Модератор: terminus
Понял.Гость писал(а):судя по всему упало в BPFтак что переходите на нетфлов
Код: Выделить всё
set netflow hook number Использовать ng_netflow(4) node's hooks начиная с определенного номера.Код: Выделить всё
uname -a
FreeBSD reserve 8.0-RELEASE FreeBSD 8.0-RELEASE #1: Mon Apr 26 17:19:06 UTC 2010 root@reserve:/usr/obj/usr/src/sys/GENERIC i386
Код: Выделить всё
kernel trap 12 with interrupts disabled
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0xfffffff5
fault code = supervisor read, page not present
instruction pointer = 0x20:0xc089d238
stack pointer = 0x28:0xc2f20b20
frame pointer = 0x28:0x1
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = resume, IOPL = 0
current process = 11 (idle: cpu0)
trap number = 12
panic: page fault
cpuid = 0
Uptime: 38m11s
Physical memory: 498 MB
Dumping 45 MB: 30 14
Reading symbols from /boot/kernel/linux.ko...Reading symbols from /boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
#0 doadump () at pcpu.h:246
246 __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt
#0 doadump () at pcpu.h:246
#1 0xc087cf67 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:416
#2 0xc087d259 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:579
#3 0xc0bae64c in trap_fatal (frame=0xc2f20ae0, eva=4294967285)
at /usr/src/sys/i386/i386/trap.c:933
#4 0xc0baf000 in trap (frame=0xc2f20ae0) at /usr/src/sys/i386/i386/trap.c:323
#5 0xc0b91aab in calltrap () at /usr/src/sys/i386/i386/exception.s:165
#6 0xc089d238 in tdq_notify (tdq=0xc0d9e580, td=0xc2f10000)
at /usr/src/sys/kern/sched_ule.c:968
Previous frame inner to this frame (corrupt stack?)
это я проверял - без толку ....manefesto писал(а):пока зеркало не заребилдиться. никому не давай туда писать
Код: Выделить всё
Jan 23 02:43:50 video syslogd: kernel boot file is /boot/kernel/kernel
Jan 23 02:43:50 video kernel:
Jan 23 02:43:50 video kernel:
Jan 23 02:43:50 video kernel: Fatal trap 12: page fault while in kernel mode
Jan 23 02:43:50 video kernel: cpuid = 0; apic id = 00
Jan 23 02:43:50 video kernel: fault virtual address = 0xc
Jan 23 02:43:50 video kernel: fault code = supervisor read, page not present
Jan 23 02:43:50 video kernel: instruction pointer = 0x20:0xc099eb61
Jan 23 02:43:50 video kernel: stack pointer = 0x28:0xe52a53d4
Jan 23 02:43:50 video kernel: frame pointer = 0x28:0xe52a5498
Jan 23 02:43:50 video kernel: code segment = base 0x0, limit 0xfffff, type 0x1b
Jan 23 02:43:50 video kernel: = DPL 0, pres 1, def32 1, gran 1
Jan 23 02:43:50 video kernel: processor eflags = interrupt enabled, resume, IOPL = 0
Jan 23 02:43:50 video kernel: current process = 12 (irq23: vr0 uhci0+)
Jan 23 02:43:50 video kernel: trap number = 12
Jan 23 02:43:50 video kernel: panic: page fault
Jan 23 02:43:50 video kernel: cpuid = 0
Jan 23 02:43:50 video kernel: KDB: stack backtrace:
Jan 23 02:43:50 video kernel: #0 0xc07ec810 at kdb_backtrace+0x50
Jan 23 02:43:50 video kernel: #1 0xc07b1932 at panic+0x152
Jan 23 02:43:50 video kernel: #2 0xc0aa91d2 at trap_fatal+0x262
Jan 23 02:43:50 video kernel: #3 0xc0aa94cd at trap_pfault+0x1bd
Jan 23 02:43:50 video kernel: #4 0xc0aaa7f6 at trap+0x4a6
Jan 23 02:43:50 video kernel: #5 0xc0a92f3c at calltrap+0x6
Jan 23 02:43:50 video kernel: #6 0xc09a3bc9 at ipfw_check_hook+0x119
Jan 23 02:43:50 video kernel: #7 0xc088ff18 at pfil_run_hooks+0x98
Jan 23 02:43:50 video kernel: #8 0xc090a609 at ip_input+0x289
Jan 23 02:43:50 video kernel: #9 0xc088f128 at netisr_dispatch_src+0x1d8
Jan 23 02:43:50 video kernel: #10 0xc088f290 at netisr_dispatch+0x20
Jan 23 02:43:50 video kernel: #11 0xc08e328d at ng_iface_rcvdata+0x10d
Jan 23 02:43:50 video kernel: #12 0xc08e029e at ng_apply_item+0x1be
Jan 23 02:43:50 video kernel: #13 0xc08df3c8 at ng_snd_item+0x318
Jan 23 02:43:50 video kernel: #14 0xc08e9e40 at ng_ppp_proto_recv+0xd0
Jan 23 02:43:50 video kernel: #15 0xc08ec5d9 at ng_ppp_rcvdata+0x269
Jan 23 02:43:50 video kernel: #16 0xc08e029e at ng_apply_item+0x1be
Jan 23 02:43:50 video kernel: Copyright (c) 1992-2013 The FreeBSD Project.
Jan 23 02:43:50 video kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
Jan 23 02:43:50 video kernel: The Regents of the University of California. All rights reserved.
Jan 23 02:43:50 video kernel: FreeBSD is a registered trademark of The FreeBSD Foundation.
Jan 23 02:43:50 video kernel: FreeBSD 9.2-RELEASE #0: Fri Jan 16 22:56:56 MSK 2015
Jan 23 02:43:50 video kernel: root@video:/usr/obj/usr/src/sys/ROUTER3.0 i386
Jan 23 02:43:50 video kernel: gcc version 4.2.1 20070831 patched [FreeBSD]
Jan 23 02:43:50 video kernel: CPU: Intel(R) Celeron(R) CPU 430 @ 1.80GHz (1800.03-MHz 686-class CPU)
Jan 23 02:43:50 video kernel: Origin = "GenuineIntel" Id = 0x10661 Family = 0x6 Model = 0x16 Stepping = 1
Jan 23 02:43:50 video kernel: Features=0xafebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
Jan 23 02:43:50 video kernel: Features2=0xe31d<SSE3,DTES64,MON,DS_CPL,TM2,SSSE3,CX16,xTPR,PDCM>
Jan 23 02:43:50 video kernel: AMD Features=0x20100000<NX,LM>
Jan 23 02:43:50 video kernel: AMD Features2=0x1<LAHF>
Jan 23 02:43:50 video kernel: TSC: P-state invariant, performance statistics
Jan 23 02:43:50 video kernel: real memory = 1073741824 (1024 MB)
Jan 23 02:43:50 video kernel: avail memory = 1026789376 (979 MB)
Jan 23 02:43:50 video kernel: Event timer "LAPIC" quality 400
Jan 23 02:43:50 video kernel: ACPI APIC Table: <A_M_I_ OEMAPIC >
Jan 23 02:43:50 video kernel: ioapic0 <Version 2.0> irqs 0-23 on motherboard
Jan 23 02:43:50 video kernel: wlan: mac acl policy registered
Jan 23 02:43:50 video kernel: bktr_mem: memory holder loaded
Jan 23 02:43:50 video kernel: kbd1 at kbdmux0
Jan 23 02:43:50 video kernel: acpi0: <A_M_I_ OEMRSDT> on motherboard
Jan 23 02:43:50 video kernel: acpi0: Power Button (fixed)
Jan 23 02:43:50 video kernel: acpi0: reservation of 0, a0000 (3) failed
Jan 23 02:43:50 video kernel: acpi0: reservation of 100000, 3f600000 (3) failed
Jan 23 02:43:50 video kernel: cpu0: <ACPI CPU> on acpi0
Jan 23 02:43:50 video kernel: attimer0: <AT timer> port 0x40-0x43 irq 0 on acpi0
Jan 23 02:43:50 video kernel: Timecounter "i8254" frequency 1193182 Hz quality 0
Jan 23 02:43:50 video kernel: Event timer "i8254" frequency 1193182 Hz quality 100
Jan 23 02:43:50 video kernel: atrtc0: <AT realtime clock> port 0x70-0x71 irq 8 on acpi0
Jan 23 02:43:50 video kernel: Event timer "RTC" frequency 32768 Hz quality 0
Jan 23 02:43:50 video kernel: hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0
Jan 23 02:43:50 video kernel: Timecounter "HPET" frequency 14318180 Hz quality 950
Jan 23 02:43:50 video kernel: Event timer "HPET" frequency 14318180 Hz quality 450
Jan 23 02:43:50 video kernel: Event timer "HPET1" frequency 14318180 Hz quality 440
Jan 23 02:43:50 video kernel: Event timer "HPET2" frequency 14318180 Hz quality 440
Jan 23 02:43:50 video kernel: Timecounter "ACPI-fast" frequency 3579545 Hz quality 900
Jan 23 02:43:50 video kernel: acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0
Jan 23 02:43:50 video kernel: pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
Jan 23 02:43:50 video kernel: pci0: <ACPI PCI bus> on pcib0
Jan 23 02:43:50 video kernel: vgapci0: <VGA-compatible display> port 0xcc00-0xcc07 mem 0xfe980000-0xfe9fffff,0xe0000000-0xefffffff,0xfe800000-0xfe8fffff irq 16 at device 2.0 on pci0
Jan 23 02:43:50 video kernel: agp0: <Intel G33 SVGA controller> on vgapci0
Jan 23 02:43:50 video kernel: agp0: aperture size is 256M, detected 7164k stolen memory
Jan 23 02:43:50 video kernel: hdac0: <Intel 82801G HDA Controller> mem 0xfe978000-0xfe97bfff irq 16 at device 27.0 on pci0
Jan 23 02:43:50 video kernel: pcib1: <ACPI PCI-PCI bridge> irq 16 at device 28.0 on pci0
Jan 23 02:43:50 video kernel: pci2: <ACPI PCI bus> on pcib1
Jan 23 02:43:50 video kernel: pcib2: <ACPI PCI-PCI bridge> irq 17 at device 28.1 on pci0
Jan 23 02:43:50 video kernel: pci1: <ACPI PCI bus> on pcib2
Jan 23 02:43:50 video kernel: re0: <RealTek 810xE PCIe 10/100baseTX> port 0xd800-0xd8ff mem 0xfeaff000-0xfeafffff irq 17 at device 0.0 on pci1
Jan 23 02:43:50 video kernel: re0: Using 1 MSI message
Jan 23 02:43:50 video kernel: re0: Chip rev. 0x34000000
Jan 23 02:43:50 video kernel: re0: MAC rev. 0x00000000
Jan 23 02:43:50 video kernel: miibus0: <MII bus> on re0
Jan 23 02:43:50 video kernel: rlphy0: <RTL8201L 10/100 media interface> PHY 1 on miibus0
Jan 23 02:43:50 video kernel: rlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto, auto-flow
Jan 23 02:43:50 video kernel: re0: Ethernet address: 00:26:18:e7:2e:2d
Jan 23 02:43:50 video kernel: uhci0: <Intel 82801G (ICH7) USB controller USB-A> port 0xc400-0xc41f irq 23 at device 29.0 on pci0
Jan 23 02:43:50 video kernel: usbus0 on uhci0
Jan 23 02:43:50 video kernel: uhci1: <Intel 82801G (ICH7) USB controller USB-B> port 0xc480-0xc49f irq 19 at device 29.1 on pci0
Jan 23 02:43:50 video kernel: usbus1 on uhci1
Jan 23 02:43:50 video kernel: uhci2: <Intel 82801G (ICH7) USB controller USB-C> port 0xc800-0xc81f irq 18 at device 29.2 on pci0
Jan 23 02:43:50 video kernel: usbus2 on uhci2
Jan 23 02:43:50 video kernel: uhci3: <Intel 82801G (ICH7) USB controller USB-D> port 0xc880-0xc89f irq 16 at device 29.3 on pci0
Jan 23 02:43:50 video kernel: usbus3 on uhci3
Jan 23 02:43:50 video kernel: ehci0: <Intel 82801GB/R (ICH7) USB 2.0 controller> mem 0xfe977c00-0xfe977fff irq 23 at device 29.7 on pci0
Jan 23 02:43:50 video kernel: usbus4: EHCI version 1.0
Jan 23 02:43:50 video kernel: usbus4 on ehci0
Jan 23 02:43:50 video kernel: pcib3: <ACPI PCI-PCI bridge> at device 30.0 on pci0
Jan 23 02:43:50 video kernel: pci3: <ACPI PCI bus> on pcib3
Jan 23 02:43:50 video kernel: vr0: <VIA VT6105 Rhine III 10/100BaseTX> port 0xe800-0xe8ff mem 0xfebffc00-0xfebffcff irq 23 at device 1.0 on pci3
Jan 23 02:43:50 video kernel: vr0: Quirks: 0x0
Jan 23 02:43:50 video kernel: vr0: Revision: 0x86
Jan 23 02:43:50 video kernel: miibus1: <MII bus> on vr0
Jan 23 02:43:50 video kernel: ukphy0: <Generic IEEE 802.3u media interface> PHY 1 on miibus1
Jan 23 02:43:50 video kernel: ukphy0: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto, auto-flow
Jan 23 02:43:50 video kernel: vr0: Ethernet address: 00:0d:88:4f:c9:39
Jan 23 02:43:50 video kernel: isab0: <PCI-ISA bridge> at device 31.0 on pci0
Jan 23 02:43:50 video kernel: isa0: <ISA bus> on isab0
Jan 23 02:43:50 video kernel: atapci0: <Intel ICH7 UDMA100 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xffa0-0xffaf at device 31.1 on pci0
Jan 23 02:43:50 video kernel: ata0: <ATA channel> at channel 0 on atapci0
Jan 23 02:43:50 video kernel: atapci1: <Intel ICH7 SATA300 controller> port 0xc080-0xc087,0xc000-0xc003,0xbc00-0xbc07,0xb880-0xb883,0xb800-0xb80f irq 19 at device 31.2 on pci0
Jan 23 02:43:50 video kernel: ata2: <ATA channel> at channel 0 on atapci1
Jan 23 02:43:50 video kernel: ata3: <ATA channel> at channel 1 on atapci1
Jan 23 02:43:50 video kernel: pci0: <serial bus, SMBus> at device 31.3 (no driver attached)
Jan 23 02:43:50 video kernel: acpi_button0: <Power Button> on acpi0
Jan 23 02:43:50 video kernel: uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
Jan 23 02:43:50 video kernel: pmtimer0 on isa0
Jan 23 02:43:50 video kernel: sc0: <System console> at flags 0x100 on isa0
Jan 23 02:43:50 video kernel: sc0: VGA <16 virtual consoles, flags=0x300>
Jan 23 02:43:50 video kernel: vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Jan 23 02:43:50 video kernel: atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
Jan 23 02:43:50 video kernel: atkbd0: <AT Keyboard> irq 1 on atkbdc0
Jan 23 02:43:50 video kernel: kbd0 at atkbd0
Jan 23 02:43:50 video kernel: atkbd0: [GIANT-LOCKED]
Jan 23 02:43:50 video kernel: ppc0: parallel port not found.
Jan 23 02:43:50 video kernel: p4tcc0: <CPU Frequency Thermal Control> on cpu0
Jan 23 02:43:50 video kernel: Timecounters tick every 1.000 msec
Jan 23 02:43:50 video kernel: ipfw2 initialized, divert enabled, nat enabled, default to deny, logging disabled
Jan 23 02:43:50 video kernel: DUMMYNET 0 with IPv6 initialized (100409)
Jan 23 02:43:50 video kernel: load_dn_sched dn_sched FIFO loaded
Jan 23 02:43:50 video kernel: load_dn_sched dn_sched PRIO loaded
Jan 23 02:43:50 video kernel: load_dn_sched dn_sched QFQ loaded
Jan 23 02:43:50 video kernel: load_dn_sched dn_sched RR loaded
Jan 23 02:43:50 video kernel: load_dn_sched dn_sched WF2Q+ loaded
Jan 23 02:43:50 video kernel: hdacc0: <VIA VT1708S_4 HDA CODEC> at cad 0 on hdac0
Jan 23 02:43:50 video kernel: hdaa0: <VIA VT1708S_4 Audio Function Group> at nid 1 on hdacc0
Jan 23 02:43:50 video kernel: pcm0: <VIA VT1708S_4 (Analog 2.0+HP/2.0)> at nid 28,29 and 26,30,27 on hdaa0
Jan 23 02:43:50 video kernel: usbus0: 12Mbps Full Speed USB v1.0
Jan 23 02:43:50 video kernel: usbus1: 12Mbps Full Speed USB v1.0
Jan 23 02:43:50 video kernel: usbus2: 12Mbps Full Speed USB v1.0
Jan 23 02:43:50 video kernel: usbus3: 12Mbps Full Speed USB v1.0
Jan 23 02:43:50 video kernel: usbus4: 480Mbps High Speed USB v2.0
Jan 23 02:43:50 video kernel: ugen0.1: <Intel> at usbus0
Jan 23 02:43:50 video kernel: uhub0: <Intel UHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus0
Jan 23 02:43:50 video kernel: ugen1.1: <Intel> at usbus1
Jan 23 02:43:50 video kernel: uhub1: <Intel UHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus1
Jan 23 02:43:50 video kernel: ugen2.1: <Intel> at usbus2
Jan 23 02:43:50 video kernel: uhub2: <Intel UHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus2
Jan 23 02:43:50 video kernel: ugen3.1: <Intel> at usbus3
Jan 23 02:43:50 video kernel: uhub3: <Intel UHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus3
Jan 23 02:43:50 video kernel: ugen4.1: <Intel> at usbus4
Jan 23 02:43:50 video kernel: uhub4: <Intel EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus4
Jan 23 02:43:50 video kernel: uhub0: 2 ports with 2 removable, self powered
Jan 23 02:43:50 video kernel: uhub1: 2 ports with 2 removable, self powered
Jan 23 02:43:50 video kernel: uhub2: 2 ports with 2 removable, self powered
Jan 23 02:43:50 video kernel: uhub3: 2 ports with 2 removable, self powered
Jan 23 02:43:50 video kernel: ada0 at ata2 bus 0 scbus1 target 0 lun 0
Jan 23 02:43:50 video kernel: ada0: <MAXTOR STM380811AS 3.AAE> ATA-7 SATA 2.x device
Jan 23 02:43:50 video kernel: ada0: 150.000MB/s transfers (SATA, UDMA5, PIO 8192bytes)
Jan 23 02:43:50 video kernel: ada0: 76319MB (156301488 512 byte sectors: 16H 63S/T 16383C)
Jan 23 02:43:50 video kernel: ada0: Previously was known as ad4
Jan 23 02:43:50 video kernel: Timecounter "TSC" frequency 1800034488 Hz quality 1000
Jan 23 02:43:50 video kernel: Root mount waiting for: usbus4
Jan 23 02:43:50 video kernel: Root mount waiting for: usbus4
Jan 23 02:43:50 video kernel: uhub4: 8 ports with 8 removable, self powered
Jan 23 02:43:50 video kernel: Trying to mount root from ufs:/dev/ada0a [rw]...
Jan 23 02:43:50 video kernel: WARNING: / was not properly dismounted
Jan 23 02:43:51 video kernel: re0: link state changed to UP
Jan 23 02:43:51 video named[879]: starting BIND 9.8.4-P2 -t /var/named -u bind
Jan 23 02:43:51 video named[879]: built with '--prefix=/usr' '--infodir=/usr/share/info' '--mandir=/usr/share/man' '--enable-threads' '--enable-getifaddrs' '--disable-linux-caps' '--with-openssl=/usr' '--with-randomdev=/dev/random' '--without-idn' '--without-libxml2'
Jan 23 02:43:51 video named[879]: ----------------------------------------------------
Jan 23 02:43:51 video named[879]: BIND 9 is maintained by Internet Systems Consortium,
Jan 23 02:43:51 video named[879]: Inc. (ISC), a non-profit 501(c)(3) public-benefit
Jan 23 02:43:51 video named[879]: corporation. Support and training for BIND 9 are
Jan 23 02:43:51 video named[879]: available at https://www.isc.org/support
Jan 23 02:43:51 video named[879]: ----------------------------------------------------
Jan 23 02:43:51 video named[879]: command channel listening on 127.0.0.1#953
Jan 23 02:43:51 video named[879]: running
Jan 23 02:43:52 video kernel: vr0: link state changed to UP
Jan 23 02:44:00 video squid[1561]: Squid Parent: will start 1 kids
Jan 23 02:44:00 video squid[1561]: Squid Parent: (squid-1) process 1563 started
Jan 23 02:44:07 video kernel: blanktime.
Код: Выделить всё
FreeBSD video 9.2-RELEASE FreeBSD 9.2-RELEASE #0: Fri Jan 16 22:56:56 MSK 2015 root@video:/usr/obj/usr/src/sys/ROUTER3.0 i386
Код: Выделить всё
hostname="video"
keymap="ru.koi8-r.win.kbd"
defaultrouter="192.168.0.3"
# External interface ( to World )
ifconfig_vr0="inet 192.168.0.4 netmask 255.255.255.0"
# Internal interface ( LAN )
ifconfig_re0="inet 10.0.0.1 netmask 255.255.255.0"
# Wi-Fi access point settings
#wlans_bwi0="wlan0"
##create_args_wlan0="wlanmode adhoc"
#ifconfig_wlan0="mode 11g channel 11 up"
#hostapd_enable="YES"
# Force check of file systems in crash case
fsck_y_enable="YES"
background_fsck="NO"
# SSH
sshd_enable="YES"
# Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable
#dumpdev="AUTO"
# Turn on ipfw
firewall_enable="YES"
firewall_script="/etc/firewall.hata"
firewall_nat_enable="YES" # Enable kernel NAT (if firewall_enable == YES)
firewall_nat_interface="vr0" # Public interface or IPaddress to use
firewall_logging="YES"
# Linux compatibility support
linux_enable="YES"
# NAT
#natd_enable="YES"
#natd_interface="vr0"
#natd_flags="-m -u -f /etc/natd.conf"
# Gateway mode
gateway_enable="YES"
swapfile="/usr/swap/swap.file"
# MySQL
mysql_enable="YES"
# ProFTPd
proftpd_enable="YES"
# Apache
apache22_enable="YES"
#zoneminder_enable="YES"
# ICS DHCP in chroot
dhcpd_enable="YES"
dhcpd_flags="-q -4"
dhcpd_conf="/usr/local/etc/dhcpd.conf"
dhcpd_ifaces="re0"
dhcpd_withumask="022"
dhcpd_chuser_enable="YES"
dhcpd_withuser="dhcpd"
dhcpd_withgroup="dhcpd"
dhcpd_chroot_enable="YES"
dhcpd_devfs_enable="YES"
dhcpd_rootdir="/var/db/dhcpd"
syslogd_flags="-l /var/db/dhcpd/var/run/log -ss"
# Routing
#router_enable="YES"
#router="/sbin/routed"
#router_flags="-q"
# Transparent proxy - SQUID
squid_enable="YES"
# DNS
named_enable="YES"
# SNMP
snmpd_enable="YES"
# APC UPS Daemon
# temporary disabled!!!
#apcupsd_enable="YES"
Код: Выделить всё
# Use this DNSs in case you before some router
#nameserver 127.0.0.1
#nameserver 192.168.0.4
# If you are router - should yse these DNSs
nameserver 217.23.176.1
nameserver 217.23.177.249
Код: Выделить всё
startup:
# Настраиваем пользователей MPD
# Права администратора (логин: adm, пароль: ****), админ умеет открывать и закрывать соединение.
set user alex kennwort1 admin
# Права пользователя (логин: usr, пароль: de1t), режим просмотра соединения.
set user usr kennwort2
# Соединение по telnet, mpd предосталяет интерфейс командной строки.
set console self 127.0.0.1 5005
set console open
# настройка web-сервера который уже встроен в MPD
# для отображения статистики подключений.
set web self 0.0.0.0 5006
set web open
default:
load pppoe_client
pppoe_client:
create bundle static B1
set iface route default
set ipcp ranges 0.0.0.0/0 0.0.0.0/0
create link static L1 pppoe
set link action bundle B1
set auth authname mylogin
set auth password kennwort
set link max-redial 0
set link mtu 1492
set iface up-script /usr/local/etc/mpd5/link-up
set iface down-script /usr/local/etc/mpd5/link-down
set link keep-alive 10 60
#указываем свой сетевой интерфейс который смотрит в интернет у меня - vr0
set pppoe iface vr0
set pppoe service ""
open
Код: Выделить всё
#!/bin/sh
gw=`netstat -rn | awk '$1=="default"{print $2}'`
/sbin/route delete $4
/sbin/route add $4 $gw
/sbin/route delete default
/sbin/route add default $4
echo $4 > /tmp/mpd_dr
echo $gw > /tmp/mpd_gw
sleep 10
#Удаляем правила, действительные для режима "за роутером"
ipfw delete 127
ipfw delete 128
ipfw delete 129
ipfw delete 1000
ipfw delete 1008
ipfw delete 1009
ipfw delete 1010
###Rules for kernel NAT 2
ipfw nat 2 config log if ng0 deny_in reset same_ports
#Добавляем правила хождения всего хозяйства через ng0
ipfw add 127 fwd 127.0.0.1,3128 tcp from "table(0)" to any 80 via ng0
ipfw add 128 nat 2 ip from any to any in via ng0
ipfw add 129 nat 2 ip from "table(0)" to any out via ng0
ipfw add 1000 fwd 127.0.0.1,3128 tcp from 10.0.0.0/24 to any 80 via ng0
ipfw add 1008 allow ip from ${IpOut} to any out xmit ng0
ipfw add 1009 allow udp from any 53 to any via ng0
ipfw add 1010 allow udp from any to any 53 via ng0
#Пропиликаем "Ура!"
(kldload speaker && /bin/echo "t255l8c.f.afc~c.f.afc~c.f.afc.f.a.." > /dev/speaker && kldunload speaker)&
Код: Выделить всё
#!/bin/sh
dr=`cat /tmp/mpd_dr`
gw=`cat /tmp/mpd_gw`
route delete $dr
route delete default
route add default $gw
rm -f /tmp/mpd_dr
rm -f /tmp/mpd_gw
#Удаляем правила, действительные для mpd5 pppoe подключения
ipfw delete 127
ipfw delete 128
ipfw delete 129
ipfw delete 1000
ipfw delete 1008
ipfw delete 1009
ipfw delete 1010
#Возвращаем NAT в локалку, как будто мы за роутером
ipfw add 127 fwd 127.0.0.1,3128 tcp from "table(0)" to any 80 via ${LanOut}
ipfw add 128 nat 1 ip from any to any in via ${LanOut}
ipfw add 129 nat 1 ip from "table(0)" to any out via ${LanOut}
ipfw add 1000 fwd 10.0.0.1,80 tcp from ${NetIn}/${NetMask} to any 80 via ${LanOut}
ipfw add 1008 allow ip from ${IpOut} to any out xmit ${LanOut}
ipfw add 1009 allow udp from any 53 to any via ${LanOut}
ipfw add 1010 allow udp from any to any 53 via ${LanOut}
#Пропиликаем "Оторвалось!"
kldload speaker
/bin/echo -e "gc.c8dee2" > /dev/speaker
kldunload speaker
Код: Выделить всё
#!/bin/sh
# v.01.00.00 13.03.2014 First working version of firewall
# v.01.10.00 28.06.2014 Version of firewall with hotspot support
# v.01.11.00 29.06.2014 Added "table 0" for previleged users
# v.01.12.00 30.06.2014 Added rule for blocking dos attack
# v.01.13.00 04.07.2014 Deny Netbion on the LanOut, deny ident
# v.01.14.00 01.08.2014 Added adsl line support (created rules and tun0 iface)
# v.01.15.00 22.01.2015 Changed WAN interface tun0 -? ng0
# для начала вводим переменные - для нашего же удобства, чтобы не
# вводить по сотне раз одно и то же, а потом искать почему не работает,
# и в итоге выяснять, что ошибся IP адресом в одном из правил
FwCMD="/sbin/ipfw -q" # собственно где лежит бинарник ipfw
LanOut="vr0" # внешний интерфейс
LanIn="re0" # внутренний интерфейс
ADSL="ng0" # ADSL
IpOut="192.168.0.4" # внешний IP адрес машины
IpIn="10.0.0.1" # внутренний IP машины
NetMask="24" # маска внутренней сети
NetIn="10.0.0.0" # Внутренняя сеть
# Сбрасываем все правила:
${FwCMD} -f -q flush
# Сбрасываем содержимое таблиц
${FwCMD} -f table 0 flush
# В эту таблицу будем добавляем превилигированных пользователей.
${FwCMD} table 0 add 10.0.0.10
${FwCMD} table 0 add 10.0.0.100
# Проверяем - соответствует ли пакет динамическим правилам:
${FwCMD} add 110 check-state
# Разрешаем весь траффик по внутреннему интерфейсу (петле)
${FwCMD} add 111 allow ip from any to any via lo0
# рубим попытки lo0 куда-то лезть и откуда-то лезть на lo0
${FwCMD} add 112 deny ip from any to 127.0.0.0/8
${FwCMD} add 113 deny ip from 127.0.0.0/8 to any
# block some DOS attacks.
${FwCMD} add 114 deny tcp from any to any tcpoptions !mss tcpflags syn,!ack
# Вводим запреты:
# режем частные сети на внешнем интерфейсе - по легенде он у нас
# смотрит в интернет, а значит пакетам этим браться неоткуда на нём.
# рубим частные сeти
${FwCMD} add 115 deny ip from any to 10.0.0.0/8 in via ${LanOut}
${FwCMD} add 116 deny ip from any to 172.16.0.0/12 in via ${LanOut}
${FwCMD} add 117 deny ip from any to 0.0.0.0/8 in via ${LanOut}
${FwCMD} add 118 deny ip from any to 192.168.0.0/24 in via ${ADSL}
${FwCMD} add 119 deny ip from any to 172.16.0.0/12 in via ${ADSL}
${FwCMD} add 120 deny ip from any to 0.0.0.0/8 in via ${ADSL}
# рубим автоконфигуреную частную сеть
${FwCMD} add 121 deny ip from any to 169.254.0.0/16 in via ${LanOut}
${FwCMD} add 122 deny ip from any to 169.254.0.0/16 in via ${ADSL}
# рубаем мультикастовые рассылки
${FwCMD} add 123 deny ip from any to 240.0.0.0/4 in via ${LanOut}
${FwCMD} add 124 deny ip from any to 240.0.0.0/4 in via ${ADSL}
# запрещаем ident
${FwCMD} add 125 deny tcp from any to any 113 in via ${LanOut}
${FwCMD} add 126 deny tcp from any to any 113 in via ${ADSL}
# запрет Netbios, 137=имя, 138=дейтаграмма, 139=сессия
${FwCMD} add 127 deny tcp from any to any 137 in via ${LanOut}
${FwCMD} add 128 deny tcp from any to any 138 in via ${LanOut}
${FwCMD} add 129 deny tcp from any to any 139 in via ${LanOut}
${FwCMD} add 130 deny tcp from any to any 137 in via ${ADSL}
${FwCMD} add 131 deny tcp from any to any 138 in via ${ADSL}
${FwCMD} add 132 deny tcp from any to any 139 in via ${ADSL}
# рубим фрагментированные icmp
${FwCMD} add 133 deny icmp from any to any frag
# рубим широковещательные icmp на внешнем интерфейсе
${FwCMD} add 134 deny log icmp from any to 255.255.255.255 in via ${LanOut}
${FwCMD} add 135 deny log icmp from any to 255.255.255.255 out via ${LanOut}
${FwCMD} add 136 deny log icmp from any to 255.255.255.255 in via ${ADSL}
${FwCMD} add 137 deny log icmp from any to 255.255.255.255 out via ${ADSL}
# а тут собственно файрволл и начался:
# Превилигорованных юзеров заворачиваем на squid
${FwCMD} add 138 fwd 127.0.0.1,3128 tcp from ${NetIn}/${NetMask} to any 80 via ${ADSL}
# С 20.06.2014 интегрирован ядерный NAT
${FwCMD} nat 1 config log if ${ADSL} same_ports
${FwCMD} add 139 nat 1 ip from any to any in via ${ADSL}
# NAT для превилигированных юзеров
${FwCMD} add 140 nat 1 ip from ${NetIn}/${NetMask} to any out via ${ADSL}
# Если хочешь перенаправлять всех на внутренний веб сервер - раскоментируй
${FwCMD} add 1000 fwd 10.0.0.1,80 tcp from ${NetIn}/${NetMask} to any 80 via ${ADSL}
#${FwCMD} add 901 fwd 10.0.0.1,80 tcp from ${NetIn}/${NetMask} to any 443 via ${LanOut}
#${FwCMD} add 902 fwd 10.0.0.1,80 tcp from ${NetIn}/${NetMask} to any 8443 via ${LanOut}
#${FwCMD} add 1000 fwd 10.0.0.1,80 tcp from ${NetIn}/${NetMask} to any 21 via ${LanOut}
# рубим траффик к частным сетям через внешний интерфейс
# эти правила отличаются от тех что были выше!
#${FwCMD} add 1001 deny ip from 10.0.0.0/8 to any out via ${LanOut}
${FwCMD} add 1002 deny ip from 172.16.0.0/12 to any out via ${LanOut}
${FwCMD} add 1003 deny ip from 0.0.0.0/8 to any out via ${LanOut}
${FwCMD} add 1004 deny ip from 192.168.0.0/24 to any out via ${ADSL}
${FwCMD} add 1005 deny ip from 172.16.0.0/12 to any out via ${ADSL}
${FwCMD} add 1006 deny ip from 0.0.0.0/8 to any out via ${ADSL}
# рубим автоконфигуреную частную сеть
${FwCMD} add 1007 deny ip from 169.254.0.0/16 to any out via ${LanOut}
${FwCMD} add 1008 deny ip from 169.254.0.0/16 to any out via ${ADSL}
# рубаем мультикастовые рассылки
${FwCMD} add 1009 deny ip from 224.0.0.0/4 to any out via ${LanOut}
${FwCMD} add 1010 deny ip from 224.0.0.0/4 to any out via ${ADSL}
# рубаем мультикастовые рассылки
${FwCMD} add 1011 deny ip from 240.0.0.0/4 to any out via ${LanOut}
${FwCMD} add 1012 deny ip from 240.0.0.0/4 to any out via ${ADSL}
# разрешаем все установленные соединения (если они установились -
# значит по каким-то правилам они проходили.)
${FwCMD} add 1013 allow tcp from any to any established
# разрешаем весь исходящий траффик (серверу-то в инет можно? :))
${FwCMD} add 1014 allow ip from ${IpOut} to any out xmit ${ADSL}
${FwCMD} add 1148 allow ip from me to any via ${ADSL}
${FwCMD} add 1149 allow ip from any to me via ${ADSL}
# DNS на внешнюю сетевуху
${FwCMD} add 1015 allow udp from any 53 to any via ${LanOut}
${FwCMD} add 1016 allow udp from any to any 53 via ${LanOut}
# DNS на ADSL
${FwCMD} add 1017 allow udp from any 53 to any via ${ADSL}
${FwCMD} add 1018 allow udp from any to any 53 via ${ADSL}
# разрешаем UDP (для синхронизации времени - 123 порт)
${FwCMD} add 1019 allow udp from any to any 123 via ${LanOut}
${FwCMD} add 1020 allow udp from any to any 123 via ${ADSL}
# разрешаем ftp снаружи (оба правила - для пасивного режима)
# для узнавания портранджа по которому будет работать, лезем в
#/usr/home/lissyara/>sysctl net.inet.ip.portrange.first
# net.inet.ip.portrange.first: 49152
# /usr/home/lissyara/>sysctl net.inet.ip.portrange.last
# net.inet.ip.portrange.last: 65535
${FwCMD} add 1021 allow tcp from any to ${IpOut} 21 via ${LanOut}
#Можно изгалиться примерно так, если есть желание, но я предпочитаю руками
#${FwCMD} add allow tcp from any to ${IpOut} \
#`sysctl net.inet.ip.portrange.first | awk '{print $2}'`-\
#`sysctl net.inet.ip.portrange.last | awk '{print $2}'` via ${LanOut}
${FwCMD} add 1022 allow tcp from any to ${IpOut} 10000-65535 via ${LanOut}
# разрешаем некоторые типы ICMP траффика - эхо-запрос,
# эхо-ответ и время жизни пакета истекло
${FwCMD} add 1023 allow icmp from any to any icmptypes 0,8,11
# открываем снаружи 80 порт - есть WWW сервер на машине
${FwCMD} add 1024 allow tcp from any to ${IpOut} 80 via ${LanOut}
# открываем снаружи 2200 порт - надо будет ходить на машину по ssh
${FwCMD} add 1025 allow tcp from any to ${IpOut} 2200 in via ${LanOut} setup limit src-addr 3
${FwCMD} add 1026 allow tcp from any to ${IpOut} 2200 in via ${ADSL} setup limit src-addr 3
# открываем снаружи 27015 порт для CS сервера
${FwCMD} add 1027 allow udp from any to ${IpOut} 27015 via ${LanOut} setup limit src-addr 30
# открываем снаружи 27910 порт для Quake2 сервера
${FwCMD} add 1028 allow udp from any to ${IpOut} 27910 via ${LanOut} setup limit src-addr 30
# разрешаем весь tcp траффик внутри локалки (на внутреннем интерфейсе)
${FwCMD} add 1029 allow tcp from any to any via ${LanIn}
# разрешаем весь udp траффик внутри локалки (на внутреннем интерфейсе)
${FwCMD} add 1030 allow udp from any to any via ${LanIn}
# разрешаем весь icmp траффик внутри локалки (на внутреннем интерфейсе)
${FwCMD} add 1031 allow icmp from any to any via ${LanIn}
# запрещаем всё и всем. Если тип файрволла не open то это правило добавится
# автоматически, но всё-же ну его. Лучше сам. Надёжней.
#${FwCMD} add deny log all from any to any
${FwCMD} add allow all from any to any
Код: Выделить всё
#
# GENERIC -- Generic kernel configuration file for FreeBSD/i386
#
# For more information on this file, please read the config(5) manual page,
# and/or the handbook section on Kernel Configuration Files:
#
# http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-config.html
#
# The handbook is also available locally in /usr/share/doc/handbook
# if you've installed the doc distribution, otherwise always see the
# FreeBSD World Wide Web server (http://www.FreeBSD.org/) for the
# latest information.
#
# An exhaustive list of options and more detailed explanations of the
# device lines is also present in the ../../conf/NOTES and NOTES files.
# If you are in doubt as to the purpose or necessity of a line, check first
# in NOTES.
#
# $FreeBSD: release/9.2.0/sys/i386/conf/GENERIC 253860 2013-08-01 13:18:47Z marius $
# I'm using only 686 CPU
#cpu I486_CPU
#cpu I586_CPU
cpu I686_CPU
ident ROUTER3
# I don't want to have debug information, i have a good HW
#makeoptions DEBUG=-g # Build kernel with gdb(1) debug symbols
makeoptions WITH_CTF=1 # Run ctfconvert(1) for DTrace support
options SCHED_ULE # ULE scheduler
options PREEMPTION # Enable kernel thread preemption
options INET # InterNETworking
# IPV6 not used on this server
#options INET6 # IPv6 communications protocols
options TCP_OFFLOAD # TCP offload
options SCTP # Stream Control Transmission Protocol
options FFS # Berkeley Fast Filesystem
options SOFTUPDATES # Enable FFS soft updates support
options UFS_ACL # Support for access control lists
options UFS_DIRHASH # Improve performance on big directories
options UFS_GJOURNAL # Enable gjournal-based UFS journaling
options QUOTA # Enable disk quotas for UFS
options MD_ROOT # MD is a potential root device
# NFS not used here
#options NFSCL # New Network Filesystem Client
#options NFSD # New Network Filesystem Server
options NFSLOCKD # Network Lock Manager
#options NFS_ROOT # NFS usable as /, requires NFSCL
options MSDOSFS # MSDOS Filesystem
options CD9660 # ISO 9660 Filesystem
options PROCFS # Process filesystem (requires PSEUDOFS)
options PSEUDOFS # Pseudo-filesystem framework
options GEOM_PART_GPT # GUID Partition Tables.
options GEOM_RAID # Soft RAID functionality.
options GEOM_LABEL # Provides labelization
options COMPAT_FREEBSD4 # Compatible with FreeBSD4
options COMPAT_FREEBSD5 # Compatible with FreeBSD5
options COMPAT_FREEBSD6 # Compatible with FreeBSD6
options COMPAT_FREEBSD7 # Compatible with FreeBSD7
#options SCSI_DELAY=5000 # Delay (in ms) before probing SCSI
options KTRACE # ktrace(1) support
options STACK # stack(9) support
options SYSVSHM # SYSV-style shared memory
options SYSVMSG # SYSV-style message queues
options SYSVSEM # SYSV-style semaphores
options _KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions
options PRINTF_BUFR_SIZE=128 # Prevent printf output being interspersed.
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
options HWPMC_HOOKS # Necessary kernel hooks for hwpmc(4)
options AUDIT # Security event auditing
options MAC # TrustedBSD MAC Framework
options KDTRACE_HOOKS # Kernel DTrace hooks
options INCLUDE_CONFIG_FILE # Include this file in kernel
options KDB # Kernel debugger related code
options KDB_TRACE # Print a stack trace for a panic
options DDB_CTF # kernel ELF linker loads CTF data
# To make an SMP kernel, the next two lines are needed
options SMP # Symmetric MultiProcessor Kernel
device apic # I/O APIC
# CPU frequency control
device cpufreq
# Bus support.
device acpi
device eisa
device pci
# Floppy drives
#device fdc
#Включение IPFW
# Включение фаервола в ядро
options IPFIREWALL
# Включение ядерного NAT
options IPFIREWALL_NAT
# Включение механизма логирования 'log'
options IPFIREWALL_VERBOSE
# Ограничение логов - защита от переполнения
options IPFIREWALL_VERBOSE_LIMIT=100
# Включение механизма перенаправления пакетов
options IPFIREWALL_FORWARD
# Включение механизма трансляции адресов NAT
options IPDIVERT
# Включение механизма ограничения скорости канала
options DUMMYNET
# Increase frequency of query CPU
options HZ=1000
options LIBALIAS
options NETGRAPH
options NETGRAPH_ETHER
options NETGRAPH_NETFLOW
options NETGRAPH_SOCKET
options NETGRAPH_TEE
options NETGRAPH_BPF
options NETGRAPH_IFACE
options NETGRAPH_KSOCKET
options NETGRAPH_PPP
options NETGRAPH_PPTPGRE
options NETGRAPH_TCPMSS
options NETGRAPH_VJC
options NETGRAPH_ONE2MANY
options NETGRAPH_RFC1490
options NETGRAPH_TTY
options NETGRAPH_UI
options NETGRAPH_MPPC_ENCRYPTION
options NETGRAPH_MPPC_COMPRESSION
# ATA controllers
device ahci # AHCI-compatible SATA controllers
device ata # Legacy ATA/SATA controllers
options ATA_CAM # Handle legacy controllers with CAM
options ATA_STATIC_ID # Static device numbering
device mvs # Marvell 88SX50XX/88SX60XX/88SX70XX/SoC SATA
device siis # SiliconImage SiI3124/SiI3132/SiI3531 SATA
# SCSI Controllers
#device ahb # EISA AHA1742 family
#device ahc # AHA2940 and onboard AIC7xxx devices
#options AHC_REG_PRETTY_PRINT # Print register bitfields in debug
# output. Adds ~128k to driver.
#device ahd # AHA39320/29320 and onboard AIC79xx devices
#options AHD_REG_PRETTY_PRINT # Print register bitfields in debug
# output. Adds ~215k to driver.
#device esp # AMD Am53C974 (Tekram DC-390(T))
#device hptiop # Highpoint RocketRaid 3xxx series
#device isp # Qlogic family
#device ispfw # Firmware for QLogic HBAs- normally a module
#device mpt # LSI-Logic MPT-Fusion
#device ncr # NCR/Symbios Logic
#device sym # NCR/Symbios Logic (newer chipsets + those of `ncr')
#device trm # Tekram DC395U/UW/F DC315U adapters
#device adv # Advansys SCSI adapters
#device adw # Advansys wide SCSI adapters
#device aha # Adaptec 154x SCSI adapters
#device aic # Adaptec 15[012]x SCSI adapters, AIC-6[23]60.
#device bt # Buslogic/Mylex MultiMaster SCSI adapters
#device ncv # NCR 53C500
#device nsp # Workbit Ninja SCSI-3
#device stg # TMC 18C30/18C50
#device isci # Intel C600 SAS controller
# ATA/SCSI peripherals
device scbus # SCSI bus (required for ATA/SCSI)
#device ch # SCSI media changers
device da # Direct Access (disks)
#device sa # Sequential Access (tape etc)
device cd # CD
device pass # Passthrough device (direct ATA/SCSI access)
#device ses # Enclosure Services (SES and SAF-TE)
#device ctl # CAM Target Layer
# RAID controllers interfaced to the SCSI subsystem
#device amr # AMI MegaRAID
#device arcmsr # Areca SATA II RAID
#device asr # DPT SmartRAID V, VI and Adaptec SCSI RAID
#device ciss # Compaq Smart RAID 5*
#device dpt # DPT Smartcache III, IV - See NOTES for options
#device hptmv # Highpoint RocketRAID 182x
#device hptnr # Highpoint DC7280, R750
#device hptrr # Highpoint RocketRAID 17xx, 22xx, 23xx, 25xx
#device hpt27xx # Highpoint RocketRAID 27xx
#device iir # Intel Integrated RAID
#device ips # IBM (Adaptec) ServeRAID
#device mly # Mylex AcceleRAID/eXtremeRAID
#device twa # 3ware 9000 series PATA/SATA RAID
#device tws # LSI 3ware 9750 SATA+SAS 6Gb/s RAID controller
# RAID controllers
#device aac # Adaptec FSA RAID
#device aacp # SCSI passthrough for aac (requires CAM)
#device aacraid # Adaptec by PMC RAID
#device ida # Compaq Smart RAID
#device mfi # LSI MegaRAID SAS
#device mlx # Mylex DAC960 family
#device pst # Promise Supertrak SX6000
#device twe # 3ware ATA RAID
# atkbdc0 controls both the keyboard and the PS/2 mouse
device atkbdc # AT keyboard controller
device atkbd # AT keyboard
device psm # PS/2 mouse
device kbdmux # keyboard multiplexer
device vga # VGA video card driver
options VESA # Add support for VESA BIOS Extensions (VBE)
device splash # Splash screen and screen saver support
# syscons is the default console driver, resembling an SCO console
device sc
options SC_PIXEL_MODE # add support for the raster text mode
device agp # support several AGP chipsets
# Power management support (see NOTES for more options)
#device apm
# Add suspend/resume support for the i8254.
device pmtimer
# PCCARD (PCMCIA) support
# PCMCIA and cardbus bridge support
device cbb # cardbus (yenta) bridge
device pccard # PC Card (16-bit) bus
device cardbus # CardBus (32-bit) bus
# Serial (COM) ports
device uart # Generic UART driver
# Parallel port
device ppc
device ppbus # Parallel port bus (required)
device lpt # Printer
device plip # TCP/IP over parallel
device ppi # Parallel port interface device
#device vpo # Requires scbus and da
device puc # Multi I/O cards and multi-channel UARTs
# PCI Ethernet NICs.
#device bxe # Broadcom BCM57710/BCM57711/BCM57711E 10Gb Ethernet
#device de # DEC/Intel DC21x4x (``Tulip'')
#device em # Intel PRO/1000 Gigabit Ethernet Family
#device igb # Intel PRO/1000 PCIE Server Gigabit Family
#device ixgb # Intel PRO/10GbE Ethernet Card
#device le # AMD Am7900 LANCE and Am79C9xx PCnet
#device ti # Alteon Networks Tigon I/II gigabit Ethernet
#device txp # 3Com 3cR990 (``Typhoon'')
#device vx # 3Com 3c590, 3c595 (``Vortex'')
# PCI Ethernet NICs that use the common MII bus controller code.
# NOTE: Be sure to keep the 'device miibus' line in order to use these NICs!
device miibus # MII bus support
#device ae # Attansic/Atheros L2 FastEthernet
#device age # Attansic/Atheros L1 Gigabit Ethernet
#device alc # Atheros AR8131/AR8132 Ethernet
#device ale # Atheros AR8121/AR8113/AR8114 Ethernet
#device bce # Broadcom BCM5706/BCM5708 Gigabit Ethernet
#device bfe # Broadcom BCM440x 10/100 Ethernet
#device bge # Broadcom BCM570xx Gigabit Ethernet
#device cas # Sun Cassini/Cassini+ and NS DP83065 Saturn
#device dc # DEC/Intel 21143 and various workalikes
#device et # Agere ET1310 10/100/Gigabit Ethernet
#device fxp # Intel EtherExpress PRO/100B (82557, 82558)
#device gem # Sun GEM/Sun ERI/Apple GMAC
#device hme # Sun HME (Happy Meal Ethernet)
#device jme # JMicron JMC250 Gigabit/JMC260 Fast Ethernet
#device lge # Level 1 LXT1001 gigabit Ethernet
#device msk # Marvell/SysKonnect Yukon II Gigabit Ethernet
#device nfe # nVidia nForce MCP on-board Ethernet
#device nge # NatSemi DP83820 gigabit Ethernet
#device nve # nVidia nForce MCP on-board Ethernet Networking
#device pcn # AMD Am79C97x PCI 10/100 (precedence over 'le')
device re # RealTek 8139C+/8169/8169S/8110S
#device rl # RealTek 8129/8139
#device sf # Adaptec AIC-6915 (``Starfire'')
#device sge # Silicon Integrated Systems SiS190/191
#device sis # Silicon Integrated Systems SiS 900/SiS 7016
#device sk # SysKonnect SK-984x & SK-982x gigabit Ethernet
#device ste # Sundance ST201 (D-Link DFE-550TX)
#device stge # Sundance/Tamarack TC9021 gigabit Ethernet
#device tl # Texas Instruments ThunderLAN
#device tx # SMC EtherPower II (83c170 ``EPIC'')
#device vge # VIA VT612x gigabit Ethernet
device vr # VIA Rhine, Rhine II
#device vte # DM&P Vortex86 RDC R6040 Fast Ethernet
#device wb # Winbond W89C840F
#device xl # 3Com 3c90x (``Boomerang'', ``Cyclone'')
# ISA Ethernet NICs. pccard NICs included.
#device cs # Crystal Semiconductor CS89x0 NIC
# 'device ed' requires 'device miibus'
#device ed # NE[12]000, SMC Ultra, 3c503, DS8390 cards
#device ex # Intel EtherExpress Pro/10 and Pro/10+
#device ep # Etherlink III based cards
#device fe # Fujitsu MB8696x based cards
#device ie # EtherExpress 8/16, 3C507, StarLAN 10 etc.
#device sn # SMC's 9000 series of Ethernet chips
#device xe # Xircom pccard Ethernet
# Wireless NIC cards
device wlan # 802.11 support
options IEEE80211_DEBUG # enable debug msgs
options IEEE80211_AMPDU_AGE # age frames in AMPDU reorder q's
options IEEE80211_SUPPORT_MESH # enable 802.11s draft support
device wlan_wep # 802.11 WEP support
device wlan_acl
device wlan_ccmp # 802.11 CCMP support
device wlan_tkip # 802.11 TKIP support
device wlan_amrr # AMRR transmit rate control algorithm
device an # Aironet 4500/4800 802.11 wireless NICs.
device ath # Atheros NICs
device ath_pci # Atheros pci/cardbus glue
device ath_hal # pci/cardbus chip support
options AH_SUPPORT_AR5416 # enable AR5416 tx/rx descriptors
device ath_rate_sample # SampleRate tx rate control for ath
device bwi # Broadcom BCM430x/BCM431x wireless NICs.
device bwn # Broadcom BCM43xx wireless NICs.
device ipw # Intel 2100 wireless NICs.
device iwi # Intel 2200BG/2225BG/2915ABG wireless NICs.
device iwn # Intel 4965/1000/5000/6000 wireless NICs.
device malo # Marvell Libertas wireless NICs.
device mwl # Marvell 88W8363 802.11n wireless NICs.
device ral # Ralink Technology RT2500 wireless NICs.
device wi # WaveLAN/Intersil/Symbol 802.11 wireless NICs.
device wl # Older non 802.11 Wavelan wireless NIC.
device wpi # Intel 3945ABG wireless NICs.
# модуль необходим для демона hostapd
device wlan_xauth
# Мост
device if_bridge
# Pseudo devices.
device loop # Network loopback
device random # Entropy device
options PADLOCK_RNG # VIA Padlock RNG
options RDRAND_RNG # Intel Bull Mountain RNG
device ether # Ethernet support
device vlan # 802.1Q VLAN support
device tun # Packet tunnel.
device pty # BSD-style compatibility pseudo ttys
device md # Memory "disks"
device gif # IPv6 and IPv4 tunneling
device faith # IPv6-to-IPv4 relaying (translation)
device firmware # firmware assist module
# The `bpf' device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
# Note that 'bpf' is required for DHCP.
device bpf # Berkeley packet filter
# USB support
#options USB_DEBUG # enable debug msgs
device uhci # UHCI PCI->USB interface
device ohci # OHCI PCI->USB interface
device ehci # EHCI PCI->USB interface (USB 2.0)
#device xhci # XHCI PCI->USB interface (USB 3.0)
device usb # USB Bus (required)
#device udbp # USB Double Bulk Pipe devices (needs netgraph)
device uhid # "Human Interface Devices"
device ukbd # Keyboard
device ulpt # Printer
device umass # Disks/Mass storage - Requires scbus and da
device ums # Mouse
#device urio # Diamond Rio 500 MP3 player
# USB Serial devices
#device u3g # USB-based 3G modems (Option, Huawei, Sierra)
#device uark # Technologies ARK3116 based serial adapters
#device ubsa # Belkin F5U103 and compatible serial adapters
#device uftdi # For FTDI usb serial adapters
#device uipaq # Some WinCE based devices
#device uplcom # Prolific PL-2303 serial adapters
#device uslcom # SI Labs CP2101/CP2102 serial adapters
#device uvisor # Visor and Palm devices
#device uvscom # USB serial support for DDI pocket's PHS
# USB Ethernet, requires miibus
#device aue # ADMtek USB Ethernet
#device axe # ASIX Electronics USB Ethernet
#device cdce # Generic USB over Ethernet
#device cue # CATC USB Ethernet
#device kue # Kawasaki LSI USB Ethernet
#device rue # RealTek RTL8150 USB Ethernet
#device udav # Davicom DM9601E USB
# USB Wireless
#device rum # Ralink Technology RT2501USB wireless NICs
#device run # Ralink Technology RT2700/RT2800/RT3000 NICs.
#device uath # Atheros AR5523 wireless NICs
#device upgt # Conexant/Intersil PrismGT wireless NICs.
#device ural # Ralink Technology RT2500USB wireless NICs
#device urtw # Realtek RTL8187B/L wireless NICs
#device zyd # ZyDAS zd1211/zd1211b wireless NICs
# Sound support
device sound # Generic sound driver (required)
device snd_cmi # CMedia CMI8338/CMI8738
device snd_csa # Crystal Semiconductor CS461x/428x
device snd_emu10kx # Creative SoundBlaster Live! and Audigy
device snd_es137x # Ensoniq AudioPCI ES137x
device snd_hda # Intel High Definition Audio
device snd_ich # Intel, NVidia and other ICH AC'97 Audio
device snd_uaudio # USB Audio
device snd_via8233 # VIA VT8233x Audio
# VirtIO support
device virtio # Generic VirtIO bus (required)
device virtio_pci # VirtIO PCI Interface
device vtnet # VirtIO Ethernet device
device virtio_blk # VirtIO Block device
device virtio_scsi # VirtIO SCSI device
device virtio_balloon # VirtIO Memory Balloon device
Код: Выделить всё
startup:
# Настраиваем пользователей MPD
# Права администратора, админ умеет открывать и закрывать соединение.
set user login kennwort admin
# Права пользователя, режим просмотра соединения.
set user login1 kennwort1
# Соединение по telnet, mpd предосталяет интерфейс командной строки.
set console self 127.0.0.1 5005
set console open
# настройка web-сервера который уже встроен в MPD
# для отображения статистики подключений.
set web self 0.0.0.0 5006
set web open
default:
load pppoe_client
pppoe_client:
create bundle static B1
set iface enable tcpmssfix
set iface up-script /usr/local/etc/mpd5/ifup.sh
set iface down-script /usr/local/etc/mpd5/ifdown.sh
create link static L1 pppoe
set link action bundle B1
set auth authname login
set auth password kennwort
set link max-redial 0
set link mtu 1492
set link keep-alive 10 60
set pppoe iface vr0
set pppoe service ""
open
Код: Выделить всё
#!/bin/sh
langw=`netstat -rn | awk '$1=="default"{print $2}'`
wangw=`ifconfig ng0 | awk '$1=="inet"{print $4}'`
route delete default > /dev/null
route add default $wangw > /dev/null
echo $langw > /tmp/mpd_langw
echo $wangw > /tmp/mpd_wangw
sleep 10
#Включаем фаервол для ng0
/bin/sh /etc/firewall.hata2
#Пропиликаем "Ура!"
kldload speaker
/bin/echo "t255l8c.f.afc~c.f.afc~c.f.afc.f.a.." > /dev/speaker
kldunload speaker
Код: Выделить всё
#!/bin/sh
langw=`cat /tmp/mpd_langw`
route delete default > /dev/null
route add default $langw > /dev/null
rm -f /tmp/mpd_langw
rm -f /tmp/mpd_wan
#Удаляем правила, действительные для mpd5 pppoe подключения
#Возвращаем NAT в локалку, как будто мы за роутером
/bin/sh /etc/firewall.hotspot
#Пропиликаем "Оторвалось!"
kldload speaker
/bin/echo -e "gc.c8dee2" > /dev/speaker
kldunload speaker
Код: Выделить всё
Intel Mobile Pentium III 850 MHz
S3 Savage IX8+ with 8MB