Re: [CFT] multiple FIB support in route(8)

2012-02-05 Thread Miroslav Lachman
Andrey Zonov wrote: Hi, What do you think about adding fib support for rc.subr like we got one for nice? There are PRs with patches for rc.subr for a long time without attention. Same as with PR's adding suport for cpuset. I don't understand why we are having some really useful tools in base

Re: [CFT] multiple FIB support in route(8)

2012-02-05 Thread Andrey Zonov
Hi, What do you think about adding fib support for rc.subr like we got one for nice? On 04.02.2012 22:35, Hiroki Sato wrote: Hello, Can anyone review/test the attached patch to add "-fib number" option to route(8)? This should simplify static route configuration across multiple FIBs i

Multicast BIND error in jail

2012-02-05 Thread Matej Kurpel
Hello all, I have problems running programs that need to receive multicast traffic from the network in a jailed environment. For example, a program udpxy I wanted to use, says: "setup_mcast_listener: bind: Can't assign requested address". This looks like jail restriction. Unfortunately, I have n

Re: HowTo easy use IPFW

2012-02-05 Thread Eitan Adler
On Sun, Feb 5, 2012 at 7:05 AM, Bill Tillman wrote: > The only truly safe firewall ruleset consists of one rule and that is: > >  deny all from any to any This ruleset is potentially a denial of service attack if the system is intended to do certain useful things. You can't talk about "only truly

Re: HowTo easy use IPFW

2012-02-05 Thread Коньков Евгений
Здравствуйте, Bill. Вы писали 5 февраля 2012 г., 14:05:13: BT> From: Julian Elischer BT> To: Коньков Евгений BT> Cc: freebsd-net@freebsd.org; freebsd-questi...@freebsd.org BT> Sent: Sunday, February 5, 2012 2:15 AM BT> Subject: Re: HowTo easy use IPFW BT> On 2/4/12 10:53 PM, Julian Elisch

Re: HowTo easy use IPFW

2012-02-05 Thread Bill Tillman
From: Julian Elischer To: Коньков Евгений Cc: freebsd-net@freebsd.org; freebsd-questi...@freebsd.org Sent: Sunday, February 5, 2012 2:15 AM Subject: Re: HowTo easy use IPFW On 2/4/12 10:53 PM, Julian Elischer wrote: > On 2/2/12 1:33 AM, Коньков Евгений wrote: >> this is the mine script whic

Re: HowTo easy use IPFW

2012-02-05 Thread Коньков Евгений
Здравствуйте, Julian. Вы писали 5 февраля 2012 г., 9:15:35: JE> On 2/4/12 10:53 PM, Julian Elischer wrote: >> On 2/2/12 1:33 AM, Коньков Евгений wrote: >>> this is the mine script which helps me keep my firewall very clean >>> and safe. >>> >>> It is easy to understand even if you have a thousan