Setup FreeBSD Server with full HDD encryption

Fatal trap 12: page fault while in kernel mode
fault virtual adress      = 0x1
fault code                = supervisor read, page not present
instruction pointer       = 0x20:0xc06a6b14
stack pointer             = 0x28:0xcbf3b670
frame pointer             = 0x28:0xcbf3b670
code segment              = base 0x0, limit 0xfffff, type 0x1b
                          = DPL 0, pres 1, def32 1, gran 1
processor eflags          = interrupt enabled, resume, IOPL = 0
current process           = 2 (g_event)
trap number               = 12
panic: page fault
                                    

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:

Part - Mount - Size - Newfs 
ad0s1a - /    - 512MB - UFS2 - Y 
ad0s1b - swap - 732MB - SWAP -  
ad0s1d - /var - 1390MB - UFS2+S - Y 
ad0s1e - /tmp - 512MB - UFS2+S -  Y
ad0s1f - /usr - Rest - UFS2+S -  Y
                                    

1:
2:
3:
4:
5:
6:

Part - Mount - Size - Newfs 
ad0s1a - /    - 2000MB - UFS2 - Y 
ad0s1b - swap - 1000MB - SWAP -  
ad0s1d - /var - 2000MB - UFS2+S - Y 
ad0s1e - /tmp - 1000MB - UFS2+S -  Y
ad0s1f - /usr - Rest - UFS2+S -  Y
                                    

1:
2:
3:
4:
5:
6:

Part:       Mount:    Size:      Newfs
ad0s1a      /         512MB      UFS2
ad0s1b      swap      486MB      SWAP
ad0s1d      /var      1267MB     UFS2+S
ad0s1e      /tmp      512MB      UFS2+S
ad0s1f      /usr      1221MB     UFS2+S
                                    

1:
2:
3:
4:
5:
6:

Part   - Mount - Size   - Newfs
ad0s1a - /     - 2000MB - UFS2 - Y 
ad0s1b - swap  - 1000MB - SWAP -  
ad0s1d - /var  - 2000MB - UFS2+S - Y 
ad0s1e - /tmp  - 1000MB - UFS2+S -  Y
ad0s1f - /usr  - Rest   - UFS2+S -  Y
                                    

1:
2:
3:
4:
5:
6:

cd /dev
ls
                                    

1:
2:

geli init –b –s 4096 –l 256 /dev/ad0s2 
                                    

1:

Enter new passphrase
                                    

1:

Metadata backup can be found in /var/backups/ad0s2.eli and can be restored......
                                    

1:

geli attach /dev/ad0s2
                                    

1:

GEOM_ELI: Device ad0s2.eli created.
GEOM_ELI: Encryption: AES-CBC 256
GEOM_ELI: Crypto: software
                                    

1:
2:
3:

bsdlabel –w /dev/ad0s2.eli 
                                    

1:

bsdlabel –e /dev/ad0s2.eli 
                                    

1:

# /dev/ad0s2.eli:
8 partitions:
#       size      offset     fstype    [fsize    bsize    bps/cpg]
a:    500000           0     4.2BSD     0        0    
b:    236328      500000       swap     0        0
c:    ??????           0     unused     0        0     # don’t edit
d:    618164      736328     4.2BSD     0        0    
e:    250000     1354492     4.2BSD     0        0    
f:         *     1604492     4.2BSD     0        0
                                    

1:
2:
3:
4:
5:
6:
7:
8:
9:

cd /dev
ls
                                    

1:
2:

newfs –i 1024 /dev/ad0s2.elia
                                    

1:

/dev/ad0s2.elia: 488.3 MB (1000000 sectors) block size 16384, fragment size 4096
        using 4 cylinder groups of 122.08MB, 7813 blks, 31296 inodes.
super-block backups (for fsck –b #) at:
160, 250176, 500192, 750208
                                    

1:
2:
3:
4:

newfs /dev/ad0s2.elid
                                    

1:

newfs /dev/ad0s2.elie
                                    

1:

newfs –i 1024 /dev/ad0s2.elif
                                    

1:

mkdir /fixed
                                    

1:

mount /dev/ad0s2.elia /fixed
                                    

1:

mkdir /fixed/var
mkdir /fixed/tmp
mkdir /fixed/usr
                                    

1:
2:
3:

mount /dev/ad0s2.elid /fixed/var
mount /dev/ad0s2.elie /fixed/tmp
mount /dev/ad0s2.elif /fixed/usr
                                    

1:
2:
3:

/bin/sh
export DESTDIR=/fixed/
/bin/csh
                                    

1:
2:
3:

mount /cdrom
                                    

1:

cd /cdrom/8.1-RELEASE/base
./install.sh
                                    

1:
2:

cd /cdrom/8.1-RELEASE/kernels
./install.sh GENERIC
                                    

1:
2:

cd /cdrom/8.1-RELEASE/manpages
./install.sh
cd /cdrom/8.1-RELEASE/catpages
./install.sh
                                    

1:
2:
3:
4:

mount /dev/ad0s1 /mnt
                                    

1:

cp –Rpv /fixed/boot /mnt
                                    

1:

cd /mnt/boot/kernel
gzip kernel geom_eli.ko acpi.ko
                                    

1:
2:

vi /mnt/etc/fstab
                                    

1:

# Device           Mountpoint     Fstype     Options     Dump   Pass#
/dev/ad0s2.elib    none           swap       sw                 0        0
/dev/ad0s2.elia    /              ufs        rw                 1        1
/dev/ad0s2.elie    /tmp           ufs        rw                 2        2
/dev/ad0s2.elif    /usr           ufs        rw                 2        2
/dev/ad0s2.elid    /var           ufs        rw                 2        2
/dev/acd0          /cdrom         cd9660     ro,noauto   0      0
                                    

1:
2:
3:
4:
5:
6:
7:

mkdir /fdd
mkdir /mnt/fdd
mkdir /fixed/fdd
                                    

1:
2:
3:

mkdir /cdrom
mkdir /mnt/cdrom
mkdir /fixed/cdrom
                                    

1:
2:
3:

cp /mnt/etc/fstab /fixed/etc
                                    

1:

echo hint.kbdmux.0.disabled=\"1\" >> /mnt/boot/device.hints
                                    

1:

echo geom_eli_load=\”YES\” >> /mnt/boot/loader.conf
                                    

1:

shutdown –h NOW
                                    

1:

cd /dev
ls
                                    

1:
2:

geli init –b –s 4096 –l 256 /dev/da0
                                    

1:

geli attach /dev/da0
                                    

1:

GEOM_ELI: Device da0.eli created
GEOM_ELI: Encryption: AES-CBC 256
GEOM_ELI: Crypto: software
                                    

1:
2:
3:

bsdlabel –w /dev/da0.eli
bsdlabel –e /dev/da0.eli
                                    

1:
2:

newfs /dev/da0.elia
                                    

1:

mkdir /encrypt_a
                                    

1:

mount /dev/da0.elia /encrypt_a
                                    

1:

df -h
                                    

1:

vi /etc/fstab
                                    

1:

/dev/da0.elia           /encrypt_a      ufs     rw              2       2
                                    

1:

mount /dev/ad0s1a /mnt
cp /etc/fstab /mnt/etc
                                    

1:
2:

shutdown -r NOW
                                    

1:

vi /var/log/messages
                                    

1:

sysinstall
                                    

1:

Shutdown -r NOW
                                    

1:

adduser
                                    

1:

david:*:1001:
mariska:*:1002:
mysql:*:1003:rsync
ftp:*:1004:david
richard:*:1005:
speciaal:*:1006:david
locatedb:*:1007:
install:*:1008:rsync,locatedb.makelist
rsync:*:1009:
fotos:*:1010:david,mariska,rsync,locatedb,bezoeker,MCX1,tessa,makelist
readwww:*:1011:david,mariska,rsync,locatedb,MCX1,makelist
sound:*:1012:david,locatedb,rsync,makelist
emulator:*:1013:david,locatedb,rsync,makelist
bezoeker:*:1014:
copycopy:*:1015:
MCX1:*:1016:
tessa:*:1017:
bewoner:*:1018:david,mariska,rsync,locatedb,MCX1,makelist
makelist:*:1020:
copycop:*:1021:
rootmail:*:1022:
                                    

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:

pw groupadd bewoner
                                    

1:

vi /etc/group
                                    

1:

sysinstall
                                    

1:

vi /etc/rc.conf
                                    

1:

shutdown -r NOW
                                    

1:

sysinstall
                                    

1:

vi /usr/local/etc/rsyncd.conf
                                    

1:

# rsyncd.conf - Example file, see rsyncd.conf(5)
#

# Set this if you want to stop rsync daemon with rc.d scripts
pid file = /var/run/rsyncd.pid

# Edit this file before running rsync daemon!!

uid = rsync
gid = rsync
use chroot = no
max connections = 4
syslog facility = local5
pid file = /var/run/rsyncd.pid
#auth users =david, speciaal, copycop, copycopy
#secrets file = /usr/local/etc/rsyncd.secrets

[test]
        path = /encrypt_a/tmp
        comment = Test to sync the samba tmp directory

[encrypt_a]
        path = /encrypt_a

[encrypt_a]
        path = /encrypt_a
        comment = Shared Directory Tree
        auth users = copycop
        hosts allow = 10.30.0.2
        secrets file = /usr/local/etc/rsyncd.secrets

#[ftp]
#       path = /var/ftp/pub
#       comment = whole ftp area (approx 6.1 GB)

#[sambaftp]
#       path = /var/ftp/pub/samba
#       comment = Samba ftp area (approx 300 MB)

#[rsyncftp]
#       path = /var/ftp/pub/rsync
#       comment = rsync ftp area (approx 6 MB)

#[sambawww]
#       path = /public_html/samba
#       comment = Samba WWW pages (approx 240 MB)

#[cvs]
#       path = /data/cvs
#       comment = CVS repository (requires authentication)
#       auth users = tridge, susan
#       secrets file = /usr/local/etc/rsyncd.secrets
                                    

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:

chmod 0640 /usr/local/etc/rsyncd.conf
                                    

1:

vi /usr/local/etc/rsyncd.secrets
                                    

1:

tridge:mypass
susan:herpass
                                    

1:
2:

chmod 0640 /usr/local/etc/rsyncd.secrets
                                    

1:

rsyncd_enable=”YES”
                                    

1:

vi /etc/rc.conf
ntp_enable=”YES”
                                    

1:
2:

vi /etc/ntp.conf
                                    

1:

# This is the configuration file for NTP
#  (Network Time Protocol).  More info at
#  www.NTP.org

# This computer will act as a stratum 2 time
#  server, by referencing the following 4 or
#  more stratum 1 time servers:

server nl.pool.ntp.org           iburst     # Netherlands
server be.pool.ntp.org           iburst     # Belgium
server de.pool.ntp.org           iburst     # Germany
server fr.pool.ntp.org           iburst     # France
server es.pool.ntp.org           iburst     # Spain


#  Since the clock on most PCs drifts around
#  significantly, let's use a file to
#  keep track of that drift and compensate
#  for it:

driftfile /etc/ntp.drift
                                    

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:

vi /etc/motd
                                    

1:

FreeBSD 8.1-RELEASE (BSD03) - 2010 /Node:3 (Original file:/etc/motd.bak)

Running:
- Apache2, Php 5, Mysql 5
- Pure-FTPd, SSH
- Samba 3
- NFS

IP: 10.30.0.4 / Gateway: 10.30.0.100

- FreeBSD Handbook: http://www.FreeBSD.org
- Use sysinstall to install additional Packages
                                    

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:

sysinstall
                                    

1:

/encrypt_a -maproot=copycop 10.30.0.3
                                    

1:

vi /etc/exports
                                    

1:

vi /etc/rc.conf
                                    

1:

nfs_server_enable="YES"
rpcbind_enable="YES"
                                    

1:
2:

mount 10.30.0.3:/encrypt_a /mnt
                                    

1:

cd /mnt
cp –Rpv * /encrypt_a
                                    

1:
2:

cp –Rpnv * /encrypt_a
                                    

1:

sysinstall
                                    

1:

cd /usr/ports/net/samba34
make install clean
                                    

1:
2:

pkg_delete tdb-1.2.0
                                    

1:

make install clean
                                    

1:

vi /usr/local/etc/smb.conf
                                    

1:

# This one is useful for people to share files
[tmp]
   comment = Temporary file space
   path = /encrypt_a/tmp
   writeable = no
   public = yes
                                    

1:
2:
3:
4:
5:
6:

# Private-drives
#
[private]
   comment = Eigen Prive directory op de Server
   path = /encrypt_a/Private/%U
   public = no
   writeable = yes
   browseable = no
                                    

1:
2:
3:
4:
5:
6:
7:
8:

[appz]
   comment = Programma's, Games en dergelijke.
   path = /encrypt_a/Appz
   public = no
   writeable = yes
   browseable = no
   force create mode = 0775
   force directory mode = 0775
                                    

1:
2:
3:
4:
5:
6:
7:
8:

[ons]
   comment = Gezamelijke schijf
   path = /encrypt_a/Ons
   public = no
   writeable = yes
   browseable = no
   force create mode = 0770
   force directory mode = 0770
                                    

1:
2:
3:
4:
5:
6:
7:
8:

vi /etc/rc.conf
                                    

1:

nmbd_enable="YES"
smbd_enable="YES"
                                    

1:
2:

smbpasswd -a username
                                    

1:

smb ports = 139
                                    

1:

load printers = no
printing = bsd
printcap name = /dev/null
                                    

1:
2:
3:

# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
#
# For a step to step guide on installing, configuring and using samba, 
# read the Samba-HOWTO-Collection. This may be obtained from:
#  http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf
#
# Many working examples of smb.conf files can be found in the 
# Samba-Guide which is generated daily and can be downloaded from: 
#  http://www.samba.org/samba/docs/Samba-Guide.pdf
#
# Any line which starts with a ; (semi-colon) or a # (hash) 
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command "testparm"
# to check that you have not made any basic syntactic errors. 
#
#======================= Global Settings =====================================
[global]

# workgroup = NT-Domain-Name or Workgroup-Name, eg: MIDEARTH
   workgroup = Wayward 

# server string is the equivalent of the NT Description field
   server string = BSD03 Samba Server 

## Samba Time Server?
#
   time server =yes

## getpeername failed. Error was socket is not connected, solution:
#
smb ports = 139

# Security mode. Defines in which mode Samba will operate. Possible 
# values are share, user, server, domain and ads. Most people will want 
# user level security. See the Samba-HOWTO-Collection for details.
   security = user

# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to two C class networks and
# the "loopback" interface. For more examples of the syntax see
# the smb.conf man page
   hosts allow = 10.30.0. 127. 

# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
   load printers = no 

# you may wish to override the location of the printcap file
   printcap name = /dev/null 

# on SystemV system setting printcap name to lpstat should allow
# you to automatically obtain a printer list from the SystemV spool
# system
;   printcap name = lpstat

# It should not be necessary to specify the print system type unless
# it is non-standard. Currently supported print systems include:
# bsd, cups, sysv, plp, lprng, aix, hpux, qnx
   printing = bsd 

# Uncomment this if you want a guest account, you must add this to /etc/passwd
# otherwise the user "nobody" is used
;  guest account = pcguest

# this tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba34/log.%m

# Put a capping on the size of the log files (in Kb).
   max log size = 50

# Use password server option only with security = server
# The argument list may include:
#   password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]
# or to auto-locate the domain controller/s
#   password server = *
;   password server = <NT-Server-Name>

# Use the realm option only with security = ads
# Specifies the Active Directory realm the host is part of
;   realm = MY_REALM

# Backend to store user information in. New installations should 
# use either tdbsam or ldapsam. smbpasswd is available for backwards 
# compatibility. tdbsam requires no further configuration.
;   passdb backend = tdbsam

# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting.
# Note: Consider carefully the location in the configuration file of
#       this line.  The included file is read at that point.
;   include = /usr/local/etc/smb.conf.%m

# Most people will find that this option gives better performance.
# See the chapter 'Samba performance issues' in the Samba HOWTO Collection
# and the manual pages for details.
# You may want to add the following on a Linux system:
;   socket options = SO_RCVBUF=8192 SO_SNDBUF=8192

# Configure Samba to use multiple interfaces
# If you have multiple network interfaces then you must list them
# here. See the man page for details.
;   interfaces = 192.168.12.2/24 192.168.13.2/24 

# Browser Control Options:
# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
;   local master = no

# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
;   os level = 33

# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
;   domain master = yes 

# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
;   preferred master = yes

# Enable this if you want Samba to be a domain logon server for 
# Windows95 workstations. 
;   domain logons = yes

# if you enable domain logons then you may want a per-machine or
# per user logon script
# run a specific logon batch file per workstation (machine)
;   logon script = %m.bat
# run a specific logon batch file per username
;   logon script = %U.bat

# Where to store roving profiles (only for Win95 and WinNT)
#        %L substitutes for this servers netbios name, %U is username
#        You must uncomment the [Profiles] share below
;   logon path = \\%L\Profiles\%U

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
;   wins support = yes

# WINS Server - Tells the NMBD components of Samba to be a WINS Client
#    Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
;   wins server = w.x.y.z

# WINS Proxy - Tells Samba to answer name resolution queries on
# behalf of a non WINS capable client, for this to work there must be
# at least one    WINS Server on the network. The default is NO.
;   wins proxy = yes

# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
# via DNS nslookups. The default is NO.
   dns proxy = no 

# Charset settings
;   display charset = koi8-r
;   unix charset = koi8-r
;   dos charset = cp866

# Use extended attributes to store file modes
;    store dos attributes = yes
;    map hidden = no
;    map system = no
;    map archive = no

# Use inherited ACLs for directories
;    nt acl support = yes
;    inherit acls = yes
;    map acl inherit = yes 

# These scripts are used on a domain controller or stand-alone 
# machine to add or delete corresponding unix accounts
;  add user script = /usr/sbin/useradd %u
;  add group script = /usr/sbin/groupadd %g
;  add machine script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null -s /bin/false %u
;  delete user script = /usr/sbin/userdel %u
;  delete user from group script = /usr/sbin/deluser %u %g
;  delete group script = /usr/sbin/groupdel %g


#============================ Share Definitions ==============================
[homes]
   comment = Home Directories
   browseable = no
   writable = yes

# Un-comment the following and create the netlogon directory for Domain Logons
; [netlogon]
;   comment = Network Logon Service
;   path = /usr/local/samba/lib/netlogon
;   guest ok = yes
;   writable = no
;   share modes = no


# Un-comment the following to provide a specific roving profile share
# the default is to use the user's home directory
;[Profiles]
;    path = /usr/local/samba/profiles
;    browseable = no
;    guest ok = yes


# NOTE: If you have a BSD-style print system there is no need to 
# specifically define each individual printer
[printers]
   comment = All Printers
   path = /var/spool/samba34
   browseable = no
# Set public = yes to allow user 'guest account' to print
   guest ok = no
   writable = no
   printable = yes

# This one is useful for people to share files
;[tmp]
;   comment = Temporary file space
;   path = /tmp
;   read only = no
;   public = yes

# A publicly accessible directory, but read only, except for people in
# the "staff" group
;[public]
;   comment = Public Stuff
;   path = /home/samba
;   public = yes
;   writable = yes
;   printable = no
;   write list = @staff

# Other examples. 
#
# A private printer, usable only by fred. Spool data will be placed in fred's
# home directory. Note that fred must have write access to the spool directory,
# wherever it is.
;[fredsprn]
;   comment = Fred's Printer
;   valid users = fred
;   path = /homes/fred
;   printer = freds_printer
;   public = no
;   writable = no
;   printable = yes

# A private directory, usable only by fred. Note that fred requires write
# access to the directory.
;[fredsdir]
;   comment = Fred's Service
;   path = /usr/somewhere/private
;   valid users = fred
;   public = no
;   writable = yes
;   printable = no

# a service which has a different directory for each machine that connects
# this allows you to tailor configurations to incoming machines. You could
# also use the %U option to tailor it by user name.
# The %m gets replaced with the machine name that is connecting.
;[pchome]
;  comment = PC Directories
;  path = /usr/pc/%m
;  public = no
;  writable = yes

# A publicly accessible directory, read/write to all users. Note that all files
# created in the directory by users will be owned by the default user, so
# any user with access can delete any other user's files. Obviously this
# directory must be writable by the default user. Another user could of course
# be specified, in which case all files would be owned by that user instead.
;[public]
;   path = /usr/somewhere/else/public
;   public = yes
;   only guest = yes
;   writable = yes
;   printable = no

# The following two entries demonstrate how to share a directory so that two
# users can place files there that will be owned by the specific users. In this
# setup, the directory should be writable by both users and should have the
# sticky bit set on it to prevent abuse. Obviously this could be extended to
# as many users as required.
;[myshare]
;   comment = Mary's and Fred's stuff
;   path = /usr/somewhere/shared
;   valid users = mary fred
;   public = no
;   writable = yes
;   printable = no
;   create mask = 0765

#-=-=-=-=-=-=-=-=-= My Shares =-=-=-=-=-=-=-=-=-=-
#################################################
# All drives on the backup server are read only
#

# This one is useful for people to share files
[tmp]
   comment = Temporary file space
   path = /encrypt_a/tmp
   writeable = no
   public = yes

# Log share
#
[log]
   comment = Log files of BSD03
   path = /var/log  
   public = yes
   writeable = no
   browseable = no

# Private-drives
#
[private]
   comment = Eigen Prive directory op de Server
   path = /encrypt_a/Private/%U
   public = no
   writeable = yes
   browseable = no

# Appz Drive
#
[appz]
   comment = Programma's, Games en dergelijke.
   path = /encrypt_a/Appz
   public = no
   writeable = yes
   browseable = no
   force create mode = 0775
   force directory mode = 0775

# Special Drive
#
[special]
   comment = Special Drives for: Ftp, Images, Sound, Apache 
   path = /encrypt_a/Special
   public = no
   writeable = yes
   browseable = no
   force create mode = 0775
   force directory mode = 0775

# Media
#
[media]
   comment = Media Audio, Video, Multimedia
   path = /encrypt_a/Media
   public = no
   writeable = yes
   browseable = no
   force create mode = 0775
   force directory mode = 0775

# Ons
#
[ons]
   comment = Gezamelijke schijf
   path = /encrypt_a/Ons
   public = no
   writeable = yes
   browseable = no
   force create mode = 0770
   force directory mode = 0770

# Startup With batch files for connecting to BSD03
#
[startup]
   comment = Batch files to connect to the BSD03 FreeBSD Server
   path = /encrypt_a/Startup
   public = yes
   writeable = no
   browseable = yes

# Share to dump all the Ghost images from dos
[image]
   comment = Drive to dump all the Ghost image's to 
   path = /encrypt_a/Images
   public = no
   writeable = yes
   browseable = yes 
   force create mode = 0775
   force directory mode = 0775

# Shares for the Media Center
# 
[video]
  comment = Video Files for the media center
  path = /encrypt_a/Media/movies
  writeable = yes
  browseable = yes
  force create mode = 0775
  force directory mode = 0775

[TV]
  comment = Alle the tv programs we like to keep
  path = /encrypt_a/Media/TV
  writeable = yes
  browsable = yes
  force create mode = 0775
  force directory mode = 0775

[pictures]
  comment = All our pictures
  path = /encrypt_a/Media/pictures
  writeable = yes
  browseable = yes
  force create mode = 0775
  force directory mode = 0775

[audio]
  comment = All our avaible audio
  path = /encrypt_a/Media/audio
  writeable = yes
  browseable = yes
  force create mode = 0775
  force directory mode = 0775
                                    

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
177:
178:
179:
180:
181:
182:
183:
184:
185:
186:
187:
188:
189:
190:
191:
192:
193:
194:
195:
196:
197:
198:
199:
200:
201:
202:
203:
204:
205:
206:
207:
208:
209:
210:
211:
212:
213:
214:
215:
216:
217:
218:
219:
220:
221:
222:
223:
224:
225:
226:
227:
228:
229:
230:
231:
232:
233:
234:
235:
236:
237:
238:
239:
240:
241:
242:
243:
244:
245:
246:
247:
248:
249:
250:
251:
252:
253:
254:
255:
256:
257:
258:
259:
260:
261:
262:
263:
264:
265:
266:
267:
268:
269:
270:
271:
272:
273:
274:
275:
276:
277:
278:
279:
280:
281:
282:
283:
284:
285:
286:
287:
288:
289:
290:
291:
292:
293:
294:
295:
296:
297:
298:
299:
300:
301:
302:
303:
304:
305:
306:
307:
308:
309:
310:
311:
312:
313:
314:
315:
316:
317:
318:
319:
320:
321:
322:
323:
324:
325:
326:
327:
328:
329:
330:
331:
332:
333:
334:
335:
336:
337:
338:
339:
340:
341:
342:
343:
344:
345:
346:
347:
348:
349:
350:
351:
352:
353:
354:
355:
356:
357:
358:
359:
360:
361:
362:
363:
364:
365:
366:
367:
368:
369:
370:
371:
372:
373:
374:
375:
376:
377:
378:
379:
380:
381:
382:
383:
384:
385:
386:
387:
388:
389:
390:
391:
392:
393:
394:
395:
396:
397:
398:
399:
400:
401:
402:
403:
404:
405:
406:
407:
408:
409:
410:
411:
412:
413:
414:
415:
416:
417:
418:
419:
420:
421:
422:
423:
424:
425:
426:

cd /usr/ports/databases/mysql41-server
make install clean
                                    

1:
2:

vi /etc/rc.conf
                                    

1:

mysql_enable=”YES”
mysqllimits_enable=”NO”
                                    

1:
2:

chmod 0777 /tmp
                                    

1:

cd /usr/ports/ftp/pure-ftpd
make – config
                                    

1:
2:

make install clean
                                    

1:

/etc/rc.conf
                                    

1:

# Pure-FTPd
pureftpd_enable="YES"
                                    

1:
2:

fetch http://machiel.generaal.net/files/pureftpd/v2.x/script.mysql
                                    

1:

mysql -u root -psecret < script.mysql
                                    

1:

cd /usr/local/etc
                                    

1:

cp pure-ftpd.conf.sample pure-ftpd.conf
                                    

1:

fetch http://machiel.generaal.net/files/pureftpd/v2.x/pureftpd-mysql.conf
                                    

1:

vi pureftpd.conf
                                    

1:

# MySQL configuration file (see README.MySQL)
MySQLConfigFile /usr/local/etc/pureftpd-mysql.conf
                                    

1:
2:

adduser
                                    

1:

/usr/local/etc/rc.d/pure-ftpd start
                                    

1:

cd /usr/ports/www/apache22
make install clean
                                    

1:
2:

vi /etc/rc.conf
                                    

1:

# Apache 2
apache22_enable="YES"
                                    

1:
2:

cd /usr/ports/lang/php5
                                    

1:

make config
                                    

1:

make install clean
                                    

1:

vi /usr/local/etc/apache22/httpd.conf
                                    

1:

AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps
                                    

1:
2:

DirectoryIndex index.htm index.php index.html
                                    

1:

cd /usr/ports/lang/php5-extensions
make config
                                    

1:
2:

make install clean
                                    

1:

shutdown -r NOW
                                    

1: