port forwarding and ipfw rules

2004-03-18 Thread ktulu
Hi All, I have posted this question before, but I don't think I made myself very clear in what I was hoping to achieve. Hopefully, this post will help out. I have a situation where I have one network interface (fxp1) connected to the network with the IP address xxx.xxx.19.110 which is port for

BIND: Lookup of CNAME records

2004-03-18 Thread 789456123
I have set up a FreeBSD (5.2.1-RELEASE) box acting as a gateway and running version 8.3.7-REL of BIND. For testing purposes my configuration file looks as follows: options { directory "/etc/namedb"; pid-file "/var/run/named/pid"; forward only; forwarders { 195.62.99.42; 195.62.97

IPFW & Queues & Timeouts

2004-03-18 Thread Lewis Watson
Hello, I would greatly appreciate some advice on the following situation... Ou goal is to use a FreeBSD box as a gateway/ router for several clients. These clients are being provided Internet access through our network and other than a few common worm holes blocked and bandwidth management they sh

Re: Filtering established connection in ipfw

2004-03-18 Thread Mike Silbersack
On Fri, 19 Mar 2004, Tomi Kaistila wrote: > My question is, can I make a rule that allows such replies to pass the > packet filter, but to drop if it is not such a reply or similar signal? I > tried using the setup and established flags but either I did something wrong > or it just didn't work ou

Filtering established connection in ipfw

2004-03-18 Thread Tomi Kaistila
Hello I've just sometime ago got a second computer, I installed FreebSD 5.2 on it, full installation and I'm on my way of making a server out of it. Basically from the beginning, I've been struggling with ipfw, to make up a good ruleset. I've enabled IPFIREWALL in the kernel. My philosophy is, if

Re: Small question about bridging and arp

2004-03-18 Thread Chuck Swiger
Juan Rodriguez Hervella wrote: If I do a bridge between xl0 and xl1, can the IP address configured on xl1 answer ARP-requests that come from the LAN the xl0 is connected ? Does this make sense ? Yes, it should. Bridging basicly treats xl0 and xl1 as being on the same physical network and an ARP r

Small question about bridging and arp

2004-03-18 Thread Juan Rodriguez Hervella
Hello, If I do a bridge between xl0 and xl1, can the IP address configured on xl1 answer ARP-requests that come from the LAN the xl0 is connected ? Does this make sense ? -- ** JFRH ** ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.or

Re: libalias patch for review / testing

2004-03-18 Thread John Polstra
On 16-Mar-2004 Dag-Erling Smørgrav wrote: > Ruslan Ermilov <[EMAIL PROTECTED]> writes: >> I know this code quite well. Where do you suspect could be a bug >> affecting -O2 compiles, or you just simply fixed -O2 and hope it >> will auto-fix the (possible) bugs in -O2? > > Since there is no inline

Re: Multicast IPv6, socket,

2004-03-18 Thread Fuhua Yin
Hello Suzuki, Many thanks for your information. I just made the code work. The reason is that the multicast applications should be put on the hosts not on the multicast router (FreeBSD router). I put mcastsender.c on a linux host and mcastreceiver.c on the Freebsd multicast router. That is why it

sysctl -w net.link.ether.inet.proxyall=1 ?

2004-03-18 Thread Juan Rodriguez Hervella
What this is used for ? -- ** JFRH ** ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Multicast IPv6, socket,

2004-03-18 Thread SUZUKI Shinsuke
Hi, > On Thu, 18 Mar 2004 13:36:12 +0100 > [EMAIL PROTECTED]("Fuhua Yin") said: > I am trying to work on IPv6 multicast. I just wrote a small programme to > test but get stuck somewhere. I wonder if someone could be of help. Please refer to mcastsend (kame/kame/mcastsend), available in

Recommendation for Dual T1 Routing/Firewalling

2004-03-18 Thread Steven N. Fettig
Sorry to cross-post this question, but I wanted to make sure my thinking is on track regarding a FreeBSD box I am going to use for routing/firewalling. A wireless project I am working on is getting 2 T1's from Global Crossing that I want to bring into a Sangoma dual CSU/DSU card (using their so

ipv6 keep state on ipv6 ftp connections problem

2004-03-18 Thread C4INet lists
Hi all, I've now found the reason for the problems with ipv6 ftp transmissions. It seems to be a problem with pf and the "keep state" argument. The problem was that a ipv6 ftp download would stall after ~60 kBytes transmitted. pfctl -ss showed the TCP stream(s) as CLOSED:SYN SENT. The box runn

Ethernet stats in sysctl and SNMP MIBs

2004-03-18 Thread Gerald Heinig
Hi all, I'm trying to retrieve Ethernet MIB data from my driver using UCD SNMP and sysctl. For some reason, I can't get any of the info I've put in (I've just set some dummy values for the moment). In particular, I'm trying to get the ISO 8802.3 MIB to display with snmpwalk. I've declared and set

Re: Multicast IPv6, socket,

2004-03-18 Thread Lev Walkin
never check the error codes. it is a bad practice to check for error codes from system calls and library functions. please remove all checks for the error conditions from your code and try again. these checks slow down the execution and mask real problems. P.S. man assert, and use it everywhere if

Multicast IPv6, socket,

2004-03-18 Thread Fuhua Yin
Dear , I am trying to work on IPv6 multicast. I just wrote a small programme to test but get stuck somewhere. I wonder if someone could be of help. Many thanks in advance!! fuhua This is a client to send data from keyboard to group ff3e::/1234. --- #include #include #include #include

Re: tcpdump says errors. Netstat says no.

2004-03-18 Thread jeremie le-hen
> But netstat -I xl0 -w 10 during the same interval when the > above were coming down at 5-10 per second showed: > > input (xl0) output >packets errs bytespackets errs bytes colls > 32 0 4019 28 0 4573 0 >