How to set up a gateway?

2002-04-17 Thread Idar Tollefsen
Hello, I have a machine running FreeBSD 4.5 STABLE. This machine has two NICs in it, one connected to the internal LAN and one connected to a ADSL modem (I'm using PPPoE). I've successfully managed to set them up so that the FreeBSD machine has access to the Internet, that works flawlessly, but

Re: 5.Current Netgraph, Mutex

2002-04-17 Thread Roman Kurakin
Hi, Call stack looks like this: witness_destroy mtx_destroy fdtree exit1 sys_exit syscall syscall_with_err_pushed This is all information I have at that moment. I could also send full texts of driver. I also have question about ng_rmtype (&typestruct) function. It seems that no one uses it. Th

FreeBSD 4.5 and network problems

2002-04-17 Thread Alexander Isaev
I have installed FreeBSD 4.5. Everything worked OK from the console. But when I tried to connect to it remotely (using SSH) I had some network troubles. From time to time to time the connection hangs for a short time. First of all I've tried to install another network card (I've replaced

Re: 5.Current Netgraph, Mutex

2002-04-17 Thread Maksim Yevmenkin
Roman Kurakin wrote: > #if __FreeBSD_version >= 50 > mtx_init (&d->queue.ifq_mtx, "cp_queue", MTX_DEF); > mtx_init (&d->hi_queue.ifq_mtx, "cp_queue_hi", MTX_DEF); > #endif my guess would be that you forgot to call mtx_destroy() for queue and hi_queue mutexes.

Re: FreeBSD 4.5 and network problems

2002-04-17 Thread Christophe Prevotaux
Are you talking about IP over Satellite link ? On Wed, 17 Apr 2002 11:00:45 -0500 Damon Permezel <[EMAIL PROTECTED]> wrote: > Not sure about the initial delays, but I found a bug which does cause > throughput to drop dramatically once it is hit. > > Consider the sender of a bulk data transfe

Re: FreeBSD 4.5 and network problems

2002-04-17 Thread Damon Permezel
I am talking about IP over gigabit ethernet. Concievably, if one had enough time, one might observe this over a satellite link. The necessary flows are bandwidth independent, but the time to observe the problem is bandwidth dependent. On Wed, Apr 17, 2002 at 06:52:28PM +0200, Christophe Prevotau

Hello from Mark Filipak

2002-04-17 Thread Mark Filipak
Hello All! This is an introduction and a ping. I live in Mansfield, Ohio, USA, and have some very specific problems and questions. The first should probably be whether this is the right list for me so I just installed GallantWEB. It is a pre-configured version of FreeBSD 3.3 that acts

Re: What does FreeBSD do when listen queue is full ?

2002-04-17 Thread Bill Fenner
>I just did a quick look over the code, and it appears that the complete >connection queue is still intact, and takes on 3/2*listen backlog as its >length. Therefore, if sendmail is deciding to not accept() all >connections ASAP, a backlog will build up, and RSTs will be sent to >incoming connec

vlan traffic over ipsec tunnel

2002-04-17 Thread Peter J. Blok
Hi All, I'd like to accomplish the following: I have two locations, connected via an IPSEC tunnel. Is it possible to connect the vlans at both ends through the tunnel. Is this possible with existing software? What would it take to do something like this? Peter To Unsubscribe: send mail to [

Re: What does FreeBSD do when listen queue is full ?

2002-04-17 Thread Mike Silbersack
On Wed, 17 Apr 2002, Bill Fenner wrote: > Boy, I hope not. Incoming SYNs should be ignored if the backlog > is met, so that the client can retransmit them. I know Microsoft > decided to use RST as a "my queue is full" indicator, but I hope > we're not following in their footsteps!... > > Bil

RE: Hello from Mark Filipak

2002-04-17 Thread Jim McGrath
The FreeBSD vr driver supports the DFE530TX NIC. If it is not linked into the GallantWEB kernel, you have two choices. The one I would recommend based on your level of experience is to replace your NICs with ones that are supported. NICs are not expensive, and this may be a very practical appro

Re: What does FreeBSD do when listen queue is full ?

2002-04-17 Thread Bill Fenner
>We don't send a RST, we just silently drop the connection. This is wrong too; it should silently drop the ACK and leave the connection in the pending queue. >However, at the point we're talking about, >we're already past the 3-way handshake I thought we were talking about the ACK that finishe

Re: Hello from Mark Filipak

2002-04-17 Thread Julian Elischer
On Wed, 17 Apr 2002, Mark Filipak wrote: > Hello All! Hi > > > I just installed GallantWEB. It is a pre-configured version of FreeBSD > 3.3 that acts as a gateway/firewall/server. It is up and running but > doesn't recognize my D-Link DFE-530TX+ ethernet cards. The RL driver supprts this ca

Re: Hello from Mark Filipak

2002-04-17 Thread Matthew Emmerton
On Wed, 17 Apr 2002, Mark Filipak wrote: > Hello All! > > This is an introduction and a ping. > > I live in Mansfield, Ohio, USA, and have some very specific problems and questions. >The first should probably be whether this is the right list for me so > > I just installed GallantWEB

Re: What does FreeBSD do when listen queue is full ?

2002-04-17 Thread Mike Silbersack
On Wed, 17 Apr 2002, Bill Fenner wrote: > >We don't send a RST, we just silently drop the connection. > > This is wrong too; it should silently drop the ACK and leave the > connection in the pending queue. Hm, I suppose that could work. It still feels icky, though; if the problem is that the a

Re: What does FreeBSD do when listen queue is full ?

2002-04-17 Thread Mark Delany
On Wed, Apr 17, 2002 at 09:32:34PM -0500, Mike Silbersack allegedly wrote: > > This is wrong too; it should silently drop the ACK and leave the > > connection in the pending queue. > How do the apps which try to rate-limit connections (OpenSSH, sendmail) do > it? Would that behavior be defeated

VLANS in Netgraph..

2002-04-17 Thread Julian Elischer
Someone was writing some VLAN code using Netgraph. I think they told me they were almost done and it just required some documentation to be done.. since then I have heard nothing. It that was YOU then if I dropped the ball, I'm sorry. Either way, if you know who/where/when let me know.. To Un

Re: Bridging vlan0 with de0

2002-04-17 Thread Julian Elischer
Szia! el aptom azt email-szimet? (probably unintelligable :-) did I give you this guy's address? On Thu, 20 Dec 2001, Julian Elischer wrote: > it is being donated by a french fellow. > He is just polishing it. > I will try commit it in the next few days. > > On Thu, 20 Dec 2001, Attila N

3com pcmcia nic

2002-04-17 Thread jon
   can a 3com pcmcia nic be put in promiscuous mode? if so what   models? thanks-- Jon  mailto:[EMAIL PROTECTED]Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax

Re: vlan traffic over ipsec tunnel

2002-04-17 Thread Matt Ayres
I don't know of a way to do this in FreeBSD, however OpenBSD's bridging code does support this. man brconfig on an OpenBSD box. Simply bridging a tunneling device and an ethernet device might work under FreeBSD. Matt On Wed, 17 Apr 2002, Peter J. Blok wrote: > Hi All, > > I'd like to accompli

Re: 5.Current Netgraph, Mutex

2002-04-17 Thread Julian Elischer
I can't find this code, where is it? On Wed, 17 Apr 2002, Maksim Yevmenkin wrote: > Roman Kurakin wrote: > > > #if __FreeBSD_version >= 50 > > mtx_init (&d->queue.ifq_mtx, "cp_queue", MTX_DEF); > > mtx_init (&d->hi_queue.ifq_mtx, "cp_queue_hi", MTX_DEF); >

Re: 5.Current Netgraph, Mutex

2002-04-17 Thread Julian Elischer
Roman, Having finally found the original mail, I concur. it looks like you have 'leaked' mutexes. (and the witness code accesses all mutexes even after the driver has unloaded... (*boom*)) I have not looked at the locks yet but you may be able to take advantage of netgraph's inherrant locking a

Re: What does FreeBSD do when listen queue is full ?

2002-04-17 Thread Mike Silbersack
On Wed, 17 Apr 2002, Mark Delany wrote: > Are we discussing what happens when the number of pending connections > exceeds the backlog? If the suggestion is to leave such connections > pending then the question becomes what's the real purpose of backlog? Yes, that is what we're discussing. > Fo

Re: vlan traffic over ipsec tunnel

2002-04-17 Thread Bernd Walter
On Wed, Apr 17, 2002 at 09:11:28PM +0200, Peter J. Blok wrote: > Hi All, > > I'd like to accomplish the following: I have two locations, connected via an > IPSEC tunnel. Is it possible to connect the vlans at both ends through the > tunnel. > > Is this possible with existing software? What wou

xauth support in ipsec ?

2002-04-17 Thread Naga R Narayanaswamy
All, Probably this mail should be directed at the kame newsgroup. But anyone know if xauth authorization scheme which is in draft stage is incorporated in the ipsec protocol in FreeBSD ? I know some corporate vpn gateways started incorporating xauth so, standard based clients will fail establis

Re: vlan traffic over ipsec tunnel

2002-04-17 Thread Terry Lambert
"Peter J. Blok" wrote: > I'd like to accomplish the following: I have two locations, connected via an > IPSEC tunnel. Is it possible to connect the vlans at both ends through the > tunnel. > > Is this possible with existing software? What would it take to do something > like this? Bridging does

Re: vlan traffic over ipsec tunnel

2002-04-17 Thread Terry Lambert
Terry Lambert wrote: > Bridging doesn't work with the vlanX interface currently in > FreeBSD. > > Julian promised (last December) that he would be committing a > VLAN netgraph node for doing VLAN "the right way", but I have > not seen anything. I tried to ping him twice on this, but I > think he

Re: What does FreeBSD do when listen queue is full ?

2002-04-17 Thread Mark Delany
On Thu, Apr 18, 2002 at 12:49:45AM -0500, Mike Silbersack allegedly wrote: > > On Wed, 17 Apr 2002, Mark Delany wrote: > > > Are we discussing what happens when the number of pending connections > > exceeds the backlog? If the suggestion is to leave such connections > > pending then the question

Re: What does FreeBSD do when listen queue is full ?

2002-04-17 Thread Bill Fenner
>So, if backlog is a threshold for communicating to clients, then I >think RST is the right choice as it communicates server state >unambiguously. I disagree; RST does not communicate server state unambiguously. RST is used in response to an erroneous packet on a synchronized connection, in resp

Re: What does FreeBSD do when listen queue is full ?

2002-04-17 Thread Mike Silbersack
On 18 Apr 2002, Mark Delany wrote: > It raises the question as to the purpose of backlog. Is it really only > intended as a resource hint or does it represent a firm threshold > beyond which the OS should act differently? > > If the latter, then the purpose of the threshold can only be of real >