中文名: OpenBSD-4.1-i386英文名: OpenBSD-4.1-i386資源格式: 光盤鏡像發行時間: 2007年05月01日制作發行: OpenBSD地區: 美國簡介:
[已通過安全檢測]
金山毒霸2007，病毒庫版本 2007.08.31
[已通過安裝測試]
Windows XP+SP2 簡體中文專業版本+VMWare6.0
軟件版權歸原作者及原軟件公司所有，如果你喜歡，請購買正版軟件
共享服務時間：本人每天24小時在線，電信100M專線，如果是意外停電或其它不可抗拒原因，可能停機較長。
共享服務器：DonkeyServer No1 或者 DonkeyServer No2
--------------------------------------------------------------------------------
1.1-什麼是OpenBSD?
OpenBSD 工程創建的一個免費、多平台、基於4.4BSD的類Unix操作系統。我們的目標在於強調正確性、安全性、標准化以及可移植性。OpenBSD支持包括SVR4(Solaris),FreeBSD,Linux,BSDI,SunOS和HPUX等大部分二進制的模擬。
OpenBSD， NetBSD, FreeBSD是同門三兄弟！OpenBSD以安全著稱， 支持的平台很多！現在主要有三個分支：stable, release, current
1.2-OpenBSD能運行於什麼平台上？
OpenBSD 3.4可運行於以下平台：
● alpha - 僅FTP
● amd64 - 可直接從CD啟動 3.5新增
● cats - 僅FTP 3.5新增
● hp300 - 僅FTP
● hppa - 僅FTP
● i386 - 可直接從CD啟動
● mac68k - 僅FTP
● macppc - 可直接從CD啟動
● sparc - 可直接從CD啟動
● sparc64 - 可直接從CD啟動
● mvme88k - 僅FTP 3.5新增
● alpha - 僅FTP
● vax
只有一些平台支持從CD啟動。查看本FAQ第三章來了解如何獲得關於獲得OpenBSD CD的更多信息。
OpenBSD以前的版本同樣可運行於：
● amiga - 3.2 release後開始移除
● sun3 - 2.9 release後開始移除
● arc - 2.3 release後開始移除
● pmax - 2.7 release後開始移除
OpenBSD目前還不支持多處理器。查看Chapter 8,SMP來獲得更多信息。
1.3-OpenBSD真的免費嗎？
　　OpenBSD是完全免費的。二進制文件(binaries)是免費的。源代碼是免費的。OpenBSD的任何部分都允許在合理的版權限制下自由分發。這包括可以重新使用大部分OpenBSD源代碼樹，無論是私用還是商用。除了原始的BSD許可外，OpenBSD沒有任何其他的限制。一些按照嚴格許可而寫的軟件不能包含進OpenBSD的正規發行版中。這樣有利於保護OpenBSD的安全免費使用。例如，OpenBSD可以自由免費的用於個人使用、學術研究、政府機構、非贏利性組織或者商業組織。
　　想進一步的了解其他更流行的許可證，請看:http://www.openbsd.org/policy.html.
　 OpenBSD的維護者主要通過自身來支持OpenBSD Project.這包括為此工程寫程序所花費的時間，用於維護眾多ports的設備、以及回答問題和研究用戶錯誤報告所花的時間。OpenBSD的開發者們並非都十分富有，並且甚至是貢獻一點點時間、設備、或者資源都會使事情大不一樣。
1.4-我為什麼想要使用OpenBSD?
　新用戶通常會想知道OpenBSD是否會優於其他的類Unix操作系統。這個問題在很大程度上是無法回答的並且是一個永無休止爭論著的話題。無論如何，請不要在郵件列表中問這個問題！
　下面是我們認為OpenBSD是一個很有用的操作系統的一些理由。OpenBSD是否適合你，只有你自己能回答！
●OpenBSD能運行在許多不同的硬件平台上。
●通過對OpenBSD全部源代碼的安全審查，大部分的安全專家認為OpenBSD是最安全的類UNIX操作系統。
●OpenBSD是一個充滿特色的類Unix操作系統,其原代碼完全免費。
●OpenBSD有最前沿的安全技術，適合於做防火牆和分布式環境下的私有網絡服務。
●OpenBSD受益於來自不同地方的強大的持續開發，為因特網社區上的程序員和終用戶提供了用最新的技術進行開發的機會。
●OpenBSD為普通用戶參與開發和產品測試提供機會。
--------------------------------------------------------------------------------
What s New
This is a partial list of new features and systems included in OpenBSD 4.1. For a comprehensive list, see the changelog leading to 4.1.
* New/extended platforms:
o OpenBSD/landisk.
Various SH4-based appliances, made by IO-Data and resold by Plextor.
o OpenBSD/sparc64.
UltraSPARC III based machines are now supported even better, and run at full speed now
* Removed platforms:
o OpenBSD/cats.
Because the machines are very hard to find, and the developers hate them.
* Improved hardware support, including:
o New USB client controller support:
+ Support for the USB client functionality in the pxaudc(4) driver on the Zaurus.
+ New usbf(4) midlayer for USB Client controllers.
+ New cdcef(4) driver for providing a CDCE function on USB client controllers.
o New cas(4) driver for Sun Cassini 10/100/Gigabit Ethernet devices.
o New uow(4) driver for Maxim/Dallas DS2490 USB 1-Wire devices.
o New owsbm(4) driver for 1-Wire smart battery monitor devices.
o New zyd(4) driver for ZyDAS ZD1211/ZD1211B USB IEEE 802.11b/g wireless network devices.
o New moscom(4) driver for MosChip Semiconductor MCS7703 based USB serial adapters.
o New glxsb(4) driver for hardware random numbers and AES acceleration on the AMD Geode LX processor.
o New vic(4) driver for VMware VMXnet Virtual Interface Controllers.
o New malo(4) driver for Marvell Libertas IEEE 802.11b/g wireless network devices.
o New pwdog(4) driver for Quancom PWDOG1 watchdog timer devices.
o New uberry(4) driver for Research In Motion Blackberry devices.
o New mbg(4) driver for Meinberg Funkuhren radio clocks.
o New mesh(4) driver for the on-board SCSI controller of old world Apple Power Macintosh systems.
o New mc(4) driver for the on-board Ethernet of many old world Apple Power Macintosh systems
o Improved msk(4) driver now supports many more Marvell Yukon-2 variants including dual port cards and fiber cards.
o The gem(4) driver now supports fiber cards.
o The OpenBSD/amd64 platform now has more accurate and robust time keeping.
o The OpenBSD/i386 boot(8) program now works properly on Intel-based Macs.
o The pciide(4) driver has had support added for newer chipsets, including:
+ AMD CS5536 IDE;
+ Intel i31244;
+ NVIDIA MCP67 PATA, MCP67 SATA.
o The com(4) driver now supports ST16C654 devices.
o The adt(4) driver supports some newer chipsets, such as the ADT7475.
o The OpenBSD/macppc platform now automatically turns the machine back on following an unexpected loss of power.
o boot.mac an XCOFF formated boot loader for OpenBSD/macppc capable of booting on many old world macs.
* New tools:
o BSD-licensed pkg-config(1), a complete rewrite of the GNU tool of the same name, significantly smaller and more maintainable.
o hoststated(8), a layer 3 and layer 7 server load balancing daemon with host monitoring capacities.
o new BSD-licensed ripd(8).
o bgplg(8), a CGI looking glass for OpenBGPD, is now available for use with the system httpd.
o bgplgsh(8), a looking glass shell for OpenBGPD, is now available for use as a restricted read-only command line interface.
* New functionality:
o syslogd(8) can now pipe logs directly to other programs, making real-time log analysis easier.
o The IP_RECVTTL ip(4) socket option allows programs to receive the incoming ttl on raw and udp sockets.
o The IP_MINTTL ip(4) socket option allows programs to ask the kernel to discard any packets with a ttl smaller than the given one, for implementing the IP TTL security hack aka the Generalized TTL Security Mechanism specified in RFC 3682.
o Multiple, independent routing tables, with pf(4) acting as selector. route(8) can be told which table to work with now, and routing daemons have been modified to cope as well.
o The pflog(4) interface is now clonable. pf(4) can log to multiple pflog interfaces now, each rule can specify which pflog interface to log to. pflogd(8) and spamlogd(8) can now be told which pflog interface to work with.
o The pfsync(4) interface is now clonable as well, thus only there when actually needed.
o pfctl(8) can now expire table entries.
o keep state is now the default for pf.conf(5) rules, as is the flags S/SA option on TCP connections. no state and flags any can be used to disable stateful filtering or TCP flags checking.
o The pfctl(8) ruleset optimiser can be enabled in pf.conf(5).
o pf(4) anchors can now be loaded inline in the main pf.conf(5) and can be printed recursively.
o Allow pf(4) rules inside anchors to have their counters reset, and make counter read reset an atomic operation.
o sensorsd(8) dampens status changes now, thus not alerting for a single wrong sensor read, since many sensors lie once in a while.
o spamd(8) and spamlogd(8) now support synchronisation of the greylist database across multiple hosts. The greytrapping mechanism now allows for whole domain traps, and noticing out of order MX use.
o spamd(8) database format has changed from DB_BTREE to DB_HASH for much better performance on large installations with big databases.
o The bridge(4) driver and the brconfig(8) tool now support the Rapid Spanning Tree Protocol (RSTP). The new RSTP mode is now used by default when enabled with the stp option.
o cd(4) now supports reading from region protected DVDs.
o Detect MS-DOS filesystems and spoof disklabel partitions for them even when there is no MBR, e.g. on some newer iPods.
* Assorted improvements and code cleanup:
o The fsck_ffs(8) command has been improved to be more robust to various forms of inode and superblock corruption.
o The top(1) command got some new ways of filtering the display.
o pthreads(3) file descriptor handling has been improved to eliminate several race and deadlock conditions and improve performance.
o The MS-DOS filesystem has had a potential corruption issue fixed, and is more reliable when given a corrupted filesystem to mount.
o The MS-DOS filesystem and the fdisk(8) command have been enhanced to work on devices with 2048 byte sectors, e.g. newer iPods.
o The OpenRCS tools are smarter at handling files, especially when dealing with binary files. GNU RCS compatibility has also been improved.
o The mg(1) editor now displays column numbers in the status bar. It has also received several improvements which make it more reliable: line numbers, file insertions, and search wrapping all now work as expected.
o The systat(1) command has a cleaner look, and a display was added for hardware sensors.
o The OpenBSD/alpha platform now uses gcc3.
o Improved support for usb attached cd drives and ever more odd umass(4) devices.
o Don t treat NetBSD or FreeBSD MBR partitions as substitutes for an OpenBSD partition. i.e. don t try to boot from them or use them to store OpenBSD disklabels.
* Install/Upgrade process changes:
o More reliable detection of disk and cd devices.
o More reliable installation from MSDOS FAT partitions.
o New sanity check in case sets for the wrong architecture are selected.
o No need to specify the filesystem types of source partitions during disk or cd installs.
o No need to select a source partition during disk or cd installs when there is only one to choose from.
* OpenBGPD 4.1:
o Fixes for sessions with tcp md5sig and ipsec. Now sessions can be migrated from and to any form of ipsec and tcpmd5 with just a simple bgpctl reload, and the session migrates the next time it gets established.
o Include file support in the config parser.
o Can now use the new IP_MINTTL socket option to implement the ttl security mechanism.
* OpenOSPFD 4.1:
o Reload support added. It is no longer needed to restart ospfd after a configuration change.
o Multiple networks per interface are now supported.
o It is now possible to specify the route metric and type for each redistribution rule.
* OpenNTPD 4.1:
o Greatly improved support for timedelta sensors.
o ntpd now uses a strictly monotonically increasing time (uptime, basically) for its internal timers, so setting the system clock doesn t influence query rates, trust levels, etc. any more.
* OpenSSH 4.6:
o sshd now allows the enabling and disabling of authentication methods on a per user, group, host and network basis via the Match directive in sshd_config(5).
* Over 4200 ports, 4000 pre-built packages (for i386), minor robustness improvements in package tools. Some highlights:
o gstreamer-0.10 tools.
o OpenOffice.org package, available through ftp for size reasons.
o KDE 3.5.6 and koffice 1.6.2.
o a large ( 500) number of new/updated perl modules, from CPAN, including most of the catalyst web framework.
o NetBeans 5.5 Java IDE.
o updated Linux emulation support by using Fedora Core libraries.
o Mozilla Firefox 2.0.0.2 (with translations).
o PostgreSQL 8.2.3.
* As usual, steady improvements in manual pages and other documentation.
* The system includes the following major components from outside suppliers:
o X.Org 6.9.0 (+ patches, and i386 contains XFree86 3.3.6 servers (+ patches) for legacy chipsets not supported by X.Org)
o Gcc 2.95.3 (+ patches) and 3.3.5 (+ patches)
o Perl 5.8.8 (+ patches)
o our improved and secured version of Apache 1.3, with SSL/TLS and DSO support
o OpenSSL 0.9.7j (+ patches)
o Groff 1.15
o Sendmail 8.14.0, with libmilter
o Bind 9.3.4 (+ patches)
o Lynx 2.8.5rel.4 with HTTPS and IPv6 support (+ patches)
o Sudo 1.6.8p9
o Ncurses 5.2
o Latest KAME IPv6
o Heimdal 0.7.2 (+ patches)
o Arla 0.35.7
o Binutils 2.15 (+ patches)
o Gdb 6.3 (+ patches)