Re: NAT and PPTP

2003-07-29 Thread Christophe Prevotaux
Thanks for answering my email , even though I am not a programmer I can surely test things out to the best of my abilities. It would be nice to be able to have something like a pptpd integrated into the FreeBSD tree (STABLE and CURRENT) , it would nice of course to be able to setup pptp tunnel dy

Re: NAT and PPTP

2003-07-29 Thread Michael Bretterklieber
Hi, On Tue, 29 Jul 2003, Brett Glass wrote: > > By the way, is there BSD-licensed code for the enhanced version of MPPE > that does both encryption AND compression (I believe it's called MPPC)? no. MPPC (STAC-compression) is proprietary and patented (www.hifn.com), you can enable MPPC, but you hav

Re: xl0 full duplex

2003-07-29 Thread Andrea Venturoli
** Reply to note from [EMAIL PROTECTED] (Bill Paul) Tue, 29 Jul 2003 12:18:33 -0700 (PDT) > If your switch is not managed and doesn't allow you to manually > configure the port settings, then you're out of luck. You'll just > have to live with half duplex mode. Sigh: this is the case. :( Well

RE: Help with FreeBSD Bridged Firewall

2003-07-29 Thread Don Bowman
> From: William Knechtel [mailto:[EMAIL PROTECTED] I think you need to allow arp through this device, something like: ipfw add 30 allow layer2 mac-type arp [not sure which rule to insert it at]. I'm guessing your arp cache is timing out. ___ [EMAIL PRO

RE: Help with FreeBSD Bridged Firewall

2003-07-29 Thread William Knechtel
Per a list members request, I've attached dumps of the following commands: arp -a netstat -m ipfw show ifconfig netstat -s netstat -i One caveat, I've hidden all IP addresses that could be used to divine my netblock... I guess I'm a little paranoid about people inspecting my firewall configurati

Help with FreeBSD Bridged Firewall

2003-07-29 Thread William Knechtel
Hello! Help!! I'm running a PC with dual NICs and FreeBSD 4.8 for a bridged firewall. I've got a private IP 10.0.0.1 tied to the internal card on the box for remote management. The firewall blocks any 10.x traffic coming in on the external card, so to remotely admin it, I have to shell into a mach

Re: NAT and PPTP

2003-07-29 Thread Brett Glass
Cristophe: Nothing was decided in private e-mail. I'd really like to go for this, but will likely need some help analyzing the existing code, abstracting the right parts from pppoed and mpd, and gluing everything together. That's why I was hoping to ask Archie and Brian for help. The code for bo

Re: xl0 full duplex

2003-07-29 Thread Bill Paul
> ** Reply to note from "Sreekanth" <[EMAIL PROTECTED]> Tue, 29 Jul 2003 09:53:05 -0700 > > > > > Ok, so I tried: > > > > > > ifconfig xl0 mediaopt autoselect > > > > > > but I get: > > > > > > ifconfig: SIOCSIFMEDIA: Device not configured > > >Try > >ifconfig xl0 media auto > > Ditto

Re: SysKonnect 9821 Adapters

2003-07-29 Thread Jung-uk Kim
On Monday 28 July 2003 05:33 pm, Dan Mahoney, System Admin wrote: > Hi, we recently bought a "fully supported" SysKonnect 9821 adapter, > but it claims to be "V2.0". I can't find any docs anywhere on this > extra "feature" but the card does not detect under either a > standard kernel or one with t

RE: xl0 full duplex

2003-07-29 Thread Andrea Venturoli
** Reply to note from "Sreekanth" <[EMAIL PROTECTED]> Tue, 29 Jul 2003 09:53:05 -0700 > > Ok, so I tried: > > > > ifconfig xl0 mediaopt autoselect > > > > but I get: > > > > ifconfig: SIOCSIFMEDIA: Device not configured >Try >ifconfig xl0 media auto Ditto. I get the same message. by

Re: Differences between netgraph nodes in 4.x and 5.x

2003-07-29 Thread Paolo Pisati
On Tue, Jul 29, 2003 at 09:59:14AM -0700, Julian Elischer wrote: > > The fix in this case would be for the ether node to not allow this ti > happen.. > this requires a few small changes.. > The error codes must exist in sys/errno.h > I try select one that is closest in spirit :-) maybe: #define

Re: what developpement of network between BSD 4.3 et BSD 4.4 life

2003-07-29 Thread Wes Peters
On Friday 18 July 2003 21:24, Van Vinh Vo wrote: > i am working the research about the network of freeBSD > i want knowing the developpement of BSD4.4 life > comparing the 4.3 BSD. I've explained to you several times these historical questions are not appropriate for the freebsd-net mailing list.

Re: NAT and PPTP

2003-07-29 Thread Archie Cobbs
Christophe Prevotaux wrote: > Any hopes for anything like a pptpd (like the pppoed) > any time soon ? , discussion stopped in the thread > so maybe you guys discussed this further privately > and decided something ? Not really.. from my point of view, unfortunately I don't have time to work on m

Re: Differences between netgraph nodes in 4.x and 5.x

2003-07-29 Thread Julian Elischer
On Tue, 29 Jul 2003, Paolo Pisati wrote: > On Tue, Jul 29, 2003 at 04:16:41PM +0200, Paolo Pisati wrote: > > > > well, i answer to myself: > > > > it seems it's not my mistake, cause you can trigger it with a > > plain original tee node too. =P > > Ok, i promise this is the last msg: > > it

RE: xl0 full duplex

2003-07-29 Thread Sreekanth
Try ifconfig xl0 media auto Sreekanth > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Andrea Venturoli > Sent: Tuesday, July 29, 2003 4:47 PM > To: [EMAIL PROTECTED] > Subject: Re: xl0 full duplex > > > ** Reply to note from Olivier Nic

Re: xl0 full duplex

2003-07-29 Thread Andrea Venturoli
** Reply to note from Olivier Nicole <[EMAIL PROTECTED]> Mon, 21 Jul 2003 16:56:30 +0700 (ICT) >> since it is connected to a full-duplex switch. >Is the port set to full-duplex? Or to auto configuration? There is no such options: it's always using Auto-Negotiation. >If the last, the default

Re: xl0 full duplex

2003-07-29 Thread Andrea Venturoli
** Reply to note from "Kevin Stevens" <[EMAIL PROTECTED]> Mon, 21 Jul 2003 02:53:35 -0700 (PDT) >Do you know that full-duplex is supported and enabled on the switch for >10Mb operation? Some only support half-duplex for 10Mb, others have to be >forced. Quoting the manual: This Switch supports

Re: Differences between netgraph nodes in 4.x and 5.x

2003-07-29 Thread Paolo Pisati
On Tue, Jul 29, 2003 at 04:16:41PM +0200, Paolo Pisati wrote: > > well, i answer to myself: > > it seems it's not my mistake, cause you can trigger it with a > plain original tee node too. =P Ok, i promise this is the last msg: it was my mistake, whe i deleted the tee node, the ether node sho

Re: Differences between netgraph nodes in 4.x and 5.x

2003-07-29 Thread Paolo Pisati
On Tue, Jul 29, 2003 at 12:30:42PM +0200, Paolo Pisati wrote: > > btw, i think i did the converion and it was quite straightforward, > but i've still a little problem that i didn't have in 5.x: > > if i try to unload my module, change the internals, compile > and use it again, it fails! =P > >

RE: Kernel tuning for large maxsockets

2003-07-29 Thread Scot Loach
Here is my patch for this. I've added the new settings to uipc_socket2.c instead of subr_param.c because they need to be initialized with maxsockets to keep the current behavior by default. This patch adds four new tunable vars: kern.ipc.maxripcb - maximum number of raw pcbs kern.ipc.maxdiv

Off Topic - Broadcasts

2003-07-29 Thread Eicke
Hi Folks, I verified my network traffic using tcpdump. I have 3 sub-net. In the past i used one switch per sub-net. The broadcast were genereted for PC's inside your sub-net. I need to created VLANS in one switch and attach the 3 sub-nets. Now the broadcasts are genereted of all PC's to all sub-

Re: Setting up a NAT Router that will route between 3 networks

2003-07-29 Thread Kenneth Culver
On Mon, 28 Jul 2003, Jason Hunt wrote: > On Mon, Jul 28, 2003 at 06:14:29PM -0400, [EMAIL PROTECTED] wrote: > > I was wondering how to modify the appropriate files to setup a FreeBSD > > computer to act as a NAT Router, that would do the following: > > > > Check the natd(8) man page, it should g

Re: Differences between netgraph nodes in 4.x and 5.x'

2003-07-29 Thread Max Khon
hi, there! On Tue, Jul 29, 2003 at 12:30:42PM +0200, Paolo Pisati wrote: > And while you are listening, i can show u something else... =) > > I have NETGRAPH in my kernel, and this is what i get when i > try to load ng_ether the first time: > > [EMAIL PROTECTED] root]# kldload ng_ether > module

Re: Differences between netgraph nodes in 4.x and 5.x

2003-07-29 Thread Paolo Pisati
On Mon, Jul 28, 2003 at 07:13:04PM -0700, Julian Elischer wrote: > > If you want to send me the node you have writen I can > make the diffs and send it back :-) thanks Julian, but i prefer to do it myself, cause i want to understand how the hell netgraph works... =) btw, i think i did the conv

Crash with bpfs

2003-07-29 Thread Andrea Venturoli
Hello. I've got a production server which keeps crashing if I use bpfs to much. I usually only use bpf0 for dhcp server, but if I start e.g. snort and ntop, the machine will soon reboot. The same happens if I run tcpdump. uname -a gives: FreeBSD x..zz 4.7-RELEASE-p9 FreeBSD 4.7-R

never freeing data received in netgraph control message

2003-07-29 Thread Gleb Smirnoff
In netgraph(4) it is said that: In both directions, (request and response) it is up to the receiver of that message to free() the control mes- sage buffer. All control messages and replies are allocated with malloc() type M_NETGRAPH. Does this mean that

Re: NAT and PPTP

2003-07-29 Thread Christophe Prevotaux
Hello, Any hopes for anything like a pptpd (like the pppoed) any time soon ? , discussion stopped in the thread so maybe you guys discussed this further privately and decided something ? pptpd is a much needed feature nowdays. On Thu, 24 Jul 2003 23:00:45 -0600 Brett Glass <[EMAIL PROTECTED]>