Re: firewalling with tunnels, and/or ipv6

2004-12-20 Thread Brooks Davis
On Mon, Dec 20, 2004 at 06:05:16PM -0800, Charlie Schluting wrote: > Ok, I've got a v6 tunnel, and to make it work I had to "allow ipv6 from > " in ipfw. From what I understand, I have to make a completely > different set of rules for ipv6, and load them using the -6 flag. > > Correct so far? i

Re: Dingo and PerForce

2004-12-20 Thread gnn
At Mon, 20 Dec 2004 15:57:36 -0800, Brooks Davis wrote: > > [1 ] > On Sun, Dec 19, 2004 at 01:23:43PM +0900, [EMAIL PROTECTED] wrote: > > Howdy, > > > > For those who use PerForce and want to work on Dingo there is > > now a dingo branch, named "dingo". The dingo branch contains > >

Re: FreeBSD Router : ARP who-has requests

2004-12-20 Thread gnn
At Mon, 20 Dec 2004 19:28:21 +, Lee Johnston wrote: > Does any one have any ideas on this? Could the kernel option (options HZ) > which we use for dummynet/polling effect the rate in which ARP requests are > issued? > > I had planned to place each subnet in a VLAN, and looks like this will h

firewalling with tunnels, and/or ipv6

2004-12-20 Thread Charlie Schluting
Ok, I've got a v6 tunnel, and to make it work I had to "allow ipv6 from " in ipfw. From what I understand, I have to make a completely different set of rules for ipv6, and load them using the -6 flag. Correct so far? Ok, so I want to set up an ipip v4 tunnel to another box (that runs ipf), and

IPF to PF rule migration tools

2004-12-20 Thread David
Greetings All and a merry X-Mas, I am looking for a migration script/program to migrate my IPF rule bases to a PF rule base... does anyone know of any such tool or do I need to go through them all by hand?. Thanks in advance. Cheers!, -- David ___ [EMA

Re: Dingo and PerForce

2004-12-20 Thread Brooks Davis
On Sun, Dec 19, 2004 at 01:23:43PM +0900, [EMAIL PROTECTED] wrote: > Howdy, > > For those who use PerForce and want to work on Dingo there is > now a dingo branch, named "dingo". The dingo branch contains > all of src, not just sys, as I suspect there are userland bits > w

build failure in usr.sbin

2004-12-20 Thread Li, Qing
-- Qing cc -O2 -fno-strict-aliasing -pipe -DUSE_INET6 -DIPL_NAME=\"/dev/ipl\" -DIPFILTER_LOG -I/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet -I/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter -I/usr/src/usr.sbin/ipftest/../../contrib/ipfilter -c /usr/src/usr.sbin/i

FreeBSD Router : ARP who-has requests

2004-12-20 Thread Lee Johnston
Hi there, We are using a FreeBSD machine as a router in one of our PoPs (using Quagga for BGP support). Today I've noticed a sudden increase in the amount of ether broadcast traffic on the network. This seems to boil down to the rate the router is issuing ARP who-has requests. The machine has a

RE: FW: Curiosity in IPFW/Freebsd bridge. [more] 802.1q VLAN at fault?

2004-12-20 Thread Nickolay A. Kritsky
Hello asegu, This one should work OK. But do not forget to put parent interfaces in up and promisc mode in your rc.conf, otherwise you will not see any vlan-bridging. Sunday, December 19, 2004, 11:33:57 PM, [EMAIL PROTECTED] wrote: abc> Ok, the whole discussion to date led to how VLAN traffic w

Re: double vlans - once again.

2004-12-20 Thread Brooks Davis
On Sat, Dec 18, 2004 at 08:57:58PM +0200, Mihail Balikov wrote: > I have done this 2 years ago for FreeBSD 4-STABLE > > in sys/net/if_vlan.c in vlan_config(), replace > >if (p->if_data.ifi_type != IFT_ETHER) > return EPROTONOSUPPORT; > > with > >if (p->if_data.i

Route-Server

2004-12-20 Thread Giuliano Cardozo Medalha
Hi, Does anyone knows how to create a route-server for BGPv4 peering using freebsd and vlans (802.1q) ? There is some good tutorial about it ? I read something about quagga software !!! This is enough secure ? Its possible to use it for BGP MD-5 authentication ? How can I do that ? thanks a lot Giu

Re: Marvell 88E8001 on sk0 and RELENG_5_3 - big problems

2004-12-20 Thread Christian Brueffer
On Sun, Dec 19, 2004 at 10:55:18PM +0100, Heinz Knocke wrote: > > By the way - do you know if sk(4) driver supports device polling > (man 4 polling)? I know there were some plans > to make it work, but I couldn't found any up2date information. > polling(4) isn't supported yet. I'm not aware of

Re: mem leak in mii ? (fwd)

2004-12-20 Thread Bjoern A. Zeeb
Hi, haven't had any feedback on this Can someone please review? Also answers to the questions would be welcome. Thanks. -- Forwarded message -- Date: Tue, 23 Nov 2004 19:31:10 + (UTC) From: Bjoern A. Zeeb <[EMAIL PROTECTED]> To: John Baldwin <[EMAIL PROTECTED]> Cc: Bjoer

Current problem reports assigned to you

2004-12-20 Thread FreeBSD bugmaster
Current FreeBSD problem reports Critical problems Serious problems S Submitted Tracker Resp. Description --- o [2002/07/26] kern/41007 net overfull traffic on third and fourth adap o [2003/10/14] kern