Re: fibnum3

2025-06-09 Thread Paul Vixie
noting that we can't get rid of the conditional branch no matter whether we assign twice or assign once, regardless of whether the condition is expressed as a trinary expression or an if-else chain. i didn't mean to imply otherwise.

Re: fibnum3

2025-06-09 Thread Paul Vixie
On Monday, June 9, 2025 5:19:53 PM UTC Mark Johnston wrote: > On Mon, Jun 09, 2025 at 04:42:55AM +0000, Paul Vixie wrote: > > ... > I've made a number of inline comments. tyvm! this is precisely the kind of review i'd hoped for. see inline. > > - so->so_fibnu

Re: dhclient vs aliases

2025-06-09 Thread Paul Procacci
On Mon, Jun 9, 2025 at 10:40 AM Andriy Gapon wrote: > > On 09/06/2025 17:26, Paul Procacci wrote: > > Re: > > https://forums.freebsd.org/threads/dhclient-trashing-alias-ip-address-upon-reconnect.58729/ > > > > You can use a dhclient.conf(5) entry like this to guar

Re: dhclient vs aliases

2025-06-09 Thread Paul Procacci
Re: https://forums.freebsd.org/threads/dhclient-trashing-alias-ip-address-upon-reconnect.58729/ You can use a dhclient.conf(5) entry like this to guarantee that the alias is re-applied every time the interface gets a new address from DHCP (or the old lease is re-applied): Code: alias

Re: HEADS UP: 15.0-CURRENT, change to bridge(4) might break some network configurations with “Invalid argument”

2025-05-19 Thread Paul Vixie
On Monday, May 19, 2025 6:09:08 PM UTC Patrick M. Hausen wrote: > Hi all, > > > Am 19.05.2025 um 19:28 schrieb Paul Vixie : > > > > If we move all member ifaddrs to the bridge itself, then will arp requests > > always have to be broadcast on all member interfaces?

HEADS UP: 15.0-CURRENT, change to bridge(4) might break some network configurations with “Invalid argument”

2025-05-19 Thread Paul Vixie
If we move all member ifaddrs to the bridge itself, then will arp requests always have to be broadcast on all member interfaces? If so this is intolerable from a security perspective, a complete nonstarter.

Re: fibnum2.diff (Re: per-FIB socket binding)

2025-03-27 Thread Paul Vixie
On Friday, March 21, 2025 8:22:56 AM UTC Paul Vixie wrote: > This is a reply to the second of two of Julian's recent messages. > > On Friday, March 14, 2025 4:45:48 AM UTC Julian Elischer wrote: > > > I think the order of evaluation would be Process FIB highest pr

Re: fibnum2.diff (Re: per-FIB socket binding)

2025-03-21 Thread Paul Vixie
This is a reply to the second of two of Julian's recent messages. On Friday, March 14, 2025 4:45:48 AM UTC Julian Elischer wrote: > On 2/21/25 8:35 AM, Paul Vixie wrote: > > On Thursday, February 20, 2025 4:47:41 PM UTC Mark Johnston wrote: > >> On Tue, Feb 18, 2025 at

Re: per-FIB socket binding

2025-03-21 Thread Paul Vixie
This is a reply to the first of two of Julian's recent messages. On Friday, March 14, 2025 4:26:30 AM UTC Julian Elischer wrote: > On 1/28/25 12:09 AM, Mark Johnston wrote: > > On Sat, Jan 25, 2025 at 08:44:25PM +, Paul Vixie wrote: > >> does anyone remember why the FIB

Re: fibnum2-fbsd15.diff (Re: per-FIB socket binding)

2025-02-26 Thread Paul Vixie
On Friday, February 21, 2025 12:35:17 AM UTC Paul Vixie wrote: > On Thursday, February 20, 2025 4:47:41 PM UTC Mark Johnston wrote: > > On Tue, Feb 18, 2025 at 05:16:07AM +0000, Paul Vixie wrote: > > > this is the second fibnum patch, ... now third, having ported the work to

Re: fibnum2.diff (Re: per-FIB socket binding)

2025-02-20 Thread Paul Vixie
On Thursday, February 20, 2025 4:47:41 PM UTC Mark Johnston wrote: > On Tue, Feb 18, 2025 at 05:16:07AM +0000, Paul Vixie wrote: > > this is the second fibnum patch, ... > > The high-level changes seem to be: > - If a TCP listening socket's FIB is 0, then the FIB of i

fibnum2.diff (Re: per-FIB socket binding)

2025-02-17 Thread Paul Vixie
- On Monday, January 6, 2025 3:56:55 PM UTC Mark Johnston wrote: > On Fri, Dec 27, 2024 at 08:48:48AM +0000, Paul Vixie wrote: > > On Tuesday, December 24, 2024 3:34:45 AM UTC Santiago Martinez wrote: > > > here’s another user of fibs. Each of our servers have multiple fibs and > &

Re: per-FIB socket binding

2025-01-25 Thread Paul Vixie
On Monday, January 13, 2025 6:59:20 PM UTC Mark Johnston wrote: > On Sun, Jan 12, 2025 at 07:17:48AM +0000, Paul Vixie wrote: > > On Saturday, January 11, 2025 4:51:07 PM UTC Mark Johnston wrote: > > > On Sat, Jan 11, 2025 at 06:25:22AM +, Paul Vixie wrote: > >

Re: per-FIB socket binding

2025-01-11 Thread Paul Vixie
On Saturday, January 11, 2025 4:51:07 PM UTC Mark Johnston wrote: > On Sat, Jan 11, 2025 at 06:25:22AM +0000, Paul Vixie wrote: > > On Monday, January 6, 2025 3:56:55 PM UTC Mark Johnston wrote: > > > On Fri, Dec 27, 2024 at 08:48:48AM +, Paul Vixie wrote: > > ...

Re: per-FIB socket binding

2025-01-10 Thread Paul Vixie
On Monday, January 6, 2025 3:56:55 PM UTC Mark Johnston wrote: > On Fri, Dec 27, 2024 at 08:48:48AM +0000, Paul Vixie wrote: > > ... > I think the patch is probably a good idea, and the trick of only > inheriting the packet's FIB if the socket's is non-zero would avoid

Re: per-FIB socket binding

2024-12-30 Thread paul
p. Julian, if not this, then what use cases were you acting from when giving interfaces a FIB in the first place? Vixie Sent from Workspace ONE Boxer On Dec 30, 2024 08:06, Julian Elischer wrote: On 12/24/24 1:06 PM, Jamie Landeg-Jones wrote: > Paul Vixie wrote: > >> i&

Re: per-FIB socket binding

2024-12-27 Thread Paul Vixie
at the form it takes in the source code (all those macros) could be simplified. > FIBs are useful as is, but also can be used with "ipfw setfib" that make > it irreplaceable. For my primary FIB use case, ipfw is OK, but I think we need a different default. To that end, see Message-ID <38589000.xm6rczx...@dhcp-151.access.rits.tisf.net>. -- Paul Vixie

Re: per-FIB socket binding

2024-12-27 Thread Paul Vixie
On Tuesday, December 24, 2024 3:34:45 AM UTC Santiago Martinez wrote: > Hi, > here’s another user of fibs. Each of our servers have multiple fibs and > jails with fibs. I like the proposed. > Santi Cool. Read on. On Tuesday, December 24, 2024 5:06:32 AM UTC Jamie Landeg-Jones wrote:

Re: per-FIB socket binding

2024-12-23 Thread Paul Vixie
so interesting but is a separate matter since those servers already have to maintain socket-per-interface in order to get their source addresses to match the client's destination address.) -- Paul Vixie

Re: Performance issues with vnet jails + epair + bridge

2024-09-12 Thread Paul Procacci
le the `problem' occurs. My guess is packets are getting shuttled between a global taskqueue thread. This is the default, or at least I'm not aware of this default being changed. You can try enabling `options RSS' in your kernel as this would introduce a taskqueue worker thread per cpu. ~Paul -- __ :(){ :|:& };:

Re: dropping udp fragments with ipfw

2024-09-01 Thread Paul Vixie
with "add pass udp" one creates a rule that permits initial fragments of a datagram, or unfragmented datagram, to pass. if this doesn't happen, then no subsequent fragment will matter even if allowed through -- because there will be no endpoint state to allow those fragments to be reassembled. s

Re: removing RIP/RIPng (routed/route6d)

2024-05-17 Thread Paul Vixie
<> That's been a very workable system. p vixie On May 17, 2024 21:32, "Rodney W. Grimes" wrote: > Scott writes: > > Anyway, fun's over. Perhaps this is a greater lesson that the Foundation > > provide the rules under which code is added or removed from base and then > > we'd all be

Re: removing RIP/RIPng (routed/route6d)

2024-05-15 Thread Paul Vixie
i think it's not too soon for the bsd community to become less reactionary. (yes, i know that's ironic coming from me.) https://nomadbsd.org/ i'd like freebsd to be fit for a lot of purposes. a complete OS is one of those that i will use the most. but not the only one for me, and not the only

Re: Source IPv4 address selection vs BGP IX connection

2024-04-24 Thread Paul Vixie
agreed. and one of my mods to the ultrix (~4.3bsd) kernel for gatekeeper.dec.com back in ~1990 was to use the result of gethostid(3) if that result was nonzero and if a socket was not already bound. so named(8) and ntpd(8) and anything else that used explicit binding got what they expected, but

Re: ixl(4) bhyve(8) SR-IOV with Transparent VLAN associated w/ VF's

2024-04-19 Thread Paul Procacci
On Wed, Apr 17, 2024 at 10:04 PM Lexi Winter wrote: > Paul Procacci: > > I'm assigning VF's to bhyve with pci passthru. > [...] > > Given this, I figured the best option would be to set the VLAN on the VF > on > > the host prior to handing it off to the

ixl(4) bhyve(8) SR-IOV with Transparent VLAN associated w/ VF's

2024-04-17 Thread Paul Procacci
l(4) which is a real possibility, it supports 'VLAN tag insertion/extraction'. Has anyone done this? Does anyone have any pointers to accomplish this? Thanks, Paul -- __ :(){ :|:& };:

Re: Network starvation question

2023-11-03 Thread Paul Vixie

ipfw firewalling for bhyve host, bypassing bhyve guests

2023-10-15 Thread Paul Vixie
You don't need L2 for this. The firewall pattern when your bare metal host has an address in the vlan you use for guests is: Allow the specific things you want the bare metal host to do; Deny all else involving the bare metal host; Allow all else involving the guest subnet. p vixie

propagating interface FIB to PCB

2023-08-08 Thread Paul Vixie
ed maste pointed me here after he saw me post the following on twixter: > to be clear, i can fix this and submit a patch, but won't if there ar

net.add_addr_allfibs=0 is ignored in loader.conf

2021-01-22 Thread Paul H
--- # cat /etc/rc.conf hostname="gateway" ifconfig_igb0="DHCP" ifconfig_igb0_ipv6="inet6 accept_rtadv -no_radr" rtsold_enable="YES" ifconfig_igb1="inet 10.112.146.1/24 fib 1" local_unbound_enable="YES" sshd_enable="Y

Getting netgraph stats

2020-10-23 Thread Paul Thornton
(think of the jail as being a private environment where I cannot route my SNMP requests to). Thanks Paul. ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freeb

Re: Netgraph VLANs on Hyper-V

2020-04-10 Thread Paul Thornton
re part of). and then I had to set the mac address for the ngeth interface that was set to be put into the jail ifconfig ngeth0 ether 02:00:01:02:03:04 Once done, and the jail started, ngeth0 worked as expected. In ESXi, the portgroup that vmx0 is connected to allowed spoofing and promiscuous mo

Re[2]: Re[2]: Network anomalies after update from 11.2 STABLE to 12.1 STABLE

2019-10-19 Thread Paul
he problem went away > when I connected the two machines with a cable, bypassing the network. > Might be worth a try, if you can do it? > > Good luck with it, rick > > ____ > From: owner-freebsd-...@freebsd.org on behalf > of Paul

Re[2]: Network anomalies after update from 11.2 STABLE to 12.1 STABLE

2019-10-19 Thread Paul
19 October 2019, 19:35:24, by "Michael Tuexen" : > > On 19. Oct 2019, at 18:09, Paul wrote: > > > > Hi Michael, > > > > Thank you, for taking your time! > > > > We use physical machines. We don not have any special `pf` rules. >

Re[2]: Network anomalies after update from 11.2 STABLE to 12.1 STABLE

2019-10-19 Thread Paul
8, timeout 0 Non-2xx or 3xx responses: 43616 Requests/sec: 4318.26 Transfer/sec: 1.25MB Do note, that, not only multiple queues cause issues they also dramatically decrease the performance of the network. Using `sysctl -w net.inet.tcp.ts_offset_per_conn=0` didn't help at all. Best regards, -Paul ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Network anomalies after update from 11.2 STABLE to 12.1 STABLE

2019-10-18 Thread Paul
/net/intel-ixl-kmod): ixl-1.11.9 Help with this matter would be really appreciated. Best regards, -Paul ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re[2]: Issues with TCP Timestamps allocation

2019-07-18 Thread Paul
> Please find a patch in https://reviews.freebsd.org/D20980 > > If possible, please test and report. > > Best regards > Michael > > > > > > I'm using FreeBSD 12 on my desktop and can confirm problem occur with some > > hosts. > > > > >

Re[2]: Issues with TCP Timestamps allocation

2019-07-09 Thread Paul
Hi Michael, 9 July 2019, 15:34:29, by "Michael Tuexen" : > > > > On 8. Jul 2019, at 17:22, Paul wrote: > > > > > > > > 8 July 2019, 17:12:21, by "Michael Tuexen" : > > > >>> On 8. Jul 2019, at 15:24, Paul wrote

Re[2]: Issues with TCP Timestamps allocation

2019-07-08 Thread Paul
8 July 2019, 17:12:21, by "Michael Tuexen" : > > On 8. Jul 2019, at 15:24, Paul wrote: > > > > Hi Michael, > > > > 8 July 2019, 15:53:15, by "Michael Tuexen" : > > > >>> On 8. Jul 2019, at 12:37, Paul wrote: > &

Re[2]: Issues with TCP Timestamps allocation

2019-07-08 Thread Paul
Hi Michael, 8 July 2019, 15:53:15, by "Michael Tuexen" : > > On 8. Jul 2019, at 12:37, Paul wrote: > > > > Hi team, > > > > Recently we had an upgrade to 12 Stable. Immediately after, we have started > > seeing some strange connection esta

Issues with TCP Timestamps allocation

2019-07-08 Thread Paul
Hi team, Recently we had an upgrade to 12 Stable. Immediately after, we have started seeing some strange connection establishment timeouts to some fixed number of external (world) hosts. The issue was persistent and easy to reproduce. Thanks to a patience and dedication of our system engineer we

Request for more intelligent local port allocation algorithm

2019-02-06 Thread Paul
Hi dev team, It's not a secret that when application is trying to establish new TCP connection, without first binding a socket to specific local interface address, OS handles that automatically. Unfortunately there is a catch, that lies in a different logic of local port allocation: (1) when s

bridge interface vs. altq

2018-10-28 Thread G. Paul Ziemba
nto the pfil(9) framework. The bridge can be used as a traffic shaper with altq(4) or dummynet(4). What am I missing? thanks! -- G. Paul Ziemba FreeBSD unix: 7:46PM up 4:50, 9 users, load averages: 0.52, 0.41, 0.32 ___ freebsd-net@

Avaya

2017-04-24 Thread Paul Kelly
ergy, Government, Banking, Legal, Transportation, Wholesale, Agriculture, Business Service, Marketing, Education, Hospitality And Media Internet. Let me know if you are interested and I will get back to you with the counts, sample and pricing. Await for your response. Regards, Paul Kelly Data Consultant

RE: Infor Partner Info

2017-02-01 Thread Paul Christopher
your Swift Response Regards, Paul Christopher Marketing Manager Cordell Data Marketing Inc. 984 Rowley Drive San Jose 95132 United States To opt out please response Remove in subject line. ___ freebsd-net@freebsd.org mailing list https:

Re: How can I send packets to 255.255.255.255 from the command line?

2016-08-18 Thread Paul Thornton
On 18/08/2016 21:55, Ryan Stone wrote: On Thu, Aug 18, 2016 at 4:48 PM, Paul A. Procacci wrote: You should be able to ping the local subnet. Alternatively you can use net/arping. ~Paul I'm specifically looking to test the handling of 255.255.255.255, so a local broadcast address i

Re: Same NIC name to MAC mapping on FreeBSD

2015-06-29 Thread Paul S.
On my production systems, I've never seen it deviate without hardware changes. Are you seeing otherwise? On 6/29/2015 午後 04:23, Wei Hu wrote: Hi, On a FreeBSD system with multiple NICs, ie, multiple MAC addresses, is there a way to keep the same network interface name to MAC address mapping

Re: Frequent hickups on the networking layer

2015-04-29 Thread Paul Thornton
ivers might have this issue? I've certainly seen performance decrease in the past between two machines with igb interfaces when the MTU was raised to use 9k frames. Paul. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailma

Re: net.inet.ip.forwarding is mysteriously set to 0

2015-04-27 Thread Paul Thornton
#x27;t know how this can be dealt with unless we have a load of special-cases that log warnings when, for example, forwarding is enabled in sysctl.conf but there isn't a gateway_enable in rc.conf. That sounds like a messy solution to be honest. Paul. __

Re: net.inet.ip.forwarding is mysteriously set to 0

2015-04-24 Thread Paul Thornton
d-net Paul. On 24/04/2015 17:47, Paul S. wrote: Can confirm that anything to do with netif restart on a forwarding interface also creates the same problem. On 4/25/2015 午前 01:46, Nikos Vassiliadis wrote: Hi, Just saw this. Can somebody re-produce this? root@m4fh2:~ # sysctl net.inet.ip.forwa

Re: net.inet.ip.forwarding is mysteriously set to 0

2015-04-24 Thread Paul S.
Can confirm that anything to do with netif restart on a forwarding interface also creates the same problem. On 4/25/2015 午前 01:46, Nikos Vassiliadis wrote: Hi, Just saw this. Can somebody re-produce this? root@m4fh2:~ # sysctl net.inet.ip.forwarding net.inet.ip.forwarding: 1 root@m4fh2:~ # i

Re: ng_netgraph and BGP

2015-04-01 Thread Paul S.
Additionally, pmacct doesn't seem to really work in FreeBSD -- as far as the latest versions go. Their use of 'return' (with no args) on functions that are meant to return an int flat out makes it unable to compile on FreeBSD. If you fix those by hand, it compiles, but just seems to segfault

Re: Unremovable ARP entry and 'address already in use'

2015-03-19 Thread Paul S.
van Gyzen wrote: On 3/19/2015 午前 11:20, Paul S. wrote: root@ipfw-0:~ # arp -d 110.62..211.87 arp: writing to routing socket: Invalid argument I have a vague memory of similar behavior when I had a misconfigured route. I think there was a route for a local interface address with an off-box gateway

Re: Unremovable ARP entry and 'address already in use'

2015-03-18 Thread Paul S.
I just noticed that when obfuscating the IP, I added two dots. Please excuse them, the IP is proper (110.62.211.87 for the purposes of this thread) On 3/19/2015 午前 11:20, Paul S. wrote: Hi, Seeing this on 10.1-release p5. FreeBSD ipfw-0.syd.fqdn.tld 10.1-RELEASE-p5 FreeBSD 10.1-RELEASE-p5

Unremovable ARP entry and 'address already in use'

2015-03-18 Thread Paul S.
Hi, Seeing this on 10.1-release p5. FreeBSD ipfw-0.syd.fqdn.tld 10.1-RELEASE-p5 FreeBSD 10.1-RELEASE-p5 #0 r278455: Mon Feb 9 07:18:21 UTC 2015 r...@ipfw-0.syd.fqdn.tld:/usr/obj/usr/src/sys/qfkern amd64 Basically, I have a static arp entry that I cannot remove. This in itself is not a pro

Re: FreeBSD responding with wrong receiving interface IP

2015-03-10 Thread Paul S.
Joe, That was it, thank you! I looked over net.inet.ip and ip6, icmp never crossed my mind. George, thank you as well. On 3/10/2015 午後 11:40, Joe Holden wrote: On 10/03/2015 13:16, George Neville-Neil wrote: On 10 Mar 2015, at 11:26, Paul S. wrote: Hi, I've been deploying FreeB

FreeBSD responding with wrong receiving interface IP

2015-03-09 Thread Paul S.
Hi, I've been deploying FreeBSD as customer edge routers for customers with sites that do not require high throughput (>1g/s). Each site has two ISPs (Mostly Telstra + Verizon/Optus), and take full routes via OpenBGPd and BIRD. I use next-hop self on all received routes. The FreeBSD boxes h

Re: ifconfig greX create disables IPv6 forwarding

2015-02-09 Thread Paul Thornton
S" in /etc/rc.conf should fix this. Paul. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: Issue with forwarding when creates new interface [was USB Tethering and forwarding]

2015-01-03 Thread Paul Thornton
net.inet.ip.fastforwarding: 1 net.inet6.ip6.forwarding: 1 That's quite ... odd, to sat the least. I can't see anything in devd.conf which would relate to a new interface being created, but that doesn't mean that there isn't some magic functional

Re: Issue with forwarding when creates new interface [was USB Tethering and forwarding]

2015-01-03 Thread Paul Thornton
as a router, so don't know if this crept in between 10.0 and 10.1 or 9 and 10. Paul. On 03/01/2015 13:12, wishmaster wrote: Hi, I have been seeing strange behavior of my system lately. After creating new interface the system variable net.inet.ip.forwarding becomes "0". E.g.

[Solved] Re: IP fast forwarding and setkey

2014-09-21 Thread Paul S.
to configure the SPDs. Cheers! On 9/21/2014 午後 07:35, Ermal Luçi wrote: On Sun, Sep 21, 2014 at 12:31 PM, Paul S. <mailto:cont...@winterei.se>> wrote: Ermal, I'd prefer a raw BSD installation (Call it a comfort thing, if you will). Has the pfSense project ac

Re: IP fast forwarding and setkey

2014-09-21 Thread Paul S.
Interesting. Would you happen to know where I could obtain sources to their version of OpenBGPD, then? Thanks! On 9/21/2014 午後 07:35, Ermal Luçi wrote: On Sun, Sep 21, 2014 at 12:31 PM, Paul S. <mailto:cont...@winterei.se>> wrote: Ermal, I'd prefer a raw BSD inst

Re: IP fast forwarding and setkey

2014-09-21 Thread Paul S.
Thank you for responding! On 9/21/2014 午後 07:26, Ermal Luçi wrote: If for you is an option pfSense has all the hard work done for you and you can use it for such installations. On Sun, Sep 21, 2014 at 12:08 PM, Paul S. <mailto:cont...@winterei.se>> wrote: Hi folks, I plan to

IP fast forwarding and setkey

2014-09-21 Thread Paul S.
Hi folks, I plan to make an edge router out of a freebsd system with OpenBGPD + FreeBSD 10, or such. I've been reading up, and noticed that the net.inet.ip.fastforwarding flag provides rather nice performance benefits. My issue is, my upstream networks insist on using TCP MD5 authentication

Re: problems with ifconfig alias via rc.conf

2014-07-16 Thread Jean Paul Galea
fined correctly. > The same as above. > Better use 10.0.0.53/24 or 10.0.0.53 netmask 255.255.255.0 I can't believe it was such a stupid mistake from my end :-) I guess you could say I had a syntax error ;-) Sorry for the trouble, and thank you

problems with ifconfig alias via rc.conf

2014-07-16 Thread Jean Paul Galea
me info; - we are running FreeBSD 9.2-RELEASE-p10. - in dmesg we had "ifa_del_loopback_route: deletion failed". - interestingly enough, the other 10.0.0.150 alias worked just fine. Perhaps something is mis-configured in /etc/rc.conf? Some argument is missing in ifconfig_* variables ?

Re: DNAT in freebsd

2013-06-30 Thread Paul A. Procacci
92.168.1.xx/24). > > Hope that makes it clearer, and I appreciate any help. > > Sami > 29 2013 03:30, ?? "Paul A. Procacci" > : The answer I provided you does exactly what you want it to do. Not to mention the man page goes over other things a

Re: DNAT in freebsd

2013-06-28 Thread Paul A. Procacci
10.0.0.100 # LSNAT redirect_port tcp 192.168.0.1:80,192.168.0.10:22 500# LSNAT --- ~Paul This message may contain confidential or privileged informat

Re: IPFW tablearg questions

2013-05-30 Thread Paul A. Procacci
mind it does. ;) # ipfw table 10 add 129.168.0.0/24 1234 ipfw table 10 add 10.5.21.0/24 5678 ipfw add 100 divert tablearg ip from table(10) to any # Perhaps knowing what it is you are trying to accomplish wou

Re: Is it possible to slow down the network interface?

2013-04-02 Thread Paul A. Procacci
arting place for you. ~Paul This message may contain confidential or privileged information. If you are not the intended recipient, please advise us immediately and delete this message. See http://www.datapipe.com/legal/email_disclaimer/ for further informat

Re: mbuf tuning on 9.1

2013-03-12 Thread Paul A. Procacci
re and sysctl's governing their operation. ~Paul This message may contain confidential or privileged information. If you are not the intended recipient, please advise us immediately and delete this message. See http://www.datapipe.com/legal/email_di

Re: Cas driver fails to load first time after boot.

2013-01-28 Thread Paul Keusemann
On 01/25/13 17:34, Marius Strobl wrote: On Fri, Jan 25, 2013 at 01:14:51PM -0600, Paul Keusemann wrote: On 01/25/13 10:19, Marius Strobl wrote: On Thu, Jan 24, 2013 at 08:48:04PM -0600, Paul Keusemann wrote: On 01/24/13 15:50, Marius Strobl wrote: On Thu, Jan 24, 2013 at 12:39:44PM -0600

Re: Cas driver fails to load first time after boot.

2013-01-24 Thread Paul Keusemann
On 01/24/13 15:50, Marius Strobl wrote: On Thu, Jan 24, 2013 at 12:39:44PM -0600, Paul Keusemann wrote: On 01/24/13 09:09, Marius Strobl wrote: On Tue, Jan 22, 2013 at 02:46:48PM -0600, Paul Keusemann wrote: Hi, I've got a Dell R200 which I'm trying to build into a gateway with

Re: Cas driver fails to load first time after boot.

2013-01-24 Thread Paul Keusemann
On 01/24/13 09:09, Marius Strobl wrote: On Tue, Jan 22, 2013 at 02:46:48PM -0600, Paul Keusemann wrote: Hi, I've got a Dell R200 which I'm trying to build into a gateway with a Sun QGE (501-6738-10). The cas driver fails to load the first time I try to load it but succeeds the s

Cas driver fails to load first time after boot.

2013-01-22 Thread Paul Keusemann
ss: 00:14:4f:25:ca:13 Jan 22 14:04:33 lucid kernel: cas3: [FILTER] The following are attached: /var/run/dmesg.boot dmesg output after the second attempt to load the cas driver. /var/log/messages after the second attemp to load the cas driver. -- Paul Keusemann

Re: one physical interface -> n virtual interfaces

2012-10-16 Thread Paul A. Procacci
n late 2010. It has one example of creating vitual interfaces using the netgraph module. 3rd post from the top. I'm not entirely sure if this is the current _correct_ way, but I imagine is still accurate and can be used to get you started. ~Paul This messag

Re: shape network traffic but give priority to one application

2012-10-09 Thread Paul A. Procacci
gt; http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org" Now sure about pfsense, but I use ipfw w/ weighted queues pretty effectively. ~Paul This message may contain confidenti

Re: DHCP server with a group of mac address

2012-09-26 Thread Paul A. Procacci
In dhcp.conf it describes ways to assign client's to classes. It further explains how to `deny` or `allow` those clients assigned to those classes. Read the subsection from dhcpd.conf(5) called `SUBCLASSES`. It provides an example which almost answers your question in its entirety. ~Pau

Re: Multiroute question

2012-09-23 Thread Paul Schenkeveld
ose and is quite clean IMO. It's also not necessary to run multiple server processes (like sshd, sendmail, httpd) for every routing domain. With kind regards, Paul Schenkeveld ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/li

Re: tcpdump in freebsd

2012-07-26 Thread Paul A. Procacci
tcpdump -ni src host tcpdump -ni not src host ~Paul On Thu, Jul 26, 2012 at 08:35:29AM +, m s wrote: > hi all. I want to use tcpdump just for input or just for outout > packet.isthis possible ? if no is there any other command that do > this?

Re: System doesn't detect unplugged network cable and doesn't set interface up properly with DHCP

2012-07-12 Thread Paul A. Procacci
h "subsystem" "em0_or_whatever"; match "type" "LINK_DOWN"; action "/usr/local/sbin/script_to_do_something.sh down"; }; ## ~Paul This message m

Re: setting up dns server

2012-07-04 Thread Paul A. Procacci
- What bind listening? (Can you see it with netstat?) - What port is it listening to? - What errors (if any) are in the error log? I'm afraid your question really isn't a specific FreeBSD problem. You might have better luck on the BIND mailing list. ~Paul On Wed, Jul 04, 2012 at

Re: problem on ipfw using mac addresses

2012-07-04 Thread Paul A. Procacci
Have you set net.link.ether.ipfw? ~Paul On Wed, Jul 04, 2012 at 05:34:04PM +0430, h bagade wrote: > Hi all, > > I have a problem using ipfw firewall. I have a topology connected as below: > > A(192.168.1.55) - (192.168.1.1)my_sys(192.168.2.1) > ---(192.168.2.12)B >

Re: fsck problem FreeBSD 8.3

2012-04-09 Thread Paul A. Procacci
Nothing logged in /var/log/* or crashes that exist in /var/crash would indicate to me some sort of hardware related problem. Have you tested your hardware lately and know that it is in operational order? ~Paul On Mon, Apr 09, 2012 at 09:36:54PM +0300, ??? ??? wrote: > Hi. > >

if_bridge stops when running virtualbox 4.1.8

2012-03-04 Thread Paul Schenkeveld
5 priority 128 path cost 200 member: em0 flags=143 ifmaxaddr 0 port 1 priority 128 path cost 2 vboxnet0: flags=8802 metric 0 mtu 1500 ether 0a:00:27:00:00:00 Thanks! Paul Schenkeveld ___ freebsd-net@freebsd.org ma

Re: must define username in radius client???

2012-02-21 Thread Paul A. Procacci
; 3 2 auth 10.5.21.5:1645 "SuperSkret" 3 2 ~Paul On Tue, Feb 21, 2012 at 11:24:03AM +0330, saeedeh motlagh wrote: > hello guys, > i wanna have authentication via radius server. in my local network, > one system is radius server and the others are clients. the server is > runnin

Re: Help : configuring wpa_suplpicant.conf for WEP + login/passwd

2012-02-15 Thread Paul A. Procacci
On Wed, Feb 15, 2012 at 04:02:22PM +0100, Arno J. Klaassen wrote: > > Hello, > > "Paul A. Procacci" writes: > > > Is your DHCP daemon setup to listen on the interface where the AP is > > running? > > Dunno... How could eventually be sure Windows got i

Re: Help : configuring wpa_suplpicant.conf for WEP + login/passwd

2012-02-14 Thread Paul A. Procacci
Is your DHCP daemon setup to listen on the interface where the AP is running? For username/password prompt upon browser launch, you'll need to configure a reverse proxy to get a cookie upon successful auth to pass through the proxy. ~Paul On Tue, Feb 14, 2012 at 09:49:01PM -0800, Adrian

Re: Processes' FIBs

2012-01-10 Thread Paul A. Procacci
http://lists.freebsd.org/pipermail/freebsd-questions/2009-April/196532.html Not sure about ps/et al, but you can do it according to that post. Nearly 2 years old now. ~Paul On Tue, Jan 10, 2012 at 09:12:17PM +0100, Oliver Fromme wrote: > Hi, > > Is there a way to find out the de

Re: how to debug non-working hole in nat

2012-01-03 Thread Paul A. Procacci
place to redirect the packet to the nat instance? I do not see any. ~Paul This message may contain confidential or privileged information. If you are not the intended recipient, please advise us immediately and delete this message. See http://www.datapipe.

Re: [PATCH] ndis: safe fpu on amd64

2011-11-22 Thread Paul B. Mahol
On 11/22/11, Kostik Belousov wrote: > On Mon, Nov 21, 2011 at 03:49:16PM +0000, Paul B. Mahol wrote: >> Hi, >> >> This patch should fix panic on amd64 when using ndis with drivers >> which make use of fpu registers. > Do not allocate fpu_kern_ctx on stack. Its si

[PATCH] ndis: safe fpu on amd64

2011-11-21 Thread Paul B. Mahol
Hi, This patch should fix panic on amd64 when using ndis with drivers which make use of fpu registers. diff --git a/sys/compat/ndis/kern_windrv.c b/sys/compat/ndis/kern_windrv.c index 5572988..1a93b54 100644 --- a/sys/compat/ndis/kern_windrv.c +++ b/sys/compat/ndis/kern_windrv.c @@ -55,6 +55,9 @@

Re: [High Interrupt Count] Networking Difficulties

2011-10-31 Thread Paul A. Procacci
On Mon, Oct 31, 2011 at 08:57:46PM -0500, Paul A. Procacci wrote: > Gents, > > I'm having quite an aweful problem that I need a bit of help with. > > I have an HPDL360 G3 ( > http://h18000.www1.hp.com/products/quickspecs/11504_na/11504_na.HTML ) which > acts as a NAT

[High Interrupt Count] Networking Difficulties

2011-10-31 Thread Paul A. Procacci
.16.0.3 netmask 0xfffc broadcast 172.19.255.255 inet6 fe80::20b:cdff:feca:1a74%bge1 prefixlen 64 scopeid 0x2 nd6 options=3 media: Ethernet autoselect (1000baseT ) status: active #

Re: kern/127050: [carp] ipv6 does not work on carp interfaces [regression]

2011-08-22 Thread Paul Herman
On 8/21/2011 1:47 AM, Ask Bjørn Hansen wrote: On Aug 19, 2011, at 1:30, Paul Herman wrote: --010305010708060807000808 Content-Type: application/gzip; name="carp_ip6_alias.patch.gz" Content-Transfer-Encoding: base64 Content-Disposition: attachment;

Re: kern/127050: [carp] ipv6 does not work on carp interfaces [regression]

2011-08-19 Thread Paul Herman
The following reply was made to PR kern/127050; it has been noted by GNATS. From: Paul Herman To: bug-follo...@freebsd.org Cc: Wouter de Jong , Jacek Zapala Subject: Re: kern/127050: [carp] ipv6 does not work on carp interfaces [regression] Date: Fri, 19 Aug 2011 10:13:46 +0200 This is a

Re: Debugging dropped shell connections over a VPN

2011-07-27 Thread Paul Keusemann
On 07/27/11 06:50, Gary Palmer wrote: On Tue, Jul 26, 2011 at 01:35:16PM -0500, Paul Keusemann wrote: On 07/26/11 08:05, Gary Palmer wrote: On Tue, Jul 26, 2011 at 06:53:59AM -0500, Paul Keusemann wrote: Again, sorry for the sluggish response. On 07/20/11 15:15, Gary Palmer wrote: On Tue

Re: Debugging dropped shell connections over a VPN

2011-07-26 Thread Paul Keusemann
On 07/26/11 08:05, Gary Palmer wrote: On Tue, Jul 26, 2011 at 06:53:59AM -0500, Paul Keusemann wrote: Again, sorry for the sluggish response. On 07/20/11 15:15, Gary Palmer wrote: On Tue, Jul 12, 2011 at 02:26:34PM -0500, Paul Keusemann wrote: On 07/07/11 14:39, Chuck Swiger wrote: On Jul 7

Re: Debugging dropped shell connections over a VPN

2011-07-26 Thread Paul Keusemann
Again, sorry for the sluggish response. On 07/20/11 15:15, Gary Palmer wrote: On Tue, Jul 12, 2011 at 02:26:34PM -0500, Paul Keusemann wrote: On 07/07/11 14:39, Chuck Swiger wrote: On Jul 7, 2011, at 4:45 AM, Paul Keusemann wrote: My setup is something like this: - My local network is a mix

Re: Debugging dropped shell connections over a VPN

2011-07-26 Thread Paul Keusemann
Once again, apologies for my sluggish response. The VPN problem is a background job worked on when I can or when I'm too annoyed by it to do anything else. On 07/12/11 17:42, Chuck Swiger wrote: On Jul 12, 2011, at 12:26 PM, Paul Keusemann wrote: So, any other ideas on how to debug

  1   2   3   4   5   >