Re: new feature: private IPC for every jail

2006-04-04 Thread Koen Martens
Robert Watson wrote: > > Hmm. This sounds like it might be workable. To make sure I understand > your proposal: > > - We add a new prison ID field to the in-kernel description of each > segment, > semaphore, message queue, etc. This is initialized to the prison ID > of the > process creatin

Re: new feature: private IPC for every jail

2006-04-04 Thread Koen Martens
Koen Martens wrote: > FWIW, I already implemented this once for 5.x a while back, but > abandoned the project due to lack of time back then. If no-one else > is going to pick this up, i might try and dig up that code again, > and port it to 6.x, since this feature is still quite high

ipfilter upgrade issue

2005-12-23 Thread Koen Martens
Hi All, Just a smallish issue with ipfilter and upgrading from 5.4 to 6-STABLE. The ipfilter implementation in the 6-STABLE kernel errs on the commands sent by the 5.4 ipf binary. This can be an issue when you are upgrading remotely without serial console and you have IPFILTER_DEFAULT_BLOCK e

Re: ipfilter upgrade issue

2005-12-23 Thread Koen Martens
Melvyn Sopacua wrote: On Friday 23 December 2005 11:12, Koen Martens wrote: Just a smallish issue with ipfilter and upgrading from 5.4 to 6-STABLE. The ipfilter implementation in the 6-STABLE kernel errs on the commands sent by the 5.4 ipf binary. This can be an issue when you are

Re: "runtime went backwards" message in logs

2005-12-30 Thread Koen Martens
Julian H. Stacey wrote: PS. Not sure if this have anything to do with it (the message mentions CPU time, not the clock), but I'm running a ntp daemon, to synchronize time... Highly likely it has a Lot to do with it :-) Maybe the master time server had `date` run manually, or otherwise shi

Re: Which tag should I use?

2006-01-20 Thread Koen Martens
Nirvana wrote: >I use the FreeBSD 6.0 Release-P3. >I don't know which tag should my cvsup use to make my FreeBSD become the >FreeBSD 6.0 stable? > >The RELENG_6 or RELENG_6_0? > >what is the different with the RELENG_6 and RELENG_6_0? > > From http://www.freebsd.org/doc/en_US.ISO8859-1/books/han

ipfilter + bge strangeness

2006-01-28 Thread Koen Martens
Hi All, Yesterday night, i was going to send the message below. However, just before pressing send, i found a solution to the problem: disable checksum checks (ifconfig bge0 -rxcsum -txcsum). Though this is a solution, it has me puzzled. Is this a bug^H^H^Hfeature of 6-STABLE, as it works with 5.4

Re: ipfilter + bge strangeness

2006-01-28 Thread Koen Martens
Oleg Bulyzhin wrote: > Could you please run 'tcpdump -nvi bge0' while you are generating > dns traffic (having bge0 checksum offloading on)? > > 'netstat -sp udp' output might be helpful too. Sure thing, although it happens with other kinds of traffic too (in the dump, there's some NTP for exampl

Re: ipfilter + bge strangeness

2006-01-29 Thread Koen Martens
Oleg Bulyzhin wrote: > On Sat, Jan 28, 2006 at 11:16:31PM +0100, Koen Martens wrote: >>Sure thing, although it happens with other kinds of traffic too (in >>the dump, there's some NTP for example). Here's the netstat output >>before: > > > Btw, until r

Re: ipfilter + bge strangeness

2006-02-02 Thread Koen Martens
David Wilhelm wrote: > On Tue, Jan 31, 2006 at 12:09:13PM +0300, Oleg Bulyzhin wrote: > >>Could you please test attached patch? > > >>This patch enables 'full' rxcsum offloading so ipfilter's bug should not be >>triggered. > > > FYI, the patch works for me; the checksum errors still show in tc