Re: high cpu usage on natd / dhcpd

2013-02-07 Thread Eggert, Lars
On Jan 31, 2013, at 16:03, Matthew Luckie m...@luckie.org.nz wrote: 00510 allow ip from me to not me out via em1 00550 divert 8668 ip from any to any via em1 Rule 510 fixes it. Yep, it does. Can I ask someone to commit this to rc.firewall? (And I wonder if the rules for the ipfw kernel

OCE driver patches

2013-02-07 Thread Duvvuru,Venkat Kumar
Hi, I have submitted this patch http://www.freebsd.org/cgi/query-pr.cgi?pr=171838 some time back. Could you please let me know when this will be pulled in? I have some more patches to submit. Please let me know if submitting it online at this link http://www.freebsd.org/send-pr.html is the only

Re: high cpu usage on natd / dhcpd

2013-02-07 Thread Ian Smith
On Thu, 7 Feb 2013 08:08:59 +, Eggert, Lars wrote: On Jan 31, 2013, at 16:03, Matthew Luckie m...@luckie.org.nz wrote: 00510 allow ip from me to not me out via em1 00550 divert 8668 ip from any to any via em1 Rule 510 fixes it. Yep, it does. Can I ask someone to commit

Re: high cpu usage on natd / dhcpd

2013-02-07 Thread Eggert, Lars
Hi, On Feb 7, 2013, at 13:40, Ian Smith smi...@nimnet.asn.au wrote: On Thu, 7 Feb 2013 08:08:59 +, Eggert, Lars wrote: On Jan 31, 2013, at 16:03, Matthew Luckie m...@luckie.org.nz wrote: 00510 allow ip from me to not me out via em1 00550 divert 8668 ip from any to any via em1 Rule

L2TP with Certificates

2013-02-07 Thread Tim Gustafson
Hi, I've found a handful of good tutorials explaining how to set up MPD and Racoon using pre-shared keys and user/pass authentication, but I can't seem to find anything that uses certificates. Is this not an option? Does anyone know if there's a good demo of this out there? Also, if I do use

Re: [PATCH] Add a new TCP_IGNOREIDLE socket option

2013-02-07 Thread George Neville-Neil
On Feb 6, 2013, at 12:28 , Alfred Perlstein bri...@mu.org wrote: On 2/6/13 4:46 AM, John Baldwin wrote: On Wednesday, February 06, 2013 6:27:04 am Randall Stewart wrote: John: A burst at line rate will *often* cause drops. This is because router queues are at a finite size. Also such a

Re: A question about SYN cookies...

2013-02-07 Thread George Neville-Neil
On Feb 4, 2013, at 04:09 , Andre Oppermann an...@freebsd.org wrote: On 04.02.2013 01:09, George Neville-Neil wrote: Howdy, I've been reviewing the SYN cache and SYN cookie code and I'm wondering why we do all the work of generating a SYN cache entry before sending a SYN cookie. If the

Question: Why ain't I getting gigabit speed?

2013-02-07 Thread Ronald F. Guilmette
I just aquired a brand new chepie gigabit PCI ethernet card off eBay. The main chip on it appears to be an RTL8110S-32. I stuck this card into a 9.1-RELEASE system that I have been putting together, and it seemed to be recognized ok (as re0) upon boot up, so I diddled my /etc/rc.conf file to

Question: Why ain't I getting gigabit speed?

2013-02-07 Thread Ronald F. Guilmette
Apologies for following up on myself, but I just now found this: https://support.freenas.org/ticket/894 This thread would suggest that I ain't alone in experienceing this problem with the RTL8110S. That other guy apparently solved his problem by just simply switching to a CAT6 cable. I

Re: Question: Why ain't I getting gigabit speed?

2013-02-07 Thread Sin
Maybe you're not using all 4 pairs in the CAT 6 cable. - Original Message - From: Ronald F. Guilmette r...@tristatelogic.com To: freebsd-net@freebsd.org Sent: Thursday, February 07, 2013 6:53 PM Subject: Question: Why ain't I getting gigabit speed? Apologies for following up on