Re: Any objections/comments on axing out old ATA stack?

2013-04-20 Thread Bernd Walter
On Thu, Apr 04, 2013 at 12:15:32AM +0200, Matthias Andree wrote: > I have just sent more information to the PR at > http://www.freebsd.org/cgi/query-pr.cgi?pr=157397 > > The short summary (more info in the PR) is: > > - limiting tags to 31 does not help > > - disabling NCQ appears to help in ini

Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Marcelo Gondim
Hi all, I'm doing tests with mpdas pppoeserver. Tried to simulate an attack of 1000 connections using an incorrect login and after a certain time can cause a kernel panic in the system. Below the panicgenerated: http://pastebin.com/nUXGVR3y Other equipment I do: # for (( i=0; i < 1000; i++

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Adrian Chadd
Can you provide more information about the configuration of mpd and ppp? the panic is in the dummynet code; can you provide information about your ipfw/dummynet setup? Thanks, adrian On 20 April 2013 06:21, Marcelo Gondim wrote: > Hi all, > > I'm doing tests with mpdas pppoeserver. Tried to

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Eugene Grosbein
On 20.04.2013 20:21, Marcelo Gondim wrote: > Hi all, > > I'm doing tests with mpdas pppoeserver. Tried to simulate an attack of > 1000 connections using an incorrect login and after a certain time can > cause a kernel panic in the system. Below the panicgenerated: > > http://pastebin.com/nUXGVR

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Marcelo Gondim
Hi Adrian, Thanks for your help. :) My mpd.conf: startup: # configure mpd users #set user foo bar admin set user suporte papatango set user admin tutumineiro admin # configure the console set console self 192.168.8.34 5005 set

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Marcelo Gondim
Em 20/04/13 13:10, Eugene Grosbein escreveu: On 20.04.2013 20:21, Marcelo Gondim wrote: Hi all, I'm doing tests with mpdas pppoeserver. Tried to simulate an attack of 1000 connections using an incorrect login and after a certain time can cause a kernel panic in the system. Below the panicgenera

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Eugene Grosbein
On 21.04.2013 00:26, Marcelo Gondim wrote: >> You seem to use dummynet and the problem is not in mpd/pppoe code, >> it's it the dummynet code. Look at >> http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/162558 >> for workarounds. > Ok :) I will try this: > > - net.isr.bindthreads=1 in /boot/loa

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Marcelo Gondim
Hi, My ipfw rules, pf rules and dummynet: fw="/sbin/ipfw" ext_if="igb0" $fw disable one_pass $fw -f flush $fw zero $fw table all flush $fw -f pipe flush ssh_port="4321" $fw add allow all from any to any via lo0 $fw add deny all from 127.0.0.0/8 to any $fw add deny all from any to 127.0.0.0/8 $fw

Re: Unable to get sendmail submission port to listen on IPv6

2013-04-20 Thread Beat Siegenthaler
On 19.04.13 16:00, Jeremy Chadwick wrote: >> Hi all, >> >> I did not recognize that 587 is only listening onIy on IPv4. Maybe it's >> new, maybe it was alltime so. >> >> sendmail 25090 root 4u IPv4 0xfe01e810f3d0 0t0 TCP *:25 >> (LISTEN) >> sendmail 25090 root 5u IPv6 0x

Re: Unable to get sendmail submission port to listen on IPv6

2013-04-20 Thread Hajimu UMEMOTO
Hi, > On Sat, 20 Apr 2013 20:15:46 +0200 > Beat Siegenthaler said: beat.siegenthaler> Did somebody managed to have 587 listening v6? with 9-STABLE Yes, it's working fine on my 9-STABLE box. % sockstat | grep sendmail smmspsendmail 18673 3 dgram -> /var/run/log root

Re: Unable to get sendmail submission port to listen on IPv6

2013-04-20 Thread Matthew Seaman
On 20/04/2013 19:15, Beat Siegenthaler wrote: > On 19.04.13 16:00, Jeremy Chadwick wrote: >>> Hi all, >>> >>> I did not recognize that 587 is only listening onIy on IPv4. Maybe it's >>> new, maybe it was alltime so. >>> >>> sendmail 25090 root 4u IPv4 0xfe01e810f3d0 0t0 TCP *:25 >>>

Re: Any objections/comments on axing out old ATA stack?

2013-04-20 Thread Jeremy Chadwick
On Thu, Apr 04, 2013 at 10:00:18AM +0200, Matthias Andree wrote: > Am 04.04.2013 03:05, schrieb Jeremy Chadwick: > > { snipping stuff I have no comment on. reference thread: } > { > http://lists.freebsd.org/pipermail/freebsd-stable/2013-April/073036.html } > > > One piece of evidence that refute

Re: Any objections/comments on axing out old ATA stack?

2013-04-20 Thread Bruce Cran
On 04/04/2013 09:00, Matthias Andree wrote: Any good "concurrent write" exercise tools for Unix that I could run on the Linux ext4 partition that you would propose? benchmarks/fio is good for that. -- Bruce Cran ___ freebsd-stable@freebsd.org mailin

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Marcelo Gondim
Em 20/04/13 14:33, Eugene Grosbein escreveu: On 21.04.2013 00:26, Marcelo Gondim wrote: You seem to use dummynet and the problem is not in mpd/pppoe code, it's it the dummynet code. Look at http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/162558 for workarounds. Ok :) I will try this: - net