Re: parallelizing ipfw table

2005-11-27 Thread Ruslan Ermilov
On Sun, Nov 27, 2005 at 10:59:14PM +0300, Gleb Smirnoff wrote: > Ruslan, > > On Sun, Nov 27, 2005 at 09:45:45PM +0200, Ruslan Ermilov wrote: > R> Nope, I need this caching. It's for looking up the same table > R> several times in a row but with various values. For example, > R> we use ipfw tab

Re: proposal: TCP rendevous

2005-11-27 Thread Daniel Hartmeier
On Sun, Nov 27, 2005 at 02:21:02PM -0800, Julian Elischer wrote: > yes, which means it might unexpectedly fail. I don't see how it can be done with TCP, assuming both peers are behind NATing firewalls (like pf). Some tricks to consider are: Let one peer send a SYN through the firewall towards t

Re: proposal: TCP rendevous

2005-11-27 Thread Julian Elischer
Brian Candler wrote: On Sat, Nov 26, 2005 at 10:18:49PM -0800, Julian Elischer wrote: In this world of P2P apps it would be neat to have a way that two P2P apps could attach to each other even though each is through a firewall. Most firewalls only allow "outgoing" connections. It would of

Re: proposal: TCP rendevous

2005-11-27 Thread Brian Candler
On Sat, Nov 26, 2005 at 10:18:49PM -0800, Julian Elischer wrote: > In this world of P2P apps it would be neat to have a way that two P2P apps > could attach to each other even though each is through a firewall. Most > firewalls only allow > "outgoing" connections. > > It would of course be possib

Re: parallelizing ipfw table

2005-11-27 Thread Julian Elischer
Gleb Smirnoff wrote: On Sun, Nov 27, 2005 at 03:59:43AM +0300, Gleb Smirnoff wrote: T> A patch displaying the idea is attached. Not tested yet, read T> below. The patch moves the tables array into the ip_fw_chain T> structure. This is not necessary now, but in future we can T> have multiple inde

Re: parallelizing ipfw table

2005-11-27 Thread Mihail Balikov
I have made small patch to cache results per "table" and this caching gives me about 92% hit ratio with a lot of session. - Original Message - From: "Ruslan Ermilov" <[EMAIL PROTECTED]> To: "Gleb Smirnoff" <[EMAIL PROTECTED]> Cc: "Vsevolod Lobko" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>;

Re: parallelizing ipfw table

2005-11-27 Thread Gleb Smirnoff
Ruslan, On Sun, Nov 27, 2005 at 09:45:45PM +0200, Ruslan Ermilov wrote: R> Nope, I need this caching. It's for looking up the same table R> several times in a row but with various values. For example, R> we use ipfw tables to route the traffic to the correct dummynet R> pipe, where value is th

Re: parallelizing ipfw table

2005-11-27 Thread Ruslan Ermilov
On Sun, Nov 27, 2005 at 04:55:29PM +0300, Gleb Smirnoff wrote: > On Sun, Nov 27, 2005 at 03:59:43AM +0300, Gleb Smirnoff wrote: > T> A patch displaying the idea is attached. Not tested yet, read > T> below. The patch moves the tables array into the ip_fw_chain > T> structure. This is not necessary

Re: Configure wireless connection using Cisco aironet 350

2005-11-27 Thread Imrani
I don't have any netstart-home.sh under /root directory. Moreover I dont' want IPv6 and its not something I expect. With regards to bringing up network, problem is network doesn't work and this is what I did: 1) edited /etc/rc.conf and add following line: ifconfig_an0="DHCP" 2) T

if_bridge not working with second interface

2005-11-27 Thread Özkan KIRIK
Hi, i am trying to bridge two interfaces via if_bridge. i built a new kernel that includes "device if_bridge" line. my physical interfaces are fxp0 and fxp1 bridge0 works with fxp0, but it doesnt work with fxp1 i tried configurations below: Note: fxp0 and fxp1 doesnt have ip adress # ifconfig

Re: parallelizing ipfw table

2005-11-27 Thread Gleb Smirnoff
On Sun, Nov 27, 2005 at 03:59:43AM +0300, Gleb Smirnoff wrote: T> A patch displaying the idea is attached. Not tested yet, read T> below. The patch moves the tables array into the ip_fw_chain T> structure. This is not necessary now, but in future we can T> have multiple independent chains in ipfw,

Re: Configure wireless connection using Cisco aironet 350

2005-11-27 Thread Giorgos Keramidas
On 2005-11-26 23:58, Imrani <[EMAIL PROTECTED]> wrote: > Hi, > I am trying to configure Cisco Aironet 350 wireless PCI card but I get > an error which I am unable to find much details for that. Following is > description of ifconfing: > > > ifconfig an0 > an0: flags=8843 mtu 1500 > inet

Re: proposal: TCP rendevous

2005-11-27 Thread Paweł Małachowski
On Sat, Nov 26, 2005 at 10:18:49PM -0800, Julian Elischer wrote: > I'm still thinking about connecting systems separated by NAT however. > that's a trickier problem. you still need to use outgoing connections but > no-one who is not in the path can not tell what the NAT'd packets looke > like. B

Configure wireless connection using Cisco aironet 350

2005-11-27 Thread Imrani
Hi, I am trying to configure Cisco Aironet 350 wireless PCI card but I get an error which I am unable to find much details for that. Following is description of ifconfing: > ifconfig an0 an0: flags=8843 mtu 1500 inet6 fe80::209:7cff:fe22:6eab%an0 prefixlen 64 scopeid 0x2