SV: VPLS implementation

2010-10-13 Thread Jon Otterholm
> -Ursprungligt meddelande- > Från: sth...@nethelp.no [mailto:sth...@nethelp.no] > Skickat: den 13 oktober 2010 11:32 > Till: Jon Otterholm > Kopia: freebsd-net@freebsd.org > Ämne: Re: VPLS implementation > > > > Are there any plans or ongoing work to

VPLS implementation

2010-10-11 Thread Jon Otterholm
Are there any plans or ongoing work to implement VPLS in the network stack? http://en.wikipedia.org/wiki/Virtual_Private_LAN_Service //JO ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscrib

Re: Choosing CPU for router

2010-03-25 Thread Jon Otterholm
Den 2010-03-23 19.36, skrev "Jon Otterholm" : > > > > Den 2010-03-23 14.12, skrev "Ivan Voras" : > >> On 03/18/10 01:32, Andrew Snow wrote: >>> >>> Jon Otterholm wrote: >>>> This machine is going to act as access-ro

Re: Choosing CPU for router

2010-03-23 Thread Jon Otterholm
Den 2010-03-23 14.12, skrev "Ivan Voras" : > On 03/18/10 01:32, Andrew Snow wrote: >> >> Jon Otterholm wrote: >>> This machine is going to act as access-router serving ~500 >>> FTTH-customers. >>> About 500Mbit/s and 200kpps. The big i

Re: Choosing CPU for router

2010-03-17 Thread Jon Otterholm
_ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org" This machine is going to act as access-router serving ~500 FTTH-customers. A

Choosing CPU for router

2010-03-16 Thread Jon Otterholm
IPFW and Dummynet for traffic-shaping. Along with that, standard services like dhcpd. Any thoughts appreciated. BG //Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to

Re: Racoon site-to site

2009-12-14 Thread Jon Otterholm
On 2009-12-11 20.23, "Mike Tancsa" wrote: > At 11:33 AM 12/11/2009, David DeSimone wrote: >> Jon Otterholm wrote: >>> >>> If I restart racoon or wait approximately 30 min the connection is >>> re-established. >> >> Since this is

Re: Racoon site-to site

2009-12-11 Thread Jon Otterholm
On 2009-12-11 20.23, "Mike Tancsa" wrote: > At 11:33 AM 12/11/2009, David DeSimone wrote: >> Jon Otterholm wrote: >>> >>> If I restart racoon or wait approximately 30 min the connection is >>> re-established. >> >> Since this is

Re: Racoon site-to site

2009-12-11 Thread Jon Otterholm
11 dec 2009 kl. 17.34 skrev "David DeSimone" : Jon Otterholm wrote: If I restart racoon or wait approximately 30 min the connection is re-established. Since this is approximately ½of the phase 2 lifetime, you are proba bly running into lifetime negotiation issues, or

Racoon site-to site

2009-12-11 Thread Jon Otterholm
n what to tweak appreciated. //Jon Info: Keying: IKE PSK Phase1: encryption: DES Authentication: MD5 SA Lifetime: 28800 seconds Phase2: Encryption: DES Authentication: MD5 SA Lifetime: 3600 seconds racoon.conf: pathpre_shared_key "/usr/local/etc/racoon/ps

GRED on queue or pipe

2009-11-26 Thread Jon Otterholm
Doing some test of gred in dummynet. My ruleset consists of a number of queues connected to the same pipe. Queues have different weight and I want to make use of gred instead of taildrop. Should i define gred on the queues or on the pipe? To me it seems reasonable to set it on the pipe and let

Re: Forwarding w/o promisc on 6.4

2009-04-19 Thread Jon Otterholm
On 2009-04-19 11.14, "Robert Watson" wrote: > On Sun, 19 Apr 2009, Jon Otterholm wrote: > >> I have a router running 6.4R that does not forward packets if I disable >> PROMISC on the interface. Hardware is a Dell PE with two Intel 82541EI >> chipsets (if_e

Forwarding w/o promisc on 6.4

2009-04-19 Thread Jon Otterholm
Hi. I have a router running 6.4R that does not forward packets if I disable PROMISC on the interface. Hardware is a Dell PE with two Intel 82541EI chipsets (if_em). I have a number (~100) of vlan-interfaces on em0. Everything works as aexpected if I turn on PROMISC on em0 but forwarding stops if I

Re: CARP and L2 src-MAC

2008-11-06 Thread Jon Otterholm
On 2008-11-06 11.47, "Peter Jeremy" <[EMAIL PROTECTED]> wrote: > On 2008-Nov-06 10:06:21 +0100, Jon Otterholm > <[EMAIL PROTECTED]> wrote: >> Is it possible to tweak CARP to use the virtual MAC in L2 header instead of >> the physical interface MAC

CARP and L2 src-MAC

2008-11-06 Thread Jon Otterholm
it possible to tweak CARP to use the virtual MAC in L2 header instead of the physical interface MAC? Could this be implemented as a feature controlled by a sysctl? //Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo

carpdev

2008-06-03 Thread Jon Otterholm
Hi. Are there any plans to implement option carpdev to carp in FreeBSD? //Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: Incompatibility between dummynet and PF rdr

2008-04-24 Thread Jon Otterholm
Hi. Has anyone got a solution to the rdr-problem when using PF together with Dummynet/IPFW? I found this thread from 2006 which describes the problem in detail: http://unix.derkeiler.com/Mailing-Lists/FreeBSD/net/2006-07/msg00048.html //Jon

Re: A general purpose LDAP solution?

2008-03-23 Thread Jon Theil Nielsen
2008/3/23, Jon Theil Nielsen <[EMAIL PROTECTED]>: > Hi list! > > I have speculated a lot about implementation of (Open)LDAP on my > sever. By I haven't yet found the right (and logical) way to do it. > I'm running FreeBSD 7.0-Release with some different ser

A general purpose LDAP solution?

2008-03-23 Thread Jon Theil Nielsen
different implimentions. Excuse my total lack of understanding, but is it possible to have a structure with a superior unit such as OU= which could contain several virtual domains and the actual doamin for my PDC? -- Jon Theil Nielsen ___ freebsd-net@f

Re: Samba PDC with VPN access

2008-03-21 Thread Jon Theil Nielsen
ething I can use to authenticate outside users to my (VPN) server. Regards, Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Samba PDC with VPN access

2008-03-21 Thread Jon Theil Nielsen
e done by installing a Radius server to communicate with > > Mpd, > > but that seems to be unnessesarily complicated. > > Does anyone know the "best" solution to achieve the goal? > You migth be right about trying (again) with ppp. I just

Samba PDC with VPN access

2008-03-20 Thread Jon Theil Nielsen
Radius server to communicate with Mpd, but that seems to be unnessesarily complicated. Does anyone know the "best" solution to achieve the goal? Regards, Jon Theil Nielsen ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailma

QinQ

2007-10-25 Thread Jon Otterholm
Hi. I was wondering about the possibility of adding support for QinQ ("Double tagged frames" / "Nested vlans"). Attached is a patch against -STABLE to add this support. I have not tested this but was told it should work. Would it be possible to get this into CURRENT? //Jo

if_bridge on a vlan-trunk

2007-10-11 Thread Jon Otterholm
drawbacks be if I create ~1500 if_bridge and attached each vlan-sub-if from each physical interface to their own bridge? Would this work? //Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe

if_em and if_vlan

2007-09-26 Thread Jon Otterholm
usy": [EMAIL PROTECTED] /home/user]# ifconfig vlan100 destroy [EMAIL PROTECTED] /home/user]# ifconfig vlan100 create [EMAIL PROTECTED] /home/user]# ifconfig vlan100 vlan 100 vlandev em1 ifconfig: SIOCSETVLAN: Device busy Motherboard is Supermicro PDSMi-LN4+ with four em-

if_bridge and filtering on member interface

2007-08-29 Thread Jon Otterholm
Hi. It seems that filtering on member interfaces are a bit buggy at the moment. For testing I tried to use the following 3 rules to block traffic using PF: The following works and blocks traffic: block log quick on bridge0 from xx.xx.xx.xx to any The following does not work: block log quick on

Re: proxy-arp

2007-08-13 Thread Jon Otterholm
Chuck Swiger wrote: On Aug 13, 2007, at 7:34 AM, Jon Otterholm wrote: I have a problem with proxy-arp entries. If I add an arp-entry: arp -s $hostip $routermac permanent pub only the router sends an arp and replies to it's own arp like: 15:40:02.074419 arp who-has $hostip tell $hostip

proxy-arp

2007-08-13 Thread Jon Otterholm
ction? IMHO the router should only answer to arp for $hostip to other clients than the one that actually have the ip-address. //Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any ma

if_bridge and ff:ff:ff:ff:ff:ff

2007-06-04 Thread Jon Otterholm
ip.forwarding=1 In detail the problem is related to dhcpd working an if_bridge. I know that if_bridge handles arp/revarp in a different manner than other traffic to ethernet broadcast, could this be a bug? //Jon ___ freebsd-net@freebsd.org ma

Re: ICMP-floods

2007-03-22 Thread Jon Otterholm
Peter Jeremy wrote: On 2007-Mar-21 22:08:06 +0100, Jon Otterholm <[EMAIL PROTECTED]> wrote: I did not mention earlier that all if's are vlan-based sub-intefaces. It seems that if I move admin-if's on my routers to a different physical if than the one with the default route

Re: ICMP-floods

2007-03-21 Thread Jon Otterholm
Chuck Swiger wrote: On Mar 20, 2007, at 4:05 PM, Jon Otterholm wrote: When setting net.inet.ip.redirect=0 on my routers, the icmp-redirects disappear, but instead I get a large amount of ICMP-time-exceed from my routers. The information you've provided strongly suggests either pro

ICMP-floods

2007-03-20 Thread Jon Otterholm
92.168.1.68 > 192.168.1.54: ICMP time exceeded in-transit, length 36 for about 3300 lines. This is my routers answering. 192.168.41.54 is a HP420 WLAN-AP. I get the same behavior from other equipment on my admin-lan including FreeBSD-machines. If someone could give me a hint to where to sta

Re: Lenovo X60 em

2007-01-16 Thread Jon Otterholm
Jack Vogel wrote: On 1/16/07, Jon Otterholm <[EMAIL PROTECTED]> wrote: Jack Vogel wrote: > On 1/16/07, Jon Otterholm <[EMAIL PROTECTED]> wrote: >> Hi. >> >> I have trouble with high latency on my new X60 with em-interface. Anyone >> else with th

Re: Lenovo X60 em

2007-01-16 Thread Jon Otterholm
Jack Vogel wrote: On 1/16/07, Jon Otterholm <[EMAIL PROTECTED]> wrote: Hi. I have trouble with high latency on my new X60 with em-interface. Anyone else with the same problem? I´m running 6.2-RELEASE. Would you please give a bit more detail. Jack Here comes some info: uname -a F

Lenovo X60 em

2007-01-16 Thread Jon Otterholm
Hi. I have trouble with high latency on my new X60 with em-interface. Anyone else with the same problem? I´m running 6.2-RELEASE. //Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe

Re: If_bridge behaving as HUB

2006-10-17 Thread Jon Otterholm
Andrew Thompson wrote: On Mon, Oct 16, 2006 at 12:15:13PM +0200, Jon Otterholm wrote: Hi. I have a bridge setup with a number of vlan IF's as members. After a while traffic destined for one member IF are sent to all member IF's. From man if_bridge: A bridge works

If_bridge behaving as HUB

2006-10-16 Thread Jon Otterholm
# uname -a FreeBSD hostname.domain.com 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #2: Fri Sep 15 13:26:01 CEST 2006 user@:/usr/obj/usr/src/sys/GENERIC i386 /Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To u

Re: Bridge

2006-09-15 Thread Jon Otterholm
Andrew Thompson wrote: On Thu, Sep 14, 2006 at 04:23:07PM +0200, Jon Otterholm wrote: Andrew Thompson wrote: On Thu, Sep 14, 2006 at 10:30:21AM +0200, Jon Otterholm wrote: Andrew Thompson wrote: On Wed, Sep 13, 2006 at 08:19:41PM +0200, Jon Otterholm wrote

Bridge

2006-09-13 Thread Jon Otterholm
:04:23:bd:23:42 media: Ethernet autoselect (100baseTX ) status: active vlan: 10 parent interface: em0 ARP-broadcast can still travel between member IFs in bridge0. Have I missed something here? Do I have to use bridge instead of if_bridge? /Jon

Limit arp on bridge

2006-09-12 Thread Jon Otterholm
-broadcast between memeber-ifs? /Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

CNR Replacement

2006-06-06 Thread Jon Otterholm
Hi. I am searching for a BSD-based CNR replacement. CNR (Cisco Network Registrar) is basicly a DHCP server that puts IF-routes on a router when a client has leased an IP-address. When the lease expires the IF-route is removed from the router. This functionality together with IP-less VLAN-IF'

Sub-interfaces

2006-04-12 Thread Jon Otterholm
Hi. I am designing a new network and one way to go is to configure a router based on FreeBSD with one IF/customer. This would mean around 1000 VLAN-IF's/router - would this work? Do you see any problems with this? /Jon ___ freebsd-net@freebs

net.link.ether.inet.proxyall

2006-03-27 Thread Jon Otterholm
Hi. Has anyone information about the sysctl "net.link.ether.inet.proxyall" ? Is this a global ARP-Proxy? Does it apply on a bridge or if_bridge? /Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/free

Re: How do you keep users from stealing other user's ip??

2006-03-24 Thread Jon Otterholm
you could use some kind of RADIUS authentication (MAC/user/computer/??). Dlink 3526/3550 have these functions. In addition you could lock down the switch so that "user-ports" only could talk to the uplink port and never with each ot

Re: Failover and load balancing using advanced NAT daemon

2006-01-25 Thread Jon Simola
ful use of anchors and some scripting (or ifstated which might be in ports) can move traffic off failed links or respond to changing loads. I've done a lot with both ipfw and PF now, and I'm finding PF to be more flexible for my uses. -- Jon Simola Sys

Re: Question on VLAN

2006-01-23 Thread Jon Simola
its already seperated, otherwise it has to figure it out by looking in the header for the presence of the ETHERTYPE_VLAN tag. Hope that helps you out. -- Jon Simola Systems Administrator ABC Communications ___ freebsd-net@freebsd.org mailing list http://li

DHCPD + Relay

2006-01-09 Thread Jon Otterholm
, please write a subnet declaration in your dhcpd.conf file for the network segment to which interface bge0 is attached. ** Not configured to listen on any interfaces! su-2.05b# How can i make it start up without a declaration for the local subnets? /Jon

Router + ADM64

2006-01-03 Thread Jon Otterholm
Hi! What is there to gain in performance choosing AMD64 on a Dell PE1850 (Xeon EMT64) when used as router? /Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[

what means "accf" in soisconnected function? thanks!

2005-12-01 Thread Jon
I am reading 'soisconnected' function in 'Uipc_socket2.c' file. I find this lines. But I cannot find accf's mean. can you explain to me?thank you very much! if ((so->so_options & SO_ACCEPTFILTER) == 0) { ... } else { ACCEPT_UNLOCK(); SOCK_LOCK(so); so->so_upcall = head->so_

a question about socket-syscall, thinks

2005-11-25 Thread Jon
NET_LOCK_GIANT(); error = socreate(uap->domain, &so, uap->type, uap->protocol, td->td_ucred, td); NET_UNLOCK_GIANT(); if (error) { fdclose(fdp, fp, fd, td); } else { FILEDESC_LOCK_FAST(fdp); fp->f_data = so; /* already has ref count */ fp->f_flag = FREAD|FWRITE; fp->f_ops = &soc

Re: arp-proxy

2005-11-21 Thread Jon Otterholm
I think they do that when using standard 802.1Q, but for some reason theey don't when running QinQ... /Jon On Mon, 2005-11-21 at 13:00 +, Brian Candler wrote: > On Mon, Nov 21, 2005 at 01:45:44PM +0100, Jon Otterholm wrote: > > The reason why I have to proxy-arp mac between VLA

Re: arp-proxy

2005-11-21 Thread Jon Otterholm
You got it all right. Antispoof sounds nice. The reason why I have to proxy-arp mac between VLANs is that one mac cannot end up mapped to more than one port in the switches FDB. If they do - we get something called "host-flapping" on IOS-language. /Jon On Mon, 2005-11-21 at 11:28 +0

Re: arp-proxy

2005-11-17 Thread Jon Otterholm
her if" acting as gateway, distrute IP's via DHCP (ISC?) I could reduce the number of IP's and administration when adding new customers. Anyone with a souloution or revelation? /Jon On Thu, 2005-11-17 at 15:23 +, Brian Candler wrote: > On Thu, Nov 17, 2005 at 04:06:03PM +0100

Re: arp-proxy

2005-11-17 Thread Jon Otterholm
The linux-soloution you are describeing is exactly what I want to do. Not a big fan of Linux though. I will have to wait for this to be ported to BSD. Anyone with info if this is being done? /Jon On Thu, 2005-11-17 at 14:57 +0100, Jeremie Le Hen wrote: > Hi, Jon, Brian, > > >

hello, everyone , i have another question

2005-11-16 Thread Jon
I offten discover what such "/* XXX */ " annotate in source code of freebsd。what mean is "XXX"? think you very much!___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL

Fw: hello, everybody

2005-11-15 Thread Jon
- Original Message - From: Jon To: freebsd-net@freebsd.org Sent: Tuesday, November 15, 2005 5:15 PM Subject: hello, everybody i'm reading TCP/IP source code.but i do not understand this function, tcp_timer_2msl_tw. what mean is "tw"? who can

SV: Testing with a Cisco router

2005-11-12 Thread Jon Otterholm
outer. /Jon -Ursprungligt meddelande- Från: [EMAIL PROTECTED] genom Mike Silbersack Skickat: lö 11/12/2005 8:21 Till: freebsd-net@freebsd.org Ämne: Testing with a Cisco router Does anyone have a Cisco router running an up to date version of IOS that they would be willing to run

Re: arp-proxy

2005-11-10 Thread Jon Otterholm
understand why Alcatel has put this limitaion in their DSLAM's. Their answer is that it prevents spoofing. I would accept this as a feature but not as a limitation... /J On Thu, 2005-11-10 at 13:39 +, Brian Candler wrote: > On Thu, Nov 10, 2005 at 02:25:07PM +0100, Jon Otterholm wrote: >

Re: arp-proxy

2005-11-10 Thread Jon Otterholm
src to its own mac. I hope this makes it clear. /J On Thu, 2005-11-10 at 12:49 +, Brian Candler wrote: > On Wed, Nov 09, 2005 at 02:06:28PM +0100, Jon Otterholm wrote: > > I want to create a bridge-interface (if_bridge) with a bunch (500+) of > > sub-interfaces (vlan) as memb

arp-proxy

2005-11-09 Thread Jon Otterholm
vlan. My thought is to set up a arp-proxy that handles this but i cant find any info on how to do this on a FreeBSD-box (preferably 6.0-RELEASE). Is there anyone with a working soloution in real or theory? Any general thoughts or feedback on this is ar

if_bridge and vlan

2005-10-29 Thread Jon Otterholm
Hi. Does anyone know if if_bridge supports vlan-interfaces? /Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: sending MAC packets --- again, and again

2005-05-20 Thread Jon Simola
#x27;m not sure how polite pcap is about leaving dangling bpf devices. -- Jon Simola Systems Administrator ABC Communications ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: [Q-4.9-R]Questions About A Simple Bridge

2005-05-07 Thread Jon Simola
he MAC of my upstream router, stopping my network dead. I have to become very agressive with layer2 filtering with ipfw to keep the bridge from seeing packets on the wrong interface. -- Jon Simola Systems Administrator ABC Communications ___ freebsd-net@f

Re: Performance Intel Pro 1000 MT (PWLA8490MT)

2005-04-19 Thread Jon Simola
0). > >>[EMAIL PROTECTED]:~$ sysctl -a | grep kern.polling > >>kern.polling.handlers: 0 No handlers? On all my boxes I've got one handler per polled device. -- Jon Simola Systems Administrator ABC Communications ___ freebsd-net

Re: Two NIC's connected to same subnet: routing question

2005-02-17 Thread Jon Noack
uid on separate IP addresses with each IP address using one of the T1s as the gateway. That way I could force my power users through one connection and everyone else through the other while still gaining the benefit of caching everything for everyone. It's probably needlessly complicat

Re: altq for vlans?

2005-02-14 Thread Jon Simola
> > On Sunday 13 February 2005 22:36, David Gilbert wrote: > >> Has anyone considered patching the vlan driver to support altq? I > >> gather that since tun works, so should vlan. > > Well... the issue is several fold. Firstly, the router in question is > talking in trunk mode to a switch which i

Re: quad port fast ethernet card recommendations

2005-02-03 Thread Jon Simola
On Thu, 3 Feb 2005 12:18:05 -0500, Michael W. Oliver <[EMAIL PROTECTED]> wrote: > subject sums it up. will be used in small firewall boxes with WAN, LAN, > DMZ, and WLAN (via x-over to AP) connections. older hardware, so > please, no fancy super-duper mega-bandwidth PCI cards that I won't have >

em(4) VLAN + PROMISC followup question

2005-01-26 Thread Jon Simola
mp on either em1 or one of the vlan interfaces reduces throughput by a factor of 10 or so. Running tcpdump with the -p option does not. This is a steady stream of 10 to 20 Mbps of traffic, routing 11 /24s over 4 vlans, kernel polling is enabled for the em devices. Thank you, Jon Simola Systems Administ

Re: vlans changed?

2005-01-19 Thread Jon Simola
On Wed, 19 Jan 2005 13:01:52 -0800, Charlie Schluting <[EMAIL PROTECTED]> wrote: > Now, in 5.3, the only thing I can get working is to configure the em0 int with > the IP, and set the trunk to have the native vlan corresponding to that IP. > Weird. Sounds like you're not getting the module loade

Re: Network accounting

2005-01-17 Thread Jon Simola
On Mon, 17 Jan 2005 23:07:54 +0100, Andrew Seguin <[EMAIL PROTECTED]> wrote: > With the help, in pointing out the mask feature to me from Jon Simola, this > quite possibly might be the path I'll take (I'll sleep on it first). > Interfaces are 100Mbps, but our interne

Re: Network accounting

2005-01-17 Thread Jon Simola
On Mon, 17 Jan 2005 22:41:16 +0100, Andrew Seguin <[EMAIL PROTECTED]> wrote: > >What I was doing with the same setup: > >$IPFW pipe 1 config mask src-ip 0x buckets 512 > >$IPFW pipe 2 config mask dst-ip 0x buckets 512 > >$IPFW add 32001 pipe 1 src-ip 192.168.110.0/24 bridged > >$IP

Re: Network accounting

2005-01-17 Thread Jon Simola
On Mon, 17 Jan 2005 21:11:13 +0100, Andrew Seguin <[EMAIL PROTECTED]> wrote: > But, here's my situation. A dedicated FreeBSD transparent firewall-bridge > with 3 NICs (two for the bridge w/o IP, one for console). I'm using IPFW for > the firewall, and at the moment I'm doing some very bare-bones s

ALTQ patch for if_vlan.c

2005-01-17 Thread Jon Simola
OCK(&ifp->if_snd); + } + ifv = ifp->if_softc; p = ifv->ifv_p; ifp->if_flags |= IFF_OACTIVE; for (;;) { - IF_DEQUEUE(&ifp->if_snd, m); + IFQ_DEQUEUE(&ifp->if_snd, m); if (m == 0)

Re: Trouble making NFS work with Mac OS X

2004-12-15 Thread Jon Noack
ot have any symbolic links in them and should not have any "." or ".." components." Therefore you may need to export /usr/home instead of /home. This works wonderfully for me (although my clients are FreeBSD as well). Jon __

Re: TCP SACK backport to -STABLE

2004-08-25 Thread Jon Noack
ce of RELENG_4 is good for everyone, and those interested most likely have stability as their first priority anyway (because otherwise they wouldn't be using RELENG_4). Regardless, the original work was done on RELENG_4 and ported to -CURRENT: http://lists.freeb

kern/68110 (rfc 3522)

2004-06-22 Thread Jon Noack
Has anyone looked at kern/68110? http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/68110 Jon Noack ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Using netgraph for filtering/modifing packets

2004-06-14 Thread Jon Noack
covered many timing related issues with our product. Handling modem clients gracefully was the hardest part, and made me feel a bit nostalgic; using a simulated modem link was just as frustrating as the real thing! Jon Noack ___ [EMAIL PROTECTED] ma

UDP bind(2) on the same port using SO_REUSEADDR

2004-03-16 Thread Jon Dugan
hile (actually every 5-10 minutes) rtg/net-snmp would do an snmp get using port 1812 which the system had given to it, but radiusd would end up getting the results. This causes indigestion in radiusd... Since I spent quite a bit of time running this down today I figured I'd share w

Merge a NAT-router and a Non-NAT-server

2004-01-31 Thread Jon-Eirik Pettersen
Hi. I'm trying to merge two "servers", one of them is only a NAT-router for the rest of the LAN another one is a host without NAT that needs a unique IP. I have 3 network interfaces on the other. I want that to take over the NAT-routing, but I need to use one network device to that server, and

RE: NAT and PPTP

2003-07-17 Thread Jon Newson
A couple of thoughts: Is your client employing ipsec/isakmp? If so, has your client ensured that the setkey -P entries have been pushed into the kernel? Correct me if i'm wrong, but from (a foggy) memory GRE in a tunnel mode such as this, employs the gif device, is the routing/firewalling allowi

RE: Bandwidth monitoring

2003-06-26 Thread Jon Newson
atabase of the stats, via a cron job. Cheers, Jon Newson - Systems Administrator SDR Technologies [EMAIL PROTECTED] -Original Message- From: Ian Freislich [mailto:[EMAIL PROTECTED] Sent: Thursday, June 26, 2003 5:54 PM To: Lars Eggert Cc: Adam; [EMAIL PROTECTED] Subject: Re: Bandwidth

MT/MP locking and TCP

2003-02-19 Thread Jon Dugan
nt to make sure as I go forward with the Web100 code that I lock it appropriately. Thanks, Jon -- Jon Dugan | Senior Network Engineer, NCSA Network Research [EMAIL PROTECTED] | 269 CAB, 605 E Springfield, Champaign, IL 61820 217-244-7715 | http://www.ncsa.uiuc.edu/~j

Web100 for FreeBSD

2003-02-19 Thread Jon Dugan
process. Information gleaned from the KIS is also useful to diagnosing many common problems with TCP performance. The Web100 website has further information, including the code for the Linux implmentation and an IETF draft of the TCP Extended Statistic MIB. http://www.web100.org/ J

Re: mpd - vpn to windows server - very slow

2002-11-22 Thread Jon Drukman
At 01:22 PM 11/22/2002, Archie Cobbs wrote: Try adding these lines to mpd.conf and see if they help: set iface mtu 1440 set ccp yes mpp-stateless i already had the second one in there, but i added the first and it has totally fixed the problem. thanks archie! -jsd- To Unsubscribe:

mpd - vpn to windows server - very slow

2002-11-22 Thread Jon Drukman
i'm using mpd to connect to my work's VPN, running some form of windows vpn server. unfortunately performance is really miserable. it seems to work fine for tiny transmissions (1K or less) but anything over that stutters, and if it's a big data dump (like scp'ing a 30K file or receiving email

Routing from an Interface to an Alias

2002-10-09 Thread Jon-Erik Lido
UH 00lo0 Notice that the 10/24 subnet is listed, but not the 10.0.0.1 IP number. The Routing section of the FreeBSD Handbook alludes to being able to do this, so I assume it's possible. I just don't know what's wrong. Help!? -Jon To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: mbuf external buffer reference counters

2002-07-12 Thread Jon Mini
On Fri, Jul 12, 2002 at 07:45:07AM -0400, Bosko Milekic wrote: > > [ ... Description of modifying a bidrectional ring ... ] > > So I guess that what we're dealing with isn't really a > "monodirectional" ring. Right? Yep. =) -- Jonathan Mini <[EMAIL PROTECTED]> http://www.freebsd.org/ To Un

Re: mbuf external buffer reference counters

2002-07-12 Thread Jon Mini
On Thu, Jul 11, 2002 at 11:41:04PM -0700, Alfred Perlstein wrote: > > That's a cool idea.. haven't looked at NetBSD but am imagining the > > mbufs would be linked in a 'ring'. This works because you never > > care how many references are, just whether there's one or more than > > one, and this is

Re: the incredible shrinking socket

2002-07-07 Thread Jon Mini
On Sun, Jul 07, 2002 at 01:14:21PM -0700, Juli Mallett wrote: > * De: Mike Silbersack <[EMAIL PROTECTED]> [ Data: 2002-07-07 ] > [ Subjecte: Re: the incredible shrinking socket ] > > > > On Sun, 7 Jul 2002, Alfred Perlstein wrote: > > > > > Some time ago I noticed that there appeared to be

3com pcmcia nic

2002-04-17 Thread jon
   can a 3com pcmcia nic be put in promiscuous mode? if so what   models? thanks-- Jon  mailto:[EMAIL PROTECTED]Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax

pptp + mschap

2002-01-31 Thread Jon Drukman
my company recently switched from a nortel vpn system to a radius based scheme that is very windows-centric. i had no problems connecting to the nortel using pptpclient (from the ports). now it seems i'm being thrown by ms-chap authentication. i don't really know how to set this up. as far

4.4-R: need to ifconfig/route twice to use net

2001-10-09 Thread Jon Drukman
I just did a totally fresh install of 4.4-RELEASE on a brand new machine - totally blank unpartitioned hard disks. The installation appeared to go smoothly until I got to the "set root password" phase, at which point the installer hung. I aborted out of that and booted up from the new install