On Wed, 25 Jun 2008, Ali Niknam wrote:
precisely matches that what you'd expect: lots of TCP connections in the
CLOSED state reflecting a series of connections built by an application but
then not properly discarded. Likewise, when the application is killed, all
of the connections go away --
On Wed, Jun 25, 2008 at 07:13:59PM -0500, mgrooms wrote:
[...]
> To my knowledge, here are the latest patch sets ...
>
> http://vanhu.free.fr/FreeBSD/patch-natt-freebsd6-2007-05-31.diff
> http://vanhu.free.fr/FreeBSD/patch-natt-freebsd7-2008-03-11.diff
> http://vanhu.free.fr/FreeBSD/patch-natt-fr
Good day.
Wed, Jun 25, 2008 at 07:43:12PM +0200, Ali Niknam wrote:
> Recently i've been upgrading some of my machines from FreeBSD 6.x amd64
> to FreeBSD 7.0 amd64.
>
> After upgrading I noticed a weird error/bug. It seems that after several
> thousand TCP connections some seem to hang in 'CLOS
Dear sirs!
Sorry for my bad English! I ask to help me, if you have some spare time.
I'm using the patch for support IPSEC NAT Traversal on FreeBSD 7.0.Will not
work NAT-T with Windows XP in the real situation.
#cd /usr/src/sys
patch < patch-natt-freebsd7-2008-03-11.diff
Kernel config (FreeBSD
On Thu, Jun 26, 2008 at 04:09:00PM +0600, Daniil Harun wrote:
> Dear sirs!
Hi.
I forgot to reply your private mail this morning, but it's still
better to have the question and the answer on a public ML, it may be
useful for other people.
> Sorry for my bad English! I ask to help me, if you have
Hi!
> > But when the host is placed over NAT, everything stops working.
> > After negotiates IKE and key additions to the database SA traffic does
> > not pass. "tcpdump enc0" shows that traffic is decoded normaly, but then
> > he does not processed, packets discarded.
> > Counters ipfw to rule 1 d
Old Synopsis: incorrect EtherIP header format.
New Synopsis: [gif] incorrect EtherIP header format.
Responsible-Changed-From-To: freebsd-bugs->freebsd-net
Responsible-Changed-By: gavin
Responsible-Changed-When: Thu Jun 26 13:52:03 UTC 2008
Responsible-Changed-Why:
Over to maintainers
http://www.
Hi,
I recently migrated a 6.2 system to 7.0-STABLE. One of the system's
functions was a PPPoE gateway that performed Proxy ARP for its PPP clients.
In 6.2 days when a connection was made the route entry for the PPP client
showed:
192.168.9.245 192.168.9.2UH 01 tu
The following reply was made to PR kern/125003; it has been noted by GNATS.
From: Andrew Thompson <[EMAIL PROTECTED]>
To: Shunsuke SHINOMIYA <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED]
Subject: Re: kern/125003: incorrect EtherIP header format.
Date: Thu, 26 Jun 2008 07:34:24 -0700
Hi,
It is u
Hi,
in order to compare the performance between antenna-diversity on and off
I did a quick test with the following sysctl settings:
# antenna-diversity on
dev.ath.0.diversity=1
# antenna-diversity off
dev.ath.0.diversity=0
dev.ath.0.txantenna=1
dev
The following reply was made to PR kern/125003; it has been noted by GNATS.
From: Hiroki Sato <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: Re: kern/125003: incorrect EtherIP header format.
Date: Fri, 27 Jun 2008 00:30:14 +0900 (JST)
Security_Mul
On Thu, 26 Jun 2008 11:51:26 -0500, mgrooms <[EMAIL PROTECTED]> wrote:
>
> ESP transport with NAT-T may need NAT-OA support, which is not
> provided by the actual patch, nor by userland.
>
I checked in Timos patch for NAT-T original address support into
ipsec-tools last December. This will be a
> On Wed, Jun 25, 2008 at 04:30:36PM -0400, Scott Ullrich wrote:
>> On Wed, Jun 25, 2008 at 4:24 PM, Julian Elischer <[EMAIL PROTECTED]>
> wr=
> ote:
>> > do you have the ability to test this?
>>=20
>> Absolutely. Is this the only thing from preventing it being merged
> into=
> HEAD?
>
> No.
If you are one of the people that know and love pf, I'd like to speak
to you on one side about testing pf with vimage.. (and making it work
as I'm sure it doesn't).
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/fre
mgrooms wrote:
On Wed, Jun 25, 2008 at 04:30:36PM -0400, Scott Ullrich wrote:
On Wed, Jun 25, 2008 at 4:24 PM, Julian Elischer <[EMAIL PROTECTED]>
wr=
ote:
do you have the ability to test this?
=20
Absolutely. Is this the only thing from preventing it being merged
into=
HEAD?
No. It's a
Steve Bertrand wrote:
Thank you Giulio (is it Gio?)
No, it's Giulio (english Julius) :-)
For some reason when I
plugged in the new firewall, only the base non-aliased address was
updated in
the ISP switch arp cache (if someone can throw a guess at why, I'm
eager to listen).
Well, you nee
I've tried to set altq bandwidth control on a vlan interface, but this
feature
doesn't seem to be supported by the vlan driver.
I've googled around and I've found that there should be a trivial patch to
enable this feature:
http://people.yandex-team.ru/~sem/FreeBSD/vlan+altq.patch
If this is so
On Thu, 26 Jun 2008 12:56:41 -0700, Julian Elischer <[EMAIL PROTECTED]>
wrote:
> mgrooms wrote:
>>
>> I'm not trying to start a flame war here, but the patch has been
> floating
>> around since before the 5.x days. There just seems to be a dark cloud
>> hanging over it and I, and no doubt many oth
Old Synopsis: vr(4) does not see incoming multicast packets in non-promiscuous
New Synopsis: vr(4) does not see incoming multicast packets in non-promiscuous
mode (broadcast is fine); breaks IPv6
Responsible-Changed-From-To: gnats-admin->freebsd-net
Responsible-Changed-By: gavin
Responsible-Chang
I have a FreeBSD router set up with Full BGP routes and I'm doing some
tests on using it for routing.
7.0-RELEASE-p1 FreeBSD 7.0-RELEASE-p1 #6: Thu Apr 17 18:11:49 EDT 2008
amd64
oddness..:
Use a packet generator to generate random source ips and ports and send
traffic through the router
Synopsis: vr(4) does not see incoming multicast packets in non-promiscuous mode
(broadcast is fine); breaks IPv6
State-Changed-From-To: open->feedback
State-Changed-By: yongari
State-Changed-When: Fri Jun 27 03:43:26 UTC 2008
State-Changed-Why:
Would you try patch at the following URL?
http://pe
Hi,
Running 5.5 (And no "upgrade" messages please, I'm forced to, its
out of my hands) and trying to bring up HE's IPV6.
I've got it running on a 4.10 system (Ok, feel free to tell me
to upgrade, this one is more a lazy issue.. But I am making progress. I
bought new drives that'll
The following reply was made to PR kern/125003; it has been noted by GNATS.
From: Shunsuke SHINOMIYA <[EMAIL PROTECTED]>
To: Hiroki Sato <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED],
[EMAIL PROTECTED]
Subject: Re[2]: kern/125003: incorrect EtherIP header format.
Date: Fri, 27 Jun 2008 15:00:45 +0900
Hi Eygene,
Just a quick "me too" message: I also used to see this on my 7.x
machines. This was with Apache servers in the proxy setup: one
I'm wondering: where these 32 bit, or 64 bit machines?
I had already tried to debug this situation and Mike Silbersack
helped me with patching the kerne
24 matches
Mail list logo