Re: "dynamic" ipfw

2002-05-22 Thread Crist J. Clark
On Thu, May 23, 2002 at 02:51:16AM +0200, John Angelmo wrote: > On Wed, 22 May 2002 17:28:37 -0700 > "Crist J. Clark" <[EMAIL PROTECTED]> wrote: > > > On Mon, May 20, 2002 at 07:39:36PM +0200, John Angelmo wrote: > > > Hello > > > > > > I have a small problem with IPFW > > > > > > How can I han

NFS don't set sopt.sopt_dir sometimes... Maybe sosetopt() should?

2002-05-22 Thread Semen A. Ustimenko
Hi! Looks like nfs_socket.c and nfs_syscalls.c lack strings sopt.sopt_dir = SOPT_SET; when setting TCP_NODELAY and SO_KEEPALIVE. For SO_KEEPALIVE, it doesn't matter, sosetopt() doesn't examine it, but TCP_NODELAY is actually ignored. Obviously, it's easy to add these lines, but maybe i

Re: "dynamic" ipfw

2002-05-22 Thread John Angelmo
On Wed, 22 May 2002 17:28:37 -0700 "Crist J. Clark" <[EMAIL PROTECTED]> wrote: > On Mon, May 20, 2002 at 07:39:36PM +0200, John Angelmo wrote: > > Hello > > > > I have a small problem with IPFW > > > > How can I handle adding and removing rules based on IP/MAC per user? > > Per user? You mean

Re: Question about Dummynet and Diffserv

2002-05-22 Thread Crist J. Clark
On Wed, May 22, 2002 at 12:31:00PM -0400, Craig Rodrigues wrote: > On Wed, May 22, 2002 at 02:43:23AM -0700, Luigi Rizzo wrote: > > I think the TOS matching is implemented in ipfw in 5.0, not 4.6. > > > > it should not be too hard to merge it into RELENG_4. > > > > cheers > > luigi > >

ip src address in outgoing ipv4 multicast packets

2002-05-22 Thread Rob
I was just wondering why the src address is set to the host group in outgoing multicast packets on RELENG_4? As far as I can tell, rfc1054 says that the src address should be set to that of the host, not the host group (6.2). The behavior exists in 4.5-release also. I noticed this because linux

Re: "dynamic" ipfw

2002-05-22 Thread Crist J. Clark
On Mon, May 20, 2002 at 07:39:36PM +0200, John Angelmo wrote: > Hello > > I have a small problem with IPFW > > How can I handle adding and removing rules based on IP/MAC per user? Per user? You mean with 'uid' options? > I can add a rule for a specific IP/MAC without the need to flush but can

Re: Lossless bandwidth limiter on an interface

2002-05-22 Thread Luigi Rizzo
when a dummynet queue drops UDP packets, it returns an ENOBUF error on the write(), so you can at least retry the transmission yourself after some time. Unfortunately there is not any mechanism in place to make an UDP write() blocking. cheers luigi On Wed, May 22, 2002 at 05:42:

mobile routing problem

2002-05-22 Thread Vinod
i need some help with a routing problem i face. below is my setup. | | 10.0.0.1 firewall/router | _ _ _ _ |_ _ _ _ _ | | |10.0.0.2 |10.0.0.3 Desktop1 Desktop2 10.0.1.1

Lossless bandwidth limiter on an interface

2002-05-22 Thread John Baldwin
I'm curious: what would be the best method of implementing a bandwith limiter on an interface that is lossless? I'm having to limit UDP with no back channel, so I can't reply on TCP retransmits to make up for packets being dropped. DUMMYNET drops packets that overflow it's queue size so it doesn'

Re: Interface statistic

2002-05-22 Thread Eli Dart
It's actually fairly easy to take the output of netstat -inb and put it into rrdtool. If you grep Link out of netstat -inb you get in and out packets and bytes, and you get error counters as well. My $0.02 --eli In reply to Larry Sica <[EMAIL PROTECTED]> : > This is a multi

Re: Question about Dummynet and Diffserv

2002-05-22 Thread Craig Rodrigues
On Wed, May 22, 2002 at 02:43:23AM -0700, Luigi Rizzo wrote: > I think the TOS matching is implemented in ipfw in 5.0, not 4.6. > > it should not be too hard to merge it into RELENG_4. > > cheers > luigi Cool! Could you merge this stuff into RELENG_4, or are there more restrictions

Re: Squid filtering

2002-05-22 Thread Alex Rousskov
Ivo, Looks like your question is specific to Squid rather than FreeBSD. Please see Squid FAQ at www.squid-cache.org and ACL-related comments in the default squid.conf file. The info you need is there. If you need further help, please post to squid-users mailing list, after searching its archive.

Squid filtering

2002-05-22 Thread Ivailo Tanusheff
Hi,   I need to filter some kind of traffic – mp3, .avi and so on for the my network users. I’d try to find some info on that, but with no success. Is there some kind of acl or other rule that can help? Can you help me with this problem, please? Thank you in advantage   Ivo

Re: Interface statistic

2002-05-22 Thread Mike Tancsa
MTRG in conjunction with snmpd. It will gather the data you require. Also, you can safely run SNMPD as a non root user for this purpose and I strongly advise that. Both programs are in the ports tree. ---Mike On Tue, 21 May 2002 14:58:22 +0300, in sentex.lists.freebsd.net you wrote: