panic in sbdrop_locked

2006-01-27 Thread Meno Abels
Hello, i have two boxes running currently freebsd-6.0-p3 i386 and they are panic around every 24 hour once a time. I just update to -p4 so i will see if it working better. I also didn't have the debug kernel ready so i can only provide this very weak infos: (kgdb) bt #0 0xc06e5b2c in doadump () #

Re: Network client is the same from server

2006-01-27 Thread Tiago Cruz
On Fri, 2006-01-27 at 10:54 -0800, Julian Elischer wrote: > you can use NATD to fix this but you will need to have "mapped" name for > all teh machines on the other nets.. Wol, so is it possible?!?! I'm using FreeBSD 6.0 and OpenVPN 2.0.5-1. I'm not using ipfw, only PF. Is possible to do with p

Re: Network client is the same from server

2006-01-27 Thread Julian Elischer
Tiago Cruz wrote: Hi guys, Have some way, like some "ninjitsu" :) to make the connection that one client that have the same network that us? Exemple: My corporate network: 192.168.0.0/22 My house network: 192.168.0.0.24 Result: VPN don't work, because we have a address conflict. Thanks so mu

Network client is the same from server

2006-01-27 Thread Tiago Cruz
Hi guys, Have some way, like some "ninjitsu" :) to make the connection that one client that have the same network that us? Exemple: My corporate network: 192.168.0.0/22 My house network: 192.168.0.0.24 Result: VPN don't work, because we have a address conflict. Thanks so much! -- Tiago Cruz h

Re: Duplicate SAD entries lead to ESP tunnel malfunction

2006-01-27 Thread Julian Elischer
Oleg Tarasov wrote: Hello, VANHULLEBUS Yvan <[EMAIL PROTECTED]> wrote: net.key.prefered_oldsa, or net.key.preferred_oldsa (changed since 4.X). It is 1 by default, and it should be set to 0 to help better interoperability with lots of peers. This seems quite like corre

Re: sl2tps, MRU, MTU, and MSS

2006-01-27 Thread Bjoern A. Zeeb
On Fri, 27 Jan 2006, Brian Candler wrote: It's a PIX. Perhaps I should draw out the test scenario properly just to make sure to explicitly allow icmp messages needed. I think it was "PixOS" 4->5 when they changed defaults. See for exmaple [1] or several other dozens of similar docs also on c

Re: Named could not listen on UDP socket: permission denied

2006-01-27 Thread Gleb Kozyrev
Oleg Tarasov wrote to on Thu, 26 Jan 2006 17:01:50 +0200: OT> I run FreeBSD 6.0 and I have begun to recieve quite periodic error OT> messages like these: OT> Jan 25 19:45:50 central named[728]: could not listen on UDP socket: permission denied OT> Jan 25 19:45:50 central named[728]: creating I

Re: sl2tps, MRU, MTU, and MSS

2006-01-27 Thread Archie Cobbs
Brian Candler wrote: 1. PPP negotiates an MRU of 1400 2. However, ifconfig ng0 shows an MTU of 1376 (where does that come from?) 3. When the client opens a TCP connection, it offers an MSS of 1360 ...and then fragmentation problems occur, because the remote server sends IP datagrams which are 1

Re: sl2tps, MRU, MTU, and MSS

2006-01-27 Thread Brian Candler
On Fri, Jan 27, 2006 at 08:39:41AM -0600, Archie Cobbs wrote: > Brian Candler wrote: > >>1. PPP negotiates an MRU of 1400 > >>2. However, ifconfig ng0 shows an MTU of 1376 (where does that come from?) > >>3. When the client opens a TCP connection, it offers an MSS of 1360 > > > >...and then fragmen

Re: sl2tps, MRU, MTU, and MSS

2006-01-27 Thread Archie Cobbs
Brian Candler wrote: 1. PPP negotiates an MRU of 1400 2. However, ifconfig ng0 shows an MTU of 1376 (where does that come from?) 3. When the client opens a TCP connection, it offers an MSS of 1360 ...and then fragmentation problems occur, because the remote server sends IP datagrams which are 1

Re: Named could not listen on UDP socket: permission denied

2006-01-27 Thread Brian Candler
On Thu, Jan 26, 2006 at 05:01:50PM +0200, Oleg Tarasov wrote: > I run FreeBSD 6.0 and I have begun to recieve quite periodic error messages > like these: > > Jan 25 19:45:50 central named[728]: could not listen on UDP socket: > permission denied > Jan 25 19:45:50 central named[728]: creating IPv

Re: sl2tps, MRU, MTU, and MSS

2006-01-27 Thread Brian Candler
On Thu, Jan 05, 2006 at 11:04:04AM +, Brian Candler wrote: > I've done a bit more debugging on the MSS problem I'm having with sl2tps > running with IPSEC transport layer security. The client is Windows XP > out-of-the-box. > > Here's what happens: > > 1. PPP negotiates an MRU of 1400 > 2. Ho

Re: VPN when host is not gateway

2006-01-27 Thread Tiago Cruz
On Thu, 2006-01-26 at 23:50 +, Nate Nielsen wrote: > > So, my questions is this: How I make this route? > > I guess either with the 'route' command or by running a routing protocol > like RIP or OSPF. Thank you, but I can do this: I make this route at my FreeBSD gateway: cat /usr/local/etc

Re: Duplicate SAD entries lead to ESP tunnel malfunction

2006-01-27 Thread Oleg Tarasov
Hello, VANHULLEBUS Yvan <[EMAIL PROTECTED]> wrote: > net.key.prefered_oldsa, or net.key.preferred_oldsa (changed since > 4.X). > It is 1 by default, and it should be set to 0 to help better > interoperability with lots of peers. This seems quite like correct solution. I analyzed behavior of

Re: Duplicate SAD entries lead to ESP tunnel malfunction

2006-01-27 Thread VANHULLEBUS Yvan
On Thu, Jan 26, 2006 at 11:51:36AM -0800, Julian Elischer wrote: > Oleg Tarasov wrote: > There is a sysctl that can help this behaviour but I forget which > > something to do with ipsec and oldSAD or newSAD or something.. net.key.prefered_oldsa, or net.key.preferred_oldsa (changed since 4.X). I