Re: pxeboot is very slow on servers sending gratuitous ARP probably caused by commit r317887

2020-06-18 Thread Andreas Longwitz
ption for this but only for the case when the program handles the interrupt of the PIC. But we do not have assembler coding for doing this. It would be fine if somebody can point me to a documentation of the PXENV_UNDI_ISR API used in pxe_netif_receive(). Andreas Longwitz __

pxeboot is very slow on servers sending gratuitous ARP probably caused by commit r317887

2020-06-11 Thread Andreas Longwitz
nothing to filter the ARP's. Andreas Longwitz ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: natd sends wrong sequence number when a retransmitted PASV packet comes in

2018-08-11 Thread Andreas Longwitz
+ i--; x = lnk->data.tcp->ack[i]; if (x.active == 1) { int seq_diff; Please can somebody review this patch. I am not sure if the same modification should also be done in the function GetDeltaAckIn(). -- Andreas Longwitz ___

natd sends wrong sequence number when a retransmitted PASV packet comes in

2018-08-08 Thread Andreas Longwitz
slen=50, delta=5, seq=4a4a5ecb, ip_len=98, new_len=102, index=2 Andreas Longwitz ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: Changed behaviour of pf after new handling of EACCES in tcp_output() in r315514

2018-04-17 Thread Andreas Longwitz
rs. It seems to me that this does not make a big difference, but maybe I am wrong. Do you plan to commit your patch ? Andreas Longwitz ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Changed behaviour of pf after new handling of EACCES in tcp_output() in r315514

2018-04-17 Thread Andreas Longwitz
st Di. 17 Apr. 2018 10:47:43 CEST I like to know if this is intended behaviour. Andreas Longwitz ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: loopback routes pinned by commit r326012 for FreeBSD 10 cannot be deleted

2018-02-24 Thread Andreas Longwitz
13UH lo0 192.168.0.0/24 link#1 U em0 192.168.0.114 link#1 UHS lo0 Andreas Longwitz ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: loopback routes pinned by commit r326012 for FreeBSD 10 cannot be deleted

2018-02-24 Thread Andreas Longwitz
route, tested on FreeBSD 10 r328260. But deleting the loopback route manually does not work anymore, is this intended behaviour ? I would like to control the routing table as much as possible. Andreas Longwitz ___ freebsd-net@freebsd.org mailing list

loopback routes pinned by commit r326012 for FreeBSD 10 cannot be deleted

2018-02-23 Thread Andreas Longwitz
UH 0 6366lo0 Also the loopback route can not be deleted manually: route delete 10.0.0.100 --> route: writing to routing socket: Address already in use delete host 10.0.0.100 fib 0: gateway uses the same route -- Andreas Longwitz ___

Re: pf not seeing inbound packets coming from IPSec on epair interface

2016-01-18 Thread Andreas Longwitz
e example is mentioned in lists.freebsd.org/pipermail/freebsd-net/2012-January/031161.html for Clients using a VPN with L2TP over IPSec (racoon + mpd5). Dr. Andreas Longwitz Data Service GmbH Beethovenstr. 2A 23617 Stockelsdorf Amtsgericht Lübeck,

pf not seeing inbound packets coming from IPSec on epair interface

2016-01-18 Thread Andreas Longwitz
cleared by the epair driver when he transfers a packet from epair0a ro epair0b. -- Dr. Andreas Longwitz Data Service GmbH Beethovenstr. 2A 23617 Stockelsdorf Amtsgericht Lübeck, HRB 318 BS Geschäftsführer: Wilfried Paepcke, Dr. Andreas Longwitz, Josef Flatau

Support for IPSec VPN's with XAuth (tunnel mode) and L2TP (transport mode)

2014-05-23 Thread Andreas Longwitz
status=2 fi ;; 2) if [ "${param1}" = "allocated:" ]; then status=0 if [ "${param2}" = "0" -a "${dir}" = "outbound" ]; then SA_remote_port=${port}; SA_nat=${nat} fi fi ;;

Re: sis(4) flow control

2013-07-14 Thread Andreas Longwitz
y realize to use my laptop with msk(4) as a link partner for my soekris box with vr(4). -- Dr. Andreas Longwitz ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: sis(4) flow control

2013-07-13 Thread Andreas Longwitz
msk0" gives always media: Ethernet autoselect (1000baseT ) Maybe there is a bug in vr(4) that generates the hang, but why is negotiation of flowcontrol on vr(4) not done at boot time as shown for msk(4) ? If you need more information about the hang let me know. -- Andreas Longwitz

Re: sis(4) flow control

2013-07-10 Thread Andreas Longwitz
respect incoming RX pause frames from the line. I do not need TX flow-control. > Try attached patch and let me know how it works. Thanks for your patch. I will test it on next update of my soekris boxes with sis interfaces. Because they are all remote far away this will need some

sis(4) flow control

2013-07-09 Thread Andreas Longwitz
s */ Other network drivers (eg. vr) have this functionality inside, it would be fine if sis learns flow control too. --- Andreas Longwitz ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, se

Re: ISDN4BSD (HPS version) is going into ports

2012-09-14 Thread Andreas Longwitz
command, but no luck with B-cahnnels. I also tried isdndebug -u 9 -b 0 -p P_HDLC -b 1 -p P_TRANS -b 2 -p P_TRANS and isdndebug -u 9 -b 0 -p P_HDLC -b 1 -p P_TRANS_RING -b 2 -p P_TRANS_RING with the same result: D-channel ok, B-channels give only X'FF'. I am not sure, i

Re: Support for IPSec VPN's: some patches for netipsec/key.c

2012-09-05 Thread Andreas Longwitz
t mode, as there is no >>* port information available in the SP. >>*/ >> - if (saidx1->mode == IPSEC_MODE_TUNNEL && >> + if ((saidx1->mode == IPSEC_MODE_TUNNEL || >> + (saidx1->mode == IPSEC_MODE_TRANSP

Support for IPSec VPN's: some patches for netipsec/key.c

2012-09-05 Thread Andreas Longwitz
correct SA for outgoing packets. I do not know what would be the best place to store these informations. Any suggestions ? At the end a question: At the beginning of ip_ipsec_output() in ip_ipsec.c the flag PACKET_TAG_IPSEC_PENDING_TDB is used, but I can not find the place where this flag is s

Re: kern/169620: [ng] [pf] ng_l2tp incoming packet bypass pf firewall

2012-08-02 Thread Andreas Longwitz
The following reply was made to PR kern/169620; it has been noted by GNATS. From: Andreas Longwitz To: bug-follo...@freebsd.org, has...@meridiani.jp Cc: Subject: Re: kern/169620: [ng] [pf] ng_l2tp incoming packet bypass pf firewall Date: Thu, 02 Aug 2012 10:39:20 +0200 Hi, > PF firew

Re: Intel 82550 Pro/100 Ethernet and Microcode

2012-03-27 Thread Andreas Longwitz
gt; problems to handle fragmented UDP datagrams. Ok, your final patch workes as expected, all my fxp's can load microcode and run without hangs od SCB timeouts. I think the PR's kern/103332 and kern/118909 can be closed now. Thank you again for investigate in this p

Re: Intel 82550 Pro/100 Ethernet and Microcode

2012-03-26 Thread Andreas Longwitz
s there are > differences between LOM and non-LOM implementation(Mine is > stand-alone PCI NIC). I would be able to selectively allow > microcode loading after getting compatibility/EEPROM ID word. Thank you for investigating in this p

Re: Intel 82550 Pro/100 Ethernet and Microcode

2012-03-24 Thread Andreas Longwitz
ware and I found versions 3.0.03, 4.0.19 and the newest is 4.2.0.3. But there never was any dependency between the version of the Intel boot Agent software and microcode. For chips on the motherboard (LOM) the tool does not show a version, but booting a server with PXE gives 4.0.17 for the versio

Re: Intel 82550 Pro/100 Ethernet and Microcode

2012-03-18 Thread Andreas Longwitz
v.fxp.0.bundle_max is irrelevant, the i82250C always needs ca. 91000 irq's for the netperf test. The same number of irq's needs the i82250 with bundle_max=1, but when I set bundle_max=6 (the default), then the number of irq's for the same test goes down to 91000/7 = 13000. Regards

Re: Intel 82550 Pro/100 Ethernet and Microcode

2012-03-12 Thread Andreas Longwitz
mode enabled fwvpn kernel: fxp0: Microcode loaded, int_delay: 1000 usec bundle_max: 6 fwvpn kernel: fxp0: SCB timeout: 0x80 0x20 0x90 0x1 fwvpn last message repeated 5 times Regards, Andreas Longwitz ___ freebsd-n

Intel 82550 Pro/100 Ethernet and Microcode

2012-03-08 Thread Andreas Longwitz
lags |= FXP_FLAG_UCODE; + bzero(cbp, (uc->length + 2) * sizeof(uint32_t)); } -- Dr. Andreas Longwitz Data Service GmbH Beethovenstr. 2A 23617 Stockelsdorf Amtsgericht Lübeck, HRB 318 BS Geschäftsführer: Wilfried Paepcke, Dr. Andreas Longwitz, Josef Flatau __

Re: pf not seeing inbound packets on netgraph interface

2012-01-24 Thread Andreas Longwitz
for the l2tp netgraph node does the job and you can use pf on the ng0 interface without any restrections. Regards, -- Dr. Andreas Longwitz Data Service GmbH Beethovenstr. 2A 23617 Stockelsdorf Amtsgericht Lübeck, HRB 318 BS Geschäftsführer: Wilfried Paepcke, Dr. Andreas Longwitz,