Re: [ipsec] KEY_FREESAV() in FreeBSD-Release7.0

2008-04-08 Thread Bjoern A. Zeeb
On Tue, 8 Apr 2008, blue wrote: Hi, Dear all: About the KEY_FREESAV() in key_checkrequest() in key.c: line 806: if (isr->sav != NULL) { KEY_FREESAV(&isr->sav); isr->sav = NULL; } The codes are only going to free the sav used LAST TIME. For outgoing SA entries, the reference co

Re: [ipsec] bug report: possible memory overwrite for IPv6 IPsec

2008-04-08 Thread Bjoern A. Zeeb
On Tue, 8 Apr 2008, blue wrote: Dear all: struct secashead defined in keydb.h line 89: /* Security Association Data Base */ struct secashead { LIST_ENTRY(secashead) chain; struct secasindex saidx; struct secident *idents;/* source identity */ struct secident *identd;/* destin

Re: ipfw uid/gid to match listening TCP sockets?

2008-04-08 Thread Robert Watson
On Mon, 7 Apr 2008, Yar Tikhiy wrote: Our ipfw currently doesn't seem to match this host's traffic by uid/gid if the traffic goes to a listening TCP socket. E.g., if one tries to allow passive data connections to a local anonymous FTP server as follows, it won't work: ipfw add 1000

Re: ipfw uid/gid to match listening TCP sockets?

2008-04-08 Thread Yar Tikhiy
On Tue, Apr 8, 2008 at 3:19 PM, Robert Watson <[EMAIL PROTECTED]> wrote: > > > On Mon, 7 Apr 2008, Yar Tikhiy wrote: > > > > Our ipfw currently doesn't seem to match this host's traffic by uid/gid if > the traffic goes to a listening TCP socket. E.g., if one tries to allow > passive data connecti

Re: ipfw uid/gid to match listening TCP sockets?

2008-04-08 Thread Robert Watson
On Tue, 8 Apr 2008, Yar Tikhiy wrote: Be aware that uid/gid/jail rules may become less maintainable as our TCP locking becomes more mature. We already jump through some uncomfortable hoops to keep it working, but I'm not sure how long that can go on. I've always viewed uid/gid rules as a h

Re: ipfw uid/gid to match listening TCP sockets?

2008-04-08 Thread Julian Elischer
Yar Tikhiy wrote: On Tue, Apr 8, 2008 at 3:19 PM, Robert Watson <[EMAIL PROTECTED]> wrote: On Mon, 7 Apr 2008, Yar Tikhiy wrote: Our ipfw currently doesn't seem to match this host's traffic by uid/gid if the traffic goes to a listening TCP socket. E.g., if one tries to allow passive data

Can routed cause interference with hostap and stability of Wireless Connectivity?

2008-04-08 Thread Martes G Wigglesworth
I have inquired about this on local lists, however, no one ever seems to even comprehend what I am asking, so I will inquire here. When fielding a newer, less resource rich system as access point/router, I noticed that after about five minutes of a client securing a good connection, the ip address

Re: Can routed cause interference with hostap and stability of Wireless Connectivity?

2008-04-08 Thread Chuck Swiger
On Apr 8, 2008, at 11:10 AM, Martes G Wigglesworth wrote: When fielding a newer, less resource rich system as access point/ router, I noticed that after about five minutes of a client securing a good connection, the ip address of the ath0 device dissappeared from the routing table, and routed be

Re: kern/122582: [re] Realtek RTL8111/8168B nic not supported (no carrier)

2008-04-08 Thread linimon
Old Synopsis: Realtek RTL8111/8168B nic not supported (no carrier) New Synopsis: [re] Realtek RTL8111/8168B nic not supported (no carrier) Responsible-Changed-From-To: freebsd-bugs->freebsd-net Responsible-Changed-By: linimon Responsible-Changed-When: Tue Apr 8 19:02:09 UTC 2008 Responsible-Change

Re: kern/122582: [re] Realtek RTL8111/8168B nic not supported (no carrier)

2008-04-08 Thread remko
Synopsis: [re] Realtek RTL8111/8168B nic not supported (no carrier) State-Changed-From-To: open->closed State-Changed-By: remko State-Changed-When: Tue Apr 8 20:06:08 UTC 2008 State-Changed-Why: Hello, I dont feel this is a PR but a general question. when you have a if_re(4) device (re0 in your i

Re: kern/122551: [bge] Broadcom 5715S no carrier on HP BL460c blade using 6.3-RELEASE

2008-04-08 Thread vwe
Synopsis: [bge] Broadcom 5715S no carrier on HP BL460c blade using 6.3-RELEASE Responsible-Changed-From-To: freebsd-bugs->freebsd-net Responsible-Changed-By: vwe Responsible-Changed-When: Tue Apr 8 20:47:21 UTC 2008 Responsible-Changed-Why: looking like a phy problem Over to maintainer(s). http

Re: kern/122252: [ipmi] [bge] IPMI problem with BCM5704 (does not work after driver loaded)

2008-04-08 Thread vwe
Synopsis: [ipmi] [bge] IPMI problem with BCM5704 (does not work after driver loaded) Responsible-Changed-From-To: freebsd-bugs->freebsd-net Responsible-Changed-By: vwe Responsible-Changed-When: Tue Apr 8 22:12:13 UTC 2008 Responsible-Changed-Why: Over to maintainer(s). http://www.freebsd.org/c

Re: kern/121298: [panic] Fatal trap 12: page fault while in kernel mode (em0 taskq)

2008-04-08 Thread vwe
Synopsis: [panic] Fatal trap 12: page fault while in kernel mode (em0 taskq) Responsible-Changed-From-To: freebsd-bugs->freebsd-net Responsible-Changed-By: vwe Responsible-Changed-When: Tue Apr 8 22:15:44 UTC 2008 Responsible-Changed-Why: sounds network related (if_em) Over to maintainer(s). ht

[ipsec] Packet Too Big message handling in esp6_ctlinput()

2008-04-08 Thread blue
Dear all: In line 814 to line 843 in esp6_ctlinput(), if (cmd == PRC_MSGSIZE) { struct secasvar *sav; u_int32_t spi; int valid; /* check header length before using m_copydata */ if (m->m_pkthdr.len < off + sizeof (struct esp))