Configuring a router to work on an unregistered internal subnet

I'm in the process of creating a router which will sit on an ISP's internal subnet, which uses unregistered addresses. The router's upstream interface will have an unregistered address, say, 10.X.Y.Z. Its downstream interfaces will have registered IPs, so it looks like this:

Re: What does FreeBSD do when listen queue is full ?

> > > For arguments sake, say I have a web server that I know handles 10 > > requests per second and I want to offer a 2 second response time. To > > do this I set the backlog to 20 on each of the web servers and > > configure the load balancer to periodically check each server by > > attemptin

Re: vlan traffic over ipsec tunnel

The example of how to make a tunnel is part of it two.. what you suggest is a combination of thetwo.. actually I have a suggestion you should but the 'bridge' node on BOTH ENDS of the tunnel. this will stop traffic that is not wanted from travelling over the link. if you don't do that, then inci

Re: Tunneling - will gif do the trick?

On Thu, Apr 18, 2002 at 05:51:41PM +0200, Rickard Borgmäster wrote: > Thanks do Dennis I now got the gif0 interface... > > However, I have trouble moving on... > > A host 213.88.128.169 is a secondary mailserver for 130.236.218.63. > 130.236.218.63 has now been placed in a net where the smtp por

Re: Bridging vlan0 with de0

On Thu, 18 Apr 2002, Attila Nagy wrote: > Hello, > > > Szia! > > el aptom azt email-szimet? (probably unintelligable :-) > Julian, you are so nice :) > Elkerhetem az email cimet? This is the right sentence. oops. I meant to write eladtam .. bad fingers.. and Dalma says that I should have

Re: Questions on ip_output.c's patch for FreeBSD-SA-02:21.tcpip

From: Ruslan Ermilov <[EMAIL PROTECTED]> > > If the reason is "Prevent icmp_reflect() from calling ip_output() with > > a NULL route pointer which will then result in the allocated route's > >~ > > reference count never being dec

Tunneling - will gif do the trick?

Thanks do Dennis I now got the gif0 interface... However, I have trouble moving on... A host 213.88.128.169 is a secondary mailserver for 130.236.218.63. 130.236.218.63 has now been placed in a net where the smtp port is blocked from the world. I have no access to this firewall. So how can I ma

Re: Questions on ip_output.c's patch for FreeBSD-SA-02:21.tcpip

> On Thu, 18 Apr 2002 12:47:22 +0300, > Ruslan Ermilov <[EMAIL PROTECTED]> said: >> KAME rewrote the attached patch to improve this point: >> - This memory leak is fixed, of course:-) >> (at least I confirmed on 5-current). >> - Non-NULL rtentry for ip_output() is still accepted. So onl

Re: Questions on ip_output.c's patch for FreeBSD-SA-02:21.tcpip

On Thu, Apr 18, 2002 at 08:05:50PM +0900, Keiichi SHIMA / ? wrote: > Hi, > > From: Ruslan Ermilov <[EMAIL PROTECTED]> > > > I strongly object to this change. BSD historically didn't allow for > > ip_output() to be called with the NULL route pointer. I changed this > > I don't know the

Re: Tunneling - No gif interface? Why?

On 2002-04-17 - 13:41 - [+0200], Rickard Borgmäster wrote to [EMAIL PROTECTED]: > From: Rickard Borgmäster <[EMAIL PROTECTED]> > > I need to create a tunnel to an OpenBSD host. This is because the > OpenBSD host is my mailrelay, and my local sendmail (port 25) is > blocked by a firewall out of m

Re: IPv6 configuration document?

From: Markus Stumpf <[EMAIL PROTECTED]> > On Mon, Apr 15, 2002 at 11:07:53AM +0900, Keiichi SHIMA / ?$BEg7D0l?(B wrote: > > Does anyone know where is the document for configuring IPv6 on > > FreeBSD, if any? The NetBSD web page has a really cool manual > > (http://www.netbsd.org/Documentation/ne

Re: Questions on ip_output.c's patch for FreeBSD-SA-02:21.tcpip

Hi, From: Ruslan Ermilov <[EMAIL PROTECTED]> > I strongly object to this change. BSD historically didn't allow for > ip_output() to be called with the NULL route pointer. I changed this I don't know the history of BSD, but, if the reason is the history (that BSD didn't allow NULL route), I ag

Re: Questions on ip_output.c's patch for FreeBSD-SA-02:21.tcpip

On Thu, Apr 18, 2002 at 04:28:11PM +0900, SUZUKI Shinsuke wrote: > Hello all, > > #I'm not sure where to discuss this issue. So please forward this > #mail or reply with CC for the appropriate person or ML. > > > FreeBSD-SA-02:21.tcpip Security Advisory > >

Re: vlan traffic over ipsec tunnel

On Thu, Apr 18, 2002 at 03:43:17AM +0300, Radoslav Vasilev wrote: > How in practise one can bridge two separate lans through netgraph/whatever > ehternet over IP) ? Take a look into /usr/share/examples/netgraph. There is an example for ethernet bridging and udp tunnel. You just have to put ksock

Re: Bridging vlan0 with de0

Hello, > Szia! > el aptom azt email-szimet? (probably unintelligable :-) Julian, you are so nice :) Elkerhetem az email cimet? This is the right sentence. > did I give you this guy's address? Yes. He is EGLES Guillaume <[EMAIL PROTECTED]> I have the mail with the source and some docs, so I can

Re: vlan traffic over ipsec tunnel

How in practise one can bridge two separate lans through netgraph/whatever ehternet over IP) ? - Original Message - From: "Bernd Walter" <[EMAIL PROTECTED]> To: "Peter J. Blok" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Thursday, April 18, 2002 2:44 AM Subject

Questions on ip_output.c's patch for FreeBSD-SA-02:21.tcpip

Hello all, #I'm not sure where to discuss this issue. So please forward this #mail or reply with CC for the appropriate person or ML. > FreeBSD-SA-02:21.tcpip Security Advisory > Topic: routing table memory leak > Category: core > Module: