Re: To many dynamic rules created by infected machine

2004-09-14 Thread Pat Lashley
--On Tuesday, September 14, 2004 20:59:43 -0400 "Eric W. Bates" <[EMAIL PROTECTED]> wrote: It's a small store. Folks with broken computers bring the machines in because "It doesn't work". They usually don't know what is wrong with any given machine; and they try to be careful (remove the hard dri

Re: strange pppoe/adsl issues

2004-09-14 Thread Fargo Holiday
On Wed, 8 Sep 2004 22:15:55 +1000, Glenn Thomas <[EMAIL PROTECTED]> wrote: > On Wed, 8 Sep 2004 12:16:26 +0400, Gleb Smirnoff <[EMAIL PROTECTED]> wrote: > > Are you using ppp(8)? If you do can you try mpd from ports? In opposite > > case can you try ppp(8)? :) > > Ok, i tried mpd again and I can c

RE: packet generator

2004-09-14 Thread Don Bowman
From: Andrew Gallatin [mailto:[EMAIL PROTECTED] > Andrew Gallatin writes: > > > xmit routine was called 683441 times. This means that the > queue was > > only a little over two packets deep on average, and vmstat > shows idle > > time. I've tried piping additional packets to nghook mx0:orph

Re: To many dynamic rules created by infected machine

2004-09-14 Thread Eric W. Bates
Julian Elischer wrote: how about preceeding the keep-state rule with some specific rules against that machine.. (or turning it off)? what KIND of sweep? It's a small store. Folks with broken computers bring the machines in because "It doesn't work". They usually don't know what is wrong with

RE: packet generator

2004-09-14 Thread Andrew Gallatin
Andrew Gallatin writes: > xmit routine was called 683441 times. This means that the queue was > only a little over two packets deep on average, and vmstat shows idle > time. I've tried piping additional packets to nghook mx0:orphans > input, but that does not seem to increase the queue dept

Re: To many dynamic rules created by infected machine

2004-09-14 Thread Julian Elischer
how about preceeding the keep-state rule with some specific rules against that machine.. (or turning it off)? what KIND of sweep? Eric W. Bates wrote: Friends run an IT business and I helped build them a firewall using ipfw. The box has multiple interfaces; one of which is untrusted and it is

To many dynamic rules created by infected machine

2004-09-14 Thread Eric W. Bates
Friends run an IT business and I helped build them a firewall using ipfw. The box has multiple interfaces; one of which is untrusted and it is where they put suspect machines (customer boxes with high likelihood of viruses and other evil Windoze ailments). Their network is well protected; howeve

Using `route .... -mtu' on local network

2004-09-14 Thread Mikhail Teterin
Hello! Most of our hosts can only do the regular 1500-byte frames, but some are Jumbo Frames capable. I'm trying to make these few servers talk to _each other_ using bigger frames (the switch supports them) without breaking the LAN into subnets. In the past someone suggested, I try explicit -mt

Re: route to host on same network

2004-09-14 Thread Michael DeMan
Yes, the auto-mesh matters were solved long ago. Michael F. DeMan Director of Technology OpenAccess Network Services Bellingham, WA 92825 [EMAIL PROTECTED] 360-647-0785 On Sep 14, 2004, at 2:58 AM, Bruce M Simpson wrote: Hello there. On Mon, Sep 13, 2004 at 07:19:31PM +0200, John Hay wrote: I'm bus

Re: route to host on same network

2004-09-14 Thread Bruce M Simpson
Hello there. On Mon, Sep 13, 2004 at 07:19:31PM +0200, John Hay wrote: > I'm busy trying to port mobilemesh (www.mitre.org/tech_transfer/mobilemesh) > to FreeBSD and run into a problem. I tried to port MobileMesh once too. It is a largely futile exercise. The wired segment of your network requir

Re: route to host on same network

2004-09-14 Thread Andre Oppermann
Max Laier wrote: > > On Tuesday 14 September 2004 03:05, George V. Neville-Neil wrote: > > At Mon, 13 Sep 2004 19:19:31 +0200, > > > > John Hay wrote: > > > Hi, > > > > > > I'm busy trying to port mobilemesh > > > (www.mitre.org/tech_transfer/mobilemesh) to FreeBSD and run into a > > > problem. >