freebsd for Sun Fire X4250

2010-01-10 Thread Sam Wun
Hi,

This server is built with Xeon cpu processor, Intel based.
Can FreeBSD 8+ fully compatible with this server like those ordinary
Intel i386 machine?

Thanks
SW
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: freebsd for Sun Fire X4250

2010-01-11 Thread Sam Wun
Hi Gavin,

The reason I want to stick with i386 is because about few years ago
when I tried AMD release of FreeBSD, it didn't have the same level of
proficiency as i386 release of FreeBSD - packagThat was my impression
at that time. I hope it has changed in this years.
Is there any major installation difference between AMD (64) and i386
release of FreeBSD (8.0)?

Thank you for your answers.
Sam


On Tue, Jan 12, 2010 at 10:05 AM, Gavin Atkinson  wrote:
> On Mon, 11 Jan 2010, Sam Wun wrote:
>> This server is built with Xeon cpu processor, Intel based.
>> Can FreeBSD 8+ fully compatible with this server like those ordinary
>> Intel i386 machine?
>
> Although it's hard to say (the Sun website doesn't realy give enough spec
> details), I'd be surprised if it doesn't work.  FreeBSD runs very nicely
> on every Intel- and amd64-based Sun machine I've tried it on.
>
> You'll almost certainly want to use the FreeBSD amd64 release rather than
> i386, and I'd probably recommend 8.0-RELEASE, although 7.2 should work
> fine.
>
> By the way, this is the wrong list for questions like this: if you have
> any others, you're probably best off directing them to
> freebsd-questi...@freebsd.org
>
> Gavin
>
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: Strange network issue in freebsd 8

2010-02-01 Thread Sam Wun
great work.

Thanks


On Tue, Feb 2, 2010 at 3:46 PM, Li, Qing  wrote:
> Just an update on this issue and to letting you know your
> report is not ignored.
>
> I have been working with Sherin George offline and we have
> Been pulling information off Sherin's server box.
>
> The box becomes unresponsive after about 4 days. The routing
> table is fine is properly accessed. The ARP table is properly accessed.
> Through packet capture, the packets seem to flow into the driver but
> appear
> to be stuck somewhere after the driver handoff. The device stats do not
> show
> any link related errors. The device is "em".
>
> Initially I was suspecting the flow-table module, but after disabling
> the flow-table lookup and various experiments, the problem points to L2
> (after ether_output).
>
> According to Sherin, the box will regain network connectivity after
> some time.
>
> At this point I am thinking about creating a special debug build and
> run it in Sherin's environment.
>
> -- Qing
>
>
>
>> -Original Message-
>> From: owner-freebsd-...@freebsd.org [mailto:owner-freebsd-
>> n...@freebsd.org] On Behalf Of Kenneth Hilmersson
>> Sent: Friday, January 29, 2010 1:46 PM
>> To: freebsd-net@freebsd.org
>> Subject: Strange network issue in freebsd 8
>>
>> > The servers loses network connection once in a few days. I logged
>> into
>> > console and verified that network is up. I even restarted network
>> service
>> > using following command.
>> >
>> > /etc/rc.d/netif restart
>> >
>> > Still, it didn't fix.
>> >
>> > I checked /var/log/messages, but I am not getting any clue.
>>
>>
>> I see exactly the same thing. My network dies after a couple of days
> in
>> the same manner.
>>
>> My friend have problems with different network cards in 8.0:
>> em, msk, age locks up and with sis the network performance drops to
>> 0.1kbps after awhile.
>>
>>
>> BR
>> Kenneth
>> ___
>> freebsd-net@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-net
>> To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
> ___
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
>
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


autom4te: not found - please help.

2010-06-18 Thread Sam Wun
Hi,

With FreeBSD 8.1 RC1,
Can anyone tell me how to resolve the following error from building cyrus-sasl2?

configure: creating ./config.status
autom4te --language=m4sh -B libltdl/config libltdl/config/ltmain.m4sh
> libltdl/config/ltmain.in
autom4te: not found
*** Error code 127

Stop in /usr/ports/devel/libtool22/work/libtool-2.2.6b.
*** Error code 1

Stop in /usr/ports/devel/libtool22.
*** Error code 1

Stop in /usr/ports/security/cyrus-sasl2.
*** Error code 1

Thanks
S
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: autom4te: not found in FreeBSD 8.1RC1 - please help.

2010-06-18 Thread Sam Wun
 Hi,

 With FreeBSD 8.1 RC1,

 I got the following error when building cyrus-sasl2 in the Ports:
 
 configure: creating ./config.status
 autom4te --language=m4sh -B libltdl/config libltdl/config/ltmain.m4sh
 libltdl/config/ltmain.in
 autom4te: not found
 *** Error code 127

 Can anyone tell me how to resolve this problem?

 Your help is very much appreciated.

 Thanks
 Sam
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: autom4te: not found - please help.

2010-06-18 Thread Sam Wun
Since this is a fresh installed 8.1, I just found that there is no
perl in the system.
But there is also error when building perl, shown as below:

Cleaning current config before rebuilding Makefile...
make -f Makefile.old clean > /dev/null 2>&1
../../miniperl "-I../../lib" "-I../../lib" Makefile.PL
"INSTALLDIRS=perl" "INSTALLMAN3DIR=none" "PERL_CORE=1"
"LIBPERL_A=libperl.so"
Writing Makefile for DynaLoader
==> Your Makefile has been rebuilt. <==
==> Please rerun the make command.  <==
false
*** Error code 1

Stop in /usr/ports/lang/perl5.8/work/perl-5.8.9/ext/DynaLoader.
make config failed, continuing anyway...
Makefile out-of-date with respect to Makefile.PL
Cleaning current config before rebuilding Makefile...
make -f Makefile.old clean > /dev/null 2>&1
../../miniperl "-I../../lib" "-I../../lib" Makefile.PL
"INSTALLDIRS=perl" "INSTALLMAN3DIR=none" "PERL_CORE=1"
"LIBPERL_A=libperl.so"
Writing Makefile for DynaLoader
==> Your Makefile has been rebuilt. <==
==> Please rerun the make command.  <==
false
*** Error code 1

Stop in /usr/ports/lang/perl5.8/work/perl-5.8.9/ext/DynaLoader.
*** Error code 1

Stop in /usr/ports/lang/perl5.8/work/perl-5.8.9.
*** Error code 1

Stop in /usr/ports/lang/perl5.8.
*** Error code 1

Stop in /usr/ports/lang/perl5.8.

I have followed what it told and rerun make command, it still
generated this error.

Thanks
Sam

On Fri, Jun 18, 2010 at 10:06 PM, Sam Wun  wrote:
> Hi,
>
> With FreeBSD 8.1 RC1,
> Can anyone tell me how to resolve the following error from building 
> cyrus-sasl2?
>
> configure: creating ./config.status
> autom4te --language=m4sh -B libltdl/config libltdl/config/ltmain.m4sh
>> libltdl/config/ltmain.in
> autom4te: not found
> *** Error code 127
>
> Stop in /usr/ports/devel/libtool22/work/libtool-2.2.6b.
> *** Error code 1
>
> Stop in /usr/ports/devel/libtool22.
> *** Error code 1
>
> Stop in /usr/ports/security/cyrus-sasl2.
> *** Error code 1
>
> Thanks
> S
>
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


tcp problem with freebsd 7.1?

2009-05-02 Thread Sam Wun
Hi,

With regarding to the following statement, is there any serious tcp
problem with freebsd 7.1?

"We recently found our new FreeBSD server (located in some foreign
region) has poor network performance. After doing some tcpdump and
iperf testing, we found that out-of-order TCP packets are not inserted
into queue.

This is an 100Mbps line, and TSO is disabled. "

Very appreciate for any suggestion.

Thanks
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


tcp problem with freebsd 7.1?

2009-05-02 Thread Sam Wun
Hi,

With regarding to the following statement, is there any serious tcp
problem with freebsd 7.1?

"We recently found our new FreeBSD server (located in some foreign
region) has poor network performance. After doing some tcpdump and
iperf testing, we found that out-of-order TCP packets are not inserted
into queue.

This is an 100Mbps line, and TSO is disabled. "

Very appreciate for any suggestion.

Thanks
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Installworld failed with net options are added in kernel config

2009-05-05 Thread Sam Wun
Hi,

With 7.2, I have added the following options in the kernel config file
then compiled...
 MY STUFF #
##options IPDIVERT#divert sockets
device  pf  #PF OpenBSD
packet-filter firewall
device  pflog   #logging support
interface for PF
device  pfsync  #synchronization
interface for PF
device  carp#Common Address Redundancy Protocol
device  enc #IPSec interface (needs FAST_IPSEC)

options ALTQ
options ALTQ_CBQ
options ALTQ_RED
options ALTQ_RIO
options ALTQ_HFSC
options ALTQ_CDNR
options ALTQ_PRIQ
options ALTQ_NOPCC

options NETGRAPH#netgraph(4) system
options NETGRAPH_ASYNC
options NETGRAPH_BPF
options NETGRAPH_CISCO
options NETGRAPH_ECHO
options NETGRAPH_ETHER
options NETGRAPH_FRAME_RELAY
options NETGRAPH_HOLE
options NETGRAPH_IFACE
options NETGRAPH_KSOCKET
options NETGRAPH_LMI
# MPPC compression requires proprietary files (not included)
#optionsNETGRAPH_MPPC_COMPRESSION
options NETGRAPH_MPPC_ENCRYPTION
options NETGRAPH_ONE2MANY
options NETGRAPH_PPP
options NETGRAPH_PPPOE
options NETGRAPH_PPTPGRE
options NETGRAPH_RFC1490
options NETGRAPH_SOCKET
options NETGRAPH_TEE
options NETGRAPH_TTY
options NETGRAPH_UI
options NETGRAPH_VJC
#stuff for squid
options MSGMNB=16384 # max # of bytes in a queue
options MSGMNI=128   # number of message queue identifiers
options MSGSEG=4096 # number of message segments per queue
options MSGSSZ=256  # size of a message segment
options MSGTQL=16384 # max messages in system

options SHMSEG=64   # max shared mem id's per process
options SHMMNI=128   # max shared mem id's per system
options SHMMAX=8388608  # max shared memory segment size (bytes)
options SHMALL=8192 # max amount of shared memory (pages)

#stuff for postgresql
options SHMMAXPGS=131072
options SEMMNI=64
options SEMMNS=240
options SEMUME=40
options SEMMNU=120


However, when it comes to installworld, it failed with the following errors:

cat /usr/src/lib/ncurses/ncurses/../../../contrib/ncurses/man/key_defined.3x
> key_defined.3
cat /usr/src/lib/ncurses/ncurses/../../../contrib/ncurses/man/keybound.3x
> keybound.3
cat /usr/src/lib/ncurses/ncurses/../../../contrib/ncurses/man/keyok.3x > keyok.3
cat /usr/src/lib/ncurses/ncurses/../../../contrib/ncurses/man/legacy_coding.3x
> legacy_coding.3
cat /usr/src/lib/ncurses/ncurses/../../../contrib/ncurses/man/ncurses.3x
> ncurses.3
cat /usr/src/lib/ncurses/ncurses/../../../contrib/ncurses/man/resizeterm.3x
> resizeterm.3
cat /usr/src/lib/ncurses/ncurses/../../../contrib/ncurses/man/wresize.3x
> wresize.3
sh /usr/src/lib/ncurses/ncurses/../../../contrib/ncurses/man/MKterminfo.sh
/usr/src/lib/ncurses/ncurses/../../../contrib/ncurses/man/terminfo.head
 /usr/src/lib/ncurses/ncurses/../../../contrib/ncurses/include/Caps
/usr/src/lib/ncurses/ncurses/../../../contrib/ncurses/man/terminfo.tail
>terminfo.5
tr: not found
/usr/src/lib/ncurses/ncurses/../../../contrib/ncurses/man/MKterminfo.sh:
cannot open unsorted61466: No such file or directory
*** Error code 2

Stop in /usr/src/lib/ncurses/ncurses.
*** Error code 1

Stop in /usr/src/lib/ncurses.
*** Error code 1

Stop in /usr/src/lib.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.
*** Error code 1

What is wrong with it?

Your suggestion is  highly appreciated.

Thanks
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Can pfsync be used over router or WAN?

2009-05-08 Thread Sam Wun
Hi,

Have anyone tried pfsync over router or WAN?
I have read setup guide of CARP+pfsync, the pfsync interface is
connected through a crossover cable. Can I connect 2 pfsync interfaces
through a router or WAN?

Thanks
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: Can pfsync be used over router or WAN?

2009-05-08 Thread Sam Wun
Establish a IPSEC bewteen this 2 pfsync points is a way to go.

On Sat, May 9, 2009 at 2:44 AM, David DeSimone  wrote:
> Sam Wun  wrote:
>>
>> Have anyone tried pfsync over router or WAN?
>> I have read setup guide of CARP+pfsync, the pfsync interface is
>> connected through a crossover cable.  Can I connect 2 pfsync
>> interfaces through a router or WAN?
>
> pfsync(4) talks about this:
>
>    NETWORK SYNCHRONISATION
>         States can be synchronised between two or more firewalls using
>         this interface, by specifying a synchronisation interface using
>         ifconfig(8).  For example, the following command sets fxp0 as
>         the synchronisation interface:
>
>           # ifconfig pfsync0 syncdev fxp0
>
>         It is important that the underlying synchronisation interface
>         is up and has an IP address assigned.
>
>         By default, state change messages are sent out on the
>         synchronisation interface using IP multicast packets.  The
>         protocol is IP protocol 240, PFSYNC, and the multicast group
>         used is 224.0.0.240.  When a peer address is specified using
>         the syncpeer keyword, the peer address is used as a destination
>         for the pfsync traffic, and the traffic can then be protected
>         using ipsec(4).  In such a configuration, the syncdev should
>         be set to the enc(4) interface, as this is where the traffic
>         arrives when it is decapsulated, e.g.:
>
>           # ifconfig pfsync0 syncpeer 10.0.0.2 syncdev enc0
>
>         It is important that the pfsync traffic be well secured as
>         there is no authentication on the protocol and it would be
>         trivial to spoof packets which create states, bypassing the
>         pf ruleset.  Either run the pfsync protocol on a trusted
>         network - ideally a network dedicated to pfsync messages such
>         as a crossover cable between two firewalls, or specify a peer
>         address and protect the traffic with ipsec(4).
>
>         For pfsync to start its operation automatically at the system
>         boot time, pfsync_enable and pfsync_syncdev variables should be
>         used in rc.conf(5).  It is not advisable to set up pfsync with
>         common network interface configuration variables of rc.conf(5)
>         because pfsync must start after its syncdev, which cannot be
>         always ensured in the latter case.
>
> Syncing over a WAN doesn't seem like it would make sense, offhand.
> Normally you psync between devices that will be able to provide routing
> for a firewalled connection.  A device far across a WAN doesn't seem
> like it would be able to provide redundant service.  But that's up to
> your design, I suppose.
>
> Syncing across a LAN could make sense, but you will want to take steps
> to secure the traffic.
>
> --
> David DeSimone == Network Admin == f...@verio.net
>  "I don't like spinach, and I'm glad I don't, because if I
>   liked it I'd eat it, and I just hate it." -- Clarence Darrow
>
>
> This email message is intended for the use of the person to whom it has been 
> sent, and may contain information that is confidential or legally protected. 
> If you are not the intended recipient or have received this message in error, 
> you are not authorized to copy, distribute, or otherwise use this message or 
> its attachments. Please notify the sender immediately by return e-mail and 
> permanently delete this message and any attachments. Verio, Inc. makes no 
> warranty that this email is error or virus free.  Thank you.
> ___
> freebsd...@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"
>
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: kernel hang when reboot with loaded ip_vs_rr.ko

2009-05-09 Thread Sam Wun
It is IPVS patch, for FreeBSD.
I am in Melbourne Australia.
Can you send me email regarding about how to fix this issue?
BTW, if I kldunload ip_vs_rr before reboot/shutdown, the system will
execute the reboot / shutdown normally.
When I executed reboot/shutdown with the ip_vs_rr still loaded in the
kernel, the system hangs after the console printed the message
"...vnode"

Here are the modules loaded:
# kldstat
Id Refs AddressSize Name
 15 0xc040 a434d8   kernel
 21 0xc0e44000 6a45cacpi.ko
 31 0xc469d000 2000 ip_vs_rr.ko
 41 0xc469f000 b000 ipvs.ko

 # shutdown -h now
.
Syncing disks, vnodes remaining... 1 1 0 0 done
All buffers synced.
IPVS: ipvs unloaded

then it hangs forever.

Another problem is I can't put ipvs_vs_rr_load="yes" in the
/boot/loader.conf file. The system will hang when it tried to boot the
kernel with this ko loaded.

Thanks


On Sun, May 10, 2009 at 2:52 PM, Sam Wan  wrote:
> I built ip_vs_rr.ko in 7.2 Release.
> There is no problem when loaded ipvs.ko.
> After I loaded ip_vs_rr.ko, and reboot the system, the entire system is hang.
> Here is a list of the ip_vs moudles have built:
>
> modules # ls -l
> total 118
> drwxr-xr-x  2 root  wheel    512 May  8 15:20 ./
> drwxr-xr-x  8 root  wheel    512 May  9 21:22 ../
> -r-xr-xr-x  1 root  wheel   5366 May  8 15:20 ip_vs_dh.ko*
> -r-xr-xr-x  1 root  wheel   8249 May  8 15:20 ip_vs_lblc.ko*
> -r-xr-xr-x  1 root  wheel   9783 May  8 15:20 ip_vs_lblcr.ko*
> -r-xr-xr-x  1 root  wheel   4560 May  8 15:20 ip_vs_lc.ko*
> -r-xr-xr-x  1 root  wheel   4592 May  8 15:20 ip_vs_nq.ko*
> -r-xr-xr-x  1 root  wheel   4838 May  8 15:20 ip_vs_rr.ko*
> -r-xr-xr-x  1 root  wheel   4574 May  8 15:20 ip_vs_sed.ko*
> -r-xr-xr-x  1 root  wheel   5366 May  8 15:20 ip_vs_sh.ko*
> -r-xr-xr-x  1 root  wheel   4574 May  8 15:20 ip_vs_wlc.ko*
> -r-xr-xr-x  1 root  wheel   5634 May  8 15:20 ip_vs_wrr.ko*
> -r-xr-xr-x  1 root  wheel  43081 May  8 15:20 ipvs.ko*
> -rw-r--r--  1 root  wheel    360 May  8 15:20 linker.hints
>
> What is the problem?
> Important is how to get more information about this kernel module is  hang?
>
> Your suggestion is highly appreciated.
>
> Thanks
>
>
> ___
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
>
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: kernel hang when reboot with loaded ip_vs_rr.ko

2009-05-10 Thread Sam Wun
That patch is for 7.0-current.
But I applied to 7.2 Release, and built successfully.
Manually kldload and kldunload has no problem.

On Sun, May 10, 2009 at 5:16 PM, Adrian Chadd  wrote:
> What version of FreeBSD is the IPVS patch for?
>
> And hi from Perth. :) What are you guys doing with FreeBSD in
> particular out there?
>
>
>
> Adrian
>
> 2009/5/10 Sam Wun :
>> It is IPVS patch, for FreeBSD.
>> I am in Melbourne Australia.
>> Can you send me email regarding about how to fix this issue?
>> BTW, if I kldunload ip_vs_rr before reboot/shutdown, the system will
>> execute the reboot / shutdown normally.
>> When I executed reboot/shutdown with the ip_vs_rr still loaded in the
>> kernel, the system hangs after the console printed the message
>> "...vnode"
>>
>> Here are the modules loaded:
>> # kldstat
>> Id Refs Address    Size     Name
>>  1    5 0xc040 a434d8   kernel
>>  2    1 0xc0e44000 6a45c    acpi.ko
>>  3    1 0xc469d000 2000     ip_vs_rr.ko
>>  4    1 0xc469f000 b000     ipvs.ko
>>
>>  # shutdown -h now
>> .
>> Syncing disks, vnodes remaining... 1 1 0 0 done
>> All buffers synced.
>> IPVS: ipvs unloaded
>>
>> then it hangs forever.
>>
>> Another problem is I can't put ipvs_vs_rr_load="yes" in the
>> /boot/loader.conf file. The system will hang when it tried to boot the
>> kernel with this ko loaded.
>>
>> Thanks
>>
>>
>> On Sun, May 10, 2009 at 2:52 PM, Sam Wan  wrote:
>>> I built ip_vs_rr.ko in 7.2 Release.
>>> There is no problem when loaded ipvs.ko.
>>> After I loaded ip_vs_rr.ko, and reboot the system, the entire system is 
>>> hang.
>>> Here is a list of the ip_vs moudles have built:
>>>
>>> modules # ls -l
>>> total 118
>>> drwxr-xr-x  2 root  wheel    512 May  8 15:20 ./
>>> drwxr-xr-x  8 root  wheel    512 May  9 21:22 ../
>>> -r-xr-xr-x  1 root  wheel   5366 May  8 15:20 ip_vs_dh.ko*
>>> -r-xr-xr-x  1 root  wheel   8249 May  8 15:20 ip_vs_lblc.ko*
>>> -r-xr-xr-x  1 root  wheel   9783 May  8 15:20 ip_vs_lblcr.ko*
>>> -r-xr-xr-x  1 root  wheel   4560 May  8 15:20 ip_vs_lc.ko*
>>> -r-xr-xr-x  1 root  wheel   4592 May  8 15:20 ip_vs_nq.ko*
>>> -r-xr-xr-x  1 root  wheel   4838 May  8 15:20 ip_vs_rr.ko*
>>> -r-xr-xr-x  1 root  wheel   4574 May  8 15:20 ip_vs_sed.ko*
>>> -r-xr-xr-x  1 root  wheel   5366 May  8 15:20 ip_vs_sh.ko*
>>> -r-xr-xr-x  1 root  wheel   4574 May  8 15:20 ip_vs_wlc.ko*
>>> -r-xr-xr-x  1 root  wheel   5634 May  8 15:20 ip_vs_wrr.ko*
>>> -r-xr-xr-x  1 root  wheel  43081 May  8 15:20 ipvs.ko*
>>> -rw-r--r--  1 root  wheel    360 May  8 15:20 linker.hints
>>>
>>> What is the problem?
>>> Important is how to get more information about this kernel module is  hang?
>>>
>>> Your suggestion is highly appreciated.
>>>
>>> Thanks
>>>
>>>
>>> ___
>>> freebsd-net@freebsd.org mailing list
>>> http://lists.freebsd.org/mailman/listinfo/freebsd-net
>>> To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
>>>
>> ___
>> freebsd-net@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-net
>> To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
>>
>
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


net.ipv4.ip_nonlocal_bind for FreeBSD 7.2?

2009-05-16 Thread Sam Wun
Hi,

With regarding to net.ipv4.ip_nonlocal_bind for FreeBSD 7.2, Is there
any equivalent parameters I I have to tune or has it been *built-in*
to the freebsd 7.2 kernel?

Thanks
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


tcp/udp base Heartbeat for http loadbalancer?

2009-05-19 Thread Sam Wun
Hi,

Is there any tcp/udp base heartbeat for http loadbalancer for FreeBSD 7?

Thanks
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Can't start mysql in jail

2009-05-25 Thread Sam Wun
Hi,

This seems a common question, but it is a bit different.
Production OS: FreeBSD 6.2
Source OS: FreeBSD 7.2

I created a jailed mysql 5.1 in my source OS FreeBSD 7.2, and then tar
it up and scp into a production OS FreeBSD 6.2.
After setup a jail in 6.2 for the jailed mysql, I tried to start up
mysql server, but it failed with very lilttle error message.
The error log just said,
"
090525 20:18:26 mysqld_safe Starting mysqld daemon with databases from
/usr/local/var/db/mysql
090525 20:18:26 mysqld_safe mysqld from pid file
/usr/local/var/db/mysql/wp1.xxx.au.pid ended
..
"

What is the problem with Freebsd 6.2 running 7.2 jailed files?
Is there anyone to fix this problem?

Your help is very appreciated.

Thanks
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


how to remove jid?

2009-05-26 Thread Sam Wun
Hi,

Running FreeBSD 6.2, with jail,
I hage the following jids shown in the jls command:

# jls
   JID  IP Address  Hostname  Path
10  125.255.1.6 wp.ipx.com.au /usr/jails/wp
 8  125.255.1.6 wp/usr/jails/wp
 7  125.255.1.6 wp/usr/jails/wp
 1  125.255.1.6 wp1.ipx.com.au/usr/jails/wp1

There is only wp.ipx.com.au valid in the list, others are not exists.
How to remove JID 8,7, and 1?

Thanks
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


no network after upgraded from 6.2 to 7.2

2009-05-27 Thread Sam Wun
Hi,

I don't know what is going on now.
After upgraded from 6.2 to 7.2, I can't ping on host like www.yahoo.com
pinging an external router (my isp router ip address) is fine.

Can anyone help?
Thanks
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Can't login Jailed system

2009-06-29 Thread Sam Wun
Hi,

With FreeBSD 7.2Stable,
I have done this many times before.
After about a month left the "jail" behind, now when I done a
"/etc/rc.d/jail start" and ssh into it, I ended up login to the host
system.
Here is the network configuraiton of the host system and the jail system:

 # ifconfig
rl0: flags=8843 metric 0 mtu 1500
options=8
ether 00:00:21:ef:27:f7
media: Ethernet autoselect (100baseTX )
status: active
rl1: flags=8802 metric 0 mtu 1500
options=8
ether 00:50:fc:65:78:c0
media: Ethernet autoselect
status: no carrier
fxp0: flags=8843 metric 0 mtu 1500
options=8
ether 00:13:20:65:a9:be
inet 192.168.1.246 netmask 0xff00 broadcast 192.168.1.255
inet 192.168.1.245 netmask 0xff00 broadcast 192.168.1.255
inet 192.168.1.235 netmask 0xff00 broadcast 192.168.1.255
inet 192.168.1.242 netmask 0x broadcast 192.168.1.242
media: Ethernet autoselect (100baseTX )
status: active
plip0: flags=108810 metric 0 mtu 1500
enc0: flags=0<> metric 0 mtu 1536
pflog0: flags=141 metric 0 mtu 33204
pfsync0: flags=0<> metric 0 mtu 1460
syncpeer: 224.0.0.240 maxupd: 128
lo0: flags=8049 metric 0 mtu 16384
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x8
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff00
twp1:# jls
   JID  IP Address  Hostname  Path
 5  192.168.1.242   twp5.ip6.com.au   /usr/jail2/twp5

192.168.1.242 is the jailed system,
twp1 is the host system.

After I login 192.168.1.242, I ended up logged in twp1 which is my host system.
Now I am stuck. I don't know how I logged in the jailed system a month ago.

Can anyone shred some lights on me?

Thanks
Sam
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: Can't login Jailed system

2009-06-29 Thread Sam Wun
On Mon, Jun 29, 2009 at 9:30 PM, Michael Gmelin wrote:
> Sam Wun wrote:
>> Hi,
>>
>> With FreeBSD 7.2Stable,
>> I have done this many times before.
>> After about a month left the "jail" behind, now when I done a
>> "/etc/rc.d/jail start" and ssh into it, I ended up login to the host
>> system.
>> Here is the network configuraiton of the host system and the jail system:
>>
>>  # ifconfig
>> rl0: flags=8843 metric 0 mtu 1500
>>         options=8
>>         ether 00:00:21:ef:27:f7
>>         media: Ethernet autoselect (100baseTX )
>>         status: active
>> rl1: flags=8802 metric 0 mtu 1500
>>         options=8
>>         ether 00:50:fc:65:78:c0
>>         media: Ethernet autoselect
>>         status: no carrier
>> fxp0: flags=8843 metric 0 mtu 1500
>>         options=8
>>         ether 00:13:20:65:a9:be
>>         inet 192.168.1.246 netmask 0xff00 broadcast 192.168.1.255
>>         inet 192.168.1.245 netmask 0xff00 broadcast 192.168.1.255
>>         inet 192.168.1.235 netmask 0xff00 broadcast 192.168.1.255
>>         inet 192.168.1.242 netmask 0x broadcast 192.168.1.242
>>         media: Ethernet autoselect (100baseTX )
>>         status: active
>> plip0: flags=108810 metric 0 mtu 
>> 1500
>> enc0: flags=0<> metric 0 mtu 1536
>> pflog0: flags=141 metric 0 mtu 33204
>> pfsync0: flags=0<> metric 0 mtu 1460
>>         syncpeer: 224.0.0.240 maxupd: 128
>> lo0: flags=8049 metric 0 mtu 16384
>>         inet6 fe80::1%lo0 prefixlen 64 scopeid 0x8
>>         inet6 ::1 prefixlen 128
>>         inet 127.0.0.1 netmask 0xff00
>> twp1:# jls
>>    JID  IP Address      Hostname                      Path
>>      5  192.168.1.242   twp5.ip6.com.au               /usr/jail2/twp5
>>
>> 192.168.1.242 is the jailed system,
>> twp1 is the host system.
>>
>> After I login 192.168.1.242, I ended up logged in twp1 which is my host 
>> system.
>> Now I am stuck. I don't know how I logged in the jailed system a month ago.
>>
>> Can anyone shred some lights on me?
>>
>> Thanks
>> Sam
>> ___
>> freebsd-net@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-net
>> To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
>
> What does:
>
> netstat -an | grep LISTEN
>
> Did you check /etc/ssh/sshd_config on the host system and check if ssh
> only listens to a specific IP address (to me it seemslike it's listening
> to *:22).
>
OK, I changed the host sshd_config setting, now I can ssh into the
jailed system.

Here is what I've done:
twp1:~ # !jexec
jexec 5 /bin/sh
# top
kvm_open: /boot/kernel/kernel: No such file or directory
# cd etc
# cat rc.conf
network_interfaces=""
rpcbind_enable="NO"
sshd_enable="YES"
syslogd_flags="-ss"

mysql_enable="yes"
mysql_limits="yes"
mysql_dbdir="/usr/local/var/db/mysql"

# hostname
twp5
#
twp5 is the jailed system.
Strange, I remember last time I can still have sshd and mysql running
in the jailed system.

Thanks

>
>
>
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


vrrp ip is not reachable

2005-02-28 Thread sam wun
Hi list,
I have just installed freevrrp in FreeBSD5.4 (pre-release) with the following 
setup:
#public-facing VRID
[VRID]
serverid = 1
interface = fxp0
priority = 255
addr = 198.168.4.1/32
#password = vrid1
#vridsdep = 2

# backend VRID
[VRID]
serverid = 1
interface = em0
priority = 255
addr = 192.168.1.1/32
#password = vrid2
#vridsdep = 1

However, the virtual IP 192.168.4.1 (on fxp0) is not reachable with ping, while 
another virtual IP 192.168.1.1 (on em0) is fine.

Here is the result from ifconfig:
# ifconfig
em0: flags=8843 mtu 1500
  options=b
  inet 192.168.1.253 netmask 0xff00 broadcast 192.168.1.255
  inet6 fe80::20e:cff:fe05:8229%em0 prefixlen 64 scopeid 0x1
  inet 192.168.1.1 netmask 0x broadcast 192.168.1.1
  ether 00:00:5e:00:01:01
  media: Ethernet autoselect (100baseTX )
  status: active
fxp0: flags=8843 mtu 1500
  options=8
  inet 192.168.4.253 netmask 0xff00 broadcast 192.168.4.255
  inet6 fe80::211:11ff:fe0f:9543%fxp0 prefixlen 64 scopeid 0x2
  inet 192.168.4.2 netmask 0xff00 broadcast 192.168.4.255
  inet 198.168.4.1 netmask 0xff00 broadcast 198.168.4.255
  ether 00:00:5e:00:01:01
  media: Ethernet autoselect (100baseTX )
  status: active
plip0: flags=108810 mtu 1500
lo0: flags=8049 mtu 16384
  inet 127.0.0.1 netmask 0xff00
  inet6 ::1 prefixlen 128
  inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
pfsync0: flags=41 mtu 2020
pflog0: flags=41 mtu 33208

in /etc/rc.conf:
gateway_enable="yes"
defaultrouter="192.168.4.254"
hostname="gateway.home.com"
ifconfig_fxp0="inet 192.168.4.253  netmask 255.255.255.0"
ifconfig_fxp0_alias0="inet 192.168.4.2  netmask 255.255.255.0"
ifconfig_em0="inet 192.168.1.253  netmask 255.255.255.0"

result from netstat -rn:
Internet:
DestinationGatewayFlagsRefs  Use  Netif Expire
default192.168.4.254  UGS 00   fxp0
127.0.0.1  127.0.0.1  UH  0   60lo0
192.168.1  link#1 UC  00em0
192.168.1.1/32 link#1 UC  00em0
192.168.4  link#2 UC  00   fxp0
192.168.4.200:00:5e:00:01:01  UHLW06lo0
192.168.4.254  00:02:b3:0b:3c:d1  UHLW0  257   fxp0606
198.168.4  link#2 UC  00   fxp0


What should I do to make virtual address 192.168.4.1 reachable from local and 
external ping?

Thanks
Sam.




___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


ping: sendto: Host is down on vrrp IP.

2005-02-28 Thread sam wun
Hi list,
I don't know what is wrong with the freevrrp setup in my FreeBSD 5.4.
After setup and started freevrrpd, I tried to ping both interfaces in 
localhost, only one interface appeared responsed to the icmp echo request 
packets, the interface associated with ip 192.168.1.1 is down; while 
192.168.4.1 is fine. Both IP addresses are assigned by freevrrpd daemon.
# ping 192.168.1.1
PING 192.168.1.1 (192.168.1.1): 56 data bytes
ping: sendto: Host is down
^C
--- 192.168.1.1 ping statistics ---
7 packets transmitted, 0 packets received, 100% packet loss
[EMAIL PROTECTED] [8:20pm] [...local/etc]# ping 192.168.4.1
PING 192.168.4.1 (192.168.4.1): 56 data bytes
64 bytes from 192.168.4.1: icmp_seq=0 ttl=64 time=0.173 ms
64 bytes from 192.168.4.1: icmp_seq=1 ttl=64 time=0.100 ms
^C
--- 192.168.4.1 ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.100/0.137/0.173/0.036 ms
Can anyone please help?
Thanks
Sam
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


OpenBGPD with FreeBSD

2005-03-13 Thread sam wun
Hi,
Had openbgpd ported to freebsd or is it in any progress?
If I want to install it in FreeBSD, is there any guideline for me to follow?
Thanks
Sam.
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


half-duplex

2006-09-04 Thread Sam Wun

Hi,

I am running a FreeBSD 5.4 stable as a network router.
I don't know any reason why one of the ethernet ports becomes half-duplex.
Here is its detail:

em1: flags=8843 mtu 1500
   options=b
   inet 60.1.2.3 netmask 0xfffc broadcast 220.233.99.39
   ether 00:04:23:bc:3a:d1
   media: Ethernet autoselect (10baseT/UTP )
   status: active
em2: flags=8843 mtu 1500
   options=b
   inet 10.1.10.1 netmask 0xff00 broadcast 10.1.10.255
   ether 00:04:23:bc:3a:d2
   media: Ethernet autoselect (1000baseTX )
   status: active

This network card is a Quat Port Intel card.
Is there any way I can "reset" it to full-duplex and 1000baseT without close
down the network connection on em1?
I know I can use following command to change it:
ifconfig em1 media 100baseTX mediaopt full-duplex

but if this not work, it will close down the entire internet connection,
which I try to avoid.

Thanks
S
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: patch for IPSEC_NAT_T

2006-10-13 Thread Sam Wun

in the kernel config file, what if I only define options IPSEC_NAT_T without
defining FAST_IPSEC?
I m not familiar with FAST_IPSEC, if I compile IPSEC_NAT_T with or without
FAST_IPSEC,  what s that going to affect my current IPSEC configuration and
connection?

Thanks
S

On 10/13/06, VANHULLEBUS Yvan <[EMAIL PROTECTED]> wrote:


On Fri, Oct 13, 2006 at 10:56:25PM +1000, [EMAIL PROTECTED] wrote:
> Hi,

Hi.

> I tried to compile freebsd 6.2 prerelease source with "options
> IPSEC_NAT_T", but it said "unknown option "IPSEC_NAT_T"" when I
> build it
>
> Had IPSEC_NAT_T patch already built into the 6.2 pre source?
>
> If not, where to obtain the patch?

Patch is available here: http://ipsec-tools.sf.net/freebsd6-natt.diff
and is not (yet ?) in FreeBSD's sources.


Yvan.

--
NETASQ
http://www.netasq.com
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: 6.1 STABLE Strangely Hangs when VLAN enabled.

2006-10-26 Thread Sam Wun

Can you test this in 6.2-Prerelease?

On 10/26/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:


Hi,

I have a HP DL380-G4 server.
Single Xeon 3.0Ghz cpu, two onboard bge NICs and one dual em NIC.

I am using vlan interfaces on bge0 (there is 9 vlan interface on bge0).
But systems hangs at a random time without any logs/errors and even panic
message! Before system hangs everything works normally. (OS: 6.1STABLE-200609)
After this problem I tried 6.1 STABLE-200607. Same result!

After removing vlan support from kernel, everything became normal.

I installed same system to another pc (P4-1.4Ghz NICs: rl).
When VLAN enabled, system hangs at a random time again.
I got crazy.

What the problem can be? How can i debug the problem?


Used These Options on That Kernel:

options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=10
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPDIVERT
options DUMMYNET
options IPSTEALTH
options TCP_DROP_SYNFIN
options NETGRAPH
options LIBALIAS
options NETGRAPH_NAT
options NETGRAPH_IPFW
options NETGRAPH_SOCKET
options NETGRAPH_IFACE
options NETGRAPH_PPP
options NETGRAPH_BPF
options NETGRAPH_VJC
options GEOM_BDE
device  vlan

Have an idea?

Thanks by now.

Ozkan KIRIK





___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


check internet connection

2006-10-26 Thread Sam Wun

Hi,

I want to write a C program to check freebsd's internet connection.
What s the best way to achieve this checking in layer 2 or 3 of the tcp/ip
stacks in freebsd?

Thanks
S
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Proposed 6.2 em RELEASE patch

2006-11-08 Thread Sam Wun

Without introduced this new patch, can I still use sysctl to maximise its
performance like FAST_INTR?

S

On 11/9/06, Jack Vogel <[EMAIL PROTECTED]> wrote:


This patch is an evolution of the last one I sent out. It has
a couple of minor corrections, like a bad forward decl in
the header.

The last patch has had quite a bit of testing and all reports
have been positive.  The only complaint was from Gleb who
says he needs to keep his beloved infinite for loop in the
interrupt handler, well I have a better one for you Gleb, keep
reading.

I have also been doing some extreme stress testing using
SmartBits, and discovered the driver as it stands is really
not able to take extreme receive side pounding, Scott
pointed out that this is why the FAST_INTR work was done :)

There were some people that had stability issues with that
work, but there were also many that did not. I actually
merged the FAST code onto my last patch, and ran the
SB stress and found it really was able to gracefully handle
that load, way to go Scott :)

I've pondered this situation, and this patch I'm including here
today is the result. Here's what it does:

If you drop it in place, compile it, and go... you will get the
code that has been tested for a week, it uses the older
style interrupts, it has the watchdog and other SMP fixes
so its been proven.

BUT, I've added the FAST_INTR changes back into the code, so
if you go into your Makefile and add -DEM_FAST_INTR you will
then get the taskqueue stuff.

So, Gleb, rather than replace the infinite for loop that no one
thinks is a good idea, you can just define FAST_INTR again,
and you should be good to go.

I see this as the best thing for the 6.2 RELEASE, it lets us
keep moving forward, people that want max performance
can define EM_FAST_INTR and help us wring out any
problems, it also will mean that I will have our Intel test
group start using this code. But for those that just want
a stable driver the standard compile will still give them that.

The patch I'm including is against BETA3. Let me know of
your concerns or issues.

Cheers,

Jack


___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"




___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


wireless card as access point

2006-11-28 Thread Sam Wun

Hi,

I recently experienced some connection problem when sharing the wireless
connection with my brother at home.
If I go online first, my connection goes very fast, but my brother's
internet connection will go very slow.

I heard that some of the wireless card does not handle multiuser network
connection. Is this true?

The wireless card I m using in my mini WRAP box is a mini card. Its
configuratino is;

ath_hal: 0.9.17.2 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
ath0:  mem 0x8008-0x8008 irq 9 at device 17.0 on pci0
ath0: [GIANT-LOCKED]
ath0: Ethernet address: 00:15:6d:50:0e:2a
ath0: mac 5.9 phy 4.3 radio 4.6

If this card is not good, which mini wireless card is good to work with
FreeBSD as wireless access point?

Thanks
S
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Adding a new VPN connection

2006-12-11 Thread Sam Wun

Hi,

In a FreeBSD router (5.4-stable), there are currently 50 IPSEC VPN
connections running with 50 remote sites, now I need to add one more (new)
vpn to it  without resetting the existing VPN connection. Therefore I have
created a script (new-vpn.sh):

#!/bin/sh

# Tunnel to kgportsmith
/sbin/ifconfig gif108 destroy
/sbin/ifconfig gif108 create
/sbin/ifconfig gif108 tunnel 10.152.34.74 10.154.3.74
/sbin/ifconfig gif108 inet 10.1.1.1 10.1.1.33 netmask 255.255.255.0
/sbin/route delete 10.1.33.1/24
/sbin/route delete 172.17.33.0/24
/sbin/route add 10.1.33.1/24 10.1.1.33
/sbin/route add 172.17.33.0/24 10.1.1.33

setkey -c << EOF

# Setup policies with kgportsmith
spdadd 10.152.34.74 10.154.3.74 any -P out ipsec esp/tunnel/10.152.34.74-
10.154.3.74/require ;
spdadd 10.154.3.74 10.152.34.74 any -P in  ipsec esp/tunnel/10.154.3.74-
10.152.34.74/require ;
add 10.152.34.74 10.154.3.74 esp 2797 -m tunnel -E blowfish-cbc
0x11205611340CCEA4C816670A4A8DD2A67403F46A08169850DC0B8E2989C3C2094CEF174297ECCF39644B6C4E28D5A3BD4C0861DD7094E398
-A hmac-sha1 0x2C49F538BAF74917311382F7EE42CC43FBDBDA4B ;
add 10.154.3.74 10.152.34.74 esp 4074 -m tunnel -E blowfish-cbc
0x82A7C78A8C1F8B0DF8EE75F4BEEA5A26D987C6237D43ED98EF3E2A18D2B7F2C94674E1E4B1FAFE645CCB2C18603646E20EB925B06AEC4F6B
-A hmac-sha1 0xCE1D85113D11D43C061E499CFFECCD81D50A3530 ;

EOF

### END OF SCRIPT ###

Will this script (especially the command setkey -c) erase (reset) the
existing VPN connection and security keys)? If it does, I will lose the
connectino with all other sites.

Thanks
S
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: CARP behaviour

2007-03-04 Thread Sam Wun

On 3/5/07, Bruce M Simpson <[EMAIL PROTECTED]> wrote:


Yar Tikhiy wrote:
>> We shouldn't cache route pointers anywhere anymore.  It has been
completely
>> removed from the PCBs and things like gif and others.
>>
> Sounds like a good way to go, too! :-)  Thanks!
>
gre(4) does very funky things with the route it caches to the tunnel
endpoint. Someone(tm) should have a look at that.



Does F5 BigIP have that issue?


BMS

___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


wireless serer card that can handle multi-users

2007-03-08 Thread Sam Wun

Hi,

About half year ago, I tested a mini wireless server card with FreeBSD 6.
The connection runs very fast if only myself using it, but when there are
more than 1 user connected to it, the second user will suffer extremely slow
wireless network connection. My colleague also told me he also experienced
that problem for his clients. So he purchased a cheap  D-Link Wireless
access point for his client rather than bundle the wireless access point
(card) in the freebsd router box.

Can anyone tell me which wifi server card don't have that problem when
configured with freebsd?

Thanks
P
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


MPLS implementation

2007-03-20 Thread Sam Wun

Hi,

Is there any MPLS implementation for FreeBSD?
I found a port ayame mpls for netbsd, but the last implementation was dated
back to 2003, seems very old.

Thanks
S
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: wireless serer card that can handle multi-users

2007-03-25 Thread Sam Wun

On 3/10/07, Yuri Lukin <[EMAIL PROTECTED]> wrote:


On Fri, 9 Mar 2007 14:10:45 +1100, Sam Wun wrote
> Hi,
>
> About half year ago, I tested a mini wireless server card with
> FreeBSD 6. The connection runs very fast if only myself using it,
>  but when there are more than 1 user connected to it, the second
> user will suffer extremely slow wireless network connection. My
> colleague also told me he also experienced that problem for his
> clients. So he purchased a cheap  D-Link Wireless access point for
> his client rather than bundle the wireless access point
> (card) in the freebsd router box.
>
> Can anyone tell me which wifi server card don't have that problem
> when configured with freebsd?

Assuming that you're talking about MiniPCI cards, you can use any based on
the
Atheros chipset. I believe most if not all currently shipping Atheros
cards
are supported in FreeBSD 6.2. I have personally been using Wistron CM9 for
nearly a year now. As far as the problem you described, you could have
been
running mixed b/g mode causing protection bit to be set which effectively
reduces the throughput of your wireless LAN.



Hi, thanks for the information. I have logged on to the freebsd router have
a look at its wifi setup in rc.conf, but I don't think it is configured as
b/g combination mode. I don't have a login to this router at the moment, so
I can't post the content of the rc.conf file here. Do you mind post your
wifi configuration here or send it to my email?

Thanks
Sam

Yuri




___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"