Re: FreeBSD NAT-T patch integration

2008-06-24 Thread Norberto Meijome
On Tue, 24 Jun 2008 22:01:46 -0500 mgrooms <[EMAIL PROTECTED]> wrote: > Is anyone currently looking at the IPsec NAT-T patches? I posted a similar > question several months ago around the FAST_IPSEC + IPv6 integration time > frame. Maybe now that things have settled a bit, this work can be reviewe

Re: Application layer classifier for ipfw

2008-07-31 Thread Norberto Meijome
On Thu, 31 Jul 2008 14:18:31 -0700 Julian Elischer <[EMAIL PROTECTED]> wrote: > Paolo Pisati wrote: > > On Thu, Jul 31, 2008 at 01:02:29PM +0300, Mike Makonnen wrote: > >> While I have not done extensive testing, preliminary tests are encouraging > >> and it seems to work, so I thought I'd anno

Re: Virtual machine on freebsd

2008-12-07 Thread Norberto Meijome
On Fri, 5 Dec 2008 09:13:00 -0800 Freddie Cash <[EMAIL PROTECTED]> wrote: > On December 4, 2008 11:58 pm Antonio Tommasi wrote: > > Hi to all, > > i want to install a virtual machine on my FreeBSD 7.0 box. Can you tell > > me which is the better sofware to do this? Antonio, you would have receive

Re: Download speed and TCPIP window sizing

2007-05-31 Thread Norberto Meijome
On Fri, 1 Jun 2007 12:34:11 +1000 Norberto Meijome <[EMAIL PROTECTED]> wrote: > http://www.meijome.net/files/freebsd/test_hk_dl/fbsd_NL_test_from_au.cap > the same file, which I uploaded to a FBSD in NL (as mentioned above). Ping > time > is about 320 ms to this box from home

Re: Download speed and TCPIP window sizing

2007-05-31 Thread Norberto Meijome
On Fri, 01 Jun 2007 02:21:13 +0800 Pang <[EMAIL PROTECTED]> wrote: > Thanks for reply. > > Nicolas Gieczewski wrote: > > On Thu, 31 May 2007 22:06:39 +0800, Pang <[EMAIL PROTECTED]> wrote: > > > >> Recently, I have leased a rack in Asianetcom and some bandwidth. > >> However, the speed for m

Re: Issue with huge numbers of connections

2007-06-19 Thread Norberto Meijome
On Sun, 17 Jun 2007 19:06:16 +0100 Joe Holden <[EMAIL PROTECTED]> wrote: > kern.ipc.nmbclusters FWIW, this one in particular ( controls mbuf clusters) will made a huge difference back in the FBSD 4 days on very heavily used websites. I've had them tuned up to the order of almost 100K - over that

Re: Current round of IPsec checkins complete...

2007-07-02 Thread Norberto Meijome
On Sun, 01 Jul 2007 21:10:22 +0900 [EMAIL PROTECTED] wrote: > Please let myself of bz@ know of any issues. I'm attempting a build > of a fresh tree now. Great , thanks for all the time and effort invested :) One question, is NAT Traversal supported now on -STABLE without the patches that are f

Re: Current round of IPsec checkins complete...

2007-07-02 Thread Norberto Meijome
On Mon, 2 Jul 2007 14:58:05 + (UTC) "Bjoern A. Zeeb" <[EMAIL PROTECTED]> wrote: > On Tue, 3 Jul 2007, Norberto Meijome wrote: > > > On Sun, 01 Jul 2007 21:10:22 +0900 > > [EMAIL PROTECTED] wrote: > > > >> Please let myself of bz@ know of an

Re: Current round of IPsec checkins complete...

2007-07-02 Thread Norberto Meijome
On Mon, 2 Jul 2007 15:28:15 + (UTC) "Bjoern A. Zeeb" <[EMAIL PROTECTED]> wrote: > On Tue, 3 Jul 2007, Norberto Meijome wrote: > > Hi, > > > On Mon, 2 Jul 2007 14:58:05 + (UTC) > > "Bjoern A. Zeeb" <[EMAIL PROTECTED]> wr

Re: Current round of IPsec checkins complete...

2007-07-02 Thread Norberto Meijome
On Mon, 2 Jul 2007 17:31:05 +0200 VANHULLEBUS Yvan <[EMAIL PROTECTED]> wrote: > http://vanhu.free.fr/FreeBSD/patch-natt-freebsd6-.diff > applies to STABLE, and currently does not needs update. It may apply > to -CURRENT, but won't compile cleanly. great, thanks Yvan , will try soon.

Re: Current round of IPsec checkins complete...

2007-07-02 Thread Norberto Meijome
On Tue, 03 Jul 2007 10:34:55 +0800 blue <[EMAIL PROTECTED]> wrote: > What is the main enhancement for the commit? Hi Susan, please check the archives of net@ for several emails discussing this. > > Tracing back the discussion, It is all about NAT-T? no, I only just brought this up. > > How is

Re: Max NFS mounts for a FreeBSD client?

2007-07-20 Thread Norberto Meijome
On Fri, 20 Jul 2007 18:07:37 +0100 (BST) Robert Watson <[EMAIL PROTECTED]> wrote: > > On Fri, 20 Jul 2007, Eric L. Anderson wrote: > > > What is the limit of NFS mounts a FreeBSD server can make and how do you > > modify this limit? > > > > The only reference I could find to this question on th

Re: Canonical Packet Traces?

2007-08-20 Thread Norberto Meijome
On Mon, 20 Aug 2007 12:47:28 +0900 [EMAIL PROTECTED] wrote: > A very slightly off topic question for [EMAIL PROTECTED] Does anyone know of > a > web site that collects and indexes canonical packet traces for network > protocols? I'm looking for a good storehouse of traces to use in > testing.

[OT] nlanr.org ?? ( was Re: Canonical Packet Traces? )

2007-08-20 Thread Norberto Meijome
On Mon, 20 Aug 2007 09:11:32 -0700 (PDT) Weiguang Shi <[EMAIL PROTECTED]> wrote: > moat.nlanr.org has a huge collection of traces, with dst and src IP addresses > anonymized. > ?! it seems someone hijacked nlanr.org's domain : Domain ID:D128379310-LROR Domain Name:NLANR.ORG Created On:06-Sep-2

Netgraph node to replace packet contents?

2007-08-25 Thread Norberto Meijome
hi all, is there any already existing Netgraph node that would allow me to replace bytes in the data part of a packet? I'm talking about generic "foo" for "BAR" replacement, though different lengths would be good too. or maybe other tool can do this too? thanks! B _

Re: Netgraph node to replace packet contents?

2007-08-26 Thread Norberto Meijome
On Sun, 26 Aug 2007 15:54:43 +0300 Alexander Motin <[EMAIL PROTECTED]> wrote: > Hi. > > Norberto Meijome wrote: > > is there any already existing Netgraph node that would allow me to replace > > bytes in the data part of a packet? I'm talking about generic

Re: Netgraph node to replace packet contents?

2007-08-26 Thread Norberto Meijome
On Sun, 26 Aug 2007 19:19:47 +0300 "Vlad GALU" <[EMAIL PROTECTED]> wrote: >ports/netsed + pf/ipf (for transparent proxying) >Of course, the overhead is big. great, thanks , that may do - i may only need it for a proof of concept at this time. cheers, B _ {Beto|N

pf rdr + netsed : reinject loop...

2007-08-31 Thread Norberto Meijome
Hello everyone, I need your help / insight here :) My setup, 2 VMs, XP (WinXP) and BSD (FreeBSD 6.2) [XP ,172.16.82.81 ] --- [172.16.82.81,em1 BSD A.B.C.D,em0] --- The Interweb [Other_servers_galore] A.B.C.D is a public IP. [Other_servers_galore] represents all and any servers XP wants

Re: pf rdr + netsed : reinject loop...

2007-08-31 Thread Norberto Meijome
On Fri, 31 Aug 2007 13:33:53 +0200 Daniel Hartmeier <[EMAIL PROTECTED]> wrote: > On Fri, Aug 31, 2007 at 08:27:29PM +1000, Norberto Meijome wrote: > > > rdr on $int_if proto tcp from 172.16.82.81 to any -> 127.0.0.1 port 10101 > > netsed tcp 10101 0 0 s/FOO/BAR >

Re: pf rdr + netsed : reinject loop...

2007-08-31 Thread Norberto Meijome
On Fri, 31 Aug 2007 13:33:53 +0200 Daniel Hartmeier <[EMAIL PROTECTED]> wrote: > b) Instead of replacing the destination address in pf with rdr, try > leaving it as it is, but use route-to (lo0) to get the packet routed to > the loopback interface. This would require netsed to listen on > INADDR_A

SOLUTION + Patch to: pf rdr + netsed : reinject loop...

2007-09-02 Thread Norberto Meijome
On Fri, 31 Aug 2007 20:27:29 +1000 Norberto Meijome <[EMAIL PROTECTED]> wrote: > Hello everyone, I need your help / insight here :) Mel (fbsd.questions at rachie.is-a-geek.net ) has very kindly and cleverly provided a neat solution for this problem. It was posted to Question@, and i

Re: Quagga as border router

2007-09-21 Thread Norberto Meijome
On Thu, 20 Sep 2007 23:54:49 -0400 Richard A Steenbergen <[EMAIL PROTECTED]> wrote: > Honestly, FreeBSD routing code is pretty poor as far as a modern router > goes. If you throw enough CPU at it you can brute force your way through > plenty of things, but in the context of modern commercial rou

Re: Quagga as border router

2007-09-24 Thread Norberto Meijome
On Fri, 21 Sep 2007 10:10:06 -0700 "Kevin Oberman" <[EMAIL PROTECTED]> wrote: > Ever run into a non-existent 'olive'? Hi Kevin, I dont understand :) > Or even a J series Juniper? > Juniper put together a very impressive software based routing system > that is FreeBSD based. Yes, I know of this,

Re: Big PPTP server

2006-08-14 Thread Norberto Meijome
On Thu, 10 Aug 2006 21:32:22 -0600 Brett Glass <[EMAIL PROTECTED]> wrote: > This company hasn't been using a RADIUS server. They have an Active > Directory server (yuck!), but I don't know if it would be useful > for this purpose. As much as it's a MS solution, why reinvent the wheel / kill you

Re: VLAN switch

2006-10-03 Thread Norberto Meijome
On Tue, 3 Oct 2006 23:32:37 +0200 Guido van Rooij <[EMAIL PROTECTED]> wrote: > Perhaps a bit off-topic, but I'm looking for a cheap vlan switch. > Anyone with a suggestion? the Netgear GS724T is a 'web smart' ( :D ) 24 port gigabit switch. about 600 AUD from memory. you can find cheaper ones if y

divert with ipnat instead of ipfw?

2004-05-13 Thread Norberto Meijome
Hi all, My setup : -- FreeBSD hostname 4.10-PRERELEASE FreeBSD 4.10-PRERELEASE #2: Wed Apr 28 09:40:43 EST 2004 fxp0 : link to the outside world fxp1 : link to LAN fxp2 : link to DMZ ipf firewall ipnat for LAN and rdr for services. -- I'm running tcpmssd to fix MSS: /usr/local/bin/tcpmssd -p 100