Re: dummynet dropping too many packets

2009-10-09 Thread Scott Bennett
On Wed, 07 Oct 2009 20:02:21 +0500 rihad ri...@mail.ru wrote: Ingo Flaschberger wrote: Hi, can you send me the dmesg ouput from your networkcards when they are detected at booting? Hello, bce0: Broadcom NetXtreme II BCM5708 1000Base-T (B2) mem 0xf400-0xf5ff irq 16 at device

Re: dummynet dropping too many packets

2009-10-09 Thread Oleg Bulyzhin
On Thu, Oct 08, 2009 at 09:18:23AM -0700, Julian Elischer wrote: that seems like a bug to me.. neither tee should ever terminate a search. agree. But documented bug is a feature ;) and i'm not sure if we fix this wouldnt it break POLA? if you want to terminate it, add a specific rule to do

Route re-calculation in ip_output()

2009-10-09 Thread Jacques Fourie
Hi, I've noticed what I believe to be a bug in ip_output(). The piece of code in question is when the firewall changes the destination address of an outgoing packet and the subsequent re-calculation of the route. The issue should be clear from the attached diff - basically what happens is that

Re: dummynet dropping too many packets

2009-10-09 Thread rihad
Oleg Bulyzhin wrote: On Wed, Oct 07, 2009 at 03:52:56PM +0500, rihad wrote: You probably have some special sources of documentation ;-) According to man ipfw, both netgraph/ngtee and pipe decide the fate of the packet unless one_pass=0. Or do you mean sprinkling smart skiptos here and there?

Re: Route re-calculation in ip_output()

2009-10-09 Thread Julian Elischer
Jacques Fourie wrote: Hi, I've noticed what I believe to be a bug in ip_output(). The piece of code in question is when the firewall changes the destination address of an outgoing packet and the subsequent re-calculation of the route. The issue should be clear from the attached diff - basically

How can I get 100 connections in FIN_WAIT_2 state from the same IP?

2009-10-09 Thread Martin Turgeon
Hi everyone, I would like to know if anyone knows the reason why I get a lot of connections (more than 100) from the same IP in FIN_WAIT_2 state. Refering to this diagram (http://www.jxos.org/Projects/TCP/tcpstate.html), the connection enter in FIN_WAIT_1 when the server closes the

Intel WiFi 5100/5300

2009-10-09 Thread Lutz Bichler
Hi, does anybody know what happened to the attempts to support Intel WiFi 5100/5300 interfaces in the iwn-driver? Are any patches available which could be used to start working on support for these interfaces? Lutz -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten

Re: intel 82576 ipsec offload?

2009-10-09 Thread Jack Vogel
I am Jack, the network engineer at Intel responsible for all FreeBSD wired lan drivers. This is the first I've seen about this. Our understanding was that the infrastructure needed to do IPSec was not available for either Linux or FreeBSD, can you please explain things? If everything is there

Re: Intel WiFi 5100/5300

2009-10-09 Thread Bernhard Schmidt
On Friday 09 October 2009 19:08:39 Lutz Bichler wrote: Hi, does anybody know what happened to the attempts to support Intel WiFi 5100/5300 interfaces in the iwn-driver? Are any patches available which could be used to start working on support for these interfaces? I'm curious too, as I'm

Re: intel 82576 ipsec offload?

2009-10-09 Thread Julian Elischer
Jack Vogel wrote: I am Jack, the network engineer at Intel responsible for all FreeBSD wired lan drivers. This is the first I've seen about this. Our understanding was that the infrastructure needed to do IPSec was not available for either Linux or FreeBSD, can you please explain things? If

Re: intel 82576 ipsec offload?

2009-10-09 Thread Pyun YongHyeon
On Fri, Oct 09, 2009 at 11:17:00AM -0700, Jack Vogel wrote: I am Jack, the network engineer at Intel responsible for all FreeBSD wired lan drivers. This is the first I've seen about this. Our understanding was that the infrastructure needed to do IPSec was not available for either Linux or

Re: intel 82576 ipsec offload?

2009-10-09 Thread Julian Elischer
Pyun YongHyeon wrote: On Fri, Oct 09, 2009 at 11:17:00AM -0700, Jack Vogel wrote: I am Jack, the network engineer at Intel responsible for all FreeBSD wired lan drivers. This is the first I've seen about this. Our understanding was that the infrastructure needed to do IPSec was not available

Re: intel 82576 ipsec offload?

2009-10-09 Thread Jack Vogel
I am out sick today, but I will see what I can find out early next week. Jack On Fri, Oct 9, 2009 at 12:03 PM, Julian Elischer jul...@elischer.orgwrote: Pyun YongHyeon wrote: On Fri, Oct 09, 2009 at 11:17:00AM -0700, Jack Vogel wrote: I am Jack, the network engineer at Intel responsible

Re: Route re-calculation in ip_output()

2009-10-09 Thread Jacques Fourie
On Fri, Oct 9, 2009 at 5:58 PM, Julian Elischer jul...@elischer.org wrote: Jacques Fourie wrote: Hi, I've noticed what I believe to be a bug in ip_output(). The piece of code in question is when the firewall changes the destination address of an outgoing packet and the subsequent

Re: Intel WiFi 5100/5300

2009-10-09 Thread Glen Barber
Hi On Fri, Oct 9, 2009 at 6:03 PM, Bernhard Schmidt bschm...@techwires.net wrote: On Friday 09 October 2009 19:08:39 Lutz Bichler wrote: Hi, does anybody know what happened to the attempts to support Intel WiFi  5100/5300 interfaces in the iwn-driver? Are any patches available which  could

FreeBSD + Samba + Active Directory

2009-10-09 Thread Andrea Venturoli
Hello. I have a setup with two FreeBSD 6.3 domain controllers using samba + openldap + nss_ldap. The company might be switching to Active Directory soon (not my choice, before you ask :-), so I might need to reconfigure the two FreeBSD boxes to become AD members (with winbindd, nss,

Re: FreeBSD + Samba + Active Directory

2009-10-09 Thread Tom Judge
Andrea Venturoli wrote: Hello. I have a setup with two FreeBSD 6.3 domain controllers using samba + openldap + nss_ldap. The company might be switching to Active Directory soon (not my choice, before you ask :-), so I might need to reconfigure the two FreeBSD boxes to become AD members (with