Re: IPFW Stateful behaviour

2007-04-03 Thread Andrew Pantyukhin
On 4/3/07, Prokofiev S.P. <[EMAIL PROTECTED]> wrote: Hi ALL! The PF has useful state-policy option: if-bound, group-bound, floating. I have found out IPFW stateful rules do not become attached to the interface and behave as PF stateful rules in floating mode. For example, I build stateful rules

Re: Best way to block a long list of IPs?

2006-06-20 Thread Andrew Pantyukhin
On 6/21/06, Brett Glass <[EMAIL PROTECTED]> wrote: Everyone: I've got an application in which I must block incoming TCP connections to a FreeBSD server from a potentially large list of IP addresses. Using IPFW is not a very efficient way to accomplish this, because it must do a linear search of

Re: fetch http://localhost:6666 hangs

2006-06-27 Thread Andrew Pantyukhin
On 6/27/06, Mikhail Teterin <[EMAIL PROTECTED]> wrote: Hello! I just noticed, that on my recent "6.1-STABLE #4: Thu Jun 8" amd64 system attempts to connect to a bogus port (like ) hang instead of failing with "Connection refused" immediately, as they on other systems. My first thought is

Re: Routing IPSEC packets?

2006-08-18 Thread Andrew Pantyukhin
On 8/18/06, Yu-Shun Wang <[EMAIL PROTECTED]> wrote: Remko Lodder wrote: > Hi friends, > > I was looking around for using IPsec services instead of > OpenVPN services, but I found out that with our current > implementation of IPsec, we cannot actually route packets > through the various IPsec hops

Re: Routing IPSEC packets?

2006-08-18 Thread Andrew Pantyukhin
On 8/18/06, Yu-Shun Wang <[EMAIL PROTECTED]> wrote: Andrew Pantyukhin wrote: > On 8/18/06, Yu-Shun Wang <[EMAIL PROTECTED]> wrote: >> Remko Lodder wrote: >> > I was looking around for using IPsec services instead of >> > OpenVPN services, but I found out th

Re: [fbsd] Re: Routing IPSEC packets?

2006-08-21 Thread Andrew Pantyukhin
On 8/21/06, Jeremie Le Hen <[EMAIL PROTECTED]> wrote: As is has indeed already been stated in this thread, IPSec tunnel mode shunts the routing table. However the new enc(4) interface that Andrew Thompson has imported from OpenBSD allows to filter IPSec traffic in a more natural way. My unders

Polling + fxp = input errors

2006-09-27 Thread Andrew Pantyukhin
FWIW, enabling polling on 6.1-RELEASE with fxp interfaces resulted in input errors, visible through "netstat -w1 -Ifxp0". Moreover, today I had to restart the interface (down-up) after it hanged somehow. We've got hz=500 on this box. Once I disabled polling the errors disappeared altogether and pe

Re: Re[2]: border mx

2006-12-20 Thread Andrew Pantyukhin
On 12/20/06, Alexei <[EMAIL PROTECTED]> wrote: Hello, Andrew. Можно поинтересоваться, в чём кайф писать в незнакомый лист на неродном языке, когда всё под рукой и доступно? Милости просим: http://postfix.ru/ http://www.elantech.ru/docs/postfix-docs-ru/ Это про Postfix, который я вам искренне

Re: border mx

2006-12-20 Thread Andrew Pantyukhin
On 12/20/06, Alexei <[EMAIL PROTECTED]> wrote: Hello, freebsd-net. I'm going to build some mail system, so I need some advice. There is a network with a 'MS Exchange' as a mail server and 'someintdomain' as an internal mail domain. I also have an internet domain, for example 'mydomain.com'. Ther

Re: Re[2]: border mx

2006-12-20 Thread Andrew Pantyukhin
On 12/20/06, Remko Lodder <[EMAIL PROTECTED]> wrote: On Wed, Dec 20, 2006 at 12:03:12PM +0300, Andrew Pantyukhin wrote: > On 12/20/06, Alexei <[EMAIL PROTECTED]> wrote: &

Re: Mpd-4.1 released

2007-02-12 Thread Andrew Pantyukhin
On 2/12/07, Alexander Motin <[EMAIL PROTECTED]> wrote: I am glad to present you the first stable release of mpd4.x branch - the mpd4.1! You can't imagine how much your effort is appreciated! We'll be looking at mpd4.1 this or next week during the FreeBSD course at specialist.ru. It really seem

Re: Wireshark

2007-03-17 Thread Andrew Pantyukhin
On 3/17/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Can someone please explain the difference between Wireshark and Wireshark-lite. I would like to install a packet sniffer on my FreeBSD box for CLI only. lite = cli only ___ freebsd-net@freebsd.o

Re: Wireshark

2007-03-17 Thread Andrew Pantyukhin
On 3/17/07, Max Laier <[EMAIL PROTECTED]> wrote: On Saturday 17 March 2007 20:30, Andrew Pantyukhin wrote: > On 3/17/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > Can someone please explain the difference between Wireshark > > and Wireshark-lite. I would like