Re: FreeBSD 7 TCP syncache fix: request for testers

2007-07-25 Thread Robert Watson
On Wed, 25 Jul 2007, Mike Silbersack wrote: On Fri, 20 Jul 2007, Peter Wemm wrote: TCP: [127.0.0.1]:52446 to [127.0.0.1]:1128 tcpflags 0x10; syncache_expand: Segment failed SYNCOOKIE authentication, segment rejected (probably spoofed) [...] How on earth can localhost be spoofing itself? This

backends periodically rendered DEAD

2007-07-25 Thread Gergely CZUCZY
Hello, I'm testing pound at the moment, and running paralelly around 15-18 apache benchmarks for a session-tracking test. However pound keeps on losing the backends periodically and it restores them a few seconds later they come back, and go back to DEAD again. It's a FreeBSD 6.2-p6. While the b

Re: mpd and vlan

2007-07-25 Thread Ganbold
Alexander Motin wrote: Hi. Ganbold wrote: Is it possible to give static IP addresses to the users using mpd? How it should be done? User is authenticating with radius server. Your RADIUS server should send FRAMED_IP_ADDRESS attribute to mpd specifying required IP address. When mpd will get t

Re: backends periodically rendered DEAD

2007-07-25 Thread Eygene Ryabinkin
Gergely, good day. Wed, Jul 25, 2007 at 12:05:04PM +0200, Gergely CZUCZY wrote: > I'm testing pound at the moment, and running paralelly around 15-18 > apache benchmarks for a session-tracking test. > > However pound keeps on losing the backends periodically and it > restores them a few seconds l

Re: mpd and vlan

2007-07-25 Thread Ganbold
Nikos Vassiliadis wrote: On Wednesday 25 July 2007 13:09, Ganbold wrote: I tried it in mpd-3.18, Radius server sends Framed IP Address, however mpd still assigns IP specified in "set ipcp ranges 192.168.5.2/32 192.168.5.169/25" What could be a problem? How to solve this issue? If you e

Re: mpd and vlan

2007-07-25 Thread Mihai Tanasescu
Ganbold wrote: Mihai Tanasescu wrote: Sorry for asking as a follow-up to your question...but do you have a working config for MPD and pptp. I'm desperately trying to get mine to work...but mpd refuses to listen to connections on my interface (it starts, it gives no errors, it loads the pptp

Re: mpd and vlan

2007-07-25 Thread Artyom Viklenko
Ganbold wrote: Alexander Motin wrote: Hi. Ganbold wrote: Is it possible to give static IP addresses to the users using mpd? How it should be done? User is authenticating with radius server. Your RADIUS server should send FRAMED_IP_ADDRESS attribute to mpd specifying required IP address. Whe

Re: mpd and vlan

2007-07-25 Thread Ganbold
Mihai Tanasescu wrote: Sorry for asking as a follow-up to your question...but do you have a working config for MPD and pptp. I'm desperately trying to get mine to work...but mpd refuses to listen to connections on my interface (it starts, it gives no errors, it loads the pptp1 config, I can

bridge handbook section

2007-07-25 Thread Andrew Thompson
Hi, I have started updating the bridge section of the Handbook here, http://nzfug.nz.freebsd.org/nzfug/HandbookUpdates/NetworkBridging Any additions or corrections would be appreciated, just drop me an email. cheers, Andrew ___ freebsd-net@freebsd.o

Re: mpd and vlan

2007-07-25 Thread Nikos Vassiliadis
On Wednesday 25 July 2007 13:09, Ganbold wrote: > I tried it in mpd-3.18, Radius server sends Framed IP Address, however > mpd still assigns IP specified in "set ipcp ranges 192.168.5.2/32 > 192.168.5.169/25" > What could be a problem? How to solve this issue? If you enable "radius-ip" option, mpd

Re: mpd and vlan

2007-07-25 Thread Ganbold
Nikos Vassiliadis wrote: On Wednesday 25 July 2007 13:09, Ganbold wrote: I tried it in mpd-3.18, Radius server sends Framed IP Address, however mpd still assigns IP specified in "set ipcp ranges 192.168.5.2/32 192.168.5.169/25" What could be a problem? How to solve this issue? If you e

Can't get MPD to work..doesn't listen on interface

2007-07-25 Thread Mihai Tanasescu
Hello, I've just setup my first MPD for establishing a PPTP tunnel with some Windows clients...and I don't understand why it doesn't bind to my interface IP to listen for incoming connections. My config looks like this: mpd.conf startup: set console open set console ip 86.105.56.134 set

Re: FreeBSD 7 TCP syncache fix: request for testers

2007-07-25 Thread Andre Oppermann
Robert Watson wrote: On Wed, 25 Jul 2007, Mike Silbersack wrote: On Fri, 20 Jul 2007, Peter Wemm wrote: TCP: [127.0.0.1]:52446 to [127.0.0.1]:1128 tcpflags 0x10; syncache_expand: Segment failed SYNCOOKIE authentication, segment rejected (probably spoofed) [...] How on earth can localhost be

Re: mpd and vlan

2007-07-25 Thread Nikos Vassiliadis
On Wednesday 25 July 2007 14:18, Ganbold wrote: > Nikos Vassiliadis wrote: > > On Wednesday 25 July 2007 13:09, Ganbold wrote: > >> I tried it in mpd-3.18, Radius server sends Framed IP Address, > >> however mpd still assigns IP specified in "set ipcp ranges > >> 192.168.5.2/32 192.168.5.169/25" >

[PATCH] add check for IP Router Alert

2007-07-25 Thread Bruce M. Simpson
Please see the following patch which adds a check for the IP Router Alert option, for use by in-kernel IPv4 protocol domain consumers: http://people.freebsd.org/~bms/dump/ipoptions-routeralert.patch Comments/review before commit appreciated. regards BMS _

MPD and fragmentation

2007-07-25 Thread Mihai Tanasescu
Hello, With help from another FreeBSD user on this list I was able to set up an MPD pptp server to allow windows machines to connect to it. Unfortunately now I've stumbled upon some strange behaviors. First of all I'm getting icmp losses even if I use a test LAN to make a tunnel to the loca

Re: Ipsec - PF_KEY and set_policy

2007-07-25 Thread blue
As far as I know, setkey is used for IPsec SP and SA configuration. ipsec_set_policy() could transfer a string to "policy request", which is defined in RFC 2367 PF_KEY. Internally, setkey() will call ipsec_set_policy() to construct the message then send it down to the kernel. However, ipsec_set

Re: MPD and fragmentation

2007-07-25 Thread Alexander Motin
Mihai Tanasescu wrote: First of all I'm getting icmp losses even if I use a test LAN to make a tunnel to the local FBSD machine, but these don't seem to affect my transfer rate when trying to get a large file via HTTP from the same machine. I have just merged small pptp windowing related patc

Re: MPD and fragmentation

2007-07-25 Thread Artyom Viklenko
Mihai Tanasescu wrote: Hello, With help from another FreeBSD user on this list I was able to set up an MPD pptp server to allow windows machines to connect to it. Unfortunately now I've stumbled upon some strange behaviors. First of all I'm getting icmp losses even if I use a test LAN to ma

3com 3c905c-tx Fast Etherlink Xl

2007-07-25 Thread freebsd kernel panic
good afternoon! a computer droops from a network map! a network map is built-in, it is written on a sys

Ipsec - PF_KEY and set_policy

2007-07-25 Thread aditya kiran
Hi, I was just trying to understand PF_KEY interface for ipsec settings. So, setkey uses it to do that. but i could find another system call - ipsec_set_policy. Could any body let me know why there are two interfaces to configure ipsec? Thanks, Aditya _

SADB_X_SPDFLUSH message handling for latest version of IPsec

2007-07-25 Thread blue
Hi, all: Recently I found the behavior for the command "setkey -FP" is quite different for the latest version IPsec (known as FAST_IPSEC before). Before the command would erase all the existed SP entries; currently the command would not. After digging the codes, I found the state of the SP en