Re: dhcpcd(8) into FreeBSD base

2025-06-20 Thread Karl Denninger
ck 'em both in there) -- and if so then perhaps default behavior should be changed. -- Karl Denninger k...@denninger.net /The Market Ticker/ /[S/MIME encrypted email preferred]/ smime.p7s Description: S/MIME Cryptographic Signature

Re: dhcpcd(8) into FreeBSD base

2025-06-19 Thread Karl Denninger
. If THAT is what's making it mad (its seeing reserved address packets that are never routable coming from me) then my turning it off may fix it, but I don't know. -- Karl Denninger k...@denninger.net /The Market Ticker/ /[S/MIME encrypted email preferred]/ smime.p7s Description: S/MIME Cryptographic Signature

Re: dhcpcd(8) into FreeBSD base

2025-06-18 Thread Karl Denninger
On 6/18/2025 21:29, Zhenlei Huang wrote: On Jun 19, 2025, at 6:00 AM, Karl Denninger wrote: Resurrecting an older thread Can you please point me to the thread ? I'd like to gather more context from that. It was under this title; should be in the archives from June of last year

dhcpcd(8) into FreeBSD base

2025-06-18 Thread Karl Denninger
00 Ed Maste wrote --- > On Sun, 7 Aug 2022 at 01:32, Ben woodswoods...@freebsd.org> wrote: > In the previous threads some objections were raised about dhcpcd's > lack of sandboxing (Capsicum / privilege separation), which has since > been addressed. > > I w

Re: mpd5: tun0 always get IPv6 address via SLAAC although not configured

2025-03-17 Thread Karl Denninger
call which can be used to push changes to a DDNS server and since its "one thing instead of two" if you're on dynamic addresses and using DDNS its more-convenient than dealing with it in both the "factory" DHCP software for IPv4 and in dhcp6c for the "6" side. -- Karl Denninger k...@denninger.net /The Market Ticker/ /[S/MIME encrypted email preferred]/ smime.p7s Description: S/MIME Cryptographic Signature

Re: rtadvd(8) How to IPv6 tokenize interface identifier

2025-02-21 Thread Karl Denninger
expected on an immediate basis but the box did come up, did get a delegation and my clients got SLACC addresses as expected so "first blush" it looks good. -- Karl Denninger k...@denninger.net /The Market Ticker/ /[S/MIME encrypted email preferred]/ smime.p7s Description: S/MIME Cryptographic Signature

Re: rtadvd(8) How to IPv6 tokenize interface identifier

2025-02-21 Thread Karl Denninger
On 2/21/2025 14:18, Roy Marples wrote: Aha! On Fri, 21 Feb 2025 18:34:25 + Roy Marples wrote --- > On Fri, 21 Feb 2025 17:49:28 +0000 Karl Denninger wrote --- > > The issue that I had with it not configuring properly on a cold boot, as far as I

Re: rtadvd(8) How to IPv6 tokenize interface identifier

2025-02-21 Thread Karl Denninger
tps://reviews.freebsd.org/D22012 Maybe some FreeBSD comitter could pickup the torch and move things forward? Roy The issue that I had with it not configuring properly on a cold boot, as far as I know, has not been addressed -- unless there are updates since you and I conversed on that point. -- K

Re: IPv6 neighbor flaps for ISP router are occurring frequently

2024-09-16 Thread Karl Denninger
v6ra_autoconf ia_pd 0/::/56 intnet1/42 intnet2/56 Thanks. - Chris -- Karl Denninger k...@denninger.net /The Market Ticker/ /[S/MIME encrypted email preferred]/ OpenPGP_signature.asc Description: OpenPGP digital signature

Re: DHCPv6 IA_PD - how-to

2024-08-02 Thread Karl Denninger
On 7/31/2024 08:00, Karl Denninger wrote: On 7/31/2024 07:10, Roy Marples wrote: Roy Marples On Wed, 31 Jul 2024 03:38:46 +0100 Karl Denninger wrote --- > Starting dhcpcd. > dhcpcd-10.0.8 starting > igb0: link state changed to UP > igb1

Re: DHCPv6 IA_PD - how-to

2024-07-31 Thread Karl Denninger
On 7/31/2024 07:10, Roy Marples wrote: Roy Marples On Wed, 31 Jul 2024 03:38:46 +0100 Karl Denninger wrote --- > Starting dhcpcd. > dhcpcd-10.0.8 starting > igb0: link state changed to UP > igb1: link state changed to UP > no in

Re: DHCPv6 IA_PD - how-to

2024-07-30 Thread Karl Denninger
On 7/30/2024 16:54, Karl Denninger wrote: On 7/30/2024 10:44, Roy Marples wrote: Don't use -T in the real world. It will exit once one address family completes. You probably want the --noconfigure option. Roy Ah, ok. Well, next couple days I cannot screw with the network configur

Re: DHCPv6 IA_PD - how-to

2024-07-30 Thread Karl Denninger
one script" that handles both -- right now, with two programs, I have to deal with both separately as there are things on that box that do have to be reconfigured or at least restarted on an IP address change. -- Karl Denninger k...@denninger.net /The Market Ticker/ /[S/

Re: DHCPv6 IA_PD - how-to

2024-07-30 Thread Karl Denninger
now delayed auth had been obsoleted, thanks for letting me to notice. I'll try dhcpcd instead of dhcp6c. Best Regards, -- Karl Denninger k...@denninger.net /The Market Ticker/ /[S/MIME encrypted email preferred]/ OpenPGP_signature.asc Description: OpenPGP digital signature

Re: Mellanox Connect 10GigE PCI card supported?

2024-07-25 Thread Karl Denninger
Nevermind -- I found an old Bugzila entry on this; the mlx4 driver does not autoload the dependency (mlx4en) kernel module. With that loaded manually it now appears to be working properly. On 7/25/2024 12:45, Karl Denninger wrote: Unable to determine PCI device chain minimum BW -- Karl

Mellanox Connect 10GigE PCI card supported?

2024-07-25 Thread Karl Denninger
solve and neither do the release note or user manual links) Thanks in advance! -- Karl Denninger k...@denninger.net /The Market Ticker/ /[S/MIME encrypted email preferred]/ OpenPGP_signature.asc Description: OpenPGP digital signature

Re: DHCPv6 IA_PD - how-to

2024-07-24 Thread Karl Denninger
On 7/24/2024 04:10, Roy Marples wrote: On Wed, 24 Jul 2024 02:48:15 +0100 Karl Denninger wrote --- > I'd like to replicate this that is currently being sent up via dhcp6c, which is not quite-clear to me from the docs on how to do that.. > # >

Re: DHCPv6 IA_PD - how-to

2024-07-23 Thread Karl Denninger
plicate that in the config file for dhcpcd; I can figure out the script I'm sure, but the base config is not clear to me. -- Karl Denninger k...@denninger.net /The Market Ticker/ /[S/MIME encrypted email preferred]/ OpenPGP_signature.asc Description: OpenPGP digital signature

Re: Dual Stack Issues

2021-04-19 Thread Karl Denninger
uot; I also modify /etc/rtadvd.conf as the default for lifetime is wildly too large and if you don't change it and then the gateway reboots you can be waiting a LONG time before a client behind the gateway will re-validate its IPv6 address and routing information. root@IpGw:/data/karl # mor

Re: accept_rtadv

2021-02-27 Thread Karl Denninger
his; snippet from /etc/rc.conf: # # IPv6 on internal interface, autoconfigure # ifconfig_igb0_ipv6="inet6 accept_rtadv" rtsold_enable="YES" And it does. .         (addresses and options)     status: active     nd6 options=23 -- Karl Denninger k...@denninger.n

Re: replacement of security/ipsec-tools

2020-01-13 Thread Karl Denninger
On 1/13/2020 10:26, Victor Sudakov wrote: > Karl Denninger wrote: > > [dd] > >> Strongswan works fine with Win10 HOWEVER note that Windows 10 until >> somewhat recently (last summer, I believe) and ALL PREVIOUS VERSIONS >> (e.g. Win7, 8, etc.) had a SEVERE problem

Re: replacement of security/ipsec-tools

2020-01-11 Thread Karl Denninger
see what I mean) and StrongSwan will happily allow that.  If you set something even better (e.g. modp2048) and haven't made the registry changes on the client side then a client that hasn't done it with registry changes (whether by Powershell or direct edit) will not be able to connec

Re: Very slow and inconsistent internal network speed (between, VM's on the same host) for FreeBSD 11.0+ as guest on, XCP-ng/XenServer

2019-07-04 Thread Karl Pielorz
--On 04 July 2019 10:59 +0200 Christian M wrote: From my tests I found that 10.4-RELEASE was as fast as you could expect (>10Gbit/s), then something changed in 11.0-RELEASE and carried on and got even worse in 12.0-RELEASE. Would it not be a good idea to begin there (10.4 -> 11.0), and try

Re: Very slow and inconsistent internal network speed (between, VM's on the same host) for FreeBSD 11.0+ as guest on, XCP-ng/XenServer

2019-07-04 Thread Karl Pielorz
nderstand) - it leaves FreeBSD pretty much stuck, at least for some usage cases. Regards, -Karl ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: igb(4) media status incorrect when disconnected

2019-04-18 Thread Karl Denninger
quite-severe incident because it left the external connection completely invisible -- if there had been nobody available on the "inside" to do that manually..... I'm on 12-STABLE r343809 on the specific box in question. -- Karl Denninger k...@denninger.net <mailto:k...@denn

Re: IPv6 issues?

2018-12-10 Thread Karl Denninger
I'm connecting to: [karl@NewFS ~]$ ping6 svn.freebsd.org PING6(56=40+8+8 bytes) 2600:8807:8600:7941:230:48ff:fe9f:1d6 --> 2610:1c1:1:606c::e6a:0 16 bytes from 2610:1c1:1:606c::e6a:0, icmp_seq=0 hlim=54 time=58.461 ms 16 bytes from 2610:1c1:1:606c::e6a:0, icmp_seq=1 hlim=54 time=58.114 m

IPv6 issues?

2018-12-09 Thread Karl Denninger
?" sort of request; what I find especially interesting, however, is that it /always /happens when talking to Project machines for updates whether for packages or SVN, which is why I'm bringing it here. -- Karl Denninger k...@denninger.net <mailto:k...@denninger.net> /The Market Ticker/ /[S/MIME encrypted email preferred]/ smime.p7s Description: S/MIME Cryptographic Signature

Re: Proxy a TCP connection

2018-05-18 Thread Karl
Ipfw's internal nat will do this out of the box. -- Karl   Original Message   From: m...@netfence.it Sent: May 18, 2018 16:29 To: freebsd-net@freebsd.org Subject: Proxy a TCP connection Hello. Let's say I have a router connected to the Internet on one side and to a LAN with priv

Re: IP networking single socket, both IPv4 and V6?

2018-01-04 Thread Karl Denninger
On 1/4/2018 10:32, Lewis Donzis wrote: > On Jan 4, 2018, at 10:17 AM, Karl Denninger wrote: >> I've written a fair bit of code that binds to both Ipv4 and v6 for >> incoming connections, using two sockets (one for each.) >> >> Perusing around the 'net I see

IP networking single socket, both IPv4 and V6?

2018-01-04 Thread Karl Denninger
.ibm.com/support/knowledgecenter/en/ssw_i5_54/rzab6/xacceptboth.htm -- Karl Denninger k...@denninger.net <mailto:k...@denninger.net> /The Market Ticker/ /[S/MIME encrypted email preferred]/ smime.p7s Description: S/MIME Cryptographic Signature

Re: OpenVPN vs IPSec

2017-11-19 Thread Karl Denninger
n purpose. I'd like to ram that up someone's chute out at Microslug, never mind that their default proposals are intentionally insecure (gee, I wonder if someone in the government "asked nicely" for that?)  That's fixable with a bit of registry editing, but the lack of IKEv2 frag support is a killer and has basically forced me to support OpenVPN when there are windows clients around and you have no control (at all) over the networks in the middle between the client and server. -- Karl Denninger k...@denninger.net <mailto:k...@denninger.net> /The Market Ticker/ /[S/MIME encrypted email preferred]/ smime.p7s Description: S/MIME Cryptographic Signature

Re: CARP under 10.3 - can't "ifconfig down" one or more VHIDs?

2017-09-23 Thread Karl Pielorz
tore the skews, push them to a very high value, mark as 'BACKUP' all the VHID's - and something to undo it all again - though actually just removing it might be easier (providing adding it doesn't cause a moment of "I'm MASTER, uh, no, I'm BACKUP"). -K

CARP under 10.3 - can't "ifconfig down" one or more VHIDs?

2017-09-22 Thread Karl Pielorz
;re taking services down, and don't want the host to 'accidentally' pickup stray CARP vhid's from other boxes (because there's no service running). Thanks, -Karl ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: Enable 802.11 debug at boot

2017-07-28 Thread Karl Denninger
e the > network starts? Of is there a better way? > > Thanks! I am seeing the same behavior with an X220 Thinkpad with (what I believe is) the same Centrino (a/b/g capable) WiFi card. It works /most of the time /eventually, but often will cycle two or three times before it finally

Ipv6 / DNS questions

2017-06-01 Thread Karl Denninger
implify the IPv4 gameplaying that's necessary to have something behind a gateway router while on a "globally visible", but possibly changing "at whim", IpV6 address. I assume someone has gone after this issue by now so if there's "prior art" a pointer would

Re: Possible -HEAD problem with the Pi3 onboard ethernet

2017-05-12 Thread Karl Denninger
omeone can confirm it's working properly on other architectures but not on ARM.) On 5/12/2017 12:45, Karl Denninger wrote: > Under fairly heavy stress (~50% of the 100Mbps possible FDX performance) > I've now run into a problem that is turning into something I can repeat >

Re: Small socket programming question

2017-04-17 Thread Karl Denninger
ot; outcome for that involuntary situation. But in the event that a local process *would* cause a buffer overrun the kernel will instead return an error to the calling process and *not* toss the data on the floor. -- Karl Denninger k...@denninger.net <mailto:k...@denninger.net> /The Market Ticker/ /[S/MIME encrypted email preferred]/ smime.p7s Description: S/MIME Cryptographic Signature

Re: lagg Interfaces - don't do Gratuitous ARP?

2016-09-07 Thread Karl Pielorz
get a chance I'll see if I can run it up one of the affected boxes, if I can find one I can mess around with. Good to know it wasn't just "me" :) Cheers, -Karl ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mai

Re: lagg Interfaces - don't do Gratuitous ARP?

2016-09-06 Thread Karl Pielorz
--On 06 September 2016 09:13 +0100 Karl Pielorz wrote: We've just changed the network config on a box - going from a single 'em1' adapter to a lagg failover of em0, em1. Sorry - not enough coffee yet, I should have said this is on FreeBSD 10.3-RELEASE-p7 a

lagg Interfaces - don't do Gratuitous ARP?

2016-09-06 Thread Karl Pielorz
it was we had to log into a number of key boxes and 'arp -d' the IP's - and take a ~800 second 'hit' on other boxes timing out the old MAC. -Karl ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/li

Re: IPv6 -> IPv4 fallback broken in serf, kernel bug?

2016-07-26 Thread Karl Denninger
that should be documented. > > This is kinda serious in that the above manifestation in svn effectively disables it for those of us that are on IPv4 connections and have no provider capability for IPv6 at the present time. When I was running 10.2 this was not a problem but as soon as

Re: Problem with VLAN config and traffic after 10.1-R -> 10.3-R-p5 Upgrade?

2016-06-23 Thread Karl Pielorz
ise... Regards, -Karl ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: Problem with VLAN config and traffic after 10.1-R -> 10.3-R-p5 Upgrade?

2016-06-23 Thread Karl Pielorz
we originally set this up way-back-when we had a lot of fun with the various ways & syntax of getting it setup, just settling for the way we do 'because it works' - not ideal I guess, so I'd be interested to see if there's another way of spec'ing the config i

Re: Problem with VLAN config and traffic after 10.1-R -> 10.3-R-p5 Upgrade?

2016-06-23 Thread Karl Pielorz
--On 23 June 2016 14:30 +0200 Michael Gmelin wrote: I don't think having an IP address on an interface that also has vlan interfaces is a good idea. What kind of traffic are you expecting on lagg1? Hi, This has worked for 'quite a while' (i.e. >year). lagg1 is connected to an HP switch th

Re: Problem with VLAN config and traffic after 10.1-R -> 10.3-R-p5 Upgrade?

2016-06-23 Thread Karl Pielorz
--On 23 June 2016 11:53 +0100 Karl Pielorz wrote: This gets increasingly weird if I run tcpdump on the 10.3 box. The act of running 'tcpdump -i lagg1.30 -n' actually fixes the problem: As a follow up - running 'ifconfig lagg1 promisc' fixes the issue as well (as you

Problem with VLAN config and traffic after 10.1-R -> 10.3-R-p5 Upgrade?

2016-06-23 Thread Karl Pielorz
ttl=64 time=0.320 ms If I ctrl-c the tcpdump on the 10.3 box at this point - pings stop dead. Restart the tcpdump - pings resume. Restoring 10.1 on the box fixes this - but I'd obviously rather be using 10.3 now. Any ideas? Thanks, -Karl ___

Re: lagg of em0/em1 + VLAN = lower MTU?

2015-07-16 Thread Karl Pielorz
(i.e. from the man page). Hope this helps... Certainly appears to have, thanks! -Karl ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: lagg of em0/em1 + VLAN = lower MTU?

2015-07-13 Thread Karl Pielorz
parent (i.e. em0/em1)? - It would seem to in at least some cases (i.e. the other people who seem to have this working). -Karl ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: lagg of em0/em1 + VLAN = lower MTU?

2015-07-13 Thread Karl Pielorz
eople running the same ifconfig (admittedly on different FreeBSD versions / cards) and getting what I'd expect [a working system], but I don't? -Karl ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: lagg of em0/em1 + VLAN = lower MTU?

2015-07-13 Thread Karl Pielorz
So sadly, I'm still stuck :( Something is lopping 4 bytes off the MTU when it shouldn't need to. None of the example configs I could find were from 10.1-R (or with exactly the same cards) - but obviously this is just bread & butter lagg/VLAN stuff, so it should work? -

lagg of em0/em1 + VLAN = lower MTU?

2015-07-10 Thread Karl Pielorz
agg0.10 has shrunk by 4 (size of VLAN tag). Is there a way of avoiding that? -Karl ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: Realtek Issues (re) on PC Engines APU1 Board...

2015-06-16 Thread Karl Pielorz
--On 14 June 2015 15:15 +0100 Karl Pielorz wrote: I've disconnected 're1' again (as before) to see if that stops it locking up. Ok, don't use re1 for anything - the box is stable. Use re1 (even for fairly low volumes of traffic) and the box locks up hard after a random

Re: Realtek Issues (re) on PC Engines APU1 Board...

2015-06-14 Thread Karl Pielorz
gged at all for the time it had been up. -Karl --On 14 June 2015 12:28:16 +0100 Karl Pielorz wrote: --On 12 June 2015 08:53:03 -0700 Adrian Chadd wrote: Hi, If this works for people then we should document this somewhere and include the firmware/tool. I upgraded the firmware (boa

Re: Realtek Issues (re) on PC Engines APU1 Board...

2015-06-14 Thread Karl Pielorz
nd so far, this does appear to have fixed the problem. The 'TinyCore Linux installer' PC Engines have on their site (as a windows .exe that creates a bootable USB) comes with the latest 'beta' firmware [which I installed]. I've let PC Engines know as well that

Re: Realtek Issues (re) on PC Engines APU1 Board...

2015-06-10 Thread Karl Pielorz
nfortunately we need all 3 interfaces working when these boxes are deployed - so longer term, avoiding re1 isn't really an option :( Since moving from re1 to re2 (and rebooting) - I've not seen any watchdog timeout errors for any re interface. -Karl --On 10 June 2015 21:44:50 +

Realtek Issues (re) on PC Engines APU1 Board...

2015-06-10 Thread Karl Pielorz
onally) is: " re1: watchdog timeout re1: link state changed to DOWN re1: link state changed to UP re1: watchdog timeout re1: link state changed to DOWN re1: link state changed to UP re1: watchdog timeout re1: link state changed to DOWN re1: link state changed to UP " Any suggestions? Ch

Re: Can multiple apps listen for TCP on the same port?

2014-12-01 Thread Karl Denninger
connection via select() (allowing detection of exceptions as well) and then calls accept() and, now having a connected file handle, fork()s and executes whatever is to handle the connection with the parent closing the handle so as to not orphan the handle when the child exits. ‎ -- Karl (On Passport PDA

Re: FreeBSD 10.0-R connected to Cisco switch (in 'trunk' mode with native VLAN) - doesn't work?

2014-07-31 Thread Karl Pielorz
--On 30 July 2014 13:26 +0400 Hrant Dadivanyan wrote: Hi Karl, I'm not sure whether it's on by default, but many Cisco switches (including all in 3750 family) can tag native vlan, so no a packet will leave ports untagged. no vlan dot1q tag native in configuration mode will s

Re: FreeBSD 10.0-R connected to Cisco switch (in 'trunk' mode with native VLAN) - doesn't work?

2014-07-29 Thread Karl Pielorz
'll do some more digging around comparing that, to the remote kit / setup. I was just ruling out any known issues doing this kind of thing (which there doesn't appear to be). Regards, -Karl ___ freebsd-net@freebsd.org mailing list http://lists.

FreeBSD 10.0-R connected to Cisco switch (in 'trunk' mode with native VLAN) - doesn't work?

2014-07-29 Thread Karl Pielorz
. I would say we'd try it with a different O/S but at the moment, all the kit on 'our' side is FreeBSD based... Cheers, -Karl ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Weird Xen networking issue with PV interfaces passing traffic to other PV's...

2014-06-23 Thread Karl Pielorz
it's checksum related - which '-txcsum' seems to address for clients, but not the router). If some kind soul can have a look at this - and suggest anything? Cheers, -Karl ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.or

NIC congestion - indicators?

2014-05-07 Thread Karl Pielorz
heavily queuing outgoing packets - or binning them off? Thanks, -Karl ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: Strongswan problem (used to work for client NAT to the Internet, no longer does) [[RESOLVED]]

2014-03-23 Thread Karl Denninger
On 3/23/2014 10:57 AM, Karl Denninger wrote: On 3/23/2014 12:01 AM, Karl Denninger wrote: On 3/22/2014 5:44 PM, Karl Denninger wrote: FreeBSD-STABLE 10 r263037M It *looks* like anything coming in through IPSEC and being decoded in there never goes through the ipfw chain at all

Re: Strongswan problem (used to work for client NAT to the Internet, no longer does)

2014-03-23 Thread Karl Denninger
On 3/23/2014 12:01 AM, Karl Denninger wrote: On 3/22/2014 5:44 PM, Karl Denninger wrote: FreeBSD-STABLE 10 r263037M It *looks* like anything coming in through IPSEC and being decoded in there never goes through the ipfw chain at all. This may be addressed by PR185876 checking

Re: Strongswan problem (used to work for client NAT to the Internet, no longer does)

2014-03-22 Thread Karl Denninger
On 3/22/2014 5:44 PM, Karl Denninger wrote: FreeBSD-STABLE 10 r263037M Configuration has outside IPSEC connections coming in to Strongswan which should then be able to NAT back out to the Internet. The premise here is that "roaming" people may connect to this box and obtain both

Strongswan problem (used to work for client NAT to the Internet, no longer does)

2014-03-22 Thread Karl Denninger
side Internet access, since the client points default at the IPSEC'd connection. This used to work on 9.1, but am uncertain whether it has since. It does NOT under 10.0. [root@Gateway /disk/karl]# ipsec status Security Associations (1 up, 0 connecting): XX[3]: ESTABLISHED 5 minutes

Re: Create CARP interface in state INIT?

2013-08-15 Thread Karl Pielorz
up) - to avoid any possibility of the box coming up, and 'stealing' MASTER even if the other machine is down... (something which you apparently can't achieve with rc.conf). What version of the OS are you using ? 9.2-RC2 on amd64. -Karl ___

Re: Create CARP interface in state INIT?

2013-08-15 Thread Karl Pielorz
quently doing a 'ifconfig carp0' doesn't bring it up either :( -Karl ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: Odd NAT/IPSEC question -- help! :-)

2013-04-21 Thread Karl Denninger
On 4/20/2013 11:01 PM, Karl Denninger wrote: > On 4/20/2013 9:36 PM, Karl Denninger wrote: >> I don't think so -- gre is not involved in the config. >> >> On 4/20/2013 7:59 PM, Steven Hartland wrote: >>> - Original Message - From: "Karl Denninger&q

Re: Odd NAT/IPSEC question -- help! :-)

2013-04-20 Thread Karl Denninger
On 4/20/2013 9:36 PM, Karl Denninger wrote: > I don't think so -- gre is not involved in the config. > > On 4/20/2013 7:59 PM, Steven Hartland wrote: >> - Original Message - From: "Karl Denninger" >> ... >>> My "ordinary" NAT entry

Re: Odd NAT/IPSEC question -- help! :-)

2013-04-20 Thread Karl Denninger
I don't think so -- gre is not involved in the config. On 4/20/2013 7:59 PM, Steven Hartland wrote: > - Original Message - From: "Karl Denninger" > ... >> My "ordinary" NAT entry is simply "nat 1 ip from any to any via em1", >> whic

Odd NAT/IPSEC question -- help! :-)

2013-04-20 Thread Karl Denninger
t translate those packets then I can use the VPN to get INTO the network but I CANNOT use it to make the remote machine appears to be PART OF the network, and that sucks. Any ideas? -- -- Karl Denninger /The Market Ticker ®/ <http://market-ticker.org> Cuda Systems LLC

Re: Arp table size - any adjustments?

2013-01-08 Thread Karl Pielorz
hash?) or even 4k to cover expansion. -Karl ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Arp table size - any adjustments?

2012-12-13 Thread Karl Pielorz
Is there anything I need to tune for this kind of quantity (or more), or is it all 'auto-adjusting' on 9.0-S onwards? Thanks, -Karl ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubsc

Re: FreeBSD 9.0-R em0 issues?

2012-08-11 Thread Karl Pielorz
e wise. In all the years I've been doing this - that'll be the first NIC that's ever failed "after" installation... Regards, -Karl ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

RE: FreeBSD 9.0-R em0 issues?

2012-08-10 Thread Karl Pielorz
ve got a problem :( - But probably not the same problem that I have on this SuperMicro machine :-( -Karl ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

FreeBSD 9.0-R em0 issues?

2012-08-10 Thread Karl Pielorz
ow if that's "bad"). The HP switch it's connected to doesn't seem to log any errors for the port. Any suggestions on how I can debug this further, or any ideas to try and fix it? You can find the dmesg output here: <http://www.tdx.com/dmesg.txt> (ifcon

Realtek 8111F

2012-04-24 Thread Karl Stenlund
I installed freebsd 9.0_amd64 and it can't find my network. i tried to add "if_re_load="YES"" But it didn't help. Is the Realtek 8111F not suported by freebsd yet? Motherboard: ASUS P8H77-I ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org

mpd5 extauth-script uses smbpasswd/passdb.tdb NTLM hash

2012-02-27 Thread Karl Dunn
extauth-script /usr/local/etc/mpd5/mpd_auth.sh set auth enable ext-auth set auth disable internal Karl Dunn kd...@acm.org ___ freebsd-net@freebsd.org mailing list htt

Re: ixgbe vs mxge

2008-11-02 Thread Karl Triebes
Jack, On Sun, Nov 2, 2008 at 10:34 AM, Jack Vogel <[EMAIL PROTECTED]> wrote: > You know I generally try to maintain courtesy and civility in my > dealings with the community but this really ticks me off. > > I have stayed out of this thread because I figured it was only > fair that those with obvi

Re: ixgbe vs mxge

2008-11-02 Thread Karl Triebes
On Sat, Nov 1, 2008 at 5:18 PM, Kip Macy <[EMAIL PROTECTED]> wrote: > As a point of reference for fellow readers: > > http://www.google.com/search?hl=en&q=brian.mcginty+freebsd&btnG=Google+Search&aq=f&oq= And your point is? ___ freebsd-net@freebsd.org ma

haiku bounties for usb stack

2006-05-01 Thread Karl vom Dorff
Haiku Bounties: www.haikubounties.org Is looking for developers to take up their code bounties for a usb stack. Please drop by the site and apply if interested! _ Take charge with a pop-up guard built on patented Microsoft® SmartSc

Re: Network performance 6.0 with netperf

2005-10-20 Thread Karl Denninger
power supply becomes a $200 one once the warranty ends - good for them, not good for you. Other than that, I've been pretty happy with their stuff. Sure beats a lot of other "PC" vendors out there in terms of reliability, heat management, BIOS updates, etc. -- -- Karl Denning

Re: Arp and Route Commands

2002-11-17 Thread Karl Timmermann
Hi, I tried that, but I'm just a dumb high school kid who even after reading it, didn't understand the syntax, nor how to make it work. Sorry Karl On Sunday, November 17, 2002, at 04:58 PM, Martin Stiemerling wrote: Karl, try man arp man route on your FreeBSD system. Ma

Re: Arp and Route Commands [sorry]

2002-11-17 Thread Karl Timmermann
Sorry, I should have tried this out before sending the other email. Your new route comand works, but the arp command says: set: can only proxy for 10.10.10.0 Any ideas? Thanks again, Karl set: can only proxy for 10.10.10.0 On Sunday, November 17, 2002, at 04:59 PM, Martin J. Muench wrote

Arp and Route Commands

2002-11-17 Thread Karl Timmermann
e add -net 10.10.10.0 netmask 255.255.255.0 dev eth1 route add default gw 10.10.10.0 dev eth1 anyone know how i would change these commands to work with the FreeBSD versions of arp and route? Thanks! Karl To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in

Re: test

2001-04-05 Thread Karl Clapp
Recieved and Confirmed.. Thanks, Karl Clapp [EMAIL PROTECTED] ** Great Works Internet Technical Support Department Online Help http://support.gwi.net [EMAIL PROTECTED] 1.800.229.2096 ** On Thu, 5 Apr 2001, Thierry Herbelot