RE: Routing problems on VPN servers running FreeBSD 8.0-RELEASE

2010-02-04 Thread Brett Glass
Qing: What about the possibility of going to 7.3-RELEASE? There is a lot that is good about 8.x, but when I build a production system I prefer to use a release that will have extended support. After all, it's awkward to build a production server that will need to be taken down for a major upg

RE: Routing problems on VPN servers running FreeBSD 8.0-RELEASE

2010-02-04 Thread Li, Qing
> > Not since the ARP table and the routing table have been split. > However, the addresses for which the machine is doing proxy ARP do > need to show up there, and they do not. > You described a bug symptom that should have been fixed. The proxy ARP entry should be displayed in the ARP table a

RE: Routing problems on VPN servers running FreeBSD 8.0-RELEASE

2010-02-04 Thread Brett Glass
At 02:35 AM 2/3/2010, Li, Qing wrote: Proxy ARP entries are not installed into the routing table. Not since the ARP table and the routing table have been split. However, the addresses for which the machine is doing proxy ARP do need to show up there, and they do not. I believe I have fixe

Re: Processing IPv6 Router Advertisements

2010-02-04 Thread Fernando Gont
Hello, Jinmei, > Your understanding of what's happening is correct, and it's an > intentional behavior. The relevant part of the source code is the > following snippet of: > http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet6/ip6_input.c?rev=1.81.2.4;content-type=text/plain Thanks so much

Software TKIP group rekeying and phase1 issue

2010-02-04 Thread Bernhard Schmidt
Hi, When hostapd triggers rekeying of the group key, wpa_supplicant successfully sets the correct new key. On first use of the new key tkip_mixing_phase1() should be applied before decrypting any frames, tkip_decrypt() does this as if (iv32 != (u32)(key->wk_keyrsc[tid] >> 16) || !ctx->rx_phase1