Re: gif(4) and bpf(4)

2005-01-25 Thread Bruce M Simpson
On Tue, Jan 25, 2005 at 06:38:42PM +0100, Jeremie Le Hen wrote: > Are you thinking about the enc(4) interface [1] [2] provided with OpenBSD ? Somewhat, although whilst enc(4) provides some of this functionality, its role as far as I can see is mainly to provide a 'tapping point' for filtering pack

Re: IPMI doesn't work...

2005-03-14 Thread Bruce M Simpson
On Mon, Mar 14, 2005 at 04:26:16PM -0800, Jeff wrote: > I don't think it's the case of the OS turning off the NIC. We can > access/monitor/control the chassis via the BMC fine through the bios > assigned IP address when the computer is off, and when it is booting, > but lose control when the ke

Re: Sending Ethernet frames

2005-03-21 Thread Bruce M Simpson
On Mon, Mar 21, 2005 at 02:05:48PM +0100, Patrik Arlos wrote: > I'm trying to send 'raw' Ethernet frames. I have however not found any > examples of how to do this in BSD. Consider using bpf(4) in read/write mode. BMS ___ freebsd-net@freebsd.org mailin

Re: OpenBGPD with FreeBSD

2005-03-21 Thread Bruce M Simpson
Hi there, On Mon, Mar 14, 2005 at 12:08:53AM +0059, Claudio Jeker wrote: > You have to remove the full pfkey interface and replace it with dummy > functions as it is incompatible. So tcp md5 does not work but I think it > is still broken in FreeBSD anyway. I am willing to work with OpenBSD develo

Re: Resolving MAC address

2005-03-23 Thread Bruce M Simpson
On Thu, Mar 24, 2005 at 10:58:37AM +0700, Olivier Nicole wrote: > But what i really want to avoid is sending any IP/ICMP packet when the > ARP resolution is all I need. (And some people even filter out the > ICMP echo request packets (Windows XP firewall), so I have to wait for > the time out). po

Re: TCP MD5 Signature option handling in tcp_syncache.c

2005-04-16 Thread Bruce M Simpson
On Fri, Apr 15, 2005 at 02:35:21PM +0900, Noritoshi Demizu wrote: > 2. The TCP MD5 Signature option is used iff an incoming SYN has the > TCP MD5 Signature option. However, RFC2385 says in section 2.0 > as following. > > "Unlike other TCP extensions (e.g., the Window Scale option

Re: Multicast routing with VLANs

2005-04-25 Thread Bruce M Simpson
Hi, On Mon, Apr 25, 2005 at 07:21:22PM +0200, Eivind Hestnes wrote: > I'm trying to get mrouted to route multicast traffic between multiple > VLANs on a FreeBSD 5.4-RC3 machine. Mrouted starts as expected, and > according to /var/log/messages it's running - but the multicast routing > itself do

Re: if_tap unaligned access problem

2005-04-28 Thread Bruce M Simpson
On Thu, Apr 28, 2005 at 09:39:27AM -0700, Maksim Yevmenkin wrote: > you probably should file pr. (1) and (2) above are quick fixes. (3) is > more complicated and, maybe, not desirable. 3) may be good. I have an ATM driver which may need this behaviour. I haven't had a chance to get test coverage

Re: Virtual network stacks in FreeBSD?

2005-04-29 Thread Bruce M Simpson
On Thu, Apr 28, 2005 at 04:00:43PM +0200, Ragnar Lonn wrote: > Does anyone know if virtual network stack support (as implemented at > http://www.tel.fer.hr/zec/vimage/) is on the roadmap for future FreeBSD > releases? One of the things about vimage is it changes *everything*, and adds an addition

Re: [PATCH] Re: tap interface and locally generated packets

2005-05-10 Thread Bruce M Simpson
On Wed, May 11, 2005 at 12:25:49AM +0200, Jeremie Le Hen wrote: > This is a little bit off-topic but I strongly support import of > if_bridge(4). AFAIK the latter supports spanning-tree protocol whereas > our bridge(4) doesn't. We're working on it. BMS ___

Re: SIOCGIFMEDIA problems

2005-05-16 Thread Bruce M Simpson
On Mon, May 16, 2005 at 02:31:36PM +0200, Sebastien Petit wrote: > As I can see in kqueue man, I can only monitor events by file descriptor > (read/write), a process id, a signal or a timer (under NetBSD 2) > How I can use it for monitoring link status change on a network card ? You need to use E

Re: xxconfig for if_bridge

2005-06-05 Thread Bruce M Simpson
Hi, Many of these points were covered in the thread from over a year ago which Andrew helpfully posted the link to. On Fri, Jun 03, 2005 at 02:41:22PM -0700, Julian Elischer wrote: > and I still don't see why it is better to import Yet another bridge > module rather > than adding it to the 2 we

Re: route metric

2005-06-05 Thread Bruce M Simpson
On Fri, Jun 03, 2005 at 04:21:09PM -0400, Michael W. Oliver wrote: > there used to be patches floating around for 4.x that would allow a kind > of metric, but IIRC you couldn't use two (or more) same-metric routes > for per-packet balancing, rather the metric would be degraded for each > packet tha

Re: bpf writes on tun device

2005-06-06 Thread Bruce M Simpson
On Mon, Jun 06, 2005 at 08:16:38PM +1200, Matthew Luckie wrote: > If I was to pursue this, would someone on this list consider committing the > work to current? ... > + case DLT_NULL: > + sockp->sa_family = AF_UNSPEC; > + if(strcmp(ifp->if_name, "tun") == 0) > +

Re: bpf writes on tun device

2005-06-07 Thread Bruce M Simpson
On Tue, Jun 07, 2005 at 10:19:29PM +1200, Matthew Luckie wrote: > Please review. This is good and useful work. It looks like something which has been in need of cleanup for a while. Unfortunately my current situation re resources (time and infrastructure) means that whilst I can review and commit

Re: www user than root

2005-06-22 Thread Bruce M Simpson
On Wed, Jun 22, 2005 at 05:01:17PM +0200, Mrad James Deane wrote: > hello i want to know how the www user with uid:80 can print on a priviliged > port like 80 rather the root user im very in trouble i did not find a > solution yet mac_portacl is one but it is very experimental please help. > tha

Re: A bit of a route socket bug...

2005-07-06 Thread Bruce M Simpson
On Wed, Jul 06, 2005 at 11:46:00PM +0900, [EMAIL PROTECTED] wrote: > As was reported in > http://www.freebsd.org/cgi/query-pr.cgi?pr=%0D%0A82974 [snip] This is definitely a bug, no question about it. RTM_CHANGE should let you change the next-hop, but not the destination or the netmask. [Sklower] A

Re: [RFC] Port of DfBSDs new IP Checksum Code

2005-08-06 Thread Bruce M Simpson
Hi, On Sat, Aug 06, 2005 at 01:43:29PM +0200, Gordon Bergling wrote: > I have ported the new IP Checksum Code from DragonflyBSD to FreeBSD. > I have a patch available at > http://generic.0xfce3.net/freebsd/ipchecksum/20050805-ipchecksum.patch There are inline i386 instructions in a machine-indepe

IPSEC offloading on Intel PRO/100 S

2002-03-01 Thread Bruce M Simpson
Guys, A few questions regarding the Intel PRO/100 S Ethernet adapter: o Has anybody experimented with using the IPSEC ESP 3DES hardware offload capability of the Intel 82550EY ASIC used within the above NIC? o Have Intel ever released specs for this ASIC publicly? o Would anybody be interest

Re: IPSEC offloading on Intel PRO/100 S

2002-03-01 Thread Bruce M Simpson
On Fri, Mar 01, 2002 at 04:33:04AM -0600, Len Conrad wrote: > > > > o Would anybody be interested in my adding support for this beast's crypto > > > features to the fxp driver? > > > >Yes. :) > > Is there ANY hardware encryption support in FreeBSD? Things are gradually being rearranged to fac

Re: IPSEC offloading on Intel PRO/100 S

2002-03-01 Thread Bruce M Simpson
Pardon my lack of caffiene; I have a pint mug of tea on my desk now. On Fri, Mar 01, 2002 at 10:40:35AM +, Bruce M Simpson wrote: > > > > Is there ANY hardware encryption support in FreeBSD? > > Things are gradually being rearranged to facilitate this, as part of SMPng. &

Re: ALTQ integration in FreeBSD

2002-03-04 Thread Bruce M Simpson
On Sat, Mar 02, 2002 at 12:36:49PM +0200, Adrian Penisoara wrote: > Hi, > > For my diploma exam I will study the state of QoS in today's > networking and further directions and I probably will concentrate on > ALTQ in FreeBSD (as I'm pretty familiar w/ FreeBSD). > > I see that most of today'

Re: GRE on 4.x

2002-06-06 Thread Bruce M Simpson
Barry, I have a working GRE driver (tested against 4.5-RELEASE) which we are using as part of Consume (www.consume.net). I would be happy to post the code publicly for peer review, as I'd like to contribute it to FreeBSD. Regards, BMS. On Mon, Jun 03, 2002 at 12:52:02PM +0200, Barry Irwin wrote

Re: Routed Log

2002-09-26 Thread Bruce M Simpson
On Wed, Sep 25, 2002 at 03:15:48PM -0400, Louis A. Mamakos wrote: > > > I do not permit any ICMP packages... > Sigh, and this is why Path MTU discovery is broken on the Internet. 'Packages' sounds awfully Checkpoint-ish. There's a lot of it about these days. :-( BMS To Unsubscribe: send mail t

Re: PKI

2002-09-27 Thread Bruce M Simpson
I'm working on a port of OpenCA which is almost ready. Hopefully within the next week (I'm ill at the moment.) :( www.openca.org BMS On Fri, Sep 27, 2002 at 12:42:10PM +0300, Ivailo Tanusheff wrote: > Do you know if there is any Certificate server available for FreeBSD? I > need to issue certi

Re: Fw: Link Triggers on Linux

2002-09-30 Thread Bruce M Simpson
Hi, Sounds similar to Win2k's ability to notify user-space processes of the link going up/down on Ethernet interfaces. But that's nothing that can't be achieved by polling the appropriate ifioctl. On Sat, Sep 28, 2002 at 05:30:20PM +0200, Marco Molteni wrote: > WLAN events : > o SIOCGIWA

Re: Intel PRO/100 S

2002-10-02 Thread Bruce M Simpson
On Tue, Oct 01, 2002 at 06:33:13PM +0200, Marc Ernst Eddy van Woerkom wrote: > As far as I can tell from a bit of Google > research, it features hardware encryprtion/decryption. Check the BGA ASIC. If it's an 82550EY or 82550GY, it should be crypto capable. The 82559ED may also be crypto capable.

Re: multicast ftp?

2002-10-03 Thread Bruce M Simpson
On Thu, Oct 03, 2002 at 07:38:33AM +0100, shubha mr wrote: > Does freeBSD support ftp for a multicast address? ftp is a unicast, not a multicast protocol. If what you *really* mean is are there multicast file transfer protocols out there, yes there are; please be more specific... BMS To Unsubs

Re: Linux <-> FreeBSD ipip/gre tunnel

2002-10-07 Thread Bruce M Simpson
On Fri, Oct 04, 2002 at 10:09:47AM -0400, [EMAIL PROTECTED] wrote: > I haven't been able to turn up anything under Google... > > Has anyone ever successfully gotten an IP-IP or GRE tunnel working > between a FreeBSD machine (4-STABLE) and a Linux machine (2.4.x)? I > can get a tunnel up between

Re: OT - Quagga/CARP

2006-03-16 Thread Bruce M Simpson
On Thu, Mar 16, 2006 at 07:35:20PM +0100, Bart Van Kerckhove wrote: > Is this by design, or just lack of time/interest? > If anyone feels up to the task of fixing/implementing what's needed to make > this work, we'd be happy to sponsor its development. This is a collision between the connected ro

Re: OT - Quagga/CARP

2006-03-16 Thread Bruce M Simpson
On Thu, Mar 16, 2006 at 10:36:20PM +0100, Bart Van Kerckhove wrote: > ECMP was indeed one of the features i was looking for at that time, which i > found to be impossible. > I just don't like the idea of moving towards another platform just for this > reason, since I'm very happy with freebsd's p

Re: Wireless sensing function is missing?

2006-03-17 Thread Bruce M Simpson
On Fri, Mar 17, 2006 at 02:00:28PM -0800, Kan Cai wrote: > I wonder if this is true that sensing function is missing? If yes, is it > supposed to be implemented in the driver or net80211 layer? Thanks in > advance! It's a function of the 802.11 hardware. I assume you're describing the CSMA/CA

Re: IP_SENDIF?

2006-03-20 Thread Bruce M Simpson
On Mon, Mar 20, 2006 at 12:08:35PM -1000, Dave Cornejo wrote: > In summary it's a piece missing for FreeBSD to implement the function > of the Linux socket option SO_BINDTODEVICE, which forces packets > transmitted on the socket to be sent on the bound device. I'm currently out of commission with

Re: How can i detect if a received UDP got fragmented from userland?

2006-03-21 Thread Bruce M Simpson
On Tue, Mar 21, 2006 at 04:15:44AM +0100, Sten Daniel Sørsdal wrote: > Our first assumption was that adding DF to UDP would solve it, and it > does in our small tests, but it has a noticable negative effect on the > network. Sounds like you need to implement Path MTU Discovery in userland for you

Re: FreeBSD as a VPN Client Gateway ...

2006-03-23 Thread Bruce M Simpson
On Wed, Mar 22, 2006 at 04:17:23PM -0600, Matthew Grooms wrote: > If you are interested in using NAT-T, you should have a look at > Yvans kernel patch which offers everything but transport > pre-fragmentation support ... This looks cool. This looks very, very cool. Now if only I had free t

Re: Is there an API for ipfw?

2006-03-30 Thread Bruce M Simpson
On Thu, Mar 30, 2006 at 04:57:42PM -0500, Mikhail Teterin wrote: > Is there any way to create/alter such a pipe from a C-program without using > system("ipfw ")? XORP has a module for IPFW2 which micro-assembles IPFW2 instruction sequences on the fly from a relatively simple filtering rule re

Re: tcpdump and ipsec

2006-03-31 Thread Bruce M Simpson
On Sat, Apr 01, 2006 at 12:28:13AM +0200, VANHULLEBUS Yvan wrote: > 2) use enc0 support, which is actually pr kern/94829, and which should >be included soon in kernel. Oh god! Not another ifnet! NoOO!! *runs away* ___ freebsd-net@freebsd.org

Re: freeBSD tcp enhancement

2006-04-08 Thread Bruce M Simpson
On Thu, Apr 06, 2006 at 07:36:52PM -0500, Amit Mondal wrote: > I am a newbie to freeBSD. I am trying to modify freeBSD tcp for some > security ehancement. Could anyone pls point me to how/where to start or any > suitable material/tutorial to start with. The code. If explanations in natural langua

Re: Support for Conexant AccessRunner ADSL PCI Cards

2006-04-10 Thread Bruce M Simpson
On Mon, Apr 10, 2006 at 05:41:22PM +0100, Joe Holden wrote: > Does anyone know if the above card is supported yet, or if it is > planned? In particular, i'm interested in getting a Zoom 5506 PCI Card > working under Freebsd, which uses this chipset. The only ADSL PCI card I know of that Fr

Re: crypto accelerators

2006-04-18 Thread Bruce M Simpson
On Mon, Apr 17, 2006 at 04:44:38PM -1000, Dave Cornejo wrote: > So the question is whether these cards, regardless of their affect on > throughput, increase usable CPU cycles? I have several Soekris 1401 > cards and am wondering if there would be any point to putting them > into some machines that

IP_MAX_MEMBERSHIPS story.

2006-05-09 Thread Bruce M Simpson
A user recently reported a problem with running into IP_MAX_MEMBERSHIPS on a system running FreeBSD with IPv4 forwarding enabled, and running the OSPF routing protocol. I have been investigating how to address this problem. Background: A raw socket was exceeding the permitted number of group me

Re: IP_MAX_MEMBERSHIPS story.

2006-05-09 Thread Bruce M Simpson
On Tue, May 09, 2006 at 01:28:01PM +0100, Bruce M Simpson wrote: > A user recently reported a problem with running into IP_MAX_MEMBERSHIPS > on a system running FreeBSD with IPv4 forwarding enabled, and running > the OSPF routing protocol. More background. People may be wondering why thi

Re: IP_MAX_MEMBERSHIPS story.

2006-05-12 Thread Bruce M Simpson
On Thu, May 11, 2006 at 11:12:29PM -0400, Stephen Clark wrote: > >I'm loosely of the opinion that the membership array should be > >variable length, and that we should default it to 20, but have a > >significantly larger maximum. It's not horribly efficient, but also > >wouldn't be so particula

[PATCH] Re: IP_MAX_MEMBERSHIPS story.

2006-05-13 Thread Bruce M Simpson
Hello, On Fri, May 12, 2006 at 02:12:27PM +0100, Bruce M Simpson wrote: > Therefore, joining the same group 20 times on different interfaces > would exceed IP_MAX_MEMBERSHIPS. > Fixing this in any way would still break the ip_mroute_kmod ABI and > as such is a HEAD change. A patch fo

Re: [PATCH] Re: IP_MAX_MEMBERSHIPS story.

2006-05-14 Thread Bruce M Simpson
Hello, On Sat, May 13, 2006 at 08:40:30PM -0400, Stephen Clark wrote: > Thanks for your effort - I will try it on monday at work in a test > configuration I have setup with > a hundred gre/vpn tunnels and ospf. This configuration needs a > multicast membership group > of 100. Thank you! I have

Re: [PATCH] Re: IP_MAX_MEMBERSHIPS story.

2006-05-14 Thread Bruce M Simpson
On Sun, May 14, 2006 at 03:00:44PM +0100, Bruce M Simpson wrote: > So I will be updating the patch in the next 24 hours. Given that it > seems stable for values 2047 <= n <= 4095 with SOCK_DGRAM I am inclined > to commit with the maximum raised to 4095 and lazy allocation in place

Re: kern/60293: FreeBSD arp poison patch

2006-08-02 Thread Bruce M Simpson
Synopsis: FreeBSD arp poison patch State-Changed-From-To: analyzed->suspended State-Changed-By: bms State-Changed-When: Wed Aug 2 13:01:22 UTC 2006 State-Changed-Why: Not ready for prime time, IMHO. Responsible-Changed-From-To: bms->freebsd-net Responsible-Changed-By: bms Responsible-Changed-Wh

Re: i386/63721: [if_vr] VT6103 NIC broken since 5.2

2006-08-02 Thread Bruce M Simpson
Synopsis: [if_vr] VT6103 NIC broken since 5.2 Responsible-Changed-From-To: bms->freebsd-net Responsible-Changed-By: bms Responsible-Changed-When: Wed Aug 2 13:06:56 UTC 2006 Responsible-Changed-Why: Disowned... reorganising http://www.freebsd.org/cgi/query-pr.cgi?pr=63721 ___

Re: kern/19875: A new protocol family, PF_IPOPTION, to handle IP options at socket interface

2006-08-02 Thread Bruce M Simpson
Synopsis: A new protocol family, PF_IPOPTION, to handle IP options at socket interface Responsible-Changed-From-To: bms->freebsd-net Responsible-Changed-By: bms Responsible-Changed-When: Wed Aug 2 13:23:39 UTC 2006 Responsible-Changed-Why: ENOTIME http://www.freebsd.org/cgi/query-pr.cgi?pr=1987

Re: kern/31686: Problem with the timestamp option when flag equals zero

2006-08-02 Thread Bruce M Simpson
Synopsis: Problem with the timestamp option when flag equals zero Responsible-Changed-From-To: bms->freebsd-net Responsible-Changed-By: bms Responsible-Changed-When: Wed Aug 2 13:28:14 UTC 2006 Responsible-Changed-Why: Back to the free pool. http://www.freebsd.org/cgi/query-pr.cgi?pr=31686 _

Re: conf/23063: [PATCH] for static ARP tables in rc.network

2006-08-02 Thread Bruce M Simpson
Synopsis: [PATCH] for static ARP tables in rc.network Responsible-Changed-From-To: bms->freebsd-net Responsible-Changed-By: bms Responsible-Changed-When: Wed Aug 2 13:30:40 UTC 2006 Responsible-Changed-Why: ENOTIME. If big ARP changes happen, then this should probably be taken on again and looked

Re: kern/52585: [netinet] [patch] Kernel panic with ipfw2 and syncookies

2006-09-22 Thread Bruce M Simpson
Synopsis: [netinet] [patch] Kernel panic with ipfw2 and syncookies State-Changed-From-To: open->suspended State-Changed-By: bms State-Changed-When: Fri Sep 22 17:04:22 UTC 2006 State-Changed-Why: Back to the free pool. By the looks of things, this problem may have gone away since 5.x, the reason

Re: bin/41647: ifconfig(8) doesn't accept lladdr along with inet address family

2006-09-23 Thread Bruce M Simpson
Synopsis: ifconfig(8) doesn't accept lladdr along with inet address family State-Changed-From-To: analyzed->suspended State-Changed-By: bms State-Changed-When: Sat Sep 23 15:00:03 UTC 2006 State-Changed-Why: Not a serious problem. These limitations can be worked around e.g. by using /etc/start_if

Re: kern/56233: IPsec tunnel (ESP) over IPv6: MTU computation is wrong

2006-09-23 Thread Bruce M Simpson
Synopsis: IPsec tunnel (ESP) over IPv6: MTU computation is wrong Responsible-Changed-From-To: bms->freebsd-net Responsible-Changed-By: bms Responsible-Changed-When: Sat Sep 23 16:28:40 UTC 2006 Responsible-Changed-Why: I must focus on more specific areas. http://www.freebsd.org/cgi/query-pr.cgi?

Re: kern/65616: IPSEC can't detunnel GRE packets after real ESP encryption

2006-09-23 Thread Bruce M Simpson
Synopsis: IPSEC can't detunnel GRE packets after real ESP encryption Responsible-Changed-From-To: bms->freebsd-net Responsible-Changed-By: bms Responsible-Changed-When: Sat Sep 23 16:29:17 UTC 2006 Responsible-Changed-Why: I must focus on more specific areas. http://www.freebsd.org/cgi/query-pr.

Re: kern/38554: changing interface ipaddress doesn't seem to work

2006-09-23 Thread Bruce M Simpson
Synopsis: changing interface ipaddress doesn't seem to work Responsible-Changed-From-To: bms->freebsd-net Responsible-Changed-By: bms Responsible-Changed-When: Sat Sep 23 17:36:57 UTC 2006 Responsible-Changed-Why: Back to the world for you, but not after actually doing some work on it... http://

Re: kern/39937: ipstealth issue

2006-09-23 Thread Bruce M Simpson
Synopsis: ipstealth issue State-Changed-From-To: analyzed->suspended State-Changed-By: bms State-Changed-When: Sat Sep 23 17:38:49 UTC 2006 State-Changed-Why: Back to the free pool for you. Responsible-Changed-From-To: bms->freebsd-net Responsible-Changed-By: bms Responsible-Changed-When: Sat S

Re: kern/38554: changing interface ipaddress doesn't seem to work

2006-09-23 Thread Bruce M Simpson
The following reply was made to PR kern/38554; it has been noted by GNATS. From: Bruce M Simpson <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Cc: Subject: Re: kern/38554: changing interface ipaddress doesn't seem to work Date: Sat, 23 Sep 2006 18:35:50 +0100 This is a multi-part mess

De-orbitting tcpslice

2006-09-23 Thread Bruce M Simpson
We have tcpslice maintained in ports. We have ancient tcpslice in base system. We have PRs about it. I'd like to nuke it in HEAD. How does everyone else feel about that before I go off and do it? BMS ___ freebsd-net@freebsd.org mailing list http://li

Re: kern/65616: IPSEC can't detunnel GRE packets after real ESP encryption

2006-09-24 Thread Bruce M Simpson
Synopsis: IPSEC can't detunnel GRE packets after real ESP encryption Responsible-Changed-From-To: freebsd-net->gnn Responsible-Changed-By: bms Responsible-Changed-When: Sun Sep 24 08:57:20 UTC 2006 Responsible-Changed-Why: by request http://www.freebsd.org/cgi/query-pr.cgi?pr=65616 _

Re: kern/56233: IPsec tunnel (ESP) over IPv6: MTU computation is wrong

2006-09-24 Thread Bruce M Simpson
Synopsis: IPsec tunnel (ESP) over IPv6: MTU computation is wrong Responsible-Changed-From-To: freebsd-net->gnn Responsible-Changed-By: bms Responsible-Changed-When: Sun Sep 24 08:57:37 UTC 2006 Responsible-Changed-Why: by request http://www.freebsd.org/cgi/query-pr.cgi?pr=56233 _

Re: problem with routnig

2006-09-27 Thread Bruce M. Simpson
Marko Lerota wrote: route_lan2="-net 192.168.2.0 -netmask 255.255.255.0 -iface xl0" route_lan2="-net 192.168.2.0 -netmask 255.255.255.0 192.168.1.1" Neither of these subnet routes should be necessary as 192.168.2.0/24 is already directly connected via fxp0. Do you still see the problem with

Re: kern/95665: [if_tun] "ping: sendto: No buffer space available" with TUN interface (easily reproducable with test program)

2006-09-27 Thread Bruce M Simpson
Synopsis: [if_tun] "ping: sendto: No buffer space available" with TUN interface (easily reproducable with test program) State-Changed-From-To: feedback->suspended State-Changed-By: bms State-Changed-When: Wed Sep 27 21:56:02 UTC 2006 State-Changed-Why: Back to the free pool (can't reproduce) R

De-orbitting mrouted

2006-09-28 Thread Bruce M Simpson
Hi, I think it would be a good idea if we de-orbit /usr/sbin/mrouted in 7-CURRENT. Several reasons: 1. DVMRP is not specified for any new multicast installations; PIM is the de-facto standard now. 2. The code generates warnings during a buildworld (see bin/71633) 3. Given point (1) it probab

Re: De-orbitting mrouted

2006-09-28 Thread Bruce M Simpson
John Hay wrote: Well what is there to do ipv4 multicast routing then? For ipv6 I have been using the net/mcast-tools package with pim6sd and pim6dd, but it seems that we are a bit thin in the ipv4 field... net/xorp maybe, although it looks like an overkill... I haven't tried it myself though.

Re: kern/95277: [netinet] IP Encapsulation mask_match() returns wrong results

2006-09-28 Thread Bruce M Simpson
Synopsis: [netinet] IP Encapsulation mask_match() returns wrong results Responsible-Changed-From-To: freebsd-bugs->net Responsible-Changed-By: bms Responsible-Changed-When: Thu Sep 28 17:30:09 UTC 2006 Responsible-Changed-Why: over to net for more discussion http://www.freebsd.org/cgi/query-pr.c

Re: kern/95277: [netinet] IP Encapsulation mask_match() returns wrong results

2006-09-28 Thread Bruce M Simpson
The following reply was made to PR kern/95277; it has been noted by GNATS. From: Bruce M Simpson <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Cc: Subject: Re: kern/95277: [netinet] IP Encapsulation mask_match() returns wrong results Date: Thu, 28 Sep 2006 18:22:46 +0100 This is a mult

Re: De-orbitting mrouted

2006-09-28 Thread Bruce M Simpson
Bill Fenner wrote: I think it would be a good idea if we de-orbit /usr/sbin/mrouted in 7-CURRENT. Do it. Maybe consider making a port if anyone cares to continue to use it. (Gee, I suppose I could do that part ;-) I count +3 votes in favour. As soon as I get some spare cycles (juggli

Re: kern/95665: [if_tun] "ping: sendto: No buffer space available" with TUN interface (easily reproducable with test program)

2006-09-29 Thread Bruce M. Simpson
Gleb Smirnoff wrote: You didn't took it from free pool, but from me, w/o informing me about it before. Okay. Now, you gave up on the PR quite quickly, why aren't you returning it back to me? Sorry! I have been trying to push forward on things and the PR formerly being assigned to you got lo

Re: [patch] tun(4) and tap(4) if_clone support.

2006-11-08 Thread Bruce M. Simpson
Landon Fuller wrote: Nick Barkas ([EMAIL PROTECTED]) and I have added interface cloning support to the tun(4) and tap(4) drivers. We maintained backwards-compatible support for devfs cloning, which is now disabled by default -- it can be re-enabled via a sysctl. Interfaces that are created vi

Re: UDP lite for FreeBSD

2006-12-18 Thread Bruce M. Simpson
dave jones wrote: Hi, Is anyone working on implementing UDP lite in FreeBSD? If not, I'd like to work on it. Nope. I just skimmed the RFC and it sounds like a bit of a hack, though I am sure it can be done cleanly in the source tree without unnecessary code duplication or interference at the u

Re: Different behavior of ping'ing INADDR_BROADCAST?

2007-01-06 Thread Bruce M. Simpson
LI Xin wrote: Dear colleagues, I have a strange question about our way of handling INADDR_BROADCAST, the behavior looks different from all other operating systems I have tried, except Mac OS X ;-) By ping'ing 255.255.255.255 from FreeBSD (mostly RELENG_6 with some unrelated patches) or Mac OS X

Re: Different behavior of ping'ing INADDR_BROADCAST?

2007-01-10 Thread Bruce M. Simpson
Eygene Ryabinkin wrote: For me the routing gives the default gateway as the next hop, so the 'dst' will be rewritten at the line 241. You're quite right, I stand corrected -- the undirected broadcast case is hitting the default route. I think that this confirms my findings. Have you tried t

Re: Different behavior of ping'ing INADDR_BROADCAST?

2007-01-11 Thread Bruce M. Simpson
Eygene Ryabinkin wrote: Do you (or anyone else reading this post) have access to the different IP stack realisations at hosts with multiple broadcast-able interfaces? If yes, wouldn't you all be so kind to try to ping the broadcast address and report the behaviour? Windows deals with this by a

Re: Problem with port 0

2007-01-12 Thread Bruce M. Simpson
Ricardo Nabinger Sanchez wrote: On Fri, 12 Jan 2007 12:03:17 -0500 "Hug Me" <[EMAIL PROTECTED]> wrote: We believe FreeBSD is not allowing a UDP source port of 0 and the kernel is dropping the packet before it ever reaches the tftp server but are unable to verify this hypothesis. I was hoping

Re: rev. 1.94 of netinet/in.c broke CARP

2007-01-25 Thread Bruce M. Simpson
Gleb, Good catch, thanks for tracking this down. Gleb Smirnoff wrote: I've just discovered, that revision 1.94 of in.c has broke CARP. This change adds a code to in_ifdetach() that goes through the global list of all multicast instances and deletes all the instances, that are belonging to a p

Re: interface metric & quagga

2007-01-26 Thread Bruce M. Simpson
Eugene Grosbein wrote: RTM_NEWADDR contains 'metric 0' regardless of interface metric value set with ifconfig before. quagga, since version 0.99.3, takes metric value from RTM_NEWADDR message and this value overrides right interface metric learned by quagga a milisecond before. Then it passes zer

Re: rev. 1.94 of netinet/in.c broke CARP

2007-01-29 Thread Bruce M. Simpson
Hello, I've had a chance to read ip_carp.c in more detail now, so... Gleb Smirnoff wrote: Is adding a generic GC function a correct way or was it better to just fix the buggy layer, that forgot about its multicast memberships? In the bigger picture: The real fix for netinet is to do what net

[PATCH] Broadcast 169.254.0.0/16 ARP replies for RFC 3927 (Zeroconf)

2007-01-31 Thread Bruce M Simpson
I will hold off on committing this pending further feedback. Regards, BMS This patch forces the FreeBSD IPv4 ARP code to broadcast ARP replies for IPv4 link-local addresses, as required by RFC 3927, if and only if the request was destined for the local machine (ie not proxied). The code does no

[TEST ATTACHED] Inconsistencies with IP_ONESBCAST and/or IP_SENDSRCADDR

2007-01-31 Thread Bruce M Simpson
Hello, In preparation for tightening up our handling of INADDR_BROADCAST sends, I ran some brief tests today on the network stack with the attached test code. I found some inconsistencies when run against 6.2-RELEASE; 1. IP_ONESBCAST breaks if SO_DONTROUTE is specified. One thing appears to

Re: [TEST ATTACHED] Inconsistencies with IP_ONESBCAST and/or IP_SENDSRCADDR

2007-01-31 Thread Bruce M. Simpson
Thunderbird ate my homework. Reposting. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: [TEST ATTACHED] Inconsistencies with IP_ONESBCAST and/or IP_SENDSRCADDR

2007-01-31 Thread Bruce M. Simpson
Bruce M. Simpson wrote: Thunderbird ate my homework. Reposting. The FreeBSD mailing list server seems to drop my attachments, so I've uploaded it here: http://people.freebsd.org/~bms/dump/broadtest.c Regards, BMS ___ freebsd-net@freebs

[PATCH] Zeroconf: avahi-autoipd support for FreeBSD

2007-01-31 Thread Bruce M Simpson
Hello, As you probably all know, I have been endeavouring to do something about the lack of Zeroconf support. Today, I've spent a while hacking out a diff to get Avahi's autoipd to run on FreeBSD: http://people.freebsd.org/~bms/dump/avahi-autoipd.diff Comments and feedback, particularly mo

Proposal: remove encap from MROUTING

2007-02-02 Thread Bruce M Simpson
How would you all feel about removing the old encapsulation methods from IPv4 multicast routing as OpenBSD has done? http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet/ip_mroute.c.diff?r1=1.42&r2=1.43 The last time I deployed any such infrastructure, I had to use gif(4); in a NATted world,

[PATCH] tun(4) does not clean up after itself

2007-02-02 Thread Bruce M Simpson
Hi, I just saw this PR: http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/100080 This patch appears to fix the problem. Any obvious glaring errors? Testers please? Regards, BMS Index: if_tun.c === RCS file: /home/ncvs/src/sys/net

Re: [PATCH] Broadcast 169.254.0.0/16 ARP replies for RFC 3927 (Zeroconf)

2007-02-02 Thread Bruce M. Simpson
This has now been committed. Thanks to all who responded. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: [patch] tun(4) and tap(4) if_clone support.

2007-02-02 Thread Bruce M. Simpson
Hi, I have cleaned up the style/mdoc bugs in the original patch, and cut a new one against bleeding edge HEAD (we just took the kern_conf.c fix in too):- http://people.freebsd.org/~bms/dump/new-landon-tuntap.diff PRs potentially resolved by this patch: http://www.freebsd.org/cgi/query-pr.c

[PATCH] ip_fastfwd forwards directed broadcasts

2007-02-02 Thread Bruce M Simpson
Hi, Attached is a patch which tells our IPv4 fast-forwarding path to drop directed broadcast packets. The checks originally put in ip_fastfwd.c can deal only with undirected broadcasts. Whilst this patch doesn't mitigate the resulting CPU consumption, it does the right thing by letting the F

Re: [patch] tun(4) and tap(4) if_clone support.

2007-02-04 Thread Bruce M. Simpson
This patch has now been committed to -CURRENT. A conservative MFC schedule of at least 1 month is suggested. Devfs cloning remains enabled by default as it breaks ppp, ssh, and many ports. Regards, BMS ___ freebsd-net@freebsd.org mailing list http://

Re: [PATCH] ip_fastfwd forwards directed broadcasts

2007-02-05 Thread Bruce M. Simpson
This has now been applied to -CURRENT after testing by a 3rd party. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Seeking to hear from people with broken IFF_ALLMULTI cards

2007-02-05 Thread Bruce M Simpson
Hi, If any of you out there have network interfaces which have broken ALLMULTI handling (i.e. they can't handle multicast routing), I would love to hear from you. Regards, BMS ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman

Re: ioctl: SIOCADDMULTI (howto?)

2007-02-05 Thread Bruce M. Simpson
Jouke Witteveen wrote: Hello all, I'm in need of some information on how to utilize SIOCADDMULTI. It is supposed to be demonstrated by the mtest [1] program, but that doesn't do anything (on an SIOCDELMULTI rn it appears nothing was added: ENOENT), At least not for the values I tested, 1.80.c2.0

Re: [PATCH] tun(4) does not clean up after itself

2007-02-06 Thread Bruce M. Simpson
This change has now been committed on -CURRENT (reviewed by bz@) so it is now settling in. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Proposal: remove encap from MROUTING

2007-02-06 Thread Bruce M. Simpson
I count no objections and +1 in favour from Andre. To maintain POLA, I will decapitate (Argh, pun) it from HEAD with no MFC to begin with. Arguments in favour: * mrouted was removed from the base system. * PIM does not use MROUTING's IPIP tunnels, and PIM is regarded as the standard these day

Who was making IPPROTO_foo dynamic?

2007-02-07 Thread Bruce M Simpson
Hi, Somebody somewhere was making IP protocols dynamically loadable. I would like to make PIM the default in -CURRENT in ip_mroute.ko so that it may be dynamically loaded into GENERIC. At the moment, that isn't possible, because PIM requires hookup to ip_input() by way of a ipprotosw. Please

Re: Proposal: remove encap from MROUTING

2007-02-07 Thread Bruce M. Simpson
Bill Fenner wrote: I plan to commit this patch some time this week. Please do. Committed, with doc and version bumps. It doesn't look like the TBF can be removed straight away; there are consumers. BMS "And I've been dreaming of sleep... and ape-men with metal parts." -- David Bowie

Re: kern/106999: [netgraph] [patch] ng_ksocket fails to clear multicast flag on mbuf before passing to stack

2007-02-08 Thread Bruce M Simpson
Synopsis: [netgraph] [patch] ng_ksocket fails to clear multicast flag on mbuf before passing to stack Responsible-Changed-From-To: freebsd-net->bms Responsible-Changed-By: bms Responsible-Changed-When: Fri Feb 9 02:39:10 UTC 2007 Responsible-Changed-Why: I'll take this http://www.freebsd.org/cg

[PATCH] make netinet MROUTING dynamically loadable with PIM

2007-02-08 Thread Bruce M Simpson
I plan to commit this soon as part of the mrouting cleanup. Bring the IPv4 multicast forwarding code more into line with the IPv6 version, by unconditionally building with PIM support enabled, and allowing it to be built as a loadable module. Use encap_attach_func() to hookup the IPPROTO_PIM inpu

Re: Networking FreeBSD Wiki

2007-02-08 Thread Bruce M. Simpson
George, Thanks. I can think of a whole bunch of things to drop in here. [EMAIL PROTECTED] wrote: Hi, I've started a Wiki page in the FreeBSD Wiki in an attempt to coordinate some of the clean up work and networking projects that aren't already covered. Please see: http://wiki.freebsd.org/Net

Re: Networking FreeBSD Wiki

2007-02-09 Thread Bruce M. Simpson
Joel Dahl wrote: How about moving stuff from the (outdated) dingo[*] project page to this wiki page instead? [*] http://www.freebsd.org/projects/dingo/ That's what he did. I feel a twinge of responsibility for this, and the stupid name. I have just totally steamrollered in and edited (mer

<    1   2   3   4   5   6   7   >