Re: ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-08 Thread Goran Gajic
, 8 Mar 2005, [UTF-8] Å~Aukasz Bromirski wrote: Goran Gajic wrote: Actually I was interested if Dual Opteron with FBSD5.3 can compare with Cisco7206 with NPE-G1 running only for NAT You'll need good motherboard, NICs, 1-2GB of RAM and quite capable CPU. Two won't help much, but som

Re: multiple uplinks from ISP

2005-03-08 Thread Goran Gajic
Hi, I have used succesfuly FBSD 5.2.1 as BGP router and it is rock stable with quagga (check out www.quagga.net) - more stable then 30k $ Cisco 7206 :)) Problem is if you have AS and LIR and if you don't there are other solutions. Of course much depends is your uplink ISP willing to cooperate.

Re: ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-08 Thread Goran Gajic
with #define LARGE_NAT but so far I have tested it - only on few machines on local LAN and it works fine and I'm sure I will try it on live network with high traffic load :) Regards, gg. On Tue, 8 Mar 2005, David O'Brien wrote: On Tue, Mar 08, 2005 at 03:12:22PM +0100, Goran Gajic

Re: ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-08 Thread Goran Gajic
Here is diff that makes ipfilter 4.1.6 able to compile on amd64 as kernel option IPFILTER: --- ip_frag.c Tue Mar 8 13:51:04 2005 +++ ip_frag.c Tue Mar 8 14:53:46 2005 @@ -391,7 +398,7 @@ WRITE_ENTER(&ipf_ipidfrag); fra = ipfr_newfrag(fin, 0, ipfr_ipidtab); if (fra !=

ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-07 Thread Goran Gajic
AT) it had poor performance. (it could handle something like 12 connections although vaules in ip_nat.h were much greater, maybe I have missed some other parameters?). Machine has two broadcom NICs so I don't think that is problem, can someone advise what to do to?