Re: limiting connections per IP w/FreeBSD ftpd?

2003-05-30 Thread Andrew Gallatin
Maxim Konovalov writes: > a) run ftpd from inetd -s, man inetd; Duh! Thanks! Works fine. Drew ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: limiting connections per IP w/FreeBSD ftpd?

2003-05-30 Thread Maxim Konovalov
On 09:25-0400, May 30, 2003, Andrew Gallatin wrote: > > At my company, some bonehead (not sure if it was maliciousness or just > a stupid customer), opened 60 simultaneous connections to our ftp > server and totally swamped our T1.This is the second or third time > this has happened recently.

Re: limiting connections per IP w/FreeBSD ftpd?

2003-05-30 Thread Andrew Gallatin
Simon L. Nielsen writes: > On 2003.05.30 09:25:31 -0400, Andrew Gallatin wrote: > > > > At my company, some bonehead (not sure if it was maliciousness or just > > a stupid customer), opened 60 simultaneous connections to our ftp > > server and totally swamped our T1.This is the second or

Re: limiting connections per IP w/FreeBSD ftpd?

2003-05-30 Thread Simon L. Nielsen
On 2003.05.30 09:25:31 -0400, Andrew Gallatin wrote: > > At my company, some bonehead (not sure if it was maliciousness or just > a stupid customer), opened 60 simultaneous connections to our ftp > server and totally swamped our T1.This is the second or third time > this has happened recently.

limiting connections per IP w/FreeBSD ftpd?

2003-05-30 Thread Andrew Gallatin
At my company, some bonehead (not sure if it was maliciousness or just a stupid customer), opened 60 simultaneous connections to our ftp server and totally swamped our T1.This is the second or third time this has happened recently. So I'm looking for some way to limit the number of connection

Re: Spontan reboot of FreeBSD 4,x box

2003-05-30 Thread Dennis Pedersen
If i understand the man page of periodic correctly then it should'nt run if cron is'nt running? (ps aux |grep cron gives nothing and cron_enable is set to 'NO' in rc.conf) Can i simply remove the scripts from daily to make sure nothing is running from there or will that possibly crash the box? (i d

Re: ipfw rules vs routes to localhost?

2003-05-30 Thread Neelkanth Natu
--- [EMAIL PROTECTED] wrote: > > I'm considering: > > > > ipfw add N deny ip from a.b.c.d to any > > > > vs. > > > > route add -host a.b.c.d localhost > > > > I need to block traffic to a number of IP addresses. I thought I'd use > > ipfw to avoid things like UDP DNS lookups that might com

RE: gratuitous ARP with em interface.

2003-05-30 Thread Sreekanth
I did a quick test just now and... Interestingly I did see GARP packets on the network with Em copper connected to a 100base Switch(I don't have a gigabit Copper switch rightnow). You might want to try these things. 1) Ping immediately after the link comes up and see if it succeeds.(In 1000baseTX s

RE: gratuitous ARP with em interface.

2003-05-30 Thread [EMAIL PROTECTED]
Thanks all for you replies. > I haven't tried this, but I think the problem would go away if you > changed WAIT_FOR_AUTO_NEG_DEFAULT to 0 in "if_em.h". Changed this. Did not work. > If u can do kernel debugging put break point at the > "arp_ifinit" and verify if this was getting called or > n

Re: ipfw rules vs routes to localhost?

2003-05-30 Thread .
> I'm considering: > > ipfw add N deny ip from a.b.c.d to any > > vs. > > route add -host a.b.c.d localhost > > I need to block traffic to a number of IP addresses. I thought I'd use > ipfw to avoid things like UDP DNS lookups that might come in ant take up > resources while my system trie

RE: gratuitous ARP with em interface.

2003-05-30 Thread Sreekanth
A related topic.Whenever an alias gets added to the interface, the interface is reset.In my opinion this is uncalled for.The Interface should be reset only when adding the first Ip address.As far as interface is concerned Adding an IP address has no effect,except in the first instance.My suggestion

Re: Cascading qmail servers

2003-05-30 Thread Barney Wolff
On Thu, May 29, 2003 at 12:14:34AM -0700, Wes Peters wrote: > On Wednesday 28 May 2003 08:00 am, Barney Wolff wrote: > > On Wed, May 28, 2003 at 07:45:10AM -0700, Wes Peters wrote: > > > > Don't assume that you can't create an alias for each user. When I > > > > worked at a very large NY bank, wit

RE: gratuitous ARP with em interface.

2003-05-30 Thread Sreekanth
em_ioctl() has a call to ether_ioctl() which in turn calls arp_ifinit(). Sreekanth > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Thursday, May 29, 2003 9:17 AM > To: Sreekanth > Cc: 'Petri Helenius'; 'Ruslan Ermilov'; > [EMAIL PROTECTED]; [EMAIL PROTEC

Socket option to get dst port

2003-05-30 Thread Scot Loach
When a UDP packet is read from a socket, the userland program can get the destination IP address by using the IP_RECVDSTADDR socket option. This returns the destination address as ancillary data in the msg_control member of the msghdr structure passed to recvmsg(). I needed a way to get the desti

RE: gratuitous ARP with em interface.

2003-05-30 Thread mvsjetti
hi, I had checked the kernel code of the freeBsd. In case of fxp port " fxp_ether_ioctl" fucntional will be called when we add a new address to an interface(using the if_ioctl pointer from the in_ifinit fucntion). And this fuction will inturn call the arp_ifinit fucntion which sends the gratit

Re: USB Modem support

2003-05-30 Thread Garrett Wollman
< said: > How do I find out before I go and buy a usb modem that its going to be > detected as a umodem or a ugen device. A priori, you can't. Looking in the Macintosh section will usually assure you of getting something that is not Windows-specific, although this is not a sufficient condition.

Re: gratuitous ARP with em interface.

2003-05-30 Thread John Polstra
In article <[EMAIL PROTECTED]>, Petri Helenius <[EMAIL PROTECTED]> wrote: > I haven't looked that deep into why, but em is quite slow on coming > up compared to fxp for example. Probably something to do with > hardware re-initialization. I haven't tried this, but I think the problem would go away

RE: gratuitous ARP with em interface.

2003-05-30 Thread Sreekanth
Could be attributed to the spanning tree in the switch.I have seen it happening(especially with cisco switches).I bet you are not able to send out any packet(Not just Garp). Sreekanth > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Petri Helenius >

Re: Collision on NIC

2003-05-30 Thread Petri Helenius
> > Well, I don't see the problem. > > My math says that that's .03% collision rate, which is so deep in the > noise as to be practically zero. What do you _think_ it should be? > Even Mr. Inventor of the ethernet himself regrets calling them collisions because that term has a bad ring people u

Re: USB Modem support

2003-05-30 Thread Hellmuth Michaelis
Brad du Plessis wrote: > How do I find out before I go and buy a usb modem that its going to be > detected as a umodem or a ugen device. Take your notebook to the USB-dealer :-) and ask if you can connect the thingie to test it. > Are usb modems with CAPI support always winmodems? You mix th

Re: Collision on NIC

2003-05-30 Thread Matthew D. Fuller
On Thu, May 29, 2003 at 03:51:43PM +0200 I heard the voice of Erwane Breton, and lo! it spake thus: > > On my FreeBSD box > Network interface status: > Ipkts Ierrs IbytesOpkts Oerrs Obytes Coll > 21852457 0 280187344 28530965 7 3906410421 8584 > Lot of collisio