RE: IPSec VPN & NATD (problem with alias_address vs redirect_addr ess)

2003-11-13 Thread Vincent Goupil
Crist J. Clark [mailto:[EMAIL PROTECTED] Sent: 13 novembre, 2003 16:16 To: Vincent Goupil Cc: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]' Subject: Re: IPSec VPN & NATD (problem with alias_address vs redirect_address) On Thu, Nov 13, 2003 at 12

IPSec VPN & NATD (problem with alias_address vs redirect_address)

2003-11-13 Thread Vincent Goupil
her way to have these 5 people at the same time to communicate to the same vpn server ? I though that I could use the redirect_address to do that. So the incoming connexion to the VPN server appear from a different IP source address. Vincent Goupil Administrateur réseau / Networ

Re: Packets dropped by FreeBSD

2002-11-23 Thread Vincent Goupil
What could be wrong ? Output before the reboot tcp: 3358 packets sent 1859 data packets (330166 bytes) 16 data packets (20280 bytes) retransmitted 0 resends initiated by MTU discovery 1476 ack-only packets (351 delayed)

Re: Packets dropped by FreeBSD

2002-11-23 Thread Vincent Goupil
9% of mb_map in use) 0 requests for memory denied 0 requests for memory delayed 0 calls to protocol drain routines [root@wally ~] Is this the mb_map ? On 2002-11-23 00:28, Vincent Goupil <[EMAIL PROTECTED]> wrote: > I run FreeBSD 4.6.2 as a Firewall with ipfilter 3.4.27. > I have 4 3C

Packets dropped by FreeBSD

2002-11-22 Thread Vincent Goupil
I run FreeBSD 4.6.2 as a Firewall with ipfilter 3.4.27. I have 4 3C905. I currently have "network slowdown" during peak hours: packets are being dropped by the firewall, I get timeouts with mail and web, I ping interfaces but I get just some icmp replys. The cpu run idle. The firewall run sshd

Re: Slow network response with FreeBSD 4.6.2 and ipfilter

2002-11-22 Thread Vincent Goupil
:69:70:63:68:65) tell > 192.168.20.201 > 00:00:31.810270 arp who-has 192.168.20.166 tell 192.168.20.7 > 00:00:45.473558 arp who-has 192.168.20.177 tell 192.168.20.201 > > > >From: "."@babolo.ru > >To: Vincent Goupil <[EMAIL PROTECTED]> > >CC: [EMAI

Re: Slow network response with FreeBSD 4.6.2 and ipfilter

2002-11-21 Thread Vincent Goupil
168.20.3 > 00:00:25.075679 arp who-has 192.168.20.7 tell 192.168.20.201 > 00:00:29.815522 arp who-has 192.168.20.166 tell 192.168.20.7 > 00:00:30.587208 arp who-has 192.168.20.157 (2f:69:70:63:68:65) tell > 192.168.20.201 > 00:00:31.810270 arp who-has 192.168.20.166 tell 192.168.20.7

Re: Slow network response with FreeBSD 4.6.2 and ipfilter

2002-11-21 Thread Vincent Goupil
ell 192.168.20.7 > 00:00:30.587208 arp who-has 192.168.20.157 (2f:69:70:63:68:65) tell > 192.168.20.201 > 00:00:31.810270 arp who-has 192.168.20.166 tell 192.168.20.7 > 00:00:45.473558 arp who-has 192.168.20.177 tell 192.168.20.201 > > > >From: "."@babolo.ru > >

network slowdown measured with netstat

2002-11-20 Thread Vincent Goupil
I currently experience network problem. I run FreeBSD 4.6.2 with ipfilter 3.4.27 with 5 ethernet interfaces (all 3C905). I think we have a problem with a card xl0. It have 43698 inputs packets with 2424 input errors packets. I think this is problem with ethernet packets (probably checksum e

Network performance

2002-11-20 Thread Vincent Goupil
I currently running FreeBSD 4.6.2 with ipfilter 3.4.27. I have network slowdown but I can't find where it came from. When I reboot it, all came back to normal. When I experiencing slowdown, more packets tend to be denied. I suspect that something slowdown the ipfilter process or ip forwardi

Re: Slow network response with FreeBSD 4.6.2 and ipfilter

2002-11-20 Thread Vincent Goupil
30.587208 arp who-has 192.168.20.157 (2f:69:70:63:68:65) tell 192.168.20.201 00:00:31.810270 arp who-has 192.168.20.166 tell 192.168.20.7 00:00:45.473558 arp who-has 192.168.20.177 tell 192.168.20.201 From: "."@babolo.ru To: Vincent Goupil <[EMAIL PROTECTED]> CC: [EMAIL PROTECTED]

Slow network response with FreeBSD 4.6.2 and ipfilter

2002-11-19 Thread Vincent Goupil
I have a system running FreeBSD 4.6.2-RELEASE-p5 #0 with ipfilter v3.4.27. This system act as a firewall for an enterprise. They need high availability. I have 5 network card, all 3C905 (3*3c905B-TX and 2*905C-TX). I made this setup in july and it run fine until 3 weeks ago. The first and

Slow network response with FreeBSD 4.6.2 and ipfilter

2002-11-19 Thread Vincent Goupil
I have a system running FreeBSD 4.6.2-RELEASE-p5 #0 with ipfilter v3.4.27. This system act as a firewall for an enterprise. They need high availability. I have 5 network card, all 3C905 (3*3c905B-TX and 2*905C-TX). I made this setup in july and it run fine until 3 weeks ago. The first and