Re: high cpu usage on natd / dhcpd

2013-02-07 Thread Eggert, Lars
On Jan 31, 2013, at 16:03, Matthew Luckie wrote: > > 00510 allow ip from me to not me out via em1 > 00550 divert 8668 ip from any to any via em1 > > Rule 510 fixes it. Yep, it does. Can I ask someone to commit this to rc.firewall? (And I wonder if the rules for the ipfw kernel firewall need a

OCE driver patches

2013-02-07 Thread Duvvuru,Venkat Kumar
Hi, I have submitted this patch http://www.freebsd.org/cgi/query-pr.cgi?pr=171838 some time back. Could you please let me know when this will be pulled in? I have some more patches to submit. Please let me know if submitting it online at this link http://www.freebsd.org/send-pr.html is the only

Re: high cpu usage on natd / dhcpd

2013-02-07 Thread Ian Smith
On Thu, 7 Feb 2013 08:08:59 +, Eggert, Lars wrote: > On Jan 31, 2013, at 16:03, Matthew Luckie wrote: > > > > 00510 allow ip from me to not me out via em1 > > 00550 divert 8668 ip from any to any via em1 > > > > Rule 510 fixes it. > > Yep, it does. Can I ask someone to commit this t

Re: high cpu usage on natd / dhcpd

2013-02-07 Thread Eggert, Lars
Hi, On Feb 7, 2013, at 13:40, Ian Smith wrote: > On Thu, 7 Feb 2013 08:08:59 +, Eggert, Lars wrote: >> On Jan 31, 2013, at 16:03, Matthew Luckie wrote: >>> >>> 00510 allow ip from me to not me out via em1 >>> 00550 divert 8668 ip from any to any via em1 >>> >>> Rule 510 fixes it. >> >> Ye

L2TP with Certificates

2013-02-07 Thread Tim Gustafson
Hi, I've found a handful of good tutorials explaining how to set up MPD and Racoon using pre-shared keys and user/pass authentication, but I can't seem to find anything that uses certificates. Is this not an option? Does anyone know if there's a good demo of this out there? Also, if I do use us

Re: [PATCH] Add a new TCP_IGNOREIDLE socket option

2013-02-07 Thread George Neville-Neil
On Feb 6, 2013, at 12:28 , Alfred Perlstein wrote: > On 2/6/13 4:46 AM, John Baldwin wrote: >> On Wednesday, February 06, 2013 6:27:04 am Randall Stewart wrote: >>> John: >>> >>> A burst at line rate will *often* cause drops. This is because >>> router queues are at a finite size. Also such a b

Re: A question about SYN cookies...

2013-02-07 Thread George Neville-Neil
On Feb 4, 2013, at 04:09 , Andre Oppermann wrote: > On 04.02.2013 01:09, George Neville-Neil wrote: >> Howdy, >> >> I've been reviewing the SYN cache and SYN cookie code and I'm wondering why >> we do all the work >> of generating a SYN cache entry before sending a SYN cookie. If the point >

Question: Why ain't I getting gigabit speed?

2013-02-07 Thread Ronald F. Guilmette
I just aquired a brand new chepie gigabit PCI ethernet card off eBay. The main chip on it appears to be an RTL8110S-32. I stuck this card into a 9.1-RELEASE system that I have been putting together, and it seemed to be recognized ok (as re0) upon boot up, so I diddled my /etc/rc.conf file to get

Question: Why ain't I getting gigabit speed?

2013-02-07 Thread Ronald F. Guilmette
Apologies for following up on myself, but I just now found this: https://support.freenas.org/ticket/894 This thread would suggest that I ain't alone in experienceing this problem with the RTL8110S. That other guy apparently solved his problem by just simply switching to a CAT6 cable. I how

Re: Question: Why ain't I getting gigabit speed?

2013-02-07 Thread Sin
Maybe you're not using all 4 pairs in the CAT 6 cable. - Original Message - From: "Ronald F. Guilmette" To: Sent: Thursday, February 07, 2013 6:53 PM Subject: Question: Why ain't I getting gigabit speed? Apologies for following up on myself, but I just now found this: https://