rc.conf/ifconfig issue

2004-09-16 Thread Mark Thomas


Running 4.10-STABLE as of today. I have the following in /etc/rc.conf:

gif_interfaces=gif0
gifconfig_gif0=A.B.C.D W.X.Y.Z
ifconfig_gif0=inet 192.168.101.1 192.168.102.1 netmask 0x

After a boot I see:
# ifconfig gif0

gif0: flags=8051UP,POINTOPOINT,RUNNING,MULTICAST mtu 1280
tunnel inet A.B.C.D -- W.X.Y.Z

I can then do:
# ifconfig gif0 inet 192.168.101.1 192.168.102.1 netmask 0x
# ifconfig gif0

gif0: flags=8051UP,POINTOPOINT,RUNNING,MULTICAST mtu 1280
tunnel inet 207.101.90.150 -- 207.101.90.148
inet 192.168.101.1 -- 192.168.102.1 netmask 0x

Can anyone point out my stupidity in the rc.conf?

[Please cc me directly -- TIA]

Mark Thomas
[EMAIL PROTECTED] 
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FW: rc.conf/ifconfig issue

2004-09-16 Thread Mark Thomas
To answer my own question, I also needed to add gif0 to network_interfaces:

network_interfaces=xl0 xl1 lo0 gif0

Mark Thomas
[EMAIL PROTECTED] 

-Original Message-
From: Mark Thomas [mailto:[EMAIL PROTECTED]
Sent: Thursday, September 16, 2004 3:10 PM
To: [EMAIL PROTECTED]
Subject: rc.conf/ifconfig issue




Running 4.10-STABLE as of today. I have the following in /etc/rc.conf:

gif_interfaces=gif0
gifconfig_gif0=A.B.C.D W.X.Y.Z
ifconfig_gif0=inet 192.168.101.1 192.168.102.1 netmask 0x

After a boot I see:
# ifconfig gif0

gif0: flags=8051UP,POINTOPOINT,RUNNING,MULTICAST mtu 1280
tunnel inet A.B.C.D -- W.X.Y.Z

I can then do:
# ifconfig gif0 inet 192.168.101.1 192.168.102.1 netmask 0x
# ifconfig gif0

gif0: flags=8051UP,POINTOPOINT,RUNNING,MULTICAST mtu 1280
tunnel inet 207.101.90.150 -- 207.101.90.148
inet 192.168.101.1 -- 192.168.102.1 netmask 0x

Can anyone point out my stupidity in the rc.conf?

[Please cc me directly -- TIA]

Mark Thomas
[EMAIL PROTECTED] 
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Firewall/DMZ routing

2003-06-05 Thread Mark Thomas
[Please cc me directly with any replies. Thanks]

I'm setting up a multihomed firewall box. I have all interfaces up and
running but have something going wrong with routing. The setup:

ISP router [A.B.C.144/28, using A.B.C.145]
  |
FIREWALL PUBLIC[A.B.C.146/29]
FIREWALL DMZ IFACE [A.B.C.153/29]
  |
DMZ TEST HOST  [A.B.C.154/29]

I can ping all IPs from the firewall, the firewall from the test DMZ host,
and the public firewall IP from the world, but not the firewall DMZ
interface or the DMZ test host. All interfaces are up. The firewall is setup
as a gateway.

If I do a tcpdump on the public interface while pinging the test host from
the world I see:

08:33:08.160246 arp who-has A.B.C.154 tell A.B.C.145

netstat -rn says:

Internet:
DestinationGatewayFlagsRefs  Use  Netif Expire
defaultA.B.C.145  UGSc   60  879em0
127.0.0.1  127.0.0.1  UH  1  372lo0
A.B.C.144/29   link#1 UC  30em0
A.B.C.145  00:02:17:61:75:85  UHLW10em0   1200
A.B.C.146  00:0b:db:90:37:8b  UHLW08lo0
A.B.C.152/29   link#3 UC  00em2

I think I should have 2 /29 networks with the firewall routing them, right?
Do I need to change the router config? Do I need to establish static routes?

Thanks for any pointers,

Mark Thomas
[EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Firewall/DMZ routing

2003-06-05 Thread Mark Thomas

 -Original Message-
 From: Volker Kindermann [mailto:[EMAIL PROTECTED]

  I'm setting up a multihomed firewall box. I have all interfaces up and
  running but have something going wrong with routing.
 
 do you have forwarding enabled on the firewall?
 
 Check if:
 
 sysctl net.inet.ip.forwarding
 
 shows:
 
 net.inet.ip.forwarding: 1

Volker,

Yes, forwarding is enabled.

Mark Thomas
[EMAIL PROTECTED] 
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Slow one-way network speeds

2002-10-16 Thread Mark Thomas


I'm having an issue with transfer speeds on my local network and I'm 
looking for some pointers on what I might do to fix it up.

My network is pretty simple.

Internet -- DSL -- Medusa -- Local Net -- Leviathan

Medusa is (PII-400):
FreeBSD medusa.pbegames.com 4.4-STABLE FreeBSD 4.4-STABLE #2: Tue Apr 16 
09:45:14 EDT 2002

Leviathan is (AMD TBird-900):
   Win98 with the latest service packs, patches, etc.

The DSL connection is running user ppp with nat.
The local net is a D-Link hub (10baseT/UTP).

The problem:

Transfers from Leviathan to Medusa run at ~900 kB/s
Transfers from Medusa to Leviathan run at ~55 kB/s

Interestingly, transfers from the Internet to Leviathan run at the expected 
rate (~75 kB/s -- about normal for my local DSL provider).

I've been testing transfer rates using a 9 MB file.

I first noticed this with Samba, but I can reproduce it with scp and ftp as 
well. I've done some looking around at various sysctl and registry 
settings, but I haven't seen anything that jumps out.

The local interface on Medusa (LinkSys LNE100 I believe) looks like this:

dc0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
 inet6 fe80::204:5aff:fe57:5cc2%dc0 prefixlen 64 scopeid 0x1
 inet 192.168.99.1 netmask 0x broadcast 192.168.255.255
 ether 00:04:5a:57:5c:c2
 media: Ethernet autoselect (10baseT/UTP)
 status: active

I've swapped out all cables, and transfers between Leviathan and a test 
machine internally work fine over all ports on the hub. I'm leaning towards 
a problem with the tcp settings between the two machines, but have about 
reached the limits of my knowledge in this area. Any pointers to where to 
look would be great. I can pass on more information if needed (sysctls, 
tcpdump, etc.).

TIA,


Mark Thomas
---
[EMAIL PROTECTED]  http://www.pbegames.com/~thomas
Play by Electron Games - http://www.pbegames.com Free Trial Games


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message