On Mon, 28 Aug 2000, Jaye Mathisen wrote:
> I would love to be able to filter ipfw traffic based on more than just
> IP.
>
> Anybody done anything like this?
The OpenBSD bridge filtering code can do this, allowing you to map MAC
addresses to specific interfaces, and prevent spoofing, among ot
I can appreciate the sarcasm... However, given today's generally IP-only
connected networks, ipfw does not seem to be a necessarily bad place to do
this kind of filtering...
I only mention it because dummynet could be useful bandwidth limiting to
MAC addresses as well.
And it never hurts to as
On Mon, Aug 28, 2000 at 07:02:03PM -0700, Jaye Mathisen wrote:
>
> Just exactly what I said in the Subject. I want to filter on the ethernet
> MAC address.
I guess the "ip" in "ipfw" just wasn't obvious enough that it is an IP firewall
tool. You're one layer too low.
--
Bill Fumerola - Networ
On Monday, 28 August 2000 at 22:28:29 -0400, Christopher Stein wrote:
>
> Hello,
>
> I have been trying to connect to a remote gdb debug session via a serial
> port (null modem cable) and can't seem to get the device right. I've tried
> the devices:
>
> /dev/ttyd*
> /dev/cuaa0 (as suggested by the
Hello,
I have been trying to connect to a remote gdb debug session via a serial
port (null modem cable) and can't seem to get the device right. I've tried
the devices:
/dev/ttyd*
/dev/cuaa0 (as suggested by the freebsd handbook).
hhmmm.. any suggestions? /dev/ttyd1 worked for a 3.3/4.0-pre ins
On Mon, Aug 28, 2000 at 06:03:58PM -0700, Jaye Mathisen wrote:
>
>
> I would love to be able to filter ipfw traffic based on more than just
> IP.
>
> Anybody done anything like this?
How about turning off arp on the network interface, (ifconfig),
and using static arp?
--
Robert Sexton - [E
Also, be able to filter packets based on TTL and SYN Seq value
would be useful in some cases too -- quiet a few SYN flood programs had
those values hard coded and script kids don't change them.
On Mon, 28 Aug 2000, Jaye Mathisen wrote:
>
> Just exactly what I said in the Subject. I want to fi
Just exactly what I said in the Subject. I want to filter on the ethernet
MAC address.
My firewall works fine filtering on IP, now I want to make sure no new
nodes come up. I guess I could play some games with arp, but just
blocking MAC addresses would suffice.
On Mon, 28 Aug 2000, Simon wrot
What else do you want to filter by? did you read man ipfw? it should tell you all
about it. you can filter by uid, type of
packets, source, origin, etc..
-Simon
On Mon, 28 Aug 2000 18:03:58 -0700 (PDT), Jaye Mathisen wrote:
>
>
>I would love to be able to filter ipfw traffic based on more tha
I would love to be able to filter ipfw traffic based on more than just
IP.
Anybody done anything like this?
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message
I modified the for line to stop after 383 and before 3c3
by changing the comparison in the for statement from
"< 0xff" to "< 0xf0".
This did indeed do what I expected, stopping the for loop
at 383 instead of 3c3, but the machine still locked up and
the last line displayed was "Trying Read_Por
* Zack Weinberg <[EMAIL PROTECTED]> [000828 15:28] wrote:
> I have noticed and corrected a number of portability problems with
> byacc's generated parser, also adjusted things so that it does not
> provoke a couple of gcc warnings that are not commonly requested but
> that my project uses.
>
> Mo
I have noticed and corrected a number of portability problems with
byacc's generated parser, also adjusted things so that it does not
provoke a couple of gcc warnings that are not commonly requested but
that my project uses.
More specifically:
- stdlib.h is not available in pre-C89 environment
> -Original Message-
> From: 'Alfred Perlstein' [mailto:[EMAIL PROTECTED]]
> Sent: Monday, August 28, 2000 4:34 PM
snip
> > like your patch just comments out the whole for loop, right?
>
> Yes
>
I must admit that being a C coder I just couldn't resist modifying
pnp.c a little differently i
Anybody have a good interface to pcibios for kernel devices to use? I
think I have a need for it with the TI-1225 based pci cardbus bridge
card that I have. I need to be able to assign interrupt numbers (or
at least get them) for the slot. NetBSD has this functionality and we
need it to be a
In message <[EMAIL PROTECTED]> Sheldon Hearn writes:
: Does the le(4) device have a maintainer? I ask because 3 different
: people have reported that it's unuseable since 4.0-RELEASE (see PR
: misc/18641). If there's nobody to step forward and maintain the driver,
: we should probably add an ent
* Clarence Brown <[EMAIL PROTECTED]> [000828 12:29] wrote:
> >
> Now the warm boot lockup still occurs at isa0: BUT boot -v has
> a few more lines after isa0: which WERE NOT there when the splash
> screen stuff was in loader.conf. Included below is dmesg.boot
> from a successful cold boot. The fai
> -Original Message-
> From: 'Alfred Perlstein'
> Sent: Monday, August 28, 2000 2:09 PM
>
> * Clarence Brown <[EMAIL PROTECTED]> [000828 10:56] wrote:
> > OK, I think I configured a debug kernel. I used the
> > config, make depend, make, make install procedure.
> > make depend took about 2
* Clarence Brown <[EMAIL PROTECTED]> [000828 10:56] wrote:
> OK, I think I configured a debug kernel. I used the
> config, make depend, make, make install procedure.
> make depend took about 20 min, make took about 1 hr 20 min.
>
> I did a soft reboot: shutdown -h now, hit any key to reboot,
> hi
On Mon, 28 Aug 2000, Tom Lane wrote:
> Brook Milligan <[EMAIL PROTECTED]> writes:
> > In any case, if this really follows the POSIX standard, perhaps
> > PostgreSQL code should assume these semantics and work around other
> > cases that don't follow the standard (instead of work around the POSIX
> -Original Message-
> From: 'Alfred Perlstein'
> Sent: Sunday, August 27, 2000 2:36 PM
>
> * Clarence Brown <[EMAIL PROTECTED]> [000827 10:59] wrote:
> > > -Original Message-
> > > Behalf Of Alfred Perlstein
> > > * Blaz Zupan <[EMAIL PROTECTED]> [000827 09:13] wrote:
> >
> > Look
The Hermit Hacker <[EMAIL PROTECTED]> writes:
> Okay, I just checked out Solaris 8/x86, and it confirms what HP/ux thinks:
> _SC_OPEN_MAXOPEN_MAX Max open files per
> process
> I'm curious as
Hi folks,
Does the le(4) device have a maintainer? I ask because 3 different
people have reported that it's unuseable since 4.0-RELEASE (see PR
misc/18641). If there's nobody to step forward and maintain the driver,
we should probably add an entry about it to the release notes for
4.0-RELEASE
Seems to work ok on 4.0-RELEASE #0.
Jim Flowers <[EMAIL PROTECTED]>
#4 ranked ISP on C|NET #1 in Ohio
On Mon, 28 Aug 2000, Theo PAGTZIS wrote:
>
> Wes,
>
>quite correct. I considered revisiting the matter non-important since anyone
> that would
> use fbsd 3.4 or later should have such feat
My point was only that the fbsd wi driver does not appear to allow the
creation of a service set as the original poster wanted to do, therefore
to use IBSS mode you have to have a WavePointII. From the current
wicontrol man page:
snip-
Allow the station to create a service
Wes Peters wrote:
> Jim Flowers wrote:
> >
> > Last I checked the wi driver will not do IBSS and says so in the
> > documentation. I also tried it and couldn't get anywhere. Would be nice.
>
> You must've last checked a long time ago:
>
> DESCRIPTION
> The wicontrol command controls the op
On Sun, Aug 27, 2000 at 12:10:46PM -0400, Clarence Brown wrote:
> Problem: If I do a "shutdown -h now" and then press
> any key to reboot, the system ALWAYS hangs after
> displaying the line..
>
> isa0: on motherboard
I can confirm this for my 486 machine, running -CURRENT. It comes around
o
27 matches
Mail list logo
