Re: ipfilter(4) needs maintainer

2013-04-19 Thread Aleksandr A Babaylov
On Fri, Apr 19, 2013 at 11:45:57AM +0200, David Demelier wrote: 2013/4/14 Gary Palmer gpal...@freebsd.org: Do we honestly need three packet filters? No, for me only one should be present. I completely understand that some users still use IPFilter and IPFW but why providing three packet

Re: use of non-contiguous masks in address lookups ?

2012-05-24 Thread Aleksandr A Babaylov
On Thu, May 24, 2012 at 02:07:11PM +0200, Luigi Rizzo wrote: On Thu, May 24, 2012 at 11:19:54AM +, Bjoern A. Zeeb wrote: On 24. May 2012, at 07:43 , sth...@nethelp.no wrote: every now and then the issue comes up on whether we still need to support non-contiguous masks in address

Re: Any deployment with very many small (/28 .. /32) subnets ?

2012-05-24 Thread Aleksandr A Babaylov
On Thu, May 24, 2012 at 09:16:05AM +0200, Luigi Rizzo wrote: Also related to my previous question on lookups, I believe some ISPs may have a huge number of very small subnets (say /28 or even smaller) attached to some kind of virtual interfaces (vlans, gif, tun,...). Can anyone comment on

Re: Point-to-point connection between jails?

2012-05-28 Thread Aleksandr A Babaylov
On Mon, May 28, 2012 at 09:37:27PM +1000, Darren Reed wrote: I've looked through the list of network interfaces that are supported with FreeBSD and none seem to meet my needs. What I want is a network interface that I can configure up in jail A with address 10.1.1.1 and for which I can

Re: dummynet delay

2012-06-18 Thread Aleksandr A Babaylov
On Tue, Jun 19, 2012 at 01:48:45AM +0900, Randy Bush wrote: add pipe 1 tcp from 147.28.2.129 to 147.28.2.133 add pipe 2 tcp from 147.28.2.133 to 147.28.2.129 pipe 1 config queue 50 delay 200ms pipe 2 config queue 50 delay 200ms is a tcp packet from 147.28.2.129 to 147.28.2.133 delayed by

Re: igb dual-port adapter 1200Mbps limit - what to tune?

2010-11-11 Thread Aleksandr A Babaylov
On Thu, Nov 11, 2010 at 08:05:40PM +0200, Eugene Perevyazko wrote: On Thu, Nov 11, 2010 at 12:49:52PM +0200, Eugene Perevyazko wrote: On Thu, Nov 11, 2010 at 01:47:02AM +0100, Ivan Voras wrote: On 11/10/10 12:04, Eugene Perevyazko wrote: Tried 2 queues and 1 queue per iface, neither

Re: Configuring for 1 static and 1 DHCP interface ?

2010-11-23 Thread Aleksandr A Babaylov
On Tue, Nov 23, 2010 at 04:35:42AM -0800, Ronald F. Guilmette wrote: I should say however that even this is going to produce a slightly sub-optimal result, because (I guess) the DHCP client is _still_ going to wipe out my eisting /etc/resolve.con file and then write its own. Now that will at

Re: Implementing a trivial TFTP client?

2010-11-23 Thread Aleksandr A Babaylov
On Tue, Nov 23, 2010 at 04:12:49AM -0800, Ronald F. Guilmette wrote: I have been attempting to implment a trivial sort of TFTP client from scratch, and its been somewhat of a humbling experience so far, and its taught me that I don't know quite as much about BSD socket programming as I though

Re: Dynamin/Static Resolver Table [netstat like]

2011-06-17 Thread Aleksandr A Babaylov
On Fri, Jun 17, 2011 at 12:40:29PM +0900, Hiroki Sato wrote: jhell jh...@dataix.net wrote in 20110617022950.ga58...@dataix.net: jh Gosh, Wouldnt it be something if we could store our dynamic resolver jh information with the interface in the same sort of fashion that we store jh our

Re: Poor performance with natd/ipfw and TSO enabled on bce(4) card and 8.1-PRERELEASE

2010-07-01 Thread Aleksandr A Babaylov
On Thu, Jul 01, 2010 at 04:54:47PM -0700, Pyun YongHyeon wrote: On Wed, Jun 30, 2010 at 07:00:53PM -0700, Garrett Cooper wrote: Hi, Just an observation I made while transferring a file: # time scp floppy.img somehost: Password: floppy.img100%

Re: Inter-vlan routing problem

2010-08-20 Thread Aleksandr A Babaylov
On Fri, Aug 20, 2010 at 05:52:50PM +0200, Xavier HUMBERT wrote: I've got some trouble routing vlans through FreeBSD 8.1-RELEASE. I had similar prolem in 8.0-STABLE. Try sysctl net.inet.flowtable.enable=0 ___ freebsd-net@freebsd.org mailing list

Re: FreeBSD route tables limited 16?

2010-09-14 Thread Aleksandr A Babaylov
On Tue, Sep 14, 2010 at 04:31:39PM +1000, Dave Seddon wrote: It sounds like dedicating some space for this in the mbuf would be the best way forward, but the question is how much. I'm worried that most freebsd users won't go for lots of route tables, which is why you went for 4 bits

Re: Can DUMMYNET handle weighting of traffic according to firewall rules?

2014-12-12 Thread Aleksandr A Babaylov
On Fri, Dec 12, 2014 at 09:06:46PM +1100, Luigi Rizzo wrote: you can set the limit for the pipe, create two queues with different weights attached to the pipe, and then schedule. ipfw pipe 12 config bw 3456 Kbit/s ipfw queue 34 config weight 2 pipe 12 ipfw queue 56 config weight 1 pipe 12

Re: Bridge Interfaces and ARPs

2015-12-04 Thread Aleksandr A Babaylov
On Thu, Dec 03, 2015 at 08:54:10AM -0500, Jason Van Patten wrote: > Hey gang - > > I posted this to the FreeBSD user forums but figured I'd send a message > off to the list to see if anyone has any input, guidance, or ideas. > Emailing diagrams around isn't good form (IMHO) but having a diagram

Re: arp response fails

2015-12-18 Thread Aleksandr A Babaylov
On Tue, Dec 15, 2015 at 11:47:39PM +0100, bcs wrote: > I have 3 FreeBSD 10.2-RELEASE machines and all of them suffers of the > following problem. They are not responding to ARP requests which causes > network problem for me, other hosts can't access my FBSD machines on the > LAN nor my FBSD

Re: IPFW: table support for MAC addresses?

2016-06-03 Thread Aleksandr A Babaylov
On Thu, Jun 02, 2016 at 02:18:56PM +0200, Julian K. wrote: > is there anyone who wants to use MAC based rules with IPFW? > I want to build a captive portal that also supports IPv6. MAC addresses > in IPFW tables would help a lot. I use MAC in IPFW and want MAC in IPFW tables to simplify rules.

Re: IPFW: table support for MAC addresses?

2016-06-05 Thread Aleksandr A Babaylov
ay/hash tabletype with the ability to do exact lookup on the > source/destination mac address, w/o any masks support). > > On Fri, Jun 3, 2016 at 4:11 PM, Aleksandr A Babaylov <"."@babolo.ru> wrote: > >>  On Thu, Jun 02, 2016 at 02:18:56PM +0200, Julian K. wrote

Re: Filtering outbound traffic for private address jails?

2016-06-26 Thread Aleksandr A Babaylov
On Sat, Jun 25, 2016 at 10:01:37PM +, org.freebsd.secur...@io7m.com wrote: > Hello. > > I have been searching for the best part of a day for a solution to this > problem and quite frankly cannot believe that I've spent this long on > something that appears to be so simple and that used to be

Re: ipfw -- selecting locally generated packets

2018-05-01 Thread Aleksandr A Babaylov
On Tue, May 01, 2018 at 09:04:36PM +0800, Julian Elischer wrote: > On 1/5/18 2:02 am, Eugene Grosbein wrote: > >01.05.2018 0:48, Jeff Kletsky wrote: > > > >> From time to time, I rewrite my firewall rules to take advantages of the > >> ever-improving set of features that ipfw provides. One of the