Придбали потужніший сервер бази даних. Підняли Н50.32 по ману. Все працює.
Заливаю існуючу базу і тут почалося.
Абоненти авторизовують. Авторизацію видно в базі.
uname -a
FreeBSD Database 9.2-RELEASE FreeBSD 9.2-RELEASE #0: Fri Feb 28 11:50:37 EET 2014 root@Database:/usr/obj/usr/src/sys/NODENY amd64
#rc.conf
ifconfig_em0=" inet ***.***.***.*** netmask ***.***.***.***"
ifconfig_em1=" inet 10.102.0.1 netmask 255.255.255.0"
defaultrouter="***.***.***.***"
sshd_enable="YES"
gateway_enable="YES"
firewall_enable="YES"
fsck_y_enable="YES"
background_fsck="NO"
named_enable="YES"
pf_enable="YES"
mysql_enable="YES"
apache22_enable="YES"
ipcad_enable="YES"
#ipfw table 10 list | grep 10.102.0.32
10.102.0.32/32 2976
# ipfw pipe 2976 list
02976: 30.000 Mbit/s 0 ms burst 0
#pfctl -sn
nat pass on em0 inet from 10.0.0.0/8 to any -> ***.***.***.***
# sysctl net.inet.ip.forwarding
net.inet.ip.forwarding: 1
Ipcad працює.
DNS підхвачує ІР
Абонент не отримує доступ в інтернет
На сервері який працює зараз -> perl v5.12.4 mysql 5.1.58
на новому севрері -> perl v5.14.4 mysql 5.1.70.
в noserver.log nodeny.log ніяких помилок немає
# perl nocheck.pl
Проверка прав на чтение таблиц:
1. SELECT COUNT(*) FROM users...OK
2. SELECT COUNT(*) FROM files...OK
3. SELECT COUNT(*) FROM nets...OK
4. SELECT COUNT(*) FROM plans2...OK
5. SELECT COUNT(*) FROM users_trf...OK
6. SELECT COUNT(*) FROM dopdata...OK
Проверки выполнены. Все ОК.
ipfw add 1 allow ip from any to any
абоненти отримують доступ в інет
Ядро скомпільовано
device pf
device pflog
device pfsync
options ALTQ
options ALTQ_CBQ
options ALTQ_RED
options ALTQ_RIO
options ALTQ_HFSC
options ALTQ_PRIQ
options ALTQ_NOPCC
options IPFIREWALL
options IPDIVERT
options IPFIREWALL_FORWARD
options DUMMYNET
options SCHED_ULE
# ipfw list
00001 deny ip from 50.78.105.217 to me
00050 allow tcp from any to me dst-port 22
00051 allow tcp from me 22 to any
00110 allow ip from any to any via lo0
00120 skipto 1000 ip from me to any
00130 deny icmp from any to any in icmptypes 5,9,13,14,15,16,17
00160 skipto 2000 ip from any to me
00200 skipto 500 ip from any to any via em0
00300 skipto 4500 ip from any to any in
00400 skipto 450 ip from any to any recv em0
00420 divert 1 ip from any to any
00450 divert 2 ip from any to any
00490 allow ip from any to any
00500 skipto 32500 ip from any to any in
00510 divert 1 ip from any to any
00540 allow ip from any to any
01000 allow udp from any 53,7723 to any
01010 allow tcp from any to any setup keep-state
01020 allow udp from any to any keep-state
01100 allow ip from any to any
02000 check-state
02010 allow icmp from any to any
02020 allow tcp from any to any dst-port 80,443
02050 deny ip from any to any via em0
02060 allow udp from any to any dst-port 53,7723
02100 deny ip from any to any
05000 deny ip from not table(0) to any
05001 skipto 5010 ip from table(127) to table(126)
05002 skipto 5030 ip from any to not table(2)
05003 deny ip from any to not table(1)
05004 pipe tablearg ip from table(21) to any
05005 deny ip from any to any
05010 pipe tablearg ip from table(127) to any
05030 deny tcp from table(15) to any dst-port 25
05400 pipe tablearg ip from table(11) to any
32000 deny ip from any to any
32490 deny ip from any to any
33000 pipe tablearg ip from table(126) to table(127)
33001 skipto 33010 ip from not table(2) to any
33002 pipe tablearg ip from any to table(20)
33003 deny ip from any to any
33400 pipe tablearg ip from any to table(10)
65534 fwd 127.0.0.1,8080 tcp from any to any dst-port 80
65535 deny ip from any to any
# ipfw show
00001 26 1920 deny ip from 50.78.105.217 to me
00050 8705 742631 allow tcp from any to me dst-port 22
00051 7692 1817789 allow tcp from me 22 to any
00110 136750 8436694 allow ip from any to any via lo0
00120 74035 5884321 skipto 1000 ip from me to any
00130 0 0 deny icmp from any to any in icmptypes 5,9,13,14,15,16,17
00160 75017 4856586 skipto 2000 ip from any to me
00200 4 160 skipto 500 ip from any to any via em0
00300 13662 841720 skipto 4500 ip from any to any in
00400 4 160 skipto 450 ip from any to any recv em0
00420 0 0 divert 1 ip from any to any
00450 4 160 divert 2 ip from any to any
00490 4 160 allow ip from any to any
00500 4 160 skipto 32500 ip from any to any in
00510 0 0 divert 1 ip from any to any
00540 0 0 allow ip from any to any
01000 3143 249190 allow udp from any 53,7723 to any
01010 208 155722 allow tcp from any to any setup keep-state
01020 2826 360253 allow udp from any to any keep-state
01100 69315 5517177 allow ip from any to any
02000 0 0 check-state
02010 68507 4110102 allow icmp from any to any
02020 1163 161798 allow tcp from any to any dst-port 80,443
02050 491 34607 deny ip from any to any via em0
02060 3399 152058 allow udp from any to any dst-port 53,7723
02100 0 0 deny ip from any to any
05000 746 54854 deny ip from not table(0) to any
05001 0 0 skipto 5010 ip from table(127) to table(126)
05002 0 0 skipto 5030 ip from any to not table(2)
05003 12898 785246 deny ip from any to not table(1)
05004 0 0 pipe tablearg ip from table(21) to any
05005 0 0 deny ip from any to any
05010 0 0 pipe tablearg ip from table(127) to any
05030 0 0 deny tcp from table(15) to any dst-port 25
05400 0 0 pipe tablearg ip from table(11) to any
32000 0 0 deny ip from any to any
32490 4 366 deny ip from any to any
33000 0 0 pipe tablearg ip from table(126) to table(127)
33001 0 0 skipto 33010 ip from not table(2) to any
33002 4 160 pipe tablearg ip from any to table(20)
33003 0 0 deny ip from any to any
33400 0 0 pipe tablearg ip from any to table(10)
65534 0 0 fwd 127.0.0.1,8080 tcp from any to any dst-port 80
65535 9 760 deny ip from any to any
Якщо створити нову базу bill і підняти всі таблиці - все працює!
