Anyone T/TCP?

2002-10-04 Thread Andre Oppermann
Does someone actually use T/TCP in any application or does someone know someone else using or having an application for it? -- Andre To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

zebra interface flags problem on 4.7-RC2 (IFF_PROMISC)

2002-10-04 Thread Vladimir B.
Hi I have tried to install fresh zebra (from ports) on 4.7-RC2 have a problem - zebra turns on promiscuity mode on interface, it is completely unacceptable when interface connected to HUB (not switch) - router begins resend all packets. # ifconfig fxp1 fxp1: flags=8843 mtu 1500 inet 19

Re: zebra interface flags problem on 4.7-RC2 (IFF_PROMISC)

2002-10-04 Thread Maxim Sobolev
On Fri, Oct 04, 2002 at 05:51:46PM +0400, Vladimir B. Grebenschikov wrote: > > Hi > > I have tried to install fresh zebra (from ports) on 4.7-RC2 > > have a problem - zebra turns on promiscuity mode on interface, > it is completely unacceptable when interface connected to HUB (not > switch) -

Linux <-> FreeBSD ipip/gre tunnel

2002-10-04 Thread freebsd
(Originally posted to -questions, no responses yet.) I haven't been able to turn up anything under Google... Has anyone ever successfully gotten an IP-IP or GRE tunnel working between a FreeBSD machine (4-STABLE) and a Linux machine (2.4.x)? I can get a tunnel up between two FreeeBSD machines n

Re: zebra interface flags problem on 4.7-RC2 (IFF_PROMISC)

2002-10-04 Thread Vladimir B.
÷ Fri, 04.10.2002, × 18:06, Maxim Sobolev ÎÁÐÉÓÁÌ: > On Fri, Oct 04, 2002 at 05:51:46PM +0400, Vladimir B. Grebenschikov wrote: > > > > Hi > > > > I have tried to install fresh zebra (from ports) on 4.7-RC2 > > > > have a problem - zebra turns on promiscuity mode on interface, > > it is comple

Re: Anyone T/TCP?

2002-10-04 Thread Julian Elischer
Richard Stevens was the great T/TCP proponent. Since his untimely demise, it has been languishig.. I think many firewalls now routinely block packets with both SYN and FIN which is what T/TCP does. On Fri, 4 Oct 2002, Andre Oppermann wrote: > > Does someone actually use T/TCP in any applicatio

Re: Anyone T/TCP?

2002-10-04 Thread Lars Eggert
Andre Oppermann wrote: > Does someone actually use T/TCP in any application or does someone know > someone else using or having an application for it? I don't think it's in wide production use. For research purposes, however, it's quiet useful sometimes. Is is a candidate for removal from the t

Re: Linux <-> FreeBSD ipip/gre tunnel

2002-10-04 Thread Lars Eggert
[EMAIL PROTECTED] wrote: > (Originally posted to -questions, no responses yet.) > > I haven't been able to turn up anything under Google... > > Has anyone ever successfully gotten an IP-IP or GRE tunnel working > between a FreeBSD machine (4-STABLE) and a Linux machine (2.4.x)? I > can get a tu

Parsing route dump received using sysctl

2002-10-04 Thread yatin chalke
Hi, I am currently trying to get a route dump in freebsd4.4 using sysctl with NET_RT_DUMP. I am running into problems while parsing the returned rt_msghdr structures. The sockaddr structures returned after the rt_msghdr are messed up and it is not giving correct gateway or netmask. For ex: whe

Re: [zebra 15605] BGP/MPLS VPN using the mpls-linux patch and zebra ldp patch

2002-10-04 Thread Vincent Jardin
> > I've overly simplified much of what is here, and I'm sure I've missing > items. So as you can see there is still a lot of work to do. If anyone > else is working on related items, please let me know. Did you check the AYAME's work on MPLS ? They have a MPLS stack for NetBSD. Moreover they h

Re: Parsing route dump received using sysctl

2002-10-04 Thread Ruslan Ermilov
On Fri, Oct 04, 2002 at 09:08:50AM -0700, yatin chalke wrote: > Hi, > > I am currently trying to get a route dump in > freebsd4.4 using sysctl with NET_RT_DUMP. > > I am running into problems while parsing the returned > rt_msghdr structures. > > The sockaddr structures returned after the rt_ms

Re: Anyone T/TCP?

2002-10-04 Thread Marco Molteni
On Fri, 4 Oct 2002, Julian Elischer <[EMAIL PROTECTED]> wrote: > Richard Stevens was the great T/TCP proponent. Together with Bob Braden (RFC1644), who is alive and kicking at ISI. Marco > Since his untimely demise, it has been languishig.. > I think many firewalls now routinely > block packet

Re: Linux <-> FreeBSD ipip/gre tunnel

2002-10-04 Thread Anthony Volodkin
[EMAIL PROTECTED] wrote: >(Originally posted to -questions, no responses yet.) > >I haven't been able to turn up anything under Google... > >Has anyone ever successfully gotten an IP-IP or GRE tunnel working >between a FreeBSD machine (4-STABLE) and a Linux machine (2.4.x)? I >can get a tunnel u

Re: zebra interface flags problem on 4.7-RC2 (IFF_PROMISC)

2002-10-04 Thread Maxim Sobolev
Closer look at zebra's code revealed that my initial guess was entirely correct. The problem is that it doesn't bother to zero out ifreq structure allocated on stack, which leads to this misbehaviour. Attached patch should fix the problem - unfortunately due to code freeze I can't commit it immed

Re: zebra interface flags problem on 4.7-RC2 (IFF_PROMISC)

2002-10-04 Thread Vincent Jardin
It looks like your BSD kernel is not compiled with the IPv6 support. Le Vendredi 4 Octobre 2002 15:51, "Vladimir B. " Grebenschikov a écrit : > Hi > > I have tried to install fresh zebra (from ports) on 4.7-RC2 > > have a problem - zebra turns on promiscuity mode on interface, > it is completely

Re: Anyone T/TCP?

2002-10-04 Thread John Polstra
In article <[EMAIL PROTECTED]>, Julian Elischer <[EMAIL PROTECTED]> wrote: > Richard Stevens was the great T/TCP proponent. Since his untimely > demise, it has been languishig.. I think many firewalls now routinely > block packets with both SYN and FIN which is what T/TCP does. Accepting incomin

Re: Anyone T/TCP?

2002-10-04 Thread Michael Sierchio
John Polstra wrote: > Accepting incoming T/TCP creates a pretty serious DoS vulnerability, > doesn't it? The very first packet contains the request, which the > server must act upon and reply to without further delay. There is no > 3-way handshake, so a simple attack using spoofed source addres

Re: Anyone T/TCP?

2002-10-04 Thread Andre Oppermann
Lars Eggert wrote: > > Andre Oppermann wrote: > > Does someone actually use T/TCP in any application or does someone know > > someone else using or having an application for it? > > I don't think it's in wide production use. For research purposes, > however, it's quiet useful sometimes. > > Is

Re: Anyone T/TCP?

2002-10-04 Thread Garrett Wollman
< said: > Accepting incoming T/TCP creates a pretty serious DoS vulnerability, > doesn't it? The very first packet contains the request, which the > server must act upon and reply to without further delay. There is no > 3-way handshake, so a simple attack using spoofed source addresses can > im

Re: Anyone T/TCP?

2002-10-04 Thread Tony Finch
Andre Oppermann <[EMAIL PROTECTED]> wrote: > >Considering JDP's comment it's not useful at all in an Internet >environment. So practically it doesn't matter if it's gone. I think it may be useful in the back end of a server cluster. Tony. -- f.a.n.finch <[EMAIL PROTECTED]> http://dotat.at/ SOLE

IPv6 neighbor discovery question

2002-10-04 Thread Neeraj Bhatia
The stack should send out a neighbor solicitation for a global source address of a received Echo request when there are no default routers present on the link.I believe such addresses should be considered on link wrt RFC 2461 Section 5.2. Currently ip6_output will drop such a packet since there w

Re: Consistency of cached routes

2002-10-04 Thread Bakul Shah
> I saw your thread on Consistency of cached routes, and I'm having the same pr > oblem with my setup of bsd machines. When a new route is discovered, the out > dated cached route is still in the table and it doesn't expire fast enough. If your problem is a cached route used for forwarding, yo