diff --git a/ja_JP.eucJP/articles/Makefile b/ja_JP.eucJP/articles/Makefile index 13870ad5c6..565479f091 100644 --- a/ja_JP.eucJP/articles/Makefile +++ b/ja_JP.eucJP/articles/Makefile @@ -1,12 +1,13 @@ -# $FreeBSD: doc/ja_JP.eucJP/articles/Makefile,v 1.2 2000/03/22 06:32:11 kuriyama Exp $ -# Original revision: 1.8 +# $FreeBSD: doc/ja_JP.eucJP/articles/Makefile,v 1.3 2000/08/28 21:35:36 hrs Exp $ +# Original revision: 1.9 #SUBDIR = committers-guide #SUBDIR+= dialup-firewall SUBDIR+= diskless-x +#SUBDIR+= freebsd-questions #SUBDIR+= fonts #SUBDIR+= formatting-media -#SUBDIR+= ipsec-must +SUBDIR+= ipsec-must #SUBDIR+= mh SUBDIR+= multi-os #SUBDIR+= new-users diff --git a/ja_JP.eucJP/articles/ipsec-must/Makefile b/ja_JP.eucJP/articles/ipsec-must/Makefile new file mode 100644 index 0000000000..b3d5165a7b --- /dev/null +++ b/ja_JP.eucJP/articles/ipsec-must/Makefile @@ -0,0 +1,17 @@ +# $FreeBSD$ +# Original revision: 1.1 + +DOC?= article + +DOCFORMAT= html + +FORMATS?= html + +INSTALL_COMPRESSED?=gz +INSTALL_ONLY_COMPRESSED?= + +SRCS= article.sgml + +DOC_PREFIX?= ${.CURDIR}/../../.. + +.include "${DOC_PREFIX}/share/mk/doc.project.mk" diff --git a/ja_JP.eucJP/articles/ipsec-must/article.sgml b/ja_JP.eucJP/articles/ipsec-must/article.sgml new file mode 100644 index 0000000000..85be9b017e --- /dev/null +++ b/ja_JP.eucJP/articles/ipsec-must/article.sgml @@ -0,0 +1,317 @@ +<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> +<!-- The FreeBSD Documentation Project --> +<!-- The FreeBSD Japanese Documentation Project --> +<!-- $FreeBSD$ --> +<!-- Original revision: 1.1 --> + +<html> + <head> + <title>FreeBSD �� IPSec ��ǽ����Ω���ڤ���ˤ�</title> + </head> + + <body text="#000000" bgcolor="#FFFFFF"> + + <h1>FreeBSD 3.0 �ˤ����� IPSec ��ǽ����Ω���ڤ���ˤ�</h1> + + <p align="center"><i>IPsec �ȡ��뤷����, + ���줬�������ư��Ƥ��뤫�ɤ���Ĵ�٤�ˤϤɤ��������ɤ��Ǥ��礦? + �����Ǥ�, IPsec ��ư��ڤ���¸�Ū����ˡ��Ҳ𤷤ޤ�.</i></p> + + <h2>����</h2> + + <p>�ޤ�, <a href="#Installing IPsec"><i>IPsec</i> + �����ȡ��뤵��Ƥ��뤳��</a>��������ä�ʤ�ޤ�. + IPsec ��<a href="#Caveat">�������ư��Ƥ���</a>���ɤ����Τ�ˤϤɤ��������ɤ��Ǥ��礦? + ����������꤬�ְ�äƤ���Хͥåȥ����³���Ԥʤ��ʤ��Ǥ��礦��, + ��³�Ǥ����Ȥ������Ȥ����꤬��äƤ��뤫���, �Ȥ���ǧ���ϴְ�äƤ��ޤ���. + ��³���֤� <i>Netstat</i> ���ޥ�ɤdzΤ���뤳�Ȥ��Ǥ��ޤ�. + ������, �������Ω���Ƹ��ڤ��뤳�Ȥϲ�ǽ�ʤΤǤ��礦��?</p> + + <h2>��</h2> + + <p>�ǽ��, �Ź�˴�Ϣ���뼡�Τ褦�ʾ���������ͤ��ޤ�.</p> + + <ol> + <li> + <p>�Ź沽���줿�ǡ�����, ���ͤ�ʬ�ۤ��Ƥ���. �Ĥޤ�, + �ƾ�����ܥ�Ϻ���Υ���ȥ��ԡ�����äƤ���.</p> + </li> + + <li> + <p>�̾�, ̤�����Υǡ����䰵�̤���Ƥ��ʤ��ǡ����Ͼ�Ĺ�Ǥ���. + �Ĥޤ�, �ƾ�����ܥ�Υ���ȥ��ԡ��Ϻ���ǤϤʤ�.</p> + </li> + </ol> + + <p>�ͥåȥ�������ե������������Ϥ���ǡ����Υ���ȥ��ԡ���¬��Ǥ���Ȳ��ꤹ���, + �ְŹ沽����Ƥ��ʤ��ǡ����פȡְŹ沽���줿�ǡ����פ�ξ�Ԥ�, + �㤤�뤳�Ȥ��Ǥ���Ϥ��Ǥ�. + ���Τ��Ȥ�, �ѥ��åȤΥ롼�ƥ����Ԥʤ�����ΰ��ֳ�¦�� IP �إå��ʤ�, + �ǡ����ΰ������ְŹ沽�⡼�ɡפǰŹ沽����ʤ��ä��Ȥ��Ƥ���Ω���ޤ�.</p> + + <h4><a name="MUST"></a>MUST</h4> + + <p>Ueli Maurer ��� "Universal Statistical Test for Random Bit Generators" + ("MUST") ��, ����ץ�ǡ����Υ���ȥ��ԡ����®��¬�ꤷ�ޤ�. + ����ˤϰ��̤��ɤ��������르�ꥺ�ब�Ȥ��Ƥ��ޤ�. + <a href="#Maurer's Universal Statistical Test"> + ʸ���˼����Τ�, ��ĤΥե��������Ϣ³����ǡ��� (���� 0.25 �ᥬ�Х���) + ��¬�ꤹ�륳���ɤǤ�.</a></p> + + <h4><a NAME="Tcpdump"></a>Tcpdump</h4> + + <p>���Ƽ���, �嵭�˲ä��ƥͥåȥ��������ǡ�������ª���뤿��μ��ʤ�ɬ�פˤʤ�ޤ�. + �����¸�����ץ�������, "<i>tcpdump</i>" �ȸƤФ���Τ�����ޤ�. + ������, tcpdump ��Ȥ��ˤ�, + <a href="#usr/src/sys/i386/conf/KERNELNAME">�����ͥ륳��ե����졼�����ե�����</a>�ˤ����� + bpf (<i>Berkeley Packet Filter</i>) + �����ե�������ͭ��������Ƥ��ʤ���Фʤ�ޤ���.</p> + + <p>���Υ��ޥ��</p> + + <blockquote><b>tcpdump</b> <b>-c</b> 4000 <b>-s</b> 10000 <b>-w</b> + <i>dumpfile.bin</i></blockquote> + + <p>��, 4000 �Ĥ����ѥ��åȤ���ª��, <i>dumpfile.bin</i> �˵�Ͽ���ޤ�. + ������ΤǤ� 10,000 �Х��Ȱʲ��Υѥ��åȤΤߵ�Ͽ����ޤ�.</p> + + <h2>�¸�</h2> + + <p>�Ǥ�, �¸����Ƥߤޤ��礦. + �ޤ�, IPsec �ۥ��Ȥ� IPsec + ��ȤäƤ��ʤ��ۥ��Ȥ�ξ���˥ͥåȥ����³���Ƥ�������.</p> + + <p>������<a href="#Tcpdump">�ѥ��åȤ���ª</a>�Ϥ��ޤ�.</p> + + <p>����, IPsec ��ȤäƤ�����³�� "yes" �Ȥ��� unix ���ޥ�ɤ�¹Ԥ��ޤ�. + �����, "y" �Ȥ���ʸ����Ϣ³�ǡ�������Ϥ����ΤǤ�. + ���Ф餯�����饳�ޥ�ɤ���ߤ���, IPsec + ��ȤäƤ��ʤ���³���Ф���Ʊ�����ޥ�ɤ�¹Ԥ��ޤ�. + �������, ���Ф餯�����饳�ޥ�ɤ���ߤ����Ƥ�������.</p> + + <p>������, <a href="#Maurer's Universal Statistical Test">MUST</a> + ����ª�����ѥ��åȤ˼¹Ԥ����, ���Τ褦�ʽ��Ϥ�������Ϥ��Ǥ�. + ������ǽ��פʤΤ�, ������ (7.18) ���Ф���, + IPsec ��Ȥä���³�� 93% (6.7), + �̾����³�� 29% (2.1) + �Ȥ�����̤ˤʤäƤ��뤳�ȤǤ�.</p> + + <pre>% tcpdump -c 4000 -s 10000 -w ipsecdemo.bin +% uliscan ipsecdemo.bin + +Uliscan 21 Dec 98 +L=8 256 258560 +Measuring file ipsecdemo.bin +Init done +Expected value for L=8 is 7.1836656 +6.9396 -------------------------------------------------------- +6.6177 ----------------------------------------------------- +6.4100 --------------------------------------------------- +2.1101 ----------------- +2.0838 ----------------- +2.0983 -----------------</pre> + + <h2><a NAME="Caveat"></a>����</h2> + + <p>���μ¸��ϰŹ沽�������������Ȥ���, IPsec + ��Ȥä��̿��Ǥ�<i>�Τ���</i>�ڥ���������Υǡ����˴ޤޤ�륷��ܥ��������Ψ��<i>���ͤ�</i>ʬ�ۤ���, + �Ȥ������Ȥ��Ƥ��ޤ�. + ������, �����Ǽ������¸��Ǥϥ����ƥ��η�� (����Τ��ɤ����Τ�ޤ���) + �Ф��뤳�Ȥ�<i>�Ǥ��ޤ���</i>. + �����Ǹ����ַ�١פȤ�, ���Ȥ��аŹ渰�������������, + �ǡ�����Ź渰��¾�ͤ˸����Ƥ��ʤ����ɤ����Ȥ��ä�����, + ���뤤�ϥ��르�ꥺ��ζ��٤Ϥɤ���, + �����ͥ�ΥС������Ϲ�äƤ��뤫�Ȥ��ä����ȤǤ�. + �����ϥ�������Ĵ�٤�гΤ���뤳�Ȥ��Ǥ��ޤ�.</p> + + <h2><a NAME="IPsec"></a>IPsec �����</h2> + + <p>�����ͥåȥץ��ȥ��� �������ƥ���ĥ + (Internet Protocol security extensions) �� + IP v4 �� IP v6 ��Ŭ�Ѥ���, IP v6 �ؤμ�����ɬ�ܤȤʤäƤ��ޤ�. + ���Υץ��ȥ���� IP (�ۥ��ȴ�) ��٥�ǰŹ沽��ǧ�ڤ�¸����뤿��Τ�ΤǤ�. + ���Ȥ��� SSL �ϰ�ĤΥ��ץꥱ��������å�, SSH �ϥ�������, + PGP ������Υե�������å������Τߤ��Ф��Ƥ��줾������������ޤ���, + IPsec �� 2 �ۥ��ȴ֤Τ��٤Ƥ��̿���Ź沽���ޤ�.</p> + + <h2><a NAME="Installing IPsec"></a>IPsec �Υ��ȡ���</h2> + + <p>�����Ǥ� FreeBSD 3.0 stable �����ꤷ�Ƥ��ޤ�.</p> + + <ol> + <li> + <p>IPsec v0.04 �ȡ��뤷��, + �����ͥ�ƹ��ۤȥ��ȡ����Ԥʤ�.</p> + </li> + + <li> + <p>�����ѤΥġ��� (���Ȥ��� <i>ipsecadm</i>) ��¹Ԥ�, + �Ź渰������ (�⤷���� <i>Photuris</i> ��ȤäƸ���) ����.</p> + </li> + + <li> + <p>�ͥåȥ����ϩ (<i>rt</i>) ��Ŭ�ڤ����ꤹ��.</p> + </li> + </ol> + + <p><i>ipsecadm</i> ����� <i>rt</i> ��¹Ԥ��� + IPsec �ȥ�ͥ���Ω���뤿��� "ipsec_setup" + ������ץȤ�������Ƥ��ɤ��Ǥ��礦. + ������ץȤ�, ��ư���� <i>/etc/rc.local</i> ���鼫ư�Ǽ¹Ԥ����뤳�Ȥ��Ǥ��ޤ�. + ipsec_setup �ǥȥ�ͥ���Ω����ˤ�, ���ʤ��Ȥ� 2 �Ĥ� + <i>ipsecadm</i> ���ޥ�ɤ�, 1 �Ĥ� + <i>rt</i> ���ޥ�ɤ��ޤޤ�Ƥ���ɬ�פ�����Ǥ��礦.</p> + + <h2><a NAME="KERNELNAME"></a>usr/src/sys/i386/conf/KERNELNAME</h2> + + <p>IPsec ��¹Ԥ���ˤ�, + �����ͥ륳��ե����졼�����ե�����˰ʲ��ιԤ��ޤޤ�Ƥ��ʤ���Фʤ�ޤ���. + �����ιԤ��ɲä��� <i>config</i> ��¹Ԥ�, + �����ͥ�κƹ��ۤȥ��ȡ����ԤʤäƤ�������.</p> + + <pre># The `bpfilter' pseudo-device enables the Berkeley Packet Filter. Be +# aware of the legal and administrative consequences of enabling this +# option. Heh heh. The number of devices determines the maximum number of +# simultaneous BPF clients programs runnable. +pseudo-device bpfilter 2 #Berkeley packet filter + +# IPSEC +options IPSEC +options "MD5" +pseudo-device enc 1</pre> + + <h2><a name="Maurer's Universal Statistical Test"></a>Maurer's Universal Statistical Test + (�֥��å������� = 8 �ӥå�)</h2> + + <pre><![ CDATA [/* + ULISCAN.c ---blocksize of 8 + + 1 Oct 98 + 1 Dec 98 + 21 Dec 98 uliscan.c derived from ueli8.c + + This version has // comments removed for Sun cc + + This implements Ueli M Maurer's "Universal Statistical Test for Random + Bit Generators" using L=8 + + Accepts a filename on the command line; writes its results, with other + info, to stdout. + + Handles input file exhaustion gracefully. + + Ref: J. Cryptology v 5 no 2, 1992 pp 89-105 + also on the web somewhere, which is where I found it. + + -David Honig + honig@sprynet.com + + Usage: + ULISCAN filename + outputs to stdout +*/ + +#define L 8 +#define V (1<<L) +#define Q (10*V) +#define K (100 *Q) +#define MAXSAMP (Q + K) + +#include <stdio.h> +#include <math.h> + +int main(argc, argv) +int argc; +char **argv; +{ + FILE *fptr; + int i,j; + int b, c; + int table[V]; + double sum = 0.0; + int iproduct = 1; + int run; + + extern double log(/* double x */); + + printf("Uliscan 21 Dec 98 \nL=%d %d %d \n", L, V, MAXSAMP); + + if (argc < 2) { + printf("Usage: Uliscan filename\n"); + exit(-1); + } else { + printf("Measuring file %s\n", argv[1]); + } + + fptr = fopen(argv[1],"rb"); + + if (fptr == NULL) { + printf("Can't find %s\n", argv[1]); + exit(-1); + } + + for (i = 0; i < V; i++) { + table[i] = 0; + } + + for (i = 0; i < Q; i++) { + b = fgetc(fptr); + table[b] = i; + } + + printf("Init done\n"); + + printf("Expected value for L=8 is 7.1836656\n"); + + run = 1; + + while (run) { + sum = 0.0; + iproduct = 1; + + if (run) + for (i = Q; run && i < Q + K; i++) { + j = i; + b = fgetc(fptr); + + if (b < 0) + run = 0; + + if (run) { + if (table[b] > j) + j += K; + + sum += log((double)(j-table[b])); + + table[b] = i; + } + } + + if (!run) + printf("Premature end of file; read %d blocks.\n", i - Q); + + sum = (sum/((double)(i - Q))) / log(2.0); + printf("%4.4f ", sum); + + for (i = 0; i < (int)(sum*8.0 + 0.50); i++) + printf("-"); + + printf("\n"); + + /* refill initial table */ + if (0) { + for (i = 0; i < Q; i++) { + b = fgetc(fptr); + if (b < 0) { + run = 0; + } else { + table[b] = i; + } + } + } + } +}]]></pre> + </body> +</html> + +