MFen:
books/handbook/
advanced-networking/chapter.sgml 1.398 -> 1.399
audit/chapter.sgml 1.28 -> 1.30
basics/chapter.sgml 1.148 -> 1.149
cutting-edge/chapter.sgml 1.227 -> 1.227 [1]
eresources/chapter.sgml 1.182 -> 1.183
geom/chapter.sgml 1.30 -> 1.32
introduction/chapter.sgml 1.119 -> 1.120
kernelconfig/chapter.sgml 1.174 -> 1.176
multimedia/chapter.sgml 1.127 -> 1.128
network-servers/chapter.sgml 1.99 -> 1.101
ports/chapter.sgml 1.267 -> 1.268
security/chapter.sgml 1.313 -> 1.314
Obtained from: The FreeBSD Simplified Chinese Project
Language suggestions: Shark Wang <sharkwang gmail com> [1],
Approved by: delphij (mentor)
This commit is contained in:
Fukang Chen
parent
3978d0e407
commit
bbfae7ebea
Notes:
svn2git
2020-12-08 03:00:23 +00:00
svn path=/head/; revision=30831
12 changed files with 134 additions and 35 deletions
zh_CN.GB2312/books/handbook
advanced-networking
audit
basics
cutting-edge
eresources
geom
introduction
kernelconfig
multimedia
network-servers
ports
security
|
|
@ -2,7 +2,7 @@
|
|||
The FreeBSD Documentation Project
|
||||
The FreeBSD Chinese Documentation Project
|
||||
|
||||
Original revision: 1.398
|
||||
Original revision: 1.399
|
||||
$FreeBSD$
|
||||
-->
|
||||
|
||||
|
|
@ -2519,6 +2519,85 @@ bridge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1
|
|||
可以使用整个的 <hostid role="netmask">/24</hostid> 地址空间，
|
||||
而无需划分子网。</para>
|
||||
</sect3>
|
||||
|
||||
<sect3>
|
||||
<title>SNMP 管理</title>
|
||||
|
||||
<para>网桥接口和 STP 参数能够由 &os; 基本系统的 SNMP
|
||||
守护进程进行管理。导出的网桥 MIB 符和 IETF 标准，
|
||||
所以任何 SNMP 客户端或管理包都可以被用来接收数据。</para>
|
||||
|
||||
<para>在网桥机器上从<filename>/etc/snmp.config</filename>
|
||||
文件中去掉以下这行的注释
|
||||
<literal>begemotSnmpdModulePath."bridge" =
|
||||
"/usr/lib/snmp_bridge.so"</literal>
|
||||
并启动 <application>bsnmpd</application> 守护进程。
|
||||
其他的配置选项诸如 community names 和 access lists
|
||||
可能也许也需要修改。 参阅 &man.bsnmpd.1; 和
|
||||
&man.snmp.bridge.3; 获取更多信息。</para>
|
||||
|
||||
<para>以下的例子中使用了
|
||||
<application>Net-SNMP</application> 软件
|
||||
(<filename role="package">net-mgmt/net-snmp</filename>)
|
||||
来查询一个网桥，当然同样也能够使用port
|
||||
<filename role="package">net-mgmt/bsnmptools</filename>。
|
||||
在 SNMP 客户端 <application>Net-SNMP</application>
|
||||
的配置文件 <filename>$HOME/.snmp/snmp.conf</filename> 中
|
||||
加入以下几行来导入网桥的 MIB 定义：</para>
|
||||
|
||||
<programlisting>mibdirs +/usr/share/snmp/mibs
|
||||
mibs +BRIDGE-MIB:RSTP-MIB:BEGEMOT-MIB:BEGEMOT-BRIDGE-MIB</programlisting>
|
||||
|
||||
<para>通过 IETF BRIDGE-MIB(RFC4188) 监测一个单独的网桥</para>
|
||||
|
||||
<screen>&prompt.user; <userinput>snmpwalk -v 2c -c public bridge1.example.com mib-2.dot1dBridge</userinput>
|
||||
BRIDGE-MIB::dot1dBaseBridgeAddress.0 = STRING: 66:fb:9b:6e:5c:44
|
||||
BRIDGE-MIB::dot1dBaseNumPorts.0 = INTEGER: 1 ports
|
||||
BRIDGE-MIB::dot1dStpTimeSinceTopologyChange.0 = Timeticks: (189959) 0:31:39.59 centi-seconds
|
||||
BRIDGE-MIB::dot1dStpTopChanges.0 = Counter32: 2
|
||||
BRIDGE-MIB::dot1dStpDesignatedRoot.0 = Hex-STRING: 80 00 00 01 02 4B D4 50
|
||||
...
|
||||
BRIDGE-MIB::dot1dStpPortState.3 = INTEGER: forwarding(5)
|
||||
BRIDGE-MIB::dot1dStpPortEnable.3 = INTEGER: enabled(1)
|
||||
BRIDGE-MIB::dot1dStpPortPathCost.3 = INTEGER: 200000
|
||||
BRIDGE-MIB::dot1dStpPortDesignatedRoot.3 = Hex-STRING: 80 00 00 01 02 4B D4 50
|
||||
BRIDGE-MIB::dot1dStpPortDesignatedCost.3 = INTEGER: 0
|
||||
BRIDGE-MIB::dot1dStpPortDesignatedBridge.3 = Hex-STRING: 80 00 00 01 02 4B D4 50
|
||||
BRIDGE-MIB::dot1dStpPortDesignatedPort.3 = Hex-STRING: 03 80
|
||||
BRIDGE-MIB::dot1dStpPortForwardTransitions.3 = Counter32: 1
|
||||
RSTP-MIB::dot1dStpVersion.0 = INTEGER: rstp(2)</screen>
|
||||
|
||||
<para><literal>dot1dStpTopChanges.0</literal>的值为2
|
||||
意味着 STP 网桥拓扑改变了2次，拓扑的改变表示1个或多个
|
||||
网络中的连接改变或失效并且有一个新树生成。
|
||||
<literal>dot1dStpTimeSinceTopologyChange.0</literal>
|
||||
的值则能够显示这是何时改变的。</para>
|
||||
|
||||
<para>监测多个网桥接口可以使用 private
|
||||
BEGEMOT-BRIDGE-MIB：</para>
|
||||
|
||||
<screen>&prompt.user; <userinput>snmpwalk -v 2c -c public bridge1.example.com</userinput>
|
||||
enterprises.fokus.begemot.begemotBridge
|
||||
BEGEMOT-BRIDGE-MIB::begemotBridgeBaseName."bridge0" = STRING: bridge0
|
||||
BEGEMOT-BRIDGE-MIB::begemotBridgeBaseName."bridge2" = STRING: bridge2
|
||||
BEGEMOT-BRIDGE-MIB::begemotBridgeBaseAddress."bridge0" = STRING: e:ce:3b:5a:9e:13
|
||||
BEGEMOT-BRIDGE-MIB::begemotBridgeBaseAddress."bridge2" = STRING: 12:5e:4d:74:d:fc
|
||||
BEGEMOT-BRIDGE-MIB::begemotBridgeBaseNumPorts."bridge0" = INTEGER: 1
|
||||
BEGEMOT-BRIDGE-MIB::begemotBridgeBaseNumPorts."bridge2" = INTEGER: 1
|
||||
...
|
||||
BEGEMOT-BRIDGE-MIB::begemotBridgeStpTimeSinceTopologyChange."bridge0" = Timeticks: (116927) 0:19:29.27 centi-seconds
|
||||
BEGEMOT-BRIDGE-MIB::begemotBridgeStpTimeSinceTopologyChange."bridge2" = Timeticks: (82773) 0:13:47.73 centi-seconds
|
||||
BEGEMOT-BRIDGE-MIB::begemotBridgeStpTopChanges."bridge0" = Counter32: 1
|
||||
BEGEMOT-BRIDGE-MIB::begemotBridgeStpTopChanges."bridge2" = Counter32: 1
|
||||
BEGEMOT-BRIDGE-MIB::begemotBridgeStpDesignatedRoot."bridge0" = Hex-STRING: 80 00 00 40 95 30 5E 31
|
||||
BEGEMOT-BRIDGE-MIB::begemotBridgeStpDesignatedRoot."bridge2" = Hex-STRING: 80 00 00 50 8B B8 C6 A9</screen>
|
||||
|
||||
<para>通过 <literal>mib-2.dot1dBridge</literal>
|
||||
子树改变正在被监测的网桥接口：</para>
|
||||
|
||||
<screen>&prompt.user; <userinput>snmpset -v 2c -c private bridge1.example.com</userinput>
|
||||
BEGEMOT-BRIDGE-MIB::begemotBridgeDefaultBridgeIf.0 s bridge2</screen>
|
||||
</sect3>
|
||||
</sect2>
|
||||
</sect1>
|
||||
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
The FreeBSD Documentation Project
|
||||
The FreeBSD Simplified Chinese Project
|
||||
|
||||
Original Revision: 1.28
|
||||
Original Revision: 1.30
|
||||
$FreeBSD$
|
||||
-->
|
||||
|
||||
|
|
@ -62,6 +62,7 @@ requirements. -->
|
|||
|
||||
<listitem>
|
||||
<para>如何使用审计记录摘要和复审工具来对审计记录进行复审。</para>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
|
||||
<para>阅读这章之前， 您应该：</para>
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
The FreeBSD Documentation Project
|
||||
The FreeBSD Simplified Chinese Project
|
||||
|
||||
Original Revision: 1.148
|
||||
Original Revision: 1.149
|
||||
$FreeBSD$
|
||||
-->
|
||||
|
||||
|
|
@ -1538,15 +1538,6 @@ total 530
|
|||
<para>The <option>-o</option> 选项采用一个逗号分开以下多个选项:</para>
|
||||
|
||||
<variablelist>
|
||||
<varlistentry>
|
||||
<term>nodev</term>
|
||||
|
||||
<listitem>
|
||||
<para>拒绝把文件系统识别为特别的设备。这是一个有用的安全选项。
|
||||
</para>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
|
||||
<varlistentry>
|
||||
<term>noexec</term>
|
||||
|
||||
|
|
|
|||
|
|
@ -60,7 +60,7 @@
|
|||
<para>读了本章后，您将了解到：</para>
|
||||
|
||||
<itemizedlist>
|
||||
<listitem><para>&os.stable; 和 &os.current;两个发展分支的不同点。</para>
|
||||
<listitem><para>&os.stable; 和 &os.current;两个开发分支的不同点。</para>
|
||||
</listitem>
|
||||
<listitem><para>怎样使用<application>CVSup</application>，
|
||||
<application>CVS</application>或
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
The FreeBSD Documentation Project
|
||||
The FreeBSD Simplified Chinese Project
|
||||
|
||||
Original Revision: 1.182
|
||||
Original Revision: 1.183
|
||||
$FreeBSD$
|
||||
-->
|
||||
|
||||
|
|
@ -30,6 +30,12 @@
|
|||
现在订阅这些邮件列表的人每天都会收到上百封关于FreeBSD的信件。
|
||||
设立列表的使用条文有助于维护讨论质量。否则这些讨论计划的列表将失去其意义。</para>
|
||||
|
||||
<note>
|
||||
<para><emphasis>如果你想要尝试发送一封邮件到
|
||||
&os; 邮件列表，你可以把邮件发往 &a.test.name;。</emphasis>
|
||||
请不要往其他的列表发送测试邮件。</para>
|
||||
</note>
|
||||
|
||||
<para>如果不知道哪个邮件列表适合于发送您的问题， 请参见 <ulink
|
||||
url="&url.articles.freebsd-questions;">如何从
|
||||
FreeBSD-questions 邮件列表中更快地得到答案</ulink>。</para>
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
The FreeBSD Documentation Project
|
||||
The FreeBSD Simplified Chinese Project
|
||||
|
||||
Original Revision: 1.30
|
||||
Original Revision: 1.32
|
||||
$FreeBSD$
|
||||
-->
|
||||
|
||||
|
|
@ -67,6 +67,8 @@
|
|||
<listitem>
|
||||
<para>理解 &os; 如何处理磁盘设备
|
||||
(<xref linkend="disks">)。</para>
|
||||
</listitem>
|
||||
|
||||
<listitem>
|
||||
<para>了解如何配置和安装新的 &os; 内核
|
||||
(<xref linkend="kernelconfig">)。</para>
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
The FreeBSD Documentation Project
|
||||
The FreeBSD Simplified Chinese Project
|
||||
|
||||
Original Revision: 1.119
|
||||
Original Revision: 1.120
|
||||
$FreeBSD$
|
||||
-->
|
||||
|
||||
|
|
@ -60,7 +60,7 @@
|
|||
您也可以阅读 <link linkend="history">FreeBSD 的历史</link>，
|
||||
或者<link linkend="relnotes">最新的发行版本</link>。
|
||||
如果您有意捐助(代码，
|
||||
硬件，不记名捐款)，请看<ulink
|
||||
硬件，基金)，请看<ulink
|
||||
url="&url.articles.contributing;/index.html">为 FreeBSD 提供帮助</ulink>这篇文章。</para>
|
||||
|
||||
<sect2 id="os-overview">
|
||||
|
|
@ -89,7 +89,7 @@
|
|||
<listitem>
|
||||
<para>符合业界标准的强大 <emphasis>TCP/IP 网络</emphasis> 支持，
|
||||
例如 SCTP、 DHCP、 NFS、
|
||||
NIS、 PPP， 以及 SLIP。
|
||||
NIS、 PPP， SLIP， IPsec 以及 IPv6。
|
||||
这意味着您的 FreeBSD 主机可以很容易地和其他系统互联，
|
||||
也可以作为企业的服务器，提供重要的功能，
|
||||
比如 NFS(远程文件访问)以及 email 服务， 或将您的组织接入
|
||||
|
|
@ -115,7 +115,7 @@
|
|||
|
||||
<listitem>
|
||||
<para>业界标准的 <emphasis>X Window 系统</emphasis>
|
||||
(X11R6)为便宜的常见 VGA 显示卡和监视器提供了一个图形化的用户界面(GUI)，
|
||||
(X11R7)为便宜的常见 VGA 显示卡和监视器提供了一个图形化的用户界面(GUI)，
|
||||
并且完全开放代码。</para>
|
||||
</listitem>
|
||||
|
||||
|
|
@ -251,6 +251,10 @@
|
|||
[SSL])</para>
|
||||
</listitem>
|
||||
|
||||
<listitem>
|
||||
<para>IPv4 and IPv6 路由</para>
|
||||
</listitem>
|
||||
|
||||
<indexterm><primary>防火墙</primary></indexterm>
|
||||
<indexterm><primary>NAT</primary></indexterm>
|
||||
<listitem>
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
The FreeBSD Documentation Project
|
||||
The FreeBSD Chinese Documentation Project
|
||||
|
||||
Original Revision: 1.174
|
||||
Original Revision: 1.176
|
||||
$FreeBSD$
|
||||
-->
|
||||
|
||||
|
|
@ -270,7 +270,15 @@
|
|||
|
||||
<programlisting>MODULES_OVERRIDE = linux acpi sound/sound sound/driver/ds1 ntfs</programlisting>
|
||||
|
||||
<para>这个变量的内容是所希望构建的模块列表。
|
||||
<para>这个变量的内容是所希望构建的模块列表。</para>
|
||||
|
||||
<programlisting>WITHOUT_MODULES = linux acpi sound/sound sound/driver/ds1 ntfs</programlisting>
|
||||
|
||||
<para>This variable sets up a list of modules to exclude
|
||||
from the build process. For other variables which you may find useful
|
||||
in the process of building kernel, refer to &man.make.conf.5;
|
||||
manual page.</para>
|
||||
<para>这个变量的内容是在联编过程中将不被编译的模块列表。
|
||||
如果希望了解更多与构建内核有关的变量， 请参见 &man.make.conf.5;
|
||||
联机手册。</para>
|
||||
</tip>
|
||||
|
|
@ -894,6 +902,7 @@ device bge # Broadcom BCM570xx Gigabit Ethernet
|
|||
device dc # DEC/Intel 21143 and various workalikes
|
||||
device fxp # Intel EtherExpress PRO/100B (82557, 82558)
|
||||
device lge # Level 1 LXT1001 gigabit ethernet
|
||||
device msk # Marvell/SysKonnect Yukon II Gigabit Ethernet
|
||||
device nge # NatSemi DP83820 gigabit ethernet
|
||||
device nve # nVidia nForce MCP on-board Ethernet Networking
|
||||
device pcn # AMD Am79C97x PCI 10/100 (precedence over 'lnc')
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
The FreeBSD Documentation Project
|
||||
The FreeBSD Simplified Chinese Documentation Project
|
||||
|
||||
Original Revision: 1.127
|
||||
Original Revision: 1.128
|
||||
$FreeBSD$
|
||||
-->
|
||||
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
The FreeBSD Documentation Project
|
||||
The FreeBSD Simplified Chinese Project
|
||||
|
||||
Original Revision: 1.99
|
||||
Original Revision: 1.101
|
||||
$FreeBSD$
|
||||
-->
|
||||
|
||||
|
|
@ -136,13 +136,21 @@
|
|||
<para><application>inetd</application> 是通过 &man.rc.8; 系统启动的。
|
||||
<literal>inetd_enable</literal> 选项默认设为
|
||||
<literal>NO</literal>， 但可以在安装系统时，
|
||||
由用户根据需要通过 <application>sysinstall</application> 来打开。 将
|
||||
<programlisting>inetd_enable="YES"</programlisting> 或
|
||||
<programlisting>inetd_enable="NO"</programlisting> 写入
|
||||
由用户根据需要通过 <application>sysinstall</application> 来打开。
|
||||
将：</para>
|
||||
|
||||
<programlisting>inetd_enable="YES"</programlisting>
|
||||
|
||||
<para>或</para>
|
||||
|
||||
<programlisting>inetd_enable="NO"</programlisting>
|
||||
|
||||
<para>写入
|
||||
<filename>/etc/rc.conf</filename> 可以启用或禁用系统启动时
|
||||
<application>inetd</application> 的自动启动。 命令：
|
||||
<programlisting>/etc/rc.d/inetd rcvar</programlisting>
|
||||
可以显示目前的设置。</para>
|
||||
<application>inetd</application> 的自动启动。 命令：</para>
|
||||
|
||||
<screen>&prompt.root; <userinput>/etc/rc.d/inetd rcvar</userinput></screen>
|
||||
<para>可以显示目前的设置。</para>
|
||||
|
||||
<para>此外， 您还可以通过
|
||||
<literal>inetd_flags</literal> 参数来向 <application>inetd</application>
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
The FreeBSD Documentation Project
|
||||
The FreeBSD Simplified Chinese Documentation Project
|
||||
|
||||
Original Revision: 1.267
|
||||
Original Revision: 1.268
|
||||
$FreeBSD$
|
||||
-->
|
||||
|
||||
|
|
@ -1051,7 +1051,7 @@ ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/ fetch</userinput></screen>
|
|||
<application>portupgrade</application> 将使用 ports。
|
||||
要禁止使用 port， 可以指定 <option>-PP</option>。</para>
|
||||
|
||||
<screen>&prompt.root; <userinput>portupgrade -PR gnome2</userinput></screen>
|
||||
<screen>&prompt.root; <userinput>portupgrade -PP gnome2</userinput></screen>
|
||||
|
||||
<para>如果只想下载 distfiles (或者， 如果指定了 <option>-P</option>
|
||||
的话， 是 packages) 而不想构建或安装任何东西，
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
The FreeBSD Documentation Project
|
||||
The FreeBSD Simplified Chinese Project
|
||||
|
||||
Original Revision: 1.313
|
||||
Original Revision: 1.314
|
||||
$FreeBSD$
|
||||
-->
|
||||
|
||||
|
|
@ -590,9 +590,8 @@
|
|||
<literal>MD5</literal> 来进行检查。</para>
|
||||
|
||||
<para>如果您的用户磁盘空间很大， 检查这种分区上面的文件可能非常耗时。
|
||||
这种情况下， 采用标志来禁止使用 suid 可执行文件和设备在这些文件系统上出现将是一个好主意。
|
||||
您可能会想看看 <literal>nodev</literal> 和
|
||||
<literal>nosuid</literal> 这两个选项 (参见 &man.mount.8;)。
|
||||
这种情况下， 采用标志来禁止使用 suid 可执行文件将是一个好主意。
|
||||
您可能会想看看 <literal>nosuid</literal> 选项 （参见 &man.mount.8;）。
|
||||
尽管如此， 这些扫描仍然应该至少每周进行一次， 这样做的意义并不是检测有效的攻击，
|
||||
而是检查攻击企图。</para>
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue