Re: IPFW serious problems

2002-02-22 Thread Michele Possamai
I don't know what you exactly want to do.. but if you are using natd with ipfw try the options in natd.. they work a lot easier then ipfw.. On Thu, 21 Feb 2002, Ivan Coimbra wrote: > I am having serious problems with the ipfw of FreeBSD. I am trying to use > the forward of packages, and I am hav

TCP Connections to a Broadcast Address

2002-02-22 Thread Crist J. Clark
BSD-based TCP/IP code have a bug with respect to creating TCP connections to a broadcast address. This bug can potentially be a security vulnerability when firewall administrators assume that the TCP implementation works correctly and does not block broadcast addresses. The Standard: TCP connec

Re: TCP Connections to a Broadcast Address

2002-02-22 Thread Crist J. Clark
Please note, the previous mail on this topic I sent to net@ has a bad 'From:' address in the header. Replies will not make it back to me. In responses, please change the 'To:' to one of my valid addresses like "[EMAIL PROTECTED]" I apologize for the confusion. I am still trying to figure out how

Re: mtu on gif devices

2002-02-22 Thread JINMEI Tatuya / $B?@L@C#:H(B
Sorry for the delayed response, > On Thu, 7 Feb 2002 22:03:46 +0100, > Bart Matthaei <[EMAIL PROTECTED]> said: > The weird thing is, though, that since i've upgraded to 4.5, ssh > connections from my irix and bsd box in my network (which have > public ip's tunneled from work) die sponta

Re: TCPv6 lags in 4.5-RELEASE?

2002-02-22 Thread JINMEI Tatuya / $B?@L@C#:H(B
> On Sat, 09 Feb 2002 23:12:14 -0800, > Nick Sayer <[EMAIL PROTECTED]> said: > I don't know if I can quantify the issue very well, but since moving > from 4.4-RELEASE to 4.5-RELEASE on my laptop, I've noticed that > TCP-over-IPv6 sessions get stuck rather easily. They end up in a state

Re: mtu on gif devices

2002-02-22 Thread Bart Matthaei
On Fri, Feb 22, 2002 at 08:26:52PM +0900, JINMEI Tatuya / ?$B?@L@C#:H?(B wrote: > Sorry for the delayed response, > > How did you configure (particularly the default) routes on the host > "colo"? I've seen several reports that the default route on a tunnel > link has somehow become bogus. > > B

Re: gif0 tunnel and rip (using zebra)

2002-02-22 Thread JINMEI Tatuya / $B?@L@C#:H(B
> On Tue, 12 Feb 2002 13:13:51 -0600, > "Jay Austad" <[EMAIL PROTECTED]> said: > I'm trying to propagate rip routes using zebra (ripd) across a gif0 > tunnel interface to another freebsd box running zebra. > I have zebra and ripd running, but they only seem to broadcast routes > out t

Re: IPv6-over-IPv4 problems since the upgrade to 4.5

2002-02-22 Thread JINMEI Tatuya / $B?@L@C#:H(B
> On Sun, 17 Feb 2002 12:25:10 +1100, > Edwin Groothuis <[EMAIL PROTECTED]> said: >> I recently installed the freenet6 port to test IPv6 and have been >> experiencing similar problems, I can ping6 any host but my ftp >> connections stall at some point. >> >> As an alternative you can us

Re: IPv6-over-IPv4 problems since the upgrade to 4.5

2002-02-22 Thread Edwin Groothuis
On Fri, Feb 22, 2002 at 08:59:18PM +0900, JINMEI Tatuya / ?$B?@L@C#:H?(B wrote: > > On Sun, 17 Feb 2002 12:25:10 +1100, > > Edwin Groothuis <[EMAIL PROTECTED]> said: > > >> I recently installed the freenet6 port to test IPv6 and have been > >> experiencing similar problems, I can ping6 a

why win2k can't connect to mpd bye pptp with mppe encryption?

2002-02-22 Thread tang hongbin
Dear All; I tried, on win2k, to dial-up to mpd(v3.7) on freebsd with mppe encryption. But I failed. win2k display error messages "the remote server doesn't support the data encrption type". I enabled "mpp-e40","mpp-e128" and "mpp-stateless". I also check mpd3.7's source Makefile and found

Re: IPv6-over-IPv4 problems since the upgrade to 4.5

2002-02-22 Thread JINMEI Tatuya / $B?@L@C#:H(B
> On Fri, 22 Feb 2002 23:48:29 +1100, > Edwin Groothuis <[EMAIL PROTECTED]> said: >> > I found what caused this. he.net uses the "route add -inet6 default >> > " statement while freenet6.net uses "route add -inet6 >> > default -interface gif0" statement. >> >> Could you tell me the exac

Re: nd6_rtrequest: bad gateway value: stf0

2002-02-22 Thread JINMEI Tatuya / $B?@L@C#:H(B
> On Sat, 16 Feb 2002 13:16:40 -0800, > Ross Finlayson <[EMAIL PROTECTED]> said: > I have tried to configure my system (FreeBSD 4.5-STABLE) for 6to4, using > the "stf" interface, but am getting the error message "nd6_rtrequest: bad > gateway value: stf0" in my log, whenever I try to 'p

Re: incorrect checksums with xl?

2002-02-22 Thread John Polstra
In article <[EMAIL PROTECTED]>, Lars Eggert <[EMAIL PROTECTED]> wrote: > > I'm looking at a packet trace taken of an xl card under 4.5, and I see > bad IP and TCP/UDP checksums. The release notes state that checksumming > maybe offloaded to the NIC now, but I'd still expect them to be correct

Re: incorrect checksums with xl?

2002-02-22 Thread Lars Eggert
John, John Polstra wrote: > You are running tcpdump on the system that's sending the "bad" > packets, right? It makes perfect sense. The TCP/IP stack knows > that the NIC is going to insert the checksums, so it doesn't bother > calculating them itself. So BPF is handed packets in mbufs without

IPSec VPN Questions, comments wanted :-)

2002-02-22 Thread Rickard Borgmäster
I'm about to find a solutions t VPN-interconnect out branch offices. Today we have a main site with a /28-net where the network servers are located. Internal net is 10.0.0/24 with S-NAT for the servers. Branch offices use ICA protocol to connect to internal Windows Termnal server. Branch offices

Re: incorrect checksums with xl?

2002-02-22 Thread John Polstra
In article <[EMAIL PROTECTED]>, Lars Eggert <[EMAIL PROTECTED]> wrote: > > You are running tcpdump on the system that's sending the "bad" > > packets, right? It makes perfect sense. The TCP/IP stack knows > > that the NIC is going to insert the checksums, so it doesn't bother > > calculating th

Fw: /kernel: arplookup xx.xxx.x.xx failed: could not allocate llinfo

2002-02-22 Thread alexus
can someone explain me what does it means? i get this in my syslog /kernel: arplookup xx.xxx.x.xx failed: could not allocate llinfo /kernel: arpresolve: can't allocate llinfo for xx.xxx.x.xxrt To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the mess

Re: incorrect checksums with xl?

2002-02-22 Thread Joe Eykholt
It seems like along with the packet being sent up to bpf, there's a need for some flags that tell tcpdump about the packet. I haven't looked at the current implementation, but in another system, I found it useful to add a flag indicating whether the packet was being received or transmitted.

Re: incorrect checksums with xl?

2002-02-22 Thread Kevin Oberman
> Date: Fri, 22 Feb 2002 09:30:06 -0800 (PST) > From: John Polstra <[EMAIL PROTECTED]> > Sender: [EMAIL PROTECTED] > > In article <[EMAIL PROTECTED]>, Lars Eggert <[EMAIL PROTECTED]> wrote: > > > You are running tcpdump on the system that's sending the "bad" > > > packets, right? It makes perfe

Re: incorrect checksums with xl?

2002-02-22 Thread John Polstra
In article <[EMAIL PROTECTED]>, Joe Eykholt <[EMAIL PROTECTED]> wrote: > > It seems like along with the packet being sent up to bpf, there's > a need for some flags that tell tcpdump about the packet. I haven't > looked at the current implementation, but in another system, I found > it useful t

Re: incorrect checksums with xl?

2002-02-22 Thread Richard A Steenbergen
On Fri, Feb 22, 2002 at 09:43:58AM -0800, John Polstra wrote: > In article <[EMAIL PROTECTED]>, > Joe Eykholt <[EMAIL PROTECTED]> wrote: > > > > It seems like along with the packet being sent up to bpf, there's > > a need for some flags that tell tcpdump about the packet. I haven't > > looked a

FW: 3com gigabit 3c996b-t

2002-02-22 Thread Jeff Lawton
  I am having trouble getting a 3com 3c996b-t to installed correctly. Is here a reference on how to properly set up the bge(4) driver. I am useing 4.5 release       Jeff  

Re: FW: 3com gigabit 3c996b-t

2002-02-22 Thread Jesper Skriver
On Fri, Feb 22, 2002 at 05:41:03PM -0500, Jeff Lawton wrote: > I am having trouble getting a 3com 3c996b-t to installed correctly. Is > here a reference on how to properly set up the bge(4) driver. I am > useing 4.5 release If you told what the problem was, it would be a whole lot easier to help

RE: 3com gigabit 3c996b-t

2002-02-22 Thread Jeff Lawton
Bge detects the card and it shows up on ifconfig it does not detect 1000basetx on autoselect even though the card and the switch both register 1000baset. I connected it to a 100base t port and it seems to work fine. How do I get it to switch to 1000baset This is the bge section of ifconfig bge0:

Re: IPv6-over-IPv4 problems since the upgrade to 4.5

2002-02-22 Thread Edwin Groothuis
On Fri, Feb 22, 2002 at 11:49:59PM +0900, JINMEI Tatuya / ?$B?@L@C#:H?(B wrote: > > On Fri, 22 Feb 2002 23:48:29 +1100, > > Edwin Groothuis <[EMAIL PROTECTED]> said: > > >> > I found what caused this. he.net uses the "route add -inet6 default > >> > " statement while freenet6.net uses "r

3com gigabit 3c996b-t

2002-02-22 Thread Jeff Lawton
On 100baset it only works for a few minuites I can mount other nfs drives and ftp to other machines. But when I ssh in to it. I get in and about 4 commands, it disconnects and will not let me back in and It can no longer connect to anything either.   Jeff Lawton Ideal Solution, LLC  

siocsifmedia error w/bge driver

2002-02-22 Thread Jeff Lawton
I am attempting to install a 3com 996b-t on a 4.5 i386 machine and I receive “siocsifmedia Device Not Configured” when I attempt to for it into 1000basetx mode with the following command: Ifconfig bge0 media 1000baseTX Any help with this is greatly appreciated. Jeff Lawton Ideal Solution, LLC

ppp -nat fails with adsl, but ok with modem

2002-02-22 Thread Greg Black
I've had ppp -nat working just fine over a normal modem link, but it is not working at all well on my ADSL link to the same provider. To quantify "not working at all well", although I can ping and traceroute ok from the hosts on my LAN, HTTP and FTP traffic is so slow and bursty as to be useless.

subscribe

2002-02-22 Thread Onie Camara
subscribe To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

I can't build freebsd4.2 kernel with option NETGRAPH_MPPC_ENCRYPTION??

2002-02-22 Thread tang hongbin
Dear all; When I selected options NETGRAPH_MPPC_ENCRYPTION, rather than options NETGRAPH_MPPC_COMPRESSION, in kernel config and tried to rebuild freebsd v42. kernel, I failed. The system printed the error messages as following . linking kernel ng_mppc.o: In function `ng_mppc_constructo