Это бекапный НАС на гавносетёвке...Все что работает: mpd + named + ipfw nat + dummynet+ucarp
ucarp, так как ядерный не хавал carpdev...
Его задача работать если физически отключат главную машину...
Я вот хотел его чуть потюнить...Правда затюнил так что теперь пинг больше 2000 не проходит, хотя файлы качает он нормально
Код: Выделить всё
Copyright (c) 1992-2009 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.1-RELEASE-p5 #3: Tue May 19 08:59:07 EEST 2009
root@ff.sk:/usr/obj/usr/src/sys/ROUTER
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Genuine Intel(R) CPU 2140 @ 1.60GHz (1599.99-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0x6f2 Stepping = 2
Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
Features2=0xe39d<SSE3,DTES64,MON,DS_CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM>
AMD Features=0x20100000<NX,LM>
AMD Features2=0x1<LAHF>
Cores per package: 2
real memory = 1064894464 (1015 MB)
avail memory = 1027600384 (979 MB)
ACPI APIC Table: <A_M_I_ OEMAPIC >
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
cpu0 (BSP): APIC ID: 0
cpu1 (AP): APIC ID: 1
ioapic0 <Version 2.0> irqs 0-23 on motherboard
kbd1 at kbdmux0
ath_hal: 0.9.20.3 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
acpi0: <_ASUS_ Notebook> on motherboard
acpi0: [ITHREAD]
acpi0: Power Button (fixed)
acpi0: reservation of 0, a0000 (3) failed
acpi0: reservation of 100000, 3f700000 (3) failed
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
vgapci0: <VGA-compatible display> port 0xcc00-0xcc07 mem 0xdfc00000-0xdfcfffff,0xc0000000-0xcfffffff irq 16 at device 2.0 on pci0
agp0: <Intel G965 SVGA controller> on vgapci0
agp0: detected 7676k stolen memory
agp0: aperture size is 256M
pcib1: <ACPI PCI-PCI bridge> irq 17 at device 28.0 on pci0
pci3: <ACPI PCI bus> on pcib1
age0: <Attansic Technology Corp, L1 Gigabit Ethernet> mem 0xdfec0000-0xdfefffff irq 16 at device 0.0 on pci3
age0: PCI device revision : 0x00b0
age0: Chip id/revision : 0x9006
age0: 1280 Tx FIFO, 2364 Rx FIFO
age0: MSIX count : 0
age0: MSI count : 1
age0: Using 1 MSI messages.
age0: Read request size : 512 bytes.
age0: TLP payload size : 128 bytes.
age0: invalid ethernet address returned from VPD.
age0: VPD access failure!
miibus0: <MII bus> on age0
atphy0: <Atheros F1 10/100/1000 PHY> PHY 0 on miibus0
atphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT-FDX, auto
age0: Ethernet address: 00:1b:fc:c1:50:39
age0: [FILTER]
pcib2: <ACPI PCI-PCI bridge> irq 16 at device 28.1 on pci0
pci2: <ACPI PCI bus> on pcib2
atapci0: <JMicron JMB368 UDMA133 controller> port 0xdc00-0xdc07,0xd880-0xd883,0xd800-0xd807,0xd480-0xd483,0xd400-0xd40f irq 17 at device 0.0 on pci2
atapci0: [ITHREAD]
ata2: <ATA channel 0> on atapci0
ata2: [ITHREAD]
pcib3: <ACPI PCI-PCI bridge> irq 17 at device 28.4 on pci0
pci1: <ACPI PCI bus> on pcib3
pcib4: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci4: <ACPI PCI bus> on pcib4
skc0: <D-Link DGE-530T Gigabit Ethernet> port 0xe800-0xe8ff mem 0xdfffc000-0xdfffffff irq 20 at device 0.0 on pci4
skc0: DGE-530T Gigabit Ethernet Adapter rev. (0x9)
sk0: <Marvell Semiconductor, Inc. Yukon> on skc0
sk0: Ethernet address: 00:1c:f0:8b:99:63
miibus1: <MII bus> on sk0
e1000phy0: <Marvell 88E1011 Gigabit PHY> PHY 0 on miibus1
e1000phy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
skc0: [ITHREAD]
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci1: <Intel ICH8 SATA300 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xff90-0xff9f,0xffa0-0xffaf at device 31.2 on pci0
ata0: <ATA channel 0> on atapci1
ata0: [ITHREAD]
ata1: <ATA channel 1> on atapci1
ata1: [ITHREAD]
pci0: <serial bus, SMBus> at device 31.3 (no driver attached)
atapci2: <Intel ICH8 SATA300 controller> port 0xc880-0xc887,0xc800-0xc803,0xc480-0xc487,0xc400-0xc403,0xc080-0xc08f,0xc000-0xc00f irq 18 at device 31.5 on pci0
atapci2: [ITHREAD]
ata3: <ATA channel 0> on atapci2
ata3: [ITHREAD]
ata4: <ATA channel 1> on atapci2
ata4: [ITHREAD]
pci0: <dasp> at device 31.6 (no driver attached)
acpi_button0: <Power Button> on acpi0
cpu0: <ACPI CPU> on acpi0
est0: <Enhanced SpeedStep Frequency Control> on cpu0
p4tcc0: <CPU Frequency Thermal Control> on cpu0
cpu1: <ACPI CPU> on acpi0
est1: <Enhanced SpeedStep Frequency Control> on cpu1
p4tcc1: <CPU Frequency Thermal Control> on cpu1
pmtimer0 on isa0
orm0: <ISA Option ROMs> at iomem 0xc0000-0xcafff,0xcb000-0xccfff pnpid ORM0000 on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
ppc0: parallel port not found.
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 8250 or not responding
sio0: [FILTER]
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounters tick every 1.000 msec
ipfw2 (+ipv6) initialized, divert loadable, nat enabled, rule-based forwarding enabled, default to accept, logging limited to 1000 packets/entry by default
ad8: 238475MB <WDC WD2500JD-00HBC0 08.02D08> at ata4-master SATA150
SMP: AP CPU #1 Launched!
Trying to mount root from ufs:/dev/ad8s2a
Loading configuration files.
kernel dumps on /dev/ad8s1b
Entropy harvesting:
interrupts
ethernet
point_to_point
kickstart
.
swapon: adding /dev/ad8s1b as swap device
Starting file system checks:
/dev/ad8s2a: FILE SYSTEM CLEAN; SKIPPING CHECKS
/dev/ad8s2a: clean, 113228545 free (60753 frags, 14145974 blocks, 0.1% fragmentation)
Setting hostuuid: 20352a7c-8dfe-d511-9735-001bfcc15039.
Setting hostid: 0x53069a94.
Mounting local file systems:
.
Setting hostname: ff.skyhome.
net.inet6.ip6.auto_linklocal:
1
->
0
security.bsd.see_other_uids:
1
->
0
security.bsd.see_other_gids:
1
->
0
net.inet.tcp.blackhole:
0
->
2
net.inet.udp.blackhole:
0
->
1
net.inet.icmp.drop_redirect:
0
->
1
net.inet.icmp.log_redirect:
0
->
1
net.inet.tcp.sendspace:
32768
->
65536
net.inet.icmp.icmplim:
200
->
10000
net.inet.tcp.msl:
30000
->
7500
kern.ipc.somaxconn:
128
->
32768
net.inet.ip.ttl:
64
->
128
kern.ipc.maxsockets:
12328
->
204800
kern.ipc.nmbclusters:
0
->
65536
net.inet.ip.portrange.first:
49152
->
1024
net.inet.ip.portrange.last:
65535
->
65534
net.inet.ip.portrange.randomized:
1
->
0
net.inet.ip.fastforwarding:
0
->
1
net.inet6.ip6.forwarding:
0
->
1
net.inet.ip.fw.one_pass:
1
->
0
net.inet.ip.dummynet.io_fast:
0
->
1
net.inet.ip.dummynet.hash_size:
64
->
10240
net.inet.ip.dummynet.max_chain_len:
16
->
32
kern.maxfiles:
256000
->
204800
kern.maxfilesperproc:
230400
->
200000
net.inet.tcp.nolocaltimewait:
0
->
1
net.inet.tcp.fast_finwait2_recycle:
0
->
1
net.inet.tcp.maxtcptw:
32255
->
40960
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff000000
sk0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=b<RXCSUM,TXCSUM,VLAN_MTU>
ether 00:1c:f0:8b:99:63
inet 172.168.254.254 netmask 0xfffffffc broadcast 172.168.254.255
media: Ethernet autoselect (none)
status: no carrier
vlan20: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
ether 00:1c:f0:8b:99:63
inet 91.203.XXX.XXX netmask 0xfffffff8 broadcast 91.203.143.7
media: Ethernet autoselect (none)
status: no carrier
vlan: 20 parent interface: sk0
vlan51: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
ether 00:1c:f0:8b:99:63
inet 10.200.24.11 netmask 0xfffff800 broadcast 10.200.31.255
media: Ethernet autoselect (none)
status: no carrier
vlan: 51 parent interface: sk0
add net default: gateway 91.203.143.1
add net 169.254.0.0: gateway lo0
add net 192.0.2.0: gateway lo0
add net 224.0.0.0: gateway lo0
add net 240.0.0.0: gateway lo0
add net 192.168.0.0: gateway 10.200.25.7
route:
writing to routing socket
:
File exists
add net 91.203.XXX.0: gateway 10.200.25.1: route already in table
add net 10.200.202.0: gateway 10.200.25.11
Additional routing options:
ignore ICMP redirect=YES
log ICMP redirect=YES
IP gateway=YES
.
Starting devd.
hw.acpi.cpu.cx_lowest:
C1
->
C1
Additional IP options:
tcp extensions=NO
drop SYN+FIN packets=YES
.
Mounting NFS file systems:
.
ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib /usr/local/lib/mysql /usr/local/lib/qt4
a.out ldconfig path: /usr/lib/aout /usr/lib/compat/aout
Creating and/or trimming log files:
.
Starting syslogd.
Checking for core dump on /dev/ad8s1b...
savecore: no dumps found
Initial i386 initialization:
.
Additional ABI support:
.
Starting named.
May 19 09:42:14 ff named[873]: the working directory is not writable
Clearing /tmp (X related).
Starting mpd5.
Starting ucarp.
Starting local daemons:
.
Updating motd
.
Mounting late file systems:
.
Configuring syscons:
keymap
keyrate
scrnmap
font8x16
font8x14
font8x8
blanktime
screensaver
.
Starting sshd.
Starting cron.
Local package initialization:
ipfw:
00008 deny ip from not 10.0.0.0/8 to me dst-port 3306,1812,1813,1723,5005
00007 deny ip from any to any dst-port 137-141
ipfw nat 123 config ip 91.203.XXX.XXX
64000 nat 123 ip from table(1) to any out via vlan20
00001 nat 123 ip from any to 91.203.143.6 in via vlan20
add net 10.0.0.0: gateway 10.200.25.7
route:
writing to routing socket
:
File exists
add net 192.168.0.0: gateway 10.200.25.7: route already in table
.
sk0: link state changed to UP
vlan51: link state changed to UP
vlan20: link state changed to UP
Starting background file system checks in 60 seconds.
Tue May 19 09:42:15 EEST 2009
arp: 00:1d:92:e4:48:0c is using my IP address 10.200.24.10 on vlan51!
arp: 00:1d:92:e4:48:0c is using my IP address 10.200.24.10 on vlan51!
arp: 00:1d:92:e4:48:0c is using my IP address 10.200.24.10 on vlan51!
May 19 09:42:15 ff kernel: arp: 00:1d:92:e4:48:0c is using my IP address 10.200.24.10 on vlan51!
arp: 00:1d:92:e4:48:0c is using my IP address 10.200.24.10 on vlan51!
