Re: status of bridge code

2001-06-19 Thread Boyd R. Faulkner
Hi, Is there any documentation (or better, a HOWTO) on how to get firewall functionality with netgraph bridging? I have DSL and 8 addresses and I like the front machine to act as the firewall. I have this with the old bridge and ipfw but as has been said before, it has problems. Thanks, Boyd

Re: status of bridge code

2001-01-26 Thread Andrea Campi
> I'd be happy to (I like a challenge) but I still require access to the > standards for that. So my question still stands, does BSDi have IEEE > subscriptions for FreeBSD developers to use, or are there any other ways > for me to aquire (legally of course) the standards I need without having t

Re: status of bridge code

2001-01-26 Thread Rogier R. Mulhuijzen
> > > There's a Spanning Tree Protocol (STP) defined by IEEE 802.1D. I'd prefer > > to have that, but I don't have the 1K US$ to shell out for that. > > Does BSDi have IEEE subscriptions for FreeBSD developers to use? > >Please also consider implementing 802.1G, which is for bridging over PPP >(B

Re: status of bridge code

2001-01-26 Thread Andrea Campi
On Thu, Jan 25, 2001 at 12:19:16PM +0100, Rogier R. Mulhuijzen wrote: > At 09:37 25-1-01 -0800, Archie Cobbs wrote: > >Rogier R. Mulhuijzen writes: > > > But from my list of wishes I'd say the first 3 are gone. All that's > > left is > > > spanning tree. I'm probably going to need this pretty soo

Re: status of bridge code

2001-01-25 Thread Julian Elischer
"Rogier R. Mulhuijzen" wrote: > > > > What I want to know is can I just link tap0.upper to a new bridge hook? It > > > seems to me that is the case. > > > >yes I believe so.. > >you can hook as many interfaces as you want to the bridge node. > >(but you probably don't want to BRIDGE to your cable

Re: status of bridge code

2001-01-25 Thread Rogier R. Mulhuijzen
> > What I want to know is can I just link tap0.upper to a new bridge hook? It > > seems to me that is the case. > >yes I believe so.. >you can hook as many interfaces as you want to the bridge node. >(but you probably don't want to BRIDGE to your cable modem, but to ROUTE >to it ) Don't wor

Re: status of bridge code

2001-01-25 Thread Julian Elischer
"Rogier R. Mulhuijzen" wrote: > > At 09:37 25-1-01 -0800, Archie Cobbs wrote: > >Rogier R. Mulhuijzen writes: > > > But from my list of wishes I'd say the first 3 are gone. All that's > > left is > > > spanning tree. I'm probably going to need this pretty soon, so once more > > > I'm asking if an

Re: status of bridge code

2001-01-25 Thread Archie Cobbs
Rogier R. Mulhuijzen writes: > >Hmm.. you could also get that affect using log2(n) ng_tee(4) nodes.. > > I don't see how though. Lets say I link only to left, right and left2right. > Now when data enters left it will go to both right and left2right. When > data enters right it goes to left. But

Re: status of bridge code

2001-01-25 Thread Rogier R. Mulhuijzen
At 09:37 25-1-01 -0800, Archie Cobbs wrote: >Rogier R. Mulhuijzen writes: > > But from my list of wishes I'd say the first 3 are gone. All that's > left is > > spanning tree. I'm probably going to need this pretty soon, so once more > > I'm asking if anyone is working on it. If not I'll start on

Re: status of bridge code

2001-01-25 Thread Rogier R. Mulhuijzen
>this would be a REALLY easy node to write...maybe your first? >(see how 'ng_tee' works and ng_one2many, and >write one that does something in between. I was thinking adding an algorithm to one2many. DocWilco To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freeb

Re: status of bridge code

2001-01-25 Thread Julian Elischer
Archie Cobbs wrote: > > Rogier R. Mulhuijzen writes: > > > Also, a quick question for you netgraph guys. Why is it that ng_one2many > > send a packet only out of one hook? I can see use for an algorithm that > > sends packets from the 'one' hook to all the 'many' hooks (that are up) and > > kee

Re: status of bridge code

2001-01-25 Thread Julian Elischer
"Rogier R. Mulhuijzen" wrote: > > >personally I use the netgraph bridging code and I think (though I'm biased) > >that you should look at using htat rather than the hardwired bridging > >code that it was derived from. > > Now that I've read up on it I can tell you you and and Archie have every >

Re: status of bridge code

2001-01-25 Thread Patrick Bihan-Faou
Hi, > > But from my list of wishes I'd say the first 3 are gone. All that's left is > > spanning tree. I'm probably going to need this pretty soon, so once more > > I'm asking if anyone is working on it. If not I'll start on it. > > Do you have references for how to do this? As I understand it, t

Re: bw limit in netgraph (Was: status of bridge code)

2001-01-25 Thread Archie Cobbs
Rogier R. Mulhuijzen writes: > Quick question for the netgraph guru's. I haven't looked yet, but is there > an explanation of the NG_ macros I see used in the netgraph nodes' code? Yes, but it's not documented :) Actually the daemonnews article does document these somewhat. The main ones are NG

Re: status of bridge code

2001-01-25 Thread Archie Cobbs
Rogier R. Mulhuijzen writes: > But from my list of wishes I'd say the first 3 are gone. All that's left is > spanning tree. I'm probably going to need this pretty soon, so once more > I'm asking if anyone is working on it. If not I'll start on it. Do you have references for how to do this? As I

Re: bw limit in netgraph (Was: status of bridge code)

2001-01-25 Thread Rogier R. Mulhuijzen
> > Since I currently have high workload, I dont have time to port it to 4.x or > 5-CURRENT... > Conclusion: volunteer required for this work... and I can consult him/her. Shouldn't be too hard. I'll gladly volunteer for this project. Quick question for the netgraph guru's. I haven't looked

Re: status of bridge code

2001-01-25 Thread Vitaly V. Belekhov
On Wed, 24 Jan 2001, Julian Elischer wrote: ... > > my dc cards. No problems so far - as long as I don't use DUMMYNET with it. > > I really wish I could use DUMMYNET as I need to put bandwidth limits on a > > few of the computers on my network. ... > Rate limitting is one thing that isn't t

Re: status of bridge code

2001-01-25 Thread Rogier R. Mulhuijzen
>personally I use the netgraph bridging code and I think (though I'm biased) >that you should look at using htat rather than the hardwired bridging >code that it was derived from. Now that I've read up on it I can tell you you and and Archie have every right to be biased =) I've had a netgraph

Re: status of bridge code

2001-01-24 Thread Doug White
On Wed, 24 Jan 2001, Archie Cobbs wrote: > Julian Elischer writes: > > > Is there any reasonable documentation or a HOWTO on the usage of netgraph? > > > I am currently using the standard bridging code and IPFIREWALL (ipfw) with > > > my dc cards. No problems so far - as long as I don't use DUMM

Re: status of bridge code

2001-01-24 Thread Archie Cobbs
Julian Elischer writes: > > Is there any reasonable documentation or a HOWTO on the usage of netgraph? > > I am currently using the standard bridging code and IPFIREWALL (ipfw) with > > my dc cards. No problems so far - as long as I don't use DUMMYNET with it. > > I really wish I could use DUMMYN

Re: status of bridge code

2001-01-24 Thread Julian Elischer
"Thomas T. Veldhouse" wrote: > > > Have a look at what you can do with netgraph first. > > > > Most people don't know what it is but it allows almost arbitrarily > > complicated network topologies to be set up from the command line. > > > > > > Is there any reasonable documentation or a HOWTO on

Re: status of bridge code

2001-01-24 Thread Thomas T. Veldhouse
> Have a look at what you can do with netgraph first. > > Most people don't know what it is but it allows almost arbitrarily > complicated network topologies to be set up from the command line. > > Is there any reasonable documentation or a HOWTO on the usage of netgraph? I am currently using th

Re: status of bridge code

2001-01-24 Thread Julian Elischer
"Rogier R. Mulhuijzen" wrote: > > Is anyone working on the bridge code? > > I've got a couple of things I'd like to fix in it, but I wouldn't want to > be doing anything someone else already did. > > My wishlist: > 1) Better interaction with various drivers (like if_tap). For some reason I > ne

status of bridge code

2001-01-24 Thread Rogier R. Mulhuijzen
Is anyone working on the bridge code? I've got a couple of things I'd like to fix in it, but I wouldn't want to be doing anything someone else already did. My wishlist: 1) Better interaction with various drivers (like if_tap). For some reason I need to do a wack (undocumented) sysctl to make t