Multiple routing tables (setfib) trouble

2008-09-22 Thread Igor R
Hello! I'm using FreeBSD 7.0-STABLE (Jul 25) and I have two Internet connections. Both are ethernet based, but one requires PPTP (2) while another is direct with external IP address. Trouble is that provider (1) of connection with external address is limiting number of outgoing TCP connections (

Re: [X-POST] Anyone porting NetworkManager to FreeBSD ?

2008-09-22 Thread Joe Marcus Clarke
On Mon, 2008-09-22 at 11:22 +0530, Ashish Shukla आशीष शुक्ल wrote: > Joe Marcus Clarke writes: > > On Sun, 2008-09-21 at 03:26 +0530, Ashish Shukla आशीष शुक्ल wrote: > >> Hi all, > >> > >> Is there anyone, who is porting NetworkManager[1] to FreeBSD ? If yes, I > >> would like to be a tester or co

Re: Firewall redirect doesn't work any more...

2008-09-22 Thread Max Laier
On Monday 22 September 2008 12:22:09 Pawel Jakub Dawidek wrote: > On Fri, Sep 19, 2008 at 03:38:02PM +0200, Max Laier wrote: > > I might be wrong, but I don't think we ever supported rdr without > > net.inet.ip.forwarding enabled. Maybe to a different local address, but > > even then you'd need ne

Re: Firewall redirect doesn't work any more...

2008-09-22 Thread Julian Elischer
Pawel Jakub Dawidek wrote: And what about ipfw variant? For the first (bridge) case ipfw didn't work at all. No packets were redirected. I haven't tried for the gateway case, because pf works there. ipfw forwarding is disabled for bridge and L2 cases. (I think the man page says so.) At Iro

Re: bridged tap interfaces with stp

2008-09-22 Thread Andrew Thompson
On Mon, Sep 22, 2008 at 05:00:59PM +0300, Sergey Listopad wrote: > Hi! > > I am playing with bridge(4) stp feature. > > there are 2 boxes with 7.0-RELEASE-p4. > > rt1rt2 > ___ ___ > |

Re: Firewall redirect doesn't work any more...

2008-09-22 Thread Pawel Jakub Dawidek
On Mon, Sep 22, 2008 at 06:11:35PM +0400, Roman Kurakin wrote: > Pawel Jakub Dawidek wrote: > >On Mon, Sep 22, 2008 at 05:31:08PM +0400, Roman Kurakin wrote: > > > >>So, could you draw you connections and related firewall rules. And the > >>one you > >>are trying to setup. I will also try to upd

Re: kern/127528: [icmp]: icmp socket receives icmp replies not owned by the process.

2008-09-22 Thread rwatson
Synopsis: [icmp]: icmp socket receives icmp replies not owned by the process. State-Changed-From-To: open->feedback State-Changed-By: rwatson State-Changed-When: Mon Sep 22 14:22:16 UTC 2008 State-Changed-Why: Request feedback based on correspondence to date -- the delivery of ICMP messages to mu

bridged tap interfaces with stp

2008-09-22 Thread Sergey Listopad
Hi! I am playing with bridge(4) stp feature. there are 2 boxes with 7.0-RELEASE-p4. rt1rt2 ___ ___ || || | |tap1| ---

Re: Firewall redirect doesn't work any more...

2008-09-22 Thread Roman Kurakin
Pawel Jakub Dawidek wrote: On Mon, Sep 22, 2008 at 05:31:08PM +0400, Roman Kurakin wrote: So, could you draw you connections and related firewall rules. And the one you are trying to setup. I will also try to update the machine to the most recent 7 to see if my setup will stop working. Curre

Re: Backporting iwn(4): Success!

2008-09-22 Thread Gavin Atkinson
On Sun, 21 Sep 2008, Gavin Atkinson wrote: I'm attempting to backport the iwn(4) driver for the Intel 4965 driver from -HEAD to RELENG_7 and am getting stuck with it at one particular point: WPA authentication times out. As a followup to this, with a bit of help from Sam Leffler, I've now su

Re: Firewall redirect doesn't work any more...

2008-09-22 Thread Pawel Jakub Dawidek
On Mon, Sep 22, 2008 at 05:31:08PM +0400, Roman Kurakin wrote: > So, could you draw you connections and related firewall rules. And the > one you > are trying to setup. I will also try to update the machine to the most > recent 7 to > see if my setup will stop working. Currently machine runs earl

Re: Firewall redirect doesn't work any more...

2008-09-22 Thread Roman Kurakin
Hi, Pawel Jakub Dawidek wrote: On Fri, Sep 19, 2008 at 03:38:02PM +0200, Max Laier wrote: I might be wrong, but I don't think we ever supported rdr without net.inet.ip.forwarding enabled. Maybe to a different local address, but even then you'd need net.inet.ip.check_interface=0. Looking a

Re: kern/127528: [icmp]: icmp socket receives icmp replies not owned by the process.

2008-09-22 Thread Bruce M. Simpson
Chris Buechler wrote: This PR is bogus because: ICMP has no concept of datagrams being "owned" by a process. There is no field in the ICMP protocol which differentiates ICMP "sessions" on a per-process basis, and this is because ICMP has no concept of "sessions" -- ICMP messages are directed

Current problem reports assigned to freebsd-net@FreeBSD.org

2008-09-22 Thread FreeBSD bugmaster
Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker

Re: kern/127528: [icmp]: icmp socket receives icmp replies not owned by the process.

2008-09-22 Thread Robert Watson
The following reply was made to PR kern/127528; it has been noted by GNATS. From: Robert Watson <[EMAIL PROTECTED]> To: Chris Buechler <[EMAIL PROTECTED]> Cc: freebsd-net@FreeBSD.org, [EMAIL PROTECTED], "Bruce M. Simpson" <[EMAIL PROTECTED]>, [EMAIL PROTECTED] Subject: Re: kern/127528: [ic

Re: Firewall redirect doesn't work any more...

2008-09-22 Thread Pawel Jakub Dawidek
On Fri, Sep 19, 2008 at 03:38:02PM +0200, Max Laier wrote: > I might be wrong, but I don't think we ever supported rdr without > net.inet.ip.forwarding enabled. Maybe to a different local address, but even > then you'd need net.inet.ip.check_interface=0. Looking at the code, I don't > see wher

Re: kern/127528: [icmp]: icmp socket receives icmp replies not owned by the process.

2008-09-22 Thread Robert Watson
On Sun, 21 Sep 2008, Chris Buechler wrote: This PR is bogus because: ICMP has no concept of datagrams being "owned" by a process. There is no field in the ICMP protocol which differentiates ICMP "sessions" on a per-process basis, and this is because ICMP has no concept of "sessions" -- ICMP me