RE: NAT and PPTP

2003-07-30 Thread Sten Daniel Sørsdal
> My own purpose for using this is securing a bit more > 802.11(whatever) in a > large WISP setup. One of my question is how many pptp or > pppoe sessions > can be handled by one FreeBSD box knowing each pptp or pppoe > sessions have > to be shaped traffic wise symetrically or asymetrically.

Can I subnet my network like this ?

2003-07-30 Thread Supote Leelasupphakorn
Hi, all I would like to verify my knowledge by building the network like below but not sure whether it's impossible for subnetting like this - say, from Gateway no2, is divided to 172.16.0.0/16 and 172.17.0.0/16 subnet. I heard that it isn't recommend or impossible (not sure again) to use F

Re: Can I subnet my network like this ?

2003-07-30 Thread Jan Grant
On Wed, 30 Jul 2003, [iso-8859-1] Supote Leelasupphakorn wrote: > Hi, all > >I would like to verify my knowledge > by building the network like below but not > sure whether it's impossible for subnetting > like this - say, from Gateway no2, is divided > to 172.16.0.0/16 and 172.17.0.0/16 subne

Re: Can I subnet my network like this ?

2003-07-30 Thread Steve Ames
On Wed, Jul 30, 2003 at 01:46:09PM +0100, Supote Leelasupphakorn wrote: >I heard that it isn't recommend or > impossible (not sure again) to use FIRST or > LAST subnet in the allocated IP address pool, > is it? That was true at one time. These days it is acceptable to use all definable subnets

RE: Help with FreeBSD Bridged Firewall

2003-07-30 Thread William Knechtel
Yeah, the arp cache is the problem, thanks for nailing that one for me. However, the ipfw rule you supplied doesn't seem to want to work for me... I think for the time being I'll just run a cron job every 15 minutes or so that clears the arp cache completely. Thanks again for your help!! I reall

Fast retransmit problem

2003-07-30 Thread Sreekanth
I am facing a peculiar problem. Here is the scenario. During a tcp data transfer.An intermediate data packet(Say X) from server to client is lost.The client sends an ack with ACK no. corresponding to the lost segment.Now this continues till the no. of duplicate acks reach the thr

RE: Help with FreeBSD Bridged Firewall

2003-07-30 Thread Don Bowman
> From: William Knechtel [mailto:[EMAIL PROTECTED] > Yeah, the arp cache is the problem, thanks for nailing that > one for me. > However, the ipfw rule you supplied doesn't seem to want to work for > me... I think for the time being I'll just run a cron job every 15 > minutes or so that clears th

pppoe, can't ping tun0, ipfnat ftp proxy "doesn't work"

2003-07-30 Thread Rocco Caputo
[Originally posted to freebsd-questions, but someone suggested freebsd-net instead.] I've acquired DSL. My modem's PPPoE and NAT have a tendency to remap ports, so I switched it to bridged Ethernet. Now I'm using ppp(8) for PPPoE. I'm using ipfw2 for QOS things (pipes and queues). I'm using ip

Re: pppoe, can't ping tun0, ipfnat ftp proxy "doesn't work"

2003-07-30 Thread Julian Elischer
You are complicating things by running both ipfw and ipf. can you not do just one of them? On Wed, 30 Jul 2003, Rocco Caputo wrote: > [Originally posted to freebsd-questions, but someone suggested > freebsd-net instead.] > > I've acquired DSL. My modem's PPPoE and NAT have a tendency to rema

Re: Help with FreeBSD Bridged Firewall

2003-07-30 Thread Michael Sierchio
William Knechtel wrote: Yeah, the arp cache is the problem, thanks for nailing that one for me. However, the ipfw rule you supplied doesn't seem to want to work for me... I think for the time being I'll just run a cron job every 15 minutes or so that clears the arp cache completely. Thanks again

Re: pppoe, can't ping tun0, ipfnat ftp proxy "doesn't work"

2003-07-30 Thread Rocco Caputo
On Wed, Jul 30, 2003 at 12:51:32PM -0700, Julian Elischer wrote: > > You are complicating things by running both ipfw and ipf. > can you not do just one of them? I'm not sure. The literature I've read so far says neither firewall does traffic shaping AND supports active FTP in a deny-by-default

dc TX underrun leads to delayed crash

2003-07-30 Thread Peter C. Lai
I'm noticing on a moderately loaded system, that sometimes when the kernel increases the TX threshold (/kernel: dc0: TX underrun -- increasing TX threshold), a few minutes later, the system hardlocks requiring a reset. This routinely happens when I'm streaming MP3s over the network and the box su

Re: dc TX underrun leads to delayed crash

2003-07-30 Thread Mike Silbersack
On Wed, 30 Jul 2003, Peter C. Lai wrote: > I'm noticing on a moderately loaded system, that sometimes when the kernel > increases the TX threshold (/kernel: dc0: TX underrun -- increasing TX > threshold), a few minutes later, the system hardlocks requiring a reset. > This routinely happens when I

RE: Can I subnet my network like this ?

2003-07-30 Thread Max Clark
The only real concern is if you are using cisco routers in this equation. If so, make sure you enable ip-subnet-zero in the config. Max -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Supote Leelasupphakorn Sent: Wednesday, July 30, 2003 5:46 AM To: [EMAIL P

Strange dial-up related DNS problems

2003-07-30 Thread Willie Viljoen
This gets a 10.0 on my weird-o-meter. I have a FreeBSD 4.7-RELEASE machine sitting at a client which dials in and collects their mail via POP3, and sends outgoing mail via a smarthost which points to an SMTP server at their ISP. This machine has worked fine since late last year, but started giv

Re: Strange dial-up related DNS problems

2003-07-30 Thread Barney Wolff
On Wed, Jul 30, 2003 at 11:16:37PM +0200, Willie Viljoen wrote: > > When connected to their ISP, SAIX, the machine can ping any live internet IP > and it can traceroute to anywhere, but, it can not talk to any DNS server. > Any traffic to port 53 UDP simply seems to dissapear. Sheer guess, but

Re: Strange dial-up related DNS problems

2003-07-30 Thread Willie Viljoen
On Thursday 31 July 2003 0:16, someone, possibly Barney Wolff, typed: > On Wed, Jul 30, 2003 at 11:16:37PM +0200, Willie Viljoen wrote: > > When connected to their ISP, SAIX, the machine can ping any live > > internet IP and it can traceroute to anywhere, but, it can not talk to > > any DNS server.