Re: ipnat

2001-12-05 Thread Crist J . Clark
[This would be better on the -questions list or IPFilter list.] On Tue, Dec 04, 2001 at 09:05:10PM +0200, [EMAIL PROTECTED] wrote: [snip] > -- ipnat.rules -- > map xl0 172.27.0.0/23 -> x.x.x.x/32 proxy port ftp ftp/tcp > map xl0 from 172.27.0.0/23 to any -> x.x.x.x/32 > -- eof -- Try, map xl

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Crist J . Clark
On Wed, Dec 05, 2001 at 12:44:30PM +0700, Eugene Grosbein wrote: > Hi! > Not sure what is correct list, this is about network security. > > Flag NOARP did not work for ethernet interface before 4.4-RELEASE. > We needed static ARP table so used local patch for it. > 4.4-RELEASE implemented NOARP b

Re: ipnat

2001-12-05 Thread veedee
On Wed, Dec 05, 2001 at 03:40:16AM -0800, Crist J . Clark wrote: > [This would be better on the -questions list or IPFilter list.] Sorry to be a pain in the ass, but is there a freebsd-ipfilter? haven't found any at http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/eresources.html Or you

Surecom EP-320X-S ethernet adapter under FreeBSD

2001-12-05 Thread Vladislav Vasilenko
Does anybody tried to install this card on FreeBSD 4.4 ? It's seems that drivers, supported by Surecom was written for ancient version of FreeBSD ;( Thank in advance . Best regards, Vladislav Vasilenko. Hardware engineer. National Technical University of Ukraine To Unsubscribe: send mail to [

Re: HEADS-UP: net polling code now in STABLE.

2001-12-05 Thread Michael Nottebrock
Luigi Rizzo wrote: > i just committed a patch to dev/fxp/if_fxp.c pci/if_dc.c and > pci/if_sis.c which should fix this. It's a very simple one so you > can just fetch the diff from the cvs repository and rebuild the > kernel, without having to upgrade the whole system. The system boots fine now,

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Eugene Grosbein
On Wed, Dec 05, 2001 at 04:03:16AM -0800, Crist J . Clark wrote: > > Not sure what is correct list, this is about network security. > > Flag NOARP did not work for ethernet interface before 4.4-RELEASE. > > We needed static ARP table so used local patch for it. > > 4.4-RELEASE implemented NOARP b

Re: HEADS-UP: net polling code now in STABLE.

2001-12-05 Thread Luigi Rizzo
On Wed, Dec 05, 2001 at 04:08:06PM +0100, Michael Nottebrock wrote: > Luigi Rizzo wrote: > > >i just committed a patch to dev/fxp/if_fxp.c pci/if_dc.c and > >pci/if_sis.c which should fix this. It's a very simple one so you > >can just fetch the diff from the cvs repository and rebuild the > >ker

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Ruslan Ermilov
On Wed, Dec 05, 2001 at 11:17:35PM +0700, Eugene Grosbein wrote: > On Wed, Dec 05, 2001 at 04:03:16AM -0800, Crist J . Clark wrote: > > > > Not sure what is correct list, this is about network security. > > > Flag NOARP did not work for ethernet interface before 4.4-RELEASE. > > > We needed stati

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Ruslan Ermilov
On Wed, Dec 05, 2001 at 07:38:59PM +0200, Ruslan Ermilov wrote: > On Wed, Dec 05, 2001 at 11:17:35PM +0700, Eugene Grosbein wrote: > > On Wed, Dec 05, 2001 at 04:03:16AM -0800, Crist J . Clark wrote: > > > > > > Not sure what is correct list, this is about network security. > > > > Flag NOARP did

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Louis A. Mamakos
Doesn't this behavior need to be on a per-interface basis? I'm wondering if a single sysctl is sufficient to get the desired effect. louie To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Ruslan Ermilov
On Wed, Dec 05, 2001 at 01:35:52PM -0500, Louis A. Mamakos wrote: > Doesn't this behavior need to be on a per-interface basis? I'm wondering > if a single sysctl is sufficient to get the desired effect. > No, we want ARP table to stay intact no matter which interface sends us an update. Cheers

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Louis A. Mamakos
> On Wed, Dec 05, 2001 at 01:35:52PM -0500, Louis A. Mamakos wrote: > > Doesn't this behavior need to be on a per-interface basis? I'm wondering > > if a single sysctl is sufficient to get the desired effect. > > > No, we want ARP table to stay intact no matter which interface > sends us an upda

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Crist J . Clark
On Wed, Dec 05, 2001 at 01:52:48PM -0500, Louis A. Mamakos wrote: > > On Wed, Dec 05, 2001 at 01:35:52PM -0500, Louis A. Mamakos wrote: > > > Doesn't this behavior need to be on a per-interface basis? I'm wondering > > > if a single sysctl is sufficient to get the desired effect. > > > > > No, w

netgraph bridge works on fxp0, fails on wi0

2001-12-05 Thread David Gilbert
The netgraph bridge setup for vmware works very well and I've been happy with it for some time running on my laptop. My old laptop had an ep0 pccard and my new laptop has a builtin (PCI-attached) fxp0. I have also had vmware work with an ed0 pccard. However, we all just got new wireless network

Re: netgraph bridge works on fxp0, fails on wi0

2001-12-05 Thread Brooks Davis
On Wed, Dec 05, 2001 at 05:23:48PM -0500, David Gilbert wrote: > The netgraph bridge setup for vmware works very well and I've been > happy with it for some time running on my laptop. My old laptop had > an ep0 pccard and my new laptop has a builtin (PCI-attached) fxp0. I > have also had vmware

Re: netgraph bridge works on fxp0, fails on wi0

2001-12-05 Thread David Gilbert
> "Brooks" == Brooks Davis <[EMAIL PROTECTED]> writes: Brooks> On Wed, Dec 05, 2001 at 05:23:48PM -0500, David Gilbert wrote: >> The netgraph bridge setup for vmware works very well and I've been >> happy with it for some time running on my laptop. My old laptop >> had an ep0 pccard and my n

Re: netgraph bridge works on fxp0, fails on wi0

2001-12-05 Thread Brooks Davis
On Wed, Dec 05, 2001 at 06:55:20PM -0500, David Gilbert wrote: > > "Brooks" == Brooks Davis <[EMAIL PROTECTED]> writes: > > Brooks> On Wed, Dec 05, 2001 at 05:23:48PM -0500, David Gilbert wrote: > >> The netgraph bridge setup for vmware works very well and I've been > >> happy with it for som

Re: HEADS-UP: net polling code now in STABLE.

2001-12-05 Thread misho
Hi Luigi, I found this bug several days ago, but I don;t have free time to send you simple patch. In my opinion it;s better to disable interrupts in xxx_intr() code when device is in polling mode. Something like this: /* * Process interface interrupts. */ static void fxp_intr(void *xsc) { str

Re: HEADS-UP: net polling code now in STABLE.

2001-12-05 Thread Luigi Rizzo
On Thu, Dec 06, 2001 at 04:50:46AM +0200, misho wrote: > Hi Luigi, > > I found this bug several days ago, but I don;t have free time to send you > simple patch. > In my opinion it;s better to disable interrupts in xxx_intr() code when > device is in polling mode. > Something like this: I have co

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Eugene Grosbein
On Wed, Dec 05, 2001 at 07:38:59PM +0200, Ruslan Ermilov wrote: > The below patch implements this facility, activated by setting the > net.link.ether.inet.static_arp sysctl to a non-zero value. It also > fixes an mbuf leak in arpresolve() if IFF_NOARP flag is set on an > interface, and an addres