小弟在家是利用Hinet ADSL 2M/128Kbit撥接上網，向Hinet申請了一個固定IP(最近
開放的免費服務),並去www.adsldns.org由請了一個免費的DNS服務，來學習
用FreeBSD架站。
現正在學習ipfilter及ipnat的功能，參考了網路上眾多的相關文件，已成功地
讓區網內的WinXP透過FreeBSD上網(NAT)，並在ipf.rules設定一些rules來做封包過濾。
但我發現下次開機後，Apache2就不能啟動了，apache2在開機過程中出現了如下的訊息:
Local package initialization: httpd: Could not determine the server's fully
qualified domain name, using 127.0.0.1 for ServerName
我去找httpd-error.log，發現了底下的錯誤訊息:
No address associated with hostname: mod_unique_id: unable to find IPv4 address
of "test.adsldns.org" Configuration Failed
錯誤訊息說的很清楚，就是無法辦別test.adsldns.org的IP位置(那個test是舉例用的)，
可是奇怪的是我確定我的FQDN是可用的，因為開機完後ping的到，而且手動輸入
apachectl start可啟動，但就是在開機過程中啟動不了。不知原因為何? 還請各位
先進指點一二，謝謝! 我附上ppp.conf,rc.conf,ipf.rules,ipnat.rules。
---ppp.conf---
default:
set log Phase Chat LCP IPCP CCP tun command
set ifaddr 10.0.0.1/0 10.0.0.2/0
hinet:
set device PPPoE:rl0
set mru 1492
set mtu 1492
set speed sync
enable lqr
set lqrperiod 5
set authname [email protected]
set authkey YYYYYYYY
set dial
set login
add default HISADDR
enable dns
---rc.conf-----
kern_securelevel_enable="YES"
kern_securelevel="2"
nfs_reserved_port_only="NONE"
sshd_enable="YES"
usbd_enable="YES"
# Network Setup
network_interfaces="auto"
defaultrouter="10.0.0.1"
hostname="test.adsldns.org"
ifconfig_rl0="inet 10.0.0.1 netmask 255.255.255.0 -arp"
ifconfig_rl1="inet 192.168.0.254 netmask 255.255.255.0"
# Enable PPP
ppp_enable="YES"
ppp_mode="ddial"
ppp_profile="hinet"
# Enable ipfilter&ipnat&ipmon
ipfilter_enable="YES"
ipnat_enable="YES"
ipmon_enable="YES"
ipmon_flags="-Ds"
syslogd_flags="-ss"
----ipf.rules---
pass in quick on lo0 all
pass out quick on lo0 all
pass in quick on rl1 all
pass out quick on rl1 all
# Outside interface
pass out quick on tun0 from any to any keep state
# Allow some services here
pass in quick on tun0 proto tcp from any to any port = 21 keep state
pass in quick on tun0 proto udp from any to any port = 21 keep state
pass in quick on tun0 proto tcp from any to any port = 22 keep state
pass in quick on tun0 proto udp from any to any port = 22 keep state
pass in quick on tun0 proto tcp from any to any port = 25 keep state
pass in quick on tun0 proto udp from any to any port = 25 keep state
pass in quick on tun0 proto tcp from any to any port = 80 keep state
pass in quick on tun0 proto udp from any to any port = 80 keep state
pass in quick on tun0 proto tcp from any to any port = 110 keep state
pass in quick on tun0 proto udp from any to any port = 110 keep state
pass in quick on tun0 proto tcp from any to any port = 443 keep state
pass in quick on tun0 proto udp from any to any port = 443 keep state
pass in quick on tun0 proto tcp from any to any port = 4662 keep state
pass in quick on tun0 proto udp from any to any port = 3312 keep state
# allow ping, traceroute
pass in quick on tun0 proto icmp from any to any icmp-type 0
pass in quick on tun0 proto icmp from any to any icmp-type 11
# block all remaining traffic in the good old fashioned way
block return-rst in log quick on tun0 proto tcp from any to any
block return-icmp-as-dest(port-unr) in log quick on tun0 proto udp from any to
any
block in log quick on tun0 all
-----ipnat.rules------
map tun0 192.168.0.0/24 -> 220.135.214.101/32
rdr tun0 220.135.214.101/32 port 4662 -> 192.168.0.1 port 4662
rdr tun0 220.135.214.101/32 port 3312 -> 192.168.0.1 port 3312 udp
--
※ 發信站: 批踢踢實業坊(ptt.cc)
◆ From: 61.231.68.187