I-TCP Lib on BSD

2002-12-09 Thread soheil soheil
Dear All in this paper: Implementation and Performance Evaluation of Indirect TCP - Bakre, Badrinath (1997) It says the i-tcp lib. is availabe on BSD4.3 where can i find this i want the one for 4.4BSD THANX _ The new MSN 8: advanced

persistent routes

2002-12-09 Thread Andrew L. Neporada
Is there any possibility to have multiple routing tables in FreeBSD? Something like "ip route" utilities in Linux. Andrew. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: Spoofing Another Host Packet From User Land

2002-12-09 Thread Robert Watson
On Mon, 9 Dec 2002, soheil soheil wrote: > I want to know if i can use SOCK_RAW to create and send another Host ( > with another IP) Packet from my box. Sayin' in another way , i want to > know if the kernel fill the ip:ip_src field of the packet throw out by > SOCK_RAW ? if i can not do this by

[leafy@leafy.idv.tw: Confused by mpd and ipnat]

2002-12-09 Thread leafy
- Forwarded message from leafy <[EMAIL PROTECTED]> - Date: Tue, 10 Dec 2002 00:06:21 +0800 From: leafy <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Confused by mpd and ipnat I run -current and decided to try kernel PPPoE. I installed mpd from ports which ran fine. After installing i

IPFW

2002-12-09 Thread soheil soheil
Dear ALL i run this commands on my 4.4FreeBSD-Release #/sbin/ipfw -f flush #/sbin/ipfw divert 5050 ip from any to any it runs the first command and say no socket found and then when i run the second line it write the words for help and nothing is applied what can i do ? I have a divert socket on p

gre patch compiling problem

2002-12-09 Thread Girnet Vladimir
Hello, I updated my system today to 4.7-STABLE. Now, I want to enable WCCP support on my server, but I cannot compile the kernel with the 'options GRE' All seems to be fine, as described in SQUID FAQ for FreeBSD, and the email from 27 Oct 2002 to FreeBSD. How I can enable WCCP support on 4

Re: IPFW

2002-12-09 Thread Martin Stiemerling
Am Montag den, 9. Dezember 2002, um 18:18, schrieb soheil soheil: Dear ALL i run this commands on my 4.4FreeBSD-Release Do you have this line in your kernel configuration file and compiled into the kernel: options IPFIREWALL see also LINT in /usr/src/sys/i386/conf (if it is an i386) Martin

Re: IPFW

2002-12-09 Thread Jonathan Feally
You will also need optionsIPDIVERT in your kernel config Martin Stiemerling wrote: Am Montag den, 9. Dezember 2002, um 18:18, schrieb soheil soheil: Dear ALL i run this commands on my 4.4FreeBSD-Release Do you have this line in your kernel configuration file and compiled into the ke

Re: IPFW

2002-12-09 Thread Jonathan Feally
Also - In your second line for ipfw you have the syntax wrong to divert all ip traffic to divert port 5050 ipfw add 1000 divert 5050 ip from any to any where 1000 is the rule # - you may omit the # if you want it to get a rule # automatically - not recomended when other rules are in use! lower rul

passive mode ftp server, need stateful ipfw rule.

2002-12-09 Thread Peter Brezny
Is it possible to create an ipfw ruleset for an ftp server in passive mode that figures out which random port the ftp server is going to open to only allow the client that initiated the connection to connect to that port? Since the client initiates it's data connection from a random port to the n

RE: passive mode ftp server, need stateful ipfw rule.

2002-12-09 Thread Peter Brezny
Yes but then you run into: DYNAMIC RULES In order to protect a site from flood attacks involving fake TCP packets, it is safer to use dynamic rules: ipfw add check-state ipfw add deny tcp from any to any established And also, if you've got an: add allow all from

Re: broadcast over loopback

2002-12-09 Thread Joshua Graessley
On Friday, December 6, 2002, at 04:15 PM, Jason Hunt wrote: Other platforms out there will handle broadcast on the loopback interface. Is it desirable to make changes to the FreeBSD stack to get this behavior? Any examples? I cannot think of a practical case where this would be required. I w

Re: passive mode ftp server, need stateful ipfw rule.

2002-12-09 Thread Barney Wolff
Guys, you're both missing the point. Any flavor of ftp makes the data connection separate from the control connection, so something must permit the SYN of the data connection to pass. natd is able to do this for clients using active-mode ftp, but I don't think it can do it for a server with a pas

Re: IPFW

2002-12-09 Thread Julian Elischer
On Mon, 9 Dec 2002, soheil soheil wrote: > Dear ALL > i run this commands on my 4.4FreeBSD-Release > #/sbin/ipfw -f flush > #/sbin/ipfw divert 5050 ip from any to any /sbin/ipfw add divert 5050 ip from any to any ^^^ > it runs the first command and say no socket found > and then wh

Re: passive mode ftp server, need stateful ipfw rule.

2002-12-09 Thread Vincent Jardin
> > One pragmatic solution is to adjust the range of random tcp ports > chosen to a fairly narrow one, and then allow the setup from any to > that port range. > > The real answer is to get rid of ftp, and use something better. For > replacing anonymous ftp, http works just as well. scp, sftp or h