昨天试了好几个软路由 freesco bbi floppyfw coyote

.:〖综合技术讨论区〗:. 网络技术
1

都是一张软盘的.

功能上,freesco最强大,不愧free cisco ,自带ftp,web服务,可telnet和web管理.按它说法,支持3网卡两modem.设置也很方便,随时可以更改.用free命令可以看内存用了多少,可惜没有top和vi命令,我想找一个传上去,仔细一看,软驱已经mount了,再看空空的:( 不知怎么搞的.
稳定健壮就不知道了,因为我只是一台试.反正bbi1.4的我用一台p166mmx/16m带一个60多台的小区,用了几天就狂掉包,并且第二天就不能web登录了.这几天倒没出问题,不过昨晚我发觉掉包也多.上次狂掉时看提示好象内存不够,明天准备加到32M试试.
对硬件要求上,freesco资源用得多,所以俺想可能俺得用个64m才能带刚才说的小区吧,coyote和bbi占用都很少.网卡方面,freesco较自由,自己随时可设,bbi最恼火,俺只有用8139的,因为才能找到1.4 1.5版,新版的不注册什么设置都保存不了.coyote安装时就设了网卡,不知后来能改不.
管理上,还是freesco方便,telnet和web均可.bbi的web页面常打不开,而且端口映射后从外网web管理总觉得有问题.并且没注册不能保存设置,停电 后岂不糟糕.
coyote据说可以ssh和web管理,可俺不知道怎么用:(制作向导里只有1.0版文档,网站上只有1.3版文档,可俺用的是2.0:( 有谁知道告诉俺一声.俺觉得coyote也不错的.

总结:
floppyfw实在不佳,俺等菜鸟不知如何配置,而且一出来就已登录,实在不安全.所以试了一下就没用了.
bbi的流量统计和访问限制很有特色,新版的带宽管理很不错,如果注册了,还可以写到光盘上,可靠性大大提高.
coyote我不知道怎么管理,大虾们请指点俺,就实用来说,俺觉得比bbi好,因为占用资源也少,但管理更方便,俺喜欢命令行,要是有top命令就好了.
freesco很不错,如果俺的硬件再高一点,如mmx200/64m,俺铁定追随freesco而去.俺有mmx200/64m吗?俺没有,所以俺暂不追随.但freesco还有一好处,可以把软盘内容写到硬盘上去,哈哈,如此俺的80m硬盘不也可以发挥用场,如果把ftp和www目录搞清楚,俺不是还可以当个小网站?freesco还可以设定硬盘在多少分钟没动作就关闭,以免硬盘短命,可以设软盘只读.还可以用键盘灯显示状态,这点和bbi差不多,不过bbi在小区实践中觉得灯老不正常,这时想来就是bbi出问题了吧.

最后,请大虾帮忙,
一. coyote如何远程管理,ssh软件用哪个好.
二.有没有电子软盘,多少钱在哪买.还有电子硬盘,我在本版看高手说买了个什么8M的DOM盘还是卡,花了250元,把软盘上内容倒进去了.不知这DOM卡是啥玩意.还有,俺觉得用CF卡也不错,CF卡本身也是标准ata接口,只是物理接口不同,但我在网上图片看日本玩机器人也用这个插在一个CF转IDE卡上,不知这个卡在哪买,多少钱?
这样的话,俺们的系统可靠性不就大大的高了吗?用CF卡还可以装smoothwall吧.
大虾们还有什么提高可靠性的办法,如风扇方面.

2

没人理俺？
coyote管理俺已搞明白，可ssh登录，web好象只能在内网登录。coyote内存占用和bbi一样小，可能还少些，没带宽限制等，不过那些管理我看没几个作得好的。

还是有点问题，第一次启动coyote，ssh要生成一个key,不知换了机子有没有影响？另外，没有top命令，如何看cpu占用率，现在只能看到内存使用。

3

看了一下freesco ，好象还不错。

4

freesco应如何设置(我用adsl上网）

5

freesco如何设置？每一步都有提示的呀。如果你要求不高，想更简单，用coyote也不错，他的制作向导和bbi一样好用。盘子作好后就可以用了， 不用再作任何设置。记住，第一张是内网卡，freesco正好相反。不过freesco可以建ftp www,虽然我还没用明白。

6

我也试过几个，还有closeBSD，openBSD，感觉还是floppyfw比较好，比较灵活，支持的插件比较多，居然有插件支持netmeeting，要的基本都有了，论坛的支持也还不错，而且更新快啊。至于不安全，好象也是可以设密码的。

7

据俺初步观察，coyote似乎内存不能有效回收。内存占用越来越大，半夜看内存占用和晚上繁忙时一样多，说明没有回收。当然也不是太明显，但的确后来总比开始大。由于今天又停电了，所以还没有更长观测。

8

floppyfw手工配置，把img文件释放出来，修改config 和 firewall.ini 文件
一般只需要修改config文件，下面是2.9.3的配置文件：

代码:--------------------------------------------------------------------------------

Configuration for floppyfw

Fill in the blanks.

For configuring of modules to use,

this includes the network interfaces: /modules.lst

For configuring firewall rules and incoming traffic: /firewall.ini

For configuring extra network interfaces you may use netwirk.ini

The default internal network is 10.42.42.* with 10.42.42.1

As the floppyfw internal address (and default gateway for all

internal machines). To change this go down to the INSIDE section.

#=============================================================================

Basic configuration:

Select the type of your OUTSIDE connection:

CONNECT_TYPE=PPP # if you use a modem

CONNECT_TYPE=PPPoE # if you use some type of DSL that uses PPPoE

                    # (Most of them do)

CONNECT_TYPE=DHCP # For getting the IP address by DHCP, often used
# on cable modems.

CONNECT_TYPE=STATIC # For the good old LAN/WAN connections with

		# static IP addresses on the outside.

CONNECT_TYPE=EXTERNAL # is a hook for booting a external startup

                    # script from a package.
                    # the external script has to be in /etc/ext-up.init

Some connection methods wants a userid and password, PPP and PPPoE

is the typical but also the EXTERNAL option may want it.

USER_IDENT=
USER_PASSWORD=

Use a DHCP server on the inside network. (This will turn on DNSMASQ aswell)

(Dnsmasq is a dns cache.)

DHCP_DAEMON=n

Floppyfw now has a login prompt, If you want it.

Default, for now, is a login prompt and no password..

You have to “login” as root.

This is for deciding how to use the login stuff:

Options:

CONSOLE gives you a login prompt on all available VCs.

SERIAL will give you a login on the serial console.

NONE will give you no login prompt at all, like USE_SHELL=n used to be.

LOGIN=CONSOLE

Password can be created in many ways. Youhave two (three) options,

DES_PASSWORD will accept a crypted strong

PASSWORD will accept a strong (the specific root password).

This will give you “ffw” as login password.

DES_PASSWORD=nCLm5JgCK0G5U

PASSWORD=

Done! Your floppyfw should already work by now.

Save this file and give it a first shot !

#=============================================================================

Physical device layout:

In the files /etc/outside.info and /etc/inside.info you will see

OUTSIDDE_DEVICE and INSIDE_DEVICE, those are the logical devices used by

firewall.init and friends..

OUTSIDE_DEV=eth0
INSIDE_DEV=eth1

#-----------------------------------------------------------------------------

INSIDE settings if you are using the STATIC connection option:

Your inside network, this has 10.42.42.* set as default, this is

addresses assigned for internal networks according to RFC 1918.

INSIDE_IP=10.42.42.1
INSIDE_NETWORK=10.42.42.0
INSIDE_NETMASK=255.255.255.0
INSIDE_BROADCAST=10.42.42.255

If you use the internal DHCP server and change the IP address and range

above you should also set the dhcp address range.

DHCP_RANGE_START=10.42.42.100
DHCP_RANGE_END=10.42.42.200

#-----------------------------------------------------------------------------

OUTSIDE settings if you are using the STATIC connection option:

OUTSIDE_IP=
OUTSIDE_NETMASK=
OUTSIDE_NETWORK=
OUTSIDE_BROADCAST=

Misc

These are not nescessary to set if you are using DHCP.

(The DOMAIN field might be useful to change)

DEFAULT_GATEWAY=

Name servers can be a list, separated by a space. like “1.1.1.1 1.1.1.2”

NAME_SERVER_IP=“”

MAC address for outside nic

Some ISPs uses bootp style dhcp tables and some just remembers the last

used MAC address. this allows you to swap nics

OUTSIDE_MAC=00:00:e8:48:6c:cb

#-----------------------------------------------------------------------------

PPP settings:

Change the following only if you are using PPP or PPPoE!

Phone number:

TELEPHONE=

Serial Port COM1 is /dev/tts/0, COM2 is /dev/tts/1 etc.

SERIAL_PORT=/dev/tts/1
PORT_SPEED=57600
PPP_CONNECT_TIMEOUT=60
PPP_CONNECT_POLL=3

General configuration options

USEPEERDNS=yes # set to ‘yes’ or ‘no’
#Change the DEMAND variable to either:

‘no’ for “always on” connection

N where N is the number of idle seconds before we disconnect

#DEMAND=600
DEMAND=no

A debug option for debugging PPPoE, it will log to the specified file.

This must NOT be used during normal use, it’ll fill up the ramdisk..

PPPOE_DEBUG=/tmp/pppoe.log

#-----------------------------------------------------------------------------

Defaults and switches:

HOSTNAME=floppyfw
DOMAIN=floppyfwsecured.com

Use a caching DNS server on the floppy. (This will automatically be true if

the DHCP daemon is used.)

DNSMASQ=n

And for the logging the scripts use:

Default works for most purposes.

DEBUG_LOG=“/dev/vc/3”

Turning on syslogd and klogd.

This is a nice thing but will eat CPU which is why it is turned

off by default.

The firewall.ini file is where you can turn on logging of rejected packages.

USE_SYSLOG=n

This SYSLOG does not use syslogd.conf so we have to set things here.

Flags:

Log to /dev/vc/3 instead of /var/log/messages which aren’t exactly a

good idea on a ramdisk.

-O /dev/vc/3

Log to network. host:port

-R 10.42.42.42:514

Log to both network and file:

-L

–MARK-- 0 is no mark.

-m 0

SYSLOG_FLAGS=“-m 360 -O ${DEBUG_LOG}”

At the bottom (almost) because this is a feature that should not be

widely used but it will be useful for some people, escpecially

people using some irc servers demanding a result.

This is a fake ident daemon, you can set the userid it shall answer

and floppyfw will automagically start the fake identd with this user

as the response.

This will have security implications since you are running a listening

daemon (server) on the outside network interface. do this ONLY

if you really need it.

#FAKEIDENT=

If you want to use a second device (floppy disk, or whatever),

enter a device name like “/dev/fd1”

Otherwise enter “n”

#SECOND_DEVICE=“/dev/floppy/1”
SECOND_DEVICE=n

Below is historical options, either ready for removal or revival.

(y)es or (n)o

OPEN_SHELL=n

Choose the serial port for the console if you want to do serial console.

SERIAL_CONSOLE=/dev/tts/0

上面的配置文件很容易看懂，分成几个部分，分别配置上网类型，根据上网类型配置相应部分，然后配置内网，dns ，dhcp等。
firewall.ini用来配置iptable，如果需要port map等，就可以修改这个文件，里面说明很清楚，新手也很容易配置

9

freesco使用vm虚拟机进行试验
配置
1.44 fd
64m ram
双网卡 pcnet32 AMD 79C965 (PCnet-32)
网卡驱动已拷贝进软盘
pppoe拨号正常
网卡ip 为192.168.1.250
dhcp 开启
但偶的另一台虚拟机win98不能获得ip地址
怎样解决呢
谢谢版主大人

10

发现只驱动了一片网卡，不能在系统里使用两片相同的网卡么？
版大，您使用freesco时是两片8139么？

11

能使用相同的，我用的的确是两片8139。
不过我也发觉有不能同时驱动两张网卡的问题，我上一张8139，一张ne2000，i/o 320,irq5，俺设为nic1,名字eth1，可只有eth0也就是8139起作用了。俺怒，ifconfig eth1，噫，没有eth1.俺想insmod看，555，/lib下没有modules目录。不知如何手工启用网卡。
于是俺上一张8029在pci3，8139在pci4，nic0和nic1当然中断和i/o都设为0.可是只有8029起作用了。俺又换双8029，啧，有一张8029不起作用。俺cat /proc/pci发觉有张网卡不怎么认得：（于是俺又换回刚才的8139，这下居然两张网卡都可以用了。俺来ping一下，哦，插网线，好，ping，噫，怎么shell死了？按一下numlock，不起作用，切换控制台，不行。5555555

12

拔拔插插，终于搞定了
头昏，辛苦哦
推荐大大使用ClarkConnect
ClarkConnect.com
偶有1.3 office
2.0 home
光碟iso

就是对机器的要求高了点
586
64m
1g hd

13

我修改的floppyfw用光盘引导在一个网吧里接了一根电信的光缆一根网通的光缆与一根ADSL再加一根内网的网线，电信的光缆与网通的光缆实行流量匀衡，ADSL指定一批机器如192.168.0.160-192.168.0.175,电脑的网关是192.168.0.1,110台电脑。只觉的floppyfw定制方便，但设制不方便。还可以把floppyfw放在优盘里，用优盘引导。

14

大家好！
floppyfw谁有呀！
请给我一个！好么？
我的信箱：xfh_0934@163.com

15

coyote管理：WEB方式注意端口是8180