Re: ipnat

2001-12-04 Thread veedee
Thanks for your help Arjan, the 0/0 finally worked :) I was testing the connection from one of the other servers in the buildings, and the server had a real IP address not 172.27.40.0/23 still like, so ipnat was NATing for it too. But after I added "map xl0 from 172.27.0.0/23 to y.y.y.y/32 ->

NOARP - gateway must answer and have frozen ARP table

2001-12-04 Thread Eugene Grosbein
Hi! Not sure what is correct list, this is about network security. Flag NOARP did not work for ethernet interface before 4.4-RELEASE. We needed static ARP table so used local patch for it. 4.4-RELEASE implemented NOARP but in the different way. Now a router even does not respond to clients askin

Re: HEADS-UP: net polling code now in STABLE.

2001-12-04 Thread Luigi Rizzo
[Bcc to -stable] On Tue, Dec 04, 2001 at 01:14:37PM +0100, Michael Nottebrock wrote: ... > > and enable it at runtime as follows (by default it is disabled): > > > > sysctl kern.polling.enable=1 > > Putting that into /etc/sysctl.conf results in a solid hang on bootup i just committ

Re: HEADS-UP: net polling code now in STABLE.

2001-12-04 Thread Michael Nottebrock
Luigi Rizzo wrote: > Could you try and insert an "ifconfig" (to see the status of the > interface) before the point where it hangs ? Done, output attached. I inserted the 'ifconfig' into /etc/rc.network, just between the "#gifconfig"-section and the "# Set up all the network interfaces..."-se

Re: ipnat

2001-12-04 Thread veedee
On Tue, Dec 04, 2001 at 09:18:08PM +0100, Arjan de Vet wrote: > In article <[EMAIL PROTECTED]> you write: > ># allow everything to the another building > >add allow ip from any to 172.27.40.0/23 > >add divert natd ip from any to any via xl0 > >add allow ip from any to any > > I'm not familiar wit

Re: ipnat

2001-12-04 Thread Arjan de Vet
In article <[EMAIL PROTECTED]> you write: ># allow everything to the another building >add allow ip from any to 172.27.40.0/23 >add divert natd ip from any to any via xl0 >add allow ip from any to any I'm not familiar with natd but I guess this means that traffic towards 172.27.40.0/23 should no

ipnat

2001-12-04 Thread veedee
Hello, I've been using ipfw/natd for some time and about 2 days ago I switched to ipf/ipnat. Everything was okay, until I noticed that all the services on the machines from the internal network wouldn't work any more. I know, it sounds confusing... I'll explain in a minute. My server and about

Re: HEADS-UP: net polling code now in STABLE.

2001-12-04 Thread John Merryweather Cooper
On 2001.12.03 22:17 Luigi Rizzo wrote: > [Bcc to -stable because of relevance there] > > With the approval of the release engineer, a revised version of > the network polling code is now in STABLE. It would be great if > you could try it out and send feedback, so we con sort out issues > (if an

Re: HEADS-UP: net polling code now in STABLE.

2001-12-04 Thread Luigi Rizzo
> Putting that into /etc/sysctl.conf results in a solid hang on bootup > here, right after IP Filter init and before the interfaces come up: thanks, I am investigating this, it should be trivial to fix. Could you try and insert an "ifconfig" (to see the status of the interface) before the point

ppp and "nat port" on single host

2001-12-04 Thread Richard Čepas
Hi, I have a pppoe connection with dynamic IP address. ppp works fine but address translation doesn't, i.e. I can't connect to 213.190.39.183:80. I don't want to run apache on tun0 as it is dynamic. Is there some solution? ppp.conf: nat enable yes #nat log yes nat port tcp 127.0.

Re: HEADS-UP: net polling code now in STABLE.

2001-12-04 Thread Michael Nottebrock
Luigi Rizzo wrote: > > options DEVICE_POLLING > options HZ=1000 # not compulsory but strongly recommended > > and enable it at runtime as follows (by default it is disabled): > > sysctl kern.polling.enable=1 Putting that into /etc/sysctl.conf results in

Re: HEADS-UP: net polling code now in STABLE.

2001-12-04 Thread David Xu
could you patch rl driver, we have 100 RealTek 8139 cards here. Regards, -- David Xu Luigi Rizzo wrote: >[Bcc to -stable because of relevance there] > >With the approval of the release engineer, a revised version of >the network polling code is now in STABLE. It would be great if >you could t

Re: HEADS-UP: net polling code now in STABLE.

2001-12-04 Thread Maxim Konovalov
Hi Luigi, On Mon, 3 Dec 2001, Luigi Rizzo wrote: > [Bcc to -stable because of relevance there] > > With the approval of the release engineer, a revised version of > the network polling code is now in STABLE. It would be great if > you could try it out and send feedback, so we con sort out issu