RE: squeeze more performance out of natd? - some gprof stats

2002-02-14 Thread Tariq Rashid
attached are some gprof stats - it seems that sendto() is taking most of the time... does this mean that nothing can be done about it? what affects the speed of sendto() returning... i have the following boosted kernel params: net.local.stream.sendspace: 8192 net.local.stream.recvspace: 8192 ne

error writing routing socket, not enough buffer space.

2002-02-14 Thread Are Øhrn
After spending a few days, trying to find any scrap of information on the web and coming up empty, I make a last try here before nuking my freebsd box. I'm running FreeBSD 4.4 on an Duron 800, 256Mb ram, 3x3com 905c. The box is only running zebrad and bgpd. After booting the box, putting it on th

Netgraph LMC T3 Support?

2002-02-14 Thread Jason Hoffman
 Does netgraph support the LMC T3 interface? I am having trouble getting netgraph to find the interface.   Any reply would be greatly appreciated.   Thanks in advance,   Jay HoffmanMHO Networks(303) 584-9711

Bug in stateful code?

2002-02-14 Thread Michael Sierchio
I've sent this to Luigi and a couple of other folks without reply, so here it is. I'm seeing what I believe to be a bug in the stateful filter code for ipfw/ip_fw. Here's my original message: = Running ipfw w/natd, c

Re: rdr 127.0.0.1 and blocking 127/8 in ip_output()

2002-02-14 Thread Ruslan Ermilov
[Redirected to -net] On Thu, Feb 14, 2002 at 11:39:37AM -0500, Garrett Wollman wrote: > < said: > > > ping -s 127.1 1.2.3.4 > > telnet -S 127.1 1.2.3.4 > > If someone explicitly overrides source-address selection, they are > presumed to know WTF they are doing, and the kernel should not be > tr

Re: Bug in stateful code?

2002-02-14 Thread Luigi Rizzo
On Thu, Feb 14, 2002 at 08:42:53AM -0800, Michael Sierchio wrote: > > I've sent this to Luigi and a couple of other folks without reply, > so here it is. the reply was that keep-state and natd are very hard to use together, and besides it is rather useless because natd is stateful by itself. Th

Re: Bug in stateful code?

2002-02-14 Thread Michael Sierchio
Luigi Rizzo wrote: > the reply was that keep-state and natd are very hard to use > together, and besides it is rather useless because natd is stateful > by itself. natd is stateful, but provides no protection for inbound IP traffic that is destined for the filtering host itself. The ruleset

gated config

2002-02-14 Thread Jay Austad
Ok, I'm trying to use gated. Here's my setup... I have 2 machines in different offices, each with an internal and external ethernet interface. There is a gif0 tunnel between the external interfaces tied down to a 10.x.x.x address assigned to lo1. I've tried using the following config: bgp of

Re: Bug in stateful code?

2002-02-14 Thread Rogier R. Mulhuijzen
>>the reply was that keep-state and natd are very hard to use >>together, and besides it is rather useless because natd is stateful >>by itself. >natd is stateful, but provides no protection for inbound IP traffic >that is destined for the filtering host itself. I have personally looked at natd

Re: Bug in stateful code?

2002-02-14 Thread Rogier R. Mulhuijzen
At 22:25 14-2-2002 +0100, Rogier R. Mulhuijzen wrote: SNIP Oops, forgot a few rules at the end (bad copy/paste) So here it is again. tl0 is the interface on internal LAN lnc0 is the interface on external LAN #divert all http requests from internal network to quid c

Re: Bug in stateful code?

2002-02-14 Thread Luigi Rizzo
On Thu, Feb 14, 2002 at 12:43:44PM -0800, Michael Sierchio wrote: > >..., i do not feel like spending > >an hour or two trying to infer what is on your [some static rules], > >and i'll happily leave you the job to explain where the bug (which > >means reconstruct the flow of packets in and out of

MAC Layer of TCP/IP stack

2002-02-14 Thread Vinod Namboodiri
Hi there.I am about to embark on a research project wherein some changes need to be made in the MAC layer of the TCP/IP stack.We have a wireless testbed running on FreeBSD.I had a few doubts.can i make the changes from the TCP/IP stack source code of FreeBSD?I dont know much about the source code

MAC Layer of TCP/IP stack

2002-02-14 Thread Garrett Wollman
< said: > i need to be modifying the firmware of the wireless > network card which probably has the mac layer code? The MAC layer is almost invariably implemented in hardware for modern network interfaces. In the case of wireless networks, that's usually firmware running on a microcontroller i

Re: Bug in stateful code?

2002-02-14 Thread Crist J. Clark
On Thu, Feb 14, 2002 at 08:42:53AM -0800, Michael Sierchio wrote: > > I've sent this to Luigi and a couple of other folks without reply, > so here it is. I _DID_ reply to you and on -net explaining why this does not work. http://docs.freebsd.org/cgi/getmsg.cgi?fetch=13412+0+current/freebsd-ne

IPv6-over-IPv4 problems since the upgrade to 4.5

2002-02-14 Thread Edwin Groothuis
Greetings, Since the upgrade from 4.4 to 4.5 I have problems with my IPv6-over-v4-tunnel towards the freenet6-servers. The tunnel-setup goes fine, I can ping everything without a problem. But when I open an interactive session, after a short time weird things happen. The TCP-session itself goes

Re: IPv6-over-IPv4 problems since the upgrade to 4.5

2002-02-14 Thread Jean-Marc Zucconi
> Edwin Groothuis writes: > Greetings, > Since the upgrade from 4.4 to 4.5 I have problems with my > IPv6-over-v4-tunnel towards the freenet6-servers. I don't have this problem (but using ipng.nl as IPv6 tunnel): 4636247 bytes received in 79.96 seconds (56.62 KB/s) ftp> 221- Data tra