Конфиги с боевых серваков:
1) Сервак с pppoe
Конфиг mpd.conf
startup:
set user admin MpOnLiNe
set console self 127.0.0.1 5005
set console open
set web self 0.0.0.0 5006
set web open
default:
load pppoe_server
pppoe_server:
create bundle template B
set ipcp ranges 10.0.0.1/32 127.0.0.2/32
set ipcp dns 80.245.118.169 80.245.112.10
set ccp yes mppc
set mppc yes e40
set mppc yes e56
set mppc yes e128
set mppc yes stateless
set ecp disable dese-bis dese-old
set iface enable tcpmssfix
set link mtu 1492
set link mru 1492
create link template common pppoe
set link enable multilink
set link action bundle B
set link disable chap pap eap
set link enable pap
# set link no pap chap
# set link enable chap
load radius
set pppoe service "*"
create link template em1 common
set link max-children 1500
set pppoe iface em1
set link enable incoming
radius:
set radius server localhost RaOnLiNe 1812 1813
set radius retries 3
set radius timeout 3
set radius me 127.0.0.1
set auth acct-update 45
set auth enable radius-auth
set auth enable radius-acct
set radius enable message-authentic
ipcad.conf
capture-ports disable;
interface divert port 1 netflow-disable;
interface divert port 2 netflow-disable;
rsh enable at 10.0.0.1;
rsh
root@10.0.0.1 admin;
rsh
root@10.0.7.22 admin;
rsh enable at 127.0.0.1;
rsh
root@127.0.0.1 admin;
rsh ttl = 6;
rsh timeout = 30;
dumpfile = ipcad.dump;
chroot = /tmp;
memory_limit = 50m;
rc.firewall
#!/bin/sh -
f='/sbin/ipfw'
ifOut='em0'
#Blokiruemie seti
${f} table 120 flush
${f} table 120 add 224.0.0.0/4
${f} table 120 add 192.168.0.0/16
${f} table 120 add 172.16.0.0/12
${f} -f flush
${f} add 50 allow tcp from any to me 22
${f} add 51 allow tcp from me 22 to any
#Zabbix agent
${f} add 52 allow tcp from any to me 10050
${f} add 53 allow tcp from me 10050 to any
${f} add 54 allow tcp from any to me 10051
${f} add 55 allow tcp from me 10051 to any
${f} add 100 deny tcp from any to any 445
${f} add 110 allow ip from any to any via lo0
${f} add 120 skipto 1000 ip from me to any
${f} add 130 deny icmp from any to any in icmptype 5,9,13,14,15,16,17
${f} add 140 deny ip from any to "table(120)"
${f} add 150 deny ip from "table(120)" to any
${f} add 160 skipto 2000 ip from any to me
${f} add 200 skipto 500 ip from any to any via ${ifOut}
${f} add 300 skipto 4500 ip from any to any in
${f} add 400 skipto 450 ip from any to any recv ${ifOut}
${f} add 420 divert 1 ip from any to any
${f} add 450 divert 2 ip from any to any
${f} add 490 allow ip from any to any
${f} add 500 skipto 32500 ip from any to any in
${f} add 510 divert 1 ip from any to any
${f} add 540 allow ip from any to any
${f} add 1000 allow udp from any 53,7723 to any
${f} add 1010 allow tcp from any to any setup keep-state
${f} add 1020 allow udp from any to any keep-state
${f} add 1100 allow ip from any to any
${f} add 2000 check-state
${f} add 2010 allow icmp from any to any
${f} add 2020 allow tcp from any to any 80,443,514
${f} add 2050 deny ip from any to any via ${ifOut}
${f} add 2060 allow udp from any to any 53,7723,514
${f} add 2100 deny ip from any to any
${f} add 32490 deny ip from any to any
Это то что имею на рабочем пппое сервере, еще чтото из конфигов надо?
