Re: Dummynet, pipes and VNET jails

2020-06-05 Thread Peter
Hello Stefan, I experience the same issue as You describe. I suppose You have configured net.inet.ip.dummynet.io_fast=1 This means, packets that get immediately delivered do not even traverse the pipe - therefore You see no problem when no delay is on the pipe. If You switch net.inet.i

Re: ipfw: switching sets does stall the machine

2019-06-16 Thread Peter
On Sun, Jun 16, 2019 at 10:06:40PM +0300, Andrey V. Elsukov wrote: ! On 14.06.2019 23:13, Peter wrote: ! > 2. There are dynamic rules involved. These do not disappear on a ! >"set disable". They stay and continue to function - somehow. ! > ! > 3. When a packet succes

Re: ipfw: switching sets does stall the machine

2019-06-14 Thread Peter
On Fri, Jun 14, 2019 at 10:20:18AM -0700, David Wolfskill wrote: ! On Fri, Jun 14, 2019 at 05:33:02PM +0200, Peter wrote: ! > ! > Hi, ! > I am trying to use two different configurations (production and test) ! > loaded into different sets, and switch between them with ! > !

Re: ipfw: switching sets does stall the machine

2019-06-14 Thread Peter
On Fri, Jun 14, 2019 at 10:21:52AM -0700, Freddie Cash wrote: ! > Details: ! > Machine : i386 ! > OS : FreeBSD 11.2-RELEASE-p10 ! > Command : ipfw set disable 1 2 3 4 5 6 7 8 9 10 11 12 13 14 enable 16 ! > 17 18 19 20 21 22 23 24 25 26 27 28 29 ! > ! ! Can't speak to this spe

ipfw: switching sets does stall the machine

2019-06-14 Thread Peter
Hi, I am trying to use two different configurations (production and test) loaded into different sets, and switch between them with # ipfw set disable ... enable ... When testing my script, this did work, except once the machine went into "swap_pager indefinite wait" and was lost. Then, afte

Re: [Panic] Dummynet/IPFW related recurring crash.

2011-02-20 Thread Peter Jeremy
about a decade without any stability issues. -- Peter Jeremy pgp17lVp0VaqE.pgp Description: PGP signature

IPv6+dummynet causing panic on 6.2-RELEASE

2007-03-30 Thread Peter Losher
) at dummynet_send+0x17e dummynet() at dummynet+0x21a softclock() at softclock+0x19a ithread_loop() at ithread_loop+0x132 fork_exit() at fork_exit+0x87 fork_trampoline() at fork_trampoline+0xe --- trap 0, rip = 0, rsp = 0xbdf0dd00, rbp = 0 --- -=- Any ideas how to proceed? Best Wishes -

Re: ipfw and natd routing problems

2006-07-28 Thread Peter Rosa
27;FIREWALL' IS COMPLETELY OPEN FOR ANY CONNECTION FROM INSIDE AND EVEN OUTSIDE!!! It is very well explained in man ipfw and even better in handbook: (http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipfw.html) Peter Rosa

Re: IPFW2+NAT stateful rules VS. FTP

2005-09-20 Thread Peter Rosa
ny # This is skipto location for outbound stateful rules $cmd 500 divert natd ip from any to any out via $pif $cmd 510 allow ip from any to any Many thanks, Peter Rosa ___ freebsd-ipfw@freebsd.org mailing list http://lists.freebsd.org/mailman/list

Re: IPFW2+NAT stateful rules VS. FTP

2005-09-11 Thread Peter Rosa
m any to me 80 in via $pif setup limit src-addr 1 $cmd 450 deny log ip from any to any # This is skipto location for outbound stateful rules $cmd 500 divert natd ip from any to any out via $pif $cmd 510 allow ip from any to any Many thanks, Peter Rosa ___

IPFW2+NAT stateful rules VS. FTP

2005-09-10 Thread Peter Rosa
o i assume there should be two fwd rules semewhere in the ruleset. Please, where should I place those rules? Or is it better to use /etc/nad.conf to redirect all incomming connections on ports 20 and 21 to localhost? Any help is *very* appreciated :-) Peter Rosa P.S. Please consider adding