freebsd 4.7-stable kernel gre support for squid's wccp cisco interaction

2003-01-15 Thread Gokhan ERYOL
Hi all, I need any suggestions about GRE support of 4.7 stable series of FreeBSD, because of the fact that squid's WCCP communication to Cisco devices over GRE is NOT working. At squid side, a patch for FreeBSD is available, but after the incorporation of GRE into STABLE on 1st December, it's

Re: ipfw: blocking syn floods - two proposed rules

2003-01-15 Thread Louis A. Mamakos
> > My goal is to create an ipfw rule that stops normal syn floods by blocking > ALL syn packets that have no MSS set. > > My understanding is that there is no legitimate packet that is a SYN and > has no MSS, and further, most of the kiddie tools in existence for syn > flooding do indeed send sy

Re: ipfw: blocking syn floods - two proposed rules

2003-01-15 Thread Andre Oppermann
"Louis A. Mamakos" wrote: > > > > > My goal is to create an ipfw rule that stops normal syn floods by blocking > > ALL syn packets that have no MSS set. > > > > My understanding is that there is no legitimate packet that is a SYN and > > has no MSS, and further, most of the kiddie tools in existen

Re: ipfw: blocking syn floods - two proposed rules

2003-01-15 Thread Richard A Steenbergen
On Wed, Jan 15, 2003 at 03:36:28PM +0100, Andre Oppermann wrote: > In a recent study my diploma students found that out of a dataset of > 9 million TCP SYN in real life traffic (Sunsite Switzerland, five > popular newspaper sites) approximatly 5% did not have the MSS option > set. We did not manage

Re: PANIC in tcp_syncache.c sonewconn() line 562

2003-01-15 Thread Thomas Moestl
On Wed, 2003/01/15 at 02:20:12 +1100, Bruce Evans wrote: > On Tue, 14 Jan 2003, Martin Blapp wrote: > > > > > Hi Thomas, > > > > > s = splnet(); > > > + if (so->so_state & (SS_ISCONNECTED | SS_ISCONNECTING)) { > > > + splx(s); > > > + return (EINVAL); > > > + } > > > error = (*