Re: dump hangs on 7.1

2009-07-12 Thread Len Conrad
>On Friday 10 July 2009 08:29:01 Len Conrad wrote: >> FreeBSD 7.1-RELEASE #0: Thu Jan 1 14:37:25 UTC 2009 >> r...@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386 >> >> CPU: Intel(R) Xeon(R) CPU E5420 @ 2.50GHz (2496.26-MHz 686-class >>

FreeBSD/iSCSI initiator into EMC Clarion target

2009-07-10 Thread Len Conrad
uname -a FreeBSD xxx 7.1-RELEASE FreeBSD 7.1-RELEASE #0 kldstat Id Refs AddressSize Name 15 0xc040 97f830 kernel 21 0xc0d8 ff18 iscsi_initiator.ko 31 0xc0d9 6a2c4acpi.ko iscontrol doesn't have -V version and strings doesn't find anything that looks

(no subject)

2009-07-09 Thread Len Conrad
uname -a FreeBSD xxx 7.1-RELEASE FreeBSD 7.1-RELEASE #0 kldstat Id Refs AddressSize Name 15 0xc040 97f830 kernel 21 0xc0d8 ff18 iscsi_initiator.ko 31 0xc0d9 6a2c4acpi.ko iscontrol doesn't have -V version and strings doesn't find anything that looks

Re: buildup of Windows time_wait talking to fbsd 4.10

2005-01-11 Thread Len Conrad
We have a windows mailserver that relays its outbound to a fbsd gateway. We changed to a different fbsd gateway running 4.10. Windows then began having trouble sending to 4.10. Windows "netstat -an" shows dozens of lines like this: source IP desitination IP

Re: buildup of Windows time_wait talking to fbsd 4.10

2005-01-10 Thread Len Conrad
Just off the top of my head... You mentioned the freebsd machine is the gateway. Do you have a firewall on the host blocking connections from the windows machine? a forgotten detail is that the windows machine sends just fine to the 4.10 gateway for a few minutes, but the time_wait inevitably b

buildup of Windows time_wait talking to fbsd 4.10

2005-01-10 Thread Len Conrad
We have a windows mailserver that relays its outbound to a fbsd gateway. We changed to a different fbsd gateway running 4.10. Windows then began having trouble sending to 4.10. Windows "netstat -an" shows dozens of lines like this: source IP desitination IP

Re: IPSEC offloading on Intel PRO/100 S

2002-03-01 Thread Len Conrad
> > o Would anybody be interested in my adding support for this beast's crypto > > features to the fxp driver? > >Yes. :) Is there ANY hardware encryption support in FreeBSD? Len http://MenAndMice.com/DNS-training http://BIND8NT.MEIway.com : ISC BIND for NT4 & W2K http://IMGate.MEIway.com

multi-NIC broadcasting: it isn't

2002-01-06 Thread Len Conrad
4.4-20020101-STABLE with 5 nics ifconfig_fxp0="inet 10.1.1.1 netmask 255.255.255.0 media autoselect" ifconfig_fxp1="inet 10.1.2.1 netmask 255.255.255.0 media autoselect" ifconfig_fxp2="inet 192.168.253.59 netmask 255.255.255.0 media autoselect" ifconfig_fxp3="inet 10.1.4.1 netmask 255.255.255.0 m

Re: problem (hairy) with dns-server

2001-12-02 Thread Len Conrad
>I have two dns-servers at 200.198.77.34 and 200.198.77.35, and when >querying it with the nslookup and dnsquery everything appears as normal. when do recursive query to either, I get an answer. you should not allow recursive queries except from your trusted ip's, for BIND8 acl mynets {ip_li

load-balancing to multiple T1's

2001-10-14 Thread Len Conrad
Is anybody using netgraph and multilink ppp (recommended by PHK) to load-balance outgoing traffic over multiple (4 or more) T1's? stable? efficient enough to push the T1's towards practial limits? thanks Len http://MenAndMice.com/DNS-training http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for N

Re: tracing an attack using spoofed ip´s

2001-09-08 Thread Len Conrad
>My suggestion is to start using firewall rules or perhaps hook >tcpwrappers such that it looks up incomming connections and >checks them against RBL. good idea, but I´m not a c programmer. > Another suggestion is to call the >ISPs or law enforcement offcials to report this continued >harrass

tracing an attack using spoofed ip´s

2001-09-08 Thread Len Conrad
A client has been receiving an attack on this mail gateway´s port 25 for 3 weeks. We increased the postfix SMTPD processes from 50 to 150, and the hourly msg rejects jumped from 5000 to 15000, roughly. The source addresses used by the attacker(s) are mostly in the various RBL bases, 100´s of t

Re: PPPoE dying too long

2001-09-04 Thread Len Conrad
>If it really is a lossy layer one issue, you are best off getting them to >fix that. We have no hopes that FT or it´s ADSL reseller will do anyting about that. The reseller said "just turn on ip spoofing so your apps don´t die" > Have a look at the speed touch and make sure its configured

PPPoE dying too long

2001-09-04 Thread Len Conrad
Prior to installing in a customer site, we´ve been running a 4.3R and PPPoE into a banal Alcatel ADSL bridge, "Home Speed" or somethting, in France as LAN router/ipfilter firewall. All seems to be running well, but after very long observation, we don´t like: 1. pinging from an LAN station to

Re: taking ppp down and up

2001-08-20 Thread Len Conrad
>>There is no 3 minute blackout. The session is just closed. Change >>lqrperiod if you want a shorter deconnexion. > >Merci bcp, so that´s where from the repeatable 6 x 30 seconds comes!! thanks but with ppp.conf having: enable lqr set lqr accept set lqrperiod 3 we get: Aug 20 15:51:11

Re: taking ppp down and up

2001-08-20 Thread Len Conrad
> > ... for at least the reason that France Telecom (French-govt-protected > > monopoly), God bless 'em, cripples their ADSL service by inserting 3 > minute > > blackouts, at the next hop at end their end of the ADSL, link throughout > > the day, (ping to next hop dead) to protect their exor

Re: taking ppp down and up

2001-08-20 Thread Len Conrad
>WRT killing ppp, the best way is: > > killall ppp; killall -2 ppp and the best works! Our script now succeeds in bringing up PPP again. Thanks >WRT the PPPoE lockup problem, I'd love to get to the bottom of this >(I can't reproduce it here). If anybody can give me an account on a >m

taking ppp down and up

2001-08-20 Thread Len Conrad
We´re very happy with PPPoE into our cable modem ´cept the whole link isn´t reliable : ... for at least the reason that France Telecom (French-govt-protected monopoly), God bless 'em, cripples their ADSL service by inserting 3 minute blackouts, at the next hop at end their end of the ADSL,

Re: filtering with netgraph?

2001-07-26 Thread Len Conrad
>I need to put together a bridging packet filter. Can someone confirm that there is no way in FreeBSD to bridge Ethernet and TR? Len http://MenAndMice.com/DNS-training http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K http://IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gat

Re: (KAME-snap 4439) FreeBSD fxp driver, offloading cryptography ...

2001-04-10 Thread Len Conrad
> >question: is anyone working on the Intel Pro/100 S support in the > >fxp driver? I have found Intel to distribute a Linux driver and > >looking at the source code I found: > > I have contacted intel a couple of times, to different part of intel, > for spec sheet for this partic

Re: cisco-freebsd link can't ping

2001-01-16 Thread Len Conrad
>Check the obvious. Your IP addresses, netmasks, routing table. >Can you provide more info? ifconfig -au, netstat -rn, on the FreeBSD >system. and sho ip route on your Cisco. It was simple in fact. We had added some ipfilter rules on disk but hadn't loaded them into memory until the reboot d

cisco-freebsd link can't ping

2001-01-16 Thread Len Conrad
We have a Cisco 3620 and FreeBSD 3.1R connected by an Ethernet crossover cable. Has been working fine for 14 months. A couple of gigabytes traffic pass over the link each day with no errors, speed is correct. ifconfig looks cool netstat -ib shows no collisions on the link A couple of mont

Re: arp pb's : correction

2001-01-16 Thread Len Conrad
>We have a FreeBSD 3.1R machine as our main router uplinking to a >Cisco 3620 (back to back, no switch). > >All works well, and had for months. After a reboot of cisco and >freebsd, all still works well, but we cannot ping cisco inside to >fbsd outside (the back to back interfaces with x-over

arp bp's

2001-01-16 Thread Len Conrad
We have a FreeBSD 3.1R machine as our main router uplinking to a Cisco 3620 (back to back, no switch). All works well, and had for months. After a reboot of cisco and freebsd, all still works well, but we cannot ping cisco inside to fbsd outside (the back to back interfaces with x-over cable),

RE: Odd TCP / DNS behavior in 4.x

2000-12-11 Thread Len Conrad
Before you trash FBSD and BIND, I suggest you learn DNS, because yours is a freakin mess: DNS Expert Detailed Report for litestep.org 11/12/00, 17:48, using the analysis setting "Normal"