Re: IPSEC + natd + IPFW

2001-03-06 Thread Lars Eggert
At 1:43 PM +1100 3/7/01, Stephen Cimarelli wrote: > On 07-Mar-01 Lars Eggert wrote: >> Do you use IPsec tunnel mode, or IPsec transport mode + gif tunnels to do >> the tunneling? > > Well this is where it starts to get funny, I have 2 HOWTOs > Both HOWTO's use gif tunnels, but > the FreeBSD IPsec

Re: IPSEC + natd + IPFW

2001-03-06 Thread Stephen Cimarelli
On 07-Mar-01 Lars Eggert wrote: > Stephen Cimarelli wrote: >> I have managed to get IPsec+gif tunelling to work but am having trouble >> setting >> up firewal rules, it seem that recieved ESP packets pass through the >> firewall >> rule set twice and hit my natd divert rules. > > Do you use IPs

Re: IPSEC + natd + IPFW

2001-03-06 Thread Lars Eggert
Stephen Cimarelli wrote: > I have managed to get IPsec+gif tunelling to work but am having trouble setting > up firewal rules, it seem that recieved ESP packets pass through the firewall > rule set twice and hit my natd divert rules. Do you use IPsec tunnel mode, or IPsec transport mode + gif t

IPSEC + natd + IPFW

2001-03-06 Thread Stephen Cimarelli
Hi All I have managed to get IPsec+gif tunelling to work but am having trouble setting up firewal rules, it seem that recieved ESP packets pass through the firewall rule set twice and hit my natd divert rules. Toget around this I had to add a rule like 00110 and 00115 1 150 20400 cou

Re: kernel: nd6_storelladdr failed, mbuf leak

2001-03-06 Thread itojun
>> > will correct it. thanks for reporting. http://www.kame.net/dev/cvsweb.cgi/kame/kame/sys/netinet6/nd6.c.diff?r1=1.135&r2=1.136 itojun To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

RE: - TFTP: Time out -

2001-03-06 Thread Jean-Christophe Varaillon
On Tue, 6 Mar 2001, Andy [TECC NOPS] wrote: > OK, from that all seems fine. But remeber > that doing %tftp localhost and then trying > a local get failed, so I suspect that there > is something wrong with the local setup somewhere. > > Right, how come you have two lines beginning "tftp" > in you

Re: kernel: nd6_storelladdr failed, mbuf leak

2001-03-06 Thread John Hay
> > > > >> > > I then noticed that "... kernel: nd6_storelladdr failed" gets > logged > > >> > > often and after a while all mbufs are used. It turned out > that in > > >> > > sys/net/if_ethersubr.c in ether_output() when > nd6_storelladdr() > > >> > fails, > > >> > > it does a return(0) and does

Re: mpd errors when trying to connect using MS pptp client

2001-03-06 Thread Barney Wolff
Can you ping the host you're talking to? The log lines describe options in a single LCP request being sent, which apparently cannot be sent because there is no route for the target IP addr. Barney Wolff On Tue, Mar 06, 2001 at 12:50:10PM -0500, Sonne, Byron wrote: > Greetings all, > > When I t

mpd errors when trying to connect using MS pptp client

2001-03-06 Thread Sonne, Byron
Greetings all, When I try to connect to my FreeBSD 4.2 box (running mpd as a pptp server) using the Win2k pptp client, I get the following error "Disconnected. Error 619: The specified port is not connected". If I then look in my mpd.log, I see the following occur twice, here is one of them: Ma

Re: kernel: nd6_storelladdr failed, mbuf leak

2001-03-06 Thread Bosko Milekic
itojun wrote: > > >> > > I then noticed that "... kernel: nd6_storelladdr failed" gets logged > >> > > often and after a while all mbufs are used. It turned out that in > >> > > sys/net/if_ethersubr.c in ether_output() when nd6_storelladdr() > >> > fails, > >> > > it does a return(0) and does no

RE: - TFTP: Time out -

2001-03-06 Thread Andy [TECC NOPS]
OK, from that all seems fine. But remeber that doing %tftp localhost and then trying a local get failed, so I suspect that there is something wrong with the local setup somewhere. Right, how come you have two lines beginning "tftp" in your /etc/inetd.conf ?? Thought there should be only one (the

RE: - TFTP: Time out -

2001-03-06 Thread Jean-Christophe Varaillon
It is still not working between my machine and the cisco #( So, let summurize what I should fixe: === Make my FreeBSD machine as a tftp server === vi /etc/inetd.conf: -- tftp dgram udp wait root /usr/libexec/tftpd tftpd -l -s /tftpboot tftp dgram udp wait root /usr/libexec/tftpd tftpd -l -

RE: - TFTP: Time out -

2001-03-06 Thread Andy [TECC NOPS]
Bill, just spent some time on this with him. The directory listing was a typo. I just asked him for the directory and file perms. I have his inetd.conf and it looks fine. Cheers Andy > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Bill Vermillion >

Re: - TFTP: Time out -

2001-03-06 Thread Bill Vermillion
On Tue, Mar 06, 2001 at 01:14:19PM +, Jean-Christophe Varaillon thus spoke: > % ls -l /tftpboot/c3640-i-mz.120-7.XK1.bin > -rw-r--r-- 1 nobody nobody 4991380 Mar 5 16:47 > /tftpboot/c3640-i-mz.120-7.XK1.bin > % But in the / listing there was no directory of /tftpboot. That concerns me.

RE: - TFTP: Time out -

2001-03-06 Thread Jean-Christophe Varaillon
% ls -l /tftpboot/c3640-i-mz.120-7.XK1.bin -rw-r--r-- 1 nobody nobody 4991380 Mar 5 16:47 /tftpboot/c3640-i-mz.120-7.XK1.bin % On Tue, 6 Mar 2001, Andy [TECC NOPS] wrote: > ok, show me the results of this:- > > %ls -l /tftpboot/c3640-i-mz.120-7.XK1.bin > > Andy > > > -Original Messa

RE: - TFTP: Time out -

2001-03-06 Thread Andy [TECC NOPS]
ok, show me the results of this:- %ls -l /tftpboot/c3640-i-mz.120-7.XK1.bin Andy > -Original Message- > From: Jean-Christophe Varaillon [mailto:[EMAIL PROTECTED]] > Sent: 06 March 2001 13:09 > To: Andy [TECC NOPS] > Cc: [EMAIL PROTECTED] > Subject: RE: - TFTP: Time out - > > > > try t

RE: - TFTP: Time out -

2001-03-06 Thread Jean-Christophe Varaillon
> try this:- > > %cd /tmp > %tftp localhost > tftp> get c3640-i-mz.120-7.XK1.bin > Received x bytes in 0.0 seconds > tftp> quit > % > > If you don't get that message, your local freebsd setup > is at fault. > Here is the trouble. --- tftp> status Connected to localhost. Mode: netascii Verbose

RE: - TFTP: Time out -

2001-03-06 Thread Andy [TECC NOPS]
> you are missing the portion ftp://user:passwd@host.. and > > putting in ftp://host so the cisco is trying to use anon > > ftp. You should use a real account as per my last email! > > I followed your e-mail: > --- > Router#conf t > Router(config)#ip ftp username Jean > Router(config)#

Re: kernel: nd6_storelladdr failed, mbuf leak

2001-03-06 Thread John Hay
> > >> > > I then noticed that "... kernel: nd6_storelladdr failed" gets logged > >> > > often and after a while all mbufs are used. It turned out that in > >> > > sys/net/if_ethersubr.c in ether_output() when nd6_storelladdr() > >> > fails, > >> > > it does a return(0) and does not free the mbuf

RE: - TFTP: Time out -

2001-03-06 Thread Jean-Christophe Varaillon
On Tue, 6 Mar 2001, Andy [TECC NOPS] wrote: > > In in /var/log/messages I have: > > > > Concerning the FTP Methode: > > --- > > Mar 6 11:22:35 homer ftpd[20832]: ANONYMOUS FTP LOGIN REFUSED FROM > > > > Mar 6 11:51:47 homer ftpd[21090]: FTP LOGIN FAILED FROM > > , Jean > > --- > > you are mis

Re: kernel: nd6_storelladdr failed, mbuf leak

2001-03-06 Thread itojun
>> > > I then noticed that "... kernel: nd6_storelladdr failed" gets logged >> > > often and after a while all mbufs are used. It turned out that in >> > > sys/net/if_ethersubr.c in ether_output() when nd6_storelladdr() >> > fails, >> > > it does a return(0) and does not free the mbuf. I checked

Bug in libsock++ ?

2001-03-06 Thread solo
Hi, I'm wondering if anyone have used libsocket 1.10 ? I've got a problem it looks like this: --- snip --- sockinetbuf si(sockbuf::sock_stream); cout << "bind: " << si.bind("127.0.0.1",5150) << endl; --- snip --- The problem is that bind is returning: EADDRNOTAVAIL Host is set correctly, bu

RE: - TFTP: Time out -

2001-03-06 Thread Andy [TECC NOPS]
> In in /var/log/messages I have: > > Concerning the FTP Methode: > --- > Mar 6 11:22:35 homer ftpd[20832]: ANONYMOUS FTP LOGIN REFUSED FROM > > Mar 6 11:51:47 homer ftpd[21090]: FTP LOGIN FAILED FROM > , Jean > --- you are missing the portion ftp://user:passwd@host.. and putting in ftp://

RE: - TFTP: Time out -

2001-03-06 Thread Jean-Christophe Varaillon
In in /var/log/messages I have: Concerning the FTP Methode: --- Mar 6 11:22:35 homer ftpd[20832]: ANONYMOUS FTP LOGIN REFUSED FROM Mar 6 11:51:47 homer ftpd[21090]: FTP LOGIN FAILED FROM , Jean --- Concerning the TFTP Methode: --- Mar 6 11:54:17 homer tftpd[21105]: read: Connection refused

RE: - TFTP: Time out -

2001-03-06 Thread Andy [TECC NOPS]
doh! > Try looking in /var/log/messages for ftpd[xx] error messages. should be tftpd[xx] error messages. Should look before I type! Ak To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

RE: - TFTP: Time out -

2001-03-06 Thread Andy [TECC NOPS]
> TFTP Methode: > --- Dunno about the tftp operation, could be a number of things. Try looking in /var/log/messages for ftpd[xx] error messages. > > FTP Methode: > --- > Router#copy ftp://x.x.x.48/tftpboot/c3640-i-mz.120-7.XK1.bin flash: > Destination filename [c3640-i-mz.120-7.XK1.bin]? > Acc

RE: - TFTP: Time out -

2001-03-06 Thread Jean-Christophe Varaillon
I precise that I can download file from Router to my FreeBSD machine and not from my FreeBSD machine to the Cisco router. TFTP Methode: --- Router#copy tftp flash Address or name of remote host [x.x.x.48]? Source filename [tftpboot/c3640-i-mz.120-7.XK1.bin]? Destination filen

RE: - TFTP: Time out -

2001-03-06 Thread Andy [TECC NOPS]
> -Original Message- > From: Jean-Christophe Varaillon [mailto:[EMAIL PROTECTED]] > Sent: 06 March 2001 10:57 > Subject: RE: - TFTP: Time out - > > > Hi Andy, > > Do you know if it is possible to creat a blank file on the directory > Flash: of a cisco router 3640 ? I think "router> cop

RE: - TFTP: Time out -

2001-03-06 Thread Andy [TECC NOPS]
I always had these kinda problems both with FreeBSD, Linux, etc etc. Found various ways around them in the end but the best way is if you are running a version of IOS 12.0 or later on the Cisco then use the newer copy commands in IOS that allow ftp eg:- router> copy ftp://user:[EMAIL PROTECTED]/c