# # 透過型ファイアウォール(Winnyフィルターを利用) # ip route default gateway 192.168.100.1 bridge member bridge1 lan1 lan2 ip bridge1 address 192.168.100.2/24 ip lan2 intrusion detection out on ip lan2 intrusion detection out winny on reject=on ip lan2 intrusion detection out default off ip policy filter 2200 reject-nolog lan1 * * * * ip policy filter 2210 pass-nolog * lan2 * * * ip policy filter 2220 static-pass-nolog * local * * * ip policy filter 2250 reject-nolog lan2 * * * * ip policy filter 2260 reject-nolog * lan1 * * * ip policy filter 2270 static-pass-nolog * local * * * ip policy filter 2300 static-pass-nolog local * * * * ip policy filter 3000 reject-nolog * * * * * ip policy filter set 101 name="Internet Access" 2200 [2210 2220] 2250 [2260 2270] 2300 3000 ip policy filter set enable 101 dns server 192.168.100.1 httpd host any