Re: cleaning up INET: deprecating network class A/B/C

2021-10-23 Thread Mike Karels
ld be > > > > deprecated, as they use the historical masks. inet_makeaddr() is > > > > almost as bad; it works almost by accident as long as a mask is a > > > > multiple of 8 bits. I'd like to remove their use from the base > > > > system. Unfort

cleaning up INET classes: first batch of reviews

2021-10-28 Thread Mike Karels
://reviews.freebsd.org/D32714 sockstathttps://reviews.freebsd.org/D32715 sendmailhttps://reviews.freebsd.org/D32716 Thanks, Mike

netmask for loopback interfaces

2021-11-03 Thread Mike Karels
use of the mask on a loopback address? Thanks, Mike

Re: netmask for loopback interfaces

2021-11-04 Thread Mike Karels
Jamie wrote: > Oleksandr Kryvulia wrote: > > 04.11.21 01:01, Mike Karels wrote: > > > I have a pending change to stop using class A/B/C netmasks when setting > > > an interface address without an explicit mask, and instead to use a > > > default > > &

Re: netmask for loopback interfaces

2021-11-04 Thread Mike Karels
Rod wrote: > > Jamie wrote: > > > > > Oleksandr Kryvulia wrote: > > > > > > 04.11.21 01:01, Mike Karels wrote: > > > > > I have a pending change to stop using class A/B/C netmasks when > > > > > setting > >

reviews for INET class A/B/C reduction: last call

2021-11-05 Thread Mike Karels
kstathttps://reviews.freebsd.org/D32715 systat https://reviews.freebsd.org/D32720 Thanks, Mike

Re: genet and ALTQ

2021-12-04 Thread Mike Karels
u find that it works. I suspect the list in altq(4) is rather incomplete/out-of-date. > thanks, > -- > J. Mike

kernel epoch crash in IPv4 multicast code

2022-03-18 Thread Mike Karels
h. I tried adding epoch handling in add_mfc(), and that seems to work. The alternative would be to do it in Xip_mrouter_set() so it would cover all the calls. Any opinions? Mike (kgdb) bt #0 __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55 #1 doadump (textdump=textdu

Re: kernel epoch crash in IPv4 multicast code

2022-03-21 Thread Mike Karels
Kristof wrote: > On 18 Mar 2022, at 19:02, Mike Karels wrote: > > It looks like the IPv4 multicast code has not been fully converted to > > use epochs. I installed this week's snapshot of -current, configured > > and started mrouted, and started rwhod -m.

Re: tap0 don't receive anything in a vm

2022-05-15 Thread Mike Karels
17:55:25: [bhyve options: -c 1 -m 2G -Hwl > bootrom,/usr/local/share/uefi-firmware/BHYVE_UEFI_CSM.fd -U > ac3dafab-bedb-11ec-b24d-1402ec690a80 -u] > May 15 17:55:25: [bhyve devices: -s 0,hostbridge -s 31,lpc -s > 4:0,virtio-blk,/vms/utm/disk0.img -s > 5:0,virtio-net,tap0,mac=58:9c:

Re: Ratelimint Enhancement patch (Please Review One Last Time!)

2000-12-13 Thread Mike Silbersack
bove the allowed amount. Hence, there's no significant overhead to having counters for each seperate type. The main reason tstamp is distinct from echo is so that they can be reported correctly. Given that they are distinctly different packets, I think this makes sense. (And has less overhea

Re: Ratelimint Enhancement patch (Please Review One Last Time!)

2000-12-13 Thread Mike Silbersack
mp-error. How much further you want to > push it is debatable mainly just because of the hastle of too many > unnecessary tunables, not for any real performance or memory reasons. I wasn't planning to subdivide the reporting any more in future patches, so you shouldn't see any new

Re: Ratelimint Enhancement patch (Please Review One Last Time!)

2000-12-13 Thread Mike Silbersack
nitpick. I'll roll an updated patch with less casual messages so we can get it committed soon. Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Updated ratelimit patch

2000-12-14 Thread Mike Silbersack
iting icmp ping response from 211 to 200 packets per second Limiting icmp tstamp response from 394 to 200 packets per second No other changes have been made, and the updated patch is available at: http://www.silby.com/patches/ratelimit-enhancement-3.patch Mike "Silby" Silbersack To Un

Re: what to do now ? Was: cvs commit: src/sys/netinet ip_icmp.ctcp_subr.c tcp_var.h

2000-12-18 Thread Mike Silbersack
ill IPSEC connections too. (?) If so, it would allow a simple packet sniffer and spoofer to defeat all the fancy crypto in use. (If someone's more familiar with IPSEC and this patch could clarify, it would be appreciated.) Mike "Silby" Silbersack To Unsubscribe: send mail to [EMA

Re: Hacked computer

2000-12-19 Thread Mike Nowlin
- usually, the former contents of /var/log/* will show up as large chunks that are easily read... Turns out I found this guy's IP address and the time the system was blasted - a call to MCI resulted in a small amount of satisfaction... --mike To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

bidir "ppp -auto" & IP addr conflicts

2000-12-26 Thread Mike Nowlin
devel208 ppp[]: tun1: IPCP: deflink: LayerDown: Interface configuration error ! ...I understand WHY this is blowing up, but so far, I haven't found a way to fix it. Any ideas? -- mike To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Automating rc.firewall update from dhclient.leases

2000-12-30 Thread Mike Gruver
> I have a FreeBSD server as a gatewar and firewall for a small LAN. It is > running NATD for the LAN with non-routable IPs on the secondary adapter, as > it is a dual-homed host, it uses DHCP to get an IP from the ISP for the > primary adapter. This presents a problem occasionally when a new le

RE: natd not translating ESP packets

2001-01-02 Thread Cambria, Mike
Updating my ipfw/natd system to 4.2-Release worked. MikeC -Original Message- From: Blaz Zupan [mailto:[EMAIL PROTECTED]] Sent: Friday, December 29, 2000 11:18 AM To: Michael C. Cambria Cc: [EMAIL

Re: Spoofing multicast addresses

2001-01-09 Thread Mike Silbersack
e an idea on what the performance impact of the multicast checks really is? Just having a single check at the top of the code would be nice from a readability standpoint. Speaking of stream, I wonder if proper multicast checks are done for icmp responses. Hrm. Mike "Silby" Silbersack

Re: Problem with fxp0 card and slowing/dying transmits

2001-01-10 Thread Mike Tancsa
0 autoselect However, with some switches, its a waste of time. Best to set things manually on both ends if you can. ifconfig fxp0 media 100baseTX mediaopt full-duplex netstat -ni and netstat -s will show duplex mismatches typically on input errors. ---Mike Mike Tancsa ([EMAIL PRO

Re: NTP hardware ?

2001-01-13 Thread Mike Nowlin
most purposes, the +- 1 sec resolution it provides is good enough. The rcvrs I have all have 1PPS output, but I haven't done anything with that yet to get the accuracy down to that point. mike To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

NATD/IPSec tunnel glitches..

2001-01-13 Thread Mike Burgett
ly know where to start. Constructive suggestions welcome. I'm in the process of cvsup'ing to a current -stable, and will be rebuilding that sometime this afternoon. Thanks, Mike To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: icmp-response bandwidth limit?

2001-01-20 Thread Mike Silbersack
uld be no need to worry, though your curiosity may drive you to use a packet sniffer next time it happens. Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: IPComp question

2001-02-02 Thread Mike Silbersack
comparisons, looking back and ahead all the time. It's quite amazing to me that a compression algorithm even comes close to the speed of an encryption algorithm, frankly. Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: ipfw not allowing dns traffic

2001-02-02 Thread Mike Silbersack
erfluous lookups which will display false failures in many cases. Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

PPP - CHAP failure after CHAP success???

2001-02-02 Thread Mike Nowlin
ing CHAP again, and what happened to my RADIUS server? README.changes diffs only mentioned MSCHAPv2 and MPPE changes - disabled both of those, but it doesn't make any difference. --mike Feb 2 16:06:56 rimmer ppp[320]: tun1: Phase: bundle: Authenticate Feb 2 16:06:56 rimmer ppp[320]: tun1:

Re: PPP - CHAP failure after CHAP success???

2001-02-02 Thread Mike Nowlin
ay to trigger a "show timer" in the source at a certain point, I'd be happy to try that... Thanks - Mike Feb 3 01:37:39 twikki ppp[77098]: Phase: Using interface: tun3 Feb 3 01:37:39 twikki ppp[77098]: Phase: deflink: Created in closed sta te Feb 3 01:37:39 twikki ppp[77098]

Re: PPP - CHAP failure after CHAP success???

2001-02-02 Thread Mike Nowlin
e that the log sections I chopped out were so big until after I sent the message mike To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: PPP - CHAP failure after CHAP success???

2001-02-03 Thread Mike Nowlin
radius(acct): No RADIUS servers specified ...and it doesn't exit at this point now. Thanks - mike To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

PCMCIA 10/100BaseT Cards That Support Promiscuous Mode

2001-02-05 Thread Mike Bytnar
t;Low Power Ethernet Adapter (Socket Communications, Inc)" PCMCIA card does not support promiscuous mode. Regards, --Mike To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

NFS - 'showmount' returns non-existant connections

2001-02-06 Thread Mike Bytnar
, any new connections create additional entries in the list returned by showmount. Any ideas? Thanks, --Mike To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: What is the latest "known-good" PXE build ?

2001-02-06 Thread Mike Smith
> > > The BIOS trace says the PXE is revision 2.0, build 68 : is there some other, > > > perhaps better version of it ? (the on-board NIC on the machine is an fxp) > > > > Build 068 is a disaster; you ideally want 082 or later. > > is there some standard way to upgrade the pxe code on the cards

Re: What is the latest "known-good" PXE build ?

2001-02-06 Thread Mike Smith
> > The BIOS trace says the PXE is revision 2.0, build 68 : is there some other, > perhaps better version of it ? (the on-board NIC on the machine is an fxp) Build 068 is a disaster; you ideally want 082 or later. > PS : As I've seen, rc has been modified to get rid of > "early_nfs_mounts". Aft

Re: call for testers: port aggregation netgraph module

2001-02-09 Thread Mike Smith
> I've just finished scouring Cisco's documentation, and it doesn't look > like FEC is anything beyond plain old trunking (with the option of > autoconfiguration on some hardware). As long as you configure the > appropriate ports on the switch on the other end as "SA-Trunk", or > "Trunk", you sho

Re: Meditation on rl driver

2001-02-09 Thread Mike Tancsa
supported media: autoselect 100baseTX 100baseTX 10baseT/UTP 10baseT/UTP 100baseTX cage# ---Mike Mike Tancsa ([EMAIL PROTECTED]) Sentex Communications Corp, Waterloo, Ontario, Canada "Given enough time, 100 monkeys on 100 routers could setup a national

Cloned routes and refcounts question

2001-02-10 Thread Mike Silbersack
leak is coming from in the cloning process? I'm not very familiar with the route table at this moment. Thanks, Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: Cloned routes and refcounts question

2001-02-10 Thread Mike Silbersack
On Sat, 10 Feb 2001, Mike Silbersack wrote: > Out of curiousity, I checked the route table on my 4.2 box, which is on a > different network and wasn't participating in the syn-fun whatsoever. > Sure enough, it has more refcounts to its gateway than it should too: >

ipfw command "in xmit " and "out recv " invalid?

2001-02-13 Thread Mike Bytnar
n xmit xl1 [ipfw usage displayed] (Using 4.2-STABLE from a week ago.) Thanks, --Mike To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: KLD'fying PCI device driver!

2001-02-15 Thread Mike Smith
> Hi > > I am trying to convert my PCI device driver into a KLD. > > So far I have done the following: > 1. Built the kernel without the static linked device driver. > 2. Added entries to Makefiles in /sys/modules and /sys/modules/xxx. > 3. Did "make all install" in /sys/modules directory. > 4.

Re: KLD'fying PCI device driver!

2001-02-15 Thread Mike Smith
> > > I am trying to convert my PCI device driver into a KLD. > > > > > > So far I have done the following: > > > 1. Built the kernel without the static linked device driver. > > > 2. Added entries to Makefiles in /sys/modules and /sys/modules/xxx. > > > 3. Did "make all install" in /sys/modules d

802.1q vlans and STABLE

2001-02-22 Thread Mike Tancsa
hits if I have too many vlans ? If I recall correctly, in LINUX, there used to be a performance hit if you had too many interfaces. Mike Tancsa, tel +1 519 651 3400 Network Administration

Re: 802.1q vlans and STABLE

2001-02-24 Thread Mike Tancsa
At 11:17 AM 2/24/2001 -0500, C. Stephen Gunn wrote: >2/3 of our traffic started showing up on the wrong logical network. How did you work around it ? Or were you able to ? ---Mike To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in th

questions re: multiple internet conn routing

2001-03-04 Thread Mike Nowlin
address. I'm guessing that netgraph might be involved, but I haven't ever looked at it much more than the examples provided... (If netgraph is involved, I may need a little more help than "Yes, it can be done." :) ) Third question: I vaguely remember that netgraph packets d

Re: Intel (fxp) replacement

2001-03-07 Thread Mike Tancsa
ue with some switches that result in SCB timeout errors. There were patches posted, but have not been committed. [EMAIL PROTECTED] also raised an issue with smaller packets not being able to forward at full rate. There are also some VLAN patches that would be nice to see integrated. --

Re: Intel 82562 chip breaks fxp driver?

2001-03-12 Thread Mike Tancsa
from memory and I could be wrong. ---Mike On 12 Mar 2001 02:52:46 -0500, in sentex.lists.freebsd.net you wrote: >I have just built up a 4.2-RELEASE system with an brand new Intel D815EEA >motherboard that has onboard ethernet using the 82562 chipset. > >The card stops every

Re: PPPoE

2001-03-12 Thread Mike Tancsa
ly, my box stays connected unless there is some sort of layer one interruption, or the DSLAM reboots and I have have to re-synch. But it always comes back after that, right away on its own which is more than I can say for the other implementations. ---Mike Mike Tancsa ([EMAIL PRO

Re: A few nasty bugs in the networking code

2001-03-20 Thread Mike Tancsa
0:fc:1e:3b:dc cbackup2# arp -d 192.168.112.2 delete: can't locate 192.168.112.2 cbackup2# I dont have a test server to try them out just yet. ---Mike Mike Tancsa ([EMAIL PROTECTED]) Sentex Communications Corp, Waterloo, Ontario, Canada "Given enough time,

Re: A few nasty bugs in the networking code

2001-03-20 Thread Mike Tancsa
; >No, because SNMP and potentially other network management utilities >need to know about it. Is there a work around for the arp -d issue then ? ---Mike Mike Tancsa ([EMAIL PROTECTED]) Sentex Communications Corp, Waterloo, Ontario, Canada "Given

Re: dhclient not setting IP ...

2001-03-24 Thread Mike Nowlin
pretty much proves that's the problem. Now if I could just figure out why one of my DSL providers keeps getting the MAC address for the >inside< ethernet card of my firewall for some (not all) IPs... mike PGP signature

Re: Intel driver doc's Take 2.

2001-03-25 Thread Mike Nowlin
sure ALL of us would appreciate the fix that results from this... mike PGP signature

Re: ucd snmp and MIBs for turbostack TS24tr

2001-03-26 Thread Mike Nowlin
in the right spot, the snmp utils will tend to ignore it unless you set MIBS=ALL (or MIBS=some_weird_thing_that_tells_it_to_only_grab_the_ones_you_want).. mike PGP signature

Re: Kernel Panic on 4.3-RC #0 using PPPoE

2001-03-27 Thread Mike Tancsa
At 12:40 PM 3/27/2001 -0800, Archie Cobbs wrote: >Mike Tancsa writes: > > >Not sure why this hasn't been detected before though. Below is > > >a possible patch. > > > > It has been at http://www.freebsd.org/cgi/query-pr.cgi?pr=25478 and > > discusse

Re: AX.25 or maybe X.25 support?

2001-04-08 Thread Mike Nowlin
;s security-sensitive, and you might have something worth running... I could rant on for hours. --mike N8NVW PGP signature

Re: non-random IP IDs

2001-04-16 Thread Mike Silbersack
cy, but certainly enough to justify a sysctl. Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: fxp+bridge: highly suspect syndrom.

2001-04-16 Thread Mike Tancsa
On 16 Apr 2001 02:05:45 -0400, in sentex.lists.freebsd.net you wrote: > > What is Jonathan Lemon's driver and where I can get it? http://www.flugsvamp.com/~jlemon/fbsd/drivers/Intel_EtherExpress/ ---Mike Mike Tancsa ([EMAIL PROTECTED]) Sentex Communic

Re: Selective Acknowledgments ?

2001-04-24 Thread Mike Silbersack
On Tue, 24 Apr 2001, Toni SOUEID wrote: > Hello, > Please can anyone tell me if the TCP protocol in > FreeBSD 4.2 supports Selective Acknowledgments > (SACK). SACK is not supported in any version of FreeBSD at this time. Mike "Silby" Silbersack To Unsubscribe: send ma

number of interfaces and performance ?

2001-04-26 Thread Mike Tancsa
, or should I spend the $8K on a 3640 ? The largest I have right now is one with 8 active VLANs and it works very well, but nothing over 10 and nothing pushing 30+. I have built the box and it works well enough in the lab, but I dont know of course how it will work in production. ---Mike

Re: number of interfaces and performance ?

2001-04-26 Thread Mike Tancsa
ill route significantly slower or add a lot of latency. ---Mike To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: number of interfaces and performance ?

2001-04-26 Thread Mike Tancsa
ICs. Thanks for the data point. Have you ever tried increasing the interface count above 18 to say 33 ? >For VLANs I use patch to allow passing IP packets 1500byte size. Yes, I use that one as well. ---Mike -----

Re: number of interfaces and performance ?

2001-04-26 Thread Mike Tancsa
ld two 30VLAN FreeBSD boxes than one equiv Cisco router or switch Cheaper to maintain as well. ---Mike Mike Tancsa ([EMAIL PROTECTED]) Sentex Communications Corp, Waterloo, Ontario, Canada "Given enough time, 100 monkeys on 100 routers could setup a natio

Re: problem to setup VLAN

2001-04-29 Thread Mike Tancsa
VLAN devices for your setup (e.g. pseudo-device vlan5 #VLAN support ) see the pages for how to use ifconfig e.g. ifconfig vlan1 192.168.1.2 netmask 255.255.255.0 vlan 101 vlandev fxp1 mtu 1500 up will configure vlan1 on fxp1 with vlan ID 101 ---Mike >Hi all, >

Re: number of interfaces and performance ?

2001-04-26 Thread Mike Tancsa
dwidth than I need. Like I said, I am only going to push tops 30Mb/s through the thing. The cisco would certainly do the job, but I am still looking at 10 times the cost. If I need to spend the money I will, I just hate spending the money needlessly. ---Mike To Unsubscribe: send mail

New TCP sequence number generation algorithm; review needed

2001-06-08 Thread Mike Silbersack
Do you really think anyone read this far into the FAQ? A: I hope so. Q: Do you have anything more to add before I go off and read your code? A: Nope. Enjoy! Mike "Silby" Silbersack diff -u -r netinet.old/tcp_input.c netinet/tcp_input.c --- netinet.old/tcp_input.c Thu Jun

Re: New TCP sequence number generation algorithm; review needed

2001-06-08 Thread Mike Silbersack
Those who were unable to use the attached patch for whatever reason may also access it at: http://www.silby.com/patches/silby_isn_generation.patch Thanks, Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: New TCP sequence number generation algorithm; review needed

2001-06-08 Thread Mike Silbersack
package that depended on predictable sequence numbers would've broken twice in the last 9 months already. If there were any complaints at those times, they didn't appear on the lists, and didn't lead to the ISN generation being changed then. If you're in one of the above classes of people, I'd like to hear from you to better understand the issue; the NECP RFC draft didn't appear to have any information on this topic, as far as I could tell. Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: New TCP sequence number generation algorithm; review needed

2001-06-08 Thread Mike Silbersack
For those interested, I've put up a patch which will show you the ISNs used for outgoing connections with the new generation method at: http://www.silby.com/patches/silby_isn_generation_debug.patch Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] wi

Re: New TCP sequence number generation algorithm; review needed

2001-06-08 Thread Mike Silbersack
t would actually add any security. I've been requested to pose the algorithm to people from outside the FreeBSD project and what they think about its strength. When I hear back from them, I'll post more details. Terry needs to clarify his objections. #3 is the only one which is definitely va

Re: New TCP sequence number generation algorithm; review needed

2001-06-10 Thread Mike Silbersack
reeBSD to it. I've been asked by others to talk to end2end, and I will be doing that soon. Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: SACK code patch for FreeBSD 4.3

2001-06-13 Thread Mike Silbersack
8859-1/books/handbook/contrib.html > . Sounds cool, please notify the list when you reach major milestones (or put up a webpage with such info.) SACK's a feature many of us have been wanting for a while, and I suspect that a lot of us would be willing to help test it. Mike "Silby&quo

tcp template removal / scalability patch

2001-06-19 Thread Mike Silbersack
tached two patches; one for current, and one for stable. Please review / test, _especially_ if you're using IPv6 or IPSec - while those cases look correct, I'm not running either and haven't tested them. Thanks, Mike "Silby" Silbersack Only in netinet.old/: i

Re: tcp template removal / scalability patch

2001-06-19 Thread Mike Silbersack
hange t_template to unused and avoid the issue altogether. You're right, only a programming error would fill that field now. Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: tcp template removal / scalability patch

2001-06-19 Thread Mike Silbersack
tion system. The only effect it had until that point was in keepalive generation, which is unimportant, and would have broken non-4.2 host keepalives. So, it's extremely unlikely anyone is/was using TCP_COMPAT_42. Please kill it. :) Mike "Silby" Silbersack To Unsubscribe: send mail t

Re: tcp template removal / scalability patch

2001-06-19 Thread Mike Silbersack
On Tue, 19 Jun 2001, Mike Silbersack wrote: > Looking back, I should change the keepalive case so that it never needs > the tcp template; this will require simple mods to tcp_respond. I'll > change this and make a new patch soon. Blech. tcp_respond doesn't look friendly, a

Re: Securing the root account

2001-06-19 Thread Mike Silbersack
On Tue, 19 Jun 2001, Orville R. Weyrich.Jr wrote: > Speaking of SSH, are there any recommended SSH clients for Windows 95? > > orville. SecureCRT is nice, if you want to cough up some cash. There's a trial version which will run for 30 or so days. Check it out at www.vandyke.co

Re: tcp template removal / scalability patch

2001-06-21 Thread Mike Silbersack
tools expecting the existing structure. - All t_templates = NULLs and checks to make sure it was null have been removed. I think it's ready for commit now, please review. Thanks, Mike "Silby" Silbersack diff -u -r netinet.old/tcp_input.c netinet/tcp_input.c --- netinet.old/

Re: Securing the root account

2001-06-22 Thread Mike Silbersack
ng to learn Russian until next week Thursday, so I'll have to fumble through it until then. :) Who wrote it / what ssh library is it based off of? Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: Securing the root account

2001-06-22 Thread Mike Silbersack
On Fri, 22 Jun 2001, Mike Silbersack wrote: > > On Fri, 22 Jun 2001, Rashid N. Achilov wrote: > > > Nicest SSH client for Windows is "SSH for Windows" :-) It called so. > > http://winssh.narod.ru/files/ssh-1.1.1.zip. Textmode, SSH2 support, > > freeware(!),

Re: select fails to return incoming connect on FreeBSD-4.3

2001-06-27 Thread Mike Silbersack
es right now, I've e-mailed kris and asked if he objects to me adding a sysctl which switches between the current and old generation schemes. If he says it's ok, I'll commit it soon and those affected will be able to use the old generation scheme. Mike "Silby" Sil

Re: select fails to return incoming connect on FreeBSD-4.3

2001-06-27 Thread Mike Silbersack
On Wed, 27 Jun 2001, Glenn Johnson wrote: > On Wed, Jun 27, 2001 at 03:00:31PM -0500, Mike Silbersack wrote: > > > It's a feature, not a bug. :) > > > > Since everyone's on vacation and we can't switch generation schemes > > right now, I've e-

Re: select fails to return incoming connect on FreeBSD-4.3

2001-06-27 Thread Mike Silbersack
whip together a patch and send it to you for review sometime this weekend. Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: fastforwarding?

2001-06-29 Thread Mike Tancsa
ortantly, without traversing ipfw or ipfilter. In other >words, don't use this on a firewall. Are there any other caveats ? I seem to recall from way back something about this (or maybe I am thinking of something else) being count sensitive. e.g. that over x amount of routes, its not wor

Re: select fails to return incoming connect on FreeBSD-4.3

2001-07-01 Thread Mike Silbersack
ses now, for simplicity's sake. Please review, especially if you're experiencing the TIME_WAIT problem. Thanks, Mike "Silby" Silbersack diff -u -r netinet.old/tcp_input.c netinet/tcp_input.c --- netinet.old/tcp_input.c Sun Jul 1 20:44:50 2001 +++ netinet/tcp_input.c

Can I define a SPD per interface?

2001-07-02 Thread Cambria, Mike
I can only find a way to define a global SPD using setkey. Is it possible to define an (IPv4) SPD on a per interface basis using KAME / FreeBSD4? If not, are there any plans to add this in the future? Is there any reason one wouldn't want to have this? Thanks, MikeC To Unsubscribe: send ma

Re: select fails to return incoming connect on FreeBSD-4.3

2001-07-02 Thread Mike Silbersack
bs mail list to let the FreeBSD users know what to do. > > Thank you very much for fixing this. > > -- > Glenn Johnson Good. Once I hear back from another -net committer on this, I'll get it committed. Thanks for the quick test. Mike "Silby" Silbersack To Unsubs

Re: PPPoE latency

2001-07-03 Thread Mike Tancsa
ally add On my 486 gateway, I found using ipnat made a big difference in overall throughput for my machines behind the DSL box. With a faster CPU, the differences become much less measurable. ---Mike Mike Tancsa ([EMAIL PROTECTED]) Sentex Communications Corp,

RE: (KAME-snap 5064) Can I define a SPD per interface?

2001-07-03 Thread Cambria, Mike
>I can only find a way to define a global SPD using setkey. Is it possible >to define an (IPv4) SPD on a per interface basis using KAME / FreeBSD4? >If not, are there any plans to add this in the future? >Is there any reason one wouldn't want to have this? no. do you want SPD per inte

Re: UDP packet loss on FreeBSD 4.x

2001-07-11 Thread Mike Silbersack
hile the dc driver goes straight into mbufs if possible. That might not explain a slowdown in overall throughput, but it does mean that dc cards have a 4x larger incoming packet queue than xl cards. Back to netstat -m. If you see that your peak number of clusters is hitting the max, that's

Re: (forw) Re: A question about submitting new drivers

2001-07-12 Thread Mike Smith
s internal use. The ifconfig changes were meant to make it easier for folks like yourselves to provide network interface drivers without having to integrate them tightly with the kernel tree; let me know if we're still falling short... Regards, Mike -- ... every activity meets with oppositio

Re: UDP packet loss on FreeBSD 4.x

2001-07-13 Thread Mike Silbersack
east with respect to the xl driver) is that it uses the mii > driver now. > > Thanks anyway, > Martin Hm, that's too bad. I'd help... but I don't have any driver experience either. :| Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: TCP ISN algorithm breaks TIME_WAIT (Re: select fails to returnincoming connect on FreeBSD-4.3)

2001-07-16 Thread Mike Silbersack
perating systems > that use randomized ISNs. Linux has been doing this for quite some > time. As a result, we can not rely on monotonely increasing ISNs > anyway. I just looked at a copy of 2.4.1, and it appears to use a RFC1948-like algorithm. I think 2.0 was randomized, but more recent ve

Re: router question

2001-07-17 Thread Mike Tancsa
On 16 Jul 2001 13:44:00 -0400, in sentex.lists.freebsd.net you wrote: http://www.etinc.com makes cards like that which support FreeBSD. ---Mike >Does anyone know if there's a inbound T1 line with RJ45 >connector will work with my FreeBSD box without >connecting to a CISC

Re: 802.1q and multicasting

2001-07-19 Thread Mike Tancsa
ernet header for payload < 46 it strip padding bytes also. But when it reinserted data with another vlan header it don't add padding bytes and we have runts packets on interface..." Mike Tancsa ([EMAIL PROTECTED]) Sentex Communications Corp, Waterloo, Ontar

Re: MPLS

2001-07-19 Thread Mike Tancsa
On 18 Jul 2001 06:35:39 -0400, in sentex.lists.freebsd.net you wrote: >Will MPLS and MPLS-TE (and MPLS VPL L2 and L3) be implemented >under FreeBSD ? No idea, but there is _talk_ about it from time to time on www.zebra.org ---Mike Mike Tancsa ([EMAIL PROTECTED])

TCP sequence numbers: RFC1948 patch ready for testing

2001-07-24 Thread Mike Silbersack
lease look this over carefully when reviewing. Note that this patch is _functionally_ complete, but does not yet remove cruft from other generation schemes; I will do this in the final version of the patch. Enjoy! Mike "Silby" Silbersack diff -u -r netinet.old/tcp_input.c netinet/tcp

Re: TCP sequence numbers: RFC1948 patch ready for testing

2001-07-25 Thread Mike Silbersack
is rather dependant on usage of the box. I'll check with Mark Murray on this. (And in 4.x, I'll use read_random_unlimited so that the entropy doesn't get truncated.) Thanks for the comments, Mike "Silby" Silbersack > > Regards, > Barney Wolff > > On Tue, J

Re: TCP sequence numbers: RFC1948 patch ready for testing

2001-07-25 Thread Mike Silbersack
connections", I was referring to delaying the establishment of a few connections when TIME_WAIT wraparound occurs, not the termination of active connections. I apologize for the confusion. Mike "Silby" Silbersack To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: review request: ng_split cleanup

2001-07-26 Thread Mike Smith
> >This hunk is needed for lint(1) to recognize special comments. > >Don't remove it. > > The '/*-' part? What does lint do special with those? It's actually a signal to indent(1) to leave the comment's formatting alone. See the manpage. -- ... every activity meets with opposition, everyone

FreeBSD 4.3 -> Windows 2000 Network Performance

2001-07-30 Thread Mike Wade
t.inet.tcp.recvspace=65535 Does anyone have any opinions on how to tweak the performance on either end? Thanks in advance! --- Mike Wade ([EMAIL PROTECTED]) Network Engineer To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

RE: FreeBSD 4.3 -> Windows 2000 Network Performance

2001-08-01 Thread Mike Wade
On Mon, 30 Jul 2001, Deepak Jain wrote: > Have you tried the Windows 2000 -> Windows 2000 scenario? I botched the whole testing process... It appears the performance for both FreeBSD and Windows 2000 is ~350 mbit/sec. --- Mike Wade ([EMAIL PROTECTED]) Network Engineer To Unsubscribe

<    1   2   3   4   5   6   7   8   9   10   >