[FreeBSD-6.1 6.2] Race condition could happen while two thread close socket?

2007-02-14 Thread Blue
Dear all: When looking into the soclose() in uipc_socket.c, I thought of one possible situation. If thread A called soclose() first, and then execute sorele() then sofree(). However, in sofree() (defined in uipc_socket.c), the socket mutex and accept mutex is unlocked first before releasing

Strange behavior with arp permanent entries

2007-02-14 Thread ea
Hello, Guys! I'm trying to restrict some LAN access by arp permanent entries. But it didn't work or it didn't work as I realize it. For example I have the following perm entries: user1: (82.199.215.195) at 00:0f:ea:a4:60:c5 on vlan804 permanent [vlan] user2: (82.199.215.196) at

Re: pmtud problem

2007-02-14 Thread Tom Judge
Stephen Clark wrote: Hello List, We have a setup that looks like the following. pc -ethernet- freebsd 4.9 -pppoe- internet -ethernet- freebsd 6.1 on the freebsd box we have a gre tunnel with a mtu of 1420 feeding into a gif vpn tunnel with a mtu of 1280 ( I know this dumb but it the default

Strange behavior with arp permanent entries

2007-02-14 Thread Vladimir Kapustin
Hello, Guys! I'm trying to restrict some LAN access by arp permanent entries. But it didn't work or it didn't work as I realize it. For example I have the following perm entries: user1: (82.199.215.195) at 00:0f:ea:a4:60:c5 on vlan804 permanent [vlan] user2: (82.199.215.196) at

How to optimize ruleset for gateway?

2007-02-14 Thread Vladimir Kapustin
Hi, all! I have such a problem when configuring the gateway for my LAN: I want to minimize the number of rules, and for this purpose I chose PF, but, as I wrote earlyer: http://lists.freebsd.org/pipermail/freebsd-pf/2007-January/002958.html and found some mails of other people:

Gateway slowed down to barely usable

2007-02-14 Thread Andrea Venturoli
Hello. A 6.1p13/i386 firewall of mine, although a bit rusty wrt hardware, is working wonderfully and is allowing us to fully exploit our Internet connections (1Mb/s). Today it suddenly dropped to a bare few b/s. I checked the ISP line by attaching another machine in place of this and it

Re: pmtud problem

2007-02-14 Thread Stephen Clark
Alexander Motin wrote: Stephen Clark wrote: if the pc sends a packet of 1460 bytes with the DF bit set shouldn't the freebsd 4.9 system send back an icmp dest unreachable - fragmentation needed and DF bit set? Are you blocking icmp with a firewall filter? Good question -

Re: pmtud problem

2007-02-14 Thread Stephen Clark
Tom Judge wrote: Stephen Clark wrote: Hello List, We have a setup that looks like the following. pc -ethernet- freebsd 4.9 -pppoe- internet -ethernet- freebsd 6.1 on the freebsd box we have a gre tunnel with a mtu of 1420 feeding into a gif vpn tunnel with a mtu of 1280 ( I know this

Re: [PATCH] Part 2 of low level 802.1p priority support

2007-02-14 Thread Bruce M. Simpson
Pyun YongHyeon wrote: Further testing with drivers is needed (I can't be 100% sure it fails with msk(4) because something strange is happening when vlan tagging is turned off). Perhaps Pyun knows? I guess I've not merged local changes before committing to HEAD. How about attached

[PATCH] Updated 802.1p/q patch

2007-02-14 Thread Bruce M Simpson
Hi, I have tested my 802.1p input patch with vlans configured. So far so good. It is now available from: http://people.FreeBSD.org/~bms/dump/latest-8021p.diff This updated patch moves the 802.1q encapsulation into if_ethersubr.c, allowing M_VLANTAG to be passed up and down the stack for

[PATCH] BPF to support directions and more

2007-02-14 Thread Jung-uk Kim
I was playing with some BPF ideas for few days and I added two new features. SEESENT flag is extended to see only outgoing packets, which is analogous to libpcap's PCAP_D_OUT direction. Thus SEESENT is now called DIRECTION. Second feature is feedback mode (sort of simulated hardware

Re: Gateway slowed down to barely usable

2007-02-14 Thread Bruce M. Simpson
Andrea Venturoli wrote: Today it suddenly dropped to a bare few b/s. I checked the ISP line by attaching another machine in place of this and it could do full 1Mb/s, so this box was the problem. After a simple reboot it started working as good as always. Now the question is: in case this

Re: [PATCH] Part 2 of low level 802.1p priority support

2007-02-14 Thread Pyun YongHyeon
On Wed, Feb 14, 2007 at 07:38:21PM +, Bruce M. Simpson wrote: Pyun YongHyeon wrote: Further testing with drivers is needed (I can't be 100% sure it fails with msk(4) because something strange is happening when vlan tagging is turned off). Perhaps Pyun knows? I guess