User Tools

Site Tools


hp_microserveur_proliant_-_turion_ii_neo_n40l

This is an old revision of the document!



rc.conf

$ cat /etc/rc.conf
hostname="FreeBSD"
keymap="fr.iso.kbd"
ifconfig_bge0="DHCP"
sshd_enable="YES"
ntpd_enable="YES"
# Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable
dumpdev="AUTO"
zfs_enable="YES"

### AGGIUNTI DA ME!

firewall_enable="YES"

firewall_script="/etc/ipfw.rules"

cron_enable="YES"

smartd_enable="YES"

samba_server_enable="YES"

ipfw.rules

$ cat /etc/ipfw.rules 
IPF="ipfw -q add"
ipfw -q -f flush
#loopback
$IPF 10 allow all from any to any via lo0
$IPF 20 deny all from any to 127.0.0.0/8
$IPF 30 deny all from 127.0.0.0/8 to any
$IPF 40 deny tcp from any to any frag
# statefull
$IPF 50 check-state
$IPF 60 allow tcp from any to any established
$IPF 70 allow all from any to any out keep-state
$IPF 80 allow icmp from any to any

###############
### openSSH ###
###############

$IPF 165 allow tcp from 192.168.0.0/24 to any 33 in
$IPF 166 allow tcp from 192.168.0.0/24 to any 33 out

##################
### Syncthing  ###
##################

# Apro il port di ascolto di Syncthing
$IPF 250 allow all from any to any 22000 in
$IPF 251 allow all from any to any 22000 out

##############
#### Samba ###
##############

$IPF 420 allow all from any to any 81 in
$IPF 421 allow all from any to any 81 out
$IPF 430 allow all from any to any 137 in
$IPF 431 allow all from any to any 137 out
$IPF 440 allow all from any to any 138 in
$IPF 441 allow all from any to any 138 out
$IPF 450 allow all from any to any 139 in
$IPF 451 allow all from any to any 139 out
$IPF 460 allow all from any to any 445 in
$IPF 461 allow all from any to any 445 out

# deny and log everything
$IPF 500 deny log all from any to any

smb4.conf

root@serverHP:~ # cat /usr/local/etc/smb4.conf
[global]
workgroup = WORKGROUP
server string = Samba Server Version %v
netbios name = serverHP
wins support = Yes
security = user
passdb backend = tdbsam

# Example: share / accessible only to 'francesco' user
[cinema]
path = /usr/home/francesco/cinema
valid users = francesco, lettore
writable  = no
browsable = yes
read only = yes
guest ok = no
public = yes
create mask = 0666
directory mask = 0755

[QuartoDisco]
path = /mnt/QuartoDisco
valid users = francesco
writable = no
browsable = yes
read only = no
guest ok = no
public = yes
create mask = 0666
directory mask = 0755

[Documents]
path = /usr/home/francesco/Documents
valid users = francesco
writable  = yes
browsable = yes
read only = no
guest ok = no
public = yes
create mask = 0666
directory mask = 0755

df -hT

$ df -hT
Filesystem          Type     Size    Used   Avail Capacity  Mounted on
zroot/ROOT/default  zfs      1.2T    5.7G    1.1T     0%    /
devfs               devfs    1.0K    1.0K      0B   100%    /dev
zroot/var/crash     zfs      1.1T    117K    1.1T     0%    /var/crash
zroot/usr/ports     zfs      1.1T    117K    1.1T     0%    /usr/ports
zroot/var/mail      zfs      1.1T    128K    1.1T     0%    /var/mail
zroot/var/audit     zfs      1.1T    117K    1.1T     0%    /var/audit
zroot/usr/src       zfs      1.1T    117K    1.1T     0%    /usr/src
zroot/tmp           zfs      1.1T    139K    1.1T     0%    /tmp
zroot/var/tmp       zfs      1.1T    117K    1.1T     0%    /var/tmp
zroot               zfs      1.1T    117K    1.1T     0%    /zroot
zroot/usr/home      zfs      5.2T    4.1T    1.1T    78%    /usr/home
zroot/var/log       zfs      1.1T    1.7M    1.1T     0%    /var/log
$ 

fstab

root@serverHP:~ # cat /etc/fstab 
# Device		Mountpoint	FStype	Options		Dump	Pass#
/dev/ada0p2		none	swap	sw		0	0
/dev/ada1p2		none	swap	sw		0	0
/dev/ada2p2		none	swap	sw		0	0
#/dev/ada3p1	/mnt/QuartoDisco	ufs	rw	2	2
hp_microserveur_proliant_-_turion_ii_neo_n40l.1655728955.txt.gz · Last modified: 2022/06/20 14:42 by francesco