Bridge

2004-11-01 Thread AndygreenNet
Hi everybody! I'm try configure bridge on FreeBSD box. Box configuration: %uname -srp FreeBSD 5.3-RC1 i386 %ifconfig xl0: flags=8943 mtu 1500 options=9 ether 00:04:79:68:02:e6 media: Ethernet autoselect (none) status: no carrier fxp0: flags=8943 mtu 1500

Re: ipfw and ipsec processing order for outgoing packets wrong

2004-11-01 Thread Vincent Poy
On Mon, 1 Nov 2004 05:24:06 -0800, Vincent Poy <[EMAIL PROTECTED]> wrote: > On Mon, 1 Nov 2004 05:13:21 -0800, Vincent Poy <[EMAIL PROTECTED]> wrote: > > > > On Mon, 1 Nov 2004 14:20:10 +0200, Ari Suutari <[EMAIL PROTECTED]> wrote: > > > > > > > > The counters for queue 1 keeps increasing when I

Re: ipfw and ipsec processing order for outgoing packets wrong

2004-11-01 Thread Vincent Poy
On Mon, 1 Nov 2004 05:13:21 -0800, Vincent Poy <[EMAIL PROTECTED]> wrote: > On Mon, 1 Nov 2004 14:20:10 +0200, Ari Suutari <[EMAIL PROTECTED]> wrote: > > > > > The counters for queue 1 keeps increasing when I do a ftp out even for > > > non-ACK packets but the other counters for queue 2-4 doesn't

Re: ipfw and ipsec processing order for outgoing packets wrong

2004-11-01 Thread Vincent Poy
On Mon, 1 Nov 2004 14:20:10 +0200, Ari Suutari <[EMAIL PROTECTED]> wrote: > > The counters for queue 1 keeps increasing when I do a ftp out even for > > non-ACK packets but the other counters for queue 2-4 doesn't move at > > all so it seems like everything is going out one queue instead of what >

Re: ipfw and ipsec processing order for outgoing packets wrong

2004-11-01 Thread Vincent Poy
On Mon, 1 Nov 2004 13:09:00 +0100, Joost Bekkers <[EMAIL PROTECTED]> wrote: > On Mon, Nov 01, 2004 at 02:16:42AM -0800, Vincent Poy wrote: > > > > 63004 667879129410867 queue 1 tcp from any to any tcpflags ack out > > 63005 1 40 queue 2 tcp from any to any dst-port 22

Re: ipfw and ipsec processing order for outgoing packets wrong

2004-11-01 Thread Ari Suutari
Hi, The counters for queue 1 keeps increasing when I do a ftp out even for non-ACK packets but the other counters for queue 2-4 doesn't move at all so it seems like everything is going out one queue instead of what the rules actually say. I have one pipe configured as 480Kbit/sec which is what rul

Re: ipfw and ipsec processing order for outgoing packets wrong

2004-11-01 Thread Joost Bekkers
On Mon, Nov 01, 2004 at 02:16:42AM -0800, Vincent Poy wrote: > 63004 667879129410867 queue 1 tcp from any to any tcpflags ack out > 63005 1 40 queue 2 tcp from any to any dst-port 22,23 out > 63006 38782 3364689 queue 2 udp from any to any not > dst-port 80,4

Current problem reports assigned to you

2004-11-01 Thread FreeBSD bugmaster
Current FreeBSD problem reports Critical problems Serious problems S Submitted Tracker Resp. Description --- o [2002/07/26] kern/41007 net overfull traffic on third and fourth adap o [2003/10/14] kern

Re: ipfw and ipsec processing order for outgoing packets wrong

2004-11-01 Thread Vincent Poy
Hi, I don't know how to explain my problem but it goes something like this... [EMAIL PROTECTED] [2:05am][/home/vince] >> ipfw show 00049 1557131244839199 skipto 100 ip from 208.201.244.224/29 to any 00050 12072800468 917651580916 divert 8668 ip from any to any via xl0 00100 69518

Re: Efficient copying between sockets

2004-11-01 Thread Ollie Cook
Thank you all for your advice. I'll look into netgraph(4) and sendfile(2). If I have anything worth sharing after I've played, I'll follow-up here. Thanks again. Ollie -- Ollie Cook Systems Architect, Claranet UK [EMAIL PROTECTED] +44 20 7685 8065 _

Re: Efficient copying between sockets

2004-11-01 Thread Brooks Davis
On Mon, Nov 01, 2004 at 03:42:52AM -0600, Mike Silbersack wrote: > > On Fri, 29 Oct 2004, Ollie Cook wrote: > > >Good afternoon, > > > >I am currently writing a potentially high bandwidth (think fileserver) > >application which will proxy data from one PF_INET socket to another (no > >reason > >

Re: ipfw and ipsec processing order for outgoing packets wrong

2004-11-01 Thread Ari Suutari
Hi, But that gives us 2 blocks of identical code to maintain. To me that doesn't seem The Right Way(tm), but I haven't yet thought of a way that is better. My pseudo-code was more trying to point out the needed functionality. I wouldn't say either that just copying and pasting the similar bl

Re: Efficient copying between sockets

2004-11-01 Thread Mike Silbersack
On Fri, 29 Oct 2004, Ollie Cook wrote: Good afternoon, I am currently writing a potentially high bandwidth (think fileserver) application which will proxy data from one PF_INET socket to another (no reason it has to be PF_INET, but that's how the application stands). In actual fact, I know in adva

Re: ipfw and ipsec processing order for outgoing packets wrong

2004-11-01 Thread Joost Bekkers
On Mon, Nov 01, 2004 at 09:45:18AM +0200, Ari Suutari wrote: > Hi, > > >ip_output() >{ > #if defined (IPSEC) || defined(FAST_IPSEC) >pfil_hooks() > #endif > #ifdef IPSEC >kame_ipsec_stuff() > #endif > #ifdef FAST_IPSEC >fast_ipsec_stuff() > #endif > #ifndef FAST_IP