Re: Lock order reversals with dummynet (Re: FreeBSD 7.0 Beta, RC, RELEASE (amd64) freezes with dummynet enabled)

2008-02-29 Thread matthew
Kris Kennaway wrote: Adding back the mailing list so others can help. matthew wrote: Kris Kennaway wrote: matthew wrote: I have posted before that i have a stability issue with the 7.0 branch on my servers. Tested on BETA2,BETA4,RC1,RC2,RELEASE The original thread and my post with details is at:

Re: problem run fsck manual

2000-12-20 Thread Matthew
Try fsck -y /dev/ad0s1f -M Harkitrat Singh wrote: > > When I was happy that my FreeBSD is running well I faced this problem, I > shut down my laptop with following command > > # /sbin /shutdown -h now and after that I switched off the power and then > I wanted to power it on once again and

Re: Moving ethernet cable between cards, ARP problem ?

2001-03-19 Thread Matthew
Maybe something to do with IP addresses on interfaces? -M Soren Kristensen wrote: > > Hi everybody, > > I'm doing some testing and want to move one ethernet cable between > multiple interfaces in the same box. > > As soon as I move the cable I get: > > Mar 19 01:32:22 develop /kernel: arp: 1

Re: freeBSD-Linux SuSE via ftp

2001-06-19 Thread Matthew
Sounds as though the host (SuSE) is probably waiting for a DNS lookup to timeout. Try putting an entry into /etc/hosts for your freeBSD box, and making sure that the SuSE box uses files before DNS for resolving - might be a nsswitch.conf, or 'search files,dns' entry in /etc/resolv.conf. Each Linu

ifconfig quirks

2001-10-05 Thread Matthew
have at least three nics in each machine with multiple ip's on most interfaces to simulate my existing network so it would be nice to be able to use them as place holders to make the files look a bit cleaner. Cheers, Matthew To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: D-Link DGE-500T support

2001-10-20 Thread Matthew
of luck with the dge-500t Matthew if its not broke i will fix it till it is :) *** REPLY SEPARATOR *** On 10/19/2001, at 5:50 PM, Lyndon Nerenberg wrote: >Have any of you managed to get the DFE-500T running with the >lge driver? lge(4) hints that this

Re: How can I give one route priority over the other route ?

2002-03-03 Thread Matthew
IMHO, this should be done by the routing protocol of your choice rather than by the kernel. I recommend checking out www.zebra.org for the zebra routing protocol suite which includes OSPF, BGP, RIP The syntax is very cisco like. I use BGP out of personal preference - all you need to do is add

routeing problems with 4.4

2002-03-26 Thread Matthew
netstat -r but no static route will show up at all. does anyone have any idea's. i would like to figure this one out as oposed to simply re-installing the os. thanks for any light anyone can shed on this. Matthew To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe f

Re: IPsec tunnel mode

2002-04-08 Thread Matthew
check out this link... they were a great deal of help to me when i went to setup ipsec on freebsd... Best wishes Hytekblue http://www.x-itec.de/projects/tuts/ipsec-howto.txt > At 20:04 8-4-2002 +0200, Rogier R. Mulhuijzen wrote: > >My question is, can one get IPsec tunnel mode to wo

Re: Bind fails in jail with assigned IP address

2023-01-13 Thread Matthew Seaman
interface and a separate network interface, typically using epair(4) so you should avoid the silent rewriting of wildcard addresses that is causing you such difficulty. See: https://wiki.freebsd.org/Jails/VNET /usr/src/share/examples/jails/jib Cheers, Matthew

Re: Can you create a FreeBSD gateway, with private IPs, without NAT/divert ?

2014-06-07 Thread Matthew Seaman
t the maximum possible number of customers. However, running your own NAT gateway between 192.168.1.2 and 10.10.10.1 shouldn't be a problem. You can NAT multiple times between where you are and the Internet usually with no worse consequence than a bit of extra latency on your traffic.

two freebsd 10 wlan0 oddities

2014-07-15 Thread Matthew Luckie
leTime: 0s, RetransTimer: 0s, CurHopLimit: 64 AdvIfPrefixes: yes Next RA send: Tue Jul 15 10:52:29 2014 Last RA send: Tue Jul 8 16:00:38 2014 Thoughts? Matthew pgpQkUPjJoT0o.pgp Description: PGP signature

minipcie wifi card

2012-01-05 Thread Matthew Luckie
rting bluetooth, and because an AR9285 is apparently exposed over PCIe, I tend to think the card will work fine as an hostap, but just want to double check. Anyone have any insight? Matthew ___ freebsd-net@freebsd.org mailing list http://lists.freebs

Re: minipcie wifi card

2012-01-05 Thread Matthew Luckie
etooth -- that only Antenna 1 is required for both wifi and bluetooth. If possible I'd prefer patches against 9.0R as the machine its going into is fairly important. Matthew ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.

high cpu usage on natd / dhcpd

2012-01-25 Thread Matthew Luckie
Hi I have a small system running FreeBSD 8.2 that does NAT using ipfw and natd to systems attached to two interfaces: em0 and wlan0. I have a dhcpd daemon issuing leases on those interfaces. The system has an em1 interface plugged into a cable modem where it obtains a DHCP lease from an ISP

Re: high cpu usage on natd / dhcpd

2013-01-31 Thread Matthew Luckie
On 01/31/13 00:45, Eggert, Lars wrote: > Hi, > >> I have a small system running FreeBSD 8.2 that does NAT using ipfw and >> natd to systems attached to two interfaces: em0 and wlan0. I have a >> dhcpd daemon issuing leases on those interfaces. The system has an em1 >> interface plugged into a

Re: IPFW and IPv6 packets with fragment header and last frag only

2011-02-06 Thread Matthew Luckie
> Does anybody have an idea of whether the patch in kern/145733 will be > incorporated into ip_fw2.c any time soon? That PR is mine. I've emailed people off list several times (last on 25 Jan) but have not made progress. To say I'm frustrated is an understatement. ___

Re: kern/123463: [ipsec] [panic] repeatable crash related to ipsec-tools

2011-05-14 Thread Matthew Seaman
The following reply was made to PR kern/123463; it has been noted by GNATS. From: Matthew Seaman To: bug-follo...@freebsd.org Cc: Subject: Re: kern/123463: [ipsec] [panic] repeatable crash related to ipsec-tools Date: Sat, 14 May 2011 17:34:19 +0100 This is an OpenPGP/MIME signed message

Bridging + VLANS

2011-05-21 Thread Matthew Bowman
I'm drafting a plan for a N+1 redundant network and I have hit a dead end. I have two Soekris NET5501 boards that I wish to deploy FreeBSD (NanoBSD) on and I'm trying to make sure I can setup everything before I move ahead. Here's my network design: http://imageshack.us/photo/my-images/191/netwo

Re: FreeBSD, IPv6 and World IPv6 Day

2011-06-08 Thread Matthew Luckie
> I found measurement results on this website: > http://hide.dnsalias.net//worldipv6day.cgi Some more results: http://www.wand.net.nz/~mluckie/ipv6day/ and (semi-related) a PR with a patch for PMTUD problems that was filed 15 months ago http://www.freebsd.org/cgi/query-pr.cgi?pr=145733

Re: FreeBSD, IPv6 and World IPv6 Day

2011-06-08 Thread Matthew Luckie
I found measurement results on this website: http://hide.dnsalias.net//worldipv6day.cgi Some more results: http://www.wand.net.nz/~mluckie/ipv6day/ Interesting. Did you post on the v6 lists as well? Just on ipv6-tech...@listserv.internetnz.net.nz Feel free to forward on to other lists

Re: bce(4) with IPMI

2011-09-29 Thread Matthew Franz
_ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org" > -- -- Matthew Franz mdfr...@gmail.com ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

reassembled packets and pfil

2010-04-12 Thread Matthew Luckie
particular reason why reassembled packets were not checked? If the answer is no, I'll send in a PR. I've tested the patch below. Matthew --- sys/netinet6/frag6.c.orig 2008-11-25 15:59:29.0 +1300 +++ sys/netinet6/frag6.c2010-04-13 13:21:02.0 +1200 @@ -46,6 +46,7 @

Re: reassembled packets and pfil

2010-04-13 Thread Matthew Luckie
inus 40 for the IPv6 header and 8 for the Fragment header), and smaller still if additional extension headers are used. A stack can send an IPv6 packet with a fragment header attached that does not have the MF bit set. I'm 90% sure that FreeBSD itself will do this when it receives

Re: reassembled packets and pfil

2010-04-13 Thread Matthew Luckie
> >I think that a patch like the one you propose is very useful (for > >ipv4 as well) but it requires a sysctl or other mechanism to make > >sure that when it is enabled we don't pass fragments through the > >firewall. > > i've looked further into this and I now wonder if is a byproduct of my > u

Re: FreeBSD NAT-T patch integration

2008-06-29 Thread Matthew Grooms
happier. Applying a patch that only requires rebuilding the kernel is a lot less annoying than having to perform a full buildworld. -Matthew ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: FreeBSD NAT-T patch integration [CFR/CFT]

2008-07-18 Thread Matthew Grooms
h mentioning that the port has a build issues on CURRENT. This has been corrected in cvs and the 7-branch of ipsec-tools. As a quick remedy, a patch is attached that can be applied to the port work sources. -Matthew Index: src/racoon/crypto_openssl.c =

Help with tap device configuration oddity

2008-07-18 Thread Matthew Grooms
tables Internet: DestinationGatewayFlagsRefs Use Netif Expire default10.a.b.c UGS 0 5940 lnc0 10 link#7 UC 00 tap0 Can someone please explain this to me? Thanks in advance, -Matthew

Re: FreeBSD NAT-T patch integration [CFR/CFT]

2008-07-21 Thread Matthew Grooms
ed note, I noticed the patch unconditionally uses a source port of 500 when processing outbound Draft 00/01 packets. Should this value be obtained from the SAD NAT-T mapping to support an IKE daemon bound to a non standard port? Thanks, -Matthew ___ freebsd-net@f

Re: FreeBSD NAT-T patch integration [CFR/CFT]

2008-07-21 Thread Matthew Grooms
cleaner to get it from SAD than setting 500 anytime. Well, its really really supported by all the IKE daemons I have seen in the ports collection. Someone is bound to try this and then spend a lot of time scratching their head. If this situation can

Re: FreeBSD NAT-T patch integration [CFR/CFT]

2008-07-21 Thread Matthew Grooms
o NAT-T ( and neither has google ). He must be referring to section 3.1.2 of RFC 3948 "Transport Mode Decapsulation NAT Procedure" which describes checksum recalculation. -Matthew ___ freebsd-net@freebsd.org mailing list http://lists.freebsd

Re: IPv6 Ideas

2009-04-24 Thread Matthew Jakeman
Nathan Lay wrote: I started playing with IPv6 on my home network with the intent to transition over. While many things work quite well, IPv6 technology in general still seems to have some rough edges. In terms of FreeBSD support, rtadvd and rtsol do not yet support (easily? -O option in rtad

Re: IPv6 Ideas

2009-04-24 Thread Matthew Jakeman
Bob Van Zant wrote: What are your problems with using radvd? I have used it quite a bit on FreeBSD (6.1) without any hassle. It's even written quite nicely in my experience so working on patches for it should be quite do-able if there are features missing. He's saying that the router announce

FreeBSD + carp on VMWare ESX

2009-07-19 Thread Matthew Grooms
ly need this to work in a production system. Others would likely be very happy to have this work as well, even if they have to apply a patch. Thanks in advance, -Matthew Index: ip_carp.c === RCS file: /home/ncvs/src/sys/netinet/ip_carp

Re: FreeBSD + carp on VMWare ESX

2009-07-19 Thread Matthew Grooms
ted the problem in great detail and, as far as I can tell, have yet to get this working. -Matthew On Jul 19, 2009, at 5:56 PM, Andrew Snow wrote: Matthew Grooms wrote: I was having problems running carp on VMWare ESX 4 and did a little investigative work to determine the cause of the probl

Re: FreeBSD + carp on VMWare ESX

2009-07-26 Thread Matthew Grooms
atches/esx-carp.diff The IPv6 code path is untested. Also, the changes were placed under a sysctl conditional so the following is required in /etc/sysctl.conf to enable it at boot time ... net.inet.carp.drop_echoed=1 Thanks aga

Re: Juniper Secure Access SSL VPN access from FreeBSD?

2014-09-15 Thread Matthew Grooms
based client some time ago. The Shrew Soft product only supports IPsec based connectivity and is compatible with SSG/SRX systems. Hope this helps, -Matthew ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net

Re: A couple of trivial BIND (dynamic update) questions

2014-10-12 Thread Matthew Seaman
directory /ver/named/etc/namedb/dynamic and make it mode 755 but owned by the bind UID and GID (similar to the slave directory). Use that for storing the data for all your dynamic update zones. Matthew -- Dr Matthew J Seaman MA, D.Phil. PGP: http://www.infracaninophile.co.uk/pgpkey signature.asc Description: OpenPGP digital signature

Broken IPsec + enc +pf/ipfw

2014-10-20 Thread Matthew Grooms
sets of firewalls that run the exact same type of configuration on 9.x that are working exactly as expected. Lastly, I tried to locate a relevant PR but didn't find anything concrete. Is this related to the issue? And if so, can it be MFCd? https://bugs.freebsd

Re: Broken IPsec + enc +pf/ipfw

2014-10-20 Thread Matthew Grooms
On 10/20/2014 2:47 PM, Andrey V. Elsukov wrote: On 20.10.2014 20:18, Matthew Grooms wrote: Lastly, I tried to locate a relevant PR but didn't find anything concrete. Is this related to the issue? And if so, can it be MFCd? https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=110959 Did yo

Re: Broken IPsec + enc +pf/ipfw

2014-10-20 Thread Matthew Grooms
On 10/20/2014 2:44 PM, Mark Felder wrote: On Mon, Oct 20, 2014, at 11:18, Matthew Grooms wrote: All, There appears to be an issue with FreeBSD 10.x when using enc device to filter inbound traffic on the receive path. After searching the mailing lists, I see two different people reporting the

Re: Broken IPsec + enc +pf/ipfw

2014-10-20 Thread Matthew Grooms
On 10/20/2014 3:50 PM, Andrey V. Elsukov wrote: On 21.10.2014 00:00, Matthew Grooms wrote: On 10/20/2014 2:47 PM, Andrey V. Elsukov wrote: On 20.10.2014 20:18, Matthew Grooms wrote: Lastly, I tried to locate a relevant PR but didn't find anything concrete. Is this related to the issue? A

Re: Broken IPsec + enc +pf/ipfw

2014-10-21 Thread Matthew Grooms
rt back to the list with my results. Alternately, I assume you also could upgrade to 10.1-RC2 as the MFC for this patch happened back in March. I may go this route myself and then bump up to RELEASE in a few weeks when it happens. Thanks, -Matthew ___ f

Re: Broken IPsec + enc +pf/ipfw

2014-10-22 Thread Matthew Grooms
On 10/21/2014 1:39 PM, Kyle Williams wrote: On Tue Oct 21 11:35:15 2014, Matthew Grooms wrote: Hey Kyle, Thanks for lending a hand. I tested a few myself last night but had no luck. This morning I received an email off list that pointed to a patch that was merged to 10 stable. It sounds

Re: Broken IPsec + enc +pf/ipfw

2014-10-23 Thread Matthew Grooms
On 10/23/2014 5:56 AM, Andrey V. Elsukov wrote: On 22.10.2014 23:28, Matthew Grooms wrote: On 10/21/2014 1:39 PM, Kyle Williams wrote: On Tue Oct 21 11:35:15 2014, Matthew Grooms wrote: Hey Kyle, Thanks for lending a hand. I tested a few myself last night but had no luck. This morning I

SSL certificate check error ...

2014-11-10 Thread Matthew Grooms
iate ioctl for device' fstat(3,{ mode=-rw-r--r-- ,inode=1123624,size=324,blksize=32768 }) = 0 (0x0) read(3,"#\n# nsswitch.conf(5) - name ser"...,32768) = 324 (0x144) read(3,0x801931000,32768)= 0 (0x0) This is the only copy of openssl on my system .

Re: SSL certificate check error ...

2014-11-10 Thread Matthew Grooms
Ok, I feel a little silly. These commands do not work without the CAfile specified on freebsd 8.x or 9.x either. Sorry for the noise. -Matthew On 11/10/2014 2:19 PM, Matthew Grooms wrote: All, I am seeing a problem with certificate checking on several stock FreeBSD 10.0-RELEASE-p12 hosts

Re: Problems with DNSSEC -- answer in fragmented UDP doesn't work

2015-01-28 Thread Matthew Seaman
.1. Using a local unbound as a forwarder should give you the ability to tweak exactly how it talks to your upstream DNSes so that the answers get through more reliably. Cheers, Matthew signature.asc Description: OpenPGP digital signature

Re: bhyve with vlans - host and vm can't pass traffic

2015-04-22 Thread Matthew Grooms
p -i tap0' in vmhost0 while the VM is trying to send packets to see if any frames are captured and, consequently, if they contain a VLAN tag at the head of the frame. -Matthew ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailm

Re: bhyve with vlans - host and vm can't pass traffic

2015-04-23 Thread Matthew Grooms
x27;t processing them for some reason. Do you have any firewalls running on either system? You might try including a -e in the tcpdump command line arguments. IIRC, that will also show you VLAN and MAC address info from the packet headers. Maybe one of the network kernel developers could

address memory layout used by radix tree

2015-06-20 Thread Matthew Hall
adix tree will already know how many bytes to match with, and I won't need the weird sockaddr memory layout or the secret byte for the LEN macro at all. Is this reasoning correct or did I miss anything? Thanks, Matthew. ___ freebsd-net@freebsd.o

Re: Routing IPv6 over tun0 (PPPoE) issue

2015-08-23 Thread Matthew Seaman
t this should be from a distinct subnet to the block you're using internally. Hmmm you do have 'gateway_enable="YES"' and 'ipv6_gateway_enable="YES"' in your /etc/rc.conf ? Cheers, Matthew signature.asc Description: OpenPGP digital signature

Re: who uses this port?

2015-11-05 Thread Matthew Seaman
the connection state yet. It's normal. You might find that adjusting the net.inet.tcp.fast_finwait2_recycle sysctl makes these old entries get cleared more promptly. Cheers, Matthew signature.asc Description: OpenPGP digital signature

Bug in FAST IPSEC pfkey interaction ...

2007-04-08 Thread Matthew Grooms
only occurs about 1 out of every 10 attempts on my SMP system :/ I have attached some kdbg output and still have the core file lingering if anyone needs more info. Thanks, -Matthew Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address

UDP checksums in ICMP quotes

2007-05-02 Thread Matthew Luckie
At the moment, freebsd checks a UDP checksum in place, overwriting whatever is there. This has a side effect of the ICMP code sending back the first eight bytes of the UDP payload with 2 bytes different to what that system sent. For example: listening on lo0, link-type NULL (BSD loopback), captu

NAT Traversal Patches ...

2007-05-11 Thread Matthew Grooms
can do to help out? Maybe donating to a FreeBSD Foundation project that sponsors IPsec related work? Thanks, -Matthew ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: NAT Traversal Patches ...

2007-05-11 Thread Matthew Grooms
Alfred Perlstein wrote: Matthew, can you provide links to the patches and surrounding discussion. It may just be a matter of integration manpower... Here is a link to the 6.x patch set. I'm not sure where the most recent patches are for head. Yvan will probably be willing to point

Re: Applying NAT-T patch

2007-05-31 Thread Matthew Grooms
ps the ipsec tools version can be imported to replace the stock freebsd version? I really hope this makes into head before the 7 branch. Thanks, -Matthew ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

BPF divide instruction

2007-08-26 Thread Matthew Luckie
divide instruction is used? Thanks Matthew ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Throughput problems in RELENG_7

2007-10-25 Thread Matthew Reimer
I'm seeing a problem where a much faster quad-core host running RELENG_7 serves many fewer netrate/http requests per second (175/sec) than an old, busy, UP 6.0 host (828/sec). The problem seems to be related to latency and connection setup, as it shows up dramatically over a link with 50-60 ms late

BPF BIOCSETF

2007-11-18 Thread Matthew Luckie
G_6. I'll send a PR tomorrow against HEAD if there aren't any comments or complaints; the main difference will be the extra cruft to make bpf_jitter work. Thoughts? Matthew --- bpf.c.orig Mon Nov 19 14:23:52 2007 +++ bpf.c Mon Nov 19 15:55:05 2007 @@ -103,7 +103,8 @@

PR kern/119791: [nfs] UDP NFS mount of aliased IP addresses from a Solaris 10 NFS v4 server fail

2008-02-04 Thread Thyer, Matthew
unt requests, I am having problems with AMD crashing so it would be really good to get UDP mounts working again. With the situation as is I have resorted to a permanent TCP NFS mount in /etc/fstab which is not a good workaround. Matthew Thyer Phone: +61 8 8259

KAME IPsec spd_delete2 bug ...

2008-02-14 Thread Matthew Grooms
hanks, -Matthew --- key.c Fri Feb 15 02:18:16 2008 +++ key.c.fixed Fri Feb 15 02:18:35 2008 @@ -2125,7 +2125,7 @@ /* Is there SP in SPD ? */ if ((sp = key_getspbyid(id)) == NULL) { ipseclog((LOG_DEBUG, "%s: no SP found id:%u.\n", __func__, id)); -

RE: PF firewall NAT and Windows IPSEC tunnel

2008-02-14 Thread Matthew Grooms
to talk to the same gateway. But thats what NAT-T is for. Hope this helps, -Matthew ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: KAME IPsec spd_delete2 bug ...

2008-02-26 Thread Matthew Grooms
Bjoern A. Zeeb wrote: On Thu, 14 Feb 2008, Matthew Grooms wrote: Hi, There is a bug in /usr/src/sys/netipsec/key.c in FreeBSD KAME IPsec sources. netipsec/ is not KAME IPsec. Right, my mistake. FAST IPsec then. If an spd_delete2 message is submitted for an invalid policy id, the kernel

BPF JIT compiler

2008-04-11 Thread Matthew Luckie
The existing intel BPF JIT compiler has one flaw. sys/net/bpf_filter.c initialises the A and X registers to zero when called. The just in time compiler does not. This means the JIT compiler will behave differently to the interpreter on any filter that does not set the A or X registers before

Re: connect(): Operation not permitted

2008-05-18 Thread Matthew Seaman
fault now for tcp filter rules -- that was new in 7.0 reflecting the upstream changes made between the 4.0 and 4.1 releases of OpenBSD. If you want a stateless rule, append 'no state'. http://www.openbsd.org/faq/pf/filter.html#state Cheers, Matthew -- Dr Matthew J Seama

rtadvd/rrenum.c:179

2008-05-19 Thread Matthew Luckie
When rtadvd is compiled on 7.0, the following warning is emitted: /usr/src/usr.sbin/rtadvd/rrenum.c:179: warning: overflow in implicit constant conversion I have not determined if the code works correct or not, but I wonder if it does. the line in question is this: struct irr_raflagmask {

Re: named in sandbox

2004-05-21 Thread Matthew Seaman
tten netbsd-centrically, and you'll have to adapt the instructions for use under FreeBSD -- use ports instead of pkgsrc, and you'll need to investigate what to do to make devfs(8) create the requited device nodes under the chroot, rather than using mknod. Cheers,

Re: bridge callbacks in if_ed.c?

2004-09-05 Thread Matthew Dillon
Well, wait a second... are we talking about a lot of packets being discarded by the filter in 'normal' operation, or are we talking about an attack? Because if we are takling about an attack the LAST ethernet device anyone would ever want to use would be ED. i.e. they would be

Re: [tcpdump-workers] [PATCH] Add ioctl to disable bpf timestamping

2004-09-25 Thread Matthew Luckie
r it actually passes a filter, but I've not done that in my patch. Feedback appreciated. Matthew ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Reduce effects of DDoS attack ...

2004-10-07 Thread Matthew Seaman
owever, as your FreeBSD servers seem to be handling the load just fine, that probably won't do you much good. If the switch upstream of you is completely overloaded, there's not a lot you can do, other than get your network moved over to some

Re: FreeVRRPd project status

2005-04-07 Thread Matthew Smith
Julian Elischer wrote: Dag-Erling Smørgrav wrote: "Mike Jakubik" <[EMAIL PROTECTED]> writes: Really? Ive never been able to compile it on any 5.x box. [...] bison -y -p wack -d config_gram.y config_gram.y:91.10: parse error, unexpected ":", expecting ";" or "|" config_gram.y:191.10: parse erro

5.4 amd64 kernel and em driver issue ...

2005-05-17 Thread Matthew Grooms
oms/files/freebsd/custom.txt http://hole.shrew.net/~mgrooms/files/freebsd/dmesg.txt Thanks in advance, -Matthew ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: 5.4 amd64 kernel and em ... FIXED

2005-05-17 Thread Matthew Grooms
I know its bad form to respond to myself. Anyhow, please disregard the previous post. The problem has been resolved. Thanks, -Matthew All, Has anyone done any extensive testing with the em driver on a 5.4 release amd64 SMP kernel? I have two boxes in a firewall setup that contain 6

bpf writes on tun device

2005-05-26 Thread Matthew Luckie
have two questions: 1. Should I be able to send IP MTU sized packets on tun devices, on any FreeBSD releases? 2. How come the bpf check against the interface MTU succeeds for ethernet writes of 1514, despite if->if_mtu seemingly being set to 150

Packets don't flow from ng_netflow

2005-06-01 Thread Matthew Reimer
I'm trying to use ng_netflow to monitor our network traffic but for some reason NetFlow packets aren't emitted unless tcpdump is running on the interface configured with ng_netflow. The box is running FreeBSD 4.11-STABLE and the latest ng_netflow from ports. It has two NICs: the main NIC fxp0 w

Re: Packets don't flow from ng_netflow

2005-06-01 Thread Matthew Reimer
On Wednesday 01 June 2005 11:10 am, Maksim Yevmenkin wrote: > Matthew Reimer wrote: > > The problem is that no NetFlow packets are emitted unless I run tcpdump > > on dc0. Is this not a valid configuration? Or is there a bug in > > netgraph/ng_netflow? > > nope. tcp

Re: bpf writes on tun device

2005-06-06 Thread Matthew Luckie
> I can successfully write BPF packets up to 1500 bytes in size (1496 IP > bytes without the address family integer). Writes larger than this > return EMSGSIZE. http://lists.freebsd.org/pipermail/freebsd-net/2005-May/007371.html Just for the record, the patch below fixes this on 4.11; the same

Re: bpf writes on tun device

2005-06-06 Thread Matthew Luckie
sc->sc_if, DLT_NULL, sizeof(u_int)); net/if_stf.c: bpfattach(ifp, DLT_NULL, sizeof(u_int)); net/if_tun.c: bpfattach(ifp, DLT_NULL, sizeof(u_int)); netgraph/ng_iface.c: bpfattach(ifp, DLT_NULL, sizeof(u_int)); netgraph/ng_sppp.c: bpfattach (&pp->pp_if, DLT_NULL, sizeof(

Re: bpf writes on tun device

2005-06-07 Thread Matthew Luckie
hifted the BPF write check to looutput. Otherwise, i added BPF write support to the remaining drivers (if_stf, if_ic, if_plip, i4b_ipr.c, and ip_carp.c). I did not determine how to include the appropriate bpf write code in ng_sppp.c - it does not appear to require it. Please review. Matthew ___

Re: bpf writes on tun device

2005-06-07 Thread Matthew Luckie
passed without interference by the IP stack to the wire. I'll see if I can get consensus with NetBSD / OpenBSD / Darwin / tcpdump-workers. Thanks. Matthew ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: bpf writes on tun device

2005-06-07 Thread Matthew Luckie
useful in practice, since you can find out what the "ether type" of the packet was per : unless i'm mistaken, the 4 byte field is actually the address family of the packet. so AF_INET, AF_INET6, etc. the ethertype thing is for DLT_EN10MB dev

Re: bpf writes on tun device

2005-06-09 Thread Matthew Luckie
ny output function specific to ng_sppp so I think it is safe to leave alone. Thanks Matthew ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: A bit of a route socket bug...

2005-07-07 Thread Matthew Luckie
I'm not very familiar with the route code, but here is what i came up with. [EMAIL PROTECTED] mjl]$ sudo route change 10.3.2.1 127.0.0.1 route: writing to routing socket: No such process change host 10.3.2.1: gateway 127.0.0.1: not in table the code checks that if changing a host or network route

RE: NAT-T support for IPSec stack

2005-08-02 Thread Matthew Grooms
works well on FreeBSD so it should be a piece of cake. I am in the process of moving but once settled and upgrade to 6 I will definitely test out your patches and would be willing to test out any ipsec-tools port as well. Thanks again for your work on this. -Matthew

RE: NAT-T support for IPSec stack

2005-08-04 Thread Matthew Grooms
rence : www.google.com -> nat-t patent ipsec -Matthew ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: NAT-T support for IPSec stack

2005-08-04 Thread Matthew Grooms
Bjoern A. Zeeb wrote: On Thu, 4 Aug 2005, Matthew Grooms wrote: There was also some mention of a third claim but it was hard to find details on the subject. Lastly, some people voiced concerns regarding ietf.org -> IPR -> Search -> NAT-T https://datatracker.ietf.o

odd tcpdump output w/ 6.0-BETA2 ...

2005-08-23 Thread Matthew Grooms
uild the kernel and userland but am restricted on diskspace. Does anyone know what collections are considered minimal to sync and rebuild or do I really need to cvsup src-all? Thanks, -Matthew ___ freebsd-net@freebsd.org mailing list http://lists.fre

Re: odd tcpdump output w/ 6.0-BETA2 ...

2005-08-23 Thread Matthew Grooms
Pieter de Boer wrote: Matthew Grooms wrote: Is anyone else seeing this issue? I get useless output from tcpdump ( no header or protocol decode ) but only when I specify a filter on the command line. listening on xl0, link-type EN10MB (Ethernet), capture size 96 bytes 11:33:32.920031

Re: odd tcpdump output w/ 6.0-BETA2 [ resolved ] ...

2005-08-23 Thread Matthew Grooms
Jung-uk Kim wrote: On Tuesday 23 August 2005 04:15 pm, Pieter de Boer wrote: Matthew Grooms wrote: Is anyone else seeing this issue? I get useless output from tcpdump ( no header or protocol decode ) but only when I specify a filter on the command line. listening on xl0, link-type EN10MB

iperf results

2005-09-21 Thread Matthew Jakeman
Hi, Some colleagues and myself have performed some simple tests on various OS's using iperf to simply fire packets from one pc to another over ethernet to test a few characteristics such as packet loss, jitter etc between IPv4 and IPv6. The configuration for all three OS's were 'out of the box'

Re: iperf results

2005-09-22 Thread Matthew Jakeman
On Wednesday 21 September 2005 15:19, Chuck Swiger wrote: > Matthew Jakeman wrote: > > Some colleagues and myself have performed some simple tests on various > > OS's using iperf to simply fire packets from one pc to another over > > ethernet to test a few character

Re: Call for performance evaluation: net.isr.direct (fwd)

2005-10-14 Thread Matthew Reimer
Poul-Henning Kamp wrote: > In message <[EMAIL PROTECTED]>, Andrew > Gallatin > writes: > >> > >What if somebody were to port the linux TSC syncing code, and use it >> > >to decide whether or not set kern.timecounter.smp_tsc=1? Would you >> > >object to that? >> > >> > Yes, I would object to th

IPSec tcp session stalling ( me too ) ...

2005-10-22 Thread Matthew Grooms
8:40.942770 IP 10.20.10.141.ssh > 10.22.200.21.1228: P 2690:2738(48) ack 1390 win 7504 12:58:41.088509 IP 10.22.200.21.1228 > 10.20.10.141.ssh: . ack 2738 win 17024 Sorry in advance for not posting as a reply to the original message. I don't subscribe to the list. Just wanted to

Re: IPSec tcp session stalling ( me too ) ...

2005-10-22 Thread Matthew Grooms
Matthew Grooms wrote: Volker, ipfw is enabled. I use purely IPSEC so I would agree that GRE isn't the > problem. This behavior is 100% reproducible for me. If traffic is > forwarded from the host providing the ESP protection or if the Sorry, this should have read ... >

Re: IPSec tcp session stalling

2005-10-22 Thread Matthew Grooms
: P 12:15(3) ack 66 win 17422 16:47:05.300951 IP 10.20.10.141.telnet > 10.22.200.21.vpvc: P 66:112(46) ack 15 win 5840 16:47:05.301179 IP 10.22.200.21.vpvc > 10.20.10.141.telnet: P 15:18(3) ack 112 win 17376 16:47:05.379114 IP 10.20.10.141.telnet > 10.22.200.21.vpvc: . ack 18 win 5840 -M

Re: On fresh 11.1 install, unbound(8) config is totally non-functional

2017-10-14 Thread Matthew Seaman
ive to the chroot directory. That's probably something like /var/unbound/var/log/unbound.log for the configuration you've shown. Cheers, Matthew signature.asc Description: OpenPGP digital signature

Re: pf: Efficiently specifying discontinuous IPv6 ranges

2018-05-11 Thread Matthew Seaman
dball address. Cheers, Matthew ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: Panic during ci test run

2018-08-14 Thread Matthew Macy
This isn't reproducing it for me. I'll need more specifics on your configuration. -M On Sat, Aug 11, 2018 at 2:04 AM Kristof Provost wrote: > The fibs_test:subnet_route_with_multiple_fibs_on_same_subnet test > (/usr/tests/sys/netinet/) consistently provokes a panic. > > Note that this requires:

  1   2   3   4   >