freebsd6.2在dell 1950服务器架设成功，我们公司新购买Dell 1950服务器。配置为：
cpu：志强2.0双核心
硬盘：146G SAS *2 做特殊盘阵
内存：2G
呵呵，用系统带的软件为每个盘做为一个Raid0。分别为一个盘一个raid0。扩展空间用
用freebsd6.1发现无法识别网卡。用freebsd6.2可以认识SMP和raid、NIC-Pce0和Pce1两张网卡。
做好最小系统，呵呵非常迅速。然后安装cvsup，更新ports和src。然后安装Apache+php+mysql+bind+proftp平台。呵呵bsd真的快啊。
编译内核加入IPFW防火墙模块。呵呵我比较喜欢IPFW，觉得这个名字就简单！
我写的规则：
ipfw -q -f flush
cmd="ipfw -q add"
$cmd allow tcp from any to me 2292
$cmd allow tcp from any to me 21
$cmd allow tcp from any 1024-65535 to me
$cmd allow tcp from me 25 to any
$cmd allow tcp from any to me 80
$cmd allow tcp from any to any 3306
$cmd allow tcp from me 53 to any
$cmd allow tcp from any 53 to me
$cmd allow udp from any to me 53
$cmd allow udp from me 53 to any
#$cmd deny icmp from any to me
$cmd allow udp from any 53 to any out
$cmd allow udp from any to me 53 in
$cmd allow udp from any to me 53
#$cmd deny tcp from any to me
发现有问题，希望有朋友告诉我这个ftp配置和dns的ipfw配置的信息。没有配置好。
刚才读贴子发现减少web TIME_WAIT的方法 sysctl net.inet.tcp.msl=2000然后等60秒
就可以了。sysctl net.inet.tcp.msl=2000然后等60秒
ipfw学习
ip="192.168.x.x"
# ftpdata (20)
ipfw add allow tcp from any to $ip 20 in
ipfw add allow tcp from $ip 20 to any out
# ftp (21)
ipfw add allow tcp from any to $ip 21 in
ipfw add allow tcp from $ip 21 to any out
ipfw add allow tcp from any to $ip 1024-65535 in
ipfw add allow tcp from $ip 1024-65535 to any out
# ssh (22)
ipfw add allow tcp from any to $ip 22 in
ipfw add allow tcp from $ip 22 to any out
# http (80)
ipfw add allow tcp from any to $ip 80 in
ipfw add allow tcp from $ip 80 to any out
# snmp (161)(udp)
ipfw add allow udp from any to $ip 161 in
ipfw add allow udp from $ip 161 to any out
# Samba (137，139,901)
ipfw add allow tcp from any to $ip 139 in
ipfw add allow tcp from $ip 139 to any out
ipfw add allow tcp from any to $ip 901 in＃Web管理
ipfw add allow tcp from $ip 901 to any out
ipfw add allow udp from any to $ip 137 in＃Win98下访问必须，XP无须
ipfw add allow udp from $ip 137 to any out
|