rtls0

sppptun
plugin pppoe.so
connect "/usr/lib/inet/pppoec rtls0"
noccp
noauth
user **********(ISPのログインID)
password **********(同パスワード)
noipdefault
defaultroute
# ISPからDNS情報を参照する、/etc/ppp/resolv.confが作られる、
usepeerdns
persist
#接続のリトライを無制限に
maxfail 0
#6回連続してLCP Echo-Reply が返ってこなかった場合に再接続
lcp-echo-failure 6
#LCP Echo-Requestsを30秒毎にpeerへ送信
lcp-echo-interval 30

#!/bin/sh
if [ -f /var/run/sppp0.pid ]; then
        if /usr/bin/pgrep -x -u 0 pppd > /dev/null 2>&1; then
                echo "pppd is already running"
                exit 0
        fi
else
        /usr/bin/pppd updetach call wakwak
        echo "pppd starting"
fi

#       if [ -f $PPPDIR/demand ]; then
#               . $PPPDIR/demand
#       fi
#
#        ↓この3行を'start')最後、つまり'stop')の上の行に移動


       if [ -f $PPPDIR/demand ]; then
                . $PPPDIR/demand
        fi
        ;;

'stop')
       trap ':' 15 # ←追加 シグナル15(TERM)をトラップする
        /usr/bin/pkill -x pppd
        sleep 1
        trap 15 # ←追加 シグナル15(TERM)をデフォルト動作に戻す
        /usr/bin/pkill -x pppoed

# 不正なIPパケットをすべて拒否
block in quick from any to any with short
block in quick from any to any with ipopts

# 外部に出入りするパケットは基本的にすべて拒否し、headによりグループ化
block in quick on sppp0 all head 100
block out quick on sppp0 all head 150

# 内部のよりのパケットはすべて通す
pass in quick on iprb0 all
pass out quick on iprb0 all

# 偽造IP、マルチキャストなどを破棄
block in quick on sppp0 from 192.168.0.0/16 to any group 100
block in quick on sppp0 from 172.16.0.0/12 to any group 100
block in quick on sppp0 from 10.0.0.0/8 to any group 100
block in quick on sppp0 from 127.0.0.0/8 to any group 100
block in quick on sppp0 from 0.0.0.0/8 to any group 100
block in quick on sppp0 from 169.254.0.0/16 to any group 100
block in quick on sppp0 from 192.0.2.0/24 to any group 100
block in quick on sppp0 from 204.152.64.0/23 to any group 100
block in quick on sppp0 from 224.0.0.0/3 to any group 100

# 内部から外部に出て行くパケット、戻りのパケットを許可
pass out quick proto icmp from any to any keep state group 150
pass out quick proto udp from any to any keep state group 150
pass out quick proto tcp from any to any flags S keep state group 150

# ファイヤーウォールに穴をあける
pass in quick proto tcp from any to any port = 25 flags S/SA keep state group 100
pass in quick proto tcp from any to any port = 80 flags S/SA keep state group 100
pass in quick proto tcp from any to any port = 53 flags S/SA keep state group 100
pass in quick proto udp from any to any port = 53 group 100

# その他の外部よりの接続はすべて拒否しログに記録
block in log quick proto tcp all group 100
block in log quick proto udp all group 100
block in log quick proto icmp all group 100

# アドレスマッピング設定(ftp RealPlayeのプロキシ設定)
map sppp0 192.168.1.0/24 -> xxx.xxx.xxx.xxx/32 proxy port ftp ftp/tcp
map sppp0 192.168.1.0/24 -> xxx.xxx.xxx.xxx/32 proxy port 7070 raudio/tcp
map sppp0 192.168.1.0/24 -> xxx.xxx.xxx.xxx/32 portmap tcp/udp 10000:65000
map sppp0 192.168.1.0/24 -> xxx.xxx.xxx.xxx/32

# ポート80向きのパケットを宛て先変換
rdr sppp0 xxx.xxx.xxx.xxx/32 port 25 -> 192.168.1.2 port 25
rdr sppp0 xxx.xxx.xxx.xxx/32 port 80 -> 192.168.1.2 port 80

#!/bin/sh
#
###ここは環境に合わせる###
HOST1=xxx.xxx.xxx.1
HOST2=xxx.xxx.xxx.2
HOST3=xxx.xxx.xxx.3
LOGFILE=/var/log/pppd.log
##########################
#
TIME=`/usr/bin/date '+%b %e %T'`
#
if /usr/sbin/ping $HOST1 | /usr/bin/grep alive >/dev/null 2>&1
then
    echo "$TIME $HOST1 is alive" >>$LOGFILE
else
    sleep 5
    if /usr/sbin/ping $HOST2 | /usr/bin/grep alive >/dev/null 2>&1
    then
        echo "$TIME $HOST2 is alive" >>$LOGFILE
    else
        sleep 5
        if /usr/sbin/ping $HOST3 | /usr/bin/grep alive >/dev/null 2>&1
        then
            echo "$TIME $HOST3 is alive" >>$LOGFILE
        else
            echo "$TIME pppd session is closed" >>$LOGFILE
            /etc/init.d/pppd stop
            sleep 1
            /etc/init.d/pppd start
            echo "$TIME pppd session is opened" >>$LOGFILE
            /etc/init.d/ipfboot reload >/dev/null 2>&1
        exit 1
        fi
    fi
fi

0,10,20,30,40,50 * * * * /etc/ppp/redemand