Re: ipfw divert with layer2 (if_bridge) packets

2006-05-09 Thread Luigi Rizzo
On Wed, May 10, 2006 at 10:07:10AM +0400, Andrey V. Elsukov wrote: > Julian Elischer wrote: > > I have changes that make it work in 4.x but they will not apply to 5.x > > or later.. > > Luigi also has some changes that allow it.. > > I can try porting an older patches which allow this. > Is there

Re: ipfw divert with layer2 (if_bridge) packets

2006-05-09 Thread Andrey V. Elsukov
Julian Elischer wrote: I have changes that make it work in 4.x but they will not apply to 5.x or later.. Luigi also has some changes that allow it.. I can try porting an older patches which allow this. Is there a chance for including this feature into base system? -- WBR, Andrey V. Elsukov _

Re: vrf support in FreeBSD

2006-05-09 Thread Ray Mihm
Point taken about the globals but layer 3 (IP) and layer 4 (TCP, UDP, etc) aren't modules yet and that shouldn't be a problem right? I'm not trying to trivialize or solve the problem here. But my point is, these shouldn't be show-stoppers when you consider the benefit of having this feature in Fre

Re: nd6_lookup prints bogus messages with point to point devices

2006-05-09 Thread Bruce A. Mah
If memory serves me right, Ed Schouten wrote: > I'm seeing the messages on the machine in Eindhoven (running RELENG_6 > from a few days/weeks ago), but they also show up on my HEAD machine at > home. Below is the output of `ifconfig gif0` on my machine at home: > > | gif0: flags=8051 mtu 1280 > |

Re: vrf support in FreeBSD

2006-05-09 Thread Edward B. DREGER
MO> Date: Tue, 9 May 2006 14:39:25 +0200 MO> From: Milan Obuch MO> > JE> how do you want to select which table should be used? MO> > Ingress interface. MO> MO> Sounds reasonable, one important point missing - packets locally MO> originated/'destinated'. MO> Other than that, fully acceptable. IMN

Re: vrf support in FreeBSD

2006-05-09 Thread Julian Elischer
Ray Mihm wrote: Using ipfw tables is essentially a non-starter, IMHO. How would routing protocols use ipfw based tables, for example? Marko's work touches a lot of files, but I don't think it's heavy weight. I also think using Marko's idea and Jails would allow create the notion of a logical sy

Re: vrf support in FreeBSD

2006-05-09 Thread Ray Mihm
Using ipfw tables is essentially a non-starter, IMHO. How would routing protocols use ipfw based tables, for example? Marko's work touches a lot of files, but I don't think it's heavy weight. I also think using Marko's idea and Jails would allow create the notion of a logical system and multiple

Re: ipfw divert with layer2 (if_bridge) packets

2006-05-09 Thread Andrew Thompson
On Tue, May 09, 2006 at 05:45:02PM -0300, Carlos E Gaspar wrote: > Hi. > > I have the following setup: > > FreeBSD abc5.5-PRERELEASE FreeBSD 5.5-PRERELEASE #0: Wed Apr 26 14:58:22 > BRT 2006 [EMAIL PROTECTED]:/usr/src/sys/alpha/compile/ABC alpha > > bridge0: flags=8043 mtu 1500 >eth

Re: vrf support in FreeBSD

2006-05-09 Thread Julian Elischer
Milan Obuch wrote: On Tuesday 09 May 2006 22:25, Ray Mihm wrote: Can't you just incorporate Marko's work at http://www.tel.fer.hr/zec/BSD/vimage/index.html? The design looks pretty clean too. And, XORP which probably is multiple tables aware, would make FreeBSD a really kick-ass routing plat

Re: ipfw divert with layer2 (if_bridge) packets

2006-05-09 Thread Julian Elischer
Carlos E Gaspar wrote: Hi. I have the following setup: FreeBSD abc5.5-PRERELEASE FreeBSD 5.5-PRERELEASE #0: Wed Apr 26 14:58:22 BRT 2006 [EMAIL PROTECTED]:/usr/src/sys/alpha/compile/ABC alpha bridge0: flags=8043 mtu 1500 ether xx:xx:xx:xx:xx:xx priority 32768 hellotime 2 f

ipfw divert with layer2 (if_bridge) packets

2006-05-09 Thread Carlos E Gaspar
Hi. I have the following setup: FreeBSD abc5.5-PRERELEASE FreeBSD 5.5-PRERELEASE #0: Wed Apr 26 14:58:22 BRT 2006 [EMAIL PROTECTED]:/usr/src/sys/alpha/compile/ABC alpha bridge0: flags=8043 mtu 1500 ether xx:xx:xx:xx:xx:xx priority 32768 hellotime 2 fwddelay 15 maxage 20

Re: vrf support in FreeBSD

2006-05-09 Thread Milan Obuch
On Tuesday 09 May 2006 22:25, Ray Mihm wrote: > Can't you just incorporate Marko's work at > http://www.tel.fer.hr/zec/BSD/vimage/index.html? The design looks > pretty clean too. And, XORP which probably is multiple tables aware, > would make FreeBSD a really kick-ass routing platform. > Unfortuna

Re: vrf support in FreeBSD

2006-05-09 Thread Ray Mihm
Can't you just incorporate Marko's work at http://www.tel.fer.hr/zec/BSD/vimage/index.html? The design looks pretty clean too. And, XORP which probably is multiple tables aware, would make FreeBSD a really kick-ass routing platform. Just my $.02 Ray. On 5/9/06, Julian Elischer <[EMAIL PROTECTED

Re: vrf support in FreeBSD

2006-05-09 Thread Julian Elischer
Milan Obuch wrote: On Tuesday 09 May 2006 06:54, Julian Elischer wrote: Pramod Srinivasan wrote: Hi Folks, I am curious to know if there is any plans to support multiple routing tables in FreeBSD's official release? There was some discussion on this topic last year, if there is any v

Re: IPv6 raw socket to send original udp

2006-05-09 Thread gnn
At Mon, 08 May 2006 05:44:51 +0900 (JST), Hideki Yamamoto wrote: > > > Hi, > > I tried to use pf as a traffic shaper for a streaming server, but > it does not work well. Input of pf is bursted packets within around 20 > msec, but is not bursted packets within around 100 msec or longer. > This t

Ask for help!

2006-05-09 Thread Kais Dridi
Hello, I'm Kais DRIDI, an engineering student in telecommunications field. I'm doing my training in the University of Moncton/Canada. I'm looking for some informations (Definitions in general) about VLAN (single and double tagging, translation), Multicast (IGMP proxy, snooping, termination, filteri

Re: IP_MAX_MEMBERSHIPS story.

2006-05-09 Thread Bruce M Simpson
On Tue, May 09, 2006 at 01:28:01PM +0100, Bruce M Simpson wrote: > A user recently reported a problem with running into IP_MAX_MEMBERSHIPS > on a system running FreeBSD with IPv4 forwarding enabled, and running > the OSPF routing protocol. More background. People may be wondering why this is even

Re: vrf support in FreeBSD

2006-05-09 Thread Oliver Fromme
Julian Elischer <[EMAIL PROTECTED]> wrote: > Pramod Srinivasan wrote: > > I am curious to know if there is any plans to support multiple routing > > tables in FreeBSD's official release? > > I am doing some small bits of work on this.. > > how do you want to select which table should be u

Re: vrf support in FreeBSD

2006-05-09 Thread Milan Obuch
On Tuesday 09 May 2006 08:00, Edward B. DREGER wrote: > JE> Date: Mon, 08 May 2006 21:54:18 -0700 > JE> From: Julian Elischer > > JE> how do you want to select which table should be used? > > Ingress interface. > Sounds reasonable, one important point missing - packets locally originated/'destina

IP_MAX_MEMBERSHIPS story.

2006-05-09 Thread Bruce M Simpson
A user recently reported a problem with running into IP_MAX_MEMBERSHIPS on a system running FreeBSD with IPv4 forwarding enabled, and running the OSPF routing protocol. I have been investigating how to address this problem. Background: A raw socket was exceeding the permitted number of group me

Re: IPSEC Interop problem with Cisco using multiple SA's

2006-05-09 Thread VANHULLEBUS Yvan
On Mon, May 08, 2006 at 10:04:29PM -0500, David DeSimone wrote: > Eugene M. Kim <[EMAIL PROTECTED]> wrote: > > > > I haven't tried this myself, but you may want to try using > > "unique:" instead of "require" as the policy level > > After reading up on this behavior, I gave it a try, replacing all