Unexpected behaviors connectivity FreeBSD

2007-08-13 Thread Luca Da Col
We have a FreeBSD 6.2 System connected to our DMZ used to store periodical informations about our network. FreeBSD is showing some unexpected behaviors loosing connectivity with other boxes in the network. Problem is completely aleatory and can affect any box. However rest of boxes are completely r

Re: Very high wide area TCP tuning

2007-08-13 Thread Isaac Kohen
I've sent several messages to "[EMAIL PROTECTED]" and I'm still receiving messages. How do I stop this? On 8/13/07, Lawrence Stewart <[EMAIL PROTECTED]> wrote: > > Hi Kevin, > > Kevin Oberman wrote: > > I am attempting to use a FreeBSD box with either a Myricom or Chelsio > > 10GE card to generate

Re: Very high wide area TCP tuning

2007-08-13 Thread Lawrence Stewart
Hi Kevin, Kevin Oberman wrote: I am attempting to use a FreeBSD box with either a Myricom or Chelsio 10GE card to generate very large TCP streams over cross-country links. The RTT for the test path is 94 ms. It is dedicated to my testing at this time, so I have no contention other than a few KB

Re: An ISN(initial sequence number) bug?

2007-08-13 Thread Don Lewis
On 13 Aug, Huang, Yusheng wrote: > Hi, > > > > I think there is a bug in the tcp_isn_tick() function. > > > >1477 static void > >1478 tcp_isn_tick(xtp) > >1479 void *xtp; > >1480 { > >1481 u_int32_t projected_offset; > >1482 > >1483 INP_INFO_WL

An ISN(initial sequence number) bug?

2007-08-13 Thread Huang, Yusheng
Hi, I think there is a bug in the tcp_isn_tick() function. 1477 static void 1478 tcp_isn_tick(xtp) 1479 void *xtp; 1480 { 1481 u_int32_t projected_offset; 1482 1483 INP_INFO_WLOCK(&tcbinfo); 1484 projected_offset = isn_offset_old + ISN_BYTES_P

Re: proxy-arp

2007-08-13 Thread Chuck Swiger
On Aug 13, 2007, at 12:19 PM, Jon Otterholm wrote: This is a problem because some clients interpret this as an ip- address conflict. Are you sure that your router is issuing the ARPOP_REQUESTS? Is the entry you've published already listed in "arp -a"? Yes, the entry is already listed as an st

Re: proxy-arp

2007-08-13 Thread Jon Otterholm
Chuck Swiger wrote: On Aug 13, 2007, at 7:34 AM, Jon Otterholm wrote: I have a problem with proxy-arp entries. If I add an arp-entry: arp -s $hostip $routermac permanent pub only the router sends an arp and replies to it's own arp like: 15:40:02.074419 arp who-has $hostip tell $hostip 15:40:

Re: proxy-arp

2007-08-13 Thread Chuck Swiger
On Aug 13, 2007, at 7:34 AM, Jon Otterholm wrote: I have a problem with proxy-arp entries. If I add an arp-entry: arp -s $hostip $routermac permanent pub only the router sends an arp and replies to it's own arp like: 15:40:02.074419 arp who-has $hostip tell $hostip 15:40:02.074663 arp reply $

Very high wide area TCP tuning

2007-08-13 Thread Kevin Oberman
I am attempting to use a FreeBSD box with either a Myricom or Chelsio 10GE card to generate very large TCP streams over cross-country links. The RTT for the test path is 94 ms. It is dedicated to my testing at this time, so I have no contention other than a few KB of routing updates. Clearly, I ne

Re: ng_nat connected to ng_ether not working?

2007-08-13 Thread Julian Elischer
Julian Elischer wrote: Rajkumar S wrote: Hi, I am trying to connect an ng_nat node between ng_ether:upper and ng_ether:lower so that all packets traversing via ng_ether node gets nat'd. But it does not seems to be working. I am using the follwoing commands to connect rl1: and ng_nat ngctl mkp

Re: ng_nat connected to ng_ether not working?

2007-08-13 Thread Julian Elischer
Rajkumar S wrote: Hi, I am trying to connect an ng_nat node between ng_ether:upper and ng_ether:lower so that all packets traversing via ng_ether node gets nat'd. But it does not seems to be working. I am using the follwoing commands to connect rl1: and ng_nat ngctl mkpeer rl1: nat upper out n

proxy-arp

2007-08-13 Thread Jon Otterholm
Hi. I have a problem with proxy-arp entries. If I add an arp-entry: arp -s $hostip $routermac permanent pub only the router sends an arp and replies to it's own arp like: 15:40:02.074419 arp who-has $hostip tell $hostip 15:40:02.074663 arp reply $hostip is-at $routermac (oui Unknown) This is

Current problem reports assigned to you

2007-08-13 Thread FreeBSD bugmaster
Current FreeBSD problem reports Critical problems S Tracker Resp. Description o kern/115360 net[ipv6] IPv6 address and if_bridge don't play well toge 1 problem total. Serious problems S Tracker

Re: pf rdr statement & ipsec processing interaction

2007-08-13 Thread Eric Masson
"Bjoern A. Zeeb" <[EMAIL PROTECTED]> writes: Hi Bjoern, > this is expected behavior. Fine, > You want to read about the IPSEC_FILTERTUNNEL (fka. IPSEC_FILTERGIF) > kernel option and enc(4). Ok, thanks for your help Regards Éric Masson -- DP>à partir de quand n'est-on plus un neuneu? est-c

Re: pf rdr statement & ipsec processing interaction

2007-08-13 Thread Bjoern A. Zeeb
On Mon, 13 Aug 2007, Eric Masson wrote: Hello, I'm trying to setup a FreeBSD 6.2 box as l2tp/ipsec server for MS workstations (FAST_IPSEC + Yvan's NAT-T patch) Thanks to mpd4, the l2tp part works fine, as the box could in fine have only a dynamic ip address, I've made mpd listen on a loopback

ng_nat connected to ng_ether not working?

2007-08-13 Thread Rajkumar S
Hi, I am trying to connect an ng_nat node between ng_ether:upper and ng_ether:lower so that all packets traversing via ng_ether node gets nat'd. But it does not seems to be working. I am using the follwoing commands to connect rl1: and ng_nat ngctl mkpeer rl1: nat upper out ngctl name rl1:upper

tcp connection b/w two modules using tap devices.

2007-08-13 Thread rajneesh rana
i am writing two modules on same machine which interacts with each other through tcp connection using two taps: tap1 tap2 with IP address of class C. Both taps are connected to bridge. Module1 opens a client tcp socket, bind that socket to tap1 and write to socket with destination IP of tap2. Modu

pf rdr statement & ipsec processing interaction

2007-08-13 Thread Eric Masson
Hello, I'm trying to setup a FreeBSD 6.2 box as l2tp/ipsec server for MS workstations (FAST_IPSEC + Yvan's NAT-T patch) Thanks to mpd4, the l2tp part works fine, as the box could in fine have only a dynamic ip address, I've made mpd listen on a loopback interface on the box and then redirected in