Как подключится к интернету через VPN на FreeBSD 7.0

[RamzesII]

или имели виду так сделать

Код: Выделить всё

Usage: set ipcp ranges self/width peer/width
set ipcp ranges 172.25.18.109/32 172.25.255.1/32 

[Хостинг HostFood.ru]

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2000 рублей (HP Proliant G5, Intel Xeon E5430 (2.66GHz, Quad-Core, 12Mb), 8Gb RAM, 2x300Gb SAS HDD, P400i, 512Mb, BBU):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

[opencat]

Как подключится к интернету через VPN на FreeBSD 7.0

Мой тебе совет - поставь 4 mpd. Я в свое время с 3 намучилсцо, поставил 4 и все норм заработало. Где то конфиги остались, гляну, мб скину. И с табами, пробелами тоже был гемор, обязательно всё проверь.

[RamzesII]

попробую поставить из портов mpd4 сегодня посмотри что получится отпишусь когда попробую

[opencat]

ок удачи

[RamzesII]

установил mpd4 теперь при попытке подсоеденится выдаёт:

Код: Выделить всё

localhost# mpd4 -k
Multi-link PPP daemon for FreeBSD

process 1995 started, version 4.3 (root@localhost 00:48 28-Feb-2008)
PPTP: waiting for connection on 172.25.18.109
[vpn] using interface ng0
open
[vpn] CONSOLE: root: open
[vpn] [vpn] link: OPEN event
[vpn] LCP: Open event
[vpn] LCP: state change Initial --> Starting
[vpn] LCP: LayerStart
pptp0: connecting to 172.25.255.1 1723
pptp0: connected to 172.25.255.1 1723
pptp0: attached to connection with 172.25.255.1 1723
pptp0-0: outgoing call connected at 64000 bps
[vpn] PPTP call successful
[vpn] link: UP event
[vpn] link: origination is local
[vpn] LCP: Up event
[vpn] LCP: state change Starting --> Req-Sent
[vpn] LCP: SendConfigReq #1
 ACFCOMP
 PROTOCOMP
 ACCMAP 0x000a0000
 MRU 1500
 MAGICNUM 9cd2b6d1
[vpn] LCP: rec'd Configure Ack #1 (Req-Sent)
 ACFCOMP
 PROTOCOMP
 ACCMAP 0x000a0000
 MRU 1500
 MAGICNUM 9cd2b6d1
[vpn] LCP: state change Req-Sent --> Ack-Rcvd
[vpn] LCP: state change Ack-Rcvd --> Req-Sent
[vpn] LCP: SendConfigReq #2
 ACFCOMP
 PROTOCOMP
 ACCMAP 0x000a0000
 MRU 1500
 MAGICNUM 9cd2b6d1
[vpn] LCP: rec'd Configure Ack #2 (Req-Sent)
 ACFCOMP
 PROTOCOMP
 ACCMAP 0x000a0000
 MRU 1500
 MAGICNUM 9cd2b6d1
[vpn] LCP: state change Req-Sent --> Ack-Rcvd
[vpn] LCP: rec'd Configure Request #1 (Ack-Rcvd)
 ACCMAP 0x00000000
 AUTHPROTO CHAP MD5
 MAGICNUM 624f93e8
 PROTOCOMP
 ACFCOMP
[vpn] LCP: SendConfigAck #1
 ACCMAP 0x00000000
 AUTHPROTO CHAP MD5
 MAGICNUM 624f93e8
 PROTOCOMP
 ACFCOMP
[vpn] LCP: state change Ack-Rcvd --> Opened
[vpn] LCP: auth: peer wants CHAP, I want nothing
[vpn] LCP: LayerUp
[vpn] CHAP: rec'd CHALLENGE #45
 Name: "vpn01.net.lg.ua"
 Using authname "login"
[vpn] CHAP: sending RESPONSE len:24
[vpn] CHAP: rec'd SUCCESS #45
[vpn] LCP: authorization successful
[vpn] Bundle up: 1 link, total bandwidth 1048576 bps
[vpn] IPCP: Open event
[vpn] IPCP: state change Initial --> Starting
[vpn] IPCP: LayerStart
[vpn] CCP: Open event
[vpn] CCP: state change Initial --> Starting
[vpn] CCP: LayerStart
[vpn] IPCP: Up event
[vpn] IPCP: state change Starting --> Req-Sent
[vpn] IPCP: SendConfigReq #1
 IPADDR 172.25.18.109
 COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
 PRIDNS 0.0.0.0
 SECDNS 0.0.0.0
[vpn] CCP: Up event
[vpn] CCP: state change Starting --> Req-Sent
[vpn] CCP: SendConfigReq #1
 MPPC
   0x01000060:MPPE(40, 128 bits), stateless
[vpn] IPCP: rec'd Configure Nak #1 (Req-Sent)
 IPADDR 172.30.150.9
   172.30.150.9 is unacceptable
 PRIDNS 10.10.0.1
 SECDNS 10.10.0.1
[vpn] IPCP: SendConfigReq #2
 IPADDR 172.25.18.109
 COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
 PRIDNS 10.10.0.1
 SECDNS 10.10.0.1
[vpn] CCP: rec'd Configure Request #1 (Req-Sent)
[vpn] CCP: SendConfigAck #1
[vpn] CCP: state change Req-Sent --> Ack-Sent
[vpn] CCP: rec'd Configure Reject #1 (Ack-Sent)
 MPPC
   0x01000060:MPPE(40, 128 bits), stateless
[vpn] CCP: SendConfigReq #2
[vpn] IPCP: rec'd Configure Nak #2 (Req-Sent)
 IPADDR 172.30.150.9[vpn] CCP: failed to negotiate required encryption
[vpn] CCP: Close event
[vpn] CCP: state change Closing --> Closed
[vpn] CCP: LayerFinish
[vpn] IPCP: failed to negotiate required encryption
[vpn] IPCP: state change Req-Sent --> Stopped
[vpn] IPCP: LayerFinish
[vpn] No NCPs left. Closing links...
[vpn] closing link "vpn"...
[vpn] IPV6CP: failed to negotiate required encryption
[vpn] CCP: LayerFinish
[vpn] IPCP: rec'd Configure Nak #3 (Stopped)
[vpn] IPCP: SendTerminateAck #4
[vpn] link: CLOSE event
[vpn] LCP: Close event
[vpn] LCP: state change Opened --> Closing
[vpn] AUTH: Accounting data for user : 3 seconds, 238 octets in, 255 octets out
[vpn] Bundle up: 0 links, total bandwidth 9600 bps
[vpn] IPCP: Close event
[vpn] IPCP: state change Stopped --> Closed
[vpn] CCP: Close event
[vpn] IPCP: Down event
[vpn] IPCP: state change Closed --> Initial
[vpn] CCP: Down event
[vpn] CCP: state change Closed --> Initial
[vpn] AUTH: Cleanup
[vpn] LCP: SendTerminateReq #3[vpn] LCP: rec'd Terminate Ack #3 (Closing)
[vpn] LCP: state change Closing --> Closed
[vpn] LCP: LayerFinish
pptp0-0: clearing call
pptp0: ctrl connection closed by peer
pptp0: killing connection with 172.25.255.1 1723
pptp0-0: killing channel
[vpn] PPTP call terminated
[vpn] link: DOWN event
[vpn] LCP: Down event
[vpn] LCP: state change Closed --> Initial 

это файл mpd.conf

Код: Выделить всё

startup:
set global disable tcp-wrapper
default:
 load vpn
vpn:
 new -i ng0 vpn vpn
 set iface disable on-demand
 set iface idle 0
 set bundle disable multilink
 set auth authname "login"
 set auth password "pass"
 set link yes acfcomp protocomp
 set link mtu 1500
 set link disable chap pap
 set link accept chap pap
 set link enable no-orig-auth
 set link keep-alive 10 75
 set link bandwidth 1048576
 set ipcp yes vjcomp
 set ipcp yes req-pri-dns
 set ipcp yes req-sec-dns
 set ipcp ranges 172.25.18.109/32 172.25.255.1/32
 set bundle enable compression
 set ccp yes mppc
 set ccp yes mpp-e40
 set ccp yes mpp-e128
 set bundle enable crypt-reqd
 set ccp yes mpp-stateless
open

это mpd.links

Код: Выделить всё

vpn:
 set link type pptp
 set pptp peer 172.25.255.1
 set pptp self 172.25.18.
 set pptp enable originate
 set pptp enable originate incoming outcall

[Гость]

Код: Выделить всё

 IPADDR 172.30.150.9[vpn] CCP: failed to negotiate required encryption

Код: Выделить всё

 set bundle enable crypt-reqd

rtfm

crypt-reqd
Require encryption.
When encryption support is compiled into mpd, this option
causes mpd to drop the link if encryption cannot be succesfully
negotiated in both directions. This means in effect, ``use encryption
or don't connect at all.''

The default for this option is off.

[RamzesII]

если чесно последнне сообщении непонял....

звонил провайдеру спросил у них за настройки они сказали что таких настроек нет мучайтесь сами, единственное сказал что они неприменяют шифровки chap или pap точно непомню что сказал
Может быть проблема именно в шифровке?
Подскажите какие строки с конфига подключения нужно удолить?

[opencat]

#set bundle enable crypt-reqd
или снести нафиг
У меня в конфиге сервака эта строка есть, но синтаксис "set bundle yes crypt-reqd"

[RamzesII]

без этой строки всеравно нет инета блин чё делать

[_kirill_]

без этой строки всеравно нет инета блин чё делать

установить pptpclient

[RamzesII]

взможно у меня проблема с фаерволом или есчё с чемто потомучто
у меня некомпилится ядро

Код: Выделить всё

options IPFIREWALL 
options DUMMYNET
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=100
options IPFIREWALL_DEFAULT_TO_ACCEPT

доходит до make installkernel KERNCONF=SERVER
и пишет что неможет установить или чтото такое

в чём может быть проблема?

[ProFTP]

клиент или сервер?

[ProFTP]

и шифрование включено или остальное???

Код: Выделить всё

#!/bin/sh
vpn_ip=10.1.129.10
ip_def_gw=192.168.1.79
/sbin/route delete $vpn_ip
/sbin/route add $vpn_ip $ip_def_gw
/sbin/route delete default
/sbin/route add default -interface tun0

ЗЫ сервер в разных подсетях?

[RamzesII]

это под виндой у меня впн может тут чтото нужное есть для настройки

Код: Выделить всё

Microsoft Windows XP [Версия 5.1.2600]
(С) Корпорация Майкрософт, 1985-2001.

C:\Documents and Settings\Admin>route print
===========================================================================
Список интерфейсов
0x1 ........................... MS TCP Loopback interface
0x2 ...00 18 f3 52 3f 84 ...... NVIDIA nForce Networking Controller - ?шэшяюЁЄ я
ырэшЁют?шър яръхЄют
0x20004 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface
===========================================================================
===========================================================================
Активные маршруты:
Сетевой адрес           Маска сети      Адрес шлюза       Интерфейс  Метрика
          0.0.0.0          0.0.0.0      172.25.18.1   172.25.18.109       21
          0.0.0.0          0.0.0.0   172.30.150.195  172.30.150.195       1
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
       172.25.0.0      255.255.0.0      172.25.18.1   172.25.18.109       1
      172.25.18.0    255.255.255.0    172.25.18.109   172.25.18.109       20
    172.25.18.109  255.255.255.255        127.0.0.1       127.0.0.1       20
     172.25.255.1  255.255.255.255      172.25.18.1   172.25.18.109       1
   172.25.255.255  255.255.255.255    172.25.18.109   172.25.18.109       20
   172.30.150.195  255.255.255.255        127.0.0.1       127.0.0.1       50
   172.30.255.255  255.255.255.255   172.30.150.195  172.30.150.195       50
        224.0.0.0        240.0.0.0    172.25.18.109   172.25.18.201       20
        224.0.0.0        240.0.0.0   172.30.150.195  172.30.150.195       1
  255.255.255.255  255.255.255.255    172.25.18.109   172.25.18.109       1
  255.255.255.255  255.255.255.255   172.30.150.195  172.30.150.195       1
Основной шлюз:      172.30.150.195
===========================================================================
Постоянные маршруты:
  Сетевой адрес            Маска    Адрес шлюза      Метрика
       172.25.0.0      255.255.0.0      172.25.18.1       1

C:\Documents and Settings\Admin>

[RamzesII]

клиент или сервер?

клиент

[opencat]

взможно у меня проблема с фаерволом или есчё с чемто потомучто
у меня некомпилится ядро

Код: Выделить всё

options IPFIREWALL 
options DUMMYNET
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=100
options IPFIREWALL_DEFAULT_TO_ACCEPT

доходит до make installkernel KERNCONF=SERVER
и пишет что неможет установить или чтото такое

в чём может быть проблема?

Что-то ты всё в одну кучу смешал По поводу вышесказанного - проверь имя ядреного конфа (для примера нэйм SERVER)и строку в нем "ident SERVER"
имхо совпадать должны

[RamzesII]

незнаю где я чтото поменят но сейчас у меня при попытке pinga localhost
пишет:

Код: Выделить всё

 ping: sendto: Premission dinied

[Гость]

незнаю где я чтото поменят но сейчас у меня при попытке pinga localhost
пишет:

Код: Выделить всё

 ping: sendto: Premission dinied

скорее всего виноват firewall

[RamzesII]

компилил ядро так

cd /usr/src/sys/i386/conf
cp GENERIC SERVER
ee SERVER
вствлял в конец файла:

Код: Выделить всё

options IPFIREWALL 
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=100
options IPFIREWALL_DEFAULT_TO_ACCEPToptions DUMMYNET

cd /usr/src
make buildkernel KERNCONF=SERVER && make installkernel KERNCONF=SERVER && reboot

но процесс доходил до make installkernel KERNCONF=SERVER и останавливался

[RamzesII]

незнаю где я чтото поменят но сейчас у меня при попытке pinga localhost
пишет:

Код: Выделить всё

 ping: sendto: Premission dinied

скорее всего виноват firewall

да действительно блакировал фаервол сейчас всё исправил добавленимем строки в rc.conf

Код: Выделить всё

firewall_type="OPEN"

[opencat]

компилил ядро так

cd /usr/src/sys/i386/conf
cp GENERIC SERVER
ee SERVER
вствлял в конец файла:

Код: Выделить всё

options IPFIREWALL 
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=100
options IPFIREWALL_DEFAULT_TO_ACCEPToptions DUMMYNET

cd /usr/src
make buildkernel KERNCONF=SERVER && make installkernel KERNCONF=SERVER && reboot

но процесс доходил до make installkernel KERNCONF=SERVER и останавливался

Поменяй в конфиге ядра "ident GENERIC" на "ident SERVER" я же постил уже вроде
#
# This is the ``identification'' of the kernel. Usually this should
# be the same as the name of your kernel.
#

[RamzesII]

в файле GENERIC поменял на ident SERVER
а в файле SERVER нужно менять?

[RamzesII]

в файле GENERIC поменял на ident SERVER но непомогает выдаёт ошибку
это последние строки

Код: Выделить всё

MAKE=make sh /usr/src/sys/conf/newvers.sh GENERIC
cc -c -O -pipe  -std=c99 -g -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes  -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual  -Wundef -Wno-pointer-sign -fformat-extensions -nostdinc  -I. -I/usr/src/sys -I/usr/src/sys/contrib/altq -D_KERNEL -DHAVE_KERNEL_OPTION_HEADERS -include opt_global.h -fno-common -finline-limit=8000 --param inline-unit-growth=100 --param large-function-growth=1000  -mno-align-long-strings -mpreferred-stack-boundary=2  -mno-mmx -mno-3dnow -mno-sse -mno-sse2 -mno-sse3 -ffreestanding -Werror  vers.c
linking kernel.debug
udbp.o(.text+0x59): In function `ng_udbp_disconnect':
/usr/src/sys/dev/usb/udbp.c:857: undefined reference to `ng_rmnode_self'
udbp.o(.text+0xc9): In function `udbp_detach':
/usr/src/sys/dev/usb/udbp.c:450: undefined reference to `ng_rmnode_self'
udbp.o(.text+0xde):/usr/src/sys/dev/usb/udbp.c:452: undefined reference to `ng_unref_node'
udbp.o(.text+0x79e): In function `udbp_attach':
/usr/src/sys/dev/usb/udbp.c:375: undefined reference to `ng_newtype'
udbp.o(.text+0x7cc):/usr/src/sys/dev/usb/udbp.c:381: undefined reference to `ng_make_node_common'
udbp.o(.text+0x813):/usr/src/sys/dev/usb/udbp.c:384: undefined reference to `ng_name_node'
udbp.o(.text+0x828):/usr/src/sys/dev/usb/udbp.c:385: undefined reference to `ng_unref_node'
udbp.o(.text+0x993): In function `ng_udbp_rcvmsg':
/usr/src/sys/dev/usb/udbp.c:705: undefined reference to `M_NETGRAPH_MSG'
udbp.o(.text+0xa55):/usr/src/sys/dev/usb/udbp.c:733: undefined reference to `ng_address_ID'
udbp.o(.text+0xa6e):/usr/src/sys/dev/usb/udbp.c:733: undefined reference to `ng_snd_item'
udbp.o(.text+0xa7d):/usr/src/sys/dev/usb/udbp.c:733: undefined reference to `ng_free_item'
udbp.o(.text+0xa89):/usr/src/sys/dev/usb/udbp.c:734: undefined reference to `M_NETGRAPH_MSG'
udbp.o(.text+0xb15): In function `udbp_in_transfer_cb':
/usr/src/sys/dev/usb/udbp.c:531: undefined reference to `ng_package_data'
udbp.o(.text+0xb3a):/usr/src/sys/dev/usb/udbp.c:531: undefined reference to `ng_address_hook'
udbp.o(.text+0xb4e):/usr/src/sys/dev/usb/udbp.c:531: undefined reference to `ng_snd_item'
udbp.o(.text+0xd33): In function `ng_udbp_rmnode':
/usr/src/sys/dev/usb/udbp.c:815: undefined reference to `ng_unref_node'
udbp.o(.text+0xd46):/usr/src/sys/dev/usb/udbp.c:817: undefined reference to `ng_make_node_common'
udbp.o(.text+0xd7f):/usr/src/sys/dev/usb/udbp.c:820: undefined reference to `ng_name_node'
udbp.o(.text+0xd90):/usr/src/sys/dev/usb/udbp.c:821: undefined reference to `ng_unref_node'
udbp.o(.text+0xde3): In function `ng_udbp_rcvdata':
/usr/src/sys/dev/usb/udbp.c:752: undefined reference to `ng_free_item'
udbp.o(.rodata+0x20): In function `ng_udbp_connect':
/usr/src/sys/dev/usb/udbp.c:842: undefined reference to `ng_parse_int32_type'
udbp.o(.rodata+0x3c): In function `ng_udbp_disconnect':
/usr/src/sys/dev/usb/udbp.c:853: undefined reference to `ng_parse_struct_type'
udbp.o(.rodata+0x64):/usr/src/sys/dev/usb/udbp.c:859: undefined reference to `ng_parse_int32_type'
udbp.o(.rodata+0x70): In function `udbp_detach':
/usr/src/sys/dev/usb/udbp.c:433: undefined reference to `ng_parse_int32_type'
*** Error code 1

Stop in /usr/obj/usr/src/sys/SERVER.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.

[hizel]

выложите пожалуйста полный конфиг ядра SERVER

[RamzesII]

выложите пожалуйста полный конфиг ядра SERVER

вот конфиг ядра SERVER

Код: Выделить всё

#
# GENERIC -- Generic kernel configuration file for FreeBSD/i386
#
# For more information on this file, please read the handbook section on
# Kernel Configuration Files:
#
#    http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-config.html
#
# The handbook is also available locally in /usr/share/doc/handbook
# if you've installed the doc distribution, otherwise always see the
# FreeBSD World Wide Web server (http://www.FreeBSD.org/) for the
# latest information.
#
# An exhaustive list of options and more detailed explanations of the
# device lines is also present in the ../../conf/NOTES and NOTES files.
# If you are in doubt as to the purpose or necessity of a line, check first
# in NOTES.
#
# $FreeBSD: src/sys/i386/conf/GENERIC,v 1.474.2.2.2.1 2008/02/06 03:24:28 scottl Exp $

cpu		I486_CPU
cpu		I586_CPU
cpu		I686_CPU
ident		SERVER

# To statically compile in device wiring instead of /boot/device.hints
#hints		"GENERIC.hints"		# Default places to look for devices.

makeoptions	DEBUG=-g		# Build kernel with gdb(1) debug symbols

options 	SCHED_4BSD		# 4BSD scheduler
options 	PREEMPTION		# Enable kernel thread preemption
options 	INET			# InterNETworking
options 	INET6			# IPv6 communications protocols
options 	SCTP			# Stream Control Transmission Protocol
options 	FFS			# Berkeley Fast Filesystem
options 	SOFTUPDATES		# Enable FFS soft updates support
options 	UFS_ACL			# Support for access control lists
options 	UFS_DIRHASH		# Improve performance on big directories
options 	UFS_GJOURNAL		# Enable gjournal-based UFS journaling
options 	MD_ROOT			# MD is a potential root device
options 	NFSCLIENT		# Network Filesystem Client
options 	NFSSERVER		# Network Filesystem Server
options 	NFS_ROOT		# NFS usable as /, requires NFSCLIENT
options 	MSDOSFS			# MSDOS Filesystem
options 	CD9660			# ISO 9660 Filesystem
options 	PROCFS			# Process filesystem (requires PSEUDOFS)
options 	PSEUDOFS		# Pseudo-filesystem framework
options 	GEOM_PART_GPT		# GUID Partition Tables.
options 	GEOM_LABEL		# Provides labelization
options 	COMPAT_43TTY		# BSD 4.3 TTY compat [KEEP THIS!]
options 	COMPAT_FREEBSD4		# Compatible with FreeBSD4
options 	COMPAT_FREEBSD5		# Compatible with FreeBSD5
options 	COMPAT_FREEBSD6		# Compatible with FreeBSD6
options 	SCSI_DELAY=5000		# Delay (in ms) before probing SCSI
options 	KTRACE			# ktrace(1) support
options 	SYSVSHM			# SYSV-style shared memory
options 	SYSVMSG			# SYSV-style message queues
options 	SYSVSEM			# SYSV-style semaphores
options 	_KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions
options 	KBD_INSTALL_CDEV	# install a CDEV entry in /dev
options 	ADAPTIVE_GIANT		# Giant mutex is adaptive.
options 	STOP_NMI		# Stop CPUS using NMI instead of IPI
options 	AUDIT			# Security event auditing

# To make an SMP kernel, the next two lines are needed
options 	SMP			# Symmetric MultiProcessor Kernel
device		apic			# I/O APIC

# CPU frequency control
device		cpufreq

# Bus support.
device		eisa
device		pci

# Floppy drives
device		fdc

# ATA and ATAPI devices
device		ata
device		atadisk		# ATA disk drives
device		ataraid		# ATA RAID drives
device		atapicd		# ATAPI CDROM drives
device		atapifd		# ATAPI floppy drives
device		atapist		# ATAPI tape drives
options 	ATA_STATIC_ID	# Static device numbering

# SCSI Controllers
device		ahb		# EISA AHA1742 family
device		ahc		# AHA2940 and onboard AIC7xxx devices
options 	AHC_REG_PRETTY_PRINT	# Print register bitfields in debug
					# output.  Adds ~128k to driver.
device		ahd		# AHA39320/29320 and onboard AIC79xx devices
options 	AHD_REG_PRETTY_PRINT	# Print register bitfields in debug
					# output.  Adds ~215k to driver.
device		amd		# AMD 53C974 (Tekram DC-390(T))
device		hptiop		# Highpoint RocketRaid 3xxx series
device		isp		# Qlogic family
#device 	ispfw		# Firmware for QLogic HBAs- normally a module
device		mpt		# LSI-Logic MPT-Fusion
#device		ncr		# NCR/Symbios Logic
device		sym		# NCR/Symbios Logic (newer chipsets + those of `ncr')
device		trm		# Tekram DC395U/UW/F DC315U adapters

device		adv		# Advansys SCSI adapters
device		adw		# Advansys wide SCSI adapters
device		aha		# Adaptec 154x SCSI adapters
device		aic		# Adaptec 15[012]x SCSI adapters, AIC-6[23]60.
device		bt		# Buslogic/Mylex MultiMaster SCSI adapters

device		ncv		# NCR 53C500
device		nsp		# Workbit Ninja SCSI-3
device		stg		# TMC 18C30/18C50

# SCSI peripherals
device		scbus		# SCSI bus (required for SCSI)
device		ch		# SCSI media changers
device		da		# Direct Access (disks)
device		sa		# Sequential Access (tape etc)
device		cd		# CD
device		pass		# Passthrough device (direct SCSI access)
device		ses		# SCSI Environmental Services (and SAF-TE)

# RAID controllers interfaced to the SCSI subsystem
device		amr		# AMI MegaRAID
device		arcmsr		# Areca SATA II RAID
device		asr		# DPT SmartRAID V, VI and Adaptec SCSI RAID
device		ciss		# Compaq Smart RAID 5*
device		dpt		# DPT Smartcache III, IV - See NOTES for options
device		hptmv		# Highpoint RocketRAID 182x
device		hptrr		# Highpoint RocketRAID 17xx, 22xx, 23xx, 25xx
device		iir		# Intel Integrated RAID
device		ips		# IBM (Adaptec) ServeRAID
device		mly		# Mylex AcceleRAID/eXtremeRAID
device		twa		# 3ware 9000 series PATA/SATA RAID

# RAID controllers
device		aac		# Adaptec FSA RAID
device		aacp		# SCSI passthrough for aac (requires CAM)
device		ida		# Compaq Smart RAID
device		mfi		# LSI MegaRAID SAS
device		mlx		# Mylex DAC960 family
device		pst		# Promise Supertrak SX6000
device		twe		# 3ware ATA RAID

# atkbdc0 controls both the keyboard and the PS/2 mouse
device		atkbdc		# AT keyboard controller
device		atkbd		# AT keyboard
device		psm		# PS/2 mouse

device		kbdmux		# keyboard multiplexer

device		vga		# VGA video card driver

device		splash		# Splash screen and screen saver support

# syscons is the default console driver, resembling an SCO console
device		sc

device		agp		# support several AGP chipsets

# Power management support (see NOTES for more options)
#device		apm
# Add suspend/resume support for the i8254.
device		pmtimer

# PCCARD (PCMCIA) support
# PCMCIA and cardbus bridge support
device		cbb		# cardbus (yenta) bridge
device		pccard		# PC Card (16-bit) bus
device		cardbus		# CardBus (32-bit) bus

# Serial (COM) ports
device		sio		# 8250, 16[45]50 based serial ports
device		uart		# Generic UART driver

# Parallel port
device		ppc
device		ppbus		# Parallel port bus (required)
device		lpt		# Printer
device		plip		# TCP/IP over parallel
device		ppi		# Parallel port interface device
#device		vpo		# Requires scbus and da

# If you've got a "dumb" serial or parallel PCI card that is
# supported by the puc(4) glue driver, uncomment the following
# line to enable it (connects to sio, uart and/or ppc drivers):
#device		puc

# PCI Ethernet NICs.
device		de		# DEC/Intel DC21x4x (``Tulip'')
device		em		# Intel PRO/1000 adapter Gigabit Ethernet Card
device		ixgb		# Intel PRO/10GbE Ethernet Card
device		le		# AMD Am7900 LANCE and Am79C9xx PCnet
device		txp		# 3Com 3cR990 (``Typhoon'')
device		vx		# 3Com 3c590, 3c595 (``Vortex'')

# PCI Ethernet NICs that use the common MII bus controller code.
# NOTE: Be sure to keep the 'device miibus' line in order to use these NICs!
device		miibus		# MII bus support
device		bce		# Broadcom BCM5706/BCM5708 Gigabit Ethernet
device		bfe		# Broadcom BCM440x 10/100 Ethernet
device		bge		# Broadcom BCM570xx Gigabit Ethernet
device		dc		# DEC/Intel 21143 and various workalikes
device		fxp		# Intel EtherExpress PRO/100B (82557, 82558)
device		lge		# Level 1 LXT1001 gigabit Ethernet
device		msk		# Marvell/SysKonnect Yukon II Gigabit Ethernet
device		nfe		# nVidia nForce MCP on-board Ethernet
device		nge		# NatSemi DP83820 gigabit Ethernet
#device		nve		# nVidia nForce MCP on-board Ethernet Networking
device		pcn		# AMD Am79C97x PCI 10/100 (precedence over 'le')
device		re		# RealTek 8139C+/8169/8169S/8110S
device		rl		# RealTek 8129/8139
device		sf		# Adaptec AIC-6915 (``Starfire'')
device		sis		# Silicon Integrated Systems SiS 900/SiS 7016
device		sk		# SysKonnect SK-984x & SK-982x gigabit Ethernet
device		ste		# Sundance ST201 (D-Link DFE-550TX)
device		stge		# Sundance/Tamarack TC9021 gigabit Ethernet
device		ti		# Alteon Networks Tigon I/II gigabit Ethernet
device		tl		# Texas Instruments ThunderLAN
device		tx		# SMC EtherPower II (83c170 ``EPIC'')
device		vge		# VIA VT612x gigabit Ethernet
device		vr		# VIA Rhine, Rhine II
device		wb		# Winbond W89C840F
device		xl		# 3Com 3c90x (``Boomerang'', ``Cyclone'')

# ISA Ethernet NICs.  pccard NICs included.
device		cs		# Crystal Semiconductor CS89x0 NIC
# 'device ed' requires 'device miibus'
device		ed		# NE[12]000, SMC Ultra, 3c503, DS8390 cards
device		ex		# Intel EtherExpress Pro/10 and Pro/10+
device		ep		# Etherlink III based cards
device		fe		# Fujitsu MB8696x based cards
device		ie		# EtherExpress 8/16, 3C507, StarLAN 10 etc.
device		sn		# SMC's 9000 series of Ethernet chips
device		xe		# Xircom pccard Ethernet

# Wireless NIC cards
device		wlan		# 802.11 support
device		wlan_wep	# 802.11 WEP support
device		wlan_ccmp	# 802.11 CCMP support
device		wlan_tkip	# 802.11 TKIP support
device		wlan_amrr	# AMRR transmit rate control algorithm
device		wlan_scan_ap	# 802.11 AP mode scanning
device		wlan_scan_sta	# 802.11 STA mode scanning
device		an		# Aironet 4500/4800 802.11 wireless NICs.
device		ath		# Atheros pci/cardbus NIC's
device		ath_hal		# Atheros HAL (Hardware Access Layer)
device		ath_rate_sample	# SampleRate tx rate control for ath
device		awi		# BayStack 660 and others
device		ral		# Ralink Technology RT2500 wireless NICs.
device		wi		# WaveLAN/Intersil/Symbol 802.11 wireless NICs.
#device		wl		# Older non 802.11 Wavelan wireless NIC.

# Pseudo devices.
device		loop		# Network loopback
device		random		# Entropy device
device		ether		# Ethernet support
device		sl		# Kernel SLIP
device		ppp		# Kernel PPP
device		tun		# Packet tunnel.
device		pty		# Pseudo-ttys (telnet etc)
device		md		# Memory "disks"
device		gif		# IPv6 and IPv4 tunneling
device		faith		# IPv6-to-IPv4 relaying (translation)
device		firmware	# firmware assist module

# The `bpf' device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
# Note that 'bpf' is required for DHCP.
device		bpf		# Berkeley packet filter

# USB support
device		uhci		# UHCI PCI->USB interface
device		ohci		# OHCI PCI->USB interface
device		ehci		# EHCI PCI->USB interface (USB 2.0)
device		usb		# USB Bus (required)
#device		udbp		# USB Double Bulk Pipe devices
device		ugen		# Generic
device		uhid		# "Human Interface Devices"
device		ukbd		# Keyboard
device		ulpt		# Printer
device		umass		# Disks/Mass storage - Requires scbus and da
device		ums		# Mouse
device		ural		# Ralink Technology RT2500USB wireless NICs
device		rum		# Ralink Technology RT2501USB wireless NICs
device		urio		# Diamond Rio 500 MP3 player
device		uscanner	# Scanners
# USB Ethernet, requires miibus
device		aue		# ADMtek USB Ethernet
device		axe		# ASIX Electronics USB Ethernet
device		cdce		# Generic USB over Ethernet
device		cue		# CATC USB Ethernet
device		kue		# Kawasaki LSI USB Ethernet
device		rue		# RealTek RTL8150 USB Ethernet

# FireWire support
device		firewire	# FireWire bus code
device		sbp		# SCSI over FireWire (Requires scbus and da)
device		fwe		# Ethernet over FireWire (non-standard!)
device		fwip		# IP over FireWire (RFC 2734,3146)
device		dcons		# Dumb console driver
device		dcons_crom	# Configuration ROM for dcons
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=100
options IPFIREWALL_DEFAULT_TO_ACCEPT
options DUMMYNET