Re: Working on howl port

2004-12-12 Thread Peter Heerboth
I'm not a zeroconf expert per se, but I would love to see FreeBSD have a great zeroconf implementation. Here are some things to think about. If your first implementation happens to leave the interface with a 169.254 IP address, it's doing something it shouldn't, however that is likely to be mo

Re: IPFilter, mpd/Netgraph problems on RELENG_4

2004-12-13 Thread Peter Pentchev
On Tue, Dec 14, 2004 at 11:53:10AM +0300, Gleb Smirnoff wrote: > On Tue, Dec 14, 2004 at 10:05:50AM +0200, Peter Pentchev wrote: > P> I am seeing a lot of ICMP Must Fragment packets with incorrect ICMP > P> checksums on a RELENG_4 box which holds up 40-60 PPTP (mpd/Netgraph) VPN &

IPFilter, mpd/Netgraph problems on RELENG_4

2004-12-13 Thread Peter Pentchev
ec 2 10:31:16 EET 2004 [EMAIL PROTECTED]:/usr/obj/usr/src-bsd/4.0S/src/sys/UNNAMED i386 drwxr-xr-x 2 root wheel 512 Dec 2 11:43 /var/db/pkg/mpd-3.18_2 G'luck, Peter -- Peter Pentchev [EMAIL PROTECTED][EMAIL PROTECTED][EMAIL PROTECTED] PGP key:http://people.Fr

Bridge and router

2005-01-05 Thread Peter Rog
promisc ! the rc.conf has the "Gateway_enable="YES". Can somebody tell me if there is a solution,...? Thanks. Peter Rog ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any

mpd pptp packet loss xp client

2005-01-24 Thread Peter Brezny
list of allowed ports without success. Peter Brezny purplecat.net 828-250-9446 ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: circumventing default route through loopback

2005-02-20 Thread Peter Heerboth
A few ideas come to mind. You could trying using a web proxy. Or, if you are running an open source browser, you could try to use the IP_OPTIONS socket option to specify strict source routing and then supply the exact path the packet must take. I would try using a web proxy first. Pete On F

DNS question ???

2005-03-04 Thread Sheh, Peter
Hi all, Hope someone can help me with this question: "What does DNS do when the same hostname is reported from multiple systems with different IP addresses? " Thx...Peter ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.o

Re: Resolving MAC address

2005-03-24 Thread Peter Heerboth
One thing you can try if you want to avoid needing super user privileges is to send a small UDP packet to the given IP, which will force the kernel to ARP for the address if it is not already present. Then you can check the routing table through sysctl() by passing in {CTL_NET, PF_ROUTE, 0, AF

Rigorous specification for TCP, UDP, and Sockets

2005-03-28 Thread Peter Sewell
ell as supporting automated conformance testing. Our techniques may be useful in the development of new protocols and extensions. We would greatly appreciate feedback, on both content and usability. Peter, for the Netsem team: Steve Bishop, Matthew Fairbairn, Michael Norrish, Peter

Re: Rigorous specification for TCP, UDP, and Sockets

2005-03-29 Thread Peter Sewell
>Hi Peter, > >Interesting paper and work. Many thanks. >Are you plannning to share the tools as >well? That's what I'd be most interested in seeing, basically the >ability to turn your conformance tests into regression tests. It's unclear at the moment -

Re: Rigorous specification for TCP, UDP, and Sockets

2005-03-29 Thread Peter Sewell
at (though I don't think it helps right now). >> What kind of regression testing is in use now? > >None for the most part. People test some limited things, but I don't >think anyone does the kind if rigorous testing we should be doing. ah :-( cheers, Peter ___

Re: dsl

2005-05-19 Thread Peter Hoskin
paul klatt wrote: Could anyone please tell me how to get dsl setup done on freebsd, I woudl really appreciate the help I'm afraid we will need more detail than that. Is this a PPPoE modem or is it a DSL router? How is it connected to the machine? Do you wish to setup NAT? -- .---

Re: dsl

2005-05-19 Thread Peter Hoskin
Paul Klatt wrote: It is the speedstream5100 pppoe modem. I do not know what nat is. It is a router and it is connected to the machine by an ethernet car Please read http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/pppoe.html -- .---. |. _

[patch for review] Fwd: CURRENT: ifconfig tap0 results in core dump

2005-05-24 Thread Peter Edwards
Does anyone have any objection to me committing the patch in this thread? (Note: I inadvertently included a local change that no longer prevents non-root users from opening up /dev/tap*: I don't intend to commit that part of it) -- Forwarded message -- From: Peter Ed

Re: Looking for networking solution.

2005-06-15 Thread Peter Jeremy
nd can therefore drop them from its transmit buffer (or resend them if they are not received)? In particular, if there is no traffic for a period, the only way that the last packet (before the break) can be confirmed is via acknowledge timeouts. -- Peter Jeremy

VLANs / Bridging / BPDU

2005-09-01 Thread Peter Wood
suggestions or has seen this issue, I'd be very greatful. Would it be possible to get the bridge to block BPDU (ugly hack I'm sure). Cheers, Pete. -- Peter Wood BSc (Hons) :: <[EMAIL PROTECTED]> :: Tel +44 1606 828010 ___ freebsd-ne

Re: VLANs / Bridging / BPDU

2005-09-01 Thread Peter Wood
t for reference, so it'll appear somewhere in a archive if others need it. Pete. -- Peter Wood BSc (Hons) :: <[EMAIL PROTECTED]> :: Tel +44 1606 828010 ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ne

More then 32 bfp devices on Freebsd 5.4-RELEASE-p7

2005-10-17 Thread Peter Wood
Good Afternoon, I'm now working at a large UK university in their network support department, as such one of my duties is to monitor the residences network. To this end I have a cloned nic for every vlan that we have on resnet. It roughly comes to over 50 vlans, and FreeBSD its self copes ver

nat exclusion?

2005-11-02 Thread Peter Gregorc
any chance to disable NAT for one of the IP's the easy way? I know I can assign both public IPs to BSD and then use ipfw to route 1 to WS1 and other to WS2 and WS3...but that's the last resort. Please CC answer to me, I don't have the

Re[4]: nat exclusion? [Spam][94.2%]

2005-11-03 Thread Peter Gregorc
Thanks a lot, this solved the problem right away... one simple line i couldn't find :/ Thanks! ------ Peter Gregorc Paranoid Metal Webzine http://www.paranoid-zine.com -- On Thursday, November 3, 2005, 5:54:45 AM, you wrote: Matthew>

NFS exports -mapall notworking

2017-08-30 Thread peter . blok
Hi, I’m running 11-STABLE as of today and was trying to use the -mapall parameter, but it doesn’t have any effect. Anybody else using this? Peter ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To

Static IPsec (via setkey) and -A aes-xcbc-mac, how to?

2017-11-26 Thread Peter G.
Hi, can somebody please show me the correct syntax of setting static SA with aes-xcbc-mac authentication? I checked rfc3566, my "base" encryption algo is aes-128, aes-xcbc-mac is supposed to work with a 128-bit (16 characters) long key. I don't seem to be able to set it up, though. Example (a

Re: Static IPsec (via setkey) and -A aes-xcbc-mac, how to?

2017-11-27 Thread Peter G.
On 27/11/2017 06:15, Peter G. wrote: > Hi, can somebody please show me the correct syntax of setting static SA > with aes-xcbc-mac authentication? I checked rfc3566, my "base" > encryption algo is aes-128, aes-xcbc-mac is supposed to work with a > 128-bit (16 characters) lon

Multipath TCP, what's the progress, if there is any?

2018-01-25 Thread Peter G.
A few years back a working group announced their work on MPTCP for FreeBSD, http://caia.swin.edu.au/newtcp/mptcp/. Around that time also a QR mentioned the project, https://www.freebsd.org/news/status/report-2013-01-2013-03.html#Multipath-TCP-(MPTCP)-for-FreeBSD Since then all of this seems to

Re: Multipath TCP, what's the progress, if there is any?

2018-01-27 Thread Peter G.
On 26/01/2018 09:37, Outback Dingo wrote: > On Thu, Jan 25, 2018 at 4:21 PM, Peter G. wrote: >> A few years back a working group announced their work on MPTCP for FreeBSD, >> http://caia.swin.edu.au/newtcp/mptcp/. Around that time also a QR mentioned >> the project, >&

Re: Looking for a Wireless NIC with 802.11ac or 802.11n support

2018-02-05 Thread Peter Blok
Hi, I have been using a TP-Link TL-WDN4800. It has hostap support, because that’s how I used it. Had lots of stuck beacon messages, but it kept doing its job. Peter > On 6 Feb 2018, at 07:04, Kevin Oberman wrote: > > On Mon, Feb 5, 2018 at 9:38 PM, Victor Sudakov

Re: Raw Sockets: Two Questions

2018-03-22 Thread Peter Jeremy
us letter. > >Thank you. If zmap ends up not suiting my needs, I will >definitely look into libpcap. Since no-one else has mentioned it, another option would be divert(4), which is part of IPFW. -- Peter Jeremy signature.asc Description: PGP signature

Re: multiple if_ipsec

2018-05-08 Thread peter . blok
policy once started. Peter > On 25 Apr 2018, at 13:48, Victor Gamov wrote: > > On 23/04/2018 15:43, Andrey V. Elsukov wrote: >> Your security associations doesn't match your security policies. >> Probably you did interfaces reconfiguration without clearin

Re: multiple if_ipsec

2018-05-09 Thread peter . blok
Andrey, I was planning to move towards Strongswan anyway. The 1st step (with 1 interface worked great) Julian, The idea of having a jail as VPN end-point is going to help me transition step by step and possibly have both racoon and strongswan active. Thx, Peter > On 9 May 2018, at 03

Re: multiple if_ipsec

2018-05-13 Thread peter . blok
it breaks any existing stuff. Peter > On 13 May 2018, at 13:59, Andrey V. Elsukov wrote: > > On 08.05.2018 16:51, Andrey V. Elsukov wrote: >> I think for proper support of several if_ipsec interfaces racoon needs >> some patches. But I have not spare time to do this job.

Re: VIMAGE option in FreeBSD 11.x

2018-07-18 Thread peter . blok
Hi, I’m using VIMAGE on stable for more than a year now. No issues, but I did apply patches from CURRENT. As far as I know those patches have not been MFC’ed. I have applied the following commits. 306684, 307234, 312942, 313000, 313167, 315130, 315135, 315468, 315740, 317399, 320847 Peter

Re: VIMAGE option in FreeBSD 11.x

2018-07-18 Thread peter . blok
hose patches have not been > MFC’ed. > > I have applied the following commits. 306684, 307234, 312942, 313000, 313167, > 315130, 315135, 315468, 315740, 317399, 320847 > > Peter > > On 18 Jul 2018, at 01:56, Raja Sivaramakrishnan via freebsd-net > wrote: > >

Re: FCP-0101: Deprecating most 10/100 Ethernet drivers

2018-10-04 Thread Peter Jeremy
o USB adapters. They are explicitly excluded from the proposed deprecation. >BTW, I also use fxp interfaces a lot, but that's just because I have Also explicitly excluded because of its popularity. -- Peter Jeremy signature.asc Description: PGP signature

Re: FCP-0101: Deprecating most 10/100 Ethernet drivers

2018-10-04 Thread Peter Jeremy
ends to cover nearly all 100 cards, yet no >one (pardon me if I missed those) asks for 10. So how about making this >proposal cover only 10 cards, What is the purpose in keeping unused FastEthernet cards in the tree? >if you can't resist the itch to remove >something from th

Point-to-point using GRE over IPv6 -> not possible with a single /128 address on the server?

2019-02-15 Thread Peter G.
machine with only a single /128 address? Found this as reference: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=208173 but what he did was on a much broader range. Many thanks! Peter ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/

Re: Point-to-point using GRE over IPv6 -> not possible with a single /128 address on the server?

2019-02-19 Thread Peter G.
On 15/02/2019 17:49, Peter G. wrote: > Now the GRE tunnel > >> ifconfig gre6 create >> ifconfig gre6 inet6 fc01:e::100 fc:02:e::200 tunnelfib 6 > #ifconfig: ioctl (SIOCAIFADDR): File exists > > Why is this not possible? Isn't the logic behind it the same

Re: Point-to-point using GRE over IPv6 -> not possible with a single /128 address on the server?

2019-02-19 Thread Peter G.
On 19/02/2019 14:06, Andreas Nilsson wrote: > On Tue, Feb 19, 2019 at 1:38 PM Peter G. wrote: > >> On 15/02/2019 17:49, Peter G. wrote: >>> Now the GRE tunnel >>> >>>> ifconfig gre6 create >>>> ifconfig gre6 inet6 fc01:e::100 fc:02:e::20

Re: panic: SACK scoreboard must not be empty

2016-09-23 Thread Peter Holm
On Thu, Apr 23, 2015 at 08:33:00AM +1000, Lawrence Stewart wrote: > On 04/22/15 19:19, Peter Holm wrote: > > On Wed, Apr 22, 2015 at 11:45:21AM +1000, Lawrence Stewart wrote: > >> Hi Peter, > >> > >> On 04/15/15 21:04, Peter Holm wrote:

Re: NAT Reflection rules for FreeBSD PF

2016-11-15 Thread Oliver Peter
, udp } from $jail_host to $ext_if port{ $service1, service2 } -> $int_lb Cheers -- Oliver PETER oli...@gfuzz.de 0x456D688F signature.asc Description: Digital signature

Re: NAT Reflection rules for FreeBSD PF

2016-11-15 Thread Oliver Peter
On Tue, Nov 15, 2016 at 01:03:54PM +, Big Lebowski wrote: > On Tue, Nov 15, 2016 at 11:37 AM, Oliver Peter wrote: > > > El duderino, > > > > On Mon, Nov 14, 2016 at 10:30:59PM +, Big Lebowski wrote: > > > > > > I am trying to set up a 11.0-R

Re: NAT Reflection rules for FreeBSD PF

2016-11-16 Thread Oliver Peter
On Tue, Nov 15, 2016 at 02:49:18PM +, Big Lebowski wrote: > On Tue, Nov 15, 2016 at 1:26 PM, Oliver Peter wrote: > > > On Tue, Nov 15, 2016 at 01:03:54PM +, Big Lebowski wrote: > > > On Tue, Nov 15, 2016 at 11:37 AM, Oliver Peter > > wrote: > > > >

11-stable mountd listens on port 993

2017-02-01 Thread Peter Blok
this it worked ok. Next reboot everything was fine. Anybody know why mountd could have been listening to port 993? Peter ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to

Re: NFSROOT and lagg(4)

2017-02-09 Thread Peter Jeremy
f anyone is doing this type of configuration in their labs? I used to do something similar on my netbook - see https://www.bugs.au.freebsd.org/dokuwiki/laggdiskless I haven't tried it recently but it definitely worked early on in 10.x. -- Peter Jeremy signature.asc Description: PGP signature

MFC VIMAGE fixes to 11-stable

2017-04-19 Thread peter . blok
keg->uk_maxpages) { keg->uk_flags &= ~UMA_ZFLAG_FULL; Peter ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: MFC VIMAGE fixes to 11-stable

2017-04-20 Thread peter . blok
why I tried it. I have added debug information to print the zone’s and the keg’s and It all looked good. I was not able to find any place where we operated on the wrong context, but perhaps I missed one. I’ll dig further. Peter > On 20 Apr 2017, at 12:42, Marko Zec wrote: > > On We

Re: MFC VIMAGE fixes to 11-stable

2017-04-20 Thread peter . blok
I’ll test this today. > On 20 Apr 2017, at 15:32, Kristof Provost wrote: > > On 20 Apr 2017, at 15:28, Marko Zec wrote: >> Right. But pfi_attach_group_event() and the other handlers cited above >> _do_ in fact invoke CURVNET_SET(vnet0) on entry, overriding the proper >> vnet choice from the call

Re: MFC VIMAGE fixes to 11-stable

2017-04-20 Thread peter . blok
It doesn’t solve my problem, but below is the stack back trace that leads to the problem that allocation doen for the default vnet are given back as part of the vnet destroy. #0 0x807ff275 at pfr_destroy_kentry+0x35 #1 0x807fe47c at pfr_remove_kentries+0x1fc #2 0x808053cd

Re: MFC VIMAGE fixes to 11-stable

2017-04-20 Thread peter . blok
Yeah, you are right. To keep the pf code as unchanged as possible, it is sometimes unclear whether something is virtualised or not. The SLIST_HEAD and RB_HEAD in pfvar.h need virtualisation as well. > On 20 Apr 2017, at 21:41, Marko Zec wrote: > > On Thu, 20 Apr 2017 21:24:33 +0200 > mailto:p

pf firewall on bridge member

2020-03-31 Thread peter . blok
responding with zone ’safe’ does not work. Both members are vlan interfaces. I have tried to disable any hardware vlan capabilities, nut no effect I’m running recent 12-STABLE I need to have both segments on the same IP segment. If someone has other ideas to do it dif

Re: [Bug 219901] if_bridge(4): Panic when destroying interface on bridge over time

2020-05-03 Thread Peter Blok
I believe if you remove the work-around "exec.poststop = "jib destroy ${name}”;” this panic happens Peter > On 3 May 2020, at 18:42, bugzilla-nore...@freebsd.org wrote: > > https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219901 > > --- Comment #5 from Krist

Re: how to fix an interesting issue with mountd?

2020-06-02 Thread Peter Eriksson
going via some external updater (like mountd). That probably would be an even better way (for ZFS) but a DB database might be useful anyway. It’s a very simple change (especially in mountd - it just opens the DB file and reads the records sequentially instead of the text file). - Peter > O

Re: somewhat reproducable vimage panic

2020-07-21 Thread Peter Libassi
Is this related to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234985 <https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234985> and https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=238326 <https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=238326> /Peter > 21 juli

Wireguard kernel module

2020-07-25 Thread Peter Libassi
I got information that there are work on a kernel module for Wireguard https://reviews.freebsd.org/D25425 <https://reviews.freebsd.org/D25425> Where can I download and test this? I have a spare amd64 currently running 13.0-CURRENT r363439 available for test purposes.

Re: Wireguard kernel module

2020-07-25 Thread Peter Libassi
Ok!, Then I would need instructions how i get that diff in to the src tree :-) any pointers to documentation will be helpful. Thanks Peter > 25 juli 2020 kl. 12:34 skrev Goran Mekić : > > On Sat, Jul 25, 2020 at 12:32:00PM +0200, Peter Libassi wrote: >> I got information that th

Re: ip(8) in base

2020-08-16 Thread Peter Libassi
. If this is the case i would like to see this introduced in to route(8) and netstat(1) /Peter > 16 aug. 2020 kl. 11:11 skrev Alexander V. Chernikov : > > I want to introduce ip(8) or something similar in base. > Basically, I need some userland tool to explicitly operates on nexthops

wireguard integration D26137 test on 13-CURRENT r364973

2020-08-30 Thread Peter Libassi
1.12.0/24 # ifconfig wg0 peer-list [Peer] PublicKey = bmUgcaOtlEFcIoSlwPQ3qO/c14nJHYr+a7Ms/kJmOFA Endpoint = 192.168.4.4: AllowedIPs = 0.0.10.11/24, 0.0.10.11/24 Otherwise this looks really nice! Next i’ll try some connectivity tests. /Peter ___

wireguard integration D26137 connectivity test

2020-09-01 Thread Peter Libassi
I can confirm that the issue reported in https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=247853 <https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=247853> is now resolved. Thanks Peter ___ freebsd-net@freebsd.org mailing list

Re: ping -R output?

2020-10-14 Thread Peter Libassi
156 ms (same route) /Peter > 14 okt. 2020 kl. 09:05 skrev Julian Elischer : > > Can someone send me the output of a ping -R , starting with FreeBSD machine, > through a second FreeBSD machine and bouncing back from a third FreeBSD > machine? I don't have three in a row like th

panic: general protection fault in if_vlan.c:1877, vmcore.280

2021-02-17 Thread Peter Holm
0xfe06facdeac0 amd64_syscall() at amd64_syscall+0x147/frame 0xfe06facdebf0 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfe06facdebf0 https://people.freebsd.org/~pho/stress/log/log0052.txt - Peter ___ freebsd-net@freebsd.org

Intel ixl lagg boot problem on FreeBSD 12.2 on Dell R730xd

2021-02-19 Thread Peter Eriksson
pcib8 > pcib9: at device 0.0 numa-domain 0 on pci8 > pci9: numa-domain 0 on pcib9 > pcib10: at device 0.0 numa-domain 0 on pci9 > pci10: numa-domain 0 on pcib10 > ixl2: Link is upError: No response to keepalive - Terminating session Anyone else seen this problem? - Peter _

Re: NFS Mount Hangs

2021-03-17 Thread Peter Eriksson
gs… Like the bugs in the Linux gss daemons or their single-threaded mount() sys call, or automounter freezing up... and other fun bugs. - Peter > On 17 Mar 2021, at 23:17, Jason Breitman > wrote: > > Thank you for the responses. > The NFS Client does properly negotiate down to 128

Re: NFS Mount Hangs

2021-04-08 Thread Peter Eriksson
interest unfortunately... Not really helpful but that it self-healed after a (long) while is interesting I think… - Peter > On 6 Apr 2021, at 01:24, Rick Macklem wrote: > > tue...@freebsd.org <mailto:tue...@freebsd.org> wrote: > [stuff snipped] >> OK. What is the

Re: RFC: NFS trunking (multiple TCP connections for a mount

2021-06-29 Thread Peter Eriksson
Windows SMB has a similar feature. Just avoid the Linux NFS mounting deadlock issue with “down” servers please :-) - Peter

IPSEC problems with pf

2021-09-24 Thread Peter Jeremy
ed me solve the problem. I don't understand: a) Why outgoing ICMP packets from firewall to VPS aren't going through the IPSEC transport. b) Why firewall is ignoring incoming IPSEC esp packets. Is anyone able to help? -- Peter Jeremy signature.asc Description: PGP signature

Re: IPSEC problems with pf

2021-09-26 Thread Peter Jeremy
(from the Internet) packets. At this point: * I can exchange encrypted packets locally between firewall and VPS * Encrypted packets sent from VPS will arrive at Host (once net.inet.ipsec.filtertunnel is set). * Packets sent from Host to VPS get sent unencrypted over the Internet. I'm confid

epoch callback panic

2022-04-01 Thread Peter Holm
/~pho/stress/log/log0275.txt - Peter

Re: epoch callback panic

2022-04-01 Thread Peter Holm
On Fri, Apr 01, 2022 at 10:33:15PM +0200, Hans Petter Selasky wrote: > On 4/1/22 19:07, Peter Holm wrote: > > markj@ asked me to post this one: > > > > panic: rw lock 0xf801bccb1410 not unlocked > > cpuid = 4 > > time = 1648770125 > > KDB: stack ba

named in a sand box.

2000-12-15 Thread Peter Brezny
riviliged user. But when i posed a related question on -questions, someone told me that sandbox = chrooted environment. I also want to know, if you are running named under an unpriviliged user, is it worth the extra trouble to run it chrooted? Thanks for your help. Peter Brezny SysAdmin

No Subject

2000-12-19 Thread Peter Brezny
and in order to keep things functioning until it's done, I'm gong to have to keep both the inside and outside nic's plugged into the same switch (which gives a lot of errors like this). /kernel: arp: 10.10.1.70 is on rl0 but got reply from (mac) on fpx0 TIA Peter Brezny SysAdmin Service

RE: (forw) Two NICs In FreeBSD

2001-01-04 Thread Peter Brezny
I find it useful, and not that big of a deal to shut off in syslog.conf. However, option c seems like a good idea. Peter Brezny SysAdmin Services Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Bosko Milekic Sent: Wednesday, January 03, 2001 11

RE: Problem with Multihomed Machine

2001-01-05 Thread Peter Brezny
ave a look at   http://www.bsdtoday.com/2000/December/Features359.html for yet another nat/ipfw how to. Peter Brezny SysAdmin Services Inc. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of SeanSent: Friday, January 05, 2001 4:31 AMTo: [EMAIL PROT

general question re: PTR records.

2001-01-06 Thread Peter Brezny
I've read through all of ch4 in dns & bind, and haven't come across anything that says you couldn't do it this way... Will named accept this? Is it just a really bad idea? TIA Peter Brezny SysAdmin Services Inc. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubsc

moving secondary name servers to primary

2001-01-09 Thread Peter Brezny
ndary files. TIA Peter Brezny SysAdmin Services Inc. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Redundant connections from separate isp's possible?

2001-01-17 Thread Peter Brezny
do i tell internic?...ns1 -->network range 1, ns2 -->network range 2 and have the name server hold an IP from each isp's network range? Thanks for your comments/suggestions. Peter Brezny SysAdmin Services Inc. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

ipfw not allowing udp?

2001-01-25 Thread Peter Brezny
zone transfers require more than just port 53? TIA Peter Brezny SysAdmin Services Inc. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

dns; default primary zone files get hard coded origin's on secondary.

2001-01-26 Thread Peter Brezny
first.domain.that.got.looked.up mailin a ip.of.mail.com Is there a way to get around this? my primary server is running bind 8.2.3-T6b and the slave server is running bind 8.1.2 Thanks in advance for your help. Peter Brezny SysAdmin Services Inc. To Unsubscribe: send

kernel arp messages with 2 nics, sysctl cntrl?

2001-02-02 Thread Peter Brezny
I thought I rememberd someone mentioning a sysctl control for turning off the kernel arp messages when you have two nics on the same (misconfigured) network, but I couldn't find it in the archives. Anyone know? Thanks. Peter Brezny SysAdmin Services Inc. To Unsubscribe: send mail to [

ipfw and dns

2001-02-02 Thread Peter Brezny
27;s perform an nslookup using my box as the server to do the queries on. TIA Peter Brezny SysAdmin Services Inc. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

ipfw not allowing dns traffic

2001-02-02 Thread Peter Brezny
nslookup's fail from outside the firewall on another machine in nslookup with server set to my firewall machine. What have i missed? Peter Brezny SysAdmin Services Inc. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: What's the callback mechanism?

2001-02-07 Thread Peter Wemm
he means something to do with the networking stack - possibly the socket upcall mechanism. Cheers, -Peter -- Peter Wemm - [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] "All of this is for nothing if we don't go to the stars" - JMS/B5 To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: somaxconn and foot removal

2001-02-11 Thread Peter Wemm
essing a dying connection, thus contributing further to the overload. Anyway, just be careful, ok? larger listen queues are not a magic solution for all problems. At 100 connections per second, the current limit is about 327 seconds worth of delay. at 500 per second, it is 65 seconds delay. Cheer

netgraph-mpd

2001-02-11 Thread Peter Blok
Hi, My DSL provider (KPN - mxstream) needs a PPTP connection. I am trying to use netgraph-mpd to make this work. Any experience good or bad with this? Peter To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

sysctl -w net.link.ether.inet.log_arp_wrong_iface=0 not working

2001-02-21 Thread Peter Brezny
iable stoped working? Feb 21 09:48:22 bsd1 /kernel: arp: 209.16.228.140 is on fxp0 but got reply from 00:10:4b:99:7f: 6e on rl0 TIA Peter Brezny SysAdmin Services Inc. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

ipfw simple quesiton

2001-02-22 Thread Peter Brezny
Hello, I've just added a second external interface to a machine. I'd like to not have to duplicate all the rules that involve outside interfaces. I've got rules like $fwcmd add deny all from 0.0.0.0/8 to any in via $oif is it possible to specify multiple interfaces for one rule by l

nat forwarding

2001-02-22 Thread Peter Brezny
After reading through the natd man page, I think I understand what I need to do to redirect requests to one specified ip to another, however, I don't understand where I put this config info. i currently start natd with rc.conf with the following lines: natd_enable="YES" #natd_config="/etc/rc.nat

Re: 802.1q vlans and STABLE

2001-02-22 Thread Peter Jeremy
many vlans ? On incoming 802.1Q packets, there's a linear search through a list of known VLAN numbers to determine the destination vlan device. Unless you're planning on lots of VLAN's, this probably isn't an issue. Peter To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

RE: 802.1q vlans and STABLE

2001-02-22 Thread Peter Blok
I am working with VLANs and a BayStack 450-T without stability problems, except when you configure NETGRAPH at the same time. The kernel crashes during boot-up. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mike Tancsa Sent: Friday, February 23, 2001 04

RE: 802.1q vlans and STABLE

2001-02-23 Thread Peter Blok
r machine I have VLAN and NETGRAPH compiled in, but haven't used the vlan interfaces yet. Maybe I'll do so this weekend to get to the bottom of this. Peter -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Julian Elischer Sent: Friday, February 23,

RE: netgraph pptp and alcatel adsl modems

2001-02-24 Thread Peter Blok
Stefan, You have to patch mpd-netgraph to make it work. I have recently found out how to use mpd-netgraph in such an environment. Attached my patch and config files. I don't have a written procedure yet. If you have questions, don't hesitate to e-mail me. Peter -Origin

RE: netgraph pptp and alcatel adsl modems

2001-02-25 Thread Peter Blok
e: netgraph pptp and alcatel adsl modems Peter Blok wrote: > > Name: mxstream.tar.gz >mxstream.tar.gzType: Unix Tape Archive (application/x-tar) > Enco

RE: 802.1q vlans and STABLE

2001-02-25 Thread Peter Blok
ng_ether_attach. I had difficulty re-producing this on my test machine, because the conf file was different. In my configuration the attach is probably not done because I don't have a couple of drivers configured in. I'm still looking at it. Peter -Original Message- From: [EMAIL

RE: 802.1q vlans and STABLE

2001-02-25 Thread Peter Blok
called and crashes. Im am now changing the load order of ng_ether to load in an earlier stage. I am not quite sure why it is not going wrong everytime. I have two configs. The one that is working fine only loads the i4b stuff. The other doesn't. Peter -Original Message- From: C. St

Re: 802.1q vlans and STABLE

2001-02-25 Thread Peter Jeremy
On 2001-Feb-23 10:52:17 +0100, "Pedro J. Lobo" <[EMAIL PROTECTED]> wrote: >On Fri, 23 Feb 2001, Peter Jeremy wrote: >> - VLAN support in driver modules for the above drivers > >Including fxp? My code only supports vlan in modules for the 558 and 559 >controller

sendfile with headers (struct sf_hdtr)

2001-02-26 Thread Peter Lawthers
When using sendfile(2) with the optional headers, it appears that sendfile inadvertently returns the number of bytes written via writev (writev updates p_retval[0]). I checked through the archives, and it doesn't appear that I'm using sendfile(2) incorrectly, although that's always a possibility.

Re: sendfile with headers (struct sf_hdtr)

2001-02-28 Thread Peter Lawthers
Actually, sendfile(2) returns either 0 or -1 (with errno set). The optional 'sbytes' argument indicates how many bytes were sent. Maybe I wasn't clear in my original posting. If you use the optional headers, then the *return value* from sendfile is non-zero, and is *only * the amount sent via wr

DNS problems with hub.freebsd.org

2001-02-28 Thread Peter Brezny
--> 209.16.228.150 Could someone please bump that system and have it update the cache.?... TIA Peter Brezny To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

static nat problem

2001-02-28 Thread Peter Brezny
I want to be able to forward all traffic coming to an external ip to an internal ip. I currently have nat configured and working so that all private internal addresses are translated to a public ip as they leave the firewall machine on their way out, but after reading the man page a couple of tim

natd - static nat on multiple aliased ip's

2001-03-07 Thread Peter Brezny
Let's say I had two internal subnets that i'd like to nat with different external ip's, while also doing static nat on one of each of the internal ip's. Could i do that by doing something like thils: rc.conf natd_flags="-f /etc/natd.conf1" natd_flags="-f /etc/natd.conf2" rc.firewall $fwcmd add

advice on network plan

2001-03-09 Thread Peter Brezny
| 10.30.x.x--fbsd-gw_ipfw--wireless ethernet--fbsd_gw_ipfw customer networkcustomer network Your suggestions and criticisms are appreciated. Peter Brezny purplecat.net To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

route clarification

2001-03-13 Thread Peter Brezny
I've managed to get things working, but I've still got a question or two. Here's what i'm working with > internet firewal/nat box client firewall client lan. >pub pub/10.30.1.110.30.1.20/10.20.21.1 10.20.21.x >From Right to Left, each machine's default GW is

<    1   2   3   4   5   >