Re: FreeBSD 7.0: sockets stuck in CLOSED state...

2008-06-26 Thread Robert Watson
On Wed, 25 Jun 2008, Ali Niknam wrote: precisely matches that what you'd expect: lots of TCP connections in the CLOSED state reflecting a series of connections built by an application but then not properly discarded. Likewise, when the application is killed, all of the connections go away --

Re: FreeBSD NAT-T patch integration

2008-06-26 Thread VANHULLEBUS Yvan
On Wed, Jun 25, 2008 at 07:13:59PM -0500, mgrooms wrote: [...] > To my knowledge, here are the latest patch sets ... > > http://vanhu.free.fr/FreeBSD/patch-natt-freebsd6-2007-05-31.diff > http://vanhu.free.fr/FreeBSD/patch-natt-freebsd7-2008-03-11.diff > http://vanhu.free.fr/FreeBSD/patch-natt-fr

Re: FreeBSD 7.0: sockets stuck in CLOSED state...

2008-06-26 Thread Eygene Ryabinkin
Good day. Wed, Jun 25, 2008 at 07:43:12PM +0200, Ali Niknam wrote: > Recently i've been upgrading some of my machines from FreeBSD 6.x amd64 > to FreeBSD 7.0 amd64. > > After upgrading I noticed a weird error/bug. It seems that after several > thousand TCP connections some seem to hang in 'CLOS

patch for IPSEC_NAT_T

2008-06-26 Thread Daniil Harun
Dear sirs! Sorry for my bad English! I ask to help me, if you have some spare time. I'm using the patch for support IPSEC NAT Traversal on FreeBSD 7.0.Will not work NAT-T with Windows XP in the real situation. #cd /usr/src/sys patch < patch-natt-freebsd7-2008-03-11.diff Kernel config (FreeBSD

Re: patch for IPSEC_NAT_T

2008-06-26 Thread VANHULLEBUS Yvan
On Thu, Jun 26, 2008 at 04:09:00PM +0600, Daniil Harun wrote: > Dear sirs! Hi. I forgot to reply your private mail this morning, but it's still better to have the question and the answer on a public ML, it may be useful for other people. > Sorry for my bad English! I ask to help me, if you have

Re: patch for IPSEC_NAT_T

2008-06-26 Thread Daniil Harun
Hi! > > But when the host is placed over NAT, everything stops working. > > After negotiates IKE and key additions to the database SA traffic does > > not pass. "tcpdump enc0" shows that traffic is decoded normaly, but then > > he does not processed, packets discarded. > > Counters ipfw to rule 1 d

Re: kern/125003: [gif] incorrect EtherIP header format.

2008-06-26 Thread gavin
Old Synopsis: incorrect EtherIP header format. New Synopsis: [gif] incorrect EtherIP header format. Responsible-Changed-From-To: freebsd-bugs->freebsd-net Responsible-Changed-By: gavin Responsible-Changed-When: Thu Jun 26 13:52:03 UTC 2008 Responsible-Changed-Why: Over to maintainers http://www.

FreeBSD 7 routing/ppp changed?

2008-06-26 Thread Aragon Gouveia
Hi, I recently migrated a 6.2 system to 7.0-STABLE. One of the system's functions was a PPPoE gateway that performed Proxy ARP for its PPP clients. In 6.2 days when a connection was made the route entry for the PPP client showed: 192.168.9.245 192.168.9.2UH 01 tu

Re: kern/125003: incorrect EtherIP header format.

2008-06-26 Thread Andrew Thompson
The following reply was made to PR kern/125003; it has been noted by GNATS. From: Andrew Thompson <[EMAIL PROTECTED]> To: Shunsuke SHINOMIYA <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED] Subject: Re: kern/125003: incorrect EtherIP header format. Date: Thu, 26 Jun 2008 07:34:24 -0700 Hi, It is u

ath hostap: antenna diversity or not?

2008-06-26 Thread Petar Bogdanovic
Hi, in order to compare the performance between antenna-diversity on and off I did a quick test with the following sysctl settings: # antenna-diversity on dev.ath.0.diversity=1 # antenna-diversity off dev.ath.0.diversity=0 dev.ath.0.txantenna=1 dev

Re: kern/125003: incorrect EtherIP header format.

2008-06-26 Thread Hiroki Sato
The following reply was made to PR kern/125003; it has been noted by GNATS. From: Hiroki Sato <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Re: kern/125003: incorrect EtherIP header format. Date: Fri, 27 Jun 2008 00:30:14 +0900 (JST) Security_Mul

Re: patch for IPSEC_NAT_T

2008-06-26 Thread mgrooms
On Thu, 26 Jun 2008 11:51:26 -0500, mgrooms <[EMAIL PROTECTED]> wrote: > > ESP transport with NAT-T may need NAT-OA support, which is not > provided by the actual patch, nor by userland. > I checked in Timos patch for NAT-T original address support into ipsec-tools last December. This will be a

Re: FreeBSD NAT-T patch integration

2008-06-26 Thread mgrooms
> On Wed, Jun 25, 2008 at 04:30:36PM -0400, Scott Ullrich wrote: >> On Wed, Jun 25, 2008 at 4:24 PM, Julian Elischer <[EMAIL PROTECTED]> > wr= > ote: >> > do you have the ability to test this? >>=20 >> Absolutely. Is this the only thing from preventing it being merged > into= > HEAD? > > No.

need help from pf developer(s)

2008-06-26 Thread Julian Elischer
If you are one of the people that know and love pf, I'd like to speak to you on one side about testing pf with vimage.. (and making it work as I'm sure it doesn't). ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/fre

Re: FreeBSD NAT-T patch integration

2008-06-26 Thread Julian Elischer
mgrooms wrote: On Wed, Jun 25, 2008 at 04:30:36PM -0400, Scott Ullrich wrote: On Wed, Jun 25, 2008 at 4:24 PM, Julian Elischer <[EMAIL PROTECTED]> wr= ote: do you have the ability to test this? =20 Absolutely. Is this the only thing from preventing it being merged into= HEAD? No. It's a

Re: SOLVED (was Re: Problem clarification (was: Problems with vlan + carp + alias))

2008-06-26 Thread Giulio Ferro
Steve Bertrand wrote: Thank you Giulio (is it Gio?) No, it's Giulio (english Julius) :-) For some reason when I plugged in the new firewall, only the base non-aliased address was updated in the ISP switch arp cache (if someone can throw a guess at why, I'm eager to listen). Well, you nee

altq on vlan

2008-06-26 Thread Giulio Ferro
I've tried to set altq bandwidth control on a vlan interface, but this feature doesn't seem to be supported by the vlan driver. I've googled around and I've found that there should be a trivial patch to enable this feature: http://people.yandex-team.ru/~sem/FreeBSD/vlan+altq.patch If this is so

Re: FreeBSD NAT-T patch integration

2008-06-26 Thread mgrooms
On Thu, 26 Jun 2008 12:56:41 -0700, Julian Elischer <[EMAIL PROTECTED]> wrote: > mgrooms wrote: >> >> I'm not trying to start a flame war here, but the patch has been > floating >> around since before the 5.x days. There just seems to be a dark cloud >> hanging over it and I, and no doubt many oth

Re: kern/125024: vr(4) does not see incoming multicast packets in non-promiscuous mode (broadcast is fine); breaks IPv6

2008-06-26 Thread gavin
Old Synopsis: vr(4) does not see incoming multicast packets in non-promiscuous New Synopsis: vr(4) does not see incoming multicast packets in non-promiscuous mode (broadcast is fine); breaks IPv6 Responsible-Changed-From-To: gnats-admin->freebsd-net Responsible-Changed-By: gavin Responsible-Chang

Weirdness - FBSD 7, Routing, Packet generator, em taskq

2008-06-26 Thread Paul
I have a FreeBSD router set up with Full BGP routes and I'm doing some tests on using it for routing. 7.0-RELEASE-p1 FreeBSD 7.0-RELEASE-p1 #6: Thu Apr 17 18:11:49 EDT 2008 amd64 oddness..: Use a packet generator to generate random source ips and ports and send traffic through the router

Re: kern/125024: vr(4) does not see incoming multicast packets in non-promiscuous mode (broadcast is fine); breaks IPv6

2008-06-26 Thread yongari
Synopsis: vr(4) does not see incoming multicast packets in non-promiscuous mode (broadcast is fine); breaks IPv6 State-Changed-From-To: open->feedback State-Changed-By: yongari State-Changed-When: Fri Jun 27 03:43:26 UTC 2008 State-Changed-Why: Would you try patch at the following URL? http://pe

IPV6 problem : nd6_lookup: failed to add route for a neighbor

2008-06-26 Thread Tuc at T-B-O-H.NET
Hi, Running 5.5 (And no "upgrade" messages please, I'm forced to, its out of my hands) and trying to bring up HE's IPV6. I've got it running on a 4.10 system (Ok, feel free to tell me to upgrade, this one is more a lazy issue.. But I am making progress. I bought new drives that'll

Re[2]: kern/125003: incorrect EtherIP header format.

2008-06-26 Thread Shunsuke SHINOMIYA
The following reply was made to PR kern/125003; it has been noted by GNATS. From: Shunsuke SHINOMIYA <[EMAIL PROTECTED]> To: Hiroki Sato <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Re[2]: kern/125003: incorrect EtherIP header format. Date: Fri, 27 Jun 2008 15:00:45 +0900

Re: FreeBSD 7.0: sockets stuck in CLOSED state...

2008-06-26 Thread Ali Niknam
Hi Eygene, Just a quick "me too" message: I also used to see this on my 7.x machines. This was with Apache servers in the proxy setup: one I'm wondering: where these 32 bit, or 64 bit machines? I had already tried to debug this situation and Mike Silbersack helped me with patching the kerne