IPSEC question..

2001-09-20 Thread Julian Elischer
The sample docs and the daemon-news article get me part way started to making an encrypted tunnel using IPsec4 between two networks. However The are really quite confusing... Is there a SIMPLE description of what all the parts do? I have a gif tunnel going, but it's not clear to me how I make th

Re: IP multicasting...

2001-09-20 Thread deepika kakrania
Hi, > > It's this line: > > if (igmp->igmp_group.s_addr != 0 && > !IN_MULTICAST(ntohl(igmp->igmp_group.s_addr))) { > ++igmpstat.igps_rcv_badqueries; > m_freem(m); > return; > } > > This test gets executed when it's a v2 query (mtu != > 0). The test stops > further processing

Re: Nimda retaliation??

2001-09-20 Thread Nick Rogness
On Wed, 19 Sep 2001, Tony Saign wrote: > Has anyone used LaBrea successfully on a FreeBSD box? > Moved to freebsd-questions. Nick Rogness <[EMAIL PROTECTED]> - Keep on Routing in a Free World... "FreeBSD: The Power to Serve!" To Unsubscribe: send mail to [EMAIL PROTECTED] with

Re: Gif devices in 4.4?

2001-09-20 Thread Julian Elischer
On Thu, 20 Sep 2001, Brooks Davis wrote: > On Thu, Sep 20, 2001 at 05:08:23PM -0700, Julian Elischer wrote: > > This is a bad breakage of POLA! > > It's been in stable for two months with only a few of people asking > about it and non of them asking to have it removed or changed that I > saw.

Re: Gif devices in 4.4?

2001-09-20 Thread Brooks Davis
On Thu, Sep 20, 2001 at 05:08:23PM -0700, Julian Elischer wrote: > This is a bad breakage of POLA! It's been in stable for two months with only a few of people asking about it and non of them asking to have it removed or changed that I saw. It probalby would have been better to continue to clon

Re: Gif devices in 4.4?

2001-09-20 Thread Julian Elischer
hm so what happenned to 4.4 being 4.3 compatible This is a bad breakage of POLA! All old gif scripts are now broken (grumble) I think whoever made this change needs to put big comments about how to do this in gif(4) and gifconfig(8) On Thu, 20 Sep 2001, Brooks Davis wrote: > On Thu

Re: Gif devices in 4.4?

2001-09-20 Thread Brooks Davis
On Thu, Sep 20, 2001 at 04:09:10PM -0700, Julian Elischer wrote: > > In 4.3 > device gif 4 > gave me 4 gif devices.. > > now in 4.4 it's > pseudo_device gif > > but no matter what I do I don't get any gif devices... It's in UPDATING and the release notes, but if you use the gifconfig_gif# rc

Gif devices in 4.4?

2001-09-20 Thread Julian Elischer
In 4.3 device gif 4 gave me 4 gif devices.. now in 4.4 it's pseudo_device gif but no matter what I do I don't get any gif devices... what is teh magic incantation to make them appear in ifconfig? (even gifconfig can't find them) ref1# gifconfig gif0 inet 10.1.1.1 10.2.3.4 gifconfig: interf

Re: ipfw problems ...

2001-09-20 Thread Julian Elischer
cool.. Now that you've done it by hand, could you write a script to automate the tree creation? (than we could commit it.. ) Actually Can you show me a sample? It seems to me that you should be able to get the number of filters processed on average to be much less than 100. On Thu, 20 Sep 20

Re: IP multicasting...

2001-09-20 Thread Wilbert de Graaf
Hello Deepika, > But where is the handling of other case where a IGMPv2 > router sends the GENERAL QUERY(igmp_group.s_addr = 0). > In this case igmp_code is non-zero. In other words, > where is the validity check for general Query message > when it comes from IGMPV2 router?? > > Can anyone tell m

IP multicasting...

2001-09-20 Thread deepika kakrania
Hi all, I am studying FBSD 4.1 code for IP multicasting. I have a doubt here regarding IGMP QUERY messages. The code seems to handle the case 1) when it gets the General QUERY from Version 1 router.(where igmp_code is 0). In this case it only needs to check whether destination address of Quer

Re: ipfw problems ...

2001-09-20 Thread Marc G. Fournier
Our network layout is such that our ipfw box is purely a pass-thru between our router and our network providers router: [our router] <--> [freebsd box running ipfw] <--> [network provider] / \

DHCP and multiple interfaces

2001-09-20 Thread Richard Tobin
/etc/rc.network takes care to gather up all the DHCP interfaces to pass to a single dhclient program. /etc/pccard_ether on the other hand expects to run a separate dhclient for each interface, carefully storing their pids in different files. I have a laptop with a built-in interface and a wirele

IP multicasting...

2001-09-20 Thread deepika kakrania
Hi all, I am studying FBSD 4.1 code for IP multicasting. I have a doubt here regarding IGMP QUERY messages. The code seems to handle the case 1) when it gets the General QUERY from Version 1 router.(where igmp_code is 0). In this case it only needs to check whether destination address of Quer

Re: ipfw problems ...

2001-09-20 Thread Leif Neland
On Wed, 19 Sep 2001, Bill Fumerola wrote: > On Wed, Sep 19, 2001 at 07:39:13PM +0200, Leif Neland wrote: > > > Or you could patch ipfw to be able to use a hash-db :-) > > skipto caches the pointer of the rule its skipping to the first time > it uses that rule. not going to get a better hash hit