Re: ifconfig won't allow me to change ether address and inet address in the same command

2008-10-21 Thread Christopher Cowart
Eduardo Meyer wrote: > # ifconfig rl0 inet 192.168.2.12 netmask 255.255.255.0 > # ifconfig rl0 ether 00:02:4f:0a:ce:f3 > > I ask you some help, how can I accomplish both tasks with rc_ng? In > /etc/rc.conf Somebody might have a hint for a single ifconfig command, but you can also create the file

Re: erride default ICMP (and other protocols) default replies.

2008-08-21 Thread Christopher Cowart
Javier Ubillos wrote: > Hi freebsd-net. > (Sorry for cross posting. This time I think I found the right forum for > my question) > > I'm implementing a NAT (1 ip - 1 ip) like router. (it's not actually > NAT, but it's a good analogy for this case). > > I have chosen to use pcaplib to pick up the

Re: carp and vlan interfaces recovery issue

2008-05-09 Thread Christopher Cowart
David DeSimone wrote: > Christopher Cowart <[EMAIL PROTECTED]> wrote: > > > > Notice that both carp interfaces are running in "BACKUP" mode on box1, > > even after some period of waiting. I would expect things to return to > > the initial state. >

carp and vlan interfaces recovery issue

2008-05-09 Thread Christopher Cowart
Hello, I have the following configuration: box1:/etc/rc.conf: | ifconfig_bge1="up" | ifconfig_vlan95="inet 10.9.128.2/20 vlan 95 vlandev bge1" | ifconfig_carp15="inet 10.9.128.1/32 vhid 15 pass secret advskew 100" | ifconfig_carp25="inet 10.9.128.1/32 vhid 25 pass secret" box2:/etc/rc.conf: | if

Re: Redirect functionality in ng_nat

2008-04-15 Thread Christopher Cowart
Christopher Cowart wrote: > I'm a little confused on exactly how to pass a struct as a message to a > netgraph node via ngctl. What am I missing here? I found my answer in the comments of src/sys/netgraph/ng_parse.h: | Structures: | | '{' [ = ... ] '}' |

Redirect functionality in ng_nat

2008-04-12 Thread Christopher Cowart
Hello, I'm running a 7.0-RELEASE machine. I've backported the 7-STABLE for ng_nat, because I'm really interested in the static NAT features from libalias. ng_nat(4) says: | NGM_NAT_REDIRECT_ADDR (redirectaddr) | Redirect traffic for public IP address to a machine on the local | network. This

Behavior of `ipfw table n list' in 7.0

2008-03-14 Thread Christopher Cowart
Hello, I've been debugging some scripts for the better part of the hour, and finally figured out what's going on. On 6.2, `ipfw table 3 list' outputs: 169.229.127.61/32 100127061 But on 7.0, `ipfw table 4 list' outputs: 10.9.156.254/32 11.237.178.84 They're different tables with different value

Re: msk driver issues [was: Re: vlan issues with 7.0-RC3]

2008-03-09 Thread Christopher Cowart
On Fri, Mar 07, 2008 at 02:00:04PM +0900, Pyun YongHyeon wrote: >On Sun, Mar 02, 2008 at 07:57:28PM -0800, Christopher Cowart wrote: >> While I have your attention, I am also suffering from a problem that was >> reported to -questions here[1]. About 3 times a day, I'll see the

Load Balancing with CARP

2008-03-06 Thread Christopher Cowart
Hello, I followed the instructions in carp(4) and set up a load balancing and failover configuration on vlan interfaces -- it's working fine (as long as I don't `ifconfig carp25 destroy'...). In order to really make use of this functionality, I need a user land method of figuring out whether a MA

msk driver issues [was: Re: vlan issues with 7.0-RC3]

2008-03-02 Thread Christopher Cowart
On Fri, Feb 29, 2008 at 03:03:53PM +0900, Pyun YongHyeon wrote: > On Wed, Feb 27, 2008 at 06:38:40PM -0800, Christopher Cowart wrote: >>On Tue, Feb 26, 2008 at 04:43:55PM +0900, Pyun YongHyeon wrote: >>>On Mon, Feb 25, 2008 at 01:17:12AM -0800, Christopher Cowart wrote: >

Re: vlan issues with 7.0-RC3

2008-02-27 Thread Christopher Cowart
On Tue, Feb 26, 2008 at 04:43:55PM +0900, Pyun YongHyeon wrote: >On Mon, Feb 25, 2008 at 01:17:12AM -0800, Christopher Cowart wrote: >> Hello, >> >> I have a mac mini running 7.0-RC3, which I'm trying to turn it into a >> router. I have a Linksys SRW2008 &qu

vlan issues with 7.0-RC3

2008-02-25 Thread Christopher Cowart
Hello, I have a mac mini running 7.0-RC3, which I'm trying to turn it into a router. I have a Linksys SRW2008 "fully managed" (via an IE only web interface, ick) switch. Switch: Port 1 - Trunk vlans 10,60,98 - FreeBSD Box Port 7 - Access vlan 98 - Existing LAN (192.168.1.0/24) OpenWRT (192.

Re: VLAN problems

2008-01-30 Thread Christopher Cowart
On Wed, Jan 30, 2008 at 11:56:10AM -0200, Alexandre Biancalana wrote: >On 1/30/08, Andrei Kolu <[EMAIL PROTECTED]> wrote: >>>Alexandre Biancalana wrote: This server is an Dell Power Edge 1950, QuadCore 2.83, 2Gb Ram, one bce gigabit interface connected to a gigabit port of a Cisco 4500 in >

ipfw and netgraph confusion

2007-11-17 Thread Christopher Cowart
Hello, I'm trying to use the ng_nat node on 6.2. I have one set of IP -> ng cookie mappings in tables and a single default mapping for anything that doesn't match the tables. The first case, using tables, is the "Authenticated" case: | /sbin/ipfw add netgraph tablearg all from "table(4)" to any

Re: Large-scale 1-1 NAT

2007-09-24 Thread Christopher Cowart
On Tue, Sep 25, 2007 at 12:44:47AM +0300, Cristian KLEIN wrote: >Christopher Cowart wrote: >> On Mon, Sep 24, 2007 at 11:58:15AM +0300, Cristian KLEIN wrote: >>> Christopher Cowart wrote: >>>> We're working on expanding our wireless network. Unfortunately, we&

Re: Large-scale 1-1 NAT

2007-09-24 Thread Christopher Cowart
On Mon, Sep 24, 2007 at 01:26:13PM +0400, [EMAIL PROTECTED] wrote: > original: >> We're working on expanding our wireless network. Unfortunately, we're >> running out of IP addresses (aren't we all). As much as I'd love to just >> tell everyone to use IPv6, that isn't gonna fly. The next plan to >

Re: Large-scale 1-1 NAT

2007-09-24 Thread Christopher Cowart
On Mon, Sep 24, 2007 at 12:57:19PM +0200, Max Laier wrote: > On Monday 24 September 2007, Cristian KLEIN wrote: > > Christopher Cowart wrote: > > > The real question is: what's the best way to dynamically update the > > > NAT table? > > > > You may use

Re: Large-scale 1-1 NAT

2007-09-24 Thread Christopher Cowart
On Mon, Sep 24, 2007 at 11:58:15AM +0300, Cristian KLEIN wrote: >Christopher Cowart wrote: >>We're working on expanding our wireless network. Unfortunately, we're >>running out of IP addresses (aren't we all). As much as I'd love to just >>tell everyone to

Re: Racoon(ipsec-tools) enters sbwait state or 100% CPU utilization quite often on RELENG_1_2

2007-09-24 Thread Christopher Cowart
On Sat, Aug 18, 2007 at 03:58:16PM -0400, Scott Ullrich wrote: > We have worked around the problem for now with a simple shell script > that looks for racoon falling over and simply restarting it. How are you detecting when racoon gets wedged? I'd like to replicate that on our systems. Thanks,

Large-scale 1-1 NAT

2007-09-24 Thread Christopher Cowart
Hello, We're working on expanding our wireless network. Unfortunately, we're running out of IP addresses (aren't we all). As much as I'd love to just tell everyone to use IPv6, that isn't gonna fly. The next plan to consider is using an RFC1918 pool and NATing the traffic. If only it were that s

Re: Racoon(ipsec-tools) enters sbwait state or 100% CPU utilization quite often on RELENG_1_2

2007-09-24 Thread Christopher Cowart
On Mon, Aug 20, 2007 at 12:43:25PM -0400, Scott Ullrich wrote: > On 8/20/07, VANHULLEBUS Yvan <[EMAIL PROTECTED]> wrote: > > I tracked down the problem a few years ago, on FreeBSD 4.11, with > > KAME's IPSec stack. > > > > But the problem was not really in the stack itself, but rather in > > socket

Re: Routing outbound IP packets on multihomed box

2007-06-15 Thread Christopher Cowart
On Fri, Jun 15, 2007 at 05:35:33PM -0700, Julian Elischer wrote: > Christopher Cowart wrote: > >On Fri, Jun 15, 2007 at 06:30:23PM -0400, Boris Kochergin wrote: > >>Christopher Cowart wrote: > >>>I have a server with two NICs: > >>> > >>>em0:

Re: Routing outbound IP packets on multihomed box

2007-06-15 Thread Christopher Cowart
On Fri, Jun 15, 2007 at 06:30:23PM -0400, Boris Kochergin wrote: > Christopher Cowart wrote: > >I have a server with two NICs: > > > >em0:169.229.79.139/25 > >vlan526:169.229.126.9/24 > > > >The default gateway is 169.229.79.129. The router

Routing outbound IP packets on multihomed box

2007-06-15 Thread Christopher Cowart
Hello, I have a server with two NICs: em0:169.229.79.139/25 vlan526:169.229.126.9/24 The default gateway is 169.229.79.129. The router for the 126 subnet is 169.229.126.1. netstat -rn: | DestinationGatewayFlagsRefs Use Netif Expire | default