Модератор: terminus
Код: Выделить всё
net.inet.ip.fw.one_pass=0Код: Выделить всё
net.inet.ip.fw.one_pass=0
Код: Выделить всё
dmesg -alissyara писал(а):Код: Выделить всё
dmesg -a
Код: Выделить всё
Copyright (c) 1992-2010 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 8.0-STABLE #1: Tue Mar 23 16:15:52 MSK 2010
rootello@gateway.vysota.local:/usr/obj/usr/src/sys/GATE i386
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Pentium(R) 4 CPU 3.00GHz (2992.52-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0xf41 Stepping = 1
Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
Features2=0x441d<SSE3,DTES64,MON,DS_CPL,CNXT-ID,xTPR>
TSC: P-state invariant
real memory = 671088640 (640 MB)
avail memory = 637911040 (608 MB)
ACPI APIC Table: <A M I OEMAPIC >
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
FreeBSD/SMP: 1 package(s) x 1 core(s) x 2 HTT threads
cpu0 (BSP): APIC ID: 0
cpu1 (AP/HT): APIC ID: 1
ioapic0 <Version 2.0> irqs 0-23 on motherboard
kbd1 at kbdmux0
acpi0: <A M I OEMRSDT> on motherboard
acpi0: [ITHREAD]
acpi0: Power Button (fixed)
acpi0: reservation of 0, a0000 (3) failed
acpi0: reservation of 100000, 27700000 (3) failed
Timecounter "ACPI-safe" frequency 3579545 Hz quality 850
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
vgapci0: <VGA-compatible display> port 0xdc00-0xdc07 mem 0xfea80000-0xfeafffff,0xd0000000-0xdfffffff,0xfea40000-0xfea7ffff irq 16 at device 2.0 on pci0
agp0: <Intel 82915G (915G GMCH) SVGA controller> on vgapci0
agp0: detected 7932k stolen memory
agp0: aperture size is 256M
uhci0: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-A> port 0xd880-0xd89f irq 23 at device 29.0 on pci0
uhci0: [ITHREAD]
uhci0: LegSup = 0x2f00
usbus0: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-A> on uhci0
uhci1: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-B> port 0xd800-0xd81f irq 19 at device 29.1 on pci0
uhci1: [ITHREAD]
uhci1: LegSup = 0x2f00
usbus1: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-B> on uhci1
uhci2: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-C> port 0xd480-0xd49f irq 18 at device 29.2 on pci0
uhci2: [ITHREAD]
uhci2: LegSup = 0x2f00
usbus2: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-C> on uhci2
uhci3: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-D> port 0xd400-0xd41f irq 16 at device 29.3 on pci0
uhci3: [ITHREAD]
uhci3: LegSup = 0x2f00
usbus3: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-D> on uhci3
ehci0: <Intel 82801FB (ICH6) USB 2.0 controller> mem 0xfea3bc00-0xfea3bfff irq 23 at device 29.7 on pci0
ehci0: [ITHREAD]
usbus4: EHCI version 1.0
usbus4: <Intel 82801FB (ICH6) USB 2.0 controller> on ehci0
pcib1: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci1: <ACPI PCI bus> on pcib1
rl0: <RealTek 8139 10/100BaseTX> port 0xe800-0xe8ff mem 0xfebffc00-0xfebffcff irq 18 at device 1.0 on pci1
miibus0: <MII bus> on rl0
rlphy0: <RealTek internal media interface> PHY 0 on miibus0
rlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
rl0: Ethernet address: 00:e0:4c:48:a5:5a
rl0: [ITHREAD]
rl1: <RealTek 8139 10/100BaseTX> port 0xe400-0xe4ff mem 0xfebff800-0xfebff8ff irq 20 at device 5.0 on pci1
miibus1: <MII bus> on rl1
rlphy1: <RealTek internal media interface> PHY 0 on miibus1
rlphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
rl1: Ethernet address: 00:11:5b:a2:17:b7
rl1: [ITHREAD]
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel ICH6 SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xffa0-0xffaf at device 31.2 on pci0
ata0: <ATA channel 0> on atapci0
ata0: [ITHREAD]
ata1: <ATA channel 1> on atapci0
ata1: [ITHREAD]
pci0: <serial bus, SMBus> at device 31.3 (no driver attached)
acpi_button0: <Power Button> on acpi0
acpi_tz0: <Thermal Zone> on acpi0
atrtc0: <AT realtime clock> port 0x70-0x71 irq 8 on acpi0
uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
uart0: [FILTER]
uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0
uart1: [FILTER]
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: [ITHREAD]
psm0: model IntelliMouse Explorer, device ID 4
cpu0: <ACPI CPU> on acpi0
p4tcc0: <CPU Frequency Thermal Control> on cpu0
cpu1: <ACPI CPU> on acpi0
p4tcc1: <CPU Frequency Thermal Control> on cpu1
pmtimer0 on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
ppc0: parallel port not found.
Timecounters tick every 1.000 msec
ipfw2 initialized, divert enabled, nat enabled, rule-based forwarding enabled, default to deny, logging disabled
usbus0: 12Mbps Full Speed USB v1.0
usbus1: 12Mbps Full Speed USB v1.0
usbus2: 12Mbps Full Speed USB v1.0
usbus3: 12Mbps Full Speed USB v1.0
usbus4: 480Mbps High Speed USB v2.0
ad0: 76319MB <Seagate ST380817AS 3.42> at ata0-master UDMA100 SATA
ugen0.1: <Intel> at usbus0
uhub0: <Intel UHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus0
ugen1.1: <Intel> at usbus1
uhub1: <Intel UHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus1
ugen2.1: <Intel> at usbus2
uhub2: <Intel UHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus2
ugen3.1: <Intel> at usbus3
uhub3: <Intel UHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus3
ugen4.1: <Intel> at usbus4
uhub4: <Intel EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus4
acd0: CDRW <NEC CD-RW NR-9500A/NS00> at ata1-master UDMA33 SATA
SMP: AP CPU #1 Launched!
Root mount waiting for: usbus4 usbus3 usbus2 usbus1 usbus0
uhub0: 2 ports with 2 removable, self powered
uhub1: 2 ports with 2 removable, self powered
uhub2: 2 ports with 2 removable, self powered
uhub3: 2 ports with 2 removable, self powered
Root mount waiting for: usbus4
Root mount waiting for: usbus4
Root mount waiting for: usbus4
uhub4: 8 ports with 8 removable, self powered
Trying to mount root from ufs:/dev/ad0s1a
Setting hostuuid: 00020003-0004-0005-0006-000700080009.
Setting hostid: 0x81f4ec68.
Entropy harvesting:
interrupts
ethernet
point_to_point
kickstart
.
Starting file system checks:
/dev/ad0s1a: FILE SYSTEM CLEAN; SKIPPING CHECKS
/dev/ad0s1a: clean, 204993 free (1057 frags, 25492 blocks, 0.4% fragmentation)
/dev/ad0s1d: FILE SYSTEM CLEAN; SKIPPING CHECKS
/dev/ad0s1d: clean, 506481 free (41 frags, 63305 blocks, 0.0% fragmentation)
/dev/ad0s1e: FILE SYSTEM CLEAN; SKIPPING CHECKS
/dev/ad0s1e: clean, 14095806 free (59726 frags, 1754510 blocks, 0.4% fragmentation)
/dev/ad0s1f: FILE SYSTEM CLEAN; SKIPPING CHECKS
/dev/ad0s1f: clean, 20814747 free (691 frags, 2601757 blocks, 0.0% fragmentation)
Mounting local file systems:
.
Setting hostname: xxx.xxxx.xxx
.
Starting Network: lo0 rl0 rl1.
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=3<RXCSUM,TXCSUM>
inet 127.0.0.1 netmask 0xff000000
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=8<VLAN_MTU>
ether 00:e0:4c:48:a5:5a
inet xxx.xxx.xxx.xxx netmask 0xfffffff8 broadcast xxx.xxx.xxx.xxx
media: Ethernet autoselect (none)
status: no carrier
rl1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=8<VLAN_MTU>
ether 00:11:5b:a2:17:b7
inet 192.168.10.2 netmask 0xffffff00 broadcast 192.168.10.255
media: Ethernet autoselect (none)
status: no carrier
add net default: gateway xxx.xxx.xxx.xxx
Additional routing options:
ignore ICMP redirect=YES
log ICMP redirect=YES
IP gateway=YES
.
Starting devd.
Flushed all rules.
00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
00100 allow ip from any to any via rl1
00200 deny ip from any to 192.168.0.0/16 in recv rl0
00300 deny ip from 192.168.0.0/16 to any in recv rl0
00400 deny ip from any to 172.16.0.0/12 in recv rl0
00500 deny ip from 172.16.0.0/12 to any in recv rl0
00600 deny ip from any to 10.0.0.0/8 in recv rl0
00800 deny ip from any to 169.254.0.0/16 in recv rl0
00900 deny ip from 169.254.0.0/16 to any in recv rl0
00950 allow ip from any to any via tun0
00940 allow udp from any to xxx.xxx.xxx.xxx dst-port 2000
ipfw nat 1 config if rl0 log deny_in same_ports reset redirect_port tcp xxx.xxx.xxx.xxx:1705 1705
00980 divert 199 log logamount 50 ip from any to any via rl0
01000 nat 1 ip from any to any via rl0
01020 divert 199 log logamount 50 ip from any to any via rl0
02000 allow ip from any to any
65534 deny ip from any to any
Firewall rules loaded.
Additional TCP/IP options:
drop SYN+FIN packets=YES
.
ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib /usr/local/lib/compat/pkg /usr/local/lib/compat/pkg /usr/local/lib/dovecot /usr/local/lib/dovecot/imap /usr/local/lib/dovecot/lda /usr/local/lib/dovecot/pop3 /usr/local/lib/mysql
a.out ldconfig path: /usr/lib/aout /usr/lib/compat/aout
Creating and/or trimming log files
.
Starting syslogd.
Clearing /tmp.
Updating motd:
.
Starting mysql.
rl0: link state changed to UP
rl1: link state changed to UP
Starting proftpd.
- mod_tls/2.2.2: compiled using OpenSSL version 'OpenSSL 0.9.8m 25 Feb 2010' headers, but linked to OpenSSL version 'OpenSSL 1.0.0 29 Mar 2010' library
Starting openvpn.
tun0: link state changed to UP
Starting netams.
Starting exim.
Starting dovecot.
Performing sanity check on apache22 configuration:
Syntax OK
Starting apache22.
Configuring syscons:
keymap
blanktime
screensaver
.
Starting sshd.
Starting cron.
Starting background file system checks in 60 seconds.
Fri Apr 16 10:00:23 MSD 2010
tun0: link state changed to UP
Apr 16 10:06:13 post shutdown: reboot by root:
Stopping cron.
Stopping sshd.
Stopping apache22.
Waiting for PIDS: 918
.
Stopping dovecot.
Stopping exim.
Stopping netams.
Waiting for PIDS: 872
.
Stopping proftpd.
Waiting for PIDS: 790
.
Stopping mysql.
Waiting for PIDS: 761
.
Stopping devd.
Writing entropy file:
.
Terminated
.
Apr 16 10:06:24 post syslogd: exiting on signal 15
Waiting (max 60 seconds) for system process `vnlru' to stop...done
Waiting (max 60 seconds) for system process `bufdaemon' to stop...done
Waiting (max 60 seconds) for system process `syncer' to stop...
Syncing disks, vnodes remaining...5 3 0 2 1 0 0 done
All buffers synced.
Прошу прощения за непонятливость, но что именно прописать в sysctl.conf ?lissyara писал(а):пля.
в /etc/sysctl.conf пропишите
Код: Выделить всё
man sysctl.confКод: Выделить всё
net.inet.ip.fw.one_pass=0и чем же ты редактировал файл? редактором "ee"?dyatlovm писал(а):Тему можно закрыть.
Вопрос решен. После строкив sysctl.conf нужен был перевод строки.Код: Выделить всё
net.inet.ip.fw.one_pass=0
Редактировал в mc.sch писал(а):и чем же ты редактировал файл? редактором "ee"?dyatlovm писал(а):Тему можно закрыть.
Вопрос решен. После строкив sysctl.conf нужен был перевод строки.Код: Выделить всё
net.inet.ip.fw.one_pass=0
странно, у меня в sysctl.conf не было перевода строки (редактор ее) и все работает, параметр прекрасно подхватился.sch писал(а):я к чему спросил про ее - vi/vim автоматически добавляет перевод строки
также нет этой проблемы если добавлять строки в файл через echo
Код: Выделить всё
cat /etc/sysctl.conf