Re: ng_netflow: testers are welcome

2004-02-23 Thread Gleb Smirnoff
On Sun, Feb 22, 2004 at 03:17:38PM -0800, Julian Elischer wrote: J> you can open a divert socket as a netgraph node by openning a ksocket J> node with protocol 'divert'. I didn't think of ng_ksocket as a divert socket. Thanks for pointing me at this! Really one can use "ipfw tee" to pass demasque

Re: Generating 'Fragment Needed but DF was Set' ICMP & Dummynet

2004-02-23 Thread Alexander Motin
Here are my patches for this problem for FreeBSD 4.8 and 5.2. Review them please. Alexander Motin wrote: I observe a strange thing. When I create dummynet pipe on output router interface with lower MTU system stops to generate 'Fragment Needed but DF was Set' ICMP in cases when it must. If I crea

Re: Generating 'Fragment Needed but DF was Set' ICMP & Dummynet

2004-02-23 Thread Andre Oppermann
Alexander Motin wrote: > > Here are my patches for this problem for FreeBSD 4.8 and 5.2. > Review them please. Doing a mcopy is pretty ugly... but ip_output() doesn't offer any way of saying "don't flush packet but leave it for icmp error messages". So the better fix would be to teach that to ip

Re: Generating 'Fragment Needed but DF was Set' ICMP & Dummynet

2004-02-23 Thread Max Laier
On Monday 23 February 2004 17:25, Alexander Motin wrote: > Here are my patches for this problem for FreeBSD 4.8 and 5.2. > Review them please. Looks good, though you might want to make sure to update statistics (ipstat.ips_cantfrag++). And maybe lose the type and code vars - you don't really use

Re: Generating 'Fragment Needed but DF was Set' ICMP & Dummynet

2004-02-23 Thread Alexander Motin
Max Laier wrote: On Monday 23 February 2004 17:25, Alexander Motin wrote: Here are my patches for this problem for FreeBSD 4.8 and 5.2. Review them please. Looks good, though you might want to make sure to update statistics (ipstat.ips_cantfrag++). It is already incremented inside ip_output().

Re: Generating 'Fragment Needed but DF was Set' ICMP & Dummynet

2004-02-23 Thread Alexander Motin
Andre Oppermann wrote: Alexander Motin wrote: Here are my patches for this problem for FreeBSD 4.8 and 5.2. Review them please. Doing a mcopy is pretty ugly... but ip_output() doesn't offer any way of saying "don't flush packet but leave it for icmp error messages". So the better fix would be to

Current problem reports assigned to you

2004-02-23 Thread FreeBSD bugmaster
Current FreeBSD problem reports Critical problems Serious problems Non-critical problems S Submitted Tracker Resp. Description --- o [2003/07/11] kern/54383 net NFS root configurations without dynamic

RE: ng_netflow: testers are welcome

2004-02-23 Thread Vasenin Alexander aka BlackSir
YES! IT WORKS! All I've need - just create ksocket with inet/rawip/divert hook connected to ng_netflow iface0 hook (mkpeer netflow: ksocket iface0 inet/raw/divert), then "msg netflow: setdlt { iface=0 dlt=12 }" (Raw ip instead of ethernet), then "msg divert: bind inet/0.0.0.0:". And after all a

Re: ng_netflow: testers are welcome

2004-02-23 Thread Gleb Smirnoff
On Mon, Feb 23, 2004 at 10:32:42PM +0300, Vasenin Alexander aka BlackSir wrote: V> But there is bug in "ipfw tee" - packets is always immediately accepted V> instead of continue going through the ruleset, so tee must be the last V> rule(So, ng_netflow never see packets that denied by ipfw before te

Re: unable to ping or connect to freebsd

2004-02-23 Thread Sylvain Lemasson
> > Hi, > > I have installed freebsd 5.2.1 and connect it to the > > network using ppp. it works well. I have access to > > internet but I am unable to ping the freebsd from > > another computer. The network card get the ICMP > > packets but it seems that they are filters whereas no > > firewall

RE: ng_netflow: testers are welcome

2004-02-23 Thread Julian Elischer
On Mon, 23 Feb 2004, Vasenin Alexander aka BlackSir wrote: > YES! IT WORKS! > All I've need - just create ksocket with inet/rawip/divert hook connected to > ng_netflow iface0 hook (mkpeer netflow: ksocket iface0 inet/raw/divert), > then "msg netflow: setdlt { iface=0 dlt=12 }" (Raw ip instead of

Re: ng_netflow: testers are welcome

2004-02-23 Thread Julian Elischer
> :))) When I typed it, I've understood that this behavior can be achieved > combining ng_tee and ng_echo from base system. Really netgraph rocks! > please remeber this next time someone tries to have it deleted from the system :-) ___ [EMAIL PROTEC

ftp Redirect problems using RDR

2004-02-23 Thread Nicolás de Bari Embríz G . R .
Hi all. I am having some problems redirecting a ftp using rrd, i am using ipfilter and ipnat my ipnat.rules on Server 1 file has some thing like: map fxp0 192.168.50.1/24 -> 148.243.246.2/32 portmap tcp/udp auto map fxp0 192.168.50.1/24 -> 148.243.246.2/32 rdr fxp0 148.243.246.2/32 port 21 -> 1

[a bit OT] bluetooth with MAC OS

2004-02-23 Thread Zhang Weiwu
If you have tracked bluetooth list you know I am trying to setup a bluetooth LAN. Let me explain what I achieved so far: now I have setup a bluetooth LAN access server, rfcomm_pppd runs and listen to channel 7, accepting ppp connection without authentication (I didn't figure out how to accept m

Re: [a bit OT] bluetooth with MAC OS

2004-02-23 Thread Justin Walker
On Monday, February 23, 2004, at 06:38 PM, Zhang Weiwu wrote: If you have tracked bluetooth list you know I am trying to setup a bluetooth LAN. Let me explain what I achieved so far: now I have setup a bluetooth LAN access server, rfcomm_pppd runs and listen to channel 7, accepting ppp connecti

default socket receive buffer size, net.inet.tcp.recvspace (?)

2004-02-23 Thread Ronald F. Guilmette
I have just now found out that the kernel default value for net.inet.tcp.recvspace, i.e. the default amount of receive buffer space associated with a new socket is set to 56kB, at least on the specific version of FreeBSD (4.7) that I'm running. Just curious: why? 56kB seems like a somewhat odd

Finding all IPv4 addresses associated with INADDR_ANY (?)

2004-02-23 Thread Ronald F. Guilmette
Greetings, Given a socket which has been properly created, opened, and then bound to some port and the special INADDR_ANY ``wildcard'' address, I need to be able to them programatically find all of the IPv4 addresses that the socket was just bound to. Can anyone suggest a way to do this? Can a

Re: Finding all IPv4 addresses associated with INADDR_ANY (?)

2004-02-23 Thread Justin Walker
On Monday, February 23, 2004, at 07:27 PM, Ronald F. Guilmette wrote: Given a socket which has been properly created, opened, and then bound to some port and the special INADDR_ANY ``wildcard'' address, I need to be able to them programatically find all of the IPv4 addresses that the socket was ju

Two modest kernel features I wish I had

2004-02-23 Thread Ronald F. Guilmette
Greetings, I've been writing a specialized daemon process that will act as a sort-of intelligent shim/proxy between SMTP clients and some user-designated SMTP server(s), perhaps located elsewhere. The details of what the shim/proxy will do aren't really important here, so I'll just skip straight

Re: Finding all IPv4 addresses associated with INADDR_ANY (?)

2004-02-23 Thread Robert Watson
On Mon, 23 Feb 2004, Ronald F. Guilmette wrote: > Given a socket which has been properly created, opened, and then bound > to some port and the special INADDR_ANY ``wildcard'' address, I need to > be able to them programatically find all of the IPv4 addresses that the > socket was just bound to.

Re: default socket receive buffer size, net.inet.tcp.recvspace (?)

2004-02-23 Thread Mike Silbersack
On Mon, 23 Feb 2004, Ronald F. Guilmette wrote: > I have just now found out that the kernel default value for > net.inet.tcp.recvspace, i.e. the default amount of receive > buffer space associated with a new socket is set to 56kB, > at least on the specific version of FreeBSD (4.7) that I'm > run

Re: Finding all IPv4 addresses associated with INADDR_ANY (?)

2004-02-23 Thread Chuck Swiger
Ronald F. Guilmette wrote: Given a socket which has been properly created, opened, and then bound to some port and the special INADDR_ANY ``wildcard'' address, I need to be able to them programatically find all of the IPv4 addresses that the socket was just bound to. Try something like the followin

Re: ng_netflow: testers are welcome

2004-02-23 Thread Petri Helenius
Julian Elischer wrote: please remeber this next time someone tries to have it deleted from the system :-) I tried to google for such a discussion but fortunately couldn´t find any. Why somebody would want to take away netgraph? Pete ___ [EMAIL P

RE: ng_netflow: testers are welcome

2004-02-23 Thread Vasenin Alexander aka BlackSir
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Gleb Smirnoff > Sent: Monday, February 23, 2004 10:47 PM > To: Vasenin Alexander aka BlackSir > Cc: [EMAIL PROTECTED]; Bjoern A. Zeeb; Julian Elischer; > [EMAIL PROTECTED] > Subject: Re: ng_netflow: testers