IPSTEALTH - transparent router

2001-01-01 Thread romualdo
Hi. I have many routers with wavelan card working with freeBSD and i am trying without sucessfull use IPSTEALTH work this is my kernel options options IPFIREWALL options IPDIVERT options IPSTEALTH options IPFIREWALL_VERBOSE options IPFIREWALL_FORWARD

Dummynet problem

2001-01-01 Thread Slawek Zak
I tried to configure dummynet to allow for normal work when downloading files using queue mechanism (4.2-STABLE). IPFW rules are: add 100 queue 10 tcp from any to any uid dnld1 in add 200 queue 11 ip from any to any queue 10 config weight 1 pipe 1 queue 11 config weight 10 pipe 1

Re: ipfw uid rules and matching specific services for bandwidth limiting

2001-01-01 Thread Bill Fumerola
On Mon, Jan 01, 2001 at 09:08:26PM +0100, Anders Nordby wrote: Are people actually using uid type rules heavily? I'm having trouble matching the packets generated by programs like Apache and ProFTPD. I believe that may be because of root binding the ports these programs use before they

Re: ipfw uid rules and matching specific services for bandwidth limiting

2001-01-01 Thread Anders Nordby
On Mon, Jan 01, 2001 at 05:24:09PM -0600, Bill Fumerola wrote: Are people actually using uid type rules heavily? I'm having trouble matching the packets generated by programs like Apache and ProFTPD. I believe that may be because of root binding the ports these programs use before they

Re: IPSTEALTH - transparent router

2001-01-01 Thread Attila Nagy
Hello, I have many routers with wavelan card working with freeBSD and i am trying without sucessfull use IPSTEALTH work i want whem one machine make traceroute dont show my router and go a way sysctl -w net.inet.ip.stealth=1

Re: Dummynet problem

2001-01-01 Thread Luigi Rizzo
I tried to configure dummynet to allow for normal work when downloading files using queue mechanism (4.2-STABLE). IPFW rules are: add 100 queue 10 tcp from any to any uid dnld1 in add 200 queue 11 ip from any to any queue 10 config weight 1 pipe 1 queue 11 config weight

Re: Problems with VLAN and natd.

2001-01-01 Thread Wes Peters
"C. Stephen Gunn" wrote: On Sun, 31 Dec 2000 19:54:19 PST, Julian Elischer wrote: The current VLAN (and Ethernet) implementaiton in FreeBSD needs work. FreeBSD should should handle multiple ethernet encapsulations on the same physical interface, and relay packets to/from some

IP Filter auth rule

2001-01-01 Thread song
Hi, I\'m playing around the auth rule and the sample userauth.c of IP Filter on FreeBSD 4.2-RELEASE and below are some results and questions: 1. There is a typo in ip_auth.c which causes the ioctl(SIOCAUTHW) unable to fetch all the fields of the frauth_t struct. Below is a patch for