forum.lissyara.su

Код: Выделить всё

#	default:
#		load client1
#		load client2
#		...
#	
#	client1:
#		new -i ng0 pptp1 pptp1
#		set ipcp ranges 192.168.1.1/32 192.168.1.50/32
#		load client_standard
#		...
#	
#	client2:
#		new -i ng1 pptp2 pptp2
#		set ipcp ranges 192.168.1.1/32 192.168.1.51/32
#		load client_standard
#		...
#	
#	client_standard:
#		set iface disable on-demand
#		set iface enable proxy-arp
#		set iface idle 1800
#		set iface enable tcpmssfix
#		set bundle enable multilink
#		set link yes acfcomp protocomp
#		set link no pap chap
#		set link enable chap
#		set link mtu 1496
#		set link keep-alive 10 60
#		set ipcp yes vjcomp
#		set ipcp dns 192.168.1.3
#		set ipcp nbns 192.168.1.4
#		set bundle enable compression
#		set ccp yes mppc
#		set ccp yes mpp-e40
#		set ccp yes mpp-e128
#		set ccp yes mpp-stateless
#		set bundle yes crypt-reqd
#
#
#	
# See also the 'pptp' link entry in mpd.links.sample.
#
# Note: If you cut & paste from the above example, be sure to left-justify
# the labels or else mpd won't parse them correctly.
#

pptp:
	new -i ng0 pptp pptp
	set iface disable on-demand
	set iface enable proxy-arp
	set iface idle 1800
	set iface enable tcpmssfix
	set bundle enable multilink
# enable TCP-Wrapper (hosts_access(5)) to block unfriendly clients
#	set bundle enable tcp-wrapper
# use RADIUS servers 
#	load radius
	set link yes acfcomp protocomp
	set link no pap chap
	set link enable chap
	set link keep-alive 10 60
	set link mtu 1496
	set ipcp yes vjcomp
	#set ipcp ranges 192.168.1.1/32 192.168.1.50/32
	#set ipcp dns 192.168.1.3
	#set ipcp nbns 192.168.1.4
#
# The five lines below enable Microsoft Point-to-Point encryption
# (MPPE) using the ng_mppc(8) netgraph node type.
#
	set bundle enable compression
	set pptp peer 172.17.25.1
	set pptp enable incoming outcall 
	set ccp yes mppc
	set ccp yes mpp-e40
	set ccp yes mpp-e128
	set ccp yes mpp-stateless

open iface

vpn:
	new -i ng1 vpn vpn
	set iface disable on-demand
	set iface addrs 192.168.1.1 192.168.2.1
	set iface idle 0


#
# PPPoE client example (see also mpd.links.sample entry "PPPoE")
#

PPPoE:
	new -i ng0 vpn1 vpn1
#	set iface addrs 1.1.1.1 2.2.2.2
	set iface route default
	set iface disable on-demand
	set iface idle 0
	set bundle disable multilink
	set bundle authname wt
	set link type pptp
	set link accept acfcomp protocomp
	set link accept pap chap
	#set link disable pap chap
#	set link accept chap
#	set link mtu 1496
	set link keep-alive 60 180
	set ipcp yes vjcomp
	#set ipcp ranges 0.0.0.0/0 0.0.0.0/0
	set pptp peer 172.17.25.1
#	set pptp enable incoming
#	set pptp enable outcall
	set pptp enable originate incoming outcall
	
	open iface


________________________________________________________

Код: Выделить всё

firewall_enable="YES"
firewall_script="/etc/ipfw.sh"
#firewall_enable="YES"		# Set to YES to enable firewall functionality
#firewall_script="/etc/rc.firewall.muhosransk" # Which script to run to set up the firewall
#firewall_type="rc.firewall.muhosransk"		# Firewall type (see /etc/rc.firewall)
#firewall_logging="YES"		# Set to YES to enable events logging
#natd_program="/sbin/natd"	# path to natd, if you want a different one.
#natd_enable="YES"		# Enable natd (if firewall_enable == YES).
#natd_interface="rl0"		# Public interface or IPaddress to use.
#natd_flags=""			# Additional flags for natd.
ifconfig_lo0="inet 127.0.0.1"	# default loopback device configuration.
ifconfig_rl0="inet 172.17.25.144 netmask 255.255.255.0"
ifconfig_rl1="inet 10.10.10.1 netmask 255.255.255.0"
### Network daemon (miscellaneous) ###
syslogd_enable="YES"		# Run syslog daemon (or NO).
#syslogd_program="/usr/sbin/syslogd" # path to syslogd, if you want a different one.
#syslogd_flags="-s"		# Flags to syslogd (if enabled).
#syslogd_flags="-ss"		# Syslogd flags to not bind an inet socket
inetd_enable="YES"		# Run the network daemon dispatcher (YES/NO).
#inetd_program="/usr/sbin/inetd"	# path to inetd, if you want a different one.
#inetd_flags="-wW -C 60"		# Optional flags to inetd
sshd_enable="YES"		# Enable sshd
#sshd_program="/usr/sbin/sshd"	# path to sshd, if you want a different one.
#sshd_flags=""			# Additional flags for sshd.



### Network routing options: ###
defaultrouter="NO" #"172.17.25.1"		# Set to default gateway (or NO).
#static_routes=""		# Set to static route list (or leave empty).
#natm_static_routes=""		# Set to static route list for NATM (or leave empty).
gateway_enable="YES"		# Set to YES if this host will be a gateway.
#router_enable="YES"		# Set to YES to enable a routing daemon.
#router="/sbin/routed"		# Name of routing daemon to use if enabled.
#router_flags="-q"		# Flags for routing daemon.
#forward_sourceroute="NO"	# do source routing (only if gateway_enable is set to "YES")
#accept_sourceroute="NO"		# accept source routed packets to us

pf_enable="YES"
pf_rules="/etc/pf.conf"
pf_program="/sbin/pfctl"
pflog_enable="YES"
pflog_logfile="/var/log/pflog"
pflog_program="/sbin/pflogd"