由 xchen 在 05-04-2002 23:04 发表:
请ADSL兄弟详解一下floppyfw，何如！
高手，请指导！
由 北南南北 在 05-04-2002 23:19 发表:
我会尽力找点资料给老弟看一下
因为我还不懂这方面的，不过也是一次学习机会了，问题提的很好。我会找相关的资料。如果能找到明天我就能发到网上。多谢兄弟。
===========================
请弟兄们发帖时要写个好标题，多谢！
===========================
每天以1000KM/H的速度在跑，感觉还是时间不够:(
“西学东渐，洋为中用” + 创造 = ？
linux ppc
由 asdl 在 05-08-2002 13:25 发表:
很简单，下载一个相应版本的linuxfw( http://www.zelow.no/floppyfw/ )，用rewrite等把它恢复到一张软盘上，然后用editplus等修改conf文件，把有关的ip地址改为你自己的ip，既可用它启动服务。
由 像雨又像风 在 05-15-2002 16:41 发表:
版主能把一个做好config放上来让我们菜虫看看看
由 Archer 在 05-15-2002 22:05 发表:
config-floppyfw
Automatically generated by make menuconfig: don't edit
CONFIG_X86=y
Code maturity level options
CONFIG_EXPERIMENTAL=y
Processor type and features
CONFIG_M386=y
CONFIG_M486 is not set
CONFIG_M586 is not set
CONFIG_M586TSC is not set
CONFIG_M686 is not set
CONFIG_MICROCODE is not set
CONFIG_X86_MSR is not set
CONFIG_X86_CPUID is not set
CONFIG_1GB=y
CONFIG_2GB is not set
CONFIG_MATH_EMULATION=y
CONFIG_MTRR is not set
CONFIG_SMP is not set
Loadable module support
CONFIG_MODULES=y
CONFIG_MODVERSIONS is not set
CONFIG_KMOD is not set
General setup
CONFIG_NET=y
CONFIG_PCI=y
CONFIG_PCI_GOBIOS is not set
CONFIG_PCI_GODIRECT is not set
CONFIG_PCI_GOANY=y
CONFIG_PCI_BIOS=y
CONFIG_PCI_DIRECT=y
CONFIG_PCI_QUIRKS=y
CONFIG_PCI_OPTIMIZE is not set
CONFIG_PCI_OLD_PROC is not set
CONFIG_MCA is not set
CONFIG_VISWS is not set
CONFIG_SYSVIPC=y
CONFIG_BSD_PROCESS_ACCT is not set
CONFIG_SYSCTL=y
CONFIG_BINFMT_AOUT is not set
CONFIG_BINFMT_ELF=y
CONFIG_BINFMT_MISC is not set
CONFIG_BINFMT_JAVA is not set
CONFIG_PARPORT is not set
CONFIG_APM is not set
CONFIG_TOSHIBA is not set
Plug and Play support
CONFIG_PNP is not set
Block devices
CONFIG_BLK_DEV_FD=y
CONFIG_BLK_DEV_IDE is not set
CONFIG_BLK_DEV_HD_ONLY is not set
CONFIG_BLK_DEV_LOOP=y
CONFIG_BLK_DEV_NBD is not set
CONFIG_BLK_DEV_MD is not set
CONFIG_BLK_DEV_RAM=y
CONFIG_BLK_DEV_RAM_SIZE=3072
CONFIG_BLK_DEV_INITRD=y
CONFIG_BLK_DEV_XD is not set
CONFIG_BLK_DEV_DAC960 is not set
CONFIG_PARIDE_PARPORT=y
CONFIG_PARIDE is not set
CONFIG_BLK_CPQ_DA is not set
CONFIG_BLK_CPQ_CISS_DA is not set
CONFIG_BLK_DEV_HD is not set
Networking options
CONFIG_PACKET=y
CONFIG_NETLINK=y
CONFIG_RTNETLINK=y
CONFIG_NETLINK_DEV=y
CONFIG_FIREWALL=y
CONFIG_FILTER=y
CONFIG_UNIX=y
CONFIG_INET=y
CONFIG_IP_MULTICAST is not set
CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_RTNETLINK=y
CONFIG_NETLINK=y
CONFIG_IP_MULTIPLE_TABLES is not set
CONFIG_IP_ROUTE_MULTIPATH is not set
CONFIG_IP_ROUTE_TOS=y
CONFIG_IP_ROUTE_VERBOSE is not set
CONFIG_IP_ROUTE_LARGE_TABLES is not set
CONFIG_IP_PNP is not set
CONFIG_IP_FIREWALL=y
CONFIG_IP_FIREWALL_NETLINK=y
CONFIG_NETLINK_DEV=y
CONFIG_IP_TRANSPARENT_PROXY=y
CONFIG_IP_MASQUERADE=y
CONFIG_IP_MASQUERADE_ICMP=y
CONFIG_IP_MASQUERADE_MOD=y
CONFIG_IP_MASQUERADE_IPAUTOFW=m
CONFIG_IP_MASQUERADE_IPPORTFW=m
CONFIG_IP_MASQUERADE_MFW=m
CONFIG_IP_MASQUERADE_PPTP=m
CONFIG_IP_MASQ_DEBUG_PPTP is not set
CONFIG_IP_MASQUERADE_IPSEC=m
CONFIG_IP_MASQUERADE_IPSEC_EXPIRE=30
CONFIG_IP_MASQUERADE_IPSEC_PAROK is not set
CONFIG_IP_MASQ_DEBUG_IPSEC is not set
CONFIG_IP_MASQUERADE_GENERIC is not set
CONFIG_IP_ROUTER=y
CONFIG_NET_IPIP is not set
CONFIG_NET_IPGRE is not set
CONFIG_IP_ALIAS=y
CONFIG_ARPD is not set
CONFIG_SYN_COOKIES=y
CONFIG_INET_RARP is not set
CONFIG_SKB_LARGE is not set
CONFIG_IPV6 is not set
CONFIG_IPX is not set
CONFIG_ATALK is not set
CONFIG_X25 is not set
CONFIG_LAPB is not set
CONFIG_BRIDGE is not set
CONFIG_NET_DIVERT is not set
CONFIG_LLC is not set
CONFIG_ECONET is not set
CONFIG_WAN_ROUTER is not set
CONFIG_NET_FASTROUTE is not set
CONFIG_NET_HW_FLOWCONTROL is not set
CONFIG_CPU_IS_SLOW is not set
QoS and/or fair queueing
CONFIG_NET_SCHED is not set
Telephony Support
CONFIG_PHONE is not set
CONFIG_PHONE_IXJ is not set
SCSI support
CONFIG_SCSI is not set
I2O device support
CONFIG_I2O is not set
CONFIG_I2O_PCI is not set
CONFIG_I2O_BLOCK is not set
CONFIG_I2O_SCSI is not set
Network device support
CONFIG_NETDEVICES=y
ARCnet devices
CONFIG_ARCNET is not set
CONFIG_DUMMY is not set
CONFIG_BONDING is not set
CONFIG_EQUALIZER is not set
CONFIG_ETHERTAP is not set
CONFIG_NET_SB1000 is not set
Ethernet (10 or 100Mbit)
CONFIG_NET_ETHERNET=y
CONFIG_NET_VENDOR_3COM=y
CONFIG_EL1 is not set
CONFIG_EL2 is not set
CONFIG_ELPLUS is not set
CONFIG_EL16 is not set
CONFIG_EL3=y
CONFIG_3C515 is not set
CONFIG_VORTEX=y
CONFIG_LANCE is not set
CONFIG_NET_VENDOR_SMC is not set
CONFIG_NET_VENDOR_RACAL is not set
CONFIG_RTL8139 is not set
CONFIG_RTL8139TOO=y
CONFIG_8139TOO_PIO is not set
CONFIG_8139TOO_TUNE_TWISTER is not set
CONFIG_8139TOO_8129=y
CONFIG_NET_ISA=y
CONFIG_AT1700 is not set
CONFIG_E2100 is not set
CONFIG_DEPCA is not set
CONFIG_EWRK3 is not set
CONFIG_EEXPRESS is not set
CONFIG_EEXPRESS_PRO is not set
CONFIG_FMV18X is not set
CONFIG_HPLAN_PLUS is not set
CONFIG_HPLAN is not set
CONFIG_HP100 is not set
CONFIG_ETH16I is not set
CONFIG_NE2000=y
CONFIG_SEEQ8005 is not set
CONFIG_SK_G16 is not set
CONFIG_NET_EISA=y
CONFIG_PCNET32 is not set
CONFIG_ADAPTEC_STARFIRE is not set
CONFIG_AC3200 is not set
CONFIG_APRICOT is not set
CONFIG_LP486E is not set
CONFIG_CS89x0 is not set
CONFIG_DM9102 is not set
CONFIG_DE4X5 is not set
CONFIG_DEC_ELCP=y
CONFIG_DGRS is not set
CONFIG_EEXPRESS_PRO100=y
CONFIG_LNE390 is not set
CONFIG_NE3210 is not set
CONFIG_NE2K_PCI is not set
CONFIG_TLAN is not set
CONFIG_VIA_RHINE is not set
CONFIG_SIS900 is not set
CONFIG_ES3210 is not set
CONFIG_EPIC100 is not set
CONFIG_ZNET is not set
CONFIG_NET_POCKET is not set
Ethernet (1000 Mbit)
CONFIG_ACENIC is not set
CONFIG_HAMACHI is not set
CONFIG_YELLOWFIN is not set
CONFIG_SK98LIN is not set
CONFIG_FDDI is not set
CONFIG_HIPPI is not set
CONFIG_PPP is not set
CONFIG_SLIP is not set
CONFIG_NET_RADIO is not set
Token ring devices
CONFIG_TR is not set
CONFIG_NET_FC is not set
CONFIG_RCPCI is not set
CONFIG_SHAPER is not set
Wan interfaces
CONFIG_HOSTESS_SV11 is not set
CONFIG_COSA is not set
CONFIG_SEALEVEL_4021 is not set
CONFIG_SYNCLINK_SYNCPPP is not set
CONFIG_LANMEDIA is not set
CONFIG_COMX is not set
CONFIG_HDLC is not set
CONFIG_DLCI is not set
CONFIG_XPEED is not set
CONFIG_SBNI is not set
Amateur Radio support
CONFIG_HAMRADIO is not set
IrDA (infrared) support
CONFIG_IRDA is not set
ISDN subsystem
CONFIG_ISDN is not set
Old CD-ROM drivers (not SCSI, not IDE)
CONFIG_CD_NO_IDESCSI is not set
Character devices
CONFIG_VT=y
CONFIG_VT_CONSOLE=y
CONFIG_SERIAL=y
CONFIG_SERIAL_CONSOLE=y
CONFIG_SERIAL_EXTENDED is not set
CONFIG_SERIAL_NONSTANDARD is not set
CONFIG_UNIX98_PTYS is not set
CONFIG_MOUSE is not set
Joysticks
CONFIG_JOYSTICK is not set
CONFIG_QIC02_TAPE is not set
CONFIG_WATCHDOG is not set
CONFIG_NVRAM is not set
CONFIG_RTC is not set
CONFIG_INTEL_RNG is not set
CONFIG_AGP is not set
CONFIG_DRM is not set
Video For Linux
CONFIG_VIDEO_DEV is not set
CONFIG_DTLK is not set
Ftape, the floppy tape device driver
CONFIG_FTAPE is not set
USB support
CONFIG_USB is not set
Filesystems
CONFIG_QUOTA is not set
CONFIG_AUTOFS_FS is not set
CONFIG_ADFS_FS is not set
CONFIG_AFFS_FS is not set
CONFIG_HFS_FS is not set
CONFIG_FAT_FS=y
CONFIG_MSDOS_FS=y
CONFIG_UMSDOS_FS is not set
CONFIG_VFAT_FS=y
CONFIG_ISO9660_FS is not set
CONFIG_JOLIET is not set
CONFIG_MINIX_FS is not set
CONFIG_NTFS_FS is not set
CONFIG_HPFS_FS is not set
CONFIG_PROC_FS=y
CONFIG_QNX4FS_FS is not set
CONFIG_ROMFS_FS is not set
CONFIG_EXT2_FS=y
CONFIG_SYSV_FS is not set
CONFIG_UFS_FS is not set
CONFIG_EFS_FS is not set
Network File Systems
CONFIG_CODA_FS is not set
CONFIG_NFS_FS is not set
CONFIG_NFSD is not set
CONFIG_SUNRPC is not set
CONFIG_LOCKD is not set
CONFIG_SMB_FS is not set
CONFIG_NCP_FS is not set
Partition Types
CONFIG_BSD_DISKLABEL is not set
CONFIG_MAC_PARTITION is not set
CONFIG_MINIX_SUBPARTITION is not set
CONFIG_SMD_DISKLABEL is not set
CONFIG_SOLARIS_X86_PARTITION is not set
CONFIG_UNIXWARE_DISKLABEL is not set
CONFIG_NLS=y
Native Language Support
CONFIG_NLS_DEFAULT="n"
CONFIG_NLS_CODEPAGE_437 is not set
CONFIG_NLS_CODEPAGE_737 is not set
CONFIG_NLS_CODEPAGE_775 is not set
CONFIG_NLS_CODEPAGE_850 is not set
CONFIG_NLS_CODEPAGE_852 is not set
CONFIG_NLS_CODEPAGE_855 is not set
CONFIG_NLS_CODEPAGE_857 is not set
CONFIG_NLS_CODEPAGE_860 is not set
CONFIG_NLS_CODEPAGE_861 is not set
CONFIG_NLS_CODEPAGE_862 is not set
CONFIG_NLS_CODEPAGE_863 is not set
CONFIG_NLS_CODEPAGE_864 is not set
CONFIG_NLS_CODEPAGE_865 is not set
CONFIG_NLS_CODEPAGE_866 is not set
CONFIG_NLS_CODEPAGE_869 is not set
CONFIG_NLS_CODEPAGE_874 is not set
CONFIG_NLS_CODEPAGE_932 is not set
CONFIG_NLS_CODEPAGE_936 is not set
CONFIG_NLS_CODEPAGE_949 is not set
CONFIG_NLS_CODEPAGE_950 is not set
CONFIG_NLS_ISO8859_1 is not set
CONFIG_NLS_ISO8859_2 is not set
CONFIG_NLS_ISO8859_3 is not set
CONFIG_NLS_ISO8859_4 is not set
CONFIG_NLS_ISO8859_5 is not set
CONFIG_NLS_ISO8859_6 is not set
CONFIG_NLS_ISO8859_7 is not set
CONFIG_NLS_ISO8859_8 is not set
CONFIG_NLS_ISO8859_9 is not set
CONFIG_NLS_ISO8859_14 is not set
CONFIG_NLS_ISO8859_15 is not set
CONFIG_NLS_KOI8_R is not set
CONFIG_NLS_KOI8_RU is not set
Console drivers
CONFIG_VGA_CONSOLE=y
CONFIG_VIDEO_SELECT is not set
CONFIG_MDA_CONSOLE is not set
CONFIG_FB is not set
Sound
CONFIG_SOUND is not set
Kernel hacking
CONFIG_MAGIC_SYSRQ is not set
由 北南南北 在 05-16-2002 14:40 发表:
多谢 Archer 老弟的大力支持！
多谢 Archer 老弟的大力支持，有兄弟这样的哥们，弟兄们心里也踏实多了。
再次感谢！
老弟说的好，对“打造Linux Sir，开创Gnu/Linux 新元纪 ！”
===========================
请弟兄们发帖时要写个好标题，多谢！
===========================
每天以1000KM/H的速度在跑，感觉还是时间不够:(
“西学东渐，洋为中用” + 创造 = ？
linux ppc
由 yjmsir 在 06-07-2002 10:11 发表:
摘自:http://linuxdoor.home.chinaren.com/lesson/20010316-01.htm
Linux的反击：软盘里的Linux防火墙 作者：Panda
内容提要： 1.软盘里面的Linux防火墙
Linux下的防火墙(firewall)是指一个由软件或和硬件设备组合而成，处于企业或网络群体计算机与外界通道(Internet)之间，限制外界用户对内部网络访问及管理内部用户访问外界网络的权限。主要是控制对受保护的网络(即网点)的往返访问，逼使各连接点的通过能得到检查和评估。 2.NetMAX防火墙
文章来源
网易电脑频道
Linux下的防火墙(firewall)从诞生到现在，防火墙主要经历了四个发展阶段：第一阶段：基于路由器的防火墙；第二阶段用户化的防火墙工具套；第三阶段：建立在通用操作系统上的防火墙；第四阶段：具有安全操作系统的防火墙。目前世界上大多数防火墙供应商提供的都是具有安全操作系统的软硬件结合的防火墙，象著名的NETEYE、NETSCREEN、TALENTIT等。在Linux操作系统上的防火墙软件也很多，有些是商用版本的防火墙，有的则是完全免费和公开源代码的防火墙。大多数Linux教程都提到了如何在Linux平台中使用IPCHAINS来构筑防火墙。
设置和管理Linux操作系统中的防火墙是网络系统管理员的重要工作。一般情况下，配置防火墙确实是一件需要很高技术的工作。无论是商业版本的防火墙还是完全免费的防火墙都需要在Linux平台中进行软硬件的配置。
有没有能随身携带的，使用方便的Linux防火墙呢？答案是有的，现在我就向大家介绍一种能装在普通软盘里面的Linux防火墙。这套名字叫floppyfw的Linux 防火墙能存放在一张普通的软盘里，并独立的在RAM内存中运行。使用它能启动计算机，利用ipchains过滤掉无用的IP包，还可以使用它来配置IP伪装（IP masquerade）,监视端口，通过它可以使用主机对其他网络中的计算机进行远程控制。Floppyfw功能十分强大，但是它运行所需要的硬件环境却非常低，除了需要一张软盘之外，只要8MB的内存就足够了。
Floppyfw需要的最的硬件设备如下：
最少8MB内存
3.5"软驱
显示卡
键盘
显示器
有的Linux系统中装两块网卡，能使得Floppyfw正常工作，这就需要每一块网卡的IRQ和内存地址都正确无误。在Linux系统中配置双网卡相信很多系统管理员都是轻车熟路的。
Floppyfw支持以下的网卡。
3Com 3c509
NE2000 compatibles
Tulip-based
Intel EtherExpress PCI
关于软件：
把Floppyfw做成一张可以引导的软磁盘是一件非常简单的事情。不过你要首先到 http://www.zelow.no/floppyfw/download/ 把Floppyfw下载到计算机的硬盘上。Floppyfw最新的版本应该是1.0.5或者更高，Floppyfw是一个镜像文件，可以使用
dd if=floppyfw-1.0.5.img of=/dev/fd0 bs=72k 这个命令把镜像文件解压并写到准备好的软盘上。
关于设置：
需要注意的是，一般的软盘格式化以后都是DOS（FAT）的格式。为了能顺利的启动Linux系统，我们需要在这张软盘上作一些修改。建议使用其他的计算机来修改这张软盘，如果在Linux系统中使用MTOOLS工具修改则更好。
使用命令如下：
$ cd /tmp
$ mcopy a:config
$ vi config
$ mcopy config a:
如果你使用的是其他的操作系统，我想在WINDOWS中可以使用记事本进行修改。在软盘中，我们可以看到floppyfw一共有5个文件：
config (主配置文件)
firewall.ini (过滤规则)
modules.lst (附加的 ip_masq 模块)
sysLinux.cfg (内核启动参量)
syslog.cfg (syslog 配置, 例如/etc/syslog.conf)
在一般情况下，我们不需要修改sysLinux.cfg或者modules.lst文件。我们主要的任务就是要修改config这个文件。为了简单明了的说明问题，我在这里不想过多的解释config这个文件里面的具体的配置清单，只是着重说明config文件末尾几个重要的事项。
在(/bin/ash)找到"OPEN_SHELL controls shell"这行文字，如果您的计算机的内存少于12MB，把ONLY_8M设置成"Y"。USE_SYSLOG能测定系统中syslogd是否运行，而SYSLOG_FLAGS则是判断syslogd启动的标志。用户可以根据