Re: TCP ISN algorithm breaks TIME_WAIT (Re: select fails to return incoming connect on FreeBSD-4.3)

2001-07-16 Thread Ruslan Ermilov
On Sun, Jul 15, 2001 at 01:11:48PM -0700, Kris Kennaway wrote: On Mon, Jun 11, 2001 at 02:37:10PM -0500, Jonathan Lemon wrote: In article local.mail.freebsd-net/[EMAIL PROTECTED] you write: First off, I hope this is the right list. Could someone take a look at PR misc/27880? This

Re: TCP ISN algorithm breaks TIME_WAIT (Re: select fails to return incoming connect on FreeBSD-4.3)

2001-07-16 Thread Kris Kennaway
On Mon, Jul 16, 2001 at 11:00:04AM +0300, Ruslan Ermilov wrote: Recall my question on IRC about monotonicity right after you committed this? Yes; recall my answer? :) Kris PGP signature

Contributing manpage patches back to KAME project

2001-07-16 Thread Sheldon Hearn
Hi folks, Where do I send changes to the KAME manual pages? Ciao, Sheldon. To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-net in the body of the message

Re: Contributing manpage patches back to KAME project

2001-07-16 Thread JINMEI Tatuya / 神明達哉
On Mon, 16 Jul 2001 12:53:47 +0200, Sheldon Hearn [EMAIL PROTECTED] said: Where do I send changes to the KAME manual pages? Thanks for the offer. The best place would be [EMAIL PROTECTED], which is the list for core developers of the KAME project. This list is closed to discuss delicate

ICMP source quench - deprecated?

2001-07-16 Thread Peter Pentchev
Hi, I just had a friend ask me a weird question about ICMP source quench and its handling in various OS's. He proceeded to show me a part of some version of the Linux kernel source, which processed a source quench request properly, yet had a 'This is deprecated' comment at the top. I had a

Re: IPV6 panic?

2001-07-16 Thread JINMEI Tatuya / 神明達哉
On Sun, 15 Jul 2001 01:27:59 -0700, Bruce A. Mah [EMAIL PROTECTED] said: OK, I got another crash, with symbols and all. This is a 4-STABLE machine from 7 July. Thanks for the info. (kgdb) list 438 /* XXX: used for the DELAY case only: */ 439

Re: how to get AF_LOCAL from getaddrinfo()

2001-07-16 Thread Ian Dowse
In message [EMAIL PROTECTED], Ian Dowse writes: I'd very much like to see PF_LOCAL support added to our getaddrinfo() and getnameinfo(). I know that PF_LOCAL sockets have semantics that Here is quick and simple implementation - any comments welcome. It probably needs a few changes to match the

Re: ICMP source quench - deprecated?

2001-07-16 Thread Joseph Gleason
Unless I am mistaken, ICMP source quench applies to any IP traffic, not just TCP. Also, ICMP source quench can be sent by intermediate routers. - Original Message - From: Peter Pentchev [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, July 16, 2001 08:26 Subject: ICMP source

Re: ICMP source quench - deprecated?

2001-07-16 Thread Peter Pentchev
I know; those were my reasons for lifting an eyebrow at the 'deprecated' comment in the Linux kernel source.. G'luck, Peter -- yields falsehood, when appended to its quotation. yields falsehood, when appended to its quotation. On Mon, Jul 16, 2001 at 11:45:02AM -0400, Joseph Gleason wrote:

ICMP source quench - deprecated?

2001-07-16 Thread Garrett Wollman
On Mon, 16 Jul 2001 15:26:38 +0300, Peter Pentchev [EMAIL PROTECTED] said: Is there any reason for ICMP source quench to be deprecated? There are a few problems with ICMP source quench: 1) If a sender-TCP actually pays attention to them, an attacker can substantially reduce TCP performance by

Re: IPV6 panic?

2001-07-16 Thread Bruce A. Mah
If memory serves me right, JINMEI Tatuya / =?ISO-2022-JP?B?GyRCP0BMQEMjOkgbKEI= ?= wrote: Hmm, could you show us the contents of rt and ln at this point? (kgdb) print rt $1 = (struct rtentry *) 0x3 (kgdb) print ln $2 = (struct llinfo_nd6 *) 0x62 If possible, it would be helpful to see if

Re: router question

2001-07-16 Thread Joseph Gleason
With a Cisco or a FreeBSD box can do routing. - Original Message - From: Aaron Namba [EMAIL PROTECTED] To: matt [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Cc: FreeBSD-ISP [EMAIL PROTECTED] Sent: Monday, July 16, 2001 13:49 Subject: RE: router question Depends of course on

Re: TCP ISN algorithm breaks TIME_WAIT (Re: select fails to return incoming connect on FreeBSD-4.3)

2001-07-16 Thread Niels Provos
In message [EMAIL PROTECTED], Kris Kennaway writes: Sorry I've been ignoring this; I'm still getting caught up from my vacation. Niels, how has OpenBSD handled this? Not. We have the same problem. I argue that the test is bogus. First of all, if we are getting a SYN for this 4-tuple, it is

Help needed with setting up routing

2001-07-16 Thread Joey Garcia
Hello all! Okay, I'm still having a bit of problems setting up a FreeBSD router. I'm not sure if FreeBSD forwards the packets automatically or if I need to add routes to the routing table or what. Here's what I'm trying to do. I have 3 networks: 192.168.0.0/24, 192.168.10.0/24, and

fix for traceroute (bin/29026)

2001-07-16 Thread Pierre Beyssac
Could anyone check this fix for PR bin/29026 (traceroute -s option)? It just reenables the bind(2) call checking for the source address correctness, and moves the IP_HDRINCL after that (once IP_HDRINCL is enabled on the socket, bind doesn't check this anymore). It seems to work on my (very

IP accounting/filtering for bigger setups

2001-07-16 Thread Alexander Langer
Hi! We have to account the traffic of 450 IPs and also have to deny traffic to/from a few IPs. We are currently using a half-baken solution with ipfw and a config with 6 rules for each IP, which makes the stuff quite uncomfortable. (on high network load, ipfw list takes minutes, we have to

Re: IP accounting/filtering for bigger setups

2001-07-16 Thread Luigi Rizzo
for accounting, you can use dynamic dummynet pipes as the final accept rule, e.g. replace all rules of the form accept ip from X to Y with pipe ip from X to Y and something like this for accounting on source ip ipfw pipe config mask src-ip 0x For

Re: Routing. :)

2001-07-16 Thread Joseph Gleason
This very much sounds like you need to learn IP subnetting. I highly recommend the Cisco Press CCNA book. I can dig up ISBN number if you want. There are very few cases that call for a subnet mask of 255.255.255.255. You probably want 255.255.255.0 You can specify the subnetmask on the

Re: TCP ISN algorithm breaks TIME_WAIT (Re: select fails to returnincoming connect on FreeBSD-4.3)

2001-07-16 Thread Mike Silbersack
On Mon, 16 Jul 2001, Niels Provos wrote: In message [EMAIL PROTECTED], Kris Kennaway writes: Sorry I've been ignoring this; I'm still getting caught up from my vacation. Niels, how has OpenBSD handled this? Not. We have the same problem. I argue that the test is bogus. First of all, if

Re: Routing. :)

2001-07-16 Thread Bill Fumerola
On Mon, Jul 16, 2001 at 03:44:40PM -0600, Peter Warrick wrote: I hope I am not sending to the wrong address but here goes. :) you are. this should have been sent to freebsd-questions, but: from ifconfig(8): alias Establish an additional network address for this interface. This

Re: IPV6 panic?

2001-07-16 Thread Bruce A. Mah
If memory serves me right, JINMEI Tatuya / =?ISO-2022-JP?B?GyRCP0BMQEMjOkgbKEI= ?= wrote: On Mon, 16 Jul 2001 10:16:23 -0700, [EMAIL PROTECTED] (Bruce A. Mah) said: (kgdb) print rt $1 = (struct rtentry *) 0x3 (kgdb) print ln $2 = (struct llinfo_nd6 *) 0x62 Then rt and ln are

Re: how to get AF_LOCAL from getaddrinfo()

2001-07-16 Thread itojun
I'd very much like to see PF_LOCAL support added to our getaddrinfo() and getnameinfo(). I know that PF_LOCAL sockets have semantics that Here is quick and simple implementation - any comments welcome. It probably needs a few changes to match the conventions of other implementations, and a