Re: netgraph kernel panic

2002-01-04 Thread Scott Lamb
Looks like I have a slightly different situation than you're describing. I'm not specifying a "set ipcp ranges" anywhere. The peer chooses an inside address that's different from but within the same /24 as its outside address. I'm trying to run everything within two /16s over the VPN (which inclu

Re: PPPoE and "carrier" lost?

2002-01-04 Thread Alain Thivillon
> back in where the remote ppp connection is lost, ppp doesn't recognize > this and still associates the old IP address with tun0. Isn't PPPoE > supposed to recognize a "carrier" lost? It seems to never notice when I No. > DSL: > set device PPPoE:xl0 > # set MRU 1490 > # set MTU 149

KAME ipsec and mtu (via gif) - no icmp frag needed

2002-01-04 Thread Tariq Rashid
this is a question about the correct way to handle MTUs and fragmentation when using IPSEC on FreeBSD4.4R I'm routing via a local gif0 tunnel which has aliases added to it for multiple destinations... and the KAME ipsec code grabs the packets just after they enter the gif0 device. In fact the ip

Please commit kern/31954 patch

2002-01-04 Thread Samuel Chow
Title: Please commit kern/31954 patch Hi there,     Can someone please commit kern/31954?  I've     just been bitten by it on a recently cvsup'ed     -stable.     For reference, the problem is the xl card not     seeing its own broadcast packet.     Thanks in adva

Re: PPPoE and "carrier" lost?

2002-01-04 Thread Julian Elischer
The pppoe protocol has no 'keepalives' so there is no way for the client side to know that there is a broken connection. However PPP DOES have keepalives so it should discover that it has lost connection after a while and tear down the link and restart it. In other wirds, it's not PPPOE's job but

ProFTPd RESUME

2002-01-04 Thread Marcel Dijk
Hello,   How do I configure ProFTPd to support resuming broken downloads.   Thanks!   Marcel

TCP connection via IPsec machine also running natd

2002-01-04 Thread Cambria, Mike
I'm having problems connecting (e.g. telnet, ssh, ftp etc.) to a machine which is at the other end of an IPsec tunnel. Passing data with machines, via this tunnel, on subnets for which the tunnel endpoint is acting as a router work just fine. I'm using FreeBSD 4.4-Stable (cvsup'ed shortly after

Re: TCP connection via IPsec machine also running natd

2002-01-04 Thread Rogier R. Mulhuijzen
>As I said earlier, packets which route through ipfw/natd get unencrypted and >make it to the remote subnet just fine. > >Looking at 'ipfw -a l' it seems that the ESP packets are being received >_after_ being diverted to natd, but just >not sent to the socket: I'm no IPsec expert (still some

Bridging and 'pseudo-device tap' and PPPoE

2002-01-04 Thread Naga R Narayanaswamy
Hello:   I want to create pseudo ethernet devices to simulate many NICs on a PC. In Solaris, we can do "ifconfig hme0:1 10.1.1.1 up" hme0:2 etc to create logival interfaces. I am trying to do a similar thing on FreeBSD. But after searching the archives, I find that I have to use tap device.

Re: Bridging and 'pseudo-device tap' and PPPoE

2002-01-04 Thread Rogier R. Mulhuijzen
At 07:39 3-1-2002 -0500, you wrote: Hello:   I want to create pseudo ethernet devices to simulate many NICs on a PC. In Solaris, we can do "ifconfig hme0:1 10.1.1.1 up" hme0:2 etc to create logival interfaces. I am trying to do a similar thing on FreeBSD. But after searching the archives, I find

Re: netgraph kernel panic

2002-01-04 Thread Archie Cobbs
Scott Lamb writes: > Looks like I have a slightly different situation than you're describing. > I'm not specifying a "set ipcp ranges" anywhere. The peer chooses an > inside address that's different from but within the same /24 as its > outside address. I'm trying to run everything within two /16

Re: netgraph kernel panic

2002-01-04 Thread Archie Cobbs
Archie Cobbs writes: > > Taking out my "set iface route" lines in mpd.conf made it no longer > > crash and I can talk to just the VPN host. So I tried next a "route add > > vpnhost mygw" before starting the VPN. It worked. So that's definitely > > the problem. It would be nice if there were a sli