Re: How do you keep users from stealing other user's ip??

2006-03-23 Thread Eygene Ryabinkin
> One problem which we are experiencing right now is that any user from > private lan can use any ip address he wants. If he boots his computer with a > stolen ip address, the poor owner of that machine(not active at the moment) > will give automatically up his ip address to this user. The same

How do you keep users from stealing other user's ip??

2006-03-23 Thread Mark Jayson Alvarez
Good day, We are trying to reorganize our local area network and I need some tips on how you are managing your own lan... We have a vanilla pc router with interface facing our private lan and interface facing the Internet. One problem which we are experiencing right now is that any use

Re: FreeBSD as a VPN Client Gateway ...

2006-03-23 Thread Eric Masson
VANHULLEBUS Yvan <[EMAIL PROTECTED]> writes: Hi, > nat-t support detection is quite bad actually (and not only with > FreeBSD), as it just detects NAT-T support in kernel includes, not in > compiled kernel. Rhahhh, le boulet, le boulet, le boulet... I forgot to install includes... so config f

Re: How can i detect if a received UDP got fragmented from userland?

2006-03-23 Thread Sten Daniel Sørsdal
Andre Oppermann wrote: Sten Daniel Sørsdal wrote: I am currently working on a udp multicast application written in C for FreeBSD (6.x) For our test cases in many different network types we found that fragmentation poses as a significant problem for quality and reliability. Packets that get frag

Re: lo0 not starting on boot

2006-03-23 Thread Vitaly Bogdanov
On Thu, Mar 23, 2006, Paul Schmehl wrote: > In 6.0 SECURITY, what starts up lo0? It's not starting by default, and > /etc/rc.d/netif has no effect on the interface. I *believe* this is the > cause of a problem I'm having with xinerama, but I can't seem to figure out > how to get the loopback t

Re: lo0 not starting on boot

2006-03-23 Thread Luigi Rizzo
On Thu, Mar 23, 2006 at 01:18:38PM -0800, Brooks Davis wrote: ... > It used to be hard coded. Today we force it to the front of the list > in the network_interfaces=auto case, but don't do anything special with > it in the other case. We could change to code to always make it the > first item in

Re: lo0 not starting on boot

2006-03-23 Thread Brooks Davis
On Thu, Mar 23, 2006 at 12:49:53PM -0800, Luigi Rizzo wrote: > On Thu, Mar 23, 2006 at 02:40:57PM -0600, Paul Schmehl wrote: > ... > > Yes, and I found it. There was a second instance of network_interfaces > > farther down in the /etc/rc.conf file. It only listed the bge0 interface, > > and I'm

Re: lo0 not starting on boot

2006-03-23 Thread Luigi Rizzo
On Thu, Mar 23, 2006 at 02:40:57PM -0600, Paul Schmehl wrote: ... > Yes, and I found it. There was a second instance of network_interfaces > farther down in the /etc/rc.conf file. It only listed the bge0 interface, > and I'm certain it's being installed by a port. I found the same problem i

Re: lo0 not starting on boot

2006-03-23 Thread Paul Schmehl
--On Thursday, March 23, 2006 11:55:34 -0800 Brooks Davis <[EMAIL PROTECTED]> wrote: On Thu, Mar 23, 2006 at 10:07:36AM -0600, Paul Schmehl wrote: In 6.0 SECURITY, what starts up lo0? It's not starting by default, and /etc/rc.d/netif has no effect on the interface. I *believe* this is the ca

net.link.ether.bridge.config effeciency for more then 2 interfaces?

2006-03-23 Thread Andrew Seguin
I'm trying to get a vlan based firewall working, but having a problem with ARP & DHCP not working well (dhcp could be maybe not working well because of ARP) The network is setup: IP: xyz.zyx.xzy.0/24 [ISP router -> ISP Switch] -> firewall ->{vlans-tagged}->layer2 switch->other switches (I don't

Re: lo0 not starting on boot

2006-03-23 Thread Brooks Davis
On Thu, Mar 23, 2006 at 10:07:36AM -0600, Paul Schmehl wrote: > In 6.0 SECURITY, what starts up lo0? It's not starting by default, and > /etc/rc.d/netif has no effect on the interface. I *believe* this is the > cause of a problem I'm having with xinerama, but I can't seem to figure out > how t

Re: FreeBSD as a VPN Client Gateway ...

2006-03-23 Thread Eric Masson
VANHULLEBUS Yvan <[EMAIL PROTECTED]> writes: Hi Yvan, > It should work (I'm compiling it with a modified 6.1-PRERELEASE, but > did not tried for now with just 6.1-PRERELEASE+NAT6T patch). I've forced natt support in the Makefile. > Could you send me the logs ? Asap, I have to make some place o

Re: FreeBSD as a VPN Client Gateway ...

2006-03-23 Thread VANHULLEBUS Yvan
On Thu, Mar 23, 2006 at 05:09:05PM +0100, Eric Masson wrote: > Matthew Grooms <[EMAIL PROTECTED]> writes: [] > > http://ipsec-tools.sf.net/freebsd6-natt.diff > > I tried to compile ipsec-tools with 6.1-PRERELEASE natt patched kernel & > headers and so far, didn't succeed. It should work (I'm

Re: FreeBSD as a VPN Client Gateway ...

2006-03-23 Thread Eric Masson
Matthew Grooms <[EMAIL PROTECTED]> writes: Hi, Nice work. > If you are interested in using NAT-T, you should have a look at > Yvans kernel patch which offers everything but transport > pre-fragmentation support ... > > http://ipsec-tools.sf.net/freebsd6-natt.diff I tried to

lo0 not starting on boot

2006-03-23 Thread Paul Schmehl
In 6.0 SECURITY, what starts up lo0? It's not starting by default, and /etc/rc.d/netif has no effect on the interface. I *believe* this is the cause of a problem I'm having with xinerama, but I can't seem to figure out how to get the loopback to come up on boot. Any help would be appreciated.

Re: FreeBSD as a VPN Client Gateway ...

2006-03-23 Thread David Rhodus
On 3/22/06, Matthew Grooms <[EMAIL PROTECTED]> wrote: > All, > > If anyone would like to use FreeBSD as a VPN gateway but have the > usual Win2K/XP clients to support, here is a free software product that > may be of interest ... > > http://www.shrew.net/download > > The VPN Client was

Re: FreeBSD as a VPN Client Gateway ...

2006-03-23 Thread Bruce M Simpson
On Wed, Mar 22, 2006 at 04:17:23PM -0600, Matthew Grooms wrote: > If you are interested in using NAT-T, you should have a look at > Yvans kernel patch which offers everything but transport > pre-fragmentation support ... This looks cool. This looks very, very cool. Now if only I had free t