Re: ipsec tunnels & packet length issues

2003-10-28 Thread Eric Masson
> "Michael" == Michael Sierchio <[EMAIL PROTECTED]> writes: Michael> You should allow for an IP header with options and the ESP Michael> header, which is smaller than 1450. For SKIP I use 1366 as the Michael> advertised MTU, and for IPsec usually 1436, unless I need to Michael> accomodate

Forward: HEADS UP! Default value of ip6_v6only changed

2003-10-28 Thread Hajimu UMEMOTO
Hi, Our default of net.inet6.ip6.v6only was off in 4.X, and was changed to on on 5.X to follow NetBSD's practice. This behavior on 5.X breaks RFC2553/3493, and the change was intentional from security consideration. But, NetBSD changed it off by default. How do you think our default of on? --- 

Re: Forward: HEADS UP! Default value of ip6_v6only changed

2003-10-28 Thread Jeff W. Boote
Hajimu UMEMOTO wrote: > > Hi, > > Our default of net.inet6.ip6.v6only was off in 4.X, and was changed to > on on 5.X to follow NetBSD's practice. This behavior on 5.X breaks > RFC2553/3493, and the change was intentional from security > consideration. But, NetBSD changed it off by default. > Ho

Re: Changes to PCBPORTHASH wrt TCP, review needed

2003-10-28 Thread Mike Silbersack
On Tue, 28 Oct 2003, Bruce M Simpson wrote: > We discussed on IRC that this problem of ephemeral port hash mapping may also > affect udp PCBs, and that it may be having undesirable effects with multiple > concurrent media streams, as RTP/RTCP is a heavy udp socket consumer in a > large installati

Re: Changes to PCBPORTHASH wrt TCP, review needed

2003-10-28 Thread Bruce M Simpson
On Mon, Oct 27, 2003 at 02:16:13AM -0600, Mike Silbersack wrote: > One easy way to test this patch is to install http_load, set your > ephemeral port range to something in the range of 30, and have it start > testing a host. It will quickly create TIME_WAIT sockets filling all > ephemeral ports.

Re: em(4) and multicast

2003-10-28 Thread Christian Weisgerber
Christian Weisgerber <[EMAIL PROTECTED]> wrote: > OpenBSD has ported the em(4) driver from FreeBSD. At least on > OpenBSD, em(4) is partially broken: it fails to receive multicast > ethernet frames. This turns out to be a bug in the OpenBSD driver that happened in the porting process. -- Chris

mpd, ADSL and pptp

2003-10-28 Thread jhall
I am setting up a FreeBSD server to function as a agteway to the Internet as well as maintain the necessary tunnels to our corporate office. All of this should be accomplished over a DSL connection. I have setup mpd to make the PPPoE connection need to connect to the ADSL provider, and it is work

Re: mpd, ADSL and pptp

2003-10-28 Thread Damian Gerow
Thus spake [EMAIL PROTECTED] ([EMAIL PROTECTED]) [28/10/03 16:16]: > I am setting up a FreeBSD server to function as a agteway to the Internet > as well as maintain the necessary tunnels to our corporate office. All of > this should be accomplished over a DSL connection. > > I have setup mpd to m