предварительно сохранил все необходимые конфиги.
теперь имею проблему в том, что при загрузке не читается pf.conf жалуясь на 4 строки (приведены ниже), но если после загрузки скормить ему вручную этот же файл через pfctl -f /etc/pf.conf , то всё ок.
проблема в том, что как мне кажется, сетевые интерфейсы поднимаются медленнее чем в 7 !? поделитесь дельным советом.
выдержка из dmesg
Код: Выделить всё
Mounting local file systems:
.
Setting hostname: gate
.
Starting Network: lo0 em0 em1.
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=3<RXCSUM,TXCSUM>
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff000000
em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>
ether 00:07:e9:0a:2b:37
inet 192.168.1.219 netmask 0xffffff00 broadcast 192.168.1.255
media: Ethernet autoselect
status: no carrier
em1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>
ether 00:07:e9:0a:45:b8
media: Ethernet autoselect
status: no carrier
Starting pflog.
Enabling pf
Dec 2 01:03:43 pflogd[526]: [priv]: msg PRIV_OPEN_LOG received
no IP address found for em1
/etc/pf.conf:17:
could not parse host specification
no IP address found for em1
/etc/pf.conf:18:
could not parse host specification
no IP address found for em1
/etc/pf.conf:19:
could not parse host specification
no IP address found for em1
/etc/pf.conf:20:
could not parse host specification
pfctl:
Syntax error in config file: pf rules not loaded
pf enabled
.
Additional routing options:
IP gateway=YES
.
Starting devd.
ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib /usr/local/lib/compat/pkg /usr/local/lib/compat/pkg
a.out ldconfig path: /usr/lib/aout /usr/lib/compat/aout
Creating and/or trimming log files
.
Starting syslogd.
Setting date via ntp.
Error : hostname nor servname provided, or not known
2 Dec 01:03:44
ntpdate[981]: can't find host ntp.mobatime.ru
Error : hostname nor servname provided, or not known
2 Dec 01:03:44
ntpdate[981]: can't find host 0.freebsd.pool.ntp.org
Error : hostname nor servname provided, or not known
2 Dec 01:03:44
ntpdate[981]: can't find host 1.freebsd.pool.ntp.org
Error : hostname nor servname provided, or not known
2 Dec 01:03:44
ntpdate[981]: can't find host 2.freebsd.pool.ntp.org
2 Dec 01:03:44
ntpdate[981]: no servers can be used, exiting
Clearing /tmp (X related).
Removing stale Samba tdb files:
.
.
.
.
.
.
.
.
done
Starting nmbd.
Starting smbd.
Dec 2 01:03:44 gate smbd[1099]: [2009/12/02 01:03:44, 0] printing/print_cups.c:cups_connect(103)
Dec 2 01:03:44 gate smbd[1099]: Unable to connect to CUPS server localhost:631 - Connection refused
Dec 2 01:03:44 gate smbd[1100]: [2009/12/02 01:03:44, 0] printing/print_cups.c:cups_connect(103)
Dec 2 01:03:44 gate smbd[1100]: Unable to connect to CUPS server localhost:631 - Connection refused
Starting igmpproxy.
igmpproxy, Version 0.1 beta2, Build 091201
Copyright 2005 by Johnny Egeland <johnny@rlo.org>
Distributed under the GNU GENERAL PUBLIC LICENSE, Version 2 - check GPL.txt
ERRO: There must be at least 2 Vif's where one is upstream. (vifcount 1, upStreamVif -1)
/etc/rc: WARNING: failed to start igmpproxy
Dec 2 01:03:44 gate igmpproxy: ERRO: There must be at least 2 Vif's where one is upstream. (vifcount 1, upStreamVif -1)
Updating motd:
.
Configuring syscons:
keymap
blanktime
allscreens
.
Starting sshd.
Starting cron.
Wed Dec 2 01:03:45 MSK 2009
em1: link state changed to UP
em0: link state changed to UP
Код: Выделить всё
ext_if="em1" # replace with actual external interface name i.e., dc0
int_if="em0" # replace with actual internal interface name i.e., dc1
#int_net="192.168.1/24"
external_addr="77.77.77.77"
lexa_server="192.168.1.6"
fkt_server="192.168.1.5"
servak="192.168.1.7"
set optimization normal
#set block-policy drop
set skip on lo0
scrub in all
nat on $ext_if from $int_if:network to any -> ($ext_if)
rdr on $ext_if proto tcp from any to $ext_if port 3389 -> $lexa_server port 3389
rdr on $ext_if proto tcp from any to $ext_if port 3390 -> $fkt_server port 3389
rdr on $ext_if proto tcp from any to $ext_if port 3391 -> $servak port 3389
rdr on $ext_if proto udp from any to $ext_if port 30000 -> 192.168.1.64 port 30000
Код: Выделить всё
gateway_enable="YES"
hostname="gate"
ifconfig_em1="DHCP"
ifconfig_em0="inet 192.168.1.219 netmask 255.255.255.0"
#ifconfig_re0="DHCP"
inetd_enable="NO"
ntpdate_enable="YES"
#ntpdate_flags="europe.pool.ntp.org"
ntpdate_flags="ntp.mobatime.ru"
sshd_enable="YES"
usbd_enable="YES"
#-------samba----------------
nmbd_enable="YES"
smbd_enable="YES"
#desktop settings:
keymap="us.iso"
allscreens_flags="MODE_280"
#pureftpd_enable="YES"
background_fsck="NO"
fsck_y_enable="YES"
igmpproxy_enable="YES"
#---------PF------------------
pf_enable="YES"
pf_rules="/etc/pf.conf"
pf_program="/sbin/pfctl"
pf_flags=""
pflog_enable="YES"
pflog_logfile="/var/log/pflog"
pflog_flags=""
dmesg
Код: Выделить всё
Starting igmpproxy.
igmpproxy, Version 0.1 beta2, Build 091201
Copyright 2005 by Johnny Egeland <johnny@rlo.org>
Distributed under the GNU GENERAL PUBLIC LICENSE, Version 2 - check GPL.txt
ERRO: There must be at least 2 Vif's where one is upstream. (vifcount 1, upStreamVif -1)
/etc/rc: WARNING: failed to start igmpproxy
Dec 2 01:03:44 gate igmpproxy: ERRO: There must be at least 2 Vif's where one is upstream. (vifcount 1, upStreamVif -1)
