Re: Fwd: [PATCH] PF+dummynet

2007-10-30 Thread Cristian KLEIN
Ermal Luçi wrote: > Ok thanks to remko@ for hosting it! > > You can find it here: > http://people.freebsd.org/~remko/patches/dummynet_pf.tar.gz > > Please test and give feedback. I am really interested in your patch and hope that I will soon have time to test it. Meanwhile, I would like to ask

Re: wireless recommendations ...

2007-10-11 Thread Cristian KLEIN
Marc G. Fournier wrote: > > I'm looking to do some consulting on a project that will involve wireless > networks ... since, if it goes forward, I'm going to be the "Unix person", > so, > of course, the unix side will be FreeBSD ... > > ... but, I haven't used wireless at all under FreeBSD ...

Re: FreeBSD as a gigabit router

2007-10-04 Thread Cristian KLEIN
Thank you all for your replies. Kirill Ponazdyr wrote: >> Hi list, >> >> A few days ago I tested whether a FreeBSD 7 box is able to handle Gigabit >> Can anybody point me what the bottleneck of this configuration is? CPU was >> mostly idle and PCIe 1x should carry way more. Or is the experiment >>

FreeBSD as a gigabit router

2007-10-03 Thread Cristian KLEIN
Hi list, A few days ago I tested whether a FreeBSD 7 box is able to handle Gigabit traffic. So I used a Cisco 7600 and added static routes from the router to the box and from the box to the router, so that some packets would loop between the two. Then I externally injected 30Mbps of "ping -f -t 25

Re: Large-scale 1-1 NAT

2007-09-25 Thread Cristian KLEIN
>> There is another thing I wanted to point out. I remember you used the >> words "authentication web page". This made me think you are >> establishing a captive portal, which is not secure at all. If I >> understand well the authpf solution would be secure, except perhaps >> a small delay. You

Re: Large-scale 1-1 NAT

2007-09-24 Thread Cristian KLEIN
Christopher Cowart wrote: > On Mon, Sep 24, 2007 at 11:58:15AM +0300, Cristian KLEIN wrote: >> Christopher Cowart wrote: >>> We're working on expanding our wireless network. Unfortunately, we're >>> running out of IP addresses (aren't we all). As much as

Re: Large-scale 1-1 NAT

2007-09-24 Thread Cristian KLEIN
Hi, Christopher Cowart wrote: > Hello, > > We're working on expanding our wireless network. Unfortunately, we're > running out of IP addresses (aren't we all). As much as I'd love to just > tell everyone to use IPv6, that isn't gonna fly. The next plan to > consider is using an RFC1918 pool and

Re: Firewall and VPN considerations

2007-09-22 Thread Cristian KLEIN
T_IPSEC, and show the use of gif, however I think > this needs to be updated/rewritten. (If I get the time I really feel for > writing an alternative page about IPSEC with FreeBSD and maybe the > result get accepted for inclusion in the handbook.) > -- +--

Re: Quagga as border router

2007-09-20 Thread Cristian KLEIN
Steve Bertrand wrote: >> But OpenBGPD doesn't look like an alternative for you, if you are using >> ipv6 as it only supports ipv4 route distribution (according to man pages) > > IPv6 is an absolute MANDATORY requirement. If a recommendation does not > support IPv6, than it will NOT fit into my env

Re: Wrong order in rc.d (pf and ipv6)

2007-09-18 Thread Cristian KLEIN
Mohacsi Janos wrote: > Hi Henri, > I am not on the list of freebsd-net therefore I send you off list > the answers. FreeBSD-pf team rather reluctant to change the order. I > sent a PR about this a while ago: > http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/113650 > > Solution is use "(if_name)

Re: ICMP issue while multiple interface in the same subnet

2007-09-14 Thread Cristian KLEIN
[EMAIL PROTECTED] wrote: > Hi, > For a special test reason, I must use two hosts and it has two interfaces > to connect each other without any switch or hub. > Host1 Host2 > |-| |-| > | 1 0-0 1 | > | | | | >

Re: kern/112612: [lo] Traffic via additional lo(4) interface shows up on lo0 in bpf(4)

2007-07-16 Thread Cristian KLEIN
The following reply was made to PR kern/112612; it has been noted by GNATS. From: Cristian KLEIN <[EMAIL PROTECTED]> To: [EMAIL PROTECTED], [EMAIL PROTECTED] Cc: Subject: Re: kern/112612: [lo] Traffic via additional lo(4) interface shows up on lo0 in bpf(4) Date: Mon, 16 Jul 2007 17

ftp-proxy broken by recent Firefox

2007-06-20 Thread Cristian KLEIN
Hi everybody, I have a very restrictive NAT gateway. In order to provide outside FTP access, I use FreeBSD 5.4 + PF + ftp-proxy. All clients are transparently redirected to ftp-proxy, and both active and passive mode used to work just fine. Packets are allowed if they are to/from user proxy, so, e

Re: VLANs and routing

2007-06-15 Thread Cristian KLEIN
On Vin, Iunie 15, 2007 7:27 pm, David DeSimone wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > Peter Jeremy <[EMAIL PROTECTED]> wrote: > >> >>> But the (somewhat weird) requirements are that the vlan interface on >>> machine1 shouldn't have assigned IP address, but the second one sh

Re: kern/113548: [dummynet] [patch] system hangs with dummynet queues

2007-06-15 Thread Cristian KLEIN
The following reply was made to PR kern/113548; it has been noted by GNATS. From: Cristian KLEIN <[EMAIL PROTECTED]> To: Alexey Illarionov <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED] Subject: Re: kern/113548: [dummynet] [patch] system hangs with dummynet queues Date: Fri, 15 Jun 2007 10

Re: kern/113548: [dummynet] [patch] system hangs with dummynet queues

2007-06-11 Thread Cristian KLEIN
The following reply was made to PR kern/113548; it has been noted by GNATS. From: Cristian KLEIN <[EMAIL PROTECTED]> To: [EMAIL PROTECTED], [EMAIL PROTECTED] Cc: Subject: Re: kern/113548: [dummynet] [patch] system hangs with dummynet queues Date: Mon, 11 Jun 2007 23:35:21 +0300 I thi

Re: GRE with key

2007-03-27 Thread Cristian KLEIN
Hi, Thank you for your quick reply. Bruce M. Simpson wrote: > Cristian KLEIN wrote: >> Hello everybody, >> >> I am new to FreeBSD kernel hacking, so please excuse my perhaps stupid >> questions. >> >> I would like to add key support to gre(4). I have al

GRE with key

2007-03-26 Thread Cristian KLEIN
Hello everybody, I am new to FreeBSD kernel hacking, so please excuse my perhaps stupid questions. I would like to add key support to gre(4). I have already been able to use gre(4) with a hardcoded key. The single thing remaining to do is to transfer the key from ifconfig(8). The key is an uint32