コメントスパム対策のため、特定メールアドレスの入った突っ込みをお断りしています。
La Fonera をFreeWLAN化しちまいました。
というところで躓きましたが、ブリッジ化しつつ Public → Private/WAN の封鎖が出来ます（一応確認済）。しかもWebインターフェイスから簡単に出来るのがすばらしい。
あとは
といったところです。
以前に書いたように、必要なポートだけを空けるようにしてみました。Public -> 有線のフィルタ設定は /etc/firewall.fon にある NET_ACCESS チェインで行います。Webインターフェイスからは出来ないので、詳しい人専用ってことで。
# allow regular wan traffic
[ -z "$WAN" ] || {
# Added by Yuzo (start)
iptables -A NET_ACCESS -p tcp -m multiport --dports 22,80,110,123,143,443,500,587,1723,1812,4500,6667 -j ACCEPT
iptables -A NET_ACCESS -p udp -m multiport --dports 22,80,110,123,143,443,500,587,1723,1812,4500,6667 -j ACCEPT
iptables -A NET_ACCESS -o $WAN -j DROP
# Added by Yuzo (end)
# iptables -A NET_ACCESS -o "$WAN" -j ACCEPT
iptables -A NET_ACCESS -i "$WAN" -j ACCEPT
}
FreeWLAN化 した La Fonera であれば、認証無しで Public 側から接続可能なサイトを追加できます（Webインターフェイスの Advanced→Additional Hostnames）。 86420ポート関連をみた感じでは
192.195.204.0/24 207.38.11.0/24
辺りを加えておけば大丈夫そうですが、QMADS Wikiを見ると
209.67.106.140 210.147.8.145 210.249.144.241 210.249.145.181
も必要だそうです。そのへんは自己判断でどーぞ。
なお、Public からの接続制御を行っている場合は、NET_ACCESS チェインに通しの設定を加える必要があります。変更するファイルは /etc/firewall.fon。先と同様、詳しい人専用です。
# allow regular wan traffic
[ -z "$WAN" ] || {
# Added by Yuzo (start)
iptables -A NET_ACCESS -p tcp -m multiport --dports 22,80,110,123,143,443,500,587,1723,1812,4500,6667 -j ACCEPT
iptables -A NET_ACCESS -p udp -m multiport --dports 22,80,110,123,143,443,500,587,1723,1812,4500,6667 -j ACCEPT
iptables -A NET_ACCESS --dst 207.38.11.0/24 -j ACCEPT # for Nintendo DS Wi-Fi
iptables -A NET_ACCESS --dst 192.195.204.0/24 -j ACCEPT # for Nintendo DS Wi-Fi
iptables -A NET_ACCESS -o "$WAN" -j DROP
# Added by Yuzo (end)
# iptables -A NET_ACCESS -o "$WAN" -j ACCEPT
iptables -A NET_ACCESS -i "$WAN" -j ACCEPT
}一応これで QMADS のゲーム内から FON_FREE_INTERNET（旧 FON_AP）に繋いで Wi-Fi 接続まで出来ました。
IPアドレスが取得出来ない場合（エラーコード 52000）は、DSLite側でIP等の設定を入れてやると上手くいきます。
La Fonera に FreeWLAN を導入することで、DS/DSLite から公開側アクセスポイント（FON_FREE_INTERNET）経由で Wi-Fi 接続出来るようにしました。
これにより家庭内アクセスポイント（MyPlace）の暗号化方式を WEP に落とす必要が無くなり WPA/WPA2 を使うことが出来るため、セキュリティを強固にできます。
とはいえ、新しい Nintendo DSi ならWPA2まで対応していますから、ここに書いたノウハウも過去のものになりそうですけどね。
と思ったら、従来のソフトではWPA使えないそうです。OSIで切り分けて無いのかよ、ヘコいな……
削除http://payday.aspeoc.com/fast-cash-for-house.html fast cash for house http://payday.freshbasilcrew.com/high-risk-personal-loans.html high risk personal loans
削除http://cialis.shreveport-bossierfilms.com/where-can-i-buy-cialis-online.html where can i buy cialis online in Albers IL 62215 Illinois
削除http://in7drugs.map-reading.com/cheapest-way-to-get-synthroid.html cheapest way to get synthroid in Dixie KY 41017 Kentucky
http://www.cialisltd.com/#jl4cvb.sakura.ne.jp - cialis http://www.cialisltd.com/#jl4cvb.sakura.ne.jp - cialis fast <br><a href=http://www.cialisltd.com/#jl4cvb.sakura.ne.jp>buy cialis</a>
http://site.ru - http://site.ru - site site <br><a href=http://site.ru>site</a>
http://www.propecianorxpharmacy.com/buy-propecia.html - http://www.propecianorxpharmacy.com/buy-propecia.html - buying propecia buy propecia <br><a href=http://www.propecianorxpharmacy.com/buy-propecia.html>propecia buy</a>
削除http://payday-loans.visiondivision.com/i-need-money-that's-what-i-want.html i need money that's what i want http://payday-loans.bethjacobirvine.net/coods-need-cash.html coods need cash
削除http://payday.vidol.gov/quick-student-loans.html quick student loans http://in5drugs.cos-medica.com/where-can-i-buy-eriacta.html Where can i buy eriacta?
削除http://payday.moremarrowdonors.org/need-money-today-uk.html need money today uk http://payday.kombajn.org/payday-loans-national-cash.html payday loans national cash
削除http://payday.gokhiel.com/paydayloan-in.html paydayloan in http://payday.novavista.org/bad-credit-online-personal-loans.html bad credit online personal loans
http://www.maps.google.com/ - http://www.wikipedia.org/ - wiki <br><a href=http://mail.ru/>mail</a>
Many customers who refuse to settle their loans are sued in small claim's courts, which could be a costly and time-consuming ordeal. For example, its Jaguar XF, Range Rover Evoque and Range Rover Sport have sold well http://www.tankchippaydayloans.co.uk/ - payday loans this mostly effects people that have smaller home loan balances. This includes a lttle bit higher rate of interest as in comparison to secured loans. The bottom fifteen are a great deal poorer, though the bottom 70 percent hold the same vulnerability <a href="http://www.tankchippaydayloans.co.uk/">payday loan</a> initially the loans are first used by agricultural use but afterwards even non agricultural businesses can benefit from the loan. Keep reading for five main reasons why a pay day loan may not be worth the danger. Refining is often a quite normal selection for mortgage landing companies because the value of property has bee getting larger and especially down http://www.tankchippaydayloans.co.uk/ with us you're sure to savor each of the advantages related with small loans for instant quotes for personal loans despite your low credit score standing.
You get yourself a full 100 days to pay the loan back this also means it will be much easier on your finances. Therefore people who have amount overdue, insolvency, CCJ s, and belatedly payments can now improve their recognition image on making habitual outgoings with alleviate http://paydaymudbutter.co.uk/ - payday loans wade sees his company as providing a unique service, an opportunity for "men and ladies coping with tough economic times to afford college. The customer then has to make a payment in advance equaling four monthly obligations, or about 20% with the car's value. We've now updated the Matrix for that first quarter of 2010 <a href="http://paydaymudbutter.co.uk/">payday loan</a> in this you've got to submit less paper which just isn't whatsoever time consuming. Must be loan could have a great deal of concealed charges for example interestcommitments and financing costs, lots of individuals often don't utilize for starters until it might be essential. However, some companies extend this period for one more charge http://paydaymudbutter.co.uk/ these incentives provide payments to borrowers and lenders alike, to boost the amount of approved loan modifications while encouraging a reliable economy.
Documents associated with the loan need not be even sent by fax to the lender. Department of Veteran Affairs are generally known as Veterans Administration Home Loans http://mootimepayaylaons.tripod.co.uk - payday loan it is linked with much higher rate appealing which will not be a deterrent to borrowing funds through this as it really is paid back over a short time. It offers an ample amount of assurance for the lender about your repayments being consistent. Furthermore, it may be that the finances can not be supportive for fulfilling all needs <a href="http://mootimepayaylaons.tripod.co.uk">payday loan</a> in order to perform this you will need to prove absolutely the necessity and also the capacity to give the loan back. While there was clearly no immediate claim of responsibility, the attack came a next day a Human Rights Watch report accused Taliban militants of committing war crimes by targeting civilians. This means all interests accruing to this particular portion with the student's loan will be added to the total volume of deferred loan to become paid with the student, half a year after his graduation from college http://mootimepayaylaons.tripod.co.uk this is possible whenever the claimant offers to sell the policy to your buyer, an independent broker or an economic agency.
The main risk with Cash Store Australia is regulatory risk. Because with the prevailing tight competition, the applicants can even bargain in the interest charges http://paydayloansguy.blog.co.uk/ - pay day loans these are banking accounts designed for those unable to open regular banks. We'll help using the best program to suit your goals. Also be sure to know how this may affect your payment per month <a href="http://paydayloansguy.blog.co.uk/">instant payday loans</a> also, lenders are able to ascertain your financial capacity. Jennifer goes on to tell the Judge that Chasity called DCS on her and so they were required to come out and appearance on her behalf home. The borrower can also get every one of the important things about Payday text loans and thus in the faster mode while using aid of online http://paydayloansguy.blog.co.uk/ in fact, there is certainly more offline scams you can also find online ones.