Re: gateway/firewall script

2003-10-22 Thread Jonathan Feally
Your problem lies in that you are counting the traffic twice in the queue/pipe - once from the internal addr to the dst, and once from the external addr to the dst. Change your rules to specify which IP Block should get the bw limiting. I don't know if the keep-state thing is throwing it out of

Re: UDP connect: Can't assign requested address or "how to determine the outgoing IP address?"

2003-10-22 Thread Edwin Groothuis
On Wed, Oct 22, 2003 at 07:53:10PM -0700, Lev Walkin wrote: > Everything's fine apart from one thing: connect() does not like to > connect to places with destination port equal to zero. > /* > * This will do. Note that it assumes AF_INET. > */ > ((struct sockaddr_in *)res->ai_addr)->sin_port = h

Re: UDP connect: Can't assign requested address or "how todetermine the outgoing IP address?"

2003-10-22 Thread Lev Walkin
Edwin Groothuis wrote: Hello, I got a nice piece of code (see attachment) which could be used to determine the outgoing IP address for an UDP socket. It works without problem under Linux, but it fails on FreeBSD (-current and -stable) during the call to connect() with the error: "Can't assign requ

UDP connect: Can't assign requested address or "how to determine the outgoing IP address?"

2003-10-22 Thread Edwin Groothuis
Hello, I got a nice piece of code (see attachment) which could be used to determine the outgoing IP address for an UDP socket. It works without problem under Linux, but it fails on FreeBSD (-current and -stable) during the call to connect() with the error: "Can't assign requested address". The cod

Re: Non-contiguous ifIndex problems with ifMib sysctl

2003-10-22 Thread Brooks Davis
On Wed, Oct 22, 2003 at 01:41:57PM -0400, Gerrit Nagelhout wrote: > Hi, > > I am trying to debug a crash (null pointer access) in sysctl_ifdata (in > if_mib.c). What I have noticed is that if interfaces (in this case vlans) > are created and destroyed dynamically, it is possible to create "holes"

Non-contiguous ifIndex problems with ifMib sysctl

2003-10-22 Thread Gerrit Nagelhout
Hi, I am trying to debug a crash (null pointer access) in sysctl_ifdata (in if_mib.c). What I have noticed is that if interfaces (in this case vlans) are created and destroyed dynamically, it is possible to create "holes" in the ifnet_addrs structure. For example, if I start with the following i

Re: Filtering question: checking for many addresses in a single rule?

2003-10-22 Thread Jos Backus
On Tue, Oct 21, 2003 at 08:59:38PM -0700, Lars Eggert wrote: > Jos Backus wrote: > >If one has many (thousands) hosts/addresses that the same filter action > >needs to be taken for, what would be the most efficient way to implement > >this using, say, ipfw or ipfilter? > You can generate a rule se

gateway/firewall script

2003-10-22 Thread Aleksandar Simonovski
this is my script, works just fine, it's purpose is to allow just www,ftp and dns requests but i get only 6KB/s transfer with config bw 128Kbit/s, and 3KB/s with 64Kbit/s and so on and it should be 16KB/s with 128Kbit/s and 8KB/s with 64Kbit/s and do on so is this right or i'am missing something

Re: Remote Boot

2003-10-22 Thread Greg Black
On 2003-10-20, Tobias P. Santos wrote: > I am trying to boot a FreeBSD diskless client with no success. > Actually, I can boot the client, the kernel is downloaded and begins > to boot. Then it tries to reach the DHCP/BOOT server, but this never > occurs and the machine repeats the following messa