forum.lissyara.su

Код: Выделить всё

# uname -a
FreeBSD main-gateway.ogk.local 8.1-RELEASE-p2 FreeBSD 8.1-RELEASE-p2 #0: Thu Jan 20 12:08:10 YEKT 2011     root@main-gateway.ogk.local:/usr/obj/usr/src/sys/ROUTER  amd64

Код: Выделить всё

# cat /etc/src.conf
WITHOUT_ACCT="TRUE"             # Need for accounting tools such as ac(8) and accton(8)
WITHOUT_AMD="TRUE"
WITHOUT_APM="TRUE"
WITHOUT_ASSERT_DEBUG="TRUE"
WITHOUT_ATM="TRUE"
WITHOUT_AUDIT="TRUE"
WITHOUT_AUTHPF="TRUE"
WITHOUT_BIND="TRUE"
WITHOUT_BLUETOOTH="TRUE"
WITHOUT_BSNMP="TRUE"
WITHOUT_CALENDAR="TRUE"
WITHOUT_CDDL="TRUE"
WITHOUT_CTM="TRUE"
WITHOUT_DICT="TRUE"
WITHOUT_FLOPPY="TRUE"
WITHOUT_FREEBSD_UPDATE="TRUE"
WITHOUT_GAMES="TRUE"
WITHOUT_GDB="TRUE"
WITHOUT_GPIB="TRUE"
WITHOUT_GSSAPI="TRUE"
WITHOUT_HTML="TRUE"
WITHOUT_INET6="TRUE"
WITHOUT_INET6_SUPPORT="TRUE"
WITHOUT_IPFILTER="TRUE"
WITHOUT_IPX="TRUE"
WITHOUT_KERBEROS="TRUE"
WITHOUT_KERBEROS_SUPPORT="TRUE"
WITHOUT_KVM="TRUE"
WITHOUT_KVM_SUPPORT="TRUE"
WITHOUT_LPR="TRUE"
#WITHOUT_MAIL="TRUE"
WITHOUT_MAILWRAPPER="TRUE"
WITHOUT_NCP="TRUE"
WITHOUT_NDIS="TRUE"
WITHOUT_NIS="TRUE"
WITHOUT_NLS="TRUE"
WITHOUT_NLS_CATALOGS="TRUE"
WITHOUT_NS_CACHING="TRUE"
WITHOUT_PF="TRUE"
WITHOUT_PORTSNAP="TRUE"
WITHOUT_PPP="TRUE"
WITHOUT_PROFILE="TRUE"
WITHOUT_QUOTAS="TRUE"
WITHOUT_RCS="TRUE"
WITHOUT_RESCUE="TRUE"
WITHOUT_ROUTED="TRUE"
WITHOUT_SENDMAIL="TRUE"
WITHOUT_TELNET="TRUE"
WITHOUT_WIRELESS="TRUE"
WITHOUT_WIRELESS_SUPPORT="TRUE"
WITHOUT_WPA_SUPPLICANT_EAPOL="TRUE"
WITHOUT_ZFS="TRUE"

Код: Выделить всё

# cat /usr/src/sys/amd64/conf/ROUTER
cpu             HAMMER                  # Наш процессор
ident           ROUTER                  # Имя нашего конфига

# ---------- FIREWALL ----------
options         IPFIREWALL              # собственно файрволл
options         IPFIREWALL_VERBOSE      # логгинг пакетов, если в правиле написано log
options         IPFIREWALL_VERBOSE_LIMIT=100    # ограничение логов (повторяющихся) - на случай атак типа флудинга
options         IPFIREWALL_FORWARD      # перенаправление (форвардинг) пакетов например, для прозрачного прокси
options         IPFIREWALL_NAT          # поддержка ipfw ядерного NAT
options         DUMMYNET                # если понадобится ограничивать скорость инета пользователям
options         HZ=1000                 # strongly recommended
options         LIBALIAS                # Библиотека необходимая для ядерного NAT
# ---------- FIREWALL ----------

options         SCHED_ULE               # ULE scheduler
options         PREEMPTION              # Enable kernel thread preemption
options         INET                    # InterNETworking
#options        INET6                   # IPv6 communications protocols
#options        SCTP                    # Stream Control Transmission Protocol
options         FFS                     # Berkeley Fast Filesystem
options         SOFTUPDATES             # Enable FFS soft updates support
#options        UFS_ACL                 # Support for access control lists
options         UFS_DIRHASH             # Improve performance on big directories
options         UFS_GJOURNAL            # Enable gjournal-based UFS journaling
#options        PROCFS                  # Process filesystem (requires PSEUDOFS)
#options        PSEUDOFS                # Pseudo-filesystem framework
options         GEOM_PART_GPT           # GUID Partition Tables
options         GEOM_LABEL              # Provides labelization
options         GEOM_MIRROR             # Disk mirroring
options         COMPAT_43TTY            # BSD 4.3 TTY compat (sgtty)
#options        COMPAT_FREEBSD32        # Compatible with i386 binaries
#options        COMPAT_FREEBSD4         # Compatible with FreeBSD4
#options        COMPAT_FREEBSD5         # Compatible with FreeBSD5
#options        COMPAT_FREEBSD6         # Compatible with FreeBSD6
#options        COMPAT_FREEBSD7         # Compatible with FreeBSD7
options         SYSVSHM                 # SYSV-style shared memory
options         SYSVMSG                 # SYSV-style message queues
options         SYSVSEM                 # SYSV-style semaphores
options         P1003_1B_SEMAPHORES     # POSIX-style semaphores
options         _KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions
options         PRINTF_BUFR_SIZE=128    # Prevent printf output being interspersed.
#options        FLOWTABLE               # per-cpu routing cache
options         INCLUDE_CONFIG_FILE     # Include this file in kernel

# Make an SMP-capable kernel by default
options         SMP                     # Symmetric MultiProcessor Kernel

# CPU frequency control
device          cpufreq

# Bus support.
device          acpi
device          pci
device          ichsmb                  # Intel ICH SMBus controller driver
device          smbus
device          smb

# ATA and ATAPI devices
device          ata
device          atadisk         # ATA disk drives
device          atapicd         # ATAPI CDROM drives
options         ATA_STATIC_ID   # Static device numbering

# SCSI peripherals for USB
#device         scbus           # SCSI bus (required for SCSI)
#device         da              # Direct Access (disks)
#device         pass            # Passthrough device (direct SCSI access)

# USB support
device          uhci            # UHCI PCI->USB interface
device          ehci            # EHCI PCI->USB interface (USB 2.0)
device          usb             # USB Bus (required)
#device         umass           # Disks/Mass storage - Requires scbus and da
device          ukbd            # Keyboard
#device         u3g             # USB-based 3G modems (Option, Huawei, Sierra)

# atkbdc0 controls both the keyboard and the PS/2 mouse
device          kbdmux          # keyboard multiplexer
device          vga             # VGA video card driver
device          splash          # Splash screen and screen saver support
device          logo_saver      # Logo screen saver

# syscons is the default console driver, resembling an SCO console
device          sc
options         SC_PIXEL_MODE
options         SC_DISABLE_REBOOT
options         SC_NORM_ATTR=(FG_GREEN|BG_BLACK)
options         SC_NORM_REV_ATTR=(FG_YELLOW|BG_BLACK)
options         SC_KERNEL_CONS_ATTR=(FG_RED|BG_BLACK)
options         SC_KERNEL_CONS_REV_ATTR=(FG_BLUE|BG_BLACK)
options         SC_NO_SYSMOUSE
device          vesa

# Serial (COM) ports
#device         uart            # Generic UART driver

# PCI Ethernet NICs.
device          em              # Intel PRO/1000 Gigabit Ethernet Family

# Pseudo devices.
device          loop            # Network loopback
device          random          # Entropy device
device          ether           # Ethernet support
#device         vlan            # 802.1Q VLAN support
device          tun             # Packet tunnel.
device          pty             # BSD-style compatibility pseudo ttys
#device         gif             # IPv6 and IPv4 tunneling
#device         faith           # IPv6-to-IPv4 relaying (translation)

# The `bpf' device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
# Note that 'bpf' is required for DHCP.
device          bpf             # Berkeley packet filter

Код: Выделить всё

# cat /etc/make.conf
CPUTYPE?=core2
CFLAGS+= -O2 -fno-strict-aliasing -pipe
COPTFLAGS= -O -pipe
MAKE_SHELL?=sh

KERNCONF=ROUTER

DOC_LANG= ru_RU.KOI8-R en_US.ISO8859-1