Re: three nics, two networks, simple routing problem...i think.

2001-04-23 Thread Nick Rogness
On Tue, 17 Apr 2001, Peter Brezny wrote: > The excerpt from my rc.conf mostly illustrates what I'm trying to do. > I want to connect a host (10.30.1.15) to xl1 So that I can partition > it's traffic from that of the lan connected to xl2. > > 10.30.1.1 GWxl0 10.30.1.30 FW xl210.20.30.

three nics, two networks, simple routing problem...i think.

2001-04-23 Thread Peter Brezny
The excerpt from my rc.conf mostly illustrates what I'm trying to do. I want to connect a host (10.30.1.15) to xl1 So that I can partition it's traffic from that of the lan connected to xl2. 10.30.1.1 GWxl0 10.30.1.30 FW xl210.20.30.1 LAN |

Re: (KAME-snap 4519) Re: KAME SPD bug, please try and confirm ...

2001-04-23 Thread Gunther Schadow
Shoichi, I just built and tested the latest KAME-SNAP, and it appears as if the two ipsec tunnels work together now. I will have a final word on this later tomorrow, but for now it looks as if this problem requires no further action on your part. thank you so much for looking into this, -Gunthe

Re: Multi-Destination gif tunnel

2001-04-23 Thread Nick Rogness
On Sat, 7 Apr 2001, Nick Rogness wrote: > > Multi-Destination gif tunnel > > Anybody had any success at setting these things up? I have a couple of > questions...maybe someone can answer: Since noone answered the mail, I will post the solution in case someone needs this info a

Re: (KAME-snap 4519) Re: KAME SPD bug, please try and confirm ...

2001-04-23 Thread Gunther Schadow
Shoichi Sakane wrote: > I have tested, but I couldn't have any error. I made the following network. > And I executed flooding ping to A from both B and C. All of hosts seemed > quite stable. Of course, these ICMP packet were encapsulated by ESP. > > Actually, I couldn't prepare three FreeBSD

Re: (KAME-snap 4519) Re: KAME SPD bug, please try and confirm ...

2001-04-23 Thread Shoichi Sakane
> > > sorry that we did not make any useful responses, some of the kame guys > > > (mainly sakane) are trying to repeat the symptom. > > I appreciate that very much! > > I have tested, but I couldn't have any error. I made the following network. > And I executed flooding ping to A from both B an

Re: dual dns box, ssh/ftp no like.

2001-04-23 Thread Barney Wolff
man resolv.conf To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: (KAME-snap 4515) Re: KAME SPD bug, please try and confirm ...

2001-04-23 Thread Shoichi Sakane
> > sorry that we did not make any useful responses, some of the kame guys > > (mainly sakane) are trying to repeat the symptom. > I appreciate that very much! I have tested, but I couldn't have any error. I made the following network. And I executed flooding ping to A from both B and C. All of

dual dns box, ssh/ftp no like.

2001-04-23 Thread Peter Brezny
I have two separate instances of named running on a system. One for internal and one for external. The dns appears to work fine. With nslookup, you can choose which ever server you desire, and it provides answers. if i try to run an application that uses dns on this machine however, it bombs.

Re: TCP intercept?

2001-04-23 Thread Andrew R. Reiter
In light of this, I would say that it would be cool to put into the ipfw or ipf code seeing as how there are already hooks into the network stack in the code. I am not sure how people will take the ipfw implementation soley because I know there was alot of "hacking" being done to it in the recen

Re: TCP intercept?

2001-04-23 Thread Dan Nelson
In the last episode (Apr 23), Wes Peters said: > > I'm no kernel hacker, and trying to think of useful little projects > > to change that. ;-) > > > > AFAIK, FreeBSD lacks support for TCP intercept. Is anyone already > > working on this? Would it be of interest to anyone? My initial > > though

SYN retransmission timer

2001-04-23 Thread Alwyn Goodloe
I just need to make sure that I understand the code correctly in the TCP stack. (We are trying to see how long the system waits before a SYN gets retransmitted.) When a SYN is sent, a keepalive timer is set with using the TCPTV_KEEPALIVEINTVL = 75hz (??ms - escapes me at the moment). So an ack

Re: TCP intercept?

2001-04-23 Thread Wes Peters
"E.B. Dreger" wrote: > > Greetings all, > > I'm no kernel hacker, and trying to think of useful little projects to > change that. ;-) > > AFAIK, FreeBSD lacks support for TCP intercept. Is anyone already working > on this? Would it be of interest to anyone? My initial thoughts are that > it