Table of Contents
Preface 1
Chapter 1: System Configuration—Disks 7
Partition Layout and Sizes 7
Swap 9
Adding More Swap Space 10
Swap Encryption 12
Softupdates 12
Snapshots 13
Quotas 15
Assigning Quotas 16
File System Backup 18
Dump and Restore 18
The tar, cpio, and pax Utilities 22
Snapshots 23
RAID-GEOM Framework 24
RAID0—Striping 24
RAID1—Mirroring 26
Disk Concatenation 27
Summary 28
Chapter 2: System Configuration—Keeping it Updated 29
CVSup—Synchronizing the Source Code 30
Tracking –STABLE 31
Tracking –CURRENT 33
Ports Collection 34
Tracking Ports 34
Portsnap 35
Security Advisories 36
VuXML—Vulnerability Database 37
Table of Contents
[ ii ]
CVS Branch Tag 37
Customizing and Rebuilding Kernel 38
Rebuilding World 40
Binary Update 42
Recovering from a Dead Kernel 43
Summary 45
Chapter 3: System Configuration—Software Package Management 47
Ports and Packages 48
The Legacy Method 48
Software Directories 49
Packages 49
Ports 51
Package Management Tools 55
Portupgrade 56
portinstall 56
pkg_deinstall 57
portversion 58
pkg_which 59
portsclean 59
Portmaster 60
Summary 60
Chapter 4: System Configuration—System Management 63
Process Management and Control 63
Processes and Daemons 64
Getting Information about Running Processes—ps, top, and pgrep 65
Sending Signals to Running Processes—kill, killall, and pkill 67
Prioritizing Running Processes—nice and renice 68
Resource Management and Control 69
System Resource Monitoring Tools—vmstat, iostat, pstat, and systat 69
Process Accounting 72
Summary 73
Chapter 5: System Configuration—Jails 75
Concept 75
Introduction 76
Setting Up a Jail 77
Configuring the Host System 78
Starting the Jail 80
Automatic Startup 81
Shutting Down Jails 82
Managing Jails 82
Table of Contents.
[ iii ]
Jail Security 84
Jail Limitations 85
Summary 85
Chapter 6: System Configuration—Tuning Performance 87
Tweaking Kernel Variables using SYSCTL 88
Kernel 89
SMP 91
Disk 92
File limits 92
I/O Performance 92
RAID 93
Network 94
TCP Delayed ACK 94
RFC 1323 Extensions 95
TCP Listen Queue Size 95
TCP Buffer Space 95
Network Interface Polling 96
The /etc/make.conf file 97
CPUTYPE 97
CFLAGS and COPTFLAGS 98
The /boot/loader.conf file 98
Summary 99
Chapter 7: Network Configuration—Basics 101
Ifconfig Utility 101
Configuring IP Address 106
Configuring Layer2 Address 107
Configuring IPX 107
Configuring AppleTalk 108
Configuring Secondary (alias) IP Addresses 109
Configuring Media Options 110
Configuring VLANs 112
Advanced ifconfig Options 113
Hardware Offloading 114
Promiscuous Mode 115
MTU 116
ARP 116
Static ARP 117
Monitor Mode 118
Configuring Fast EtherChannel 118
Default Routing 119
Name Resolution 120
Table of Contents
[ iv ]
Network Testing Tools 121
Ping 121
Traceroute 122
Sockstat 123
netstat 124
ARP 125
Tcpdump 126
Summary 131
Chapter 8: Network Configuration—Tunneling 133
Generic Routing Encapsulation (GRE) protocol 134
IPSEC 136
Operating Modes 137
Tunnel Mode 138
Summary 144
Chapter 9: Network Configuration—PPP 145
Setting up PPP Client 146
Setting up PPP Server 149
Setting up PPPoE Client 152
Setting up PPPoE Server 153
Summary 155
Chapter 10: Network Configuration—Routing and Bridging 157
Basic Routing—IP Forwarding 158
Static Routing 160
routed and route6d 162
Running OSPF—OpenOSPFD 163
Running BGP—OpenBGPD 166
Bridging 169
Filtering Bridges 171
Proxy ARP 172
Summary 173
Chapter 11: Network Configuration—IPv6 175
IPv6 Facts 176
Fact One—Addressing 176
Fact Two—Address Types 176
Fact Three—ARP 176
Fact Four—Interface Configuration 177
Using IPv6 177
Configuring Interfaces 177
Routing IPv6 179
RIP6 180
Table of Contents.
[ ]
Multicast Routing 181
Tunneling 181
GIF Tunneling 181
Summary 182
Chapter 12: Network Configuration—Firewalls 183
Packet Filtering with IPFW 184
Basic Configuration 185
Ruleset Templates 187
Customized Rulesets 188
Logging 190
Network Address Translation (NAT) 191
Traffic Shaping 192
Packet Filtering with PF 193
PF Configuration Syntax 194
Controlling PF 197
Network Address Translation using PF and IPFW 199
Summary 201
Chapter 13: Network Services—Internet Servers 203
inetd Daemon 204
tcpd 206
SSH 207
Running a Command Remotely 208
SSH Keys 208
SSH Authentication Agent 210
SSH Tunneling or Port Forwarding 212
NTP 213
Syncing 213
NTP Server 214
DNS 215
BIND software 215
Operating Modes 215
Forwarding/Caching DNS Server 216
Authoritative 217
Monitoring 219
Optimizations 219
FTP 221
Anonymous FTP Server 221
Mail 223
Sendmail 224
Postfix 226
Table of Contents
[ vi ]
Web 227
Apache 228
Virtual Hosts 229
Alternative HTTP Servers 230
Proxy 230
Summary 233
Chapter 14: Network Services—Local Network Services 235
Dynamic Host Configuration Protocol (DHCP) 236
dhclient 236
ISC DHCPD 236
DHCPD Configuration 237
Trivial File Transfer Protocol (TFTP) 239
Network File System (NFS) 240
Server 240
Client 241
NFS Locking 243
Server Message Block (SMB) or CIFS 243
SMB Client 243
SMB Server 244
Authentication 246
Samba Web Administration Tool (SWAT) 246
Simple Network Management Protocol (SNMP) 248
bsnmpd 248
NET-SNMP 249
Client Tools 250
Printing 251
lpd—Print Spooler Daemon 252
Common UNIX Printing System (CUPS) 253
Network Information System (NIS) 254
NIS Server 255
Initializing NIS Server 255
Summary 258
Index 259 学习,学习,再学习. 下来看看，应该不错 先下载下来留着以后用