Re: pls help on 3 interfaces

2009-03-19 Thread Lin Zhao
too much thx for Julian Elischer John Nielsen. i've tried it, and it seems working now, but i don't know if i'm right in setting natd2 i just add one line in /etc/services as natd2 8669 and run a command: natd -n fxp1 -p 8669 seems so stupid Lin ÔÚÄúµÄÀ´ÐÅÖÐÔø¾­Ìáµ½: From: John

Re: pls help on 3 interfaces

2009-03-19 Thread Julian Elischer
Lin Zhao wrote: too much thx for Julian Elischer John Nielsen. i've tried it, and it seems working now, but i don't know if i'm right in setting natd2 i just add one line in /etc/services as natd2 8669 and run a command: natd -n fxp1 -p 8669 seems so stupid. I assume you mean

Re: keep-state rules inadequately handles big UDP ?packets?or?fragmented IP packets?

2009-03-19 Thread Dmitriy Demidov
On Wednesday 18 March 2009, Oliver Fromme wrote: I'm just curious ... Is it really worth the effort to add fragment reassembly to IPFW? What advantage does it have? It would be much easier to simply pass all fragments with offset 1, and drop all fragments with offset 0 that are smaller

Re: FreeBSD 7.0: dummynet 99% cpu

2009-03-19 Thread Eugene L Kovalenja
Oliver Fromme ?: Eugene L Kovalenja wrote: FreeBSD *** 7.0-RELEASE FreeBSD 7.0-RELEASE #6: Sun Nov 23 14:32:31 EET [...] Time in three days traffic via ipfw doesn't go. In top: 21 root 1 -44- 0K 8K WAIT 7 2:15 99.02% dummynet (this is example, not