OPENBSD上的ADSL和防火墙设置

来源：作者：黑客基地出处：巧巧读书 2006-04-21 进入讨论组

　　pppoe_status () {

IP=$(/sbin/ifconfig tun0 　 awk '/netmask/{print $2}')

if [ ! -z "$IP" ]; then
echo "pppoe link is up, ip: " $IP
else

echo "pppoe link is down"
fi
}

pppoe_start () {

echo -n "starting pppoe "; ppp -ddial pppoe > /dev/null

for i in 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0; do
sleep 2; echo -n "."
IP=$(/sbin/ifconfig tun0 　 awk '/netmask/{print $2}')
if [ ! -z "$IP" ]; then
break
fi
done
echo "."
pppoe_status
}

pppoe_stop () {

PID=$(ps aux 　 awk '/ppp -ddial/{print $2}')
kill $PID
echo "pppoe link is down"
}

case "$1" in
'start')
pppoe_start
;;
'stop')
pppoe_stop
;;
'status')
pppoe_status
;;
*)
echo "Usage: $0 {start　stop　status}"
exit 1
esac
--------------+----------------+---------------+-------------
# chmod 555 /etc/rc.d/adsl.sh

开机时自动进行ADSL拨号

# vi /etc/rc.local

if [ -f /etc/ppp/ppp.conf ]; then
. /etc/rc.d/adsl.sh start
fi

# vi /etc/rc.shutdown
/etc/rc.d/adsl.sh stop

启用NAME缓存服务器(不是必须的)：
# vi /var/named/named.boot
options forward-only
forwarders 202.99.160.68 202.99.168.8

根据拨号需要加载和关闭防火墙：
# vi /etc/ppp/ppp.linkup
MYADDR:
! sh -c "/sbin/ifconfig pflog0 up"
! sh -c "/sbin/pflogd"
! sh -c "/sbin/pfctl -e -F all -f /etc/pf.conf"

# vi /etc/ppp/ppp.linkdown
MYADDR:
! sh -c "/sbin/pfctl -d -F all"
! sh -c "kill `cat /var/run/pflogd.pid`"
! sh -c "/sbin/ifconfig pflog0 down"
! sh -c "/sbin/route delete default"

配置动态域名更新：

# tar zxvf ez-ipupdate-3.0.10.tgz
# cd ez-ipupdate-3.0.10
# vi conf_file.c
增加一行：
#include

# vi ez-ipupdate.c
注释掉下面几行(4515行)：
//else
// {
// fprintf(stderr, "no update needed at this time\n");
// }

# ./configure
# make
# make install

设置拨号后自动运行：

# vi /etc/ppp/ppp.linkup
MYADDR:
! sh -c "/sbin/ifconfig pflog0 up"
! sh -c "/sbin/pflogd"
! sh -c "/sbin/pfctl -e -F all -f /etc/pf.conf"
!bg /usr/local/bin/ez-ipupdate -i tun0 -h nero.3322.org -S qdns -w wildcard -u user:pwd

解决通过PF防火墙用主动模式连接外网FTP服务器的问题：

# vi /etc/pf.conf
rdr on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021

# vi /etc/inetd.conf
127.0.0.1:8021 stream tcp nowait root /usr/libexec/ftp-proxy ftp-proxy

# reboot

设置SQUID的透明代理：

# vi /etc/squid/squid.conf
http_port 127.0.0.1:3128

# vi /etc/pf.conf
rdr on $int_if proto tcp from $int_net to any port 80 -> 127.0.0.1 port 3128观看地址： http://www.qqread.com/net-manage/b420103081.html