Allowing CARP to use arbitrary OUI prefix and allocating block from FreeBSD's OUI space assignment for that

2014-05-08 Thread Eygene Ryabinkin
yone knows where FreeBSD's OUI space division is further documented? Like IANA's one, http://www.iana.org/assignments/ethernet-numbers/ethernet-numbers.xhtml -- Eygene Ryabinkin,,,^..^,,, [ Life's unfair - but root password helps! |

Re: Allowing CARP to use arbitrary OUI prefix and allocating block from FreeBSD's OUI space assignment for that

2014-05-08 Thread Eygene Ryabinkin
Bjoern, good day. Thu, May 08, 2014 at 09:37:37AM +, Bjoern A. Zeeb wrote: > On 08 May 2014, at 08:10 , Eygene Ryabinkin wrote: > > As current CARP implementation somewhat hijacks OUI MAC space for VRRP > > (00:00:5e:00:01:$VRID) and this sometimes create problems, because >

Re: Allowing CARP to use arbitrary OUI prefix and allocating block from FreeBSD's OUI space assignment for that

2014-05-08 Thread Eygene Ryabinkin
Thu, May 08, 2014 at 10:28:19AM +, Bjoern A. Zeeb wrote: > On 08 May 2014, at 09:50 , Eygene Ryabinkin wrote: > > >> Apart from that I thought the different version number was sufficient > > > > The thing is that both VRRP and CARP packets use MAC address (on

Re: Allowing CARP to use arbitrary OUI prefix and allocating block from FreeBSD's OUI space assignment for that

2014-05-08 Thread Eygene Ryabinkin
Thu, May 08, 2014 at 12:08:28PM +, Bjoern A. Zeeb wrote: > On 08 May 2014, at 09:50 , Eygene Ryabinkin wrote: > > > No, we're conflicting with VRRP on the MAC address space. > > > > And, as I understand, CARP in 10 hadn't changed protocol in any way

Re: Allowing CARP to use arbitrary OUI prefix and allocating block from FreeBSD's OUI space assignment for that

2014-05-08 Thread Eygene Ryabinkin
Thu, May 08, 2014 at 05:32:28PM +0400, Eygene Ryabinkin wrote: > Thu, May 08, 2014 at 12:08:28PM +, Bjoern A. Zeeb wrote: > > People need to talk. The fact that your server guys use a > > non-unique Ethernet address for CARP without talking to their local > > authority w

Re: Allowing CARP to use arbitrary OUI prefix and allocating block from FreeBSD's OUI space assignment for that

2014-05-21 Thread Eygene Ryabinkin
Mon, May 12, 2014 at 12:39:49AM +0400, Eygene Ryabinkin wrote: > Sun, May 11, 2014 at 04:30:32PM -0400, George Neville-Neil wrote: > > On May 8, 2014, at 16:04 , Gleb Smirnoff wrote: > > > On Thu, May 08, 2014 at 12:10:48PM +0400, Eygene Ryabinkin wrote: > > > E>

Re: About TFTP

2014-05-27 Thread Eygene Ryabinkin
ke TFTP daemon. But first I'd reconsider the need to drop inetd from the game. Or, if you're up to some coding, you can extend our base tftp daemon with stand-alone capabilities. -- Eygene Ryabinkin,,,^..^,,, [ Life's unfair - but root pas

Re: kern/190102: [tcp] net.inet.tcp.drop_synfin=1 no longer works on FreeBSD 10+ [regression]

2014-05-28 Thread Eygene Ryabinkin
m 'pfctl -s rules' if you are sure that both machines are configured identically pf-wise? Thanks! -- Eygene Ryabinkin,,,^..^,,, [ Life's unfair - but root password helps! | codelabs.ru ] [ 82FE 06BC D497 C0DE 49EC 4FF0 16AF 9EAE 815

Re: kern/190102: [tcp] net.inet.tcp.drop_synfin=1 no longer works on FreeBSD 10+ [regression]

2014-05-28 Thread Eygene Ryabinkin
The following reply was made to PR kern/190102; it has been noted by GNATS. From: Eygene Ryabinkin To: FreeBSD GNATS followup , freebsd-net@freebsd.org Cc: Subject: Re: kern/190102: [tcp] net.inet.tcp.drop_synfin=1 no longer works on FreeBSD 10+ [regression] Date: Thu, 29 May 2014 09

Re: kern/190102: [tcp] net.inet.tcp.drop_synfin=1 no longer works on FreeBSD 10+ [regression]

2014-05-29 Thread Eygene Ryabinkin
Wed, May 28, 2014 at 11:52:51PM -0700, hiren panchasara wrote: > On Wed, May 28, 2014 at 10:46 PM, Eygene Ryabinkin wrote: > > I assume that your pf(4) is enabled during these tests, you have > > "scrub" statements in the ruleset and removing "scrub" will resto

Re: kern/190102: [tcp] net.inet.tcp.drop_synfin=1 no longer works on FreeBSD 10+ [regression]

2014-05-29 Thread Eygene Ryabinkin
The following reply was made to PR kern/190102; it has been noted by GNATS. From: Eygene Ryabinkin To: hiren panchasara Cc: "freebsd-net@freebsd.org" , FreeBSD GNATS followup Subject: Re: kern/190102: [tcp] net.inet.tcp.drop_synfin=1 no longer works on FreeBSD 10+ [regres

Re: kern/190102: [tcp] net.inet.tcp.drop_synfin=1 no longer works on FreeBSD 10 [regression]

2014-05-29 Thread Eygene Ryabinkin
Then it will be very good to see your pf.conf and pfctl -s all, because just now I can't reproduce that on 10.x without "scrub". -- Eygene Ryabinkin,,,^..^,,, [ Life's unfair - but root password helps! | codelabs.ru ] [ 82FE

Re: kern/190102: [tcp] net.inet.tcp.drop_synfin=1 no longer works on FreeBSD 10+ [regression]

2014-05-31 Thread Eygene Ryabinkin
kup&pathrev=126258#l1242 > > I am curious, what's the rationale for this behavior? Why does PF > clear the FIN bit for such a packet being a firewall? My understanding is that it is done to conceal specific reaction of the host's TCP stack that pf's "scrub

Re: Does FreeBSD have the ability to properly forward UDP traffic ?

2014-06-09 Thread Eygene Ryabinkin
ets on FreeBSD. What I don't quite understand is that why sshuttle needs this dance of diverting and can't just consume incoming DNS packet like SSH's tunneling port will, reinterepret it and put the answer back with the proper src/dst fields inside the UDP packet. But probably there&

Re: broadcast oddity

2011-07-18 Thread Eygene Ryabinkin
at interface), you should use getifaddrs(), like in the attached example. It is very quick and dirty one and it has some limitations (e.g., it takes the first broadcast address from the interface), but it should be a good starting point. -- Eygene Ryabinkin

Re: broadcast oddity

2011-07-19 Thread Eygene Ryabinkin
); }}} So, if the route that is selected is the gateway, then there will be no broadcast on the L2. At least in my understanding of the code. Thus, I am interested in the routing tables and route flags. -- Eygene Ryabinkin,,,^..^,,, [ Life's unfai

Re: broadcast oddity

2011-07-21 Thread Eygene Ryabinkin
2-broadcasts, for host routes the L2-broadcasts are governed by the 'B' route flag and for other routes the destination address governs the behaviour (INADDR_ANY & INADDR_BROADCAST as the destination will enable L2-broadcast unconditionally /but most likely we will hit the default rou

Web100 port for FreeBSD

2008-06-17 Thread Eygene Ryabinkin
Good day. I had found some references to the old SoC project on porting Web100 Linux kernel patches to FreeBSD. It was said in the 2003 that some person was trying to push this activity, but the given link is dead: http://osdir.com/ml/freebsd.devel.net/2003-02/msg00134.html Were there any work

Re: FreeBSD 7.0: sockets stuck in CLOSED state...

2008-06-26 Thread Eygene Ryabinkin
Good day. Wed, Jun 25, 2008 at 07:43:12PM +0200, Ali Niknam wrote: > Recently i've been upgrading some of my machines from FreeBSD 6.x amd64 > to FreeBSD 7.0 amd64. > > After upgrading I noticed a weird error/bug. It seems that after several > thousand TCP connections some seem to hang in 'CLOS

Re: FreeBSD 7.0: sockets stuck in CLOSED state...

2008-06-27 Thread Eygene Ryabinkin
Ali, good day. Fri, Jun 27, 2008 at 08:49:20AM +0200, Ali Niknam wrote: > > Just a quick "me too" message: I also used to see this on my 7.x > > machines. This was with Apache servers in the proxy setup: one > > I'm wondering: where these 32 bit, or 64 bit machines? amd64. > > I had already tr

Re: FreeBSD 7.0: sockets stuck in CLOSED state...

2008-06-27 Thread Eygene Ryabinkin
Paul, good day. Fri, Jun 27, 2008 at 08:45:50AM -0400, Paul wrote: > I have the same 'problem' if that helps any.. Sockets stuck for over a > month in CLOSED and they have a * for the port on the source IP. > tcp4 0 0 67.1.1.1.* 67.1.1.2.1261 CLOSED > 7.0-RELEASE-p1 Free

Re: kern/127052: Still bridge issues - with L2 protocols such as PPPoE

2008-09-02 Thread Eygene Ryabinkin
The following reply was made to PR kern/127052; it has been noted by GNATS. From: Eygene Ryabinkin <[EMAIL PROTECTED]> To: Helge Oldach <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Re: kern/127052: Still bridge issues - with L2 protocols such as PPPoE

Re: lost routes

2008-09-23 Thread Eygene Ryabinkin
Giulio, good day. Tue, Sep 23, 2008 at 10:00:50AM +0200, Giulio Ferro wrote: > Every now and again static routes are lost by freebsd. > In my fw/router/vpn box (average traffic about 10Mb/s) with a lot > of interfaces, physical, vlan and virtual, once every x weeks (x very > variable) one of the r

Re: lost routes

2008-09-23 Thread Eygene Ryabinkin
Giulio, Tue, Sep 23, 2008 at 10:57:50AM +0200, Giulio Ferro wrote: > > Was the problem described in some PR? > > > I don't know, really. I heard about it in the past (some years ago) > from another guy, and it has happened to me for at least 2-3 years. > > This is just the first time I've decid

Re: Getting packets MAC source address in if_ethersubr.c

2008-10-05 Thread Eygene Ryabinkin
Ryan, good day. Mon, Oct 06, 2008 at 05:30:23PM +1300, Ryan French wrote: > I now have receiving, > decoding and sending of packets working, except for one small problem. When I > send a packet back out the MAC address is wrong. I am looking for a way in > the ether_output function in if_ethers

Bridge interface as the vlan(4) parent

2008-10-15 Thread Eygene Ryabinkin
Andrew, *, good day. I had just came across the following situation: I have two VLAN-tagged links that are coming to my machine from two switches. I am running RSTP on the switches and need the machine to participate in the spanning tree formation (one switch is the root, another is the backup).

Re: It seems that FreeBSD-7.0 does not use the available MTU

2008-10-28 Thread Eygene Ryabinkin
Eitan, good day. Mon, Oct 27, 2008 at 11:53:26PM +0200, Eitan Shefi wrote: > I am using 2 hosts with FreeBSD-7.0 connected directly. > When I change the MTU to a value greater then 1500, for example 3000, > and then send "ping" with message size 2500, from one host to the other, > the other host g

Re: BPF question

2008-11-06 Thread Eygene Ryabinkin
Just a side note. Thu, Nov 06, 2008 at 07:54:13PM +0200, Ivo Vachkov wrote: > P.S. I'm implementing part of RFC3927 (ZeroConf) as part of a bigger project Had you glanced at /usr/ports/net/howl and may be /usr/ports/net/avahi? -- Eygene ____ _.--. # \`.|\.....-'`

Re: FreeBSD Bridge and ARP question/strangeness

2008-11-20 Thread Eygene Ryabinkin
Cole, good day. Thu, Nov 20, 2008 at 11:46:42AM +0200, Cole wrote: > I have a box with a few interfaces, and i had setup rl0 with an ip address > and it could communicate/ping everything on the network fine, all the rest > of the other interfaces are unplugged and have no ip's assigned. Now if i g

Re: nmap on FreeBSD 7.0-RELEASE

2008-11-27 Thread Eygene Ryabinkin
Dave, good day. Thu, Nov 27, 2008 at 10:28:10PM +1030, Dave Edwards wrote: > I've tried creating a host route for the nmap target instead of relying > on the default route and I've tried three other versions of nmap. As an > aside (or maybe a hint) when compiling nmap from source, there are a > n

Re: if_bridge + pf rdr (bridged inline proxy)

2008-11-27 Thread Eygene Ryabinkin
Kevin, good day. Thu, Nov 27, 2008 at 08:26:55PM +0800, Kevin Foo wrote: > I recently setup a bridge box with inline cache proxy. if_bridge with > pf filtering was working perfectly. However, squid-cache listening on > loopback device did not get any packets from pf rdr. I have seen > successful s

Re: [ipsec] aes-ctr question

2008-12-02 Thread Eygene Ryabinkin
ne manual )/' _/ \ `-_, /# while single-stepping the kernel. `-'" `"\_ ,_.-;_.-\_ ', fsc/as # _.-'_./ {_.' ; / #-- FreeBSD Developers handbook {_.-``-' {_/# From 9e076653cefc7c987c339d7a0bfd99ad6c83bd83 Mon

Re: [ipsec] aes-ctr question

2008-12-10 Thread Eygene Ryabinkin
Yvan, good day. Wed, Dec 03, 2008 at 09:25:49AM +0100, VANHULLEBUS Yvan wrote: > On Wed, Dec 03, 2008 at 10:54:55AM +0300, Eygene Ryabinkin wrote: > [...] > > Good catch. Perhaps setkey should be extended to warn the user about > > this neat. The patch is attached. George, p

Re: [Fwd: em0 disappeared]

2008-12-21 Thread Eygene Ryabinkin
Uwe, good day. Thu, Dec 18, 2008 at 01:45:59AM +0100, Uwe Grohnwaldt wrote: > Maksim Yevmenkin wrote: > > older tyan motherboards. when i upgraded from 7.x to current (amd64 > > arch) both onboard bge nics disappeared. i had to go to the bios > > screen and set "installed os" (or something like th

Re: HEADSUP: arp-v2 has been committed

2008-12-22 Thread Eygene Ryabinkin
, __.--' # to read the on-line manual )/' _/ \ `-_, /# while single-stepping the kernel. `-'" `"\_ ,_.-;_.-\_ ', fsc/as # _.-'_./ {_.' ; / #-- FreeBSD Developers handbook {_.-``-' {_/

Re: HEADSUP: arp-v2 has been committed

2008-12-22 Thread Eygene Ryabinkin
Li, good day. Mon, Dec 22, 2008 at 01:55:34AM -0800, Li, Qing wrote: > Thank you all for patching these programs. Thank you for your work! > I scanned through your patches and they all look fine. > Each one that I read through seems to be simple fix, which > is what I hoped for. Are you going t

Re: Odd behavior routed

2008-12-25 Thread Eygene Ryabinkin
Thu, Dec 25, 2008 at 01:32:43AM -0800, Li, Qing wrote: > Please find the patch file in my home directory > at http://people.freebsd.org/~qingli/arp-v2-patch-122508 The real URL is http://people.freebsd.org/~qingli/arp-v2-patch-122408 -- Eygene ____ _.--. # \`.|\...

Re: pfil + if_bridge hooks not being called

2008-12-28 Thread Eygene Ryabinkin
Gerry, good day. Sun, Dec 28, 2008 at 07:59:57PM -0600, Gerry Weaver wrote: > I am working on a driver to collect some network statistics using > pfil. I have set up a bridge and set net.link.bridge.pfil_member=1 via > sysctl. I have added hooks for incoming and outgoing packets. I also > put a th

Re: When configuring 2 VLANs to be on the same subnet, only one works.

2009-01-13 Thread Eygene Ryabinkin
EItan, good day. Tue, Jan 13, 2009 at 03:09:11PM +0200, Eitan Shefi wrote: > I use 2 directly connected FreeBSD-7.0 hosts. > When I create 2 VLANs for the same interface (mtnic0), on each host, and > configure the VLANs on each host to be on the same subnet: > ping works only to one of the VLANs.

Re: howto determine network device unit number? device.hints?

2009-01-15 Thread Eygene Ryabinkin
Yony, good day. Thu, Jan 15, 2009 at 11:26:34AM +0200, Yony Yossef wrote: > All I'm doing is unloading and reloading the driver. > Unit numbers change and it makes my automatic subnet configuration > (/etc/rc.conf) assign bad IPs. You're using your own driver, aren't you? If yes, could you show

Re: howto determine network device unit number? device.hints?

2009-01-15 Thread Eygene Ryabinkin
Thu, Jan 15, 2009 at 01:15:53PM +0200, Yony Yossef wrote: > > You're using your own driver, aren't you? If yes, could you > > show your device_method_t structure and the corresponding > > identify, probe, attach and detach routines? You're setting > > the unit numbers via 'if_initname(ifp, dev

Re: howto determine network device unit number? device.hints?

2009-01-15 Thread Eygene Ryabinkin
Bruce, good day. Thu, Jan 15, 2009 at 03:01:37PM +, Bruce M. Simpson wrote: > Bruce M. Simpson wrote: > > In your case I'm not sure why your two cards would flip order. Could > > it be how your BIOS and hardware set up the PCI IDSEL lines at boot? > > If this is the case on your system, then

Re: Filesystem and bigger files

2009-05-04 Thread Eygene Ryabinkin
Antonio, good day. Mon, May 04, 2009 at 12:50:59PM +0200, Antonio Tommasi wrote: > i've freebsd 7.0 in production and i've this hard-drive > > Filesystem SizeUsed AvailCapacity Mounted on > /dev/aacd0s1a 64G15G 44G 26%/ > > In a directory (spamassassin) i've

Re: Not able to set 'bridge' mode

2009-05-18 Thread Eygene Ryabinkin
Sebastian, good day. Mon, May 18, 2009 at 11:02:45AM +0200, Sebastian Mellmann wrote: > I'm trying to set up a FreeBSD 7.2 machine with ipfw dummynet working as > a bridge. > > I've tried this tutorial: > > http://www.scalabledesign.com/articles/dummynet.html > > But it seems that the 'BRIDGE'

Re: ipfw firewall_type 'OPEN'

2009-05-18 Thread Eygene Ryabinkin
Sebastian, Mon, May 18, 2009 at 02:04:50PM +0200, Sebastian Mellmann wrote: > 00010 allow ip from any to any via lo0 > 65000 allow ip from any to any > 65535 deny ip from any to any > > > The problem is, if I execute my own ipfw script and flush the rules via > 'ipfw -q -f flush' > and > 'ipfw -

Re: [head tinderbox] failure on sparc64/sparc64

2009-06-08 Thread Eygene Ryabinkin
Xin, good day. Mon, Jun 08, 2009 at 04:49:36PM -0700, Xin LI wrote: > The attached patch should fix this, any objections? Yes, you missed negation operator in the copyin check. The issue was already fixed by hrs@ two hours ago: http://svn.freebsd.org/viewvc/base?view=revision&revision=193796 -

Re: Bridging and using the interfaces concurrently

2009-06-19 Thread Eygene Ryabinkin
Axel, good day. Thu, Jun 18, 2009 at 09:10:19PM +0200, Axel Reinhold wrote: > Since i would have to pay extra charges to get the "second" > server also connected to the internet, i thought of bridging > the em0 and em1 of "first" and to alias another ip for the > second server (i have more ip's in

Re: kern/136618: [pf][stf] panic on cloning interface without unit number, e.g. `stf'

2009-07-09 Thread Eygene Ryabinkin
// Sorry for a long letter ;)) In fact, stf(4) problem will be healed with the attached patch: it works for me and should provide absolutely sane pf rules, because stf(4) is essentially a singleton interface, so there won't be ambiguities: 'stf' as the interface name will have the same effect as t

Re: kern/136618: [pf][stf] panic on cloning interface without unit number, e.g. `stf'

2009-07-09 Thread Eygene Ryabinkin
The following reply was made to PR kern/136618; it has been noted by GNATS. From: Eygene Ryabinkin To: lini...@freebsd.org Cc: bug-follo...@freebsd.org, freebsd-net@FreeBSD.org, mla...@freebsd.org, artis.ca...@gmail.com Subject: Re: kern/136618: [pf][stf] panic on cloning interface

Re: kern/136618: [pf][stf] panic on cloning interface without unit number, e.g. `stf'

2009-07-10 Thread Eygene Ryabinkin
Artis, good day. Fri, Jul 10, 2009 at 08:53:07AM +0300, Artis Caune wrote: > 2009/7/10 Eygene Ryabinkin : > > There is kern/127042 (rather old one, but it essentially the same as the > > current PR) that addresses this aspect of the problem: it > > > >  - additio

Re: kern/136618: [pf][stf] panic on cloning interface without unit number, e.g. `stf'

2009-07-10 Thread Eygene Ryabinkin
The following reply was made to PR kern/136618; it has been noted by GNATS. From: Eygene Ryabinkin To: Artis Caune Cc: lini...@freebsd.org, bug-follo...@freebsd.org, freebsd-net@freebsd.org, mla...@freebsd.org Subject: Re: kern/136618: [pf][stf] panic on cloning interface without unit

Re: Routing between subnets

2007-05-05 Thread Eygene Ryabinkin
Neo, good day. Fri, May 04, 2007 at 07:27:20PM +0200, Neo [GC] wrote: > Config at home (deleted all unnessesary): > > Output of ifconfig: > fxp0: flags=8843 mtu 1500 > options=8 > inet 192.168.2.2 netmask 0xff00 broadcast 192.168.2.255 > tun0: flags=8051 mtu 1500 > ine

Port of the new em(4) to RELENG_6 and some problems with 82540EM

2007-05-16 Thread Eygene Ryabinkin
Jack, good day. I happened to make a quick and dirty patch for your latest (for the 16.05.2007) em(4) driver from 7-CURRENT. I had seen that you mentioned TSO and 6.3, so I assume that you're going to merge the driver to the RELENG_6 someday, so maybe my effort may be helpful. To my problems. I

Re: Port of the new em(4) to RELENG_6 and some problems with 82540EM

2007-05-17 Thread Eygene Ryabinkin
Jack, Thu, May 17, 2007 at 12:02:11AM -0700, Jack Vogel wrote: > This driver CAME from a 6.X base that is thoroughly tested > here at Intel, so while I appreciate your efforts, they are > unnecessary. When the time comes to MFC I will handle it. OK, sorry for the noise. -- Eygene ___

Re: Port of the new em(4) to RELENG_6 and some problems with 82540EM

2007-05-17 Thread Eygene Ryabinkin
Sten, good day. Thu, May 17, 2007 at 01:04:29PM +0200, Sten Daniel Soersdal wrote: > >I have the '82540EM Gigabit Ethernet Controller' branded card > >(PWLA8390MT) and I am currently expiriencing troubles with the > >Gigabit switch (D-Link DGS-1008, the cheap one). Plugged into that > >switch I ha

Re: two public ip addresses on one interface

2007-05-28 Thread Eygene Ryabinkin
Alex, good day. Sun, May 27, 2007 at 07:07:41PM +0800, Wilkinson, Alex wrote: > > If your aliases are part of the same subnet as the "primary" or first > configured IP, then you want to > > use the all-1's netmask. In your case, however, the second IP is part > of a completely differen

Re: if_bridge and ff:ff:ff:ff:ff:ff

2007-06-04 Thread Eygene Ryabinkin
Jon, good day. Mon, Jun 04, 2007 at 11:48:46AM +0200, Jon Otterholm wrote: > I'm havinf trouble sending packets to the ethernet broadcast address on an > if_bridge. It seems as if the onley packets sent from my router to ethernet > broadcast is arp. I have the following conf: [...] > > sysctl's

nfe(4) strangeness on the 7-CURRENT

2007-06-11 Thread Eygene Ryabinkin
Good day. I had recently upgraded my amd64 box to the 7-CURRENT and started using nfe(4) instead of nve(4), because the latter was almost unusable on the moderate traffic flow from the amd64 box to some other machine due to the watchdog timeouts. But the stock nfe(4) was not good too: it provoke

Re: nfe(4) strangeness on the 7-CURRENT

2007-06-11 Thread Eygene Ryabinkin
Andre, good day. Mon, Jun 11, 2007 at 09:09:18PM +0200, Andre Oppermann wrote: > These messages are unrelated to your hardware. There you can relax. > We have a bug in the TCP FSM state transitions which I'm currently > tracking down that indirectly causes the log messages. You don't > have to w

Re: nfe(4) strangeness on the 7-CURRENT

2007-06-11 Thread Eygene Ryabinkin
Me again. Tue, Jun 12, 2007 at 07:26:56AM +0400, Eygene Ryabinkin wrote: > Mon, Jun 11, 2007 at 09:09:18PM +0200, Andre Oppermann wrote: > > These messages are unrelated to your hardware. There you can relax. > > We have a bug in the TCP FSM state transitions which I'm cu

Connections in the CLOSED state [was: nfe(4) strangeness on the 7-CURRENT]

2007-06-12 Thread Eygene Ryabinkin
Andre, good day. Tue, Jun 12, 2007 at 07:15:32PM +0200, Andre Oppermann wrote: > >Just checked my netstat output and spotted weird lines: > >- > >tcp4 0 0 127.0.0.1.*127.0.0.1.40001CLOSED > >tcp4 0 0 127.0.0.1.*127.0.0.1.40001CLOS

Re: Firewalling NFS

2007-06-15 Thread Eygene Ryabinkin
Jeremie, good day. Fri, Jun 15, 2007 at 09:27:35AM +0200, Jeremie Le Hen wrote: > It appears nearly impossible to firewall a NFS server on FreeBSD. > The reason is that NFS related daemons use RPC, which means they > don't bind to a deterministic port. Only mountd(8) can be requested to > bind to

Re: Firewalling NFS

2007-06-15 Thread Eygene Ryabinkin
Bruce, good day. Fri, Jun 15, 2007 at 06:47:07PM +0100, Bruce M. Simpson wrote: > I added the -p switch to mountd(8) a few years ago, as I needed to run a > read-only NFS server exposed to the outside world; to firewall it I needed a > deterministic RPC port number, which is what -p gives you. O

Re: pf 4.1 Update available for testing

2007-06-17 Thread Eygene Ryabinkin
Max, good day. Sat, Jun 16, 2007 at 03:47:24AM +0200, Max Laier wrote: > $subject at: http://people.freebsd.org/~mlaier/PF41/ I glanced over the new code and found that no changes were introduced to the altq_subr.c. And there was rather old issue I found in April: non-initialised callback due to

FAST_IPSEC without INET6

2007-07-03 Thread Eygene Ryabinkin
George, good day. I had tried to build my kernel on the -CURRENT after your FAST_IPSEC commits and I failed. The problem is that I am running without INET6, so inet6_tcp_input misses three functions on the kernel linking stage. I believe that the following patch will cure the situation: we don't

Re: FAST_IPSEC without INET6

2007-07-03 Thread Eygene Ryabinkin
Bjoern, good day. Tue, Jul 03, 2007 at 09:40:03AM +, Bjoern A. Zeeb wrote: > This was fixed already: > http://docs.freebsd.org/cgi/mid.cgi?200707030720.l637KLB9095895 > > Just update and try again;) Yep, I had already seen the commit message. Updated slightly before 2007/07/03 07:20:20 UTC,

Re: FreeBSD 7 TCP syncache fix: request for testers

2007-07-10 Thread Eygene Ryabinkin
Mike, good day. Tue, Jul 10, 2007 at 12:20:49AM -0500, Mike Silbersack wrote: > Anyway, the attached patch simplifies the syncache structure a bit and > makes it retransmit properly. I'd appreciate testing from anyone who > has experienced TCP problems with FreeBSD 7, as well as anyone who is > p

Re: FreeBSD 7 TCP syncache fix: request for testers

2007-07-10 Thread Eygene Ryabinkin
Mike, good day. Tue, Jul 10, 2007 at 08:29:14PM -0500, Mike Silbersack wrote: > The fact that you're still getting the syncache_expand message tells me that > there's another bug which I have not yet fixed still present. > > My suspicion is that the "Segment failed SYNCOOKIE authentication" mess

Re: FreeBSD 7 TCP syncache fix: request for testers

2007-07-11 Thread Eygene Ryabinkin
Good day. Wed, Jul 11, 2007 at 10:04:23AM +0400, Eygene Ryabinkin wrote: > OK, maybe I have something that can be related to this bug. It > provokes another message, 'Spurious RST', but can be correlated > with your guess. What is happening is that when one side closes &

Re: Wierd networking.

2007-07-17 Thread Eygene Ryabinkin
Chuck, Julian, good day. Tue, Jul 17, 2007 at 04:47:30PM -0700, Chuck Swiger wrote: > % tcpdump -nS -r IE7.pcap > reading from file IE7.pcap, link-type EN10MB (Ethernet) > 18:24:41.313890 IP 172.28.15.82.3128 > 10.251.22.29.1121: . ack 1573162290 > win > 32120 > 18:24:41.313995 IP 10.251.22.29.1

Re: Wierd networking.

2007-07-18 Thread Eygene Ryabinkin
Andre, good day. Wed, Jul 18, 2007 at 08:57:47AM +0200, Andre Oppermann wrote: > >Seems like it is the effect of the SS_NOFDREF check in the > >netinet/tcp_input.c, at least it is present in the rev. 1.281.2.5. > >See the post > >http://lists.freebsd.org/pipermail/freebsd-current/2007-July/074

Re: Wierd networking.

2007-07-19 Thread Eygene Ryabinkin
Julian, good day. Wed, Jul 18, 2007 at 12:12:15PM -0700, Julian Elischer wrote: > >Seems like it is the effect of the SS_NOFDREF check in the > >netinet/tcp_input.c, at least it is present in the rev. 1.281.2.5. > > > >See the post > >http://lists.freebsd.org/pipermail/freebsd-current/2007-Jul

Re: Wierd networking.

2007-07-20 Thread Eygene Ryabinkin
Julian, good day. Thu, Jul 19, 2007 at 09:33:28AM -0700, Julian Elischer wrote: > replying to myself.. the comment in the code in question said: > > /*-*/ > >/** if the elaborateTCPFin option is set, keeps the socket open > > * and

Re: backends periodically rendered DEAD

2007-07-25 Thread Eygene Ryabinkin
Gergely, good day. Wed, Jul 25, 2007 at 12:05:04PM +0200, Gergely CZUCZY wrote: > I'm testing pound at the moment, and running paralelly around 15-18 > apache benchmarks for a session-tracking test. > > However pound keeps on losing the backends periodically and it > restores them a few seconds l

Re: If_bridge and MST

2007-09-04 Thread Eygene Ryabinkin
Good day. Tue, Sep 04, 2007 at 11:07:22AM +0300, Shteryana Shopova wrote: > AFAIK, Cisco PVST is the predecessor of 802.1Q MSTP. If I remember > correctly one of the notable differences between the two is that with > Cisco PVST BPDUs are send for every spanning tree instance (also > tagged?) while

Re: Quagga as border router

2007-09-24 Thread Eygene Ryabinkin
Richard, good day. Fri, Sep 21, 2007 at 02:10:06PM -0400, Richard A Steenbergen wrote: > > Interesting what is the golden aim of software based router we should be > > trying to reach? > > Well for starters, to have a routing stack that is based on any modern > techniques developed in the l

Re: cant compile - undefined reference to `bpfattach'

2007-10-05 Thread Eygene Ryabinkin
Good day. Fri, Oct 05, 2007 at 04:54:27PM +0530, Vinod VM wrote: > I'm having trouble in compiling my code with gcc on release 6.2 > > I've included the following headers, > > stdlib.h > sys/types.h > sys/socket.h > net/if.h > net/if_var.h > net/if_types.h > net/bpf.h > > When compiling the cod

Re: cant compile - undefined reference to `bpfattach'

2007-10-05 Thread Eygene Ryabinkin
Fri, Oct 05, 2007 at 07:29:35PM +0530, Vinod VM wrote: > Yes. I am trying to write a program to capture from an interface and > inject them to another, kind of like bcrelay functionality in poptop > [http://www.poptop.org/] You can examine the divert sockets in FreeBSD: seems like that this will s

Re: default route

2007-12-14 Thread Eygene Ryabinkin
Fri, Dec 14, 2007 at 11:20:32AM +0100, vermaden wrote: > I already used tcpdump, if ICMP packet goes in thru 192.168/16 on rl1 the > response goes out on 10/24 on rl0. And the destination MAC address of the ICMP reply that is going through rl0 is? What if you'll do two experiments: drop the defau

Re: default route

2007-12-14 Thread Eygene Ryabinkin
Good day. Fri, Dec 14, 2007 at 10:11:24AM +0100, vermaden wrote: > network 10.0.0.0/24 is put on rl0 and 192.168.0.0/16 > is on rl1, default router is set to 10.0.0.1 on /etc/rc.conf as > defaultrouter="10.0.0.1", the problem: > > When I ping some box from 10.0.0.0 network, it responds, when some

Re: default route

2007-12-18 Thread Eygene Ryabinkin
Good day. Fri, Dec 14, 2007 at 11:58:45AM +0100, vermaden wrote: > > Fri, Dec 14, 2007 at 11:20:32AM +0100, vermaden wrote: > > > I already used tcpdump, if ICMP packet goes in thru 192.168/16 on rl1 > > the > > > response goes out on 10/24 on rl0. Fri, Dec 14, 2007 at 11:58:45AM +0100, vermaden

Re: default route

2007-12-19 Thread Eygene Ryabinkin
Tue, Dec 18, 2007 at 06:20:53PM +0100, vermaden wrote: > > After reading this I feel that you have absolutely no packets on > > either interfaces when your Linux box ping FreeBSD. But this > > contradicts with your previous assertion that if ICMP packet comes > > in on rl1, then it is reflected at

Re: ospf cost and route selection (openospfd)

2008-02-06 Thread Eygene Ryabinkin
Josef, good day. Currently I can not answer your question, sorry. I just have the remark. Wed, Feb 06, 2008 at 03:41:04PM +0100, Josef Pojsl wrote: > ospfctl show rib: > Router 1: > Destination Nexthop Path TypeType CostUptime > 0.0.0.2 10.31.2.2

Re: ospf cost and route selection (openospfd)

2008-02-07 Thread Eygene Ryabinkin
Me again. Thu, Feb 07, 2008 at 05:58:32PM +0300, Eygene Ryabinkin wrote: > Thu, Feb 07, 2008 at 03:14:22PM +0100, Claudio Jeker wrote: > > On Thu, Feb 07, 2008 at 08:49:44AM +0100, Josef Pojsl wrote: > > > Thanks a lot for your remarks. I absolutely agree with you > >

Re: modifying permissions in /dev

2008-02-07 Thread Eygene Ryabinkin
Good day. Thu, Feb 07, 2008 at 06:33:30PM +, lysergius2001 wrote: > Ah! That helps. Still cannot mount floppy except as root? Set vfs.usermount=1 in /etc/sysctl.conf and restart sysctl via '/etc/rc.d/sysctl restart'. But be aware of security implications: anyone will be able to mount devic

Re: modifying permissions in /dev

2008-02-07 Thread Eygene Ryabinkin
Kevin, just a side note. Thu, Feb 07, 2008 at 10:46:04AM -0800, Kevin Oberman wrote: > > Set vfs.usermount=1 in /etc/sysctl.conf and restart sysctl via > > '/etc/rc.d/sysctl restart'. But be aware of security implications: > > anyone will be able to mount devices that are opened to him/her via >

Re: ospf cost and route selection (openospfd)

2008-02-07 Thread Eygene Ryabinkin
Josef, Claudio, good day. Thu, Feb 07, 2008 at 03:14:22PM +0100, Claudio Jeker wrote: > On Thu, Feb 07, 2008 at 08:49:44AM +0100, Josef Pojsl wrote: > > Thanks a lot for your remarks. I absolutely agree with you > > that all columns are correct except the Nexthop. > > > > The nexthop selection f

Re: modifying permissions in /dev

2008-02-08 Thread Eygene Ryabinkin
Perhaps this thread should be moved to -questions: it seems to be irrelevant for the -net discuissions. Thu, Feb 07, 2008 at 07:53:32PM +, lysergius2001 wrote: > Apologies for the top post? Looks like I need a lesson in etiquette as well > as devfs. ;)) http://www.caliburn.nl/topposting.html

Re: modifying permissions in /dev

2008-02-08 Thread Eygene Ryabinkin
Fri, Feb 08, 2008 at 11:37:17AM +0300, Eygene Ryabinkin wrote: > For the k3b: seems like it is just frontend for the cdrecord/cdrdao. > If so, then you probably should have /dev/xptX and /dev/passX and Hmm, to clarify: 'ls -l /dev/xpt* /dev/pass*' should show you something. &#

Re: ospf cost and route selection (openospfd)

2008-02-08 Thread Eygene Ryabinkin
Josef, good day. Fri, Feb 08, 2008 at 11:53:57AM +0100, Josef Pojsl wrote: > I did try the patch. Unfortunately, the deamon complains about sending packets > over gre interfaces. I cannot see any OSPF traffic on them with tcpdump, > and no routes get added. Look at what ospfd -dv says: > > startu

Re: ospf cost and route selection (openospfd)

2008-02-13 Thread Eygene Ryabinkin
version of my patch. So, if you had already patched the port to 4.2 with previous version, just drop patch-ospfd_packet.c into the 'files/' directory and rebuild the patch. Thanks! -- Eygene >From c983b8cc45e3e95991479ae6e213e1ee805c3d91 Mon Sep 17 00:00:00 2001 From: Eygene Ryabinkin

Re: ospf cost and route selection (openospfd)

2008-02-13 Thread Eygene Ryabinkin
Wed, Feb 13, 2008 at 10:37:29PM +0300, Eygene Ryabinkin wrote: > Attached is the modified patch for the port itself and the modified > file 'files/patch-ospfd_packet.c': it is the only changed file from > the previous version of my patch. So, if you had already patched >

Re: ospf cost and route selection (openospfd)

2008-02-13 Thread Eygene Ryabinkin
Josef, good day. Wed, Feb 13, 2008 at 09:30:12PM +0100, Josef Pojsl wrote: > On Wed, Feb 13, 2008 at 10:37:29PM +0300, Eygene Ryabinkin wrote: > > Found another OpenBSD/FreeBSD discrepancy: FreeBSD wants to see IP > > header's length in the native host order, when it sends

Re: ospf cost and route selection (openospfd)

2008-02-14 Thread Eygene Ryabinkin
Thu, Feb 14, 2008 at 07:49:34AM +0300, Eygene Ryabinkin wrote: > > I have replaced patch-ospfd_packet.c with the new one, > > and OSPF packets can find their way through again now. Unfortunately, > > the behavior is the same as with openospfd 4.0; it converges with > > ri

Re: ospf cost and route selection (openospfd)

2008-02-17 Thread Eygene Ryabinkin
Josef, good day. Thu, Feb 14, 2008 at 06:15:09PM +0300, Eygene Ryabinkin wrote: > > OK, I will up my gifX interfaces and will try to simulate your problem. > > OK, problem recreated. Will try to understand and fix the issue. > Will drop a mail, once the situation wil

Re: ospf cost and route selection (openospfd)

2008-02-18 Thread Eygene Ryabinkin
Josef, good day. Mon, Feb 18, 2008 at 11:50:24AM +0100, Josef Pojsl wrote: > > OK, to the point: the inlined patch should go to the 'files' > > directory, named 'patch-p2p_interfaces'. I assume that all my > > previous patches to make 4.2 to compile and run were applied. > > Thaks a lot, I have

Re: Multiple default routes on multihome host

2008-02-18 Thread Eygene Ryabinkin
Bill, Mon, Feb 18, 2008 at 04:36:18PM -0500, Bill Moran wrote: > I would suggest you ask yourself (and possibly the list) _why_ you think > multiple default routes is necessary ... what is it that you're hoping > to accomplish. I'm guessing your looking for some sort of redundancy, > in which cas

Re: Multiple default routes on multihome host

2008-02-18 Thread Eygene Ryabinkin
Nick, good day. Mon, Feb 18, 2008 at 09:00:54PM +, Nick Barnes wrote: > I have a multi-home host: more than one IP address. The addresses are > in separate subnets but run over the same ethernet segment (this is a > temporary situation while I switch an office network over from one > network

Re: Multiple default routes on multihome host

2008-02-18 Thread Eygene Ryabinkin
Mon, Feb 18, 2008 at 05:06:42PM -0500, Bill Moran wrote: > > I had faced such situation once: I had multihomed host that was > > running Apache daemon that was announced via two DNS names that > > were corresponding to two different IPs, going via two different > > providers. When the first provid

Re: Multiple default routes on multihome host

2008-02-18 Thread Eygene Ryabinkin
Bill, Mon, Feb 18, 2008 at 05:54:33PM -0500, Bill Moran wrote: > > > I can be done with CARP > > > if both providers support it and are willing to work together. > > > > Very, very unlikely for me ;)) > > Overall, Eygene, you're tryi

  1   2   >