KERNCONF=GENERIC
WRKDIRPREFIX=/usr/obj
MAKE_JOBS_NUMBER=7
LOADER_ZFS_SUPPORT=true
LOCALIZED_LANG=ru
# WITH_NEW_XORG=true
WITH_LCD_FILTERING=true
WITH_XFT=true
WITHOUT_TTF_BYTECODE_ENABLED=false
WITH_TTF_BYTECODE_ENABLED=true
WITH_MSWINDOWS_LICENSE=true
WITH_VPX=true
WITH_A4SIZE=true
WITHOUT_DEBUG=true
WITHOUT_NOUVEAU=true
WITHOUT_MYSQL=true
WITHOUT_NAUTILUS=true
# Keep ruby 1.9 as default version.
RUBY_DEFAULT_VER=1.9
# added by use.perl 2012-05-30 15:00:34
PERL_VERSION=5.12.4

WITHOUT_AMD=true
WITHOUT_ASSERT_DEBUG=true
WITHOUT_ATM=true
WITHOUT_BIND_DNSSEC=true
WITHOUT_BIND_ETC=true
WITHOUT_BIND_LIBS_LWRES=true
WITHOUT_BIND_MTREE=true
WITHOUT_BIND_NAMED=true
WITHOUT_BLUETOOTH=true
WITH_BSD_GREP=true
WITHOUT_BSNMP=true
WITH_CLANG=true
#-WITH_CLANG_IS_CC=true
WITHOUT_EXAMPLES=true
WITHOUT_FLOPPY=true
WITHOUT_FREEBSD_UPDATE=true
WITHOUT_GAMES=true
#-WITHOUT_GCOV=true
WITHOUT_GDB=true
WITHOUT_HTML=true
WITH_IDEA=true
WITHOUT_IPFILTER=true
WITHOUT_IPFW=true
WITHOUT_IPX=true
WITHOUT_IPX_SUPPORT=true
WITHOUT_LIB32=true
WITHOUT_LPR=true
WITHOUT_NDIS=true
WITHOUT_NETGRAPH=true
WITHOUT_NETGRAPH_SUPPORT=true
WITHOUT_PPP=true
WITHOUT_PROFILE=true
WITHOUT_RCS=true
WITHOUT_SENDMAIL=true
WITHOUT_SYSINSTALL=true
WITHOUT_TELNET=true
WITHOUT_WIRELESS=true
WITHOUT_WIRELESS_SUPPORT=true

zfs_load="YES"
vfs.root.mountfrom="zfs:systempoolname"
vfs.zfs.prefetch_disable=0
cd9660_iconv_load="YES"
msdosfs_iconv_load="YES"
atapicam_load="YES"
#-nvidia_load="YES"
autoboot_delay="2"
#-beastie_disable="YES"
#-loader_logo="beastiebw"
loader_logo="beastie"
#loader_logo="orb"
#-snd_pcm_load="YES" 
#-snd_ich_load="YES"
# High Definition Audio
snd_hda_load="YES"
hw.snd.default_unit=1
hint.pcm.0.buffersize=65536
hint.pcm.1.buffersize=65536
hw.snd.feeder_buffersize=65536
hw.snd.latency=7
#dev.pcm.0.play.vchans=4 # in sysctl.conf
cpufreq_load="YES"
hint.p4tcc.0.disabled=1
hint.acpi_throttle.0.disabled=1
kern.argmax=412000

font8x14="cp866-8x14"
font8x16="cp866-8x16"
font8x8="cp866-8x8"
keymap="ru.koi8-r"
keyrate="fast"
mousechar_start="3"
scrnmap="koi8-r2cp866"
#-saver="blank"
#-saver="dragon"
blanktime="300"
#tmpmfs="YES"
#tmpsize="70M"
#tmpmfs_flags="-S"
apm_enable="YES"
powerd_enable="YES"
powerd_flags="-a adaptive -b adaptive"
#performance_cx_lowest="HIGH"
#performance_cpu_freq="HIGH"
#economy_cx_lowest="HIGH"
#economy_cpu_freq="HIGH"
#-performance_cx_lowest="C2"
#-economy_cx_lowest="C2"
dumpdev="NO"
mixer_enable="YES"
# None Sendmail
sendmail_enable="NONE"
sendmail_submit_enable="NO"
sendmail_outbound_enable="NO"
sendmail_msp_queue_enable="NO"
clear_tmp_enable="YES"
cleanvar_enable="YES"
clear_tmp_X="YES"
virecover_enable="NO"
# NFS-server
nfs_server_enable="YES"
nfsv4_server_enable="YES"
nfsuserd_enable="YES"
nfs_reserved_port_only="YES"
nfs_server_flags="-u -t -n 4"
rpcbind_enable="YES"
#rpc_lockd_enable="YES"
#rpc_lockd_flags="-p 884"
#rpc_statd_enable="YES"
#rpc_statd_flags="-p 885"
mountd_enable="YES"
mountd_flags="-p 883"
# Bluetooth support
#-hcsecd_enable="YES"
#-sdpd_enable="YES"
# NTP client
# Run ntpd Network Time Protocol (or NO)
ntpd_enable="YES"
# path to ntpd, if you want a different one.
ntpd_program="/usr/sbin/ntpd"
# ntpd(8) configuration file
ntpd_config="/etc/ntp.conf"
# Sync time on ntpd startup, even if offset is high
ntpd_sync_on_start="YES"
# PF
pf_enable="YES"
pf_rules="/etc/pf.conf"
pf_program="/sbin/pfctl" 
pf_flags="" 
pflog_enable="NO" 
pflog_logfile="/var/log/pflog" 
pflog_program="/sbin/pflogd" 
pflog_flags="" 
pfsync_enable="NO"
pfsync_syncdev=""
pfsync_ifconfig=""
# Automount
devd_enable="YES"
devfs_system_ruleset="system"

hostname="system.bsd"
ifconfig_re0_name="net0"
#-ifconfig_net0="DHCP"
ifconfig_net0="inet 192.168.1.2 netmask 255.255.255.0"
defaultrouter="192.168.1.1"
zfs_enable="YES"
#-tmpmfs="YES"
#-tmpsize="100M"
#-tmpmfs_flags="-S"
linux_enable="NO"
# NFSv4 Client
nfsuserd_enable="YES"
nfscbd_enable="YES"
dbus_enable="YES"
polkitd_enable="YES"
hald_enable="YES"
# CUPS & HPLIP
cupsd_enable="YES"
hpssd_enable="YES"
# SMARTMONTOOLS
#-smartd_enable="YES"
# sysutils/ataidle
ataidle_enable="YES"
ataidle_devices="ada0 ada1 ada2 ada4"
ataidle_ada0="-P 254"
ataidle_ada1="-P 254"
ataidle_ada2="-P 254"
ataidle_ada4="-P 254"
slim_enable="YES"

#PF:2010-08-22
#-------------------
#1/Macros
# Сетевой интерфейс
ext_if="net0"
# Разрешенные типы icmp сообщений
allowed_icmp_types="{ echoreq, unreach }"
# Разрешённые сервисы
# 1. разрешить запросы к серверу NFS и RPCBIND только из локальной сети
# 2. обеспечить запуск с флагами mountd -p 883, rpc.lockd -p 884, rpc.statd -p 885 в rc.conf
# 3. выделенные порты для torrent и http/https/ssh-серверов доступны всем
allowed_lan_tcp_services="{ ssh, www, http, https, ntp, nfsd, rpcbind, 883, 884, 885, 6881:9991, 8080 }"
allowed_lan_udp_services="{ ntp, nfsd, rpcbind, 883, 884, 885, 6881:9991 }"
allowed_wan_tcp_services="{ ssh, www, 6881:9991, 8080, 8081, 55822, 63952 }"
allowed_wan_udp_services="{ ntp, 5501, 6881:9991, 55822, 63952 }"
#-------------------
#2/Tables
#-------------------
#3/Options
# тем, кто лезет туда, куда не нужно, - бить по рукам
set block-policy drop
# на интерфейсах петли пакеты не фильтровать
set skip on { lo }
# укороченный таймаут для состояния установленного tcp соединения
set timeout { frag 10, tcp.established 7200, icmp.first 10, icmp.error 5 }
#-------------------
#4/Scrub
# Нормализовать все входящие пакеты
scrub in all
#-------------------
#5/Queueing
#-------------------
#6/Translations
# Перенаправить tcp трафик с порта 80 на порт 8080 для пользовательского Web-сервера
rdr proto tcp from any to any port http -> self port 8080
#-------------------
#7/Filter Rules
# Антиспуффинг
antispoof for $ext_if
# Блокировать всё, что не разрешено
block all
#-------------------
# Разрешить входящий ICMP (ping)
pass inet proto icmp all icmp-type $allowed_icmp_types
# Разрешающий доступ откуда угодно (ограниченные службы)
pass in quick on $ext_if proto tcp to port $allowed_wan_tcp_services
pass in quick on $ext_if proto udp to port $allowed_wan_udp_services
# Разрешающий доступ из локальной сети (ограниченные службы)
pass in quick on $ext_if proto tcp from $ext_if:network to port $allowed_lan_tcp_services
pass in quick on $ext_if proto udp from $ext_if:network to port $allowed_lan_udp_services
# Разрешить исходящий трафик
pass out all

> locale
LANG=ru_RU.UTF-8
LC_CTYPE="ru_RU.UTF-8"
LC_COLLATE="ru_RU.UTF-8"
LC_TIME="ru_RU.UTF-8"
LC_NUMERIC="ru_RU.UTF-8"
LC_MONETARY="ru_RU.UTF-8"
LC_MESSAGES="ru_RU.UTF-8"
LC_ALL=ru_RU.UTF-8

> cat ~/.cshrc 
# $FreeBSD: src/share/skel/dot.cshrc,v 1.13 2001/01/10 17:35:28 archie Exp $
#
# .cshrc - csh resource script, read at beginning of execution by each shell
#
# see also csh(1), environ(7).
#

alias h		history 25
alias j		jobs -l
alias la	ls -a
alias lf	ls -FA
alias ll	ls -lA
alias ls	ls -F -all -h
alias du	du -H
alias df	df -h

# A righteous umask
umask 22

set path = (/sbin /bin /usr/sbin /usr/bin /usr/games /usr/local/sbin /usr/local/bin /usr/X11R6/bin)

setenv	EDITOR	ee
setenv	PAGER	more
setenv	BLOCKSIZE	1M
setenv LANG ru_RU.UTF-8
setenv LC_CTYPE ru_RU.UTF-8
setenv LC_ALL ru_RU.UTF-8
setenv LC_COLLATE POSIX
# Gtk HIG in Eclipse
setenv GDK_NATIVE_WINDOWS 1

if ($?prompt) then
	# An interactive shell -- set some stuff up
	#set prompt = "┌[`/bin/hostname -s`][`/bin/pwd`]\n└► "
	set prompt = "[%m][%/]\n> "
	set autolist = ambiguous #alternate autoselect
	set watch = (1 any any)
	set who = "%n has %a %l from %M."
	set filec
	set history = 100
	set savehist = 100
	set mail = (/var/mail/$USER)
	if ( $?tcsh ) then
		bindkey "^W" backward-delete-word
		bindkey -k up history-search-backward
		bindkey -k down history-search-forward
	endif
endif

[system=10]
add path 'da*' mode 0666 group operator
add path 'acd*' mode 0666 group operator
add path 'cd*' mode 0666 group operator
add path 'fd*' mode 0666 group operator
add path 'umass*' mode 0666 group operator
add path 'xpt*' mode 0666 group operator
add path 'usb*' mode 0770 group cups
add path 'ugen*' mode 0660 group cups