Re: [RFC][patch] New keep-state-only option (version 3)

2015-02-04 Thread bycn82
*Cool, But maybe not all people are following this topic, so can you please simplify it by answering below question in order to allow more people to know what is going on here.* *What kind of problem you are facing and how does your patch resolve it?* On 4 February 2015 at 17:24, Lev

Re: [RFC][patch] Two new actions: state-allow and state-deny

2015-02-02 Thread bycn82
*cool, I like this, it got some points.* *though the email is too long to be read.* On 3 February 2015 at 14:44, Julian Elischer jul...@freebsd.org wrote: On 2/3/15 3:17 AM, Lev Serebryakov wrote: I propose two new actions: state-allow and state-deny. They imply keep-state and

Re: dragonflybsd's ipfw

2014-12-15 Thread bycn82
these big bosses. * *Compare to the ipfw in FreeBSD, there are few differences. not a big deal.* *1. modular* *2. lock-less* *3. old version* *Regards,* *Bycn82* On Mon, Dec 15, 2014 at 4:34 PM, Sato Kentney satokent...@gmail.com wrote: hi ok. i will test it. but he said it is faster 2014-12-15

Re: dragonflybsd's ipfw

2014-12-15 Thread bycn82
*So **please DON'T make me a joker in front of all these big bosses. * On Mon, Dec 15, 2014 at 8:10 PM, bycn82 byc...@gmail.com wrote: *Hi Sato,* *I am also in this email list, If you have any question, You can ask,I just double checked whether I made mistake or not, and I only found

Re: dragonflybsd's ipfw

2014-11-24 Thread bycn82
://www.dragonflybsd.org/docs/ipfw2/ We've had 'ipfw2' for a very long while. I couldn't help wondering why DF wouldn't just import our many years of development and experience rather than using bycn82's 'rewrite'? .. but DF already has ipfw2: http://leaf.dragonflybsd.org/cgi/web-man?command=ipfwsection

Re: performance of the swtich/case statements

2014-10-30 Thread bycn82
PM, Alfred Perlstein alf...@freebsd.org wrote: Please run compiler with -O2 -S to get the assembly to see what will actually happen. thanks, -Alfred On 10/29/14 9:24 PM, bycn82 wrote: Hi, According to my understanding in Java programming, the compiler will automatically store

RE: ipfw fwd duplicating packets in 9.3-RELEASE

2014-10-29 Thread bycn82
because xmit will check the out interface. Regards, Bycn82 -Original Message- From: owner-freebsd-...@freebsd.org [mailto:owner-freebsd-...@freebsd.org] On Behalf Of Raimundo Santos Sent: Tuesday, 28 October, 2014 3:32 PM To: freebsd-net@freebsd.org Subject: ipfw fwd duplicating packets

Re: performance of the swtich/case statements

2014-10-29 Thread bycn82
, it will jump to N, because call the cases are nice in running numbers, but when the cases are messy, it will by just like lots of if/else On Thu, Oct 30, 2014 at 6:30 AM, Erich Dollansky erichsfreebsdl...@alogt.com wrote: Hi, On Wed, 29 Oct 2014 22:39:34 +0800 bycn82 byc...@gmail.com wrote

Re: HEADS UP: Merging projects/ipfw to HEAD

2014-10-05 Thread bycn82
...@freebsd.org Hi, Good job, Waiting for your code :) Regards, Bycn82 ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org

RE: A TCP problem on High Delay

2014-07-20 Thread bycn82
Hi, Yes, according to your pcap files,it is because of the window size. more information here http://www.ietf.org/rfc/rfc1323.txt and share the result of sysctl net.inet.tcp Regards, bycn82 -Original Message- From: owner-freebsd-...@freebsd.org [mailto:owner-freebsd- n

Re: propose a new generic purpose rule option for ipfw

2014-07-01 Thread bycn82
comments? On Thu, May 29, 2014 at 10:15 PM, Luigi Rizzo ri...@iet.unipi.it wrote: On Thu, May 29, 2014 at 09:48:58PM +0800, bycn82 wrote: -Original Message- From: 'Luigi Rizzo' [mailto:ri...@iet.unipi.it] Sent: 29 May, 2014 21:10 To: bycn82 Cc: 'FreeBSD Net' Subject: Re

RE: [CFT]: ipfw named tables / different tabletypes

2014-06-05 Thread bycn82
:~ # ipfw table 1 list 1.2.3.4/32 0 root@FB10Head:~ # Currently still cleaning the table handling function, and did not add the lock in the kernel functions when changing the `mapping chain`. Regards, bycn82 -Original Message- From: Alexander V. Chernikov [mailto:melif...@ipfw.ru

RE: [CFT]: ipfw named tables / different tabletypes

2014-06-05 Thread bycn82
accept that every object has an integer ID. Hi Alex, Why not clean the ipfw_table_handler() function using the switch/case? Like in my patch, It can be easier to understand the code. Best Regards, bycn82 -Original Message- From: Luigi Rizzo [mailto:ri...@iet.unipi.it] Sent: 05 June, 2014

RE: [CFT]: ipfw named tables / different tabletypes

2014-06-05 Thread bycn82
: 05 June, 2014 23:54 To: bycn82 Cc: 'Alexander V. Chernikov'; 'FreeBSD Net' Subject: Re: [CFT]: ipfw named tables / different tabletypes On Thu, Jun 05, 2014 at 10:49:27PM +0800, bycn82 wrote: Hi Luigi, Yes, use string instead of integer for the ID of table, but the same method cannot apply

RE: propose a new generic purpose rule option for ipfw

2014-05-29 Thread bycn82
Sure your generic binary match could be a welcome addition to ipfw. But its usefulness is extremely limited in practice, as it only lets you match stuff in fixed position of a packet, and it is not even good to do other relatively simple things such as skip options and the like. Sure.

RE: propose a new generic purpose rule option for ipfw

2014-05-29 Thread bycn82
-Original Message- From: 'Luigi Rizzo' [mailto:ri...@iet.unipi.it] Sent: 29 May, 2014 21:10 To: bycn82 Cc: 'FreeBSD Net' Subject: Re: propose a new generic purpose rule option for ipfw On Thu, May 29, 2014 at 08:45:26PM +0800, bycn82 wrote: ... Sure, that is the reason why

a defect in ipfw dummynet

2014-05-24 Thread bycn82
show 1: 8.000 bit/s 0 ms burst 0 q131073 50 sl. 0 flows (1 buckets) sched 65537 weight 0 lmax 0 pri 0 droptail sched 65537 type FIFO flags 0x0 0 buckets 0 active root@FB10Head:~ # Best Regards, Bycn82 ___ freebsd-net

RE: a defect in ipfw dummynet

2014-05-24 Thread bycn82
Ok, anyway, ignore it. :) From: bycn82 [mailto:byc...@gmail.com] Sent: 25 May, 2014 1:09 To: Alexander V. Chernikov; Luigi Rizzo Cc: FreeBSD Net Subject: RE: a defect in ipfw dummynet Hi , After I think it twice, I think the code and the document are OK, But the problem is from

RE: ipfw table add problem

2014-05-23 Thread bycn82
Hi Sato, My fix is a temp solution, and actually you can just update the source code to the latest version or use others. According to what I know, developer Alex is currently working/enhancing the ipfw table feature. I think you will like the new features. Best Regards, bycn82

Re: [Was]: Problem with ipfw table add 0.0.0.0/8

2014-05-20 Thread bycn82
this after finishing new tables code merge. I'm risking to be annoying, but there is a good (from customers point of view) example of tables manipulation in Linux: ipset project (http://ipset.netfilter.org/ipset.man.html) 19.05.2014 17:21, bycn82 пишет: It will be nice to have this feature

Re: Problem with ipfw table add 0.0.0.0/8

2014-05-19 Thread bycn82
On 5/19/14 21:00, Alexander V. Chernikov wrote: On 19.05.2014 11:51, Bill Yuan wrote: Hi Alex, Hello Bill! You guys are chatting here! I agree with you, the table is the place should be enhanced, and I am working in this way as described below 1. Support more types. ip : cidr ipv4 :

Re: [Was]: Problem with ipfw table add 0.0.0.0/8

2014-05-19 Thread bycn82
/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org It will be nice to have this feature, but since the `ipfw table id list` is existing, so I think this can be implemented outside the ipfw. (personal opinion only ) bycn82