手上正好有几台香港服务器，应同事要求，架个socks代理，从香港联过去。

从使用效果来看，引同事一句话：速度不是很快，但胜在稳定。

安装

cd /usr/ports/net/socks5 && make install clean

vi /usr/local/etc/socks5.conf (文件不存在需要手工创建)
auth - - u
permit u - - - - -
set SOCKS5_NOIDENT
set SOCKS5_V4SUPPORT
set SOCKS5_PWDFILE /usr/local/etc/socks5.passwd

vi /usr/local/etc/socks5.passwd (文件不存在需要手工创建)
user1 pass1
user2 pass2

用debug调试方式启动，可以看详细输出信息

/usr/local/bin/socks5 -d -s -t

07918:000000: Socks5 starting at Tue Nov 24 01:33:30 2009 in threading mode
07918:000000: Warning: Attempt to run server in threaded mode when threads were not a compile time option
07918:000000: Warning: Running as a normal standalone server
07918:000000: Config: Reading config file: /usr/local/etc/socks5.conf
07918:000000: Interface Query: if0 addr/mask is a407bc3b:f0ffffff
07918:000000: Interface Query: if0 is em0(1) with 1 IPs
07918:000000: Interface Query: if1 is em1(0) with 0 IPs
07918:000000: Interface Query: if1 addr/mask is 0100007f:000000ff
07918:000000: Interface Query: if1 is lo0(1) with 1 IPs
07918:000000: Config: Config file read
07918:000000: Socks5 attempting to run on interface 0.0.0.0:1080
07918:000000: Accept: Waiting on accept or a signal

从其他主机上telnet 1080端口
07918:000000: Parent: 1 child
07918:000000: Accept: Waiting on accept or a signal
07924:000000: Child: Starting
07924:000000: Checking Authentication
07924:000000: Check: Checking port range   (0 <= 53310 <= 65535)?
07924:000000: Auth: Line 1: Matched
07924:000000: Proxy: Received request with incompatible version number: 255
07924:000000: Auth Failed: (200.200.200.200:53310)
07924:000000: Proxy: done cleaning up

客户端推荐 Proxifier

stat -f %N:%Sm -t %Y-%m-%d /root/.history #格式化输出文件属性

OS: Freebsd 6.4-RELEASE-p6
ports install openssl: OpenSSL 0.9.7e-p1 25 Oct 2004

cd /data/ca

# 生成CA key passwd:12345
openssl genrsa -des3 -out rootcakey.pem 2048

# 生成CA证书
openssl req -new -key rootcakey.pem -out rootcareq.pem

Enter pass phrase for rootca.key: (passwd:12345)
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:CN
State or Province Name (full name) [Some-State]:BeiJing
Locality Name (eg, city) []:BJ
Organization Name (eg, company) [Internet Widgits Pty Ltd]:wuhuren Technology Ltd.
Organizational Unit Name (eg, section) []:NOC DEPT.
Common Name (eg, YOUR name) []:wuhuren
Email Address []:postmaster@wuhuren.com

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

# 生成CA签名证书
openssl x509 -req -days 7305 -sha1 -extfile /etc/ssl/openssl.cnf -extensions v3_ca -signkey rootcakey.pem -in rootcareq.pem -out rootcacrt.pem

Signature ok
subject=/C=CN/ST=BeiJing/L=BJ/O=wuhuren Technology Ltd./OU=NOC DEPT./CN=wuhuren/emailAddress=postmaster@wuhuren.com
Getting Private key
Enter pass phrase for rootcakey.pem: (passwd:12345)

# 生成mx服务器的私有密匙
openssl genrsa -out mxkey.pem 2048

# 生成mx服务器的证书
openssl req -new -key mxkey.pem -out mxcsr.pem

You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:CN
State or Province Name (full name) [Some-State]:BeiJing
Locality Name (eg, city) []:BJ
Organization Name (eg, company) [Internet Widgits Pty Ltd]:wuhuren Technology Ltd.
Organizational Unit Name (eg, section) []:OPMX   
Common Name (eg, YOUR name) []:opmx
Email Address []:opmx@wuhuren.com

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

# 生成mx服务器的签名证书
openssl x509 -req -days 3650 -sha1 -extfile /etc/ssl/openssl.cnf -extensions v3_req -CA rootcacrt.pem -CAkey rootcakey.pem -CAserial rootcasrl.pem -CAcreateserial -in mxcsr.pem -out mxcrt.pem

Signature ok
subject=/C=CN/ST=BeiJing/L=BJ/O=wuhuren Technology Ltd./OU=OPMX/CN=opmx/emailAddress=opmx@wuhuren.com
Getting CA Private Key
Enter pass phrase for rootcakey.pem: (passwd:12345)

systeminfo |find "系统启动时间"

C:\>systeminfo |find "系统启动时间"
系统启动时间:     3 天 10 小时 0 分 30 秒

/usr/ports/comms/zmtx-zmrx

在secureCRT中可以直接传。

shell> zmrx

Starting zmodem transfer. Press Ctrl+C to cancel.
Transferring net.pm...
100%       6 KB    6 KB/s 00:00:01       0 Errors

以后可以不用sftp了。

090504 6:51:05 [ERROR] /usr/local/mysql/libexec/mysqld: Out of memory (Needed 1676960 bytes)
090504 6:51:05 [ERROR] /usr/local/mysql/libexec/mysqld: Out of memory (Needed 1676960 bytes)
090504 6:51:05 [ERROR] /usr/local/mysql/libexec/mysqld: Out of memory (Needed 1676960 bytes)
090504 6:51:05 [ERROR] /usr/local/mysql/libexec/mysqld: Out of memory (Needed 1676960 bytes)
090504 6:51:05 [ERROR] /usr/local/mysql/libexec/mysqld: Out of memory (Needed 1676960 bytes)
090504 6:51:05 [ERROR] /usr/local/mysql/libexec/mysqld: Out of memory (Needed 1676960 bytes)
090504 6:51:05 [ERROR] /usr/local/mysql/libexec/mysqld: Out of memory (Needed 1676960 bytes)
090504 6:51:05 [ERROR] /usr/local/mysql/libexec/mysqld: Out of memory (Needed 1676960 bytes)
090504 6:51:05 [ERROR] /usr/local/mysql/libexec/mysqld: Out of memory (Needed 1676960 bytes)
090504 6:51:05 [ERROR] /usr/local/mysql/libexec/mysqld: Out of memory (Needed 1676960 bytes)
090504 6:51:05 [ERROR] /usr/local/mysql/libexec/mysqld: Out of memory (Needed 1676960 bytes)
090504 6:51:05 [ERROR] /usr/local/mysql/libexec/mysqld: Out of memory (Needed 1676960 bytes)
090504 6:51:05 [ERROR] /usr/local/mysql/libexec/mysqld: Out of memory (Needed 1676960 bytes)

最有可能是进程空间不足引起，参考http://dev.mysql.com/doc/refman/5.1/en/freebsd.html 。

OS是FreeBSD 6.4 - p4 ：
echo "kern.maxdsiz=\"1073741824\"" >>/boot/loader.conf
echo "kern.dfldsiz=\"1073741824\"" >>/boot/loader.conf
echo "kern.maxssiz=\"134217728\"" >>/boot/loader.conf
reboot

FreeBSD 6.4-RELEASE-p3 ，
apr-0.9.17
apr-util-0.9.15
mod_perl-2.0.4

# perl Makefile.PL MP_APXS=/var/www/bin/apxs MP_APR_CONFIG=/usr/local/apr/bin/apr-config && make
错误如下：
cp lib/ModPerl/PerlRunPrefork.pm ../blib/lib/ModPerl/PerlRunPrefork.pm
cp lib/ModPerl/Registry.pm ../blib/lib/ModPerl/Registry.pm
cp lib/ModPerl/RegistryCooker.pm ../blib/lib/ModPerl/RegistryCooker.pm
cp lib/ModPerl/PerlRun.pm ../blib/lib/ModPerl/PerlRun.pm
cp lib/ModPerl/RegistryPrefork.pm ../blib/lib/ModPerl/RegistryPrefork.pm
cp lib/ModPerl/RegistryLoader.pm ../blib/lib/ModPerl/RegistryLoader.pm
cp lib/ModPerl/RegistryBB.pm ../blib/lib/ModPerl/RegistryBB.pm
cp Base64.pm ../../../blib/lib/APR/Base64.pm
/usr/local/bin/perl /usr/local/lib/perl5/5.8.9/ExtUtils/xsubpp -typemap /usr/local/lib/perl5/5.8.9/ExtUtils/typemap -typemap /var/tmp/mod_perl-2.0.4/xs/typemap Base64.xs > Base64.xsc && mv Base64.xsc Base64.c
cc -c -I/var/tmp/mod_perl-2.0.4/src/modules/perl -I/var/tmp/mod_perl-2.0.4/xs -I/usr/local/apr/include/apr-0 -I/usr/local/apr/include/apr-0 -I/usr/local/include -I/var/www/include -DAPPLLIB_EXP="/usr/local/lib/perl5/5.8.9/BSDPAN" -DHAS_FPSETMASK -DHAS_FLOATINGPOINT_H -fno-strict-aliasing -pipe -I/usr/local/include -DMOD_PERL -DMP_COMPAT_1X -D_REENTRANT -D_THREAD_SAFE -DAP_HAVE_DESIGNATED_INITIALIZER -O2 -fno-strict-aliasing -pipe    -DVERSION=\"0.009000\" -DXS_VERSION=\"0.009000\" -DPIC -fPIC "-I/usr/local/lib/perl5/5.8.9/mach/CORE" -DMP_HAVE_APR_LIBS Base64.c
In file included from Base64.xs:24:
/var/tmp/mod_perl-2.0.4/xs/modperl_xs_typedefs.h:67: error: syntax error before '*' token
/var/tmp/mod_perl-2.0.4/xs/modperl_xs_typedefs.h:67: warning: data definition has no type or storage class
*** Error code 1

Stop in /var/tmp/mod_perl-2.0.4/WrapXS/APR/Base64.
*** Error code 1

Stop in /var/tmp/mod_perl-2.0.4/WrapXS/APR.
*** Error code 1

Stop in /var/tmp/mod_perl-2.0.4/WrapXS.
*** Error code 1

网上有关于这个错误的patch，但不适合我这里。
Index: lib/ModPerl/BuildMM.pm
===================================================================
--- lib/ModPerl/BuildMM.pm (revision 648960)
+++ lib/ModPerl/BuildMM.pm (working copy)
@@ -359,7 +359,7 @@

$apr_config ||= $build->get_apr_config();

- if ($path =~ m/(Thread|Global)Mutex/) {
+ if ($path =~ m/(Thread|Global)(Mutex|RWLock)/) {
return unless $apr_config->{HAS_THREADS};
}

问题来源ARP安装时没有增加--enable-threads 选项。重新安装apr，并增加enable-threads 。再安装mod_perl即可。

# ./configure --enable-threads && make && make install && cd /var/tmp/mod_perl-2.0.4/ && perl Makefile.PL MP_APXS=/var/www/bin/apxs MP_APR_CONFIG=/usr/local/apr/bin/apr-config && make && make install

driftfile /var/db/ntp.drift

statistics cryptostats loopstats peerstats
statsdir /var/log/ntpdstatus/
filegen peerstats file peerstats type day enable  
filegen loopstats file loopstats type day enable

2. 设置rc.conf
增加
ntpd_enable="YES"

3. 先校对服务器的时间
根据http://www.time.edu.cn/mem.htm 给出的ntp服务器做校对
# ntpdate 202.112.10.60
19 Mar 16:28:12 ntpdate[24062]: adjust time server 202.112.10.60 offset -0.305178 sec

4. 启动ntpd服务
# /etc/rc.d/ntpd start

/* 如果出现不稳定现象，如ntpd进程自动中断，或不能提供服务。则可以重新下载源码编译安装。 */

# tar xzf ntp-4.2.4p6.tar.gz -C /var/tmp/
# cd /var/tmp/ntp-4.2.4p6/
# ./configure --prefix=/usr/local/ntpd
# make && make install
配置文件用上面的即可
# /usr/local/ntpd/bin/ntpd -g -D 0 -p /var/run/ntpd.pid -c /etc/ntp.conf -l /var/log/ntpd.log -s /var/log/ntpdstats

一些测试命令
ntpq -p

ntpdc -c loopinfo
ntpdc -c sysstats
ntpdc -c sysinfo
ntpq -c as
ntpq -c pe

参考
http://www.time.edu.cn/doc.htm