Re: addition to ipfw..

2006-12-16 Thread Julian Elischer
Andre Oppermann wrote: Max Laier wrote: I don't like the implementation for this reason. It feels hackish to me. What is the reason that you didn't duplicate the ethernet header approach in ip_fw_pfil.c? Speed? Did you measure? It is certainly easier to properly strip off the vlan header

Re: addition to ipfw..

2006-12-16 Thread Julian Elischer
Max Laier wrote: On Friday 15 December 2006 22:20, Julian Elischer wrote: Max, further to your comment.. Max Laier wrote: On Monday 11 December 2006 23:58, Julian Elischer wrote: Andre Oppermann wrote: Julian Elischer wrote: in ipfw layer 2 processing, the packet is passed to the firewall a

ppp have bug in CCP negotiation?

2006-12-16 Thread Alexander Motin
Hi. While debugging ccp support in mpd I have found strange behaviour in ppp daemon. In rfc1962 written: Configuration Options, in this protocol, indicate algorithms that the receiver is willing or able to use to decompress data sent by the sender. But when ppp negotiates different co

Will this Stock be a "Super Nova?"

2006-12-16 Thread Susanne Henson
Are You a Savvy Investor? The SmallCap Journal Presents: Under the Radar Equity _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ investor break Apparel Manufacturing Associates, Inc. OTC Platinum Report Symbol OTC : APPM Current Price : $0.06 hey traders dont miss this one Huge news exp

UDP lite for FreeBSD

2006-12-16 Thread dave jones
Hi, Is anyone working on implementing UDP lite in FreeBSD? If not, I'd like to work on it. BR, Dave. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: jail addresses and default bindings

2006-12-16 Thread Bjoern A. Zeeb
On Sat, 16 Dec 2006, Gergely CZUCZY wrote: Hi, whenever i try to connect to a port of a jail from the host system, the kernel automaticly assigns the jail's IP address as the source address to the socket. I'd assume that this is not a so welcomed behaviour, because it is because that's the w

Re: Runtime control for the IPFIREWALL_FORWARD

2006-12-16 Thread Andrey V. Elsukov
>Andrey V. Elsukov wrote: >This introduces quite a bit of extra code into the path of IP packets. Yes, it will add a few extra checks like a "if (pfil_forward_enabled) {...}" >Some people are very sensitive about anything that slows down that path. I can introduce a new kernel option - NO_PFIL_F

jail addresses and default bindings

2006-12-16 Thread Gergely CZUCZY
hello today i've meet a behaviour, that can be an issue. i have an lo1 interface with 7 jail addresses as 192.168.0.0/24, where jails have addresses from .1-.7 and there is an address for the host system, that's .14 whenever i try to connect to a port of a jail from the host system, the kernel au

Re: addition to ipfw..

2006-12-16 Thread Andre Oppermann
Max Laier wrote: I don't like the implementation for this reason. It feels hackish to me. What is the reason that you didn't duplicate the ethernet header approach in ip_fw_pfil.c? Speed? Did you measure? It is certainly easier to properly strip off the vlan header in the pfil hook code an