<H3>Opengate \83G\83\89\81[\83`\83F\83b\83N\8d\80\96Ú</H3>
<P>
-Opengate \82Í\91½\82\82Ì\83\\83t\83g\83E\83F\83A\82Ì\8aÔ\82Ì\92\87\89î\82ð\8ds\82¤\82à\82Ì\82Å\82·\82Ì\82Å\81A\89½\82ª\8bN\82«\82Ä\82¢\82é\82Ì\82©\94»\92f\82ª\93ï\82µ\82¢\82Å\82·\81B\82Ü\82½\8c»\8fó\82Å\82Í\83f\83o\83b\83O\82Ì\82½\82ß\82É\90ê\97p\82Ì\8b@\94\\82Í\90Ý\92è\82µ\82Ä\82 \82è\82Ü\82¹\82ñ\81B\82»\82±\82Å\81A\82±\82Ì\83\81\83\82\82Í\81A\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82à Opengate \82ª\93®\82©\82È\82¢\8e\9e\82Ì\8eQ\8dl\82Ì\82½\82ß\82É\8bL\82µ\82Ü\82·\81B
+Opengate
+\82Í\91½\82\82Ì\83\\83t\83g\83E\83F\83A\82Ì\8aÔ\82Ì\92\87\89î\82ð\8ds\82¤\82à\82Ì\82Å\82·\82Ì\82Å\81A\89½\82ª\8bN\82«\82Ä\82¢\82é\82Ì\82©\94»\92f\82ª\93ï\82µ\82¢\82Å\82·\81B\82Ü\82½\8c»\8fó\82Å\82Í\83f\83o\83b\83O\82Ì\82½\82ß\82É\90ê\97p\82Ì\8b@\94\\82Í\90Ý\92è\82µ\82Ä\82 \82è\82Ü\82¹\82ñ\81B\82»\82±\82Å\81A\82±\82Ì\83\81\83\82\82Í\81A\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82à
+Opengate \82ª\93®\82©\82È\82¢\8e\9e\82Ì\8eQ\8dl\82Ì\82½\82ß\82É\8bL\82µ\82Ü\82·\81B \8c»\8dÝ\81A\82±\82Ì\83h\83L\83\85\83\81\83\93\83g\82ÍVersion 1.1.x\97p\82Å\82·\81B
<P>
\82¤\82Ü\82\93®\82©\82È\82¢\8fê\8d\87\81A\82Ü\82¸\81A\8aÖ\98A\82·\82é\83\\83t\83g\83E\83F\83A\82ª\8ae\81X\92P\93Æ\82Å\90³\8fí\93®\8dì\82·\82é\82©\8am\94F\82µ\82Ä\82\82¾\82³\82¢\81B\93Á\82É ipfw \82Ì\90Ý\92è\82Í\82 \82¿\82±\82¿\82É\89e\8b¿\82µ\82Ü\82·\82Ì\82Å\8f\\95ª\92\8d\88Ó\82ª\95K\97v\82Å\82·\81B\8dÅ\8f\89\82Íipfw\82ð\91S\8aJ\95ú\82É\8bß\82\90Ý\92è\82µ\82Ä\82¤\82Ü\82\93®\82\82Ì\82ð\8am\94F\82µ\82Ä\82©\82ç\95Â\82¶\82Ä\82\82¾\82³\82¢\81B
<P>
-Opengate\82Í\88È\89º\82Ì\83t\83@\83C\83\8b\82ð\97\98\97p\82µ\82Ü\82·\81B\82±\82ê\82ç\82Í\90³\82µ\82\94z\92u\82³\82ê\82Ä\82¢\82Ü\82·\82©\81B
-\83f\83B\83\8c\83N\83g\83\8a\82Ídefault\88Ê\92u\82Å\82·\81B
-<PRE>
- /usr/local/www/cgi-bin/opengate/opengatesrv.cgi
+Opengate\82Í\88È\89º\82Ì\83t\83@\83C\83\8b\82ð\97\98\97p\82µ\82Ü\82·\81B\82±\82ê\82ç\82Í\90³\82µ\82\94z\92u\82³\82ê\82Ä\82¢\82Ü\82·\82©\81B\83f\83B\83\8c\83N\83g\83\8a\82Ídefault\88Ê\92u\82Å\82·\81B
+<PRE> /usr/local/www/cgi-bin/opengate/opengatesrv.cgi
/usr/local/www/data/index.html.*
/usr/local/www/data/opengate/Opengate.class
/usr/local/www/data/opengate/OpengateClient.class
/etc/opengatefw.pl
/var/log/opengate.log
</PRE>
-\82³\82ç\82É\81A\83\8d\83b\83N\83t\83@\83C\83\8b\82Æ\82µ\82Ä /tmp/opengate.lock\82ð\8eg\97p\82µ\82Ü\82·\82ª\81A\8dì\90¬\82Í\95s\97v
-\82Å\82·\81B\8fÁ\82µ\82Ä\82à\8d\\82¢\82Ü\82¹\82ñ\81B
+ \82³\82ç\82É\81A\83\8d\83b\83N\83t\83@\83C\83\8b\82Æ\82µ\82Ä
+/tmp/opengate.lock\82ð\8eg\97p\82µ\82Ü\82·\82ª\81A\8dì\90¬\82Í\95s\97v\82Å\82·\81B\8fÁ\82µ\82Ä\82à\8d\\82¢\82Ü\82¹\82ñ\81B
<P>
-
\95Ê
\82É
\81A<A
HREF=progflow.html>
\83v
\83\8d\83O
\83\89\83\80\83t
\83\8d\81[
\89ð
\90à</A>
\82ð
\97p
\88Ó
\82µ
\82Ä
\82¢
\82Ü
\82·
\81B
\83v
\83\8d\83O
\83\89\83\80\82Ì
\8aî
\96{
\93I
\82È
\93®
\82«
\82ð
\94c
\88¬
\82µ
\82Ä
\82
\82¾
\82³
\82¢
\81B
+
\95Ê
\82É
\81A<A
href="../progflow.html" >
\83v
\83\8d\83O
\83\89\83\80\83t
\83\8d\81[
\89ð
\90à</A>
\82ð
\97p
\88Ó
\82µ
\82Ä
\82¢
\82Ü
\82·
\81B
\83v
\83\8d\83O
\83\89\83\80\82Ì
\8aî
\96{
\93I
\82È
\93®
\82«
\82ð
\94c
\88¬
\82µ
\82Ä
\82
\82¾
\82³
\82¢
\81B
<P>
\93®\82«\83`\83F\83b\83N\82Ì\82½\82ß\82É\83e\83X\83g\83v\83\8d\83O\83\89\83\80\82ð\97p\88Ó\82µ\82Ü\82µ\82½\81Bopengatesrv\92\86\82Étest-*\82Æ\82µ\82Ä\92u\82¢\82Ä\82¢\82Ü\82·\81B
<P>
<LI>\83\89\83C\83u\83\89\83\8a\93\99\82ª\95s\91«\82µ\82Ä\82¢\82é\82Æ\82Ì\83R\83\93\83p\83C\83\8b\83G\83\89\81[\82ª\8fo\82Ü\82·\81B
<P>
<UL>
-<LI>Ver.0.56\88È\8d~\82Í\81AFreeBSDv4\82É\82Ä\93®\8dì\8am\94F\82µ\82Ä\82¢\82Ü\82·\81BFreeBSD3\82Å\82Í\83R\83\93\83p\83C\83\8b\83G\83\89\81[\82ª\94\90¶\82µ\82Ü\82·\81B
+<LI>Ver.0.56\88È\8d~\82Í\81AFreeBSDv4\82É\82Ä\93®\8dì\8am\94F\82µ\82Ä\82¢\82Ü\82·\81BFreeBSD3\82Å\82Í\83R\83\93\83p\83C\83\8b\83G\83\89\81[\82ª\94\90¶\82µ\82Ü\82·\81B</LI>
</UL>
-<P>
+<P></P>
<LI>\83Q\81[\83g\83E\83F\83C\82Ì\83z\81[\83\80\83y\81[\83W\82Ö\83\8a\83_\83C\83\8c\83N\83g\82µ\82È\82¢\81B
<P>
<LI>\90Ú\91±\82µ\82æ\82¤\82Æ\82µ\82½\82Ì\82ª\83T\83C\83g\82Ì\83g\83b\83v\83y\81[\83W\88È\8aO\82Ì\8fê\8d\87\81A\83g\83b\83v\83y\81[\83W\82Å\8e\8e\82µ\82Ä\82\82¾\82³\82¢\81B\82±\82ê\82Å\82¤\82Ü\82\82¢\82\82Ì\82Å\82 \82ê\82Î\81AApache httpd.conf\82É\82¨\82¢\82Ä PageNotFound \83G\83\89\81[\82Ì\82Æ\82«\82É\83g\83b\83v\83y\81[\83W\82ð\95\\8e¦\82·\82é\82æ\82¤\90Ý\92è\82³\82ê\82Ä\82¢\82é\82©\8am\94F\82\82¾\82³\82¢\81B
-<LI>Microsoft Internet Explorer 5
\88È
\8d~
\82Í
\81A
\83\8a\83_
\83C
\83\8c\83N
\83g
\90æ
\82Ì
\83y
\81[
\83W
\82ª512
\83o
\83C
\83g
\88È
\8fã
\82Å
\82È
\82¢
\82Æ
\81APageNotFound
\8e\9e\82Ì
\83\8a\83_
\83C
\83\8c\83N
\83g
\95\
\8e¦
\82ª
\82¤
\82Ü
\82
\82¢
\82«
\82Ü
\82¹
\82ñ
\81B
\83g
\83b
\83v
\83y
\81[
\83W
\82É
\8bó
\94\92\82ð
\90\94\95S
\83o
\83C
\83g
\92Ç
\89Á
\82µ
\82Ä
\82Ý
\82Ä
\82
\82¾
\82³
\82¢
\81B
\8eQ
\8dl
\8fî
\95ñ
\82Í<a href=http://www.microsoft.com/japan/support/kb/articles/JP218/1/55.asp>http://www.microsoft.com/japan/support/kb/articles/JP218/1/55.asp</a>
\82Å
\82·
\81B
+<LI>Microsoft Internet Explorer 5
\88È
\8d~
\82Í
\81A
\83\8a\83_
\83C
\83\8c\83N
\83g
\90æ
\82Ì
\83y
\81[
\83W
\82ª512
\83o
\83C
\83g
\88È
\8fã
\82Å
\82È
\82¢
\82Æ
\81APageNotFound
\8e\9e\82Ì
\83\8a\83_
\83C
\83\8c\83N
\83g
\95\
\8e¦
\82ª
\82¤
\82Ü
\82
\82¢
\82«
\82Ü
\82¹
\82ñ
\81B
\83g
\83b
\83v
\83y
\81[
\83W
\82É
\8bó
\94\92\82ð
\90\94\95S
\83o
\83C
\83g
\92Ç
\89Á
\82µ
\82Ä
\82Ý
\82Ä
\82
\82¾
\82³
\82¢
\81B
\8eQ
\8dl
\8fî
\95ñ
\82Í<a href="http://www.microsoft.com/japan/support/kb/articles/JP218/1/55.asp"
+ >http://www.microsoft.com/japan/support/kb/articles/JP218/1/55.asp</a>\82Å\82·\81B
<LI>\90Ú\91±\82µ\82æ\82¤\82Æ\82µ\82½\83T\83C\83g\82Í\93\96\83Q\81[\83g\83E\83F\83C\82ð\92Ê\82Á\82½\90æ\82É\90Ý\92è\82³\82ê\82Ä\82¢\82Ü\82·\82©\81B\83Q\81[\83g\83E\83F\83C\82ð\92Ê\82é\92Ê\90M\82µ\82©\83\8a\83_\83C\83\8c\83N\83g\82Å\82«\82Ü\82¹\82ñ\81B
<LI>\96¼\91O\82ª\89ð\8eß\82Å\82«\82È\82¢\82Ì\82È\82ç\81ADNS\82Ì\90Ý\92è\82ð\8am\94F\82\82¾\82³\82¢\81B
-<LI>\8dÅ\8f\89\82Ì\89æ\96Ê\82ÍSSL\89»\82µ\82È\82¢\82Å\82\82¾\82³\82¢\81B
+<LI>\8dÅ\8f\89\82Ì\89æ\96Ê\82ÍSSL\89»\82µ\82È\82¢\82Å\82\82¾\82³\82¢\81B</LI>
</UL>
-<P>
+<P></P>
<LI>\83\86\81[\83UID\82Æ\83p\83X\83\8f\81[\83h\82Ì\93ü\97Í\89æ\96Ê\82Ö\88Ú\8ds\82µ\82È\82¢\81B
<P>
<LI>\82r\82r\82k\89»\82µ\82Ä\82 \82ê\82Î\81A\82Ü\82¸\82Í\82r\82r\82k\96³\82µ\82Å\93®\82\82±\82Æ\82ð\8am\94F\82\82¾\82³\82¢\81B
-<LI>\88Ú\8ds\90æ\83A\83h\83\8c\83X\82Ì\8bL\8fq\82Í\81A\91\8a\91Î\83p\83X\82Å\82Í\82È\82\83t\83\8b\83p\83X\82Å\8ew\92è\82\82¾\82³\82¢\81B
+<LI>\88Ú\8ds\90æ\83A\83h\83\8c\83X\82Ì\8bL\8fq\82Í\81A\91\8a\91Î\83p\83X\82Å\82Í\82È\82\83t\83\8b\83p\83X\82Å\8ew\92è\82\82¾\82³\82¢\81B</LI>
</UL>
-<P>
+<P></P>
<LI>\83\86\81[\83U ID \82Æ\83p\83X\83\8f\81[\83h\82ð\91\97\82Á\82Ä\82à\95Ô\8e\96\82ª\82È\82¢\81B\82Ü\82½\82Í\81AWeb \82ª\83G\83\89\81[\82ð\8bA\82·\81B
<P>
<UL>
<LI>Java \82Í\90³\82µ\82¢\88Ê\92u\82É\95Û\91¶\82µ\82Ä\82¢\82Ü\82·\82©\81B\82»\82Ì Java \82Í\90³\8fí\82É\93®\82\83v\83\8d\83O\83\89\83\80\82Å\82·\82©\81B
-<LI>conf\83t\83@\83C\83\8b\92\86\82Ì\83T\81[\83o\83A\83h\83\8c\83X\82ð\96¼\91O\82Å\82Í\82È\82\81A\90\94\8e\9a\95\\8bL\82É\82µ\82Ä\82Ý\82Ä\82\82¾\82³\82¢\81B
+<LI>conf\83t\83@\83C\83\8b\92\86\82Ì\83T\81[\83o\83A\83h\83\8c\83X\82ð\96¼\91O\82Å\82Í\82È\82\81A\90\94\8e\9a\95\\8bL\82É\82µ\82Ä\82Ý\82Ä\82\82¾\82³\82¢\81B</LI>
</UL>
-<P>
+<P></P>
<LI>\90³\82µ\82\83p\83X\83\8f\81[\83h\82ð\93ü\82ê\82Ä\82¢\82é\82Í\82¸\82È\82Ì\82É\8b\91\94Û\82³\82ê\82é\81B
<P>
<UL>
<LI>\83R\83\93\83\\81[\83\8b\82©\82ç\94F\8fØ\83T\81[\83o\82Ö\83A\83N\83Z\83X\82µ\82Ä\82Ý\82Ä\90³\82µ\82\93®\82\82©\8am\94F\89º\82³\82¢\81B
-<LI>FTP\83T\81[\83o\82É\82æ\82Á\82Ä\82Í\81AWelcome\83\81\83b\83Z\81[\83W\82È\82Ç\82ª\95¡\90\94\8ds\82É\82È\82Á\82Ä\82¢\82é\82±\82Æ\82ª\82 \82è\82Ü\82·\82ª\81AOpengate\82Í\88ê\8ds\82ð\89¼\92è\82µ\82Ä\93®\8dì\82µ\82Ü\82·\81BFTP\83T\81[\83o\82Ì\90Ý\92è\82ð\95Ï\8dX\82µ\82Ä\82\82¾\82³\82¢\81B
-\95Ï\8dX\95s\89Â\82È\82çOpengate\82Ì\89ï\98b\95\94\95ª\83\\81[\83X\82Ì\95Ï\8dX\82Å\91Î\89\9e\89º\82³\82¢\81BVer.0.90l\82Å\95¡\90\94\8ds\82É\91Î\89\9e\82µ\82Ü\82µ\82½\81B
+<LI>
+FTP\83T\81[\83o\82É\82æ\82Á\82Ä\82Í\81AWelcome\83\81\83b\83Z\81[\83W\82È\82Ç\82ª\95¡\90\94\8ds\82É\82È\82Á\82Ä\82¢\82é\82±\82Æ\82ª\82 \82è\82Ü\82·\82ª\81AOpengate\82Í\88ê\8ds\82ð\89¼\92è\82µ\82Ä\93®\8dì\82µ\82Ü\82·\81BFTP\83T\81[\83o\82Ì\90Ý\92è\82ð\95Ï\8dX\82µ\82Ä\82\82¾\82³\82¢\81B\95Ï\8dX\95s\89Â\82È\82çOpengate\82Ì\89ï\98b\95\94\95ª\83\\81[\83X\82Ì\95Ï\8dX\82Å\91Î\89\9e\89º\82³\82¢\81BVer.0.90l\82Å\95¡\90\94\8ds\82É\91Î\89\9e\82µ\82Ü\82µ\82½\81B
-<LI>\8aJ\95ú\8dÏ\82Ì\92[\96\96\82©\82ç\8fd\95¡\82µ\82Ä\97v\8b\81\82ª\97\88\82é\82Æ\8b\91\94Û\82µ\82Ü\82·\81B\82»\82Ì\82Ü\82Ü\8aO\82Ì\83T\83C\83g\82ª\8c©\82¦\82é\82È\82ç\8aJ\95ú\82³\82ê\82Ä\82¢\82Ü\82·\81BJavaApplet\82ª\8bN\93®\82É\8e¸\94s\82µ\82½\8fê\8d\87\82Í\81A\83T\81[\83o\91¤\83v\83\8d\83Z\83X\82ÍJavaApplet\82ª\90Ú\91±\82µ\82Ä\82\82é\82Ì\82ðfirewall\82ð\8aJ\95ú\82µ\82Ä\88ê\92è\8e\9e\8aÔ\91Ò\82¿\81A\95Â\8d½\82µ\82Ä\8fI\97¹\82µ\82Ü\82·\81B
+<LI>\8aJ\95ú\8dÏ\82Ì\92[\96\96\82©\82ç\8fd\95¡\82µ\82Ä\97v\8b\81\82ª\97\88\82é\82Æ\8b\91\94Û\82µ\82Ü\82·\81B\82»\82Ì\82Ü\82Ü\8aO\82Ì\83T\83C\83g\82ª\8c©\82¦\82é\82È\82ç\8aJ\95ú\82³\82ê\82Ä\82¢\82Ü\82·\81BJavaApplet\82ª\8bN\93®\82É\8e¸\94s\82µ\82½\8fê\8d\87\82Í\81A\83T\81[\83o\91¤\83v\83\8d\83Z\83X\82ÍJavaApplet\82ª\90Ú\91±\82µ\82Ä\82\82é\82Ì\82ðfirewall\82ð\8aJ\95ú\82µ\82Ä\88ê\92è\8e\9e\8aÔ\91Ò\82¿\81A\95Â\8d½\82µ\82Ä\8fI\97¹\82µ\82Ü\82·\81B</LI>
</UL>
-<P>
+<P></P>
<LI>\97\98\97p\8b\96\89Â\82Ì\83y\81[\83W\82ª\95\\8e¦\82³\82ê\82é\82ª\82µ\82Î\82ç\82\8co\82Â\82Æ\83l\83b\83g\83\8f\81[\83N\82ª\90Ø\92f\82³\82ê\82é\81B
<P>
<UL>
<LI>\8fã\8bL\8d\80\96Ú\82Ì Java \8aÖ\98A\82ð\8am\94F\82\82¾\82³\82¢\81B\82Ü\82½ netstat \93\99\82Å\83l\83b\83g\83\8f\81[\83N\8fó\8bµ\82ð\94c\88¬\82\82¾\82³\82¢\81BWeb\83u\83\89\83E\83U\89º\95\94\82Ì\83\81\83b\83Z\81[\83W\8ds\82É\89½\82©\8fo\82Ä\82È\82¢\82©\8am\94F\82\82¾\82³\82¢\81B
-<LI>\92[\96\96\82Æ\83Q\81[\83g\83E\83F\83C\83g\82Ì\8aÔ\82É\83L\83\83\83b\83V\83\85\83T\81[\83o\82âNAT\81CProxy\82È\82Ç\82ª\91¶\8dÝ\82·\82é\8fê\8d\87\81A\82»\82Ì\83T\81[\83o\82Ì IP \83A\83h\83\8c\83X\82ð\92[\96\96\83A\83h\83\8c\83X\82Æ\8cë\89ð\82·\82é\82½\82ß\81AApplet \82ª\90³\8fí\93®\8dì\82µ\82Ü\82¹\82ñ\81B\82±\82Ì\82æ\82¤\82È\8d\\90¬\82Í\94ð\82¯\82Ä\82\82¾\82³\82¢\81B
+<LI>\92[\96\96\82Æ\83Q\81[\83g\83E\83F\83C\83g\82Ì\8aÔ\82É\83L\83\83\83b\83V\83\85\83T\81[\83o\82âNAT\81CProxy\82È\82Ç\82ª\91¶\8dÝ\82·\82é\8fê\8d\87\81A\82»\82Ì\83T\81[\83o\82Ì IP
+ \83A\83h\83\8c\83X\82ð\92[\96\96\83A\83h\83\8c\83X\82Æ\8cë\89ð\82·\82é\82½\82ß\81AApplet \82ª\90³\8fí\93®\8dì\82µ\82Ü\82¹\82ñ\81B\82±\82Ì\82æ\82¤\82È\8d\\90¬\82Í\94ð\82¯\82Ä\82\82¾\82³\82¢\81B</LI>
</UL>
-<P>
+<P></P>
<LI>\97\98\97p\8b\96\89Â\83y\81[\83W\82Ì\95\\8e¦\82ª\82¨\82©\82µ\82¢\81B
<P>
<UL>
<LI>\90³\8fí\82Å\82 \82ê\82Î\81A2\96\87\82Ì\83y\81[\83W\82ª\8fd\82È\82Á\82Ä\95\\8e¦\82³\82ê\82Ü\82·\81B\91æ1\83y\81[\83W\82É\82Í\81AJavaApplet\82ª\89©\90F\82Ì\98g\82Ì\92\86\82É\83\86\81[\83UID\93\99\82ð\95\\8e¦\82µ\82Ü\82·\81B\91æ2\83y\81[\83W\82É\82Í\81A\8ae\8eí\83\8a\83\93\83N\82Æ\97\98\97p\8fã\82Ì\92\8d\88Ó\82ª\92u\82©\82ê\82Ü\82·\81B
<LI>\91æ1\83y\81[\83W\82É\89©\90F\82¢\98g\82ª\8fo\82È\82¢\8fê\8d\87\82Í\81AJavaApplet\82Ì\8bN\93®\82É\8e¸\94s\82µ\82½\82Æ\8dl\82¦\82ç\82ê\82Ü\82·\81B\8fã\8bL\82Ì\8d\80\96Ú\82ð\8eQ\8fÆ\82\82¾\82³\82¢\81B
-<LI>
\91æ2
\83y
\81[
\83W
\82ÍJavaScript
\82Å
\8fo
\82µ
\82Ä
\82¢
\82Ü
\82·
\81B
\8fo
\82È
\82¢
\8fê
\8d\87\82ÍJavaScript
\8aÖ
\98A
\82ª
\8b^
\82í
\82µ
\82¢
\82Å
\82·
\81B
\82½
\82¾
\82µ
\81A
\83y
\81[
\83W
\82ª
\8fo
\82È
\82
\82Ä
\82à
\97\98\97p
\82É
\8ex
\8fá
\82Í
\82 \82è
\82Ü
\82¹
\82ñ
\81B
\82È
\82¨
\81AInterner Explorer
\82Ì
\8fê
\8d\87\82Ì
\82Ý
\8bN
\82±
\82é
\82Ì
\82Å
\82 \82ê
\82Î
\81A
\83u
\83\89\83E
\83U
\82Ì
\90Ý
\92è
\82ª
\89ó
\82ê
\82Ä
\82¢
\82é
\82½
\82ß
\82©
\82à
\92m
\82ê
\82Ü
\82¹
\82ñ
\81B
\91¼
\82Ì
\83y
\81[
\83W
\82Å
\82à
\93¯
\8c»
\8fÛ
\82ª
\82 \82ê
\82Î
\88È
\89º
\82ð
\8c©
\82Ä
\82
\82¾
\82³
\82¢
\81B<A HREF=http://support.microsoft.com/support/kb/articles/q180/1/76.asp> http://support.microsoft.com/support/kb/articles/q180/1/76.asp </A>
\81BIE6
\82Å
\82à
\8bN
\82«
\82Ü
\82µ
\82½
\81B
+<LI>
\91æ2
\83y
\81[
\83W
\82ÍJavaScript
\82Å
\8fo
\82µ
\82Ä
\82¢
\82Ü
\82·
\81B
\8fo
\82È
\82¢
\8fê
\8d\87\82ÍJavaScript
\8aÖ
\98A
\82ª
\8b^
\82í
\82µ
\82¢
\82Å
\82·
\81B
\82½
\82¾
\82µ
\81A
\83y
\81[
\83W
\82ª
\8fo
\82È
\82
\82Ä
\82à
\97\98\97p
\82É
\8ex
\8fá
\82Í
\82 \82è
\82Ü
\82¹
\82ñ
\81B
\82È
\82¨
\81AInterner Explorer
\82Ì
\8fê
\8d\87\82Ì
\82Ý
\8bN
\82±
\82é
\82Ì
\82Å
\82 \82ê
\82Î
\81A
\83u
\83\89\83E
\83U
\82Ì
\90Ý
\92è
\82ª
\89ó
\82ê
\82Ä
\82¢
\82é
\82½
\82ß
\82©
\82à
\92m
\82ê
\82Ü
\82¹
\82ñ
\81B
\91¼
\82Ì
\83y
\81[
\83W
\82Å
\82à
\93¯
\8c»
\8fÛ
\82ª
\82 \82ê
\82Î
\88È
\89º
\82ð
\8c©
\82Ä
\82
\82¾
\82³
\82¢
\81B<A HREF="http://support.microsoft.com/support/kb/articles/q180/1/76.asp"
+ > http://support.microsoft.com/support/kb/articles/q180/1/76.asp </A>\81BIE6\82Å\82à\8bN\82«\82Ü\82µ\82½\81B</LI>
</UL>
-<P>
+<P></P>
<LI>\97\98\97p\94F\8fØ\82ð\92Ê\82ç\82È\82\82Ä\82à\8dÅ\8f\89\82©\82ç\83l\83b\83g\83\8f\81[\83N\82ª\97\98\97p\82Å\82«\82é\81B
<P>
<UL>
<LI>\83V\83X\83e\83\80\82Ì\93Ë\91R\92â\8e~\82â\83l\83b\83g\83\8f\81[\83N\82Ì\90Ø\92f\82Ì\82Æ\82«\82É\82Í\81A\83R\83l\83N\83V\83\87\83\93\82Ì\8fI\97¹\82ª\83T\81[\83o\82É\91Î\82µ\82Ä\91¦\8e\9e\82É\93`\82í\82è\82Ü\82¹\82ñ\81Bopengatesrv \82Í\81A\8e\9f\82Ì\92è\8aú\98A\97\8d\82Ì\8e\9e\82É\82»\82ê\82ð\8c\9f\8fo\82µ\82Ü\82·\82Ì\82Å\81A\82µ\82Î\82ç\82\91Ò\82Ä\82Î\95Â\8d½\82³\82ê\82é\82Í\82¸\82Å\82·\81B
-<LI>
\82¢
\82Â
\82Ü
\82Å
\82à
\95Â
\8d½
\82³
\82ê
\82È
\82¢
\8fê
\8d\87\82Í
\81A
\89½
\93\99\82©
\82Ì
\8c´
\88ö
\82Å ipfw
\82Ì
\83\8b\81[
\83\8b\82ª
\90¶
\82«
\8ec
\82Á
\82Ä
\82µ
\82Ü
\82Á
\82½
\82à
\82Ì
\82Æ
\8ev
\82í
\82ê
\82Ü
\82·
\81B
\8eè
\93®
\82Å
\8dí
\8f\9c\82·
\82é
\82©
\83V
\83X
\83e
\83\80\82ð
\83\8a\83u
\81[
\83g
\82µ
\82Ä
\82
\82¾
\82³
\82¢
\81BVer.0.90e
\88È
\8d~
\82Å
\82 \82ê
\82Î
\81A
\83v
\83\8d\83Z
\83X
\82Ì
\88Ù
\8fí
\8fI
\97¹
\8e\9e\82É
\90¶
\82«
\8ec
\82Á
\82½
\83\8b\81[
\83\8b\82ð
\92T
\82µ
\82Ä
\8dí
\8f\9c\82·
\82é<A HREF=rulechk.txt>
\83X
\83N
\83\8a\83v
\83g</A>
\82ª
\97\98\97p
\82Å
\82«
\82Ü
\82·
\81B
+<LI>\82¢\82Â\82Ü\82Å\82à\95Â\8d½\82³\82ê\82È\82¢\8fê\8d\87\82Í\81A\89½\93\99\82©\82Ì\8c´\88ö\82Å ipfw
+ \82Ì\83\8b\81[\83\8b\82ª\90¶\82«\8ec\82Á\82Ä\82µ\82Ü\82Á\82½\82à\82Ì\82Æ\8ev\82í\82ê\82Ü\82·\81B\8eè\93®\82Å\8dí\8f\9c\82·\82é\82©\83V\83X\83e\83\80\82ð\83\8a\83u\81[\83g\82µ\82Ä\82\82¾\82³\82¢\81BVer.0.90e\88È\8d~\82Å\82 \82ê\82Î\81A\83v\83\8d\83Z\83X\82Ì\88Ù\8fí\8fI\97¹\8e\9e\82É\90¶\82«\8ec\82Á\82½\83\8b\81[\83\8b\82ð\92T\82µ\82Ä\8dí\8f\9c\82·\82é\83X\83N\83\8a\83v\83g(tools/rulechk.sh)\82ª\97\98\97p\82Å\82«\82Ü\82·\81B
+ \82±\82ê\82ðcron\8eÀ\8ds\82µ\82Ä\82\82¾\82³\82¢\81B
-<LI>\92[\96\96\82Æ\83Q\81[\83g\83E\83F\83C\83g\82Ì\8aÔ\82É NAT \82ª\91¶\8dÝ\82·\82é\8fê\8d\87\81A\93¯\88ê\83A\83h\83\8c\83X\82ð\8b¤\97L\82·\82é\82±\82Æ\82É\82È\82è\82Ü\82·\82Ì\82Å\81A\88ê\90l\82ª\8aJ\82¯\82ê\82Î\8b¤\97L\82³\82ê\82Ü\82·\81B\82±\82Ì\82æ\82¤\82È\8d\\90¬\82Í\94ð\82¯\82Ä\82\82¾\82³\82¢\81B
+<LI>\92[\96\96\82Æ\83Q\81[\83g\83E\83F\83C\83g\82Ì\8aÔ\82É NAT
+ \82ª\91¶\8dÝ\82·\82é\8fê\8d\87\81A\93¯\88ê\83A\83h\83\8c\83X\82ð\8b¤\97L\82·\82é\82±\82Æ\82É\82È\82è\82Ü\82·\82Ì\82Å\81A\88ê\90l\82ª\8aJ\82¯\82ê\82Î\8b¤\97L\82³\82ê\82Ü\82·\81B\82±\82Ì\82æ\82¤\82È\8d\\90¬\82Í\94ð\82¯\82Ä\82\82¾\82³\82¢\81B</LI>
</UL>
-<P>
+<P></P>
<LI>\97\98\97p\8b\96\89Â\82ð\92Ê\82Á\82½\82Ì\82É\83l\83b\83g\83\8f\81[\83N\82ª\97\98\97p\82Å\82«\82È\82¢\81B
<P>
<LI>/var/log/opengate.log\82É\83G\83\89\81[\82ª\8fo\82Ä\82¢\82ê\82Î\82»\82ê\82ð\8eQ\8dl\82É\82µ\82Ä\82\82¾\82³\82¢\81B
-<LI>Redirect\82³\82ê\82étoppage\82ª\81uNoCache\81v\82Ì\90Ý\92è\82ð\8e\9d\82Á\82Ä\82¢\82È\82¢\82Æ\81A\8dÄ\93x\82Ì\83A\83N\83Z\83X\82Å\82Í\83L\83\83\83b\83V\83\85\82ª\8eg\82í\82ê\82é\81B\97á\82¦\82Î\81AYahoo\83A\83N\83Z\83X\82ªOpengate\82ÖRedirect\82³\82ê\82½\82Æ\82«\82Í\81A\97á\82¦\83l\83b\83g\83\8f\81[\83N\82ª\8aJ\82¢\82Ä\82¢\82Ä\82à\81AYahoo\83A\83N\83Z\83X\82É\91Î\82µ\82ÄOpengate\82Ì\83y\81[\83W\82ª\83L\83\83\83b\83V\83\85\82©\82ç\8eæ\82è\8fo\82³\82ê\82é\81B
+<LI>Redirect\82³\82ê\82étoppage\82ª\81uNoCache\81v\82Ì\90Ý\92è\82ð\8e\9d\82Á\82Ä\82¢\82È\82¢\82Æ\81A\8dÄ\93x\82Ì\83A\83N\83Z\83X\82Å\82Í\83L\83\83\83b\83V\83\85\82ª\8eg\82í\82ê\82é\81B\97á\82¦\82Î\81AYahoo\83A\83N\83Z\83X\82ªOpengate\82ÖRedirect\82³\82ê\82½\82Æ\82«\82Í\81A\97á\82¦\83l\83b\83g\83\8f\81[\83N\82ª\8aJ\82¢\82Ä\82¢\82Ä\82à\81AYahoo\83A\83N\83Z\83X\82É\91Î\82µ\82ÄOpengate\82Ì\83y\81[\83W\82ª\83L\83\83\83b\83V\83\85\82©\82ç\8eæ\82è\8fo\82³\82ê\82é\81B</LI>
</UL>
-<P>
+<P></P>
<LI>\90³\82µ\82¢\83p\83X\83\8f\81[\83h\82ð\91\97\82Á\82Ä\82¢\82é\82Í\82¸\82È\82Ì\82É\8b\91\94Û\82³\82ê\82é\81B
<P>
<LI>/etc/opengatesrv.conf, radius.conf, pam.conf \82Ì\94F\8fØ\83T\81[\83o\90Ý\92è\82ª\82¨\82©\82µ\82\82È\82¢\82Å\82·\82©\81B
-<LI>/var/log/opengate.log\82É\83G\83\89\81[\82ª\8fo\82Ä\82¢\82ê\82Î\82»\82ê\82ð\8eQ\8dl\82É\82µ\82Ä\82\82¾\82³\82¢\81B
+<LI>/var/log/opengate.log\82É\83G\83\89\81[\82ª\8fo\82Ä\82¢\82ê\82Î\82»\82ê\82ð\8eQ\8dl\82É\82µ\82Ä\82\82¾\82³\82¢\81B</LI>
</UL>
-<P>
+<P></P>
<LI>\83y\81[\83W\82ª\96]\82Þ\8c¾\8cê\88È\8aO\82Å\95\\8e¦\82³\82ê\82é\81B
<P>
<UL>
<LI>index.html\93à\82Ì\8bL\8fq\81A \82»\82Ì\83f\83B\83\8c\83N\83g\83\8a\96¼\81A makefile\93à\82Ì\8bL\8fq\82ð\8am\82©\82ß\82Ä\82\82¾\82³\82¢\81B\8c¾\8cê\8ew\92è\82ÌID\82Í\88ê\92v\82·\82é\95K\97v\82ª\82 \82è\82Ü\82·\81BID\82Í\91å\95¶\8e\9a\81A\8f¬\95¶\8e\9a\82à\8bæ\95Ê\82µ\82Ü\82·\81BID\82Í2\95¶\8e\9a\82ð\8eg\97p\82µ\82Ü\82·\81B
-<LI>\90V\82µ\82¢\8c¾\8cê\82ð\92Ç\89Á\82·\82é\8e\9e\82Í\81A\93¯\97l\82È\8c`\8e®\82Å\83f\83B\83\8c\83N\83g\83\8a\82É\83t\83@\83C\83\8b\82ð\94z\92u\82µ\81AMakefile\82ÉID\82ð\92Ç\89Á\82\82¾\82³\82¢\81B
+<LI>\90V\82µ\82¢\8c¾\8cê\82ð\92Ç\89Á\82·\82é\8e\9e\82Í\81A\93¯\97l\82È\8c`\8e®\82Å\83f\83B\83\8c\83N\83g\83\8a\82É\83t\83@\83C\83\8b\82ð\94z\92u\82µ\81AMakefile\82ÉID\82ð\92Ç\89Á\82\82¾\82³\82¢\81B</LI>
</UL>
-<P>
+<P></P>
<LI>\93±\93ü\88È\8d~\81A\83T\81[\83o\82Ì\83l\83b\83g\83\8f\81[\83N\83g\83\89\83u\83\8b\82ª\91½\82¢\82æ\82¤\82¾\81B
<P>
<UL>
<LI>
-\82Å\82«\82é\82¾\82¯\90V\82µ\82¢\82à\82Ì\82ð\97\98\97p\89º\82³\82¢\81B\93Á\82ÉVer.0.54\88È\91O\82É\82Í\81C\92·\8aú\89^\97p\82É\8dÛ\82µ\82Ä\92v\96½\93I\82È\83G\83\89\81[\82ð\8bN\82±\82·\83v\83\8d\83O\83\89\83\80\83~\83X\82ð\8aÜ\82ñ\82Å\82¢\82Ü\82µ\82½\81B
+\82Å\82«\82é\82¾\82¯\90V\82µ\82¢\82à\82Ì\82ð\97\98\97p\89º\82³\82¢\81B\93Á\82ÉVer.0.54\88È\91O\82É\82Í\81C\92·\8aú\89^\97p\82É\8dÛ\82µ\82Ä\92v\96½\93I\82È\83G\83\89\81[\82ð\8bN\82±\82·\83v\83\8d\83O\83\89\83\80\83~\83X\82ð\8aÜ\82ñ\82Å\82¢\82Ü\82µ\82½\81B</LI>
+
</UL>
-<P>
+<P></P>
<LI>\94F\8fØ\92Ê\89ß\82É1\95ª\88È\8fã\82à\8a|\82©\82é\82±\82Æ\82ª\82 \82é\81B
<P>
<UL>
<LI>
-\82Ü\82¸\82Í\82Ç\82±\82Å\8e\9e\8aÔ\82ð\97v\82µ\82Ä\82¢\82é\82©\82ð\90Ø\82è\95ª\82¯\82Ä\89º\82³\82¢\81B\93\96\95û\82Å\82Í\81AApache\82Ìhttpd.conf\82É\82¨\82¢\82Ä"HostnameLookups On"\82ª\90Ý\92è\82³\82ê\82Ä\82¢\82½\82½\82ß\81A\96¼\91O\89ð\8c\88\82É\8e\9e\8aÔ\82ð\97v\82µ\82½\82±\82Æ\82ª\82 \82è\82Ü\82·\81BOff\82É\90Ý\92è\82µ\82Ä\89ð\8c\88\82µ\82Ü\82µ\82½\81B
+\82Ü\82¸\82Í\82Ç\82±\82Å\8e\9e\8aÔ\82ð\97v\82µ\82Ä\82¢\82é\82©\82ð\90Ø\82è\95ª\82¯\82Ä\89º\82³\82¢\81B\93\96\95û\82Å\82Í\81AApache\82Ìhttpd.conf\82É\82¨\82¢\82Ä"HostnameLookups
+ On"\82ª\90Ý\92è\82³\82ê\82Ä\82¢\82½\82½\82ß\81A\96¼\91O\89ð\8c\88\82É\8e\9e\8aÔ\82ð\97v\82µ\82½\82±\82Æ\82ª\82 \82è\82Ü\82·\81BOff\82É\90Ý\92è\82µ\82Ä\89ð\8c\88\82µ\82Ü\82µ\82½\81B</LI>
+
</UL>
-<P>
+<P></P>
<LI>\82Ç\82¤\82µ\82æ\82¤\82à\82È\82\82È\82Á\82½\82Æ\82«
<P>
<UL>
<LI>
-opengatesrv/opengatesrv.h\92\86\82É\81u#define DEBUG\81v\82Ì\92è\8b`\82ª\82 \82è\82Ü\82·\81B\82±\82ê\82ð\81u1\81v\82É\90Ý\92è\82·\82é\82Æ\81Aopengate.log\82É\83f\83o\83b\83O\8fo\97Í\82ª\8fo\82Ü\82·\81B\82Ü\82½\81Aerr_msg()\8aÖ\90\94\82Í\81A\8fo\97Í\82ðopengate.log\82É\8fo\82µ\82Ü\82·\81B\93K\93\96\82È\88Ê\92u\82É\91}\93ü\82µ\82Ä\89º\82³\82¢\81B\8eg\82¢\95û\82Í\81A\83v\83\8d\83O\83\89\83\80\92\86\82Ì\97á\82ð\8c©\82ê\82Î\95ª\82©\82é\82Æ\8ev\82¢\82Ü\82·\82ª\81Aprintf()\8aÖ\90\94\82Æ\93¯\82¶\95¶\96@\82Å\82·\81B
-</UL>
+opengatesrv/opengatesrv.h\92\86\82É\81u#define
+ DEBUG\81v\82Ì\92è\8b`\82ª\82 \82è\82Ü\82·\81B\82±\82ê\82ð\81u1\81v\82É\90Ý\92è\82·\82é\82Æ\81Aopengate.log\82É\83f\83o\83b\83O\8fo\97Í\82ª\8fo\82Ü\82·\81B\82Ü\82½\81Aerr_msg()\8aÖ\90\94\82Í\81A\8fo\97Í\82ðopengate.log\82É\8fo\82µ\82Ü\82·\81B\93K\93\96\82È\88Ê\92u\82É\91}\93ü\82µ\82Ä\89º\82³\82¢\81B\8eg\82¢\95û\82Í\81A\83v\83\8d\83O\83\89\83\80\92\86\82Ì\97á\82ð\8c©\82ê\82Î\95ª\82©\82é\82Æ\8ev\82¢\82Ü\82·\82ª\81Aprintf()\8aÖ\90\94\82Æ\93¯\82¶\95¶\96@\82Å\82·\81B</LI>
+
+</UL></LI>
</UL>
-</BODY>
+</body>
</HTML>
<title>Opengate INSTALL</title>\r
</head>\r
\r
-<body bgcolor=#FAFFF0>\r
+<body bgcolor=#fafff0>\r
\r
<H3> \83C\83\93\83X\83g\81[\83\8b\8eè\8f\87</H3>\r
\r
<UL>\r
<LI>/etc/rc.conf\82É\88È\89º\82ð\92Ç\89Á\82·\82é\81B\r
<PRE>\r
-gateway_enable="YES" <==NATD\97\98\97p\8e\9e\95s\97v\r
+gateway_enable="YES" <==NATD\97\98\97p\8e\9e\95s\97v\r
firewall_enable="YES"\r
firewall_type="simple"\r
-natd_enable="YES" <==NATD\97\98\97p\8e\9e\r
-natd_interface="fxp0" <==\81@\81h\81A\96¼\91O\82Í\83C\83\93\83^\81[\83t\83F\81[\83X\82É\8d\87\82í\82¹\82é\82±\82Æ\81B\r
+natd_enable="YES" <==NATD\97\98\97p\8e\9e\r
+natd_interface="fxp0" <<==\96¼\91O\82Í\83C\83\93\83^\81[\83t\83F\81[\83X\82É\8d\87\82í\82¹\82é\82±\82Æ\81B\r
</PRE>\r
\r
<LI>/etc/rc.firewall\82ð\95Ò\8fW\82·\82é\81B\r
\82»\82Ì\82Æ\82«\82É\92[\96\96\82Ì\83l\83b\83g\83\8f\81[\83N\97\98\97p\82ª\8aJ\95ú\81A\95Â\8d½\82³\82ê\82é\82±\82Æ\82ð\8am\94F\82¹\82æ\81B\r
\r
<PRE>\r
- ipfw add 10000 allow ip from xx.xx.xx.xx to any <===\94\90M\8aJ\95ú\r
- ipfw add 10000 allow ip from any to xx.xx.xx.xx <===\8eó\90M\8aJ\95ú\r
+ ipfw add 10000 allow ip from xx.xx.xx.xx to any <===\94\90M\8aJ\95ú\r
+ ipfw add 10000 allow ip from any to xx.xx.xx.xx <===\8eó\90M\8aJ\95ú\r
\r
- ipfw del 10000 <===\95Â\8d½\r
+ ipfw del 10000 <===\95Â\8d½\r
</PRE>\r
ipfw\83R\83}\83\93\83h\82É\82Í\8f\\95ª\82É\90¸\92Ê\82·\82é\82±\82Æ\81B\r
Opengate\82Í\81A\8fã\8bL\82Ì\82æ\82¤\82È\83R\83}\83\93\83h\82Ì\94\8ds\82ð\8ds\82¤\83\\83t\83g\82Å\82 \82é\81B\r
<BR>\r
\95K\97v\82É\89\9e\82¶\82Ä\83w\83b\83_\81[\83t\83@\83C\83\8b\82É\82Ä\88È\89º\82Ì\8d\80\96Ú\82ª\90Ý\92è\89Â\94\\81B\r
<PRE>\r
- DEBUG :\81@\81@\81@\81@\81@\81@ \81@\82P\82É\90Ý\92è\82·\82é\82Æ\83f\83o\83b\83O\83\81\83b\83Z\81[\83W\82ð\83\8d\83O\82É\8fo\97Í\r
+ DEBUG :\81@\81@\81@\81@\81@\81@\81@\81@\82P\82É\90Ý\92è\82·\82é\82Æ\83f\83o\83b\83O\83\81\83b\83Z\81[\83W\82ð\83\8d\83O\82É\8fo\97Í\r
\81@\81@\81@\81@\81@\81@\81@\81@\81@\81@ \81@\8aÖ\90\94\8aÔ\82Ì\8cÄ\82Ñ\8fo\82µ\82Æ\82»\82Ì\8e\9e\82Ì\88ø\90\94\92l\82ª\8fo\82é\81B\r
\r
DURATIONDEFAULT : java\82ð\91\97\82Á\82Ä\82©\82ç\90Ú\91±\82µ\82Ä\82\82é\82Ü\82Å\82Ì\91Ò\82¿\8e\9e\8aÔ(\95b)\r
-<html>
-<head>
-<title>Opegnate Install</title>
-<meta http-equiv="content-type" content="text/html;charset=Shift_JIS">
-<link rel="stylesheet" type="text/css" media="screen" href="style.css">
-</head>
-
-<body bgcolor="#BBEECC">
-
-<h2>Opengate
\83C
\83\93\83X
\83g
\81[
\83\8b\8eè
\8f\87<a name="top" href="#top" class="anchor">†</a></h2>
-
-<!-- Start:\96Ú\8e\9f -->
-<ul>
- <li class="list_alpha"><a href="#opengate0">Opengate \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="#opengate1">\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87</a></li>
- <li class="list_num"><a href="#opengate2">FreeBSD \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <li class="list_num"><a href="#opengate3">Opengate \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- </ul>
- <li class="list_alpha"><a href="#ipfw0">ipfw,ip6fw\82Ì\90Ý\92è</a></li>
- <ul>
- <li class="list_num"><a href="#ipfw1">\83J\81[\83l\83\8b\82Ì\8dÄ\8d\\92z</a></li>
- <li class="list_num"><a href="#ipfw2">ipfw\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#ipfw3">ip6fw\82Ì\90Ý\92è</a></li>
- </ul>
- <li class="list_alpha"><a href="#apache0">Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="#apache1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#apache2">\83C\83\93\83X\83g\81[\83\8b\81i\83\\81[\83X\81j</a></li>
- <li class="list_num"><a href="#apache3">\94é\96§\8c®\81A\8fØ\96¾\8f\91\82Ì\8dì\90¬</a></li>
- <li class="list_num"><a href="#apache4">\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#apache5">HTTP_ERROR 404\82Ö\82Ì\91Î\89\9e</a></li>
- </ul>
- <li class="list_alpha"><a href="#dhcp0">isc-dhcp3\82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="#dhcp1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#dhcp2">DHCP\82Ì\90Ý\92è</a></li>
- </ul>
- <li class="list_alpha"><a href="#bind0">BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="#bind1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#bind2">\94F\8fØ\83L\81[\82Ì\8dì\90¬</a></li>
- <li class="list_num"><a href="#bind3">named.conf\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#bind4">zone\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#bind5">\8bN\93®\8am\94F</a></li>
- </ul>
- <li class="list_alpha"><a href="#mrtg0">MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <ul>
- <li class="list_num"><a href="#mrtg1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#mrtg2">MRTG\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#mrtg3">MRTG\82Ì\8bN\93®\8am\94F</a></li>
- <li class="list_num"><a href="#mrtg4">crontab\82Ö\82Ì\93o\98^</a></li>
- </ul>
-</ul>
-
-<!-- End:\96Ú\8e\9f -->
-<hr>
-
-<!-- Start:Opengate\82Ì\83C\83\93\83X\83g\81[\83\8b -->
-<h3>A Opegnate
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="opengate0" href="#opengate0" class="anchor">†</a></h3>
-<ul>
- <li class="list_num"><a href="#opengate1">\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87</a></li>
- <li class="list_num"><a href="#opengate2">FreeBSD \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
- <li class="list_num"><a href="#opengate3">Opengate \82Ì\83C\83\93\83X\83g\81[\83\8b</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>A.1
\83C
\83\93\83X
\83g
\81[
\83\8b\8eè
\8f\87<a name="opengate1" href="#opengate1" class="anchor">†</a></h4>
-
-<p>Opengate\82Ì\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87\82ð\88È\89º\82É\8e¦\82·\81B\82½\82¾\82µ\81A\81¦\82Í\95K\90{\8d\80\96Ú\82ð\8e¦\82µ\81A\82»\82ê\88È\8aO\82Ì\8eè\8f\87\82Í\95K\97v\82É\89\9e\82¶\82Ä\8ds\82È\82¤\81B</p>
-
-<ul>
- <li class="list_num">\83Q\81[\83g\83E\83F\83C\83}\83V\83\93\82Ì\8f\80\94õ \81¦</li>
- <li class="list_num">FreeBSD(OS)\82Ì\83C\83\93\83X\83g\81[\83\8b \81¦</li>
- <li class="list_num">\83J\81[\83l\83\8b\82Ì\8dÄ\8d\\92z \81¦</li>
- <li class="list_num">ipfw,ip6fw\82Ì\90Ý\92è \81¦</li>
- <li class="list_num">NAT\82Ì\90Ý\92è</li>
- <li class="list_num">Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b\81A\90Ý\92è \81¦</li>
- <li class="list_num">DHCP\82Ì\83C\83\93\83X\83g\81[\83\8b\81A\90Ý\92è</li>
- <li class="list_num">BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b\81A\90Ý\92è</li>
-</ul>
-
-<div align="right"><a href="#opengate0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>A.2 FreeBSD
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="opengate2" href="#opengate2" class="anchor">†</a></h4>
-
-<p>\83Q\81[\83g\83E\83F\83C\83}\83V\83\93\82Æ\82µ\82Ä\81ANIC\82ð\82Q\96\87\88È\8fã\8e\9d\82¿\81AFreeBSD\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\82±\82Æ\82ª\89Â\94\\82È\82à\82Ì\82ð\97p\88Ó\82·\82é\81B</p>
-<p>FreeBSD 4.x,5.x,6.x\82Ì\89½\82ê\82©\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\81B\8cã\82É\83J\81[\83l\83\8b\82ð\8dÄ\8d\\92z\82·\82é\95K\97v\82ª\82 \82é\82Ì\82Å\81A\83C\83\93\83X\83g\81[\83\8b\82·\82é
-Distributions\82ð\91I\91ð\82·\82é\8dÛ\82ÉDeveloper(Full sorces,binaries and doc)\82ð\91I\91ð\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>
-<p>FreeBSD\82ð\83C\83\93\83X\83g\81[\83\8b\82µ\82½\8cã\82É\81A\83Q\81[\83g\83E\83F\83C\82Æ\82µ\82Ä\82Ì\8b@\94\\82ð\97L\8cø\82É\82·\82é\82½\82ß\82É\81A/etc/rc.conf\82É\8e\9f\82Ì\90Ý\92è\82ð\8bL\8fq\82·\82é
-\81B\82à\82µ\82\82Í\81AFreeBSD\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8dÛ\82É\81A\83Q\81[\83g\83E\83F\83C\82Æ\82µ\82Ä\82Ì\8b@\94\\82ð\97L\8cø\82É\82·\82é\82©\94Û\82©\82ð\96â\82í\82ê\82é\82Ì\82Å\81A\82±\82±\82Å
-\83Q\81[\83g\83E\83F\83C\82Ì\8b@\94\\82ð\97L\8cø\82É\82µ\82Ä\82à\8d\\82í\82È\82¢\81B</p>
-
-<table>
-<td><code>gateway_enable="YES"</code></td>
-</table>
-
-<div align="right"><a href="#opengate0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>A.3 Opengate
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="opengate3" href="#opengate3" class="anchor">†</a></h4>
-
-<h5>A.3.1 Opengate
\83p
\83b
\83P
\81[
\83W<a name="opengate4" href="#opengate4" class="anchor">†</a></h5>
-
-<p>Opengate\82Ì\8dÅ\90V\82Ì\83p\83b\83P\81[\83W\82ð\93K\93\96\82È\83f\83B\83\8c\83N\83g\83\8a\82É\93W\8aJ\82·\82é\81B\83p\83b\83P\81[\83W\82É\82Í\88È\89º\82Ì\83f\83B\83\8c\83N\83g\83\8a\82ª\8aÜ\82Ü\82ê\82é\81B</p>
-
-<table>
-<tr><td>
-<pre>
-doc\81F\8ae\8eí\95¶\8f\91
-conf\81F\90Ý\92è\83t\83@\83C\83\8b\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\83X\83N\83\8a\83v\83g
-javahtml\81F\83N\83\89\83C\83A\83\93\83gJava Applet\81AHTML\83t\83@\83C\83\8b
-opengatesrv\81F\83T\81[\83oCGI\83v\83\8d\83O\83\89\83\80
-</pre>
-</td></tr>
-</table>
-
-<h5>A.3.2
\83R
\83\93\83p
\83C
\83\8b<a name="opengate5" href="#opengate5" class="anchor">†</a></h5>
-
-<p>Opengate\83p\83b\83P\81[\83W\82É\8aÜ\82Ü\82ê\82éopengatesrv\83f\83B\83\8c\83N\83g\83\8a\82ÉMakefile\82ª\97p\88Ó\82³\82ê\82Ä\82¢\82é\81B
-\93¯\83f\83B\83\8c\83N\83g\83\8a\82É\82¨\82¢\82Ä\81AOpengate\82Ì\83R\83\93\83p\83C\83\8b\82Æ\83C\83\93\83X\83g\81[\83\8b\8dì\8bÆ\82ð\8ds\82È\82¤\82ª\81A\83R\83\93\83p\83C\83\8b
-\82ð\8ds\82È\82¤\91O\82É\81A\8ae\8eí\90Ý\92è\82ð\8ds\82È\82¤\95K\97v\82 \82ª\82é\81B</p>
-<p>Makefle\82É\82¨\82¢\82Ä\81A\88È\89º\82Ì\8d\80\96Ú\82ð\90Ý\92è\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>
-
-<ul>
- <li class="list_none">HOSTNAME</li>
- <ul>
- <li>Opengate\82ÌFQDN\82Å\81AIPv4/6\97¼\95û\82Ì\83A\83h\83\8c\83X\82ª\93o\98^\82³\82ê\82Ä\82¢\82é\82à\82Ì\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">HOSTNAME4</li>
- <ul>
- <li>Opengate\82ÌFQDN\82Å\81AIPv4\83A\83h\83\8c\83X\82Ì\82Ý\82ª\93o\98^\82³\82ê\82Ä\82¢\82é\82à\82Ì\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">OPENGATEDIR</li>
- <ul>
- <li>Opengate\8aÖ\98A\83t\83@\83C\83\8b\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8fê\8f\8a\82ð\81AApache2\82ÌDocumnetRoot\82©\82ç\82Ì\91\8a\91Î\83p\83X\82Å\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">HTMLTOP1,HTMLTOP2</li>
- <ul>
- <li>Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b\8fó\8bµ\82É\82æ\82Á\82Ä\81AHTMLTOP1\82ÉHTTP\97p\82ÌDocumentRoot\82ð\90Ý\92è\82·\82é\81B</li>
- <li>HTMLTOP1\82Æ\93¯\97l\82É\81AHTMLTOP2\82ÉHTTPS\97p\82ÌDocumentRoot\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">CGIPATH,CGIPROG,CGIURL</li>
- <ul>
- <li>CGIPATH\82É\81A\83T\81[\83oCGI\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8fê\8f\8a\82Ì\90â\91Î\83p\83X\82ð\90Ý\92è\82·\82é\81B\82½\82¾\82µ\81AApache2\82Ì\83C\83\93\83X\83g\81[\83\8b\8fó\8bµ\82É\82æ\82Á\82Ä\81A
- CGI\82ª\8eÀ\8ds\89Â\94\\82È\8fê\8f\8a\82Å\82 \82é\82±\82Æ\81B</li>
- <li>CGIPROG\82É\81A\83T\81[\83oCGI\82Ì\96¼\91O\82ð\90Ý\92è\82·\82é\81B</li>
- <li>CGIURL\82É\81A\83T\81[\83oCGI\82ð\8eÀ\8ds\82·\82é\82½\82ß\82ÌURL\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">AUTHCGIPROG,AUTHCGIURL</li>
- <ul>
- <li>AUTHCGIPROG\82É\81A\94F\8fØ\89æ\96Ê\92ñ\8b\9fCGI\82Ì\96¼\91O\82ð\90Ý\92è\82·\82é\81B</li>
- <li>AUTHCGIURL\82É\81A\83T\81[\83oCGI\82Æ\93¯\97l\82É\81A\94F\8fØ\89æ\96Ê\92ñ\8b\9fCGI\82ð\8eÀ\8ds\82·\82é\82½\82ß\82ÌURL\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">CONFIGFILE</li>
- <ul>
- <li>Opengate\82Ì\90Ý\92è\83t\83@\83C\83\8b\96¼\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">USEFWSCRIPT,FWSCRIPT,FWSCRIPTFILE</li>
- <ul>
- <li>USEFWSCRIPT\82É\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\90§\8cä\83X\83N\83\8a\83v\83g\82ð\97\98\97p\82·\82é\82©\94Û\82©\82ð\90Ý\92è\82·\82é\81B\81i\82P\81F\97\98\97p\82·\82é\81B\82O\81F\97\98\97p\82µ\82È\82¢\81B\81j</li>
- <li>FWSCRIPT\82É\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\90§\8cä\83X\83N\83\8a\83v\83g\82Ì\83t\83@\83C\83\8b\96¼\82ð\90Ý\92è\82·\82é\81B</li>
- <li>FWSCRIPTFILE\82É\81AFWSCRIPT\82É\90Ý\92è\82µ\82½\83t\83@\83C\83\8b\82Ö\82Ì\90â\91Î\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">LOCKFILE</li>
- <ul>
- <li>\94r\91¼\90§\8cä\97p\83\8d\83b\83N\83t\83@\83C\83\8b\96¼\81A\90â\91Î\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">HTMLDOCS,DENYDOC,DENYDOCSSL,ACCEPTDOC,ACCEPTDOC2</li>
- <ul>
- <li>HTMLDOCS\82É\81A\83T\81[\83oCGI\82Å\97p\82¢\82éHTML\83t\83@\83C\83\8b\96¼\91S\82Ä\82ð\90Ý\92è\82·\82é\81B</li>
- <li>DENYDOC\82É\81A\94F\8fØ\8e¸\94s\8e\9e\82É\95\\8e¦\82·\82éHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>DENYDOCSSL\82É\81AHTTPS\82ð\97p\82¢\82Ä\94F\8fØ\82É\8e¸\94s\82µ\82½\8fê\8d\87\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>ACCEPTDOC\82É\81A\94F\8fØ\90¬\8c÷\8e\9e\82É\95\\8e¦\82·\82éHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>ACCEPTDOC2\82É\81A\94F\8fØ\90¬\8c÷\8e\9e\82É\83|\83b\83v\83A\83b\83v\83E\83B\83\93\83h\83E\82Å\95\\8e¦\82³\82ê\82éHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B
- \81i\83|\83b\83v\83A\83b\83v\83E\83B\83\93\83h\83E\82ÌURL\82Í\95Ï\8dX\89Â\94\\81BINFOURL\8eQ\8fÆ\81j</li>
- </ul>
- <li class="list_none">INFOMATION</li>
- <ul>
- <li>ACCEPTDOC2\82Ì\91Ö\82í\82è\82É\81A\95ÊURL\82Ì\83y\81[\83W\82ð\95\\8e¦\82·\82é\82©\94Û\82©\82ð\90Ý\92è\82·\82é\81B\81i\82P\81F\97\98\97p\82·\82é\81B\82O\81F\97\98\97p\82µ\82È\82¢\81B\81j</li>
- </ul>
- <li class="list_none">INFOMATIONURL</li>
- <ul>
- <li>ACCEPTDOC2\82Ì\91Ö\82í\82è\82É\95\\8e¦\82³\82¹\82é\83y\81[\83W\82ÌURL\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">AUTHHTMLJA,AUTHHTMLEN,AUTHHTMLJASSL,AUTHHTMLENSSL</li>
- <ul>
- <li>AUTHHTMLJA\82É\81A\93ú\96{\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>AUTHHTMLEN\82É\81A\89p\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>AUTHHTMLJASSL\82É\81AHTTPS\82ð\97p\82¢\82½\93ú\96{\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>AUTHHTMLENSSL\82É\81AHTTPS\82ð\97p\82¢\82½\89p\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</li>
- <li>\93ú\96{\8cê\81A\89p\8cê\88È\8aO\82É\94F\8fØ\8c¾\8cê\82ð\92Ç\89Á\82·\82é\8fê\8d\87\82Í\81Ajavahtml\83f\83B\83\8c\83N\83g\83\8a\93à\82Ì\8c¾\8cê\83f\83B\83\8c\83N\83g\83\8a\82Ì\92Ç\89Á\81AHTMLDOCS,DENYDOC,
- DENYDOCSSL,ACCESPTDOC,ACCEPTDOC2\82ð\95Ï\8dX\82µ\81A\82³\82ç\82Éopengateauth.h\93à\82Ì\90Ý\92è\82É\82 \82í\82¹\82ÄAUTHTHMLXX\82ð\92Ç\89Á\82·\82é\82±\82Æ\81B</li>
- </ul>
- <li class="list_none">ARPPATH</li>
- <ul>
- <li>ARP\83R\83}\83\93\83h\82Ì\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">NDPPAHT</li>
- <ul>
- <li>NDP\83R\83}\83\93\83h\82Ì\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">IPFW,IP6FW</li>
- <ul>
- <li>IPFW,IP6FW\83R\83}\83\93\83h\82Ì\82»\82ê\82¼\82ê\82Ì\83p\83X\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">DEBUG</li>
- <ul>
- <li>\83f\83o\83b\83O\82ð\8ds\82È\82¤\82©\94Û\82©\82ð\90Ý\92è\82·\82é\81B\81i\82P\81F\83f\83o\83b\83O\83\8d\83O\82ð\8fo\97Í\82·\82é\81B\82O\81F\94F\8fØ\83\8d\83O\82Ì\82Ý\8fo\97Í\82·\82é\81B\81j</li>
- </ul>
- <li class="list_none">DURATIONDEFAULT</li>
- <ul>
- <li>Java Applet\82ð\91\97\90M\82µ\82Ä\82©\82ç\90Ú\91±\82µ\82Ä\82\82é\82Ü\82Å\82Ì\91Ò\82¿\8e\9e\8aÔ\81i\95b\81j\82ð\90Ý\92è\82·\82é\81B\90Ý\92è\92l\82Ì\8e\9e\8aÔ\82ª\8co\89ß\82·\82é\82Ü\82Å\82É\81A
- Java Applet\82©\82ç\82Ì\90Ú\91±\82ª\96³\82¯\82ê\82Î\92Ê\90M\98H\82ð\95Â\8d½\82·\82é\81B\82±\82Ì\91Ò\82¿\8e\9e\8aÔ\82Í\94F\8fØ\83y\81[\83W\82æ\82è\81A\97\98\97p\8eÒ\82ª\95Ï\8dX\82·\82é\82±\82Æ\82ª\89Â\94\\81B
- \82Ü\82½\81A\97\98\97p\8eÒ\82Ì\95Ï\8dX\82ð\8b\96\97e\82µ\82È\82¢\8fê\8d\87\82Í\81A\94F\8fØ\83y\81[\83W\82©\82ç\93ü\97Í\83t\83H\81[\83\80\82ð\8dí\8f\9c\82·\82é\82±\82Æ\81B</li>
- </ul>
- <li class="list_none">DURATIONMAX</li>
- <ul>
- <li>Java Applet\82©\82ç\82Ì\90Ú\91±\82ª\8am\94F\82Å\82«\82È\82¢\8fê\8d\87\82É\81A\97\98\97p\8eÒ\82ª\94F\8fØ\83y\81[\83W\82Å\8ew\92è\82µ\82½\97\98\97p\8cp\91±\8e\9e\8aÔ\81i\95b\81j\82Ì\8dÅ\91å\92l
- \82ð\90Ý\92è\82·\82é\81B\97\98\97p\8eÒ\82Ì\95Ï\8dX\82ð\8b\96\97e\82µ\82È\82¢\8fê\8d\87\82Í\81ADURATIONDEFAULT\82Æ\93¯\82¶\92l\82É\82·\82é\95K\97v\82ª\82 \82é\81B</li>
- </ul>
- <li class="list_none">ACTIVECHECKINTERVAL</li>
- <ul>
- <li> \92[\96\96\82Ì\97\98\97p\8fó\8bµ\82ð\8am\94F\82·\82é\8aÔ\8au(\95b)\82ð\90Ý\92è\82·\82é\81BJava Applet\82©\82ç\82Ì\90Ú\91±\82ª\96³\82¢\8fê\8d\87\82Í\81A
- \92Ê\89ß\83p\83P\83b\83g\90\94\82ÆMAC\83A\83h\83\8c\83X\82Ì\8am\94F\82ð\8ds\82È\82¤\81BJava Applet\82©\82ç\82Ì\92Ê\90M\82ª\82 \82é\8fê\8d\87\82Í\81AHELLO\83\81\83b\83Z\81[\83W\82Ì\8cð\8a·\82Æ
- \92Ê\89ß\83p\83P\83b\83g\90\94\82Ì\8am\94F\82ð\8ds\82È\82¤\81B</li>
- </ul>
- <li class="list_none">COMMWAITTIMEOUT</li>
- <ul>
- <li>HELLO\83\81\83b\83Z\81[\83W\95Ô\93\9a\82Ü\82Å\82Ì\8dÅ\91å\91Ò\82¿\8e\9e\8aÔ\81i\95b\81j\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">NOREPLYMAX</li>
- <ul>
- <li>HELLO\83\81\83b\83Z\81[\83W\82É\89\9e\93\9a\82µ\82È\82©\82Á\82½\8fê\8d\87\82ð\8b\96\97e\82·\82é\89ñ\90\94\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">NOPAKETINTERVAL</li>
- <ul>
- <li>\92Ê\89ß\83p\83P\83b\83g\82ª\8am\94F\82Å\82«\82È\82©\82Á\82½\8fê\8d\87\82É\81A\92Ê\90M\98H\82ð\95Â\8d½\82·\82é\82Ü\82Å\82Ì\8e\9e\8aÔ\81B\8eÀ\8dÛ\82É\82Í\81A\92Ê\89ß\83p\83P\83b\83g\82Ì\8am\94F\82Í
- ACTIVECHECKINTERVAL\82Ì\90Ý\92è\8e\9e\8aÔ\96\88\82É\8ds\82È\82í\82ê\82é\82Ì\82Å\81AACTIVECHECKINTERVAL\82Ì\90®\90\94\94{\82Ì\8e\9e\8aÔ\82É\90Ø\82è\8fã\82°\82ç\82ê\82é\81B</li>
- </ul>
- <li class="list_none">LOCKTIMEOUT</li>
- <ul>
- <li>ipfw,ip6fw\82Ì\94r\91¼\90§\8cä\82Ì\8dÅ\91å\91Ò\82¿\8e\9e\8aÔ\81i\95b\81j\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">IPFWMIN</li>
- <ul>
- <li>Opengate\82Å\97\98\97p\82·\82éipfw\82à\82µ\82\82Íip6fw\82Ì\83\8b\81[\83\8b\94Ô\8d\86\94Í\88Í\82Ì\8dÅ\8f¬\92l\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">IPFWMAX</li>
- <ul>
- <li>Opengate\82Å\97\98\97p\82·\82éipfw\82à\82µ\82\82Íip6fw\82Ì\83\8b\81[\83\8b\94Ô\8d\86\94Í\88Í\82Ì\8dÅ\91å\92l\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">IPFWINTERVAL</li>
- <ul>
- <li>ipfw\82à\82µ\82\82Íip6fw\82Ì\83\8b\81[\83\8b\94Ô\8d\86\94Í\88Í\82É\82¨\82¢\82Ä\81A\97\98\97p\82·\82é\94Ô\8d\86\82Ì\94Í\88Í\82ð\90Ý\92è\82·\82é\81B
- \83N\83\89\83C\83A\83\93\83g\82Ì\91ä\90\94\90§\8cÀ\82É\97p\82¢\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B</li>
- </ul>
- <li class="list_none">PORTMIN</li>
- <ul>
- <li>Java Applet\82Æ\82Ì\92Ê\90M\82É\97\98\97p\82·\82é\83|\81[\83g\82Ì\97\98\97p\94Í\88Í\82Ì\8dÅ\8f¬\92l\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">PORTMAX</li>
- <ul>
- <li>Java Applet\82Æ\82Ì\92Ê\90M\82É\97\98\97p\82·\82é\83|\81[\83g\82Ì\97\98\97p\94Í\88Í\82Ì\8dÅ\91å\92l\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
- <li class="list_none">FACILITY</li>
- <ul>
- <li>SYSLOG\82É\83\8d\83O\82ð\8fo\97Í\82·\82é\8dÛ\82Ì\83t\83@\83V\83\8a\83e\83B\82ð\90Ý\92è\82·\82é\81B</li>
- </ul>
-</ul>
-
-<p>\88È\8fã\82Ì\90Ý\92è\82ð\8fI\82¦\82Ä\82©\82ç\81A\83R\83\93\83p\83C\83\8b\82Æ\83C\83\93\83X\83g\81[\83\8b\82ð\8ds\82È\82¤\81B</p>
-
-<table><tr><td><pre>
-#make
-cc -DCONFIGFILE=\"/etc/opengatesrv.conf\"
--DOPENGATEDIR=\"/opengate\" -DDENYDOC=\"deny.html\"
--DDENYDOC=\"deny.html\" -DDENYDOCSSL=\"deny-ssl.html\"
------------------
------------------
------------------
-# make install
-</pre></td></tr></table>
-
-<h5>A.3.3
\94F
\8fØ
\83T
\81[
\83o
\82Ì
\90Ý
\92è<a name="opengate6" href="#opengate6" class="anchor">†</a></h5>
-
-<p>
\94F
\8fØ
\83T
\81[
\83o
\82Ì
\90Ý
\92è
\82É
\82Â
\82¢
\82Ä
\82Í
\81A<a href="#opengate5">A.3.2</a>
\82Å
\82 \82°
\82½
\81ACONFIGFILE
\82É
\82æ
\82Á
\82Ä
\90Ý
\92è
\82·
\82é
\82±
\82Æ
\82ª
-\89Â\94\\82Å\82 \82é\81B</p>
-<p>\90Ý\92è\82Ì\8fÚ\8d×\82É\82Â\82¢\82Ä\82Í\81A\90Ý\92è\83t\83@\83C\83\8b\81iopengatesrv.conf\81j\93à\82É\8bL\8fq\82³\82ê\82Ä\82¢\82é\81B</p>
-
-<div align="right"><a href="#opengate0">back</a> <a href="#top">top</a></div>
-
-<hr>
-<!-- Start:ipfw,ip6fw\82Ì\90Ý\92è -->
-<h3>B ipfw,ip6fw
\82Ì
\90Ý
\92è<a name="ipfw0" href="#ipfw0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#ipfw1">\83J\81[\83l\83\8b\82Ì\8dÄ\8d\\92z</a></li>
- <li class="list_num"><a href="#ipfw2">ipfw\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#ipfw3">ip6fw\82Ì\90Ý\92è</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>B.1
\83J
\81[
\83l
\83\8b\82Ì
\8dÄ
\8d\
\92z<a name="ipfw1" href="#ipfw1" class="anchor">†</a></h4>
-
-<p>ipfw\82à\82µ\82\82Íip6fw\82ð\97\98\97p\82·\82é\82½\82ß\82É\82Í\81AFreeBSD\82Ì\83J\81[\83l\83\8b\82ð\8dÄ\8d\\92z\82·\82é\95K\97v\82ª\82 \82é\81BFreeBSD\83C\83\93\83X\83g\81[\83\8b\8e\9e\82É
-\83J\81[\83l\83\8b\93\99\82Ì\91S\82Ä\82Ì\83\\81[\83X\82ð\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82¢\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>
-<p>\88È\89º\82Ì\83f\83B\83\8c\83N\83g\83\8a\82É\82¨\82¢\82Ä\81AOpengate\97p\82Ì\83J\81[\83l\83\8b\83I\83v\83V\83\87\83\93\82ð\8dì\90¬\82·\82é\81B</p>
-
-<table><tr><td><pre>
-# cd /usr/src/sys/i386/conf
-# cp GENERIC MYKERNEL
-</pre></td></tr></table>
-
-<p>\83R\83s\81[\82µ\82½\83J\81[\83l\83\8b\83I\83v\83V\83\87\83\93\82É\81A\8e\9f\82Ì\83I\83v\83V\83\87\83\93\82ð\92Ç\89Á\82·\82é\81B</p>
-
-<table><tr><td><pre>
-options IPDIVERT
-
-options IPFIREWALL
-options IPFIREWALL_FORWARD
-options IPFIREWALL_VERBOSE
-options IPFIREWALL_VERBOSE_LIMIT=100
-
-options IPV6FIREWALL
-options IPV6FIREWALL_VERBOSE
-options IPV6FIREWALL_VERBOSE_LIMIT=100
-
-options IPSEC
-options IPSEC_ESP
-options TCP_DROP_SYSFIN
-</pre></td></tr></table>
-
-<p>IPDIVERT\82É\82Â\82¢\82Ä\82Í\81AIPv4\82ÌNAT\82ð\97p\82¢\82é\8fê\8d\87\82É\95K\97v\82Å\82 \82é\81B\82Ü\82½\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì
-\83\8d\83O\82ð\95K\97v\82Æ\82µ\82È\82¢\8fê\8d\87\82Í\81AVERBOSE\82Ì\8d\80\96Ú\82Í\95s\97v\82Å\82 \82é\81B\82³\82ç\82É\81AIPSEC\82ð\95K\97v\82Æ\82µ\82È\82¢\8fê\8d\87\82Í\81A
-IPSEC\82Ì\8d\80\96Ú\82Í\95s\97v\82Å\82 \82é\81B</p>
-<p>\82±\82ê\82ç\82Ì\83I\83v\83V\83\87\83\93\82ð\92Ç\89Á\82µ\82½\8cã\82É\81A\83J\81[\83l\83\8b\82Ì\83R\83\93\83p\83C\83\8b\82Æ\83C\83\93\83X\83g\81[\83\8b\82ð\8ds\82È\82¤\81B</p>
-
-<table><tr><td><pre>
-# config MYKERNEL
-# cd ../compile/MYKERNEL
-# make depend
-# make
-# make install
-</pre></td></tr></table>
-
-<p>FreeBSD 6.x\82Å\82Í\81A"make depend"\82ð\8eÀ\8ds\82·\82é\91O\82É\81A"make clean"\82ª\97v\8b\81\82³\82ê\82é\8fê\8d\87\82à\82 \82é\82Ì\82Å\81A\92\8d\88Ó\82·\82é\81B</p>
-
-<p>\8dÄ\8d\\92z\82µ\82½\83J\81[\83l\83\8b\82É\82æ\82Á\82Ä\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\97L\8cø\82É\82·\82é\82½\82ß\82É/etc/rc.conf\82É\88È\89º\82Ì\83I\83v\83V\83\87\83\93\82ð
-\8bL\8fq\82·\82é\81B</p>
-
-<table><tr><td><pre>
-firewall_enable="YES"
-firewall_script="/etc/rc.firewall"
-
-ipv6_firewall_enable="YES"
-ipv6_firewall_script="/etc/rc.firewall6"
-
-natd_enable="YES"
-natd_interface="em0"
-</pre></td></tr></table>
-
-<p>IPv4/6\82»\82ê\82¼\82ê\82Ì\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\97L\8cø\82É\82µ\81A\82»\82ê\82¼\82ê\82Ì\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì\83\8b\81[\83\8b\82ð\8bL\8fq\82µ\82½
-\83X\83N\83\8a\83v\83g\82ð\8ew\92è\82·\82é\81B\82Ü\82½\81ANAT\82ª\95K\97v\82Å\82 \82é\8fê\8d\87\82Í\81Anatd\82ð\97L\8cø\82É\82µ\81A\83A\83h\83\8c\83X\95Ï\8a·\82ð\8ds\82¤
-\83C\83\93\83^\83t\83F\81[\83X\82ÌID\82ð\8ew\92è\82·\82é\81B</p>
-
-<div align="right"><a href="#ipfw0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>B.2 ipfw
\82Ì
\90Ý
\92è<a name="ipfw2" href="#ipfw2" class="anchor">†</a></h4>
-
-<p>Opengate\82Ì\93®\8dì\82Ì\82½\82ß\82É\93K\90Ø\82É\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì\83\8b\81[\83\8b\82ð\8bL\8fq\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B
-\88È\89º\82É\8bL\8fq\82·\82×\82«\83\8b\81[\83\8b\82Ì\97á\81i/etc/rc.firewall\81j\82ð\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-### set these to your outside interface network and netmask and ip
-oif="em0"
-onet="192.168.0.0"
-omask="255.255.255.0"
-oip="192.168.0.34"
-
-### set these to your inside interface network and netmask and ip
-iif="bge0"
-inet="192.168.55.0"
-imask="255.255.255.0"
-iip="192.168.55.1"
-
-fwcmd="/sbin/ipfw"
-
-### divert packet to NATD
-$fwcmd add 1 divert natd ip from any to any via ${oif}
-
-### Stop spoofing
-$fwcmd add deny all from ${inet}:${imask} to any in via ${oif}
-$fwcmd add deny all from ${onet}:${omask} to any in via ${iif}
-
-### Stop http from softeather
-$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 80
-$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 443
-
-### Allow from / to myself
-$fwcmd add pass all from ${iip} to any via ${iif}
-$fwcmd add pass all from ${oip} to any via ${oif}
-$fwcmd add pass all from any to ${iip} via ${iif}
-$fwcmd add pass all from any to ${oip} via ${oif}
-
-### Allow DNS queries out in the world
-### (if DNS is on localhost, delete passDNS)
-$fwcmd add pass udp from any 53 to any
-$fwcmd add pass udp from any to any 53
-$fwcmd add pass tcp from any to any 53
-$fwcmd add pass tcp from any 53 to any
-
-### Forwarding http connection from unauth client
-$fwcmd add 60000 fwd localhost tcp from ${inet}:${imask} to any 80
-$fwcmd add 60010 fwd localhost tcp from ${inet}:${imask} to any 443
-
-### Allow TCP through if setup succeeded
-$fwcmd add 60100 pass tcp from any to any established
-</pre></td></tr></table>
-
-<p>Opengate\82ð\93®\8dì\82³\82¹\82é\8dÛ\81A\83\8b\81[\83\8b\94Ô\8d\8660000,60010,60100\82ª\8fd\97v\82Æ\82È\82é\81B\94F\8fØ\83y\81[\83W\82ð
-\95\\8e¦\82³\82¹\82é\82½\82ß\82É\81AHTTP,HTTPS\83\8a\83N\83G\83X\83g\82ÍOpengate\82ÌWeb\83T\81[\83o\82É\93]\91\97\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B
-\82Ü\82½\81A\8aù\82É\8am\97§\82³\82ê\82Ä\82¢\82éTCP\90Ú\91±\82É\8aÖ\82µ\82Ä\82Í\81AOpengate\82É\82æ\82é\92Ê\90M\98H\95Â\8d½\8cã\82à\97\98\97p\89Â\94\\82Æ\82·\82é\82½\82ß\81A
-60100\82Ì\83\8b\81[\83\8b\82ð\92Ç\89Á\82·\82é\81B</p>
-
-<p>\88È\8fã\81A\8e¦\82µ\82½\97á\82ÍOpengate\82ð\93®\8dì\82³\82¹\82é\82½\82ß\82Ì\90Ý\92è\97á\82Å\82 \82é\81B\8eÀ\8dÛ\82ÉOpengate\82ð\93±\93ü\82·\82é\8dÛ\82É\82Í\81A
-ipfw\82Ì\93®\8dì\82ð\8fn\92m\82µ\82½\8fã\81A\8ae\8eí\83l\83b\83g\83\8f\81[\83N\82É\93K\82µ\82½\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\90Ý\92u\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>
-
-<div align="right"><a href="#ipfw0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>B.3 ip6fw
\82Ì
\90Ý
\92è<a name="ipfw3" href="#ipfw3" class="anchor">†</a></h4>
-
-<p>Opengate\82Ì\93®\8dì\82Ì\82½\82ß\82É\93K\90Ø\82É\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì\83\8b\81[\83\8b\82ð\8bL\8fq\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B
-\88È\89º\82É\8bL\8fq\82·\82×\82«\83\8b\81[\83\8b\82Ì\97á\81i/etc/rc.firewall6\81j\82ð\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-### set these to your outside interface network and prefixlen and ip
-oif="em0"
-onet="2001:e38:3661:1a0::"
-oprefixlen="64"
-oip="2001:e38:3661:1a0::34"
-
-### set these to your inside interface network and prefixlen and ip
-iif="bge0"
-inet="2001:e38:3661:1a5::"
-iprefixlen="64"
-iip="2001:e38:3661:1a5::1"
-
-### path to command "ip6fw"
-fw6cmd="/sbin/ip6fw"
-
-${fw6cmd} add pass all from ${iip} to any
-${fw6cmd} add pass all from any to ${iip}
-${fw6cmd} add pass all from ${oip} to any
-${fw6cmd} add pass all from any to ${oip}
-
-### Allow RA RS NS NA Redirect...
-${fw6cmd} add pass ipv6-icmp from any to any
-
-# Allow IP fragments to pass through
-${fw6cmd} add pass all from any to any frag
-
-# Allow RIPng
-${fw6cmd} add pass udp from fe80::/10 521 to ff02::9 521
-${fw6cmd} add pass udp from fe80::/10 521 to fe80::/10 521
-
-### Allow TCP through if setup succeeded
-${fw6cmd} add 60100 pass tcp from any to any established
-
-# TCP reset notice message
-${fw6cmd} add 60200 reset tcp from any to any 80
-${fw6cmd} add 60300 reset tcp from any to any 443
-</pre></td></tr></table>
-
-<p>ip6fw\82Í\81Aipfw\82Æ\82Í\88Ù\82È\82è\93]\91\97\82ð\8ds\82¤\82±\82Æ\82ª\82Å\82«\82È\82¢\81B\82»\82±\82Å\81AOpengate\82Å\82Í
-IPv6\82ÌHTTP\83\8a\83N\83G\83X\83g\82ª\83^\83C\83\80\83A\83E\83g\82µ\81AIPv4\82ÌHTTP\83\8a\83N\83G\83X\83g\82ð\93]\91\97\82µ\81A\94F\8fØ
-\82ð\8ds\82¤\8ed\91g\82Ý\82ð\82Æ\82Á\82Ä\82¢\82é\81B\82½\82¾\82µ\81AFreeBSD 5.2\88È\8d~\82Å\82Í\81Aip6fw\82ÅTCP reset\82ª
-\8eÀ\91\95\82³\82ê\82Ä\82¨\82è\81AIPv6 TCP\83p\83P\83b\83g\82É\91Î\82µ\82Ä\93\9e\92B\95s\94\\83\81\83b\83Z\81[\83W\82ð\95Ô\82·\82±\82Æ\82ª\89Â\94\\82Å
-\82 \82é\81B\83\8b\81[\83\8b\94Ô\8d\8660200,60300\82Ì\82æ\82¤\82É\81ATCP reset\82ð\97\98\97p\82·\82é\82±\82Æ\82É\82æ\82Á\82Ä\81AIPv6 HTTP
-\83\8a\83N\83G\83X\83g\82ª\83^\83C\83\80\83A\83E\83g\82·\82é\82Ü\82Å\82Ì\8e\9e\8aÔ\82ð\91Ò\82Â\95K\97v\82ª\82È\82\82È\82é\81B</p>
-
-<p>\82Ü\82½\81AIPv6\82Å\82ÍDHCP\82Ì\91Ö\82í\82è\82ÉRA\82É\82æ\82Á\82ÄIPv6\83A\83h\83\8c\83X\82ð\8e©\93®\90¶\90¬\82µ\81A\8co\98H\8fî\95ñ
-\92Ê\92m\83f\81[\83\82\83\93\82È\82Ç\81AICMP\82â\82»\82Ì\91¼\82Ì\83v\83\8d\83g\83R\83\8b\82Ì\88µ\82¢\82É\8bC\82ð\82Â\82¯\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B
-ipfw\82Æ\93¯\97l\82É\81Aip6fw\82É\82Â\82¢\82Ä\82à\93®\8dì\82ð\8fn\92m\82µ\82½\8fã\82Å\81A\8ae\8eí\83l\83b\83g\83\8f\81[\83N\82É\93K\82µ\82½
-\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\90Ý\92u\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>
-
-<div align="right"><a href="#ipfw0">back</a> <a href="#top">top</a></div>
-
-<hr>
-<!-- Start:Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b -->
-<h3>C Apache2
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="apache0" href="#apache0" class="anchor">†</a></h3>
-<ul>
- <li class="list_num"><a href="#apache1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#apache2">\83C\83\93\83X\83g\81[\83\8b\81i\83\\81[\83X\81j</a></li>
- <li class="list_num"><a href="#apache3">\94é\96§\8c®\81A\8fØ\96¾\8f\91\82Ì\8dì\90¬</a></li>
- <li class="list_num"><a href="#apache4">\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#apache5">HTTP_ERROR 404\82Ö\82Ì\91Î\89\9e</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>C.1
\83C
\83\93\83X
\83g
\81[
\83\8b\81iports
\81j<a name="apache1" href="#apache1" class="anchor">†</a></h4>
-
-<p>Opengate\82Å\82Í\81AIPv6\82ð\83T\83|\81[\83g\82µ\82½Apache2\82ª\95K\90{\82Å\82 \82é\81B\82Ü\82½\81A\94F\8fØ\82ð\8ds\82¤\82±\82Æ\82©\82ç
-SSL\82ð\83T\83|\81[\83g\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81BApache2\82Í\95W\8f\80\82ÅSSL\82ð\83T\83|\81[\83g\82µ\82Ä\82¢\82é\82Ì\82Å\81Amod_ssl
-\82ð\95Ê\93r\83C\83\93\83X\83g\81[\83\8b\82·\82é\95K\97v\82Í\82È\82¢\81B</p>
-<p>\88È\89º\82É\81Aports\82ð\97\98\97p\82µ\82Ä\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\88È\89º\82É\8bL\82·\81B</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/www/apache2
-# make clean
-===> Cleaning for autoconf-2.53_1
-===> Cleaning for libtool-1.3.5_1
-===> Cleaning for m4-1.4_1
-===> Cleaning for help2man-1.29
-===> Cleaning for expat-1.95.6_1
-===> Cleaning for apache-2.0.48_3
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<p>\83C\83\93\83X\83g\81[\83\8b\8dì\8bÆ\82ª\8a®\97¹\82µ\82½\8cã\81AApache2\82Ì\8bN\93®\82ÆSSL\82ð\97L\8cø\82É\82·\82é\82½\82ß\82É\81A
-\88È\89º\82Ì\8d\80\96Ú\82ð/etc/rc.conf\82É\8bL\8fq\82·\82é\81B</p>
-
-<table><tr><td><pre>
-apache2_enable="YES"
-apache2ssl_enable="YES"
-</pre></td></tr></table>
-
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>C.2
\83C
\83\93\83X
\83g
\81[
\83\8b\81i
\83\
\81[
\83X
\81j<a name="apache2" href="#apache2" class="anchor">†</a></h4>
-
-<p>Apache2\82ð\83\\81[\83X\82©\82ç\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\88È\89º\82É\8bL\82·\81B</p>
-<p>Apache2\82Ì\83\\81[\83X\82Í\81Aftp.apache.or.jp\93\99\82©\82ç\8eæ\93¾\82·\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B\82Ü\82½\81A
-Apache2\82ð\83R\83\93\83p\83C\83\8b\82·\82é\8dÛ\82É\81ASSL\83\82\83W\83\85\81[\83\8b\82ð\97L\8cø\82É\82·\82é\95K\97v\82ª\82 \82é\81B\82Ü\82½\81A
-\83\\81[\83X\82©\82ç\83C\83\93\83X\83g\81[\83\8b\82µ\82½\8dÛ\82Í\81A\95W\8f\80\82Å/usr/local/apache2\83f\83B\83\8c\83N\83g\83\8a\88È\89º\82É\83C\83\93\83X\83g\81[\83\8b\82³\82ê\82é\81B</p>
-
-<table><tr><td><pre>
-# tar xvfz httpd-2.0.55.tar.gz
-# cd httpd-2.0.55
-# ./configure --enable-modules="so ssl"
-# make
-# make install
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 3 ************** -->
-<h4>C.3
\94é
\96§
\8c®
\81A
\8fØ
\96¾
\8f\91\82Ì
\8dì
\90¬<a name="apache3" href="#apache3" class="anchor">†</a></h4>
-
-<p>Apache2\82Å\81ASSL\82ð\97\98\97p\82·\82é\82½\82ß\82É\94é\96§\8c®\82Æ\8fØ\96¾\8f\91\82ð\97p\88Ó\82·\82é\95K\97v\82ª\82 \82é\81B\90³\8bK\82Ì\94F\8fØ\8bÇ\82©\82ç
-\94\8ds\82³\82ê\82½\8fØ\96¾\8f\91\82ð\97p\88Ó\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\82ª\81A\8e©\8cÈ\8f\90\96¼\82ð\8ds\82Á\82½\8fØ\96¾\8f\91\82Æ\94é\96§\8c®\82Å\82à\8f\\95ª\82É
-\83Z\83L\83\85\83\8a\83e\83B\82ð\8am\95Û\82·\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B</p>
-
-<p>Opengate\82Å\82Í\81A\93ñ\82Â\82ÌFQDN\82ð\97\98\97p\82·\82é\82±\82Æ\82©\82ç\81A\82»\82ê\82¼\82ê\82ÌFQDN\82É\91Î\89\9e\82·\82é\8fØ\96¾\8f\91\82Æ
-\94é\96§\8c®\82ª\95K\97v\82Æ\82È\82é\81B\88È\89º\82É\81A\94é\96§\8c®\82Æ\8fØ\96¾\8f\91\82ð\8dì\90¬\82·\82é\8eè\8f\87\82ð\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-# cd /usr/local/etc/apache2
-# mkdir ssl.key ssl.crt
-# chmod 700 ssl.key ssl.crt
-
-# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server1.key 1024
-# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server2.key 1024
-</pre></td></tr></table>
-
-<p>\8fã\8bL\82É\82¨\82¢\82Ä\8dì\90¬\82µ\82½\94é\96§\8c®\82ð\97p\82¢\82Ä\8f\90\96¼\82µ\82½\8fØ\96¾\8f\91\82ð\8dì\90¬\82·\82é\81B</p>
-
-<table><tr><td><pre>
-# /usr/bin/openssl req -new -x509 -days 365 \
- -key /usr/local/etc/apache2/ssl.key/server1.key \
- -out /usr/local/etc/apache2/ssl.crt/server1.crt
-
-You are about to be asked to enter information that will be incorporated
-into your certificate request.
-What you are about to enter is what is called a Distinguished Name or a DN.
-There are quite a few fields but you can leave some blank
-For some fields there will be a default value,
-If you enter '.', the field will be left blank.
------
-Country Name (2 letter code) [AU]:JP
-State or Province Name (full name) [Some-State]:Saga
-Locality Name (eg, city) []:Saga-city
-Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university
-Organizational Unit Name (eg, subsection) []:Information Science
-Common Name (eg, YOUR name) []:opengate.is.saga-u.ac.jp
-Email Address []:administrator@opengate.is.saga-u.ac.jp
-
-Please enter the following 'extra' attributes
-to be sent with your certificate request
-A challenge password []:
-An optional company name []:
-
-# /usr/bin/openssl req -new -x509 -days 365 \
- -key /usr/local/etc/apache2/ssl.key/server2.key \
- -out /usr/local/etc/apache2/ssl.crt/server2.crt
-
-You are about to be asked to enter information that will be incorporated
-into your certificate request.
-What you are about to enter is what is called a Distinguished Name or a DN.
-There are quite a few fields but you can leave some blank
-For some fields there will be a default value,
-If you enter '.', the field will be left blank.
------
-Country Name (2 letter code) [AU]:JP
-State or Province Name (full name) [Some-State]:Saga
-Locality Name (eg, city) []:Saga-city
-Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university
-Organizational Unit Name (eg, subsection) []:Information Science
-Common Name (eg, YOUR name) []:opengate4.is.saga-u.ac.jp
-Email Address []:administrator@opengate.is.saga-u.ac.jp
-
-Please enter the following 'extra' attributes
-to be sent with your certificate request
-A challenge password []:
-An optional company name []:
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 4 ************** -->
-<h4>C.4
\83o
\81[
\83`
\83\83\83\8b\83z
\83X
\83g
\82Ì
\90Ý
\92è<a name="apache4" href="#apache4" class="anchor">†</a></h4>
-
-<p>Opengate\82Å\82Í\81A\93ñ\82Â\82ÌFQDN\82ð\97p\82¢\82é\81B\82±\82ê\82æ\82è\81AApache2\82Å\82Í\93ñ\82Â\82ÌFQDN\82É\91Î\89\9e\82·\82é\82½\82ß\82É
-\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è\82ð\8ds\82¤\95K\97v\82ª\82 \82é\81B</p>
-<p>Apache2\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82É\82Í\81AIP\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Æ\81A\83l\81[\83\80\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b
-\83z\83X\83g\82Ì\93ñ\8eí\97Þ\82ª\82 \82é\81B\82µ\82©\82µ\81A\83l\81[\83\80\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82ð\97p\82¢\82½\8fê\8d\87\81A\90æ\8fq\82µ\82½
-\83o\81[\83`\83\83\83\8b\83z\83X\83g\82É\82Â\82¢\82Ä\82µ\82©SSL\8f\88\97\9d\82ð\8ds\82¤\82±\82Æ\82ª\82Å\82«\82È\82¢\81B</p>
-<p>Opengate\82Í\81A\93ñ\82Â\88È\8fã\82ÌNIC\82ð\8f\8a\8e\9d\82µ\81A\93ñ\82Â\88È\8fã\82ÌIP\83A\83h\83\8c\83X\82ð\8f\8a\8e\9d\82µ\82Ä\82¢\82é\82Ì\82Í\82¸\82È\82Ì\82Å\81A
-IP\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82ª\93K\97p\89Â\94\\82Å\82 \82é\81B</p>
-
-<p>\88È\89º\82É\81AIP\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82ð\93K\97p\82µ\82½\8fê\8d\87\82Ì\90Ý\92è\97á
-\81i/usr/local/etc/httpd.conf,ssl.conf\81j</p>
-
-<table><tr><td>httpd.conf</td></tr><tr><td><pre>
-NameVirtualHost 192.168.55.1:80
-<VirtualHost 192.168.55.1:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-
-NameVirtualHost [2001:e38:3661:1a5::1]:80
-<VirtualHost [2001:e38:3661:1a5::1]:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-
-NameVirtualHost 192.168.0.34:80
-<VirtualHost 192.168.0.34:80>
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- DocumentRoot /usr/local/www
- ServerName opengate4.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-</VirtualHost>
-</pre></td></tr></table>
-<br>
-<table><tr><td>ssl.conf</td></tr><tr><td><pre>
-NameVirtualHost 192.168.55.1:443
-<VirtualHost 192.168.55.1:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key
-</VirtualHost>
-
-NameVirtualHost [2001:e38:3661:1a5::1]:443
-<VirtualHost [2001:e38:3661:1a5::1]:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key
-</VirtualHost>
-
-NameVirtualHost 192.168.0.34:443
-<VirtualHost 192.168.0.34:443>
- DocumentRoot "/usr/local/www"
- ServerName opengate4.is.saga-u.ac.jp:443
- ServerAdmin administrator@opengate.is.saga-u.ac.jp
- ErrorLog "|/usr/bin/logger -p local6.info"
- CustomLog "|/usr/bin/logger -p local5.info" combined
-
- SSLEngine on
- SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server2.crt
- SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server2.key
-</VirtualHost>
-</pre></td></tr></table>
-
-<p>\8fã\8bL\82Ì\90Ý\92è\97á\82Í\81A\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è\82Ì\82½\82ß\82Ì\83f\83B\83\8c\83N\83e\83B\83u\82Ì\82Ý\8bL\8fq\82µ\82Ä\82¢\82é\81B
-\82±\82Ì\91¼\82É\82à\91½\82\82Ì\8d\80\96Ú\82ð\90Ý\92è\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\82Ì\82Å\81AApache2\82Ì\90Ý\92è\82ð\8fn\92m\82µ\82½\8fã\82Å
-\90Ý\92è\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 5 ************** -->
-<h4>C.5 HTTP_ERROR 404
\82Ö
\82Ì
\91Î
\89\9e<a name="apache5" href="#apache5" class="anchor">†</a></h4>
-
-<p>Opengate\82Å\82Í\81A\97\98\97p\8eÒ\92[\96\96\82©\82ç\91\97\90M\82³\82ê\82Ä\82\82éHTTP\83\8a\83N\83G\83X\83g\82ð\81AOpengate\82ª\8e\9d\82Â
-Web\83T\81[\83o\82É\93]\91\97\82·\82é\82±\82Æ\82É\82æ\82Á\82Ä\81A\94F\8fØ\83y\81[\83W\82ð\92ñ\8b\9f\82µ\82Ä\82¢\82é\81B\82±\82Ì\82½\82ß\81A\97\98\97p\8eÒ\92[\96\96
-\82©\82ç\91\97\90M\82³\82ê\82Ä\82\82éHTTP\83\8a\83N\83G\83X\83g\82Í\97\\8aú\82·\82é\82±\82Æ\82ª\82Å\82«\82È\82¢\81B\82æ\82Á\82Ä\81A\82Ç\82Ì\82æ\82¤\82È
-HTTP\83\8a\83N\83G\83X\83g\82É\91Î\82µ\82Ä\82à\81A\94F\8fØ\83y\81[\83W\82ð\95Ô\82·\82½\82ß\82É\81A/usr/local/etc/httpd.conf\82É
-HTTP_ERROR 404\82ª\94\90¶\82µ\82½\8fê\8d\87\82É\81ADocumentRoot\82ð\95Ô\82·\82æ\82¤\82É\90Ý\92è\82·\82é\81B</p>
-
-<table><tr><td><pre>
-ErrorDocument 404 /
-</pre></td></tr></table>
-
-<div align="right"><a href="#apache0">back</a> <a href="#top">top</a></div>
-
-<hr>
-<!-- Start:isc-dhcp3\82Ì\83C\83\93\83X\83g\81[\83\8b -->
-<h3>D isc-dhcp3
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="dhcp0" href="#dhcp0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#dhcp1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#dhcp2">DHCP\82Ì\90Ý\92è</a></li>
-</ul>
-
-<!-- *********** 1 ************* -->
-<h4>D.1
\83C
\83\93\83X
\83g
\81[
\83\8b\81iports
\81j<a name="dhcp1" href="#dhcp1" class="anchor">†</a></h4>
-
-<p>Opengate\82ð\93±\93ü\82·\82é\83l\83b\83g\83\8f\81[\83N\82Å\82Í\81A\97\98\97p\8eÒ\92[\96\96\82ª\95p\94É\82É\93ü\82ê\91Ö\82í\82é\82±\82Æ\82ª\97\\91ª\82Å\82«\82é\81B
-\82»\82±\82Å\81A\97l\81X\82È\97\98\97p\8eÒ\92[\96\96\82É\91Î\82µ\82Ä\8e©\93®\93I\82ÉIPv4\83A\83h\83\8c\83X\82ð\8a\84\82è\93\96\82Ä\82é\82±\82Æ\82ª\82Å\82«\82éDHCP\83T\81[\83o\82ð
-\93±\93ü\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>
-<p>\88È\89º\82Éisc-dhcp3\82Ì\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87\82ð\8bL\82·\81B</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/net/isc-dhcp3-server
-# make
-===> Cleaning for isc-dhcp3-server-3.0.1.r14_3
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<div align="right"><a href="#dhcp0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>D.2 DHCP
\82Ì
\90Ý
\92è<a name="dhcp2" href="#dhcp2" class="anchor">†</a></h4>
-
-<p>\83C\83\93\83X\83g\81[\83\8b\8dì\8bÆ\82ª\8a®\97¹\82·\82é\82Æ\81A/usr/local/etc\88È\89º\82Édhcpd.conf.sample\82ª\90¶\90¬\82³\82ê\82Ä\82¢\82é\81B
-\93¯\83f\83B\83\8c\83N\83g\83\8a\82Édhcpd.conf\82Æ\82µ\82Ä\83R\83s\81[\82µ\81Adhcpd\97p\82Ì\90Ý\92è\83t\83@\83C\83\8b\82ð\8dì\90¬\82·\82é\81B</p>
-<p>\88È\89º\82É\81A\90Ý\92è\97á\82ð\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-option domain-name "ai.is.saga-u.ac.jp";
-option domain-name-servers 192.168.0.2;
-option subnet-mask 255.255.255.0;
-option broadcast-address 192.168.55.255;
-option routers 192.168.55.1;
-
-default-lease-time 600;
-max-lease-time 7200;
-ddns-update-style none;
-log-facility local7;
-
-subnet 192.168.55.0 netmask 255.255.255.0 {
- range 192.168.55.100 192.168.55.200;
-}
-</pre></td></tr></table>
-
-<p>\82Ü\82½\81Adhcpd\82ð\8e©\93®\8bN\93®\82·\82é\82½\82ß\82É\81A/etc/rc.conf\82É\88È\89º\82Ì\8d\80\96Ú\82ð\8bL\8fq\82·\82é\81B</p>
-
-<table><tr><td><pre>
-dhcpd_enable="YES"
-dhcpd_ifaces="bge0"
-dhcpd_conf="/usr/local/etc/dhcpd.conf"
-</pre></td></tr></table>
-
-<p>dhcpd_ifaces\82É\82Â\82¢\82Ä\82Í\81Adhcp\82ð\91\97\90M\82·\82é\83C\83\93\83^\83t\83F\81[\83XID\82ð\8bL\8fq\82·\82é\81B</p>
-
-<div align="right"><a href="#dhcp0">back</a> <a href="#top">top</a></div>
-
-<hr>
-
-<!-- Start:BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b -->
-<h3>E BIND9
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="bind0" href="#bind0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#bind1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#bind2">\94F\8fØ\83L\81[\82Ì\8dì\90¬</a></li>
- <li class="list_num"><a href="#bind3">named.conf\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#bind4">zone\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#bind5">\8bN\93®\8am\94F</a></li>
-</ul>
-
-<!-- ********** 1 *********** -->
-<h4>E.1
\83C
\83\93\83X
\83g
\81[
\83\8b\81iports
\81j<a name="bind1" href="#bind1" class="anchor">†</a></h4>
-
-<p>Opengate\82Ì\82½\82ß\82É\93ñ\82Â\82ÌFQDN\82ð\97p\88Ó\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\8aù\91¶\82ÌDNS\82ÉOpengate\97p\82Ì
-FQDN\82ð\93o\98^\82·\82é\82±\82Æ\82Å\82à\89ð\8c\88\82Å\82«\82é\81B\82µ\82©\82µ\81ANAT\82È\82Ç\82ð\97p\82¢\82Ä\83A\83h\83\8c\83X\95Ï\8a·\82ð\8ds\82¤\8fê\8d\87\82ð
-\8dl\82¦\82é\82Æ\81A\83v\83\89\83C\83x\81[\83g\83l\83b\83g\83\8f\81[\83N\82Ì\83A\83h\83\8c\83X\82ð\8aO\95\94\82ÌDNS\82É\93o\98^\82·\82é\82±\82Æ\82Í\96]\82Ü\82µ\82\82È\82¢\81B
-\82»\82±\82Å\81AOpengate\97p\82Ì\83}\83V\83\93\82ÉDNS\82ð\93±\93ü\82·\82é\82±\82Æ\82à\8dl\82¦\82ç\82ê\82é\81B</p>
-<p>\88È\89º\82É\81ABIDN9\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\8bL\82·\81B</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/dns/bind9/
-# make clean
-===> Cleaning for bind9-9.3.1
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<p>\83C\83\93\83X\83g\81[\83\8b\82ª\8a®\97¹\82·\82é\82Æ\81A/etc/namedb(/var/named/etc/namaedb)\88È\89º\82Ì\83f\83B\83\8c\83N\83g\83\8a\82É
-\8ae\8eí\90Ý\92è\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82é\81B</p>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ********** 2 ********** -->
-<h4>E.2
\94F
\8fØ
\83L
\81[
\82Ì
\8dì
\90¬<a name="bind2" href="#bind2" class="anchor">†</a></h4>
-
-<p>BIND9\82Å\82Í\81A\83Z\83L\83\85\83\8a\83e\83B\82ð\8am\95Û\82·\82é\82½\82ß\82É\94F\8fØ\83L\81[\82ð\90Ý\92è\82µ\81Arndc\83R\83}\83\93\83h\82ð\97p\82¢\82Änamed\82ð\90§\8cä\82·\82é\81B</p>
-<p>\82»\82±\82Å\81A\82Ü\82¸\94F\8fØ\83L\81[\82Ì\8dì\90¬\82ð\8ds\82¤\81B\94F\8fØ\8b@\81[\82Ì\8dì\90¬\8eè\8f\87\82ð\88È\89º\82É\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/dnssec-keygen -a hmac-md5 -b 512 -n user rndc
-</pre></td></tr></table>
-
-<p>\88È\8fã\82Ì\8dì\8bÆ\82É\82¨\82¢\82Ä\81A"out of entropy"\82Æ\82¢\82¤\83G\83\89\81[\82ª\94\90¶\82·\82é\8fê\8d\87\82Í\81A\8e\9f\82Ì\95û\96@\82Å
-\94F\8fØ\83L\81[\82ð\8dì\90¬\82·\82é\81B</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/dnssec-keygen -r /dev/urandom -a hmac-md5 -b 512 -n user rndc
-</pre></td></tr></table>
-
-<p>\94F\8fØ\83L\81[\82Ì\8dì\90¬\82É\90¬\8c÷\82·\82é\82Æ\81A\8e\9f\82Ì\93ñ\82Â\82Ì\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82é\81B\82½\82¾\82µ\81A\83t\83@\83C\83\8b\96¼\82É
-\8aÜ\82Ü\82ê\82é\90\94\8e\9a\82Í\83\89\83\93\83_\83\80\82É\90¶\90¬\82³\82ê\82é\81B</p>
-
-<ul>
- <li><pre>Krndc.+157+60849.key</pre></li>
- <li><pre>Krndc.+157+60849.private</pre></li>
-</ul>
-
-<p>BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b\8cã\82É\81A/usr/local/etc/rndc.conf.sample\82Æ\82¢\82¤\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82Ä\82¢\82é\81B
-\82±\82Ì\83t\83@\83C\83\8b\82ð\83R\83s\81[\82µ\82Ä\81A/usr/local/etc/rndc.conf\82ð\8dì\90¬\82·\82é\81B</p>
-<p>\82»\82µ\82Ä\81Arndc.conf\82Ìkey\83f\83B\83\8c\83N\83e\83B\83u\82ð\95Ò\8fW\82·\82é\81Bkey\83f\83B\83\8c\83N\83e\83B\83u\82Å\82Í\81A\94F\8fØ\83L\81[\82Ì
-\83A\83\8b\83S\83\8a\83Y\83\80\82Æ\90¶\90¬\82µ\82½\94F\8fØ\83L\81[\82ð\8ew\92è\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\94F\8fØ\83L\81[\82Ísecret\82Ì\8d\80\96Ú\82É\8ew\92è\82·\82é\81B
-
\82Ü
\82½
\81A
\94F
\8fØ
\83L
\81[
\82Æ
\8b¤
\82É
\8dì
\90¬
\82µ
\82½<pre>Krndc.+157+60849.private</pre>
\82Ìkey
\8d\80\96Ú
\82É
\95\
\8e¦
\82³
\82ê
\82Ä
-\82¢\82é\82à\82Ì\82ð\8ew\92è\82·\82é\81B</p>
-
-<table><tr><td><pre>
-options {
- default-server localhost;
- default-key "key";
-};
-
-server localhost {
- key "key";
-};
-
-key "key" {
- algorithm hmac-md5;
- secret "...";
-};
-</pre></td></tr></table>
-
-<p>\8d¡\89ñ\82ÌDNS\83T\81[\83o\82Í\81AOpengate\82ð\93±\93ü\82·\82é\83l\83b\83g\83\8f\81[\83N\82Ì\82Ý\82É\83T\81[\83r\83X\82ð\8ds\82¤\82à\82Ì\82Å\82 \82é\81B\82µ\82©\82µ\81A
-\90Ý\92è\83t\83@\83C\83\8b\82Ì\83p\81[\83~\83b\83V\83\87\83\93\82É\8f\\95ª\92\8d\88Ó\82µ\81A\94F\8fØ\83L\81[\82Ì\83t\83@\83C\83\8b\82Í\83T\81[\83o\8fã\82É\95Û\91¶\82¹\82¸\82É\81A
-\8dí\8f\9c\82à\82µ\82\82Í\83v\83\8a\83\93\83g\83A\83E\83g\82µ\82Ä\8cµ\8fd\82É\95Û\91¶\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ********* 3 ********* -->
-<h4>E.3 named.conf
\82Ì
\90Ý
\92è<a name="bind3" href="#bind3" class="anchor">†</a></h4>
-
-<p>named\82Ì\8eå\82È\93®\8dì\82ð\90§\8cä\82·\82é\82½\82ß\82Ì\90Ý\92è\83t\83@\83C\83\8b/etc/namedb/named.conf\82Ì\90Ý\92è\82ð\8ds\82¤\81B</p>
-<p>\82Ü\82¸\81A\94F\8fØ\83L\81[\82Ì\90Ý\92è\82Ì\82½\82ß\82Ékey\83f\83B\83\8c\83N\83e\83B\83u\82Ì\90Ý\92è\82ª\95K\97v\82Å\82 \82é\81B\91O\8fq\82µ\82½rndc.conf\82Ì
-key\83f\83B\83\8c\83N\83e\83B\83u\82Æ\93¯\97l\82Ì\90Ý\92è\82ð\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>
-
-<table><tr><td><pre>
-key "rndc_key" {
- algorithm hmac-md5;
- secret "...";
-};
-
-controls {
- inet ::1 allow {
- ::1;
- }
- keys {
- "rndc_key";
- };
- inet 127.0.0.1 allow {
- 127.0.0.1;
- }
- keys {
- "rndc_key";
- };
-};
-</pre></td></tr></table>
-
-<p>\82Ü\82½\81Akey\83f\83B\83\8c\83N\83e\83B\83u\82É\82Â\82¢\82Ä\82Í\95Ê\83t\83@\83C\83\8b\82É\8bL\8fq\82µ\81Anamed.conf\82Åinclude
-\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B\95Ê\83t\83@\83C\83\8b\82É\8bL\8fq\82·\82é\8fê\8d\87\82Í\81A\83p\81[\83~\83b\83V\83\87\83\93\82Ì\90Ý\92è\82æ\82Á\82Ä\82³\82ç\82É
-\83Z\83L\83\85\83\8a\83e\83B\82ð\8d\82\82ß\82é\82±\82Æ\82ª\89Â\94\\82Æ\82È\82é\81B</p>
-<p>\8e\9f\82É\81Aoptions\83f\83B\83\8c\83N\83e\83B\83u\82Ì\90Ý\92è\82ð\8ds\82¤\81B</p>
-
-<table><tr><td><pre>
-options {
- directory "/etc/namedb";
- pid-file "/var/run/named/named.pid";
- auth-nxdomain yes;
- listen-on-v6 { any; };
-};
-</pre></td></tr></table>
-
-<p>named.pid\83t\83@\83C\83\8b\82ð\92u\82\83f\83B\83\8c\83N\83g\83\8a\82Í\93K\93\96\82É\8dì\90¬\82·\82é\95K\97v\82ª\82 \82é\81B</p>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ******** 4 ********* -->
-<h4>E.4 zone
\82Ì
\90Ý
\92è<a name="bind4" href="#bind4" class="anchor">†</a></h4>
-
-<p>Opengate\82Å\8aÇ\97\9d\82·\82é\83h\83\81\83C\83\93\82É\82Â\82¢\82Ä\90Ý\92è\82ð\8ds\82¤\81B\8ae\83h\83\81\83C\83\93\82Ínamed.conf\82Ìzone\83f\83B\83\8c\83N\83e\83B\83u\82É
-\82æ\82Á\82Ä\8aÇ\97\9d\82³\82ê\82é\81B\82Ü\82½\81ABIND9\82Å\82Íview\82Æ\82¢\82¤\83f\83B\83\8c\83N\83e\83B\83u\82ª\8eÀ\91\95\82³\82ê\82Ä\82¨\82è\81A\82±\82Ì\8eq\83f\83B\83\8c\83N\83e\83B\83u\82É
-zone\82Æ\82µ\82Ä\90Ý\92è\82·\82é\82±\82Æ\82É\82æ\82Á\82Ä\81ADNS\96â\82¢\8d\87\82í\82¹\8c³\82ÌIP\83A\83h\83\8c\83X\82â\83h\83\81\83C\83\93\82É\82æ\82Á\82Ä\95Ô\93\9a\82·\82ézone\82ð
-\95Ï\8dX\82·\82é\82±\82Æ\82ª\89Â\94\\82Æ\82È\82é\81B</p>
-
-<table><tr><td><pre>
-view "og" {
- match-clients
- {
- 10.0.0.0/16;
- };
-
- recursion yes;
-
- zone "." {
- type hint;
- file "named.root";
- };
-
- zone "og.saga-u.ac.jp" {
- type master;
- file "og.saga-u.ac.jp";
- };
-
- zone "0.0.127.IN-ADDR.ARPA" {
- type master;
- file "master/localhost.rev";
- };
-
- // RFC 3152
- zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\
- 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA" {
- type master;
- file "master/localhost-v6.rev";
- };
-
- // RFC 1886 -- deprecated
- zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\
- 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.INT" {
- type master;
- file "master/localhost-v6.rev";
- };
-};
-</pre></td></tr></table>
-
-<p>\88È\8fã\82Ì\90Ý\92è\82É\82¨\82¢\82Ä\81A"og.saga-u.ac.jp"\82Æ\82¢\82¤zone\82ð\90Ý\92è\82µ\82½\81B\82±\82Ì\90Ý\92è\82É\82¨\82¢\82Ä\81A
-\83h\83\81\83C\83\93"og.saga-u.ac.jp"\82É\91®\82·\82é\83z\83X\83g\82ð\90Ý\92è\82µ\82½og.saga-u.ac.jp\82Æ\82¢\82¤\83t\83@\83C\83\8b\82ð
-\93Ç\82Ý\8d\9e\82Þ\82æ\82¤\82É\90Ý\92è\82µ\82Ä\82¢\82é\81B\82»\82±\82Å\81Aog.saga-u.ac.jp\82Æ\82¢\82¤\81A\8e\9f\82Ì\82æ\82¤\82È\83t\83@\83C\83\8b\82ð
-\97p\88Ó\82·\82é\81B</p>
-
-<table><tr><td><pre>
-$TTL 3600
-$ORIGIN og.saga-u.ac.jp.
-
-@ IN SOA ns.og.saga-u.ac.jp. postmaster (
- 2005051702 ;
- 3600
- 1200
- 2419200
- 86400 )
- IN NS ns.og.saga-u.ac.jp.
- IN A 10.0.0.2
- IN MX 10 opengate.og.saga-u.ac.jp.
-
-ns IN A 10.0.0.2
-
-opengate IN A 10.0.0.2
- AAAA 2001:2f8:10:1::1
-
-opengate4 IN A 133.49.1.2
-</pre></td></tr></table>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-
-<!-- ********* 5 ********* -->
-<h4>E.5
\8bN
\93®
\8am
\94F<a name="bind5" href="#bind5" class="anchor">†</a></h4>
-
-<p>\88È\8fã\81A\91S\82Ä\82Ì\90Ý\92è\82ª\8a®\97¹\82µ\82½\8cã\82É\81A\8bN\93®\8am\94F\82ð\8ds\82¤\81B</p>
-
-<table><tr><td><pre>
-# /usr/local/sbin/named/ -u bind -c /etc/namedb/named.conf
-</pre></td></tr></table>
-
-<p>\88È\8fã\82ð\8eÀ\8ds\82µ\81A\96â\91è\82È\82named\82ª\8bN\93®\82µ\82Ä\82¢\82ê\82Î\90¬\8c÷\82Å\82 \82é\81B\8bN\93®\8am\94F\82Å\96â\91è\82ª\82È\82¯\82ê\82Î\81A
-/etc/rc.conf\82É\88È\89º\82Ì\8d\80\96Ú\82ð\8bL\8fq\82µ\81A\8e©\93®\8bN\93®\82·\82é\82æ\82¤\82É\90Ý\92è\82·\82é\81B</p>
-
-<table><tr><td><pre>
-named_enable="YES"
-named_program="/usr/local/sbin/named"
-named_flags="-u bind -c /etc/namedb/named.conf"
-</pre></td></tr></table>
-
-<p>DNS\83T\81[\83o\82Í\8aÇ\97\9d\82ª\95¡\8eG\82Å\82 \82é\82½\82ß\81A\82±\82Ì\91¼\82Ì\8e\91\97¿\82à\8eQ\8dl\82É\82µ\81A\83}\83j\83\85\83A\83\8b\82ð
-\8fn\93Ç\82µ\82½\8fã\82Å\90Ý\92è\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>
-
-<div align="right"><a href="#bind0">back</a> <a href="#top">top</a></div>
-<hr>
-
-
-
-<!-- Start:MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b -->
-<h3>F MRTG
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="mrtg0" href="#mrtg0" class="anchor">†</a></h3>
-
-<ul>
- <li class="list_num"><a href="#mrtg1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</a></li>
- <li class="list_num"><a href="#mrtg2">MRTG\82Ì\90Ý\92è</a></li>
- <li class="list_num"><a href="#mrtg3">MRTG\82Ì\8bN\93®\8am\94F</a></li>
- <li class="list_num"><a href="#mrtg4">crontab\82Ö\82Ì\93o\98^</a></li>
-</ul>
-
-<!-- ************ 1 ************** -->
-<h4>F.1 MRTG
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<a name="mrtg1" href="#mrtg1" class="anchor">†</a></h4>
-
-<p>Opengate \82Ì\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\82½\82ß\82É\81AMRTG\82ð\97p\82¢\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B\97\98\97p\8fó\8bµ\82Ì\8aÄ\8e\8b\82ð\8ds\82È\82í\82È\82¢\8fê\8d\87\82Í\81A
-MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b\82Í\95s\97v\82Å\82 \82é\81B</p>
-
-<p>MRTG(Multi Router Traffic Grapher)\82Æ\82Í\81A\96{\97\88\83l\83b\83g\83\8f\81[\83N\82Ì\95\89\89×\82ð\8aÄ\8e\8b\82·\82é\83c\81[\83\8b\82Å\82 \82é\81B
-SNMP\83G\81[\83W\83F\83\93\83g\82æ\82è\83g\83\89\83t\83B\83b\83N\82Ì\92l\82ð\8eæ\93¾\82µ\81A\83O\83\89\83t\83B\83b\83N\83C\83\81\81[\83W\82ð\8aÜ\82ÞHTML\83y\81[\83W\82ð\90¶\90¬\82·\82é\81B
-<a href="http://www.mrtg.jp/" target="_blank">\8fÚ\8d×</a></p>
-
-<p>MRTG\82ð\97p\82¢\82Ä\81AOpengate\82Ì\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\82É\82 \82½\82Á\82Ä\82Í\81AOpengate\82ð\93±\93ü\82µ\82½\83Q\81[\83g\83E\83F\83C\82É\82¨\82¢\82Ä
-MRTG\82ð\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82à\8d\\82í\82È\82¢\82ª\81A\8aÄ\8e\8b\97p\82Ì\95Ê\82Ì\83T\81[\83o\82É\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82à\8d\\82í\82È\82¢\81B\82Ü\82½\81A
-Opengate\82ð\95ª\8eU\94z\92u\82·\82é\82æ\82¤\82É\90Ý\8cv\82³\82ê\82Ä\82¢\82é\82½\82ß\81A\95¡\90\94\82ÌOpengate\82ð\8aÇ\97\9d\82·\82é\82É\82 \82½\82Á\82Ä\82Í\8aÄ\8e\8b\97p\82Ì\83T\81[\83o\82É
-\82¨\82¢\82ÄMRTG\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\82±\82Æ\82ð\90\84\8f§\82·\82é\81B</p>
-
-<p>\88È\89º\82É\81AMRTG\82ðports\82ð\97p\82¢\82Ä\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-# cd /usr/ports/net-mgmt/mrtg/
-# make clean
-===> Cleaning for mrtg-2.12.2,1
-# make install clean ; rehash
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-<!-- ************ 2 ************** -->
-<h4>F.2 MRTG
\82Ì
\90Ý
\92è<a name="mrtg2" href="#mrtg2" class="anchor">†</a></h4>
-
-<p>MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b\82ª\8a®\97¹\82·\82é\82Æ\81A/usr/local/etc/mrtg/\88È\89º\82É\90Ý\92è\83t\83@\83C\83\8b\82ª\97p\88Ó\82³\82ê\82Ä\82¢\82é\81B
-\93¯\83f\83B\83\8c\83N\83g\83\8a\82É\81Aopengate.cfg\82Æ\82µ\82Ä\90V\82½\82É\90Ý\92è\83t\83@\83C\83\8b\82ð\97p\88Ó\82·\82é\81B</p>
-
-<table><tr><td><pre>
-##################################################
-# opengate user counter
-
-WorkDir: /usr/home/user/public_html/mrtg/opengate/
-Language: euc-jp
-
-##### \83I\83v\83V\83\87\83\93
-# growright: X\8e²\82Ì\8c´\93_\82ð\8d¶\82É integer: \90®\90\94\95\\8e¦ info: 3,4\94Ô\96Ú\82Ì\8fo\97Í\82Ì\94ñ\95\\8e¦
-# gauge: \8c»\8dÝ\82Ì\92l=\93ü\97Í\92l-\91O\89ñ\82Ì\93ü\97Í\92l\82ð\82µ\82È\82¢ nopercent: \83p\81[\83Z\83\93\83g\94ñ\95\\8e¦
-Options[^]: growright,gauge,nopercent,integer
-
-Target[opengate]:`/usr/home/user/bin/input.sh`
-Title[opengate]: Opengate user counter
-
-PageTop[opengate]: <h1>Opengate user counter</h1>
- <p>Opengate12 \82ð\97\98\97p\82µ\82Ä\82¢\82é\90l\90\94\82ð\95\\8e¦\82µ\82Ä\82¢\82Ü\82·\81B</p>
-
-# \92l\82Ì\8fã\8cÀ
-MaxBytes[opengate]: 200
-# \8ae\83O\83\89\83t\82É\82¨\82¢\82Ä\81A\83O\83\89\83t\82Ì\8fã\8cÀ\82ð\92l\82Ì\8dÅ\91å\92l\82Å\82È\82\92l\82Ì\8fã\8cÀ\82É\82·\82é
-#Unscaled[opengate]: ymwd
-
-# \83O\83\89\83t\82ÌY\8e²\82É\82Â\82\83^\83C\83g\83\8b
-YLegend[opengate]: Opengate User
-# \92l\82Ì\92P\88Ê
-ShortLegend[opengate]: \90l
-# \92l\82Ì\83^\83C\83g\83\8b LegendI: 1\94Ô\96Ú LegendO: 2\94Ô\96Ú
-LegendI[opengate]: IPv6 Users
-LegendO[opengate]: Total Users
-</pre></td></tr></table>
-
-<p>WorkDir\82É\8ew\92è\82µ\82½\83f\83B\83\8c\83N\83g\83\8a\82ð\8dì\90¬\82·\82é\81B\93¯\83f\83B\83\8c\83N\83g\83\8a\82É\81AMRTG\82ª\8ae\8eíHTML\83t\83@\83C\83\8b\82Æ\83O\83\89\83t\83B\83b\83N\83C\83\81\81[\83W\82ð\8dì\90¬\82·\82é\81B</p>
-
-<p>Target[opengate]\82É\82Í\81AMRTG\82É\83f\81[\83^\82ð\93n\82·\82½\82ß\82Ì\83v\83\8d\83O\83\89\83\80\82ð\90Ý\92u\82·\82é\81B\88È\89º\82É\8fÚ\8d×\82ð\90à\96¾\82·\82é\81B</p>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-
-<h5>F.2.1 Opengate
\83T
\81[
\83o
\82Å
\8aÄ
\8e\8b\82·
\82é
\8fê
\8d\87<a name="mrtg21" href="#mrtg21" class="anchor">†</a></h5>
-
-<p>\88È\89º\82ÉOpengate\82ð\93±\93ü\82µ\82½\83Q\81[\83g\83E\83F\83C\82É\82¨\82¢\82Ä\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\8fê\8d\87\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\8bL\82·\81B</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## shwo opengate status for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-LANG=C
-COLUMNS=256
-
-export LANG
-export COLUMNS
-
-### IPv6 prefix
-prefix="2001:2f8:22:801:"
-
-### opengate process name
-process="opengatesrv.cgi"
-
-### tmp file name
-tmp_all="/tmp/og_count_all.tmp"
-tmp_6="/tmp/og_count_6.tmp"
-
-######################################################
-
-ps ax | grep $process > $tmp_all
-COUNT=`wc -l $tmp_all | awk '{print $1}'`
-grep $prefix $tmp_all > $tmp_6
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`
-UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`
-
-rm $tmp_all
-rm $tmp_6
-
-echo "$COUNT6"
-echo "$COUNT"
-echo "$UPTIME"
-echo "Opengate User Counter"
-</pre></td></tr></table>
-
-<p>\82³\82ç\82É\81A\82±\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\92P\93Æ\82Å\8eÀ\8ds\82µ\81A\88È\89º\82Ì\82æ\82¤\82È\83f\81[\83^\82ª\8eæ\93¾\82Å\82«\82Ä\82¢\82é\82±\82Æ\82ð\8am\94F\82·\82é\81B</p>
-
-<table><tr><td><pre>
-5
-48
-10days
-Opengate User Counter
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-<h5>F.2.2
\8aO
\95\94\83T
\81[
\83o
\82Å
\8aÄ
\8e\8b\82·
\82é
\8fê
\8d\87<a name="mrtg22" href="#mrtg22" class="anchor">†</a></h5>
-
-<p>\88È\89º\82É\8aO\95\94\83T\81[\83o\82É\82¨\82¢\82Ä\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\8fê\8d\87\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\8e¦\82·\81B</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## input data for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-# tmp file name
-file="/tmp/opengate.tmp"
-
-# URL of output.sh at opengate
-url="http://opengate.saga-u.ac.jp/cgi-bin/output.sh"
-
-fetch -o $file $url &> /dev/null
-
-more $file
-</pre></td></tr></table>
-
-<p>\82³\82ç\82É\81A\8aÄ\8e\8b\82·\82éOpengate\83T\81[\83o\82É\82¨\82¢\82Ä\81ACGI\82ª\8eÀ\8ds\89Â\94\\82È\83f\83B\83\8c\83N\83g\83\8a\82É\8e\9f\82Ì\82æ\82¤\82È\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð
-\97p\88Ó\82·\82é\81B\82±\82ê\82ð\81A\8fã\8bL\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82Ì"url"\82É\8ew\92è\82·\82é\81B</p>
-
-<table><tr><td><pre>
-#!/bin/sh
-
-#######################################
-##
-## shwo opengate status for MRTG
-##
-## 1 line : IPv6 Users
-## 2 line : Total Users
-## 3 line : uptime
-## 4 line : comment for data
-##
-#######################################
-
-LANG=C
-COLUMNS=256
-
-export LANG
-export COLUMNS
-
-### IPv6 prefix
-prefix="2001:2f8:22:801:"
-
-### opengate process name
-process="opengatesrv.cgi"
-
-### tmp file name
-tmp_all="/tmp/og_count_all.tmp"
-tmp_6="/tmp/og_count_6.tmp"
-
-######################################################3
-
-ps ax | grep $process > $tmp_all
-COUNT=`wc -l $tmp_all | awk '{print $1}'`
-grep $prefix $tmp_all > $tmp_6
-COUNT6=`wc -l $tmp_6 | awk '{print $1}'`
-UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`
-rm $tmp_all
-rm $tmp_6
-
-echo "Content-type: text/plain; charset=iso-8859-1"
-echo
-
-echo "$COUNT6"
-echo "$COUNT"
-echo "$UPTIME"
-echo "Opengate User Counter"
-</pre></td></tr></table>
-
-<p>Opengate\83T\81[\83o\82É\81A\88È\8fã\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\97p\88Ó\82µ\82½\8cã\82É\81A\8aÄ\8e\8b\97p\82Ì\8aO\95\94\83T\81[\83o\82É\82¨\82¢\82Ä\81A
-input.sh\82ð\92P\93Æ\82Å\8eÀ\8ds\82µ\82½\8dÛ\82É\81A\88È\89º\82Ì\82æ\82¤\82È\83f\81[\83^\82ª\8eæ\93¾\82Å\82«\82Ä\82¢\82é\82±\82Æ\82ð\8am\94F\82·\82é\81B</p>
-
-<table><tr><td><pre>
-5
-48
-10days
-Opengate User Counter
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-
-<!-- ************ 3 ************** -->
-<h4>F.3 MRTG
\82Ì
\8bN
\93®
\8am
\94F<a name="mrtg3" href="#mrtg3" class="anchor">†</a></h4>
-
-<p>\88È\8fã\82Ì\90Ý\92è\82ª\8a®\97¹\82µ\82½\8cã\82É\81Amrtg\82ð\8eÀ\8ds\82·\82é\82±\82Æ\82ª\89Â\94\\82©\8am\94F\82·\82é\81B</p>
-
-<table><tr><td><pre>
-# /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg
-</pre></td></tr></table>
-
-<p>\88È\8fã\82ð\8eÀ\8ds\82·\82é\82Æ\81A\82P\89ñ\96Ú\82Æ\82Q\89ñ\96Ú\82Í\97l\81X\82ÈWARNING\82ª\8fo\97Í\82³\82ê\82é\81B</p>
-
-<p>mrtg\82ð\95¡\90\94\89ñ\8eÀ\8ds\82µ\8cã\82É\81AWorkDir\82É\8ew\92è\82µ\82½\83f\83B\83\8c\83N\83g\83\8a\82É\88È\89º\82Ì\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82Ä\82¢\82ê\82Î\90¬\8c÷\82Å\82 \82é\81B</p>
-
-<table><tr><td><pre>
-> ls -l
--rw-r--r-- 1 root wheel 538 12 14 04:40 mrtg-l.png
--rw-r--r-- 1 root wheel 414 12 14 04:40 mrtg-m.png
--rw-r--r-- 1 root wheel 1759 12 14 04:40 mrtg-r.png
--rw-r--r-- 1 root wheel 2941 12 20 15:15 opengate-day.png
--rw-r--r-- 1 root wheel 2146 12 20 14:35 opengate-month.png
--rw-r--r-- 1 root wheel 2867 12 20 14:55 opengate-week.png
--rw-r--r-- 1 root wheel 1897 12 20 05:00 opengate-year.png
--rw-r--r-- 1 root wheel 5961 12 20 15:15 opengate.html
--rw-r--r-- 1 root wheel 48786 12 20 15:15 opengate.log
--rw-r--r-- 1 root wheel 48784 12 20 15:10 opengate.old
-</pre></td></tr></table>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-
-<!-- ************ 4 ************** -->
-<h4>F.4 crontab
\82Ö
\82Ì
\93o
\98^<a name="mrtg4" href="#mrtg4" class="anchor">†</a></h4>
-
-<p>\88È\8fã\82Ì\90Ý\92è\82ª\8a®\97¹\82µ\82½\82Ì\82¿\82É\81Amrtg\82ðcrontab\82É\82æ\82Á\82Ä\92è\8aú\93I\82É\8eÀ\8ds\82·\82é\81B</p>
-
-<p>/etc/crontab\82É\8e\9f\82Ì\8ds\82ð\92Ç\89Á\82·\82é\81B</p>
-
-<table><tr><td><pre>
-*/5 * * * * root /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg
-</pre></td></tr></table>
-
-<p>\8aO\95\94\83T\81[\83o\82É\82¨\82¢\82Ä\81A\95¡\90\94\82ÌOpengate\82ð\8aÇ\97\9d\82·\82é\8fê\8d\87\82Í\81A\90Ý\92è\83t\83@\83C\83\8b\82ð\90V\82½\82É\8dì\90¬\82·\82é\89ß\92ö\82©\82ç\8ds\82È\82¤\81B</p>
-
-<div align="right"><a href="#mrtg0">back</a> <a href="#top">top</a></div>
-
-</body>
+<html>\r
+<head>\r
+<title>Opegnate Install</title>\r
+<meta http-equiv="content-type" content="text/html;charset=Shift_JIS">\r
+<link rel="stylesheet" type="text/css" media="screen" href="style.css">\r
+</head>\r
+\r
+\r
+<body bgcolor="#fafff0">\r
+\r
+<h2>Opengate
\83C
\83\93\83X
\83g
\81[
\83\8b\8eè
\8f\87<A class=anchor href="#top" name=top>
\81õ</A></h2>
\r+<!-- Start:\96Ú\8e\9f -->\r
+<ul>\r
+ <li class="list_alpha"><A href="#opengate0">Opengate \82Ì\83C\83\93\83X\83g\81[\83\8b</A>\r
+ <ul>\r
+ <li class="list_num"><A href="#opengate1">\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87</A></li>\r
+ <li class="list_num"><A href="#opengate2">FreeBSD \82Ì\83C\83\93\83X\83g\81[\83\8b</A></li>\r
+ <li class="list_num"><A href="#opengate3">Opengate \82Ì\83C\83\93\83X\83g\81[\83\8b</A></li>\r
+ </ul></li>\r
+ <li class="list_alpha"><A href="#ipfw0">ipfw,ip6fw\82Ì\90Ý\92è</A>\r
+ <ul>\r
+ <li class="list_num"><A href="#ipfw1">\83J\81[\83l\83\8b\82Ì\8dÄ\8d\\92z</A></li>\r
+ <li class="list_num"><A href="#ipfw2">ipfw\82Ì\90Ý\92è</A></li>\r
+ <li class="list_num"><A href="#ipfw3">ip6fw\82Ì\90Ý\92è</A></li>\r
+ </ul></li>\r
+ <li class="list_alpha"><A href="#apache0">Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b</A>\r
+ <ul>\r
+ <li class="list_num"><A href="#apache1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</A></li>\r
+ <li class="list_num"><A href="#apache2">\83C\83\93\83X\83g\81[\83\8b\81i\83\\81[\83X\81j</A></li>\r
+ <li class="list_num"><A href="#apache3">\94é\96§\8c®\81A\8fØ\96¾\8f\91\82Ì\8dì\90¬</A></li>\r
+ <li class="list_num"><A href="#apache4">\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è</A></li>\r
+ <li class="list_num"><A href="#apache5">HTTP_ERROR 404\82Ö\82Ì\91Î\89\9e</A></li>\r
+ </ul></li>\r
+ <li class="list_alpha"><A href="#dhcp0">isc-dhcp3\82Ì\83C\83\93\83X\83g\81[\83\8b</A>\r
+ <ul>\r
+ <li class="list_num"><A href="#dhcp1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</A></li>\r
+ <li class="list_num"><A href="#dhcp2">DHCP\82Ì\90Ý\92è</A></li>\r
+ </ul></li>\r
+ <li class="list_alpha"><A href="#bind0">BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b</A>\r
+ <ul>\r
+ <li class="list_num"><A href="#bind1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</A></li>\r
+ <li class="list_num"><A href="#bind2">\94F\8fØ\83L\81[\82Ì\8dì\90¬</A></li>\r
+ <li class="list_num"><A href="#bind3">named.conf\82Ì\90Ý\92è</A></li>\r
+ <li class="list_num"><A href="#bind4">zone\82Ì\90Ý\92è</A></li>\r
+ <li class="list_num"><A href="#bind5">\8bN\93®\8am\94F</A></li>\r
+ </ul></li>\r
+ <li class="list_alpha"><A href="#mrtg0">MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b</A>\r
+ <ul>\r
+ <li class="list_num"><A href="#mrtg1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</A></li>\r
+ <li class="list_num"><A href="#mrtg2">MRTG\82Ì\90Ý\92è</A></li>\r
+ <li class="list_num"><A href="#mrtg3">MRTG\82Ì\8bN\93®\8am\94F</A></li>\r
+ <li class="list_num"><A href="#mrtg4">crontab\82Ö\82Ì\93o\98^</A></li>\r
+ </ul></li>\r
+ <li class="list_alpha"><A href="#rulechk">rulechk\82Ì\83C\83\93\83X\83g\81[\83\8b</A>\r
+ </li>\r
+</ul>\r
+\r
+<!-- End:\96Ú\8e\9f -->\r
+<hr>\r
+<!-- Start:Opengate\82Ì\83C\83\93\83X\83g\81[\83\8b -->\r
+<h3>A Opegnate
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<A class=anchor href="#opengate0" name=opengate0>
\81õ</A></h3>
\r+<ul>\r
+ <li class="list_num"><A href="#opengate1">\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87</A></li>\r
+ <li class="list_num"><A href="#opengate2">FreeBSD \82Ì\83C\83\93\83X\83g\81[\83\8b</A></li>\r
+ <li class="list_num"><A href="#opengate3">Opengate \82Ì\83C\83\93\83X\83g\81[\83\8b</A></li>\r
+</ul>\r
+\r
+\r
+<!-- ************ 1 ************** -->\r
+<h4>A.1
\83C
\83\93\83X
\83g
\81[
\83\8b\8eè
\8f\87<A class=anchor href="#opengate1" name=opengate1>
\81õ</A></h4>
\r+\r
+<p>Opengate\82Ì\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87\82ð\88È\89º\82É\8e¦\82·\81B\82½\82¾\82µ\81A\81¦\82Í\95K\90{\8d\80\96Ú\82ð\8e¦\82µ\81A\82»\82ê\88È\8aO\82Ì\8eè\8f\87\82Í\95K\97v\82É\89\9e\82¶\82Ä\8ds\82È\82¤\81B</p>\r
+\r
+<ul>\r
+ <li class="list_num">\83Q\81[\83g\83E\83F\83C\83}\83V\83\93\82Ì\8f\80\94õ \81¦ </li>\r
+ \r
+ <li class="list_num">FreeBSD(OS)\82Ì\83C\83\93\83X\83g\81[\83\8b \81¦ </li>\r
+ \r
+ <li class="list_num">\83J\81[\83l\83\8b\82Ì\8dÄ\8d\\92z \81¦ </li>\r
+ \r
+ <li class="list_num">ipfw,ip6fw\82Ì\90Ý\92è \81¦ </li>\r
+ \r
+ <li class="list_num">NAT\82Ì\90Ý\92è </li>\r
+ \r
+ <li class="list_num">Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b\81A\90Ý\92è \81¦ </li>\r
+ \r
+ <li class="list_num">DHCP\82Ì\83C\83\93\83X\83g\81[\83\8b\81A\90Ý\92è </li>\r
+ \r
+ <li class="list_num">BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b\81A\90Ý\92è</li>\r
+</ul>\r
+\r
+<div align="right"><A href="#opengate0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 2 ************** -->\r
+<h4>A.2 FreeBSD
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<A class=anchor href="#opengate2" name=opengate2>
\81õ</A></h4>
\r+\r
+<p>\83Q\81[\83g\83E\83F\83C\83}\83V\83\93\82Æ\82µ\82Ä\81ANIC\82ð\82Q\96\87\88È\8fã\8e\9d\82¿\81AFreeBSD\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\82±\82Æ\82ª\89Â\94\\82È\82à\82Ì\82ð\97p\88Ó\82·\82é\81B</p>\r
+<p>FreeBSD 4.x,5.x,6.x\82Ì\82Ç\82ê\82©\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\81B\8cã\82É\83J\81[\83l\83\8b\82ð\8dÄ\8d\\92z\82·\82é\95K\97v\82ª\82 \82é\82Ì\82Å\81A\83C\83\93\83X\83g\81[\83\8b\82·\82é\r
+Distributions\82ð\91I\91ð\82·\82é\8dÛ\82ÉDeveloper(Full sorces,binaries and doc)\82ð\91I\91ð\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>\r
+<p>\r
+\r
+FreeBSD\82ð\83C\83\93\83X\83g\81[\83\8b\82µ\82½\8cã\82É\81A\83Q\81[\83g\83E\83F\83C\82Æ\82µ\82Ä\82Ì\8b@\94\\82ð\97L\8cø\82É\82·\82é\82½\82ß\82É\81A/etc/rc.conf\82É\8e\9f\82Ì\90Ý\92è\82ð\8bL\8fq\82·\82é\81B\82à\82µ\82\82Í\81AFreeBSD\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8dÛ\82É\81A\83Q\81[\83g\83E\83F\83C\82Æ\82µ\82Ä\82Ì\8b@\94\\82ð\97L\8cø\82É\82·\82é\82©\94Û\82©\82ð\96â\82í\82ê\82é\82Ì\82Å\81A\82±\82±\82Å\83Q\81[\83g\83E\83F\83C\82Ì\8b@\94\\82ð\97L\8cø\82É\82µ\82Ä\82à\8d\\82í\82È\82¢\81B</p>\r
+\r
+<table>\r
+ \r
+ <TR>\r
+<td><code>gateway_enable="YES"</code></td></TR>\r
+</table>\r
+\r
+<div align="right"><A href="#opengate0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 3 ************** -->\r
+<h4>A.3 Opengate
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<A class=anchor href="#opengate3" name=opengate3>
\81õ</A></h4>
\r+\r
+<h5>A.3.1 Opengate
\83p
\83b
\83P
\81[
\83W<A class=anchor href="#opengate4" name=opengate4>
\81õ</A></h5>
\r+\r
+<p>Opengate\82Ì\8dÅ\90V\82Ì\83p\83b\83P\81[\83W\82ð\93K\93\96\82È\83f\83B\83\8c\83N\83g\83\8a\82É\93W\8aJ\82·\82é\81B\83p\83b\83P\81[\83W\82É\82Í\88È\89º\82Ì\83f\83B\83\8c\83N\83g\83\8a\82ª\8aÜ\82Ü\82ê\82é\81B</p>\r
+\r
+<table>\r
+<tr><td><pre>\r
+doc\81F\8ae\8eí\95¶\8f\91\r
+conf\81F\90Ý\92è\83t\83@\83C\83\8b\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\83X\83N\83\8a\83v\83g\r
+javahtml\81F\83N\83\89\83C\83A\83\93\83gJava Applet\81AHTML\83t\83@\83C\83\8b\r
+opengatesrv\81F\83T\81[\83oCGI\83v\83\8d\83O\83\89\83\80\r
+tools: \95t\89Á\83c\81[\83\8b\r
+</pre>\r
+</td></tr>\r
+</table>\r
+\r
+<h5>A.3.2
\83R
\83\93\83p
\83C
\83\8b<A class=anchor href="#opengate5" name=opengate5>
\81õ</A></h5>
\r+\r
+<p>\r
+\r
+Opengate\83p\83b\83P\81[\83W\82É\8aÜ\82Ü\82ê\82éopengatesrv\83f\83B\83\8c\83N\83g\83\8a\82ÉMakefile\82ª\97p\88Ó\82³\82ê\82Ä\82¢\82é\81B\93¯\83f\83B\83\8c\83N\83g\83\8a\82É\82¨\82¢\82Ä\81AOpengate\82Ì\83R\83\93\83p\83C\83\8b\82Æ\83C\83\93\83X\83g\81[\83\8b\8dì\8bÆ\82ð\8ds\82È\82¤\82ª\81A\83R\83\93\83p\83C\83\8b\82ð\8ds\82È\82¤\91O\82É\81AMakefile\82Æopengatesrv.h\82É\8ae\8eí\90Ý\92è\82ð\8ds\82È\82¤\95K\97v\82ª\82 \82é\81B\82½\82¾\82µ\81A\8aÖ\98A\83\\83t\83g\83E\83F\83A\82Ì\83f\83B\83\8c\83N\83g\83\8a\88Ê\92u\82ª\93¯\82¶\82È\82ç\81AHOSTNAME\82ÆHOSTNAME4\88È\8aO\82Ídefault\92l\82ª\8eg\82¦\82é\82¾\82ë\82¤\81B</p>\r
+\r
+<p>IPv6\8b@\94\\82ð\8eg\82¤\8fê\8d\87\82É\82Í\81A2\82Â\82ÌFQDN(FQDN_4\82ÆFQDN_64)\82ð\88È\89º\82Ì\95\\82Ì\82æ\82¤\82É\90Ý\92è\82·\82é\81B\97á\82¦\82Î FQDN_4 \82Í "opengate4.saga-u.ac.jp" (IPv4 address: 133.49.31.1)\81AFQDN_64 \82Í "opengate.saga-u.ac.jp"(IPv4 address: 192.168.55.1, IPv6 address: 2001:e38:100:100::1)\82Å\82 \82é\81BIPv6\8b@\94\\82ð\8eg\82í\82È\82¢\8fê\8d\87\82É\82Í\81AHOSTNAME\82ÆHOSTNAME4\82É\82Í\81A\93¯\88ê\82ÌFQDN\82Ü\82½\82Í\93¯\88ê\82ÌIP\83A\83h\83\8c\83X\82ð\90Ý\92è\82µ\82Ä\97Ç\82¢\81B</p>\r
+\r
+<p>Makefile\82Ì\90Ý\92è</p>\r
+\r
+<table>\r
+ <tr>\r
+ <td>HOSTNAME</td>\r
+ <td>Opengate\82ÌFQDN\82Å\81AIPv4/6\97¼\95û\82Ì\83A\83h\83\8c\83X\82ª\93o\98^\82³\82ê\82Ä\82¢\82é\82à\82Ì(FQDN_64)\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>HOSTNAME4</td>\r
+ <td>Opengate\82ÌFQDN\82Å\81AIPv4\83A\83h\83\8c\83X\82Ì\82Ý\82ª\93o\98^\82³\82ê\82Ä\82¢\82é\82à\82Ì(FQDN_4)\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>OPENGATEDIR</td>\r
+ <td>Opengate\8aÖ\98A\83t\83@\83C\83\8b\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8fê\8f\8a\82ð\81AApache2\82ÌDocumnetRoot\82©\82ç\82Ì\91\8a\91Î\83p\83X\82Å\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>HTMLTOP1</td>\r
+ <td>HTTP\97p\82ÌDocumentRoot\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>HTMLTOP2</td>\r
+ <td>HTTPS\97p\82ÌDocumentRoot\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>CGIPATH</td>\r
+ <td>\r
+ <p>\83T\81[\83oCGI\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8fê\8f\8a\82Ì\90â\91Î\83p\83X\82ð\90Ý\92è\82·\82é\81B\82½\82¾\82µ\81AApache2\82Ì\83C\83\93\83X\83g\81[\83\8b\8fó\8bµ\82É\82æ\82Á\82Ä\81A \r
+ CGI\82ª\8eÀ\8ds\89Â\94\\82È\8fê\8f\8a\82Å\82 \82é\82±\82Æ\81B</p></td>\r
+ </tr>\r
+ <tr>\r
+ <td>CGIPROG</td>\r
+ <td>\83T\81[\83oCGI\82Ì\96¼\91O\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>CGIURL</td>\r
+ <td>\83T\81[\83oCGI\82ð\8eÀ\8ds\82·\82é\82½\82ß\82ÌURL\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>AUTHCGIPROG</td>\r
+ <td>\94F\8fØ\89æ\96Ê\92ñ\8b\9fCGI\82Ì\96¼\91O\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>AUTHCGIURL</td>\r
+ <td>\94F\8fØ\89æ\96Ê\92ñ\8b\9fCGI\82ð\8eÀ\8ds\82·\82é\82½\82ß\82ÌURL\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>CONFIGFILE</td>\r
+ <td>Opengate\82Ì\90Ý\92è\83t\83@\83C\83\8b\96¼\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>USEFWSCRIPT</td>\r
+ <td>\83t\83@\83C\83A\83E\83H\81[\83\8b\90§\8cä\83X\83N\83\8a\83v\83g\82ð\97\98\97p\82·\82é\82©\94Û\82©\82ð\90Ý\92è\82·\82é\81B\81i\82P\81F\97\98\97p\82·\82é\81B\82O\81F\97\98\97p\82µ\82È\82¢\81B\81j</td>\r
+ </tr>\r
+ <tr>\r
+ <td>FWSCRIPT</td>\r
+ <td>\83t\83@\83C\83A\83E\83H\81[\83\8b\90§\8cä\83X\83N\83\8a\83v\83g\82Ì\83t\83@\83C\83\8b\96¼\82ð\90Ý\92è\82·\82é</td>\r
+ </tr>\r
+ <tr>\r
+ <td>FWSCRIPTFILE</td>\r
+ <td>FWSCRIPT\82É\90Ý\92è\82µ\82½\83t\83@\83C\83\8b\82Ö\82Ì\90â\91Î\83p\83X\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>LOCKFILE</td>\r
+ <td>\94r\91¼\90§\8cä\97p\83\8d\83b\83N\83t\83@\83C\83\8b\96¼\81A\90â\91Î\83p\83X\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>HTMLDOCS</td>\r
+ <td>\83T\81[\83oCGI\82Å\97p\82¢\82éHTML\83t\83@\83C\83\8b\96¼\91S\82Ä\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>DENYDOC</td>\r
+ <td>\94F\8fØ\8e¸\94s\8e\9e\82É\95\\8e¦\82·\82éHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>DENYDOCSSL</td>\r
+ <td>HTTPS\82ð\97p\82¢\82Ä\94F\8fØ\82É\8e¸\94s\82µ\82½\8fê\8d\87\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>ACCEPTDOC</td>\r
+ <td>\94F\8fØ\90¬\8c÷\8e\9e\82É\95\\8e¦\82·\82éHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>ACCEPTDOC2</td>\r
+ <td>\94F\8fØ\90¬\8c÷\8e\9e\82É\83|\83b\83v\83A\83b\83v\83E\83B\83\93\83h\83E\82Å\95\\8e¦\82³\82ê\82éHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B \r
+ \81i\83|\83b\83v\83A\83b\83v\83E\83B\83\93\83h\83E\82ÌURL\82Í\95Ï\8dX\89Â\94\\81BINFOURL\8eQ\8fÆ\81j</td>\r
+ </tr>\r
+ <tr>\r
+ <td>INFOMATION</td>\r
+ <td>\r
+ <p>ACCEPTDOC2\82Ì\91Ö\82í\82è\82É\81A\95ÊURL\82Ì\83y\81[\83W\82ð\95\\8e¦\82·\82é\82©\94Û\82©\82ð\90Ý\92è\82·\82é\81B\81i\82P\81F\97\98\97p\82·\82é\81B\82O\81F\97\98\97p\82µ\82È\82¢\81B\81j</p></td>\r
+ </tr>\r
+ <tr>\r
+ <td>INFOMATIONURL</td>\r
+ <td>ACCEPTDOC2\82Ì\91Ö\82í\82è\82É\95\\8e¦\82³\82¹\82é\83y\81[\83W\82ÌURL\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>AUTHHTMLJA</td>\r
+ <td>\93ú\96{\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>AUTHHTMLEN</td>\r
+ <td>\89p\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>AUTHHTMLJASSL</td>\r
+ <td>HTTPS\82ð\97p\82¢\82½\93ú\96{\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>AUTHHTMLENSSL</td>\r
+ <td>HTTPS\82ð\97p\82¢\82½\89p\8cê\94F\8fØ\83y\81[\83W\82ÌHTML\83t\83@\83C\83\8b\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td></td>\r
+ <td>\93ú\96{\8cê\81A\89p\8cê\88È\8aO\82É\94F\8fØ\8c¾\8cê\82ð\92Ç\89Á\82·\82é\8fê\8d\87\82Í\81Ajavahtml\83f\83B\83\8c\83N\83g\83\8a\93à\82Ì\8c¾\8cê\83f\83B\83\8c\83N\83g\83\8a\82Ì\92Ç\89Á\81AHTMLDOCS,DENYDOC, \r
+ DENYDOCSSL,ACCESPTDOC,ACCEPTDOC2\82ð\95Ï\8dX\82µ\81A\82³\82ç\82Éopengateauth.h\93à\82Ì\90Ý\92è\82É\82 \82í\82¹\82ÄAUTHTHMLXX\82ð\92Ç\89Á\82·\82é\82±\82Æ\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>ARPPATH</td>\r
+ <td>ARP\83R\83}\83\93\83h\82Ì\83p\83X\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>NDPPAHT</td>\r
+ <td>NDP\83R\83}\83\93\83h\82Ì\83p\83X\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>IPFW</td>\r
+ <td>IPFW\83R\83}\83\93\83h\82Ì\83p\83X\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>IP6FW</td>\r
+ <td>IP6FW\83R\83}\83\93\83h\82Ì\82»\82ê\82¼\82ê\82Ì\83p\83X\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+</table>\r
+\r
+<p>opengatesrv.h\82Ì\90Ý\92è</p>\r
+\r
+<table>\r
+ <tr>\r
+ <td>DEBUG</td>\r
+ <td>\83f\83o\83b\83O\82ð\8ds\82È\82¤\82©\94Û\82©\82ð\90Ý\92è\82·\82é\81B\81i\82P\81F\83f\83o\83b\83O\83\8d\83O\82ð\8fo\97Í\82·\82é\81B\82O\81F\94F\8fØ\83\8d\83O\82Ì\82Ý\8fo\97Í\82·\82é\81B\81j</td>\r
+ </tr>\r
+ <tr>\r
+ <td>DURATIONDEFAULT</td>\r
+ <td>Java \r
+ Applet\82ð\91\97\90M\82µ\82Ä\82©\82ç\90Ú\91±\82µ\82Ä\82\82é\82Ü\82Å\82Ì\91Ò\82¿\8e\9e\8aÔ\81i\95b\81j\82ð\90Ý\92è\82·\82é\81B\90Ý\92è\92l\82Ì\8e\9e\8aÔ\82ª\8co\89ß\82·\82é\82Ü\82Å\82É\81A Java \r
+ Applet\82©\82ç\82Ì\90Ú\91±\82ª\96³\82¯\82ê\82Î\92Ê\90M\98H\82ð\95Â\8d½\82·\82é\81B\82±\82Ì\91Ò\82¿\8e\9e\8aÔ\82Í\94F\8fØ\83y\81[\83W\82æ\82è\81A\97\98\97p\8eÒ\82ª\95Ï\8dX\82·\82é\82±\82Æ\82ª\89Â\94\\81B \r
+ \82Ü\82½\81A\97\98\97p\8eÒ\82Ì\95Ï\8dX\82ð\8b\96\97e\82µ\82È\82¢\8fê\8d\87\82Í\81A\94F\8fØ\83y\81[\83W\82©\82ç\93ü\97Í\83t\83H\81[\83\80\82ð\8dí\8f\9c\82·\82é\82±\82Æ\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>DURATIONMAX</td>\r
+ <td>Java \r
+ Applet\82©\82ç\82Ì\90Ú\91±\82ª\8am\94F\82Å\82«\82È\82¢\8fê\8d\87\82É\81A\97\98\97p\8eÒ\82ª\94F\8fØ\83y\81[\83W\82Å\8ew\92è\82µ\82½\97\98\97p\8cp\91±\8e\9e\8aÔ\81i\95b\81j\82Ì\8dÅ\91å\92l \r
+ \82ð\90Ý\92è\82·\82é\81B\97\98\97p\8eÒ\82Ì\95Ï\8dX\82ð\8b\96\97e\82µ\82È\82¢\8fê\8d\87\82Í\81ADURATIONDEFAULT\82Æ\93¯\82¶\92l\82É\82·\82é\95K\97v\82ª\82 \82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>ACTIVECHECKINTERVAL</td>\r
+ <td>\92[\96\96\82Ì\97\98\97p\8fó\8bµ\82ð\8am\94F\82·\82é\8aÔ\8au(\95b)\82ð\90Ý\92è\82·\82é\81BJava Applet\82©\82ç\82Ì\90Ú\91±\82ª\96³\82¢\8fê\8d\87\82Í\81A \r
+ \92Ê\89ß\83p\83P\83b\83g\90\94\82ÆMAC\83A\83h\83\8c\83X\82Ì\8am\94F\82ð\8ds\82È\82¤\81BJava Applet\82©\82ç\82Ì\92Ê\90M\82ª\82 \82é\8fê\8d\87\82Í\81AHELLO\83\81\83b\83Z\81[\83W\82Ì\8cð\8a·\82Æ \r
+ \92Ê\89ß\83p\83P\83b\83g\90\94\82Ì\8am\94F\82ð\8ds\82È\82¤\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>COMMWAITTIMEOUT</td>\r
+ <td>HELLO\83\81\83b\83Z\81[\83W\95Ô\93\9a\82Ü\82Å\82Ì\8dÅ\91å\91Ò\82¿\8e\9e\8aÔ\81i\95b\81j\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>NOREPLYMAX</td>\r
+ <td>HELLO\83\81\83b\83Z\81[\83W\82É\89\9e\93\9a\82µ\82È\82©\82Á\82½\8fê\8d\87\82ð\8b\96\97e\82·\82é\89ñ\90\94\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>NOPAKETINTERVAL</td>\r
+ <td>\r
+ <p>\92Ê\89ß\83p\83P\83b\83g\82ª\8am\94F\82Å\82«\82È\82©\82Á\82½\8fê\8d\87\82É\81A\92Ê\90M\98H\82ð\95Â\8d½\82·\82é\82Ü\82Å\82Ì\8e\9e\8aÔ\81B\8eÀ\8dÛ\82É\82Í\81A\92Ê\89ß\83p\83P\83b\83g\82Ì\8am\94F\82Í\r
+ ACTIVECHECKINTERVAL\82Ì\90Ý\92è\8e\9e\8aÔ\96\88\82É\8ds\82È\82í\82ê\82é\82Ì\82Å\81AACTIVECHECKINTERVAL\82Ì\90®\90\94\94{\82Ì\8e\9e\8aÔ\82É\90Ø\82è\8fã\82°\82ç\82ê\82é\81B</p></td>\r
+ </tr>\r
+ <tr>\r
+ <td>LOCKTIMEOUT</td>\r
+ <td>ipfw,ip6fw\82Ì\94r\91¼\90§\8cä\82Ì\8dÅ\91å\91Ò\82¿\8e\9e\8aÔ\81i\95b\81j\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>IPFWMIN</td>\r
+ <td>Opengate\82Å\97\98\97p\82·\82éipfw\82à\82µ\82\82Íip6fw\82Ì\83\8b\81[\83\8b\94Ô\8d\86\94Í\88Í\82Ì\8dÅ\8f¬\92l\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>IPFWMAX</td>\r
+ <td>Opengate\82Å\97\98\97p\82·\82éipfw\82à\82µ\82\82Íip6fw\82Ì\83\8b\81[\83\8b\94Ô\8d\86\94Í\88Í\82Ì\8dÅ\91å\92l\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>IPFWINTERVAL</td>\r
+ <td>ipfw\82à\82µ\82\82Íip6fw\82Ì\83\8b\81[\83\8b\94Ô\8d\86\94Í\88Í\82É\82¨\82¢\82Ä\81A\97\98\97p\82·\82é\94Ô\8d\86\82Ì\94Í\88Í\82ð\90Ý\92è\82·\82é\81B \r
+ \83N\83\89\83C\83A\83\93\83g\82Ì\91ä\90\94\90§\8cÀ\82É\97p\82¢\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>PORTMIN</td>\r
+ <td>Java Applet\82Æ\82Ì\92Ê\90M\82É\97\98\97p\82·\82é\83|\81[\83g\82Ì\97\98\97p\94Í\88Í\82Ì\8dÅ\8f¬\92l\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>PORTMAX</td>\r
+ <td>Java Applet\82Æ\82Ì\92Ê\90M\82É\97\98\97p\82·\82é\83|\81[\83g\82Ì\97\98\97p\94Í\88Í\82Ì\8dÅ\91å\92l\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ <tr>\r
+ <td>FACILITY</td>\r
+ <td>SYSLOG\82É\83\8d\83O\82ð\8fo\97Í\82·\82é\8dÛ\82Ì\83t\83@\83V\83\8a\83e\83B\82ð\90Ý\92è\82·\82é\81B</td>\r
+ </tr>\r
+ </table>\r
+ <p class="list_none">\88È\8fã\82Ì\90Ý\92è\82ð\8fI\82¦\82Ä\82©\82ç\81A\83R\83\93\83p\83C\83\8b\82Æ\83C\83\93\83X\83g\81[\83\8b\82ð\8ds\82È\82¤\81B</p>\r
+\r
+<table><tr><td><pre>#make\r
+cc -DCONFIGFILE=\"/etc/opengatesrv.conf\" \r
+-DOPENGATEDIR=\"/opengate\" -DDENYDOC=\"deny.html\"\r
+-DDENYDOC=\"deny.html\" -DDENYDOCSSL=\"deny-ssl.html\"\r
+-----------------\r
+-----------------\r
+-----------------\r
+# make install\r
+</pre></td></tr></table>\r
+\r
+<h5>A.3.3
\94F
\8fØ
\83T
\81[
\83o
\82Ì
\90Ý
\92è<A class=anchor href="#opengate6" name=opengate6>
\81õ</A></h5>
\r+\r
+<p>
\94F
\8fØ
\83T
\81[
\83o
\82Ì
\90Ý
\92è
\82É
\82Â
\82¢
\82Ä
\82Í
\81A<A href="#opengate5">A.3.2</A>
\82Å
\82 \82°
\82½
\81ACONFIGFILE
\82É
\82æ
\82Á
\82Ä
\90Ý
\92è
\82·
\82é
\82±
\82Æ
\82ª
\89Â
\94\
\82Å
\82 \82é
\81B</p>
\r+<p>\90Ý\92è\82Ì\8fÚ\8d×\82É\82Â\82¢\82Ä\82Í\81A\90Ý\92è\83t\83@\83C\83\8b\81iopengatesrv.conf\81j\93à\82É\8bL\8fq\82³\82ê\82Ä\82¢\82é\81B</p>\r
+\r
+<div align="right"><A href="#opengate0">back</A> <A href="#top">top</A></div>\r
+\r
+<hr>\r
+<!-- Start:ipfw,ip6fw\82Ì\90Ý\92è -->\r
+<h3>B ipfw,ip6fw
\82Ì
\90Ý
\92è<A class=anchor href="#ipfw0" name=ipfw0>
\81õ</A></h3>
\r+\r
+<ul>\r
+ <li class="list_num"><A href="#ipfw1">\83J\81[\83l\83\8b\82Ì\8dÄ\8d\\92z</A></li>\r
+ <li class="list_num"><A href="#ipfw2">ipfw\82Ì\90Ý\92è</A></li>\r
+ <li class="list_num"><A href="#ipfw3">ip6fw\82Ì\90Ý\92è</A></li>\r
+</ul>\r
+\r
+\r
+<!-- ************ 1 ************** -->\r
+<h4>B.1
\83J
\81[
\83l
\83\8b\82Ì
\8dÄ
\8d\
\92z<A class=anchor href="#ipfw1" name=ipfw1>
\81õ</A></h4>
\r+\r
+<p>\r
+ipfw\82à\82µ\82\82Íip6fw\82ð\97\98\97p\82·\82é\82½\82ß\82É\82Í\81AFreeBSD\82Ì\83J\81[\83l\83\8b\82ð\8dÄ\8d\\92z\82·\82é\95K\97v\82ª\82 \82é\81BFreeBSD\83C\83\93\83X\83g\81[\83\8b\8e\9e\82É\83J\81[\83l\83\8b\93\99\82Ì\91S\82Ä\82Ì\83\\81[\83X\82ð\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82¢\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>\r
+<p>\88È\89º\82Ì\83f\83B\83\8c\83N\83g\83\8a\82É\82¨\82¢\82Ä\81AOpengate\97p\82Ì\83J\81[\83l\83\8b\83I\83v\83V\83\87\83\93\82ð\8dì\90¬\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre># cd /usr/src/sys/i386/conf\r
+# cp GENERIC MYKERNEL\r
+</pre></td></tr></table>\r
+\r
+<p>\83R\83s\81[\82µ\82½\83J\81[\83l\83\8b\83I\83v\83V\83\87\83\93\82É\81A\8e\9f\82Ì\83I\83v\83V\83\87\83\93\82ð\92Ç\89Á\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre>options IPDIVERT\r
+\r
+options IPFIREWALL\r
+options IPFIREWALL_FORWARD\r
+options IPFIREWALL_VERBOSE\r
+options IPFIREWALL_VERBOSE_LIMIT=100\r
+\r
+options IPV6FIREWALL\r
+options IPV6FIREWALL_VERBOSE\r
+options IPV6FIREWALL_VERBOSE_LIMIT=100\r
+\r
+options IPSEC\r
+options IPSEC_ESP\r
+options TCP_DROP_SYSFIN\r
+</pre></td></tr></table>\r
+\r
+<p>\r
+IPDIVERT\82É\82Â\82¢\82Ä\82Í\81AIPv4\82ÌNAT\82ð\97p\82¢\82é\8fê\8d\87\82É\95K\97v\82Å\82 \82é\81B\82Ü\82½\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì\83\8d\83O\82ð\95K\97v\82Æ\82µ\82È\82¢\8fê\8d\87\82Í\81AVERBOSE\82Ì\8d\80\96Ú\82Í\95s\97v\82Å\82 \82é\81B\82³\82ç\82É\81AIPSEC\82ð\95K\97v\82Æ\82µ\82È\82¢\8fê\8d\87\82Í\81AIPSEC\82Ì\8d\80\96Ú\82Í\95s\97v\82Å\82 \82é\81B\82Ü\82½IPv6\8b@\94\\82ð\8eg\82í\82È\82¢\8fê\8d\87\82É\82Í\81AIPV6FIREWALL\8aÖ\98A\82Í\95s\97v\82Å\82 \82é\81B</p>\r
+<p>\82±\82ê\82ç\82Ì\83I\83v\83V\83\87\83\93\82ð\92Ç\89Á\82µ\82½\8cã\82É\81A\83J\81[\83l\83\8b\82Ì\83R\83\93\83p\83C\83\8b\82Æ\83C\83\93\83X\83g\81[\83\8b\82ð\8ds\82È\82¤\81B</p>\r
+\r
+<table><tr><td><pre># config MYKERNEL\r
+# cd ../compile/MYKERNEL\r
+# make depend\r
+# make\r
+# make install\r
+</pre></td></tr></table>\r
+\r
+<p>FreeBSD 6.x\82Å\82Í\81A"make depend"\82ð\8eÀ\8ds\82·\82é\91O\82É\81A"make clean"\82ª\97v\8b\81\82³\82ê\82é\8fê\8d\87\82à\82 \82é\82Ì\82Å\81A\92\8d\88Ó\82·\82é\81B</p>\r
+\r
+<p>\r
+\8dÄ\8d\\92z\82µ\82½\83J\81[\83l\83\8b\82É\82æ\82Á\82Ä\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\97L\8cø\82É\82·\82é\82½\82ß\82É/etc/rc.conf\82É\88È\89º\82Ì\83I\83v\83V\83\87\83\93\82ð\8bL\8fq\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre>firewall_enable="YES"\r
+firewall_script="/etc/rc.firewall"\r
+\r
+ipv6_firewall_enable="YES"\r
+ipv6_firewall_script="/etc/rc.firewall6"\r
+\r
+natd_enable="YES"\r
+natd_interface="em0"\r
+</pre></td></tr></table>\r
+\r
+<p>\r
+\r
+IPv4/6\82»\82ê\82¼\82ê\82Ì\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\97L\8cø\82É\82µ\81A\82»\82ê\82¼\82ê\82Ì\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì\83\8b\81[\83\8b\82ð\8bL\8fq\82µ\82½\83X\83N\83\8a\83v\83g\82ð\8ew\92è\82·\82é\81B\82Ü\82½\81ANAT\82ª\95K\97v\82Å\82 \82é\8fê\8d\87\82Í\81Anatd\82ð\97L\8cø\82É\82µ\81A\83A\83h\83\8c\83X\95Ï\8a·\82ð\8ds\82¤\83C\83\93\83^\83t\83F\81[\83X\82ÌID\82ð\8ew\92è\82·\82é\81B</p>\r
+\r
+<div align="right"><A href="#ipfw0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 2 ************** -->\r
+<h4>B.2 ipfw
\82Ì
\90Ý
\92è<A class=anchor href="#ipfw2" name=ipfw2>
\81õ</A></h4>
\r+\r
+<p>\r
+Opengate\82Ì\93®\8dì\82Ì\82½\82ß\82É\93K\90Ø\82É\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì\83\8b\81[\83\8b\82ð\8bL\8fq\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\88È\89º\82É\8bL\8fq\82·\82×\82«\83\8b\81[\83\8b\82Ì\97á\81i/etc/rc.firewall\81j\82ð\8e¦\82·\81B</p>\r
+\r
+<table><tr><td><pre>### set these to your outside interface network and netmask and ip\r
+oif="em0"\r
+onet="192.168.0.0"\r
+omask="255.255.255.0"\r
+oip="192.168.0.34"\r
+\r
+### set these to your inside interface network and netmask and ip\r
+iif="bge0"\r
+inet="192.168.55.0"\r
+imask="255.255.255.0"\r
+iip="192.168.55.1"\r
+\r
+fwcmd="/sbin/ipfw"\r
+\r
+### divert packet to NATD \r
+$fwcmd add 1 divert natd ip from any to any via ${oif}\r
+\r
+### Stop spoofing\r
+$fwcmd add deny all from ${inet}:${imask} to any in via ${oif}\r
+$fwcmd add deny all from ${onet}:${omask} to any in via ${iif}\r
+\r
+### Stop http from softeather\r
+$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 80\r
+$fwcmd add deny tcp from 192.168.0.0:255.255.255.0 to ${oip} 443\r
+\r
+### Allow from / to myself\r
+$fwcmd add pass all from ${iip} to any via ${iif}\r
+$fwcmd add pass all from ${oip} to any via ${oif}\r
+$fwcmd add pass all from any to ${iip} via ${iif}\r
+$fwcmd add pass all from any to ${oip} via ${oif}\r
+\r
+### Allow DNS queries out in the world\r
+### (if DNS is on localhost, delete passDNS)\r
+$fwcmd add pass udp from any 53 to any\r
+$fwcmd add pass udp from any to any 53\r
+$fwcmd add pass tcp from any to any 53\r
+$fwcmd add pass tcp from any 53 to any\r
+\r
+### Forwarding http connection from unauth client \r
+$fwcmd add 60000 fwd localhost tcp from ${inet}:${imask} to any 80\r
+$fwcmd add 60010 fwd localhost tcp from ${inet}:${imask} to any 443\r
+\r
+### Allow TCP through if setup succeeded \r
+$fwcmd add 60100 pass tcp from any to any established\r
+</pre></td></tr></table>\r
+\r
+<p>\r
+\r
+Opengate\82ð\93®\8dì\82³\82¹\82é\8dÛ\81A\83\8b\81[\83\8b\94Ô\8d\8660000,60010,60100\82ª\8fd\97v\82Æ\82È\82é\81B\94F\8fØ\83y\81[\83W\82ð\95\\8e¦\82³\82¹\82é\82½\82ß\82É\81AHTTP,HTTPS\83\8a\83N\83G\83X\83g\82ÍOpengate\82ÌWeb\83T\81[\83o\82É\93]\91\97\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\82Ü\82½\81A\8aù\82É\8am\97§\82³\82ê\82Ä\82¢\82éTCP\90Ú\91±\82É\8aÖ\82µ\82Ä\82Í\81AOpengate\82É\82æ\82é\92Ê\90M\98H\95Â\8d½\8cã\82à\97\98\97p\89Â\94\\82Æ\82·\82é\82½\82ß\81A\r
+60100\82Ì\83\8b\81[\83\8b\82ð\92Ç\89Á\82·\82é\81B</p>\r
+\r
+<p>\88È\8fã\81A\8e¦\82µ\82½\97á\82ÍOpengate\82ð\93®\8dì\82³\82¹\82é\82½\82ß\82Ì\90Ý\92è\97á\82Å\82 \82é\81B\8eÀ\8dÛ\82ÉOpengate\82ð\93±\93ü\82·\82é\8dÛ\82É\82Í\81A\r
+ipfw\82Ì\93®\8dì\82ð\8fn\92m\82µ\82½\8fã\81A\8ae\8eí\83l\83b\83g\83\8f\81[\83N\82É\93K\82µ\82½\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\90Ý\92u\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>\r
+\r
+<div align="right"><A href="#ipfw0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 3 ************** -->\r
+<h4>B.3 ip6fw
\82Ì
\90Ý
\92è<A class=anchor href="#ipfw3" name=ipfw3>
\81õ</A></h4>
\r+\r
+<p>\r
+\82±\82ê\82ÍIPv6\83p\83P\83b\83g\82Ì\83t\83@\83C\83A\83E\83H\81[\83\8b\90Ý\92è\82Å\82 \82è\81AIPv6\8b@\94\\82ð\97\98\97p\82µ\82È\82¢\8fê\8d\87\82Í\95s\97v\82Å\82 \82é\81BOpengate\82Ì\93®\8dì\82Ì\82½\82ß\82É\93K\90Ø\82É\83t\83@\83C\83A\83E\83H\81[\83\8b\82Ì\83\8b\81[\83\8b\82ð\8bL\8fq\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\88È\89º\82É\8bL\8fq\82·\82×\82«\83\8b\81[\83\8b\82Ì\97á\81i/etc/rc.firewall6\81j\82ð\8e¦\82·\81B</p>\r
+\r
+<table><tr><td><pre>### set these to your outside interface network and prefixlen and ip\r
+oif="em0"\r
+onet="2001:e38:3661:1a0::"\r
+oprefixlen="64"\r
+oip="2001:e38:3661:1a0::34"\r
+\r
+### set these to your inside interface network and prefixlen and ip\r
+iif="bge0"\r
+inet="2001:e38:3661:1a5::"\r
+iprefixlen="64"\r
+iip="2001:e38:3661:1a5::1"\r
+\r
+### path to command "ip6fw"\r
+fw6cmd="/sbin/ip6fw"\r
+\r
+${fw6cmd} add pass all from ${iip} to any\r
+${fw6cmd} add pass all from any to ${iip}\r
+${fw6cmd} add pass all from ${oip} to any\r
+${fw6cmd} add pass all from any to ${oip}\r
+\r
+### Allow RA RS NS NA Redirect...\r
+${fw6cmd} add pass ipv6-icmp from any to any\r
+\r
+# Allow IP fragments to pass through\r
+${fw6cmd} add pass all from any to any frag\r
+\r
+# Allow RIPng\r
+${fw6cmd} add pass udp from fe80::/10 521 to ff02::9 521\r
+${fw6cmd} add pass udp from fe80::/10 521 to fe80::/10 521\r
+\r
+### Allow TCP through if setup succeeded\r
+${fw6cmd} add 60100 pass tcp from any to any established\r
+\r
+# TCP reset notice message\r
+${fw6cmd} add 60200 reset tcp from any to any 80\r
+${fw6cmd} add 60300 reset tcp from any to any 443\r
+</pre></td></tr></table>\r
+\r
+<p>\r
+\r
+ ip6fw\82Í\81Aipfw\82Æ\82Í\88Ù\82È\82è\93]\91\97\82ð\8ds\82¤\82±\82Æ\82ª\82Å\82«\82È\82¢\81B\82»\82±\82Å\81AOpengate\82Å\82Í IPv6\82ÌHTTP\83\8a\83N\83G\83X\83g\82ª\83^\83C\83\80\83A\83E\83g\82µ\81AIPv4\82ÌHTTP\83\8a\83N\83G\83X\83g\82ð\93]\91\97\82µ\81A\94F\8fØ\82ð\8ds\82¤\8ed\91g\82Ý\82ð\82Æ\82Á\82Ä\82¢\82é\81B\82½\82¾\82µ\81AFreeBSD\r
+5.2\88È\8d~\82Å\82Í\81Aip6fw\82ÅTCP reset\82ª\8eÀ\91\95\82³\82ê\82Ä\82¨\82è\81AIPv6\r
+TCP\83p\83P\83b\83g\82É\91Î\82µ\82Ä\93\9e\92B\95s\94\\83\81\83b\83Z\81[\83W\82ð\95Ô\82·\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B\83\8b\81[\83\8b\94Ô\8d\8660200,60300\82Ì\82æ\82¤\82É\81ATCP reset\82ð\97\98\97p\82·\82é\82±\82Æ\82É\82æ\82Á\82Ä\81AIPv6 HTTP\r
+\83\8a\83N\83G\83X\83g\82ª\83^\83C\83\80\83A\83E\83g\82·\82é\82Ü\82Å\82Ì\8e\9e\8aÔ\82ð\91Ò\82Â\95K\97v\82ª\82È\82\82È\82é\81B</p>\r
+\r
+<p>\r
+\r
+\82Ü\82½\81AIPv6\82Å\82ÍDHCP\82Ì\91Ö\82í\82è\82ÉRA\82É\82æ\82Á\82ÄIPv6\83A\83h\83\8c\83X\82ð\8e©\93®\90¶\90¬\82µ\81A\8co\98H\8fî\95ñ\92Ê\92m\83f\81[\83\82\83\93\82È\82Ç\81AICMP\82â\82»\82Ì\91¼\82Ì\83v\83\8d\83g\83R\83\8b\82Ì\88µ\82¢\82É\8bC\82ð\82Â\82¯\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\r
+ipfw\82Æ\93¯\97l\82É\81Aip6fw\82É\82Â\82¢\82Ä\82à\93®\8dì\82ð\8fn\92m\82µ\82½\8fã\82Å\81A\8ae\8eí\83l\83b\83g\83\8f\81[\83N\82É\93K\82µ\82½\83t\83@\83C\83A\83E\83H\81[\83\8b\82ð\90Ý\92u\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>\r
+\r
+<div align="right"><A href="#ipfw0">back</A> <A href="#top">top</A></div>\r
+\r
+<hr>\r
+<!-- Start:Apache2\82Ì\83C\83\93\83X\83g\81[\83\8b -->\r
+<h3>C Apache2
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<A class=anchor href="#apache0" name=apache0>
\81õ</A></h3>
\r+<ul>\r
+ <li class="list_num"><A href="#apache1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</A></li>\r
+ <li class="list_num"><A href="#apache2">\83C\83\93\83X\83g\81[\83\8b\81i\83\\81[\83X\81j</A></li>\r
+ <li class="list_num"><A href="#apache3">\94é\96§\8c®\81A\8fØ\96¾\8f\91\82Ì\8dì\90¬</A></li>\r
+ <li class="list_num"><A href="#apache4">\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è</A></li>\r
+ <li class="list_num"><A href="#apache5">HTTP_ERROR 404\82Ö\82Ì\91Î\89\9e</A></li>\r
+</ul>\r
+\r
+<!-- ************ 1 ************** -->\r
+<h4>C.1
\83C
\83\93\83X
\83g
\81[
\83\8b\81iports
\81j<A class=anchor href="#apache1" name=apache1>
\81õ</A></h4>
\r+\r
+<p>Opengate\82Å\82Í\81AIPv6\82ð\83T\83|\81[\83g\82µ\82½Apache2\82ª\95K\90{\82Å\82 \82é\81B\82Ü\82½\81A\94F\8fØ\82ð\8ds\82¤\82±\82Æ\82©\82ç\r
+SSL\82ð\83T\83|\81[\83g\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81BApache2\82Í\95W\8f\80\82ÅSSL\82ð\83T\83|\81[\83g\82µ\82Ä\82¢\82é\82Ì\82Å\81Amod_ssl\r
+\82ð\95Ê\93r\83C\83\93\83X\83g\81[\83\8b\82·\82é\95K\97v\82Í\82È\82¢\81B</p>\r
+<p>\88È\89º\82É\81Aports\82ð\97\98\97p\82µ\82Ä\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\88È\89º\82É\8bL\82·\81B</p>\r
+\r
+<table><tr><td><pre># cd /usr/ports/www/apache2\r
+# make clean\r
+===> Cleaning for autoconf-2.53_1\r
+===> Cleaning for libtool-1.3.5_1\r
+===> Cleaning for m4-1.4_1\r
+===> Cleaning for help2man-1.29\r
+===> Cleaning for expat-1.95.6_1\r
+===> Cleaning for apache-2.0.48_3\r
+# make install clean ; rehash\r
+</pre></td></tr></table>\r
+\r
+<p>\r
+\83C\83\93\83X\83g\81[\83\8b\8dì\8bÆ\82ª\8a®\97¹\82µ\82½\8cã\81AApache2\82Ì\8bN\93®\82ÆSSL\82ð\97L\8cø\82É\82·\82é\82½\82ß\82É\81A\88È\89º\82Ì\8d\80\96Ú\82ð/etc/rc.conf\82É\8bL\8fq\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre>apache2_enable="YES"\r
+apache2ssl_enable="YES"\r
+</pre></td></tr></table>\r
+\r
+\r
+<div align="right"><A href="#apache0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 2 ************** -->\r
+<h4>C.2
\83C
\83\93\83X
\83g
\81[
\83\8b\81i
\83\
\81[
\83X
\81j<A class=anchor href="#apache2" name=apache2>
\81õ</A></h4>
\r+\r
+<p>Apache2\82ð\83\\81[\83X\82©\82ç\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\88È\89º\82É\8bL\82·\81B</p>\r
+<p>\r
+Apache2\82Ì\83\\81[\83X\82Í\81Aftp.apache.or.jp\93\99\82©\82ç\8eæ\93¾\82·\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B\82Ü\82½\81A\r
+Apache2\82ð\83R\83\93\83p\83C\83\8b\82·\82é\8dÛ\82É\81ASSL\83\82\83W\83\85\81[\83\8b\82ð\97L\8cø\82É\82·\82é\95K\97v\82ª\82 \82é\81B\82Ü\82½\81A\83\\81[\83X\82©\82ç\83C\83\93\83X\83g\81[\83\8b\82µ\82½\8dÛ\82Í\81A\95W\8f\80\82Å/usr/local/apache2\83f\83B\83\8c\83N\83g\83\8a\88È\89º\82É\83C\83\93\83X\83g\81[\83\8b\82³\82ê\82é\81B</p>\r
+\r
+<table><tr><td><pre># tar xvfz httpd-2.0.55.tar.gz\r
+# cd httpd-2.0.55\r
+# ./configure --enable-modules="so ssl"\r
+# make\r
+# make install\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#apache0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 3 ************** -->\r
+<h4>C.3
\94é
\96§
\8c®
\81A
\8fØ
\96¾
\8f\91\82Ì
\8dì
\90¬<A class=anchor href="#apache3" name=apache3>
\81õ</A></h4>
\r+\r
+<p>\r
+\r
+Apache2\82Å\81ASSL\82ð\97\98\97p\82·\82é\82½\82ß\82É\94é\96§\8c®\82Æ\8fØ\96¾\8f\91\82ð\97p\88Ó\82·\82é\95K\97v\82ª\82 \82é\81B\90³\8bK\82Ì\94F\8fØ\8bÇ\82©\82ç\94\8ds\82³\82ê\82½\8fØ\96¾\8f\91\82ð\97p\88Ó\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\82ª\81A\8e©\8cÈ\8f\90\96¼\82ð\8ds\82Á\82½\8fØ\96¾\8f\91\82Æ\94é\96§\8c®\82Å\82à\8f\\95ª\82É\83Z\83L\83\85\83\8a\83e\83B\82ð\8am\95Û\82·\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B</p>\r
+\r
+<p>\r
+Opengate\82Å\82Í\81A\93ñ\82Â\82ÌFQDN\82ð\97\98\97p\82·\82é\82±\82Æ\82©\82ç\81A\82»\82ê\82¼\82ê\82ÌFQDN\82É\91Î\89\9e\82·\82é\8fØ\96¾\8f\91\82Æ\94é\96§\8c®\82ª\95K\97v\82Æ\82È\82é\81B\88È\89º\82É\81A\94é\96§\8c®\82Æ\8fØ\96¾\8f\91\82ð\8dì\90¬\82·\82é\8eè\8f\87\82ð\8e¦\82·\81B</p>\r
+\r
+<table><tr><td><pre># cd /usr/local/etc/apache2\r
+# mkdir ssl.key ssl.crt\r
+# chmod 700 ssl.key ssl.crt\r
+\r
+# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server1.key 1024\r
+# /usr/bin/openssl genrsa -out /usr/local/etc/apache2/ssl.key/server2.key 1024\r
+</pre></td></tr></table>\r
+\r
+<p>\8fã\8bL\82É\82¨\82¢\82Ä\8dì\90¬\82µ\82½\94é\96§\8c®\82ð\97p\82¢\82Ä\8f\90\96¼\82µ\82½\8fØ\96¾\8f\91\82ð\8dì\90¬\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre># /usr/bin/openssl req -new -x509 -days 365 \\r
+ -key /usr/local/etc/apache2/ssl.key/server1.key \\r
+ -out /usr/local/etc/apache2/ssl.crt/server1.crt\r
+\r
+You are about to be asked to enter information that will be incorporated\r
+into your certificate request.\r
+What you are about to enter is what is called a Distinguished Name or a DN.\r
+There are quite a few fields but you can leave some blank\r
+For some fields there will be a default value,\r
+If you enter '.', the field will be left blank.\r
+-----\r
+Country Name (2 letter code) [AU]:JP\r
+State or Province Name (full name) [Some-State]:Saga\r
+Locality Name (eg, city) []:Saga-city\r
+Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university\r
+Organizational Unit Name (eg, subsection) []:Information Science\r
+Common Name (eg, YOUR name) []:opengate.is.saga-u.ac.jp\r
+Email Address []:administrator@opengate.is.saga-u.ac.jp\r
+\r
+Please enter the following 'extra' attributes\r
+to be sent with your certificate request\r
+A challenge password []:\r
+An optional company name []:\r
+\r
+# /usr/bin/openssl req -new -x509 -days 365 \\r
+ -key /usr/local/etc/apache2/ssl.key/server2.key \\r
+ -out /usr/local/etc/apache2/ssl.crt/server2.crt\r
+\r
+You are about to be asked to enter information that will be incorporated\r
+into your certificate request.\r
+What you are about to enter is what is called a Distinguished Name or a DN.\r
+There are quite a few fields but you can leave some blank\r
+For some fields there will be a default value,\r
+If you enter '.', the field will be left blank.\r
+-----\r
+Country Name (2 letter code) [AU]:JP\r
+State or Province Name (full name) [Some-State]:Saga\r
+Locality Name (eg, city) []:Saga-city\r
+Organization Name (eg, company) [Internet Widgits Pty Ltd]:Saga-university\r
+Organizational Unit Name (eg, subsection) []:Information Science\r
+Common Name (eg, YOUR name) []:opengate4.is.saga-u.ac.jp\r
+Email Address []:administrator@opengate.is.saga-u.ac.jp\r
+\r
+Please enter the following 'extra' attributes\r
+to be sent with your certificate request\r
+A challenge password []:\r
+An optional company name []:\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#apache0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 4 ************** -->\r
+<h4>C.4
\83o
\81[
\83`
\83\83\83\8b\83z
\83X
\83g
\82Ì
\90Ý
\92è<A class=anchor href="#apache4" name=apache4>
\81õ</A></h4>
\r+\r
+<p>\r
+IPv6\8b@\94\\82ð\8eg\82¤\8fê\8d\87\82É\82Í\81AOpengate\82Å\82Í\93ñ\82Â\82ÌFQDN\82ð\97p\82¢\82é\81B\82±\82ê\82æ\82è\81AApache2\82Å\82Í\93ñ\82Â\82ÌFQDN\82É\91Î\89\9e\82·\82é\82½\82ß\82É\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è\82ð\8ds\82¤\95K\97v\82ª\82 \82é\81BIPv6\8b@\94\\82ð\8eg\82í\82È\82¢\8fê\8d\87\82Í\81A1\82Â\82Å\97Ç\82¢\81B</p>\r
+<p>\r
+\r
+Apache2\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82É\82Í\81AIP\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Æ\81A\83l\81[\83\80\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\93ñ\8eí\97Þ\82ª\82 \82é\81B\82µ\82©\82µ\81A\83l\81[\83\80\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82ð\97p\82¢\82½\8fê\8d\87\81A\90æ\8fq\82µ\82½\83o\81[\83`\83\83\83\8b\83z\83X\83g\82É\82Â\82¢\82Ä\82µ\82©SSL\8f\88\97\9d\82ð\8ds\82¤\82±\82Æ\82ª\82Å\82«\82È\82¢\81B</p>\r
+<p>Opengate\82Í\81A\93ñ\82Â\88È\8fã\82ÌNIC\82ð\8f\8a\8e\9d\82µ\81A\93ñ\82Â\88È\8fã\82ÌIP\83A\83h\83\8c\83X\82ð\8f\8a\8e\9d\82µ\82Ä\82¢\82é\82Ì\82Í\82¸\82È\82Ì\82Å\81A\r
+IP\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82ª\93K\97p\89Â\94\\82Å\82 \82é\81B</p>\r
+\r
+<p>\r
+\88È\89º\82É\81AIP\83x\81[\83X\82Ì\83o\81[\83`\83\83\83\8b\83z\83X\83g\82ð\93K\97p\82µ\82½\8fê\8d\87\82Ì\90Ý\92è\97á\81i/usr/local/etc/httpd.conf,ssl.conf\81j</p>\r
+\r
+<table><tr><td>httpd.conf</td></tr><tr><td><pre>NameVirtualHost 192.168.55.1:80\r
+<VirtualHost 192.168.55.1:80>\r
+ ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
+ DocumentRoot /usr/local/www\r
+ ServerName opengate.is.saga-u.ac.jp\r
+ ErrorLog "|/usr/bin/logger -p local6.info"\r
+ CustomLog "|/usr/bin/logger -p local5.info" combined\r
+</VirtualHost>\r
+\r
+NameVirtualHost [2001:e38:3661:1a5::1]:80\r
+<VirtualHost [2001:e38:3661:1a5::1]:80>\r
+ ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
+ DocumentRoot /usr/local/www\r
+ ServerName opengate.is.saga-u.ac.jp\r
+ ErrorLog "|/usr/bin/logger -p local6.info"\r
+ CustomLog "|/usr/bin/logger -p local5.info" combined\r
+</VirtualHost>\r
+ \r
+NameVirtualHost 192.168.0.34:80\r
+<VirtualHost 192.168.0.34:80>\r
+ ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
+ DocumentRoot /usr/local/www\r
+ ServerName opengate4.is.saga-u.ac.jp\r
+ ErrorLog "|/usr/bin/logger -p local6.info"\r
+ CustomLog "|/usr/bin/logger -p local5.info" combined\r
+</VirtualHost>\r
+</pre></td></tr></table>\r
+<br>\r
+<table><tr><td>ssl.conf</td></tr><tr><td><pre>NameVirtualHost 192.168.55.1:443\r
+<VirtualHost 192.168.55.1:443>\r
+ DocumentRoot "/usr/local/www"\r
+ ServerName opengate.is.saga-u.ac.jp:443\r
+ ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
+ ErrorLog "|/usr/bin/logger -p local6.info"\r
+ CustomLog "|/usr/bin/logger -p local5.info" combined\r
+\r
+ SSLEngine on\r
+ SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL\r
+ SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt\r
+ SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key\r
+</VirtualHost>\r
+\r
+NameVirtualHost [2001:e38:3661:1a5::1]:443\r
+<VirtualHost [2001:e38:3661:1a5::1]:443>\r
+ DocumentRoot "/usr/local/www"\r
+ ServerName opengate.is.saga-u.ac.jp:443\r
+ ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
+ ErrorLog "|/usr/bin/logger -p local6.info"\r
+ CustomLog "|/usr/bin/logger -p local5.info" combined\r
+\r
+ SSLEngine on\r
+ SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL\r
+ SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server1.crt\r
+ SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server1.key\r
+</VirtualHost>\r
+\r
+NameVirtualHost 192.168.0.34:443\r
+<VirtualHost 192.168.0.34:443>\r
+ DocumentRoot "/usr/local/www"\r
+ ServerName opengate4.is.saga-u.ac.jp:443\r
+ ServerAdmin administrator@opengate.is.saga-u.ac.jp\r
+ ErrorLog "|/usr/bin/logger -p local6.info"\r
+ CustomLog "|/usr/bin/logger -p local5.info" combined\r
+\r
+ SSLEngine on\r
+ SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL\r
+ SSLCertificateFile /usr/local/etc/apache2/ssl.crt/server2.crt\r
+ SSLCertificateKeyFile /usr/local/etc/apache2/ssl.key/server2.key\r
+</VirtualHost>\r
+</pre></td></tr></table>\r
+\r
+<p>\r
+\r
+\8fã\8bL\82Ì\90Ý\92è\97á\82Í\81A\83o\81[\83`\83\83\83\8b\83z\83X\83g\82Ì\90Ý\92è\82Ì\82½\82ß\82Ì\83f\83B\83\8c\83N\83e\83B\83u\82Ì\82Ý\8bL\8fq\82µ\82Ä\82¢\82é\81B\82±\82Ì\91¼\82É\82à\91½\82\82Ì\8d\80\96Ú\82ð\90Ý\92è\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\82Ì\82Å\81AApache2\82Ì\90Ý\92è\82ð\8fn\92m\82µ\82½\8fã\82Å\90Ý\92è\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>\r
+\r
+<div align="right"><A href="#apache0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 5 ************** -->\r
+<h4>C.5 HTTP_ERROR 404
\82Ö
\82Ì
\91Î
\89\9e<A class=anchor href="#apache5" name=apache5>
\81õ</A></h4>
\r+\r
+<p>\r
+Opengate\82Å\82Í\81A\97\98\97p\8eÒ\92[\96\96\82©\82ç\91\97\90M\82³\82ê\82Ä\82\82éHTTP\83\8a\83N\83G\83X\83g\82ð\81AOpengate\82ª\8e\9d\82Â\r
+Web\83T\81[\83o\82É\93]\91\97\82·\82é\82±\82Æ\82É\82æ\82Á\82Ä\81A\94F\8fØ\83y\81[\83W\82ð\92ñ\8b\9f\82µ\82Ä\82¢\82é\81B\82±\82Ì\82½\82ß\81A\97\98\97p\8eÒ\92[\96\96\82©\82ç\91\97\90M\82³\82ê\82Ä\82\82éHTTP\83\8a\83N\83G\83X\83g\82Í\97\\8aú\82·\82é\82±\82Æ\82ª\82Å\82«\82È\82¢\81B\82æ\82Á\82Ä\81A\82Ç\82Ì\82æ\82¤\82È\r
+HTTP\83\8a\83N\83G\83X\83g\82É\91Î\82µ\82Ä\82à\81A\94F\8fØ\83y\81[\83W\82ð\95Ô\82·\82½\82ß\82É\81A/usr/local/etc/httpd.conf\82É\r
+HTTP_ERROR 404\82ª\94\90¶\82µ\82½\8fê\8d\87\82É\81ADocumentRoot\82ð\95Ô\82·\82æ\82¤\82É\90Ý\92è\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre>\r
+ErrorDocument 404 /\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#apache0">back</A> <A href="#top">top</A></div>\r
+\r
+<hr>\r
+<!-- Start:isc-dhcp3\82Ì\83C\83\93\83X\83g\81[\83\8b -->\r
+<h3>D isc-dhcp3
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<A class=anchor href="#dhcp0" name=dhcp0>
\81õ</A></h3>
\r+\r
+<ul>\r
+ <li class="list_num"><A href="#dhcp1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</A></li>\r
+ <li class="list_num"><A href="#dhcp2">DHCP\82Ì\90Ý\92è</A></li>\r
+</ul>\r
+\r
+<!-- *********** 1 ************* -->\r
+<h4>D.1
\83C
\83\93\83X
\83g
\81[
\83\8b\81iports
\81j<A class=anchor href="#dhcp1" name=dhcp1>
\81õ</A></h4>
\r+\r
+<p>\r
+\r
+Opengate\82ð\93±\93ü\82·\82é\83l\83b\83g\83\8f\81[\83N\82Å\82Í\81A\97\98\97p\8eÒ\92[\96\96\82ª\95p\94É\82É\93ü\82ê\91Ö\82í\82é\82±\82Æ\82ª\97\\91ª\82Å\82«\82é\81B\82»\82±\82Å\81A\97l\81X\82È\97\98\97p\8eÒ\92[\96\96\82É\91Î\82µ\82Ä\8e©\93®\93I\82ÉIPv4\83A\83h\83\8c\83X\82ð\8a\84\82è\93\96\82Ä\82é\82±\82Æ\82ª\82Å\82«\82éDHCP\83T\81[\83o\82ð\93±\93ü\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>\r
+<p>\88È\89º\82Éisc-dhcp3\82Ì\83C\83\93\83X\83g\81[\83\8b\8eè\8f\87\82ð\8bL\82·\81B</p>\r
+\r
+<table><tr><td><pre># cd /usr/ports/net/isc-dhcp3-server\r
+# make\r
+===> Cleaning for isc-dhcp3-server-3.0.1.r14_3\r
+# make install clean ; rehash\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#dhcp0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 2 ************** -->\r
+<h4>D.2 DHCP
\82Ì
\90Ý
\92è<A class=anchor href="#dhcp2" name=dhcp2>
\81õ</A></h4>
\r+\r
+<p>\r
+\83C\83\93\83X\83g\81[\83\8b\8dì\8bÆ\82ª\8a®\97¹\82·\82é\82Æ\81A/usr/local/etc\88È\89º\82Édhcpd.conf.sample\82ª\90¶\90¬\82³\82ê\82Ä\82¢\82é\81B\93¯\83f\83B\83\8c\83N\83g\83\8a\82Édhcpd.conf\82Æ\82µ\82Ä\83R\83s\81[\82µ\81Adhcpd\97p\82Ì\90Ý\92è\83t\83@\83C\83\8b\82ð\8dì\90¬\82·\82é\81B</p>\r
+<p>\88È\89º\82É\81A\90Ý\92è\97á\82ð\8e¦\82·\81B</p>\r
+\r
+<table><tr><td><pre>option domain-name "ai.is.saga-u.ac.jp";\r
+option domain-name-servers 192.168.0.2;\r
+option subnet-mask 255.255.255.0;\r
+option broadcast-address 192.168.55.255;\r
+option routers 192.168.55.1;\r
+\r
+default-lease-time 600;\r
+max-lease-time 7200;\r
+ddns-update-style none;\r
+log-facility local7;\r
+\r
+subnet 192.168.55.0 netmask 255.255.255.0 {\r
+ range 192.168.55.100 192.168.55.200;\r
+}\r
+</pre></td></tr></table>\r
+\r
+<p>\82Ü\82½\81Adhcpd\82ð\8e©\93®\8bN\93®\82·\82é\82½\82ß\82É\81A/etc/rc.conf\82É\88È\89º\82Ì\8d\80\96Ú\82ð\8bL\8fq\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre>dhcpd_enable="YES"\r
+dhcpd_ifaces="bge0"\r
+dhcpd_conf="/usr/local/etc/dhcpd.conf"\r
+</pre></td></tr></table>\r
+\r
+<p>dhcpd_ifaces\82É\82Â\82¢\82Ä\82Í\81Adhcp\82ð\91\97\90M\82·\82é\83C\83\93\83^\83t\83F\81[\83XID\82ð\8bL\8fq\82·\82é\81B</p>\r
+\r
+<div align="right"><A href="#dhcp0">back</A> <A href="#top">top</A></div>\r
+\r
+<hr>\r
+<!-- Start:BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b -->\r
+<h3>E BIND9
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<A class=anchor href="#bind0" name=bind0>
\81õ</A></h3>
\r+\r
+<ul>\r
+ <li class="list_num"><A href="#bind1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</A></li>\r
+ <li class="list_num"><A href="#bind2">\94F\8fØ\83L\81[\82Ì\8dì\90¬</A></li>\r
+ <li class="list_num"><A href="#bind3">named.conf\82Ì\90Ý\92è</A></li>\r
+ <li class="list_num"><A href="#bind4">zone\82Ì\90Ý\92è</A></li>\r
+ <li class="list_num"><A href="#bind5">\8bN\93®\8am\94F</A></li>\r
+</ul>\r
+\r
+<!-- ********** 1 *********** -->\r
+<h4>E.1
\83C
\83\93\83X
\83g
\81[
\83\8b\81iports
\81j<A class=anchor href="#bind1" name=bind1>
\81õ</A></h4>
\r+\r
+<p>\r
+\r
+IPv6\8b@\94\\82ð\8eg\82¤\8fê\8d\87\82É\82Í\81AOpengate\82Ì\82½\82ß\82É\93ñ\82Â\82ÌFQDN\82ð\97p\88Ó\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B\8aù\91¶\82ÌDNS\82ÉOpengate\97p\82ÌFQDN\82ð\93o\98^\82·\82é\82±\82Æ\82Å\82à\89ð\8c\88\82Å\82«\82é\81B\82µ\82©\82µ\81ANAT\82È\82Ç\82ð\97p\82¢\82Ä\83A\83h\83\8c\83X\95Ï\8a·\82ð\8ds\82¤\8fê\8d\87\82ð\8dl\82¦\82é\82Æ\81A\83v\83\89\83C\83x\81[\83g\83l\83b\83g\83\8f\81[\83N\82Ì\83A\83h\83\8c\83X\82ð\8aO\95\94\82ÌDNS\82É\93o\98^\82·\82é\82±\82Æ\82Í\96]\82Ü\82µ\82\82È\82¢\81B\82»\82±\82Å\81AOpengate\97p\82Ì\83}\83V\83\93\82ÉDNS\82ð\93±\93ü\82·\82é\82±\82Æ\82à\8dl\82¦\82ç\82ê\82é\81B\82È\82¨\81AIPv6\8b@\94\\82ð\8eg\82í\82È\82¢\8fê\8d\87\82É\82Í\81ADNS\82ð\90Ý\92è\82¹\82¸\82ÉIP\83A\83h\83\8c\83X\82Å\90§\8cä\82·\82é\82±\82Æ\82à\89Â\94\\82Å\82 \82é\81B</p>\r
+<p>\88È\89º\82É\81ABIDN9\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\8bL\82·\81B</p>\r
+\r
+<table><tr><td><pre># cd /usr/ports/dns/bind9/\r
+# make clean\r
+===> Cleaning for bind9-9.3.1\r
+# make install clean ; rehash\r
+</pre></td></tr></table>\r
+\r
+<p>\r
+\83C\83\93\83X\83g\81[\83\8b\82ª\8a®\97¹\82·\82é\82Æ\81A/etc/namedb(/var/named/etc/namaedb)\88È\89º\82Ì\83f\83B\83\8c\83N\83g\83\8a\82É\8ae\8eí\90Ý\92è\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82é\81B</p>\r
+\r
+<div align="right"><A href="#bind0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ********** 2 ********** -->\r
+<h4>E.2
\94F
\8fØ
\83L
\81[
\82Ì
\8dì
\90¬<A class=anchor href="#bind2" name=bind2>
\81õ</A></h4>
\r+\r
+<p>BIND9\82Å\82Í\81A\83Z\83L\83\85\83\8a\83e\83B\82ð\8am\95Û\82·\82é\82½\82ß\82É\94F\8fØ\83L\81[\82ð\90Ý\92è\82µ\81Arndc\83R\83}\83\93\83h\82ð\97p\82¢\82Änamed\82ð\90§\8cä\82·\82é\81B</p>\r
+<p>\82»\82±\82Å\81A\82Ü\82¸\94F\8fØ\83L\81[\82Ì\8dì\90¬\82ð\8ds\82¤\81B\94F\8fØ\8b@\81[\82Ì\8dì\90¬\8eè\8f\87\82ð\88È\89º\82É\8e¦\82·\81B</p>\r
+\r
+<table><tr><td><pre>\r
+# /usr/local/sbin/dnssec-keygen -a hmac-md5 -b 512 -n user rndc\r
+</pre></td></tr></table>\r
+\r
+<p> \88È\8fã\82Ì\8dì\8bÆ\82É\82¨\82¢\82Ä\81A"out of\r
+entropy"\82Æ\82¢\82¤\83G\83\89\81[\82ª\94\90¶\82·\82é\8fê\8d\87\82Í\81A\8e\9f\82Ì\95û\96@\82Å\94F\8fØ\83L\81[\82ð\8dì\90¬\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre>\r
+# /usr/local/sbin/dnssec-keygen -r /dev/urandom -a hmac-md5 -b 512 -n user rndc\r
+</pre></td></tr></table>\r
+\r
+<p>\r
+\94F\8fØ\83L\81[\82Ì\8dì\90¬\82É\90¬\8c÷\82·\82é\82Æ\81A\8e\9f\82Ì\93ñ\82Â\82Ì\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82é\81B\82½\82¾\82µ\81A\83t\83@\83C\83\8b\96¼\82É\8aÜ\82Ü\82ê\82é\90\94\8e\9a\82Í\83\89\83\93\83_\83\80\82É\90¶\90¬\82³\82ê\82é\81B</p>\r
+\r
+<ul>\r
+ <li><pre>Krndc.+157+60849.key</pre></li>\r
+ <li><pre>Krndc.+157+60849.private</pre></li>\r
+</ul>\r
+\r
+<p>\r
+BIND9\82Ì\83C\83\93\83X\83g\81[\83\8b\8cã\82É\81A/usr/local/etc/rndc.conf.sample\82Æ\82¢\82¤\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82Ä\82¢\82é\81B\82±\82Ì\83t\83@\83C\83\8b\82ð\83R\83s\81[\82µ\82Ä\81A/usr/local/etc/rndc.conf\82ð\8dì\90¬\82·\82é\81B</p>\r
+<p>\r
+
\82»
\82µ
\82Ä
\81Arndc.conf
\82Ìkey
\83f
\83B
\83\8c\83N
\83e
\83B
\83u
\82ð
\95Ò
\8fW
\82·
\82é
\81Bkey
\83f
\83B
\83\8c\83N
\83e
\83B
\83u
\82Å
\82Í
\81A
\94F
\8fØ
\83L
\81[
\82Ì
\83A
\83\8b\83S
\83\8a\83Y
\83\80\82Æ
\90¶
\90¬
\82µ
\82½
\94F
\8fØ
\83L
\81[
\82ð
\8ew
\92è
\82µ
\82È
\82¯
\82ê
\82Î
\82È
\82ç
\82È
\82¢
\81B
\94F
\8fØ
\83L
\81[
\82Ísecret
\82Ì
\8d\80\96Ú
\82É
\8ew
\92è
\82·
\82é
\81B
\82Ü
\82½
\81A
\94F
\8fØ
\83L
\81[
\82Æ
\8b¤
\82É
\8dì
\90¬
\82µ
\82½<pre>Krndc.+157+60849.private</pre>
\82Ìkey
\8d\80\96Ú
\82É
\95\
\8e¦
\82³
\82ê
\82Ä
\82¢
\82é
\82à
\82Ì
\82ð
\8ew
\92è
\82·
\82é
\81B
\r+</P>\r
+\r
+<table><tr><td><pre>options {\r
+ default-server localhost;\r
+ default-key "key";\r
+};\r
+\r
+server localhost {\r
+ key "key";\r
+};\r
+\r
+key "key" {\r
+ algorithm hmac-md5;\r
+ secret "...";\r
+};\r
+</pre></td></tr></table>\r
+\r
+<p>\r
+\r
+\8d¡\89ñ\82ÌDNS\83T\81[\83o\82Í\81AOpengate\82ð\93±\93ü\82·\82é\83l\83b\83g\83\8f\81[\83N\82Ì\82Ý\82É\83T\81[\83r\83X\82ð\8ds\82¤\82à\82Ì\82Å\82 \82é\81B\82µ\82©\82µ\81A\90Ý\92è\83t\83@\83C\83\8b\82Ì\83p\81[\83~\83b\83V\83\87\83\93\82É\8f\\95ª\92\8d\88Ó\82µ\81A\94F\8fØ\83L\81[\82Ì\83t\83@\83C\83\8b\82Í\83T\81[\83o\8fã\82É\95Û\91¶\82¹\82¸\82É\81A\8dí\8f\9c\82à\82µ\82\82Í\83v\83\8a\83\93\83g\83A\83E\83g\82µ\82Ä\8cµ\8fd\82É\95Û\91¶\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>\r
+\r
+<div align="right"><A href="#bind0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ********* 3 ********* -->\r
+<h4>E.3 named.conf
\82Ì
\90Ý
\92è<A class=anchor href="#bind3" name=bind3>
\81õ</A></h4>
\r+\r
+<p>named\82Ì\8eå\82È\93®\8dì\82ð\90§\8cä\82·\82é\82½\82ß\82Ì\90Ý\92è\83t\83@\83C\83\8b/etc/namedb/named.conf\82Ì\90Ý\92è\82ð\8ds\82¤\81B</p>\r
+<p>\82Ü\82¸\81A\94F\8fØ\83L\81[\82Ì\90Ý\92è\82Ì\82½\82ß\82Ékey\83f\83B\83\8c\83N\83e\83B\83u\82Ì\90Ý\92è\82ª\95K\97v\82Å\82 \82é\81B\91O\8fq\82µ\82½rndc.conf\82Ì\r
+key\83f\83B\83\8c\83N\83e\83B\83u\82Æ\93¯\97l\82Ì\90Ý\92è\82ð\82µ\82È\82¯\82ê\82Î\82È\82ç\82È\82¢\81B</p>\r
+\r
+<table><tr><td><pre>key "rndc_key" {\r
+ algorithm hmac-md5;\r
+ secret "...";\r
+};\r
+\r
+controls {\r
+ inet ::1 allow {\r
+ ::1;\r
+ }\r
+ keys {\r
+ "rndc_key";\r
+ };\r
+ inet 127.0.0.1 allow {\r
+ 127.0.0.1;\r
+ }\r
+ keys {\r
+ "rndc_key";\r
+ };\r
+};\r
+</pre></td></tr></table>\r
+\r
+<p>\r
+\82Ü\82½\81Akey\83f\83B\83\8c\83N\83e\83B\83u\82É\82Â\82¢\82Ä\82Í\95Ê\83t\83@\83C\83\8b\82É\8bL\8fq\82µ\81Anamed.conf\82Åinclude\r
+\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B\95Ê\83t\83@\83C\83\8b\82É\8bL\8fq\82·\82é\8fê\8d\87\82Í\81A\83p\81[\83~\83b\83V\83\87\83\93\82Ì\90Ý\92è\82æ\82Á\82Ä\82³\82ç\82É\83Z\83L\83\85\83\8a\83e\83B\82ð\8d\82\82ß\82é\82±\82Æ\82ª\89Â\94\\82Æ\82È\82é\81B</p>\r
+<p>\8e\9f\82É\81Aoptions\83f\83B\83\8c\83N\83e\83B\83u\82Ì\90Ý\92è\82ð\8ds\82¤\81B</p>\r
+\r
+<table><tr><td><pre>options {\r
+ directory "/etc/namedb";\r
+ pid-file "/var/run/named/named.pid";\r
+ auth-nxdomain yes;\r
+ listen-on-v6 { any; };\r
+};\r
+</pre></td></tr></table>\r
+\r
+<p>named.pid\83t\83@\83C\83\8b\82ð\92u\82\83f\83B\83\8c\83N\83g\83\8a\82Í\93K\93\96\82É\8dì\90¬\82·\82é\95K\97v\82ª\82 \82é\81B</p>\r
+\r
+<div align="right"><A href="#bind0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ******** 4 ********* -->\r
+<h4>E.4 zone
\82Ì
\90Ý
\92è<A class=anchor href="#bind4" name=bind4>
\81õ</A></h4>
\r+\r
+<p>\r
+\r
+Opengate\82Å\8aÇ\97\9d\82·\82é\83h\83\81\83C\83\93\82É\82Â\82¢\82Ä\90Ý\92è\82ð\8ds\82¤\81B\8ae\83h\83\81\83C\83\93\82Ínamed.conf\82Ìzone\83f\83B\83\8c\83N\83e\83B\83u\82É\82æ\82Á\82Ä\8aÇ\97\9d\82³\82ê\82é\81B\82Ü\82½\81ABIND9\82Å\82Íview\82Æ\82¢\82¤\83f\83B\83\8c\83N\83e\83B\83u\82ª\8eÀ\91\95\82³\82ê\82Ä\82¨\82è\81A\82±\82Ì\8eq\83f\83B\83\8c\83N\83e\83B\83u\82É\r
+zone\82Æ\82µ\82Ä\90Ý\92è\82·\82é\82±\82Æ\82É\82æ\82Á\82Ä\81ADNS\96â\82¢\8d\87\82í\82¹\8c³\82ÌIP\83A\83h\83\8c\83X\82â\83h\83\81\83C\83\93\82É\82æ\82Á\82Ä\95Ô\93\9a\82·\82ézone\82ð\95Ï\8dX\82·\82é\82±\82Æ\82ª\89Â\94\\82Æ\82È\82é\81B</p>\r
+\r
+<table><tr><td><pre>view "og" {\r
+ match-clients\r
+ {\r
+ 10.0.0.0/16;\r
+ };\r
+\r
+ recursion yes;\r
+\r
+ zone "." {\r
+ type hint;\r
+ file "named.root";\r
+ };\r
+\r
+ zone "og.saga-u.ac.jp" {\r
+ type master;\r
+ file "og.saga-u.ac.jp";\r
+ };\r
+\r
+ zone "0.0.127.IN-ADDR.ARPA" {\r
+ type master;\r
+ file "master/localhost.rev";\r
+ };\r
+\r
+ // RFC 3152\r
+ zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\\r
+ 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA" {\r
+ type master;\r
+ file "master/localhost-v6.rev";\r
+ };\r
+\r
+ // RFC 1886 -- deprecated\r
+ zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.\\r
+ 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.INT" {\r
+ type master;\r
+ file "master/localhost-v6.rev";\r
+ };\r
+};\r
+</pre></td></tr></table>\r
+\r
+<p>\r
+\88È\8fã\82Ì\90Ý\92è\82É\82¨\82¢\82Ä\81A"og.saga-u.ac.jp"\82Æ\82¢\82¤zone\82ð\90Ý\92è\82µ\82½\81B\82±\82Ì\90Ý\92è\82É\82¨\82¢\82Ä\81A\83h\83\81\83C\83\93"og.saga-u.ac.jp"\82É\91®\82·\82é\83z\83X\83g\82ð\90Ý\92è\82µ\82½og.saga-u.ac.jp\82Æ\82¢\82¤\83t\83@\83C\83\8b\82ð\93Ç\82Ý\8d\9e\82Þ\82æ\82¤\82É\90Ý\92è\82µ\82Ä\82¢\82é\81B\82»\82±\82Å\81Aog.saga-u.ac.jp\82Æ\82¢\82¤\81A\8e\9f\82Ì\82æ\82¤\82È\83t\83@\83C\83\8b\82ð\97p\88Ó\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre>$TTL 3600\r
+$ORIGIN og.saga-u.ac.jp.\r
+\r
+@ IN SOA ns.og.saga-u.ac.jp. postmaster (\r
+ 2005051702 ;\r
+ 3600\r
+ 1200\r
+ 2419200\r
+ 86400 )\r
+ IN NS ns.og.saga-u.ac.jp.\r
+ IN A 10.0.0.2\r
+ IN MX 10 opengate.og.saga-u.ac.jp.\r
+\r
+ns IN A 10.0.0.2\r
+\r
+opengate IN A 10.0.0.2\r
+ AAAA 2001:2f8:10:1::1\r
+\r
+opengate4 IN A 133.49.1.2\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#bind0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ********* 5 ********* -->\r
+<h4>E.5
\8bN
\93®
\8am
\94F<A class=anchor href="#bind5" name=bind5>
\81õ</A></h4>
\r+\r
+<p>\88È\8fã\81A\91S\82Ä\82Ì\90Ý\92è\82ª\8a®\97¹\82µ\82½\8cã\82É\81A\8bN\93®\8am\94F\82ð\8ds\82¤\81B</p>\r
+\r
+<table><tr><td><pre>\r
+# /usr/local/sbin/named/ -u bind -c /etc/namedb/named.conf\r
+</pre></td></tr></table>\r
+\r
+<p>\88È\8fã\82ð\8eÀ\8ds\82µ\81A\96â\91è\82È\82named\82ª\8bN\93®\82µ\82Ä\82¢\82ê\82Î\90¬\8c÷\82Å\82 \82é\81B\8bN\93®\8am\94F\82Å\96â\91è\82ª\82È\82¯\82ê\82Î\81A\r
+/etc/rc.conf\82É\88È\89º\82Ì\8d\80\96Ú\82ð\8bL\8fq\82µ\81A\8e©\93®\8bN\93®\82·\82é\82æ\82¤\82É\90Ý\92è\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre>named_enable="YES"\r
+named_program="/usr/local/sbin/named"\r
+named_flags="-u bind -c /etc/namedb/named.conf"\r
+</pre></td></tr></table>\r
+\r
+<p>\r
+DNS\83T\81[\83o\82Í\8aÇ\97\9d\82ª\95¡\8eG\82Å\82 \82é\82½\82ß\81A\82±\82Ì\91¼\82Ì\8e\91\97¿\82à\8eQ\8dl\82É\82µ\81A\83}\83j\83\85\83A\83\8b\82ð\8fn\93Ç\82µ\82½\8fã\82Å\90Ý\92è\82·\82é\82±\82Æ\82ª\96]\82Ü\82µ\82¢\81B</p>\r
+\r
+<div align="right"><A href="#bind0">back</A> <A href="#top">top</A></div>\r
+<hr>\r
+<!-- Start:MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b -->\r
+<h3>F MRTG
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<A class=anchor href="#mrtg0" name=mrtg0>
\81õ</A></h3>
\r+\r
+<ul>\r
+ <li class="list_num"><A href="#mrtg1">\83C\83\93\83X\83g\81[\83\8b\81iports\81j</A></li>\r
+ <li class="list_num"><A href="#mrtg2">MRTG\82Ì\90Ý\92è</A></li>\r
+ <li class="list_num"><A href="#mrtg3">MRTG\82Ì\8bN\93®\8am\94F</A></li>\r
+ <li class="list_num"><A href="#mrtg4">crontab\82Ö\82Ì\93o\98^</A></li>\r
+</ul>\r
+\r
+<!-- ************ 1 ************** -->\r
+\r
+<h4>F.1 MRTG
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<A class=anchor href="#mrtg1" name=mrtg1>
\81õ</A></h4>
\r+\r
+<p>Opengate \82Ì\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\82½\82ß\82É\81AMRTG\82ð\97p\82¢\82é\82±\82Æ\82ª\89Â\94\\82Å\82 \82é\81B\97\98\97p\8fó\8bµ\82Ì\8aÄ\8e\8b\82ð\8ds\82È\82í\82È\82¢\8fê\8d\87\82Í\81A\r
+MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b\82Í\95s\97v\82Å\82 \82é\81B</p>\r
+\r
+<p>MRTG(Multi Router Traffic Grapher)\82Æ\82Í\81A\96{\97\88\83l\83b\83g\83\8f\81[\83N\82Ì\95\89\89×\82ð\8aÄ\8e\8b\82·\82é\83c\81[\83\8b\82Å\82 \82é\81B\r
+SNMP\83G\81[\83W\83F\83\93\83g\82æ\82è\83g\83\89\83t\83B\83b\83N\82Ì\92l\82ð\8eæ\93¾\82µ\81A\83O\83\89\83t\83B\83b\83N\83C\83\81\81[\83W\82ð\8aÜ\82ÞHTML\83y\81[\83W\82ð\90¶\90¬\82·\82é\81B\r
+<a href="http://www.mrtg.jp/" target="_blank">\8fÚ\8d×</a></p>\r
+\r
+<p>MRTG\82ð\97p\82¢\82Ä\81AOpengate\82Ì\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\82É\82 \82½\82Á\82Ä\82Í\81AOpengate\82ð\93±\93ü\82µ\82½\83Q\81[\83g\83E\83F\83C\82É\82¨\82¢\82Ä\r
+MRTG\82ð\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82à\8d\\82í\82È\82¢\82ª\81A\8aÄ\8e\8b\97p\82Ì\95Ê\82Ì\83T\81[\83o\82É\83C\83\93\83X\83g\81[\83\8b\82µ\82Ä\82à\8d\\82í\82È\82¢\81B\82Ü\82½\81A\r
+Opengate\82ð\95ª\8eU\94z\92u\82·\82é\82æ\82¤\82É\90Ý\8cv\82³\82ê\82Ä\82¢\82é\82½\82ß\81A\95¡\90\94\82ÌOpengate\82ð\8aÇ\97\9d\82·\82é\82É\82 \82½\82Á\82Ä\82Í\8aÄ\8e\8b\97p\82Ì\83T\81[\83o\82É\82¨\82¢\82ÄMRTG\82ð\83C\83\93\83X\83g\81[\83\8b\82·\82é\82±\82Æ\82ð\90\84\8f§\82·\82é\81B</p>\r
+\r
+<p>\88È\89º\82É\81AMRTG\82ðports\82ð\97p\82¢\82Ä\83C\83\93\83X\83g\81[\83\8b\82·\82é\8eè\8f\87\82ð\8e¦\82·\81B</p>\r
+\r
+<table><tr><td><pre># cd /usr/ports/net-mgmt/mrtg/\r
+# make clean\r
+===> Cleaning for mrtg-2.12.2,1\r
+# make install clean ; rehash\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#mrtg0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 2 ************** -->\r
+<h4>F.2 MRTG
\82Ì
\90Ý
\92è<A class=anchor href="#mrtg2" name=mrtg2>
\81õ</A></h4>
\r+\r
+<p>\r
+MRTG\82Ì\83C\83\93\83X\83g\81[\83\8b\82ª\8a®\97¹\82·\82é\82Æ\81A/usr/local/etc/mrtg/\88È\89º\82É\90Ý\92è\83t\83@\83C\83\8b\82ª\97p\88Ó\82³\82ê\82Ä\82¢\82é\81B\93¯\83f\83B\83\8c\83N\83g\83\8a\82É\81Aopengate.cfg\82Æ\82µ\82Ä\90V\82½\82É\90Ý\92è\83t\83@\83C\83\8b\82ð\97p\88Ó\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre>\r
+##################################################\r
+# opengate user counter\r
+\r
+WorkDir: /usr/home/user/public_html/mrtg/opengate/\r
+Language: euc-jp\r
+\r
+##### \83I\83v\83V\83\87\83\93\r
+# growright: X\8e²\82Ì\8c´\93_\82ð\8d¶\82É integer: \90®\90\94\95\\8e¦ info: 3,4\94Ô\96Ú\82Ì\8fo\97Í\82Ì\94ñ\95\\8e¦\r
+# gauge: \8c»\8dÝ\82Ì\92l=\93ü\97Í\92l-\91O\89ñ\82Ì\93ü\97Í\92l\82ð\82µ\82È\82¢ nopercent: \83p\81[\83Z\83\93\83g\94ñ\95\\8e¦\r
+Options[^]: growright,gauge,nopercent,integer\r
+\r
+Target[opengate]:`/usr/home/user/bin/input.sh`\r
+Title[opengate]: Opengate user counter\r
+\r
+PageTop[opengate]: <h1>Opengate user counter</h1>\r
+ <p>Opengate12 \82ð\97\98\97p\82µ\82Ä\82¢\82é\90l\90\94\82ð\95\\8e¦\82µ\82Ä\82¢\82Ü\82·\81B</p>\r
+\r
+# \92l\82Ì\8fã\8cÀ\r
+MaxBytes[opengate]: 200\r
+# \8ae\83O\83\89\83t\82É\82¨\82¢\82Ä\81A\83O\83\89\83t\82Ì\8fã\8cÀ\82ð\92l\82Ì\8dÅ\91å\92l\82Å\82È\82\92l\82Ì\8fã\8cÀ\82É\82·\82é\r
+#Unscaled[opengate]: ymwd\r
+\r
+# \83O\83\89\83t\82ÌY\8e²\82É\82Â\82\83^\83C\83g\83\8b\r
+YLegend[opengate]: Opengate User\r
+# \92l\82Ì\92P\88Ê\r
+ShortLegend[opengate]: \90l\r
+# \92l\82Ì\83^\83C\83g\83\8b LegendI: 1\94Ô\96Ú LegendO: 2\94Ô\96Ú\r
+LegendI[opengate]: IPv6 Users\r
+LegendO[opengate]: Total Users\r
+</pre></td></tr></table>\r
+\r
+<p>WorkDir\82É\8ew\92è\82µ\82½\83f\83B\83\8c\83N\83g\83\8a\82ð\8dì\90¬\82·\82é\81B\93¯\83f\83B\83\8c\83N\83g\83\8a\82É\81AMRTG\82ª\8ae\8eíHTML\83t\83@\83C\83\8b\82Æ\83O\83\89\83t\83B\83b\83N\83C\83\81\81[\83W\82ð\8dì\90¬\82·\82é\81B</p>\r
+\r
+<p>Target[opengate]\82É\82Í\81AMRTG\82É\83f\81[\83^\82ð\93n\82·\82½\82ß\82Ì\83v\83\8d\83O\83\89\83\80\82ð\90Ý\92u\82·\82é\81B\88È\89º\82É\8fÚ\8d×\82ð\90à\96¾\82·\82é\81B</p>\r
+\r
+<div align="right"><A href="#mrtg0">back</A> <A href="#top">top</A></div>\r
+\r
+\r
+<h5>F.2.1 Opengate
\83T
\81[
\83o
\82Å
\8aÄ
\8e\8b\82·
\82é
\8fê
\8d\87<A class=anchor href="#mrtg21" name=mrtg21>
\81õ</A></h5>
\r+\r
+<p>\88È\89º\82ÉOpengate\82ð\93±\93ü\82µ\82½\83Q\81[\83g\83E\83F\83C\82É\82¨\82¢\82Ä\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\8fê\8d\87\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\8bL\82·\81B</p>\r
+\r
+<table><tr><td><pre>\r
+#!/bin/sh\r
+\r
+#######################################\r
+##\r
+## shwo opengate status for MRTG\r
+##\r
+## 1 line : IPv6 Users\r
+## 2 line : Total Users\r
+## 3 line : uptime\r
+## 4 line : comment for data\r
+##\r
+#######################################\r
+\r
+LANG=C\r
+COLUMNS=256\r
+\r
+export LANG\r
+export COLUMNS\r
+\r
+### IPv6 prefix\r
+prefix="2001:2f8:22:801:"\r
+\r
+###opengateprocessname\r
+process="opengatesrv.cgi"\r
+\r
+###tmp file name\r
+tmp_all="/tmp/og_count_all.tmp"\r
+tmp_6="/tmp/og_count_6.tmp"\r
+\r
+######################################################\r
+ps ax | grep $process > $tmp_all \r
+COUNT = `wc-l $tmp_all | awk '{print $1}'`\r
+grep $prefix $tmp_all > $tmp_6\r
+COUNT6=`wc -l $tmp_6 | awk '{print $1}'`\r
+UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`\r
+\r
+rm $tmp_all\r
+rm $tmp_6\r
+\r
+echo "$COUNT6"\r
+echo "$COUNT"\r
+echo "$UPTIME"\r
+echo "Opengate User Counter"\r
+</pre></td></tr></table>\r
+\r
+<p>\82³\82ç\82É\81A\82±\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\92P\93Æ\82Å\8eÀ\8ds\82µ\81A\88È\89º\82Ì\82æ\82¤\82È\83f\81[\83^\82ª\8eæ\93¾\82Å\82«\82Ä\82¢\82é\82±\82Æ\82ð\8am\94F\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre>\r
+5\r
+48\r
+10days\r
+Opengate User Counter\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#mrtg0">back</A> <A href="#top">top</A></div>\r
+\r
+<h5>F.2.2
\8aO
\95\94\83T
\81[
\83o
\82Å
\8aÄ
\8e\8b\82·
\82é
\8fê
\8d\87<A class=anchor href="#mrtg22" name=mrtg22>
\81õ</A></h5>
\r+\r
+<p>\88È\89º\82É\8aO\95\94\83T\81[\83o\82É\82¨\82¢\82Ä\97\98\97p\8fó\8bµ\82ð\8aÄ\8e\8b\82·\82é\8fê\8d\87\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\8e¦\82·\81B</p>\r
+\r
+<table><tr><td><pre>\r
+#!/bin/sh\r
+\r
+#######################################\r
+##\r
+## input data for MRTG\r
+##\r
+## 1 line : IPv6 Users\r
+## 2 line : Total Users\r
+## 3 line : uptime\r
+## 4 line : comment for data\r
+##\r
+#######################################\r
+\r
+# tmp file name\r
+file="/tmp/opengate.tmp"\r
+\r
+# URL of output.sh at opengate\r
+url="http://opengate.saga-u.ac.jp/cgi-bin/output.sh"\r
+\r
+fetch -o $file $url &> /dev/null\r
+\r
+more $file\r
+</pre></td></tr></table>\r
+\r
+<p>\r
+\82³\82ç\82É\81A\8aÄ\8e\8b\82·\82éOpengate\83T\81[\83o\82É\82¨\82¢\82Ä\81ACGI\82ª\8eÀ\8ds\89Â\94\\82È\83f\83B\83\8c\83N\83g\83\8a\82É\8e\9f\82Ì\82æ\82¤\82È\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\97p\88Ó\82·\82é\81B\82±\82ê\82ð\81A\8fã\8bL\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82Ì"url"\82É\8ew\92è\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre>\r
+#!/bin/sh\r
+\r
+#######################################\r
+##\r
+## shwo opengate status for MRTG\r
+##\r
+## 1 line : IPv6 Users\r
+## 2 line : Total Users\r
+## 3 line : uptime\r
+## 4 line : comment for data\r
+##\r
+#######################################\r
+\r
+LANG=C\r
+COLUMNS=256\r
+\r
+export LANG\r
+export COLUMNS\r
+\r
+### IPv6 prefix\r
+prefix="2001:2f8:22:801:"\r
+\r
+###opengate process name\r
+process="opengatesrv.cgi" \r
+\r
+###tmp file name\r
+tmp_all="/tmp/og_count_all.tmp"\r
+tmp_6="/tmp/og_count_6.tmp"\r
+\r
+######################################################\r
+\r
+ps ax | grep $process > $tmp_all\r
+COUNT =`wc-l $tmp_all | awk '{print $1}'`\r
+grep $prefix $tmp_all > $tmp_6\r
+COUNT6=`wc -l $tmp_6 | awk '{print $1}'`\r
+UPTIME=`uptime | awk '{print $3$4}' | sed -e "s/,//g"`\r
+rm $tmp_all\r
+rm $tmp_6\r
+\r
+echo "Content-type: text/plain; charset=iso-8859-1"\r
+echo\r
+\r
+echo "$COUNT6"\r
+echo "$COUNT"\r
+echo "$UPTIME"\r
+echo "Opengate User Counter"\r
+</pre></td></tr></table>\r
+\r
+<p>Opengate\83T\81[\83o\82É\81A\88È\8fã\82Ì\83V\83F\83\8b\83X\83N\83\8a\83v\83g\82ð\97p\88Ó\82µ\82½\8cã\82É\81A\8aÄ\8e\8b\97p\82Ì\8aO\95\94\83T\81[\83o\82É\82¨\82¢\82Ä\81A\r
+input.sh\82ð\92P\93Æ\82Å\8eÀ\8ds\82µ\82½\8dÛ\82É\81A\88È\89º\82Ì\82æ\82¤\82È\83f\81[\83^\82ª\8eæ\93¾\82Å\82«\82Ä\82¢\82é\82±\82Æ\82ð\8am\94F\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre>5\r
+48\r
+10days\r
+Opengate User Counter\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#mrtg0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 3 ************** -->\r
+<h4>F.3 MRTG
\82Ì
\8bN
\93®
\8am
\94F<A class=anchor href="#mrtg3" name=mrtg3>
\81õ</A></h4>
\r+\r
+<p>\88È\8fã\82Ì\90Ý\92è\82ª\8a®\97¹\82µ\82½\8cã\82É\81Amrtg\82ð\8eÀ\8ds\82·\82é\82±\82Æ\82ª\89Â\94\\82©\8am\94F\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre>\r
+# /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg\r
+</pre></td></tr></table>\r
+\r
+<p>\88È\8fã\82ð\8eÀ\8ds\82·\82é\82Æ\81A\82P\89ñ\96Ú\82Æ\82Q\89ñ\96Ú\82Í\97l\81X\82ÈWARNING\82ª\8fo\97Í\82³\82ê\82é\81B</p>\r
+\r
+<p>mrtg\82ð\95¡\90\94\89ñ\8eÀ\8ds\82µ\8cã\82É\81AWorkDir\82É\8ew\92è\82µ\82½\83f\83B\83\8c\83N\83g\83\8a\82É\88È\89º\82Ì\83t\83@\83C\83\8b\82ª\90¶\90¬\82³\82ê\82Ä\82¢\82ê\82Î\90¬\8c÷\82Å\82 \82é\81B</p>\r
+\r
+<table><tr><td><pre>\r
+> ls -l\r
+-rw-r--r-- 1 root wheel 538 12 14 04:40 mrtg-l.png\r
+-rw-r--r-- 1 root wheel 414 12 14 04:40 mrtg-m.png\r
+-rw-r--r-- 1 root wheel 1759 12 14 04:40 mrtg-r.png\r
+-rw-r--r-- 1 root wheel 2941 12 20 15:15 opengate-day.png\r
+-rw-r--r-- 1 root wheel 2146 12 20 14:35 opengate-month.png\r
+-rw-r--r-- 1 root wheel 2867 12 20 14:55 opengate-week.png\r
+-rw-r--r-- 1 root wheel 1897 12 20 05:00 opengate-year.png\r
+-rw-r--r-- 1 root wheel 5961 12 20 15:15 opengate.html\r
+-rw-r--r-- 1 root wheel 48786 12 20 15:15 opengate.log\r
+-rw-r--r-- 1 root wheel 48784 12 20 15:10 opengate.old\r
+</pre></td></tr></table>\r
+\r
+<div align="right"><A href="#mrtg0">back</A> <A href="#top">top</A></div>\r
+\r
+<!-- ************ 4 ************** -->\r
+<h4>F.4 crontab
\82Ö
\82Ì
\93o
\98^<A class=anchor href="#mrtg4" name=mrtg4>
\81õ</A></h4>
\r+\r
+<p>\88È\8fã\82Ì\90Ý\92è\82ª\8a®\97¹\82µ\82½\82Ì\82¿\82É\81Amrtg\82ðcrontab\82É\82æ\82Á\82Ä\92è\8aú\93I\82É\8eÀ\8ds\82·\82é\81B</p>\r
+\r
+<p>/etc/crontab\82É\8e\9f\82Ì\8ds\82ð\92Ç\89Á\82·\82é\81B</p>\r
+\r
+<table><tr><td><pre>\r
+*/5 * * * * root /usr/local/bin/mrtg /usr/local/etc/mrtg/opengate.cfg\r
+</pre></td></tr></table>\r
+\r
+<p>\8aO\95\94\83T\81[\83o\82É\82¨\82¢\82Ä\81A\95¡\90\94\82ÌOpengate\82ð\8aÇ\97\9d\82·\82é\8fê\8d\87\82Í\81A\90Ý\92è\83t\83@\83C\83\8b\82ð\90V\82½\82É\8dì\90¬\82·\82é\89ß\92ö\82©\82ç\8ds\82È\82¤\81B</p>\r
+\r
+<div align="right"><A href="#mrtg0">back</A> <A href="#top">top</A></div>\r
+\r
+\r
+<!-- ************ 1 ************** -->\r
+<h3>G. rulechk
\82Ì
\83C
\83\93\83X
\83g
\81[
\83\8b<A class=anchor href="#rulechk" name=rulechk>
\81õ</A></h3>
\r+\r
+<p>Opengate\82Ì\83v\83\8d\83Z\83X\82ª\88Ù\8fí\8fI\97¹\82µ\82½\82Æ\82«\81A\8bH\82É\83t\83@\83C\83A\83E\83H\81[\83\8b\83\8b\81[\83\8b\82ª\8fÁ\82³\82ê\82¸\82É\8ec\82é\82±\82Æ\82ª\82 \82é\81B\82»\82Ì\82æ\82¤\82È\8fó\8bµ\82É\91Î\89\9e\82·\82é\83X\83N\83\8a\83v\83g\82ð\81Atools/rulechk\82É\97p\88Ó\82µ\82½\81B\82±\82ê\82Í\81Aps\83R\83}\83\93\83h\82©\82ç\93¾\82ç\82ê\82éOpengate\83v\83\8d\83Z\83X\88ê\97\97\82Æ\81A\83t\83@\83C\83A\83E\83H\81[\83\8b\82©\82ç\93¾\82ç\82ê\82é\8b\96\89Â\83\8b\81[\83\8b\88ê\97\97\82ð\94ä\8ar\82µ\82Ä\81A\97]\95ª\82È\83\8b\81[\83\8b\82ð\8dí\8f\9c\82·\82é\83X\83N\83\8a\83v\83g\82Å\82 \82é\81B\83R\83\93\83\\81[\83\8b\82©\82ç\8eÀ\8ds\82·\82é\82©\81A\82à\82µ\82\82Í\8fã\8bL\82Æ\93¯\97l\82Écron\8eÀ\8ds\82·\82é\81B</p>\r
+\r
+<div align="right"><A href="#rulechk">back</A> <A href="#top">top</A></div>\r
+\r
+\r
+</body>\r
</html>
\ No newline at end of file
<title>Opengate Q & A</title>
</head>
-<BODY>
-<body bgcolor=#BBEECC>
+<body bgcolor=#fafff0>
-<H3>Opengate Q & A</H3>
+<H3>Opengate Q & A</H3>
\88Ó\8b`
<UL>
</BLOCKQUOTE>
<LI>
-\89½\8cÌ\81A\8cö\8aJ\8cÅ\92è\92[\96\96\82Æ\8fî\95ñ\83R\83\93\83Z\83\93\83g\82Ì\97¼\95û\82ð\91Î\8fÛ\82Æ\82·\82é\95K\97v\82ª\82 \82é\82Ì\82Å\82·\82©\81B
-\8cö\8aJ\8cÅ\92è\92[\96\96\82Í\92[\96\96OS\82Ì\94F\8fØ\82ª\89Â\94\\82Å\82Í\82È\82¢\82Å\82·\82©\81B
+
+\89½\8cÌ\81A\8cö\8aJ\8cÅ\92è\92[\96\96\82Æ\8fî\95ñ\83R\83\93\83Z\83\93\83g\82Ì\97¼\95û\82ð\91Î\8fÛ\82Æ\82·\82é\95K\97v\82ª\82 \82é\82Ì\82Å\82·\82©\81B\8cö\8aJ\8cÅ\92è\92[\96\96\82Í\92[\96\96OS\82Ì\94F\8fØ\82ª\89Â\94\\82Å\82Í\82È\82¢\82Å\82·\82©\81B
<BLOCKQUOTE>
\91S\82Ä\82Ì\8cö\8aJ\8cÅ\92è\92[\96\96\82ð\83l\83b\83g\83\8f\81[\83N\8aÇ\97\9d\95\94\96å\82ª\93\9d\88ê\93I\82É\94z\92u\82µ\81A\82»\82Ì\83n\81[\83h\83E\83F\83A\82ð\95s\90³\91\80\8dì\82©\82ç\8eç\82ê\82é\8fó\8bµ\82ª\89Â\94\\82Å\82 \82ê\82Î\82»\82ê\82Å\82à\97Ç\82¢\82Æ\8ev\82¢\82Ü\82·\81B\82µ\82©\82µ\8c»\8eÀ\93I\82É\82Í\8ag\8eU\82µ\82½\8cö\8aJ\8fê\8f\8a\82Ö\91½\90\94\94z\92u\82·\82é\82±\82Æ\82ª\91½\82\81A\97l\81X\82È\8d¢\93ï\82ª\94º\82¢\82Ü\82·\81B\82Ü\82½\8aù\82É\94z\92u\82³\82ê\82½\94F\8fØ\8b@\94\\82Ì\96³\82¢\92[\96\96\82â\95s\8f\\95ª\82È\8aÇ\97\9d\89º\82Ì\92[\96\96\82ª\90\94\91½\82\82 \82è\82Ü\82·\81B\82±\82ê\82ç\82É\82à\91Î\89\9e\82·\82é\95K\97v\82ª\82 \82è\82Ü\82·\81B
Java\82ª\93®\82©\82È\82¢\92[\96\96\82à\82 \82è\82Ü\82·\82ª\81B
<BLOCKQUOTE>
Java\82ª\93®\82©\82È\82¢\82à\82µ\82\82Í\83C\83\93\83X\83g\81[\83\8b\82³\82ê\82Ä\82¢\82È\82¢\92[\96\96\82Å\82à\81A\97\98\97p\8eÒ\82ª\94F\8fØ\83y\81[\83W\82É\82¨\82¢\82Ä\97v\8b\81\82µ\82½\90Ú\91±\8cp\91±\8e\9e\8aÔ\82¾\82¯\83l\83b\83g\83\8f\81[\83N\82ð\8aJ\95ú\82µ\82Ü\82·\81B\82½\82¾\82µ\81A\8fæ\82Á\8eæ\82è\82â\95ú\92u\82É\91Î\89\9e\82·\82é\82½\82ß\81A\88ê\92è\8e\9e\8aÔ\8aÔ\8au\82Å\81AARP\83R\83}\83\93\83h\82Æ\83t\83@\83C\83A\83E\83H\81[\83\8b\92Ê\89ß\83p\83P\83b\83g\90\94\82Å\83`\83F\83b\83N\82µ\82Ü\82·\81B\82Ü\82½\81A\8b\96\89Â\83y\81[\83W\82Ì\97\98\97p\92\86\92f\82Ì\83\8a\83\93\83N\82ð\83N\83\8a\83b\83N\82·\82é\82±\82Æ\82Å\83l\83b\83g\83\8f\81[\83N\82ð\95Â\8d½\82Å\82«\82Ü\82·\81B
-</BLOCKQUOTE>
+</BLOCKQUOTE></LI>
</UL>
<BLOCKQUOTE>
\90\94\8f\\91ä\82Ì\8eg\97p\82Å\82Í\96â\91è\96³\82\8eg\82¦\82Ä\82¢\82Ü\82·\81B\83N\83\89\83XC\92ö\93x\82Ì\97\98\97p\82Í\82Å\82«\82é\82Æ\8ev\82¢\82Ü\82·\81B\96{\83V\83X\83e\83\80\82Í\81A\83t\83@\83C\83A\83E\83I\81[\83\8b\83\\83t\83g\82Ì\83p\83P\83b\83g\83t\83B\83\8b\83^\83\8a\83\93\83O\8bK\91¥\82ð\92Ç\89Á\81E\8dí\8f\9c\82·\82é\95û\8e®\82Å\82 \82è\81A\8ae\83N\83\89\83C\83A\83\93\83g\82©\82ç\82Ì\97\98\97p\8aJ\8en\97v\8b\81\8e\9e\82ð\95Ê\82É\82·\82ê\82Î\96w\82Ç\95\89\89×\82Æ\82È\82è\82Ü\82¹\82ñ\81B\97\98\97p\92\86\82Ì\83p\83t\83H\81[\83}\83\93\83X\82Í\81A\83p\83P\83b\83g\83t\83B\83\8b\83^\83\8a\83\93\83O\82â\83p\83P\83b\83g\93]\91\97\82Ì\8f\88\97\9d\94\\97Í\82É\88Ë\91¶\82·\82é\82Æ\8ev\82¢\82Ü\82·\81B\82È\82¨\97Ê\93I\82È\90§\8cÀ\82Æ\82µ\82Ä\82Í\81A\97\98\97p\83N\83\89\83C\83A\83\93\83g\96\88\82É\82P\83v\83\8d\83Z\83X\82ª\8fí\92\93\82·\82é\82±\82Æ\82ª\82 \82è\82Ü\82·\81B\82µ\82©\82µ\83v\83\8d\83Z\83X\90\94\82Ì\8dÅ\91å\92l\82Í\83J\81[\83l\83\8b\82Å\92²\90®\82Å\82«\82Ü\82·\82µ\81A\83N\83\89\83XC\92ö\93x\96\88\82É\95ª\8a\84\82µ\82Ä\83V\83X\83e\83\80\89^\97p\82·\82é\95û\82ª\83Q\81[\83g\83E\83F\83C\82É\82¨\82¯\82é\83p\83P\83b\83g\83t\83B\83\8b\83^\83\8a\83\93\83O\93\99\82Ì\94\\97Í\82©\82ç\82·\82é\82Æ\8c»\8eÀ\93I\82Å\82µ\82å\82¤\81B
-</BLOCKQUOTE>
+</BLOCKQUOTE></LI>
</UL>
\93±\93ü\81E\8aJ\94
IPv6\82É\91Î\89\9e\82Å\82«\82Ü\82·\82©\81B
<BLOCKQUOTE>
-ipfw\82Æ\82Æ\82à\82Éip6fw\82ð\90§\8cä\82·\82é\82æ\82¤\82É\82·\82ê\82Î\89Â\94\\82Å\82µ\82å\82¤\81B\82µ\82©\82µ\81AIpv4/IPv6\83f\83\85\83A\83\8b\83X\83^\83b\83N\82É\82¨\82¢\82Ä\81A\97v\8b\81\92[\96\96\82Ì\95¡\90\94IP\83A\83h\83\8c\83X\82ð\81A\91S\82Ä\94c\88¬\82µ\82Ä\93¯\8e\9e\82É\8aJ\95ú/\95Â\8d½\82·\82é\8e\96\82Í\97e\88Õ\82Å\82Í\82È\82¢\82½\82ß\81A\8c»\8fó\82Å\82Í\8eÀ\91\95\82µ\82Ä\82¢\82Ü\82¹\82ñ\81B\8c»\83v\83\8d\83O\83\89\83\80\82É\82¨\82¢\82Ä\82Í\81A\8fð\8c\8f\95t\82Å\82·\82ª\88È\89º\82Ì\95û\96@\82Å\8eÀ\8c»\82Å\82«\82Ü\82·\81B\83t\83@\83C\83A\83E\83H\81[\83\8b\90§\8cä\83X\83N\83\8a\83v\83gopengatefw.pl\82É\82¨\82¢\82Ä\81A\97v\8b\81\92[\96\96\82ÌMAC\83A\83h\83\8c\83X\82ð\91\97\90M\8c³\82Ü\82½\82Í\91\97\90M\90æ\82Æ\82·\82éIPv6\83p\83P\83b\83g\82ð\8b\96\89Â\82·\82éipfw\83R\83}\83\93\83h\82ð\92Ç\89Á\82µ\82Ä\82\82¾\82³\82¢\81B\82½\82¾\82µ\81A\83C\81[\83T\83l\83b\83g\82Ì\93¯\88ê\83\8a\83\93\83N\93à\82É\92[\96\96\82ª\82 \82é\8fê\8d\87\82É\8cÀ\92è\82³\82ê\82Ü\82·\81B
-</BLOCKQUOTE>
+Version
+1.2.0\82É\82¨\82¢\82Ä\91Î\89\9e\82µ\82Ü\82µ\82½\81B
+</BLOCKQUOTE></LI>
</UL>
-</BODY>
+</body>
</HTML>
\r
.list_none {\r
list-style : none;\r
- font-weight : bold;\r
+ font-weight : none;\r
}\r
\r
<title>Flow of Opengate</title>
</head>
-<BODY>
-<body bgcolor=#BBEECC>
+<body bgcolor=#fafff0>
-<H3>Flow of Opengate</H3>
-
-Following is the flow of the Opengate system.
+<H3>Flow of Opengate</H3>Following is the flow of the
+Opengate system.
<OL>
firewall rule and terminates.
<LI>
-At termination, CGI reports to syslog the filewall close
-[Jun 16 22:11:55 ... CLOS: user user1 from 192.168.0.111...],
-[Jun 16 22:11:55 ... CLOS: user user1 from 2001:e38:10::111...] and
-[Jun 16 22:11:55 ... END: user user1 at 00:00:00:00:00:00].
+At termination, CGI reports to syslog the filewall
+ close [Jun 16 22:11:55 ... CLOS: user user1 from 192.168.0.111...], [Jun 16
+ 22:11:55 ... CLOS: user user1 from 2001:e38:10::111...] and [Jun 16 22:11:55
+ ... END: user user1 at 00:00:00:00:00:00].</LI>
+
+
+
+
</OL>
-</BODY>
+
+
+</body>
</HTML>
/**************************************************/\r
/* opengate client */\r
-/* 1999-2002 */\r
-/* Yoshiaki Watanabe, */\r
-/* Saga University, Japan, */\r
-/* E-Mail:watanaby@is.saga-u.ac.jp */\r
/**************************************************\r
opengate client\r
java applet downloaded to client machine \r
\r
-Copyright (C) 1999-2002 Yoshiaki Watanabe\r
+Copyright (C) 1999-2002 Opengate Project Team\r
\r
This program is free software; you can redistribute it and/or\r
modify it under the terms of the GNU General Public License\r
\r
Email: watanaby@is.saga-u.ac.jp\r
\r
-Programmed by Yoshiaki WATANABE, Saga University\r
+Written by Yoshiaki WATANABE, Saga University\r
Modified by Shin-ichi TADAKI, Saga University\r
**************************************************/\r
import java.awt.*;\r
module for Authentication by FTPS
(Explicit and Implicit modes)
-Copyright (C) 2006 Yoshiaki Watanabe
+Copyright (C) 2006 Opengate Project Team
+Written by Yoshiaki Watanabe
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
opengate server
module for Authentication by PAM
-Copyright (C) 2002 Yoshiaki Watanabe
+Copyright (C) 2002 Opengate Project Team
+Written by Yoshiaki Watanabe
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
opengate server
module for Authentication by POP3S
-Copyright (C) 2002 Yoshiaki Watanabe
+Copyright (C) 2002 Opengate Project Team
+Written by Yoshiaki Watanabe
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
opengate server
module for Authentication by RADIUS
-Copyright (C) 2002 Yoshiaki Watanabe
+Copyright (C) 2002 Opengate Project Team
+Written by Yoshiaki Watanabe
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
opengate server
module for communication with arp
-Copyright (C) 1999 Yoshiaki Watanabe
+Copyright (C) 1999 Opengate Project Team
+Written by Yoshiaki Watanabe
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
opengate server
module for Authentication of User
-Copyright (C) 1999 Yoshiaki Watanabe
-
+Copyright (C) 1999 Opengate Project Team
+Written by Yoshiaki Watanabe
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
opengate server
module for Communication through CGI
-Copyright (C) 1999 Yoshiaki Watanabe
- Modfied 2005 Katsuhiko Eguchi
+Copyright (C) 1999 Opengate Project Team
+Written by Yoshiaki Watanabe
+Modfied Katsuhiko Eguchi, 2005
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
opengate server\r
module for Controling ip6fw \r
\r
-Copyright (C) 2005 Katsuhiko Eguchi\r
+Copyright (C) 2005 Opengate Project Team\r
+Written by Katsuhiko Eguchi, 2005 \r
\r
This program is free software; you can redistribute it and/or\r
modify it under the terms of the GNU General Public License\r
opengate server
module for Controling ipfw
-Copyright (C) 1999 Yoshiaki Watanabe
- Modfied 2005 Katsuhiko Eguchi
+Copyright (C) 1999 Opengate Project Team
+Written by Yoshiaki Watanabe
+Modfied Katsuhiko Eguchi, 2005
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
opengate server
module for communication with java
-Copyright (C) 1999 Yoshiaki Watanabe
- Modfied 2005 Katsuhiko Eguchi
+Copyright (C) 1999 Opengate Project Team
+Written by Yoshiaki Watanabe
+Modfied Katsuhiko Eguchi, 2005
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
opengate server
module for communication with ndp
-Copyright (C) 2004-2005 Katsuhiko Eguchi
+Copyright (C) 2004 Opengate Project Team
+Written by Katsuhiko Eguchi, 2004-2005
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
opengate server
module for Getting Parameters
-Copyright (C) 2005 Yoshiaki Watanabe
+Copyright (C) 2005 Opengate Project Team
+Written by Yoshiaki Watanabe
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
/**************************************************
htmltemplate
-Copyright (C) 2005 Katsuhiko Eguchi
+Copyright (C) 2005 Opengate Project Team
+Written by Katsuhiko Eguchi, 2005
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
/**************************************************
htmltemplate
-Copyright (C) 2005 Katsuhiko Eguchi
+Copyright (C) 2005 Opengate Project Team
+Written by Katsuhiko Eguchi, 2005
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
/**************************************************
opengate server main
-Copyright (C) 1999 Yoshiaki Watanabe
- Modfied 2005 Katsuhiko Eguchi
+Copyright (C) 1999 Opengate Project Team
+Written by Yoshiaki Watanabe
+Modfied Katsuhiko Eguchi, 2005
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
/**************************************************
opengate autheintication CGI main
-Copyright (C) 2005 Katsuhiko Eguchi
+Copyright (C) 2005 Opengate Project Team
+Written by Katsuhiko Eguchi, 2005
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
/**************************************************
opengate autheintication CGI header file
-Copyright (C) 2005 Katsuhiko Eguchi
+Copyright (C) 2005 Opengate Project Team
+Written by Katsuhiko Eguchi, 2005
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
/**************************************************
opengate server header file
-Copyright (C) 1999 Yoshiaki Watanabexs
- Modfied 2005 Katsuhiko Eguchi
+Copyright (C) 1999 Opengate Project Team
+Written by Yoshiaki Watanabe
+Modfied Katsuhiko Eguchi, 2005
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
/**************************************************
opengate server test program
-Copyright (C) 2005 Yoshiaki Watanabe
- Modfied 2005 Katsuhiko Eguchi
+Copyright (C) 2005 Opengate Project Team
+Written by Yoshiaki Watanabe
+Modfied Katsuhiko Eguchi, 2005
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
/**************************************************
opengate server test program
-Copyright (C) 2005 Yoshiaki Watanabe
- Modfied 2005 Katsuhiko Eguchi
+Copyright (C) 2005 Opengate Project Team
+Written by Yoshiaki Watanabe
+Modfied Katsuhiko Eguchi, 2005
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
/**************************************************
opengate server test program
-Copyright (C) 2005 Yoshiaki Watanabe
- Modfied 2005 Katsuhiko Eguchi
+Copyright (C) 2005 Opengate Project Team
+Written by Yoshiaki Watanabe
+Modfied Katsuhiko Eguchi, 2005
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
/**************************************************
opengate server test program
-Copyright (C) 2005 Yoshiaki Watanabe
+Copyright (C) 2005 Opengate Project Team
+Written by Yoshiaki Watanabe
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
opengate server
utility routines
-Copyright (C) 1999 Yoshiaki Watanabe
- Modfied 2005 Katsuhiko Eguchi
+Copyright (C) 1999 Opengate Project Team
+Written by Yoshiaki Watanabe
+Modfied Katsuhiko Eguchi, 2005
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
OSDN Git Service
