freebsd-hack...@freebsd.org

2013-03-26 Thread budsz
Hi folks,

I want ask about error in `dmesg` output remove Bump sched buckets to
64 (was 0)
in FreeBSD 8.3 STABLE version. Where's the code lines should be remove (safety)?

Thank You

-- 
budsz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


PF RDR from LAN to LAN

2012-08-31 Thread budsz
Hi folks,

I've little questions about RDR using Packet Filter (PF), I used IPF
(IPFILTER) before and success with this scenario.

extif = outside interface
intif = internal interface
public_ip = 202.xxx.xxx.xxx
client_create = 192.168.1.1, port = 6112
client_join = 192.168.1.2

for outside/internet
rdr pass on $extif proto tcp from any to $public_ip port 6112  -
$client_create port 6112

That's rule success can forward from from internet to $client_create,
now other plan how to forward
$client_join to $client_create. I use this rule:

rdr pass on $intif proto tcp from $client_join to $public_ip port 6112
 - $client_create port 6112

As far i know if $client_create created game host with port 6112 will
be translate to $public_ip with port 6112 too.
so I need to forward from LAN to $public_ip/6112 to actually who
create game ($client_create/6112)

pfctl -s state resulting:

client_create 6112 - public_ip 6112 - client_join SYS-CLOSED

Anyone help for this issue - Thank you

-- 
budsz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: IPFW transparent VS dummynet rules

2012-01-08 Thread budsz
On Sun, Jan 8, 2012 at 1:00 PM, Ian Smith smi...@nimnet.asn.au wrote:
 On Sat, 7 Jan 2012, budsz wrote:
 [..]
                keyword instead of an explicit address.  The search 
 terminates if
                this rule matches.
   
    Note particularly the last sentence.  You'll have to do your dummynet
    piping first, if it is to apply also to forwarded packets.
   
    (sysctl)
         net.inet.ip.fw.one_pass: 1
                When set, the packet exiting from the dummynet pipe or from
                ng_ipfw(4) node is not passed though the firewall again.  
 Other-
                wise, after an action, the packet is reinjected into the 
 firewall
                at the next rule.
   
    It seems that you may have one_pass set to 1.  Set to 0, packets will
    continue through the ruleset on exit from pipe/s, so to your fwd rule.
   
    cheers, Ian
  
   Thank you very much, lazy to read ipfw(8) :)
  
   pipe pipe_nr
                Pass packet to a dummynet ``pipe'' (for bandwidth limitation,
                delay, etc.).  See the TRAFFIC SHAPER (DUMMYNET) CONFIGURATION
                Section for further information.  The search terminates; 
 however,
                on exit from the pipe and if the sysctl(8) variable
                net.inet.ip.fw.one_pass is not set, the packet is passed 
 again to
                the firewall code starting from the next rule.
  
  
   --
   budsz

 No problem.  However it's considered good form to also copy responses
 cc'd back to the two lists this thread appears on, for the archives.

 Not that I need the credit, but it shows that the advice was useful, and
 that other list members need not also respond, thinking it unresolved.

 cheers, Ian

OK,thank you for reminding me :)

TIA

-- 
budsz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


IPFW transparent VS dummynet rules

2012-01-07 Thread budsz
Hi folks,

I already found the mistake of my ruleset sequence on my box, for ex:

${fwcmd} add 30 fwd ${ipproxy},${portproxy} tcp from ${ipclproxy} to
any dst-port ${porthttp} in via ${ifint0}

${fwcmd} add 52 pipe 2 ip from any to ${ipclient} via ${ifint0}
${fwcmd} add 53 pipe 3 ip from ${ipclient} to any via ${ifint0}
${fwcmd} pipe 2 config bw ${bwcldown} mask dst-ip 0x
${fwcmd} pipe 3 config bw ${bwclup} mask src-ip 0x

With this ruleset sequence, the limiter didn't work but fwd rules working.
If I switching like:

${fwcmd} add 52 pipe 2 ip from any to ${ipclient} via ${ifint0}
${fwcmd} add 53 pipe 3 ip from ${ipclient} to any via ${ifint0}
${fwcmd} pipe 2 config bw ${bwcldown} mask dst-ip 0x
${fwcmd} pipe 3 config bw ${bwclup} mask src-ip 0x

${fwcmd} add 70 fwd ${ipproxy},${portproxy} tcp from ${ipclproxy} to
any dst-port ${porthttp} in via ${ifint0}

The limiter working but fwd didn't work. Anyone have a clue for fix
this dilemma?

Thank You

-- 
budsz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


arp rejecting not working

2010-06-16 Thread budsz
Hello,

I've strange problem in FreeBSD 8.0-STABLE:

root:~# uname -smr
FreeBSD 8.0-STABLE i386

root:~# arp -a | grep pcbill
pcbill.domain.net (192.168.100.100) at 00:1c:f0:63:03:08 on rl0
permanent [ethernet]

root:~# arp -s pcbill.domain.net 00:1c:f0:63:03:08 reject

root:~# ping 192.168.100.100
PING 192.168.100.100 (192.168.100.100): 56 data bytes
64 bytes from 192.168.100.100: icmp_seq=0 ttl=128 time=218.360 ms
64 bytes from 192.168.100.100: icmp_seq=1 ttl=128 time=14.318 ms
^C
--- 192.168.100.100 ping statistics ---
2 packets transmitted, 2 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 14.318/116.339/218.360/102.021 ms

But on other machine:

root:~# uname -smr
FreeBSD 7.3-STABLE i386

root:~# arp -a | grep mdm-po-02
ip.mdm-po-02.p2m.domain.net (10.2.0.1) at 94:0c:6d:be:9e:1a on rl3
permanent [ethernet]

root:~# arp -s ip.mdm-po-02.p2m.domain.net 94:0c:6d:be:9e:1a reject

root:~# ping 10.2.0.1
PING 10.2.0.1 (10.2.0.1): 56 data bytes
ping: sendto: Host is down
^C
--- 10.2.0.1 ping statistics ---
1 packets transmitted, 0 packets received, 100.0% packet loss

Any change log or something in FreeBSD 8.0-STABLE about arp -s command?

Thanks in advance.

-- 
budsz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


PPPoE trouble handshaking

2009-06-25 Thread budsz
Hi,

I got problem with FreeBSD 7.2-STABLE as router. I use TPLINK modem as
bridging to my box.
here is my /etc/ppp/ppp.conf:

default:
#set log Phase Chat LCP IPCP CCP tun command
#set log all
set log Phase tun command

speedy:
set device PPPoE:rl1

set authname xx...@isp.net
set authkey x
set dial
set login
set cd 5
set crtscts off
add default HISADDR
set timeout 0 # 3 minute idle timer (the default)
# no idle time out, will not disconnect

set mru 1492
set mtu 1492

set speed sync

enable lqr
set lqrperiod 5
enable mssfixup

# For noisy lines, we may want to reconnect (up to 20 times) after loss
# of carrier, with 3 second delays between each attempt:
#
#set reconnect 3 20
set redial 0 0

I try to use -ddial mode with ppp(8). Here is log problem /var/log/ppp.log:

Jun 25 12:00:01 rtr-gw ppp[346]: tun0: Phase: deflink: Disconnected!
Jun 25 12:00:01 rtr-gw ppp[346]: tun0: Phase: deflink: carrier - hangup
Jun 25 12:00:01 rtr-gw ppp[346]: tun0: Phase: deflink: Connect time: 5
secs: 0 octets in, 0 octets out
Jun 25 12:00:01 rtr-gw ppp[346]: tun0: Phase: deflink: 0 packets in, 0
packets out
Jun 25 12:00:01 rtr-gw ppp[346]: tun0: Phase:  total 0 bytes/sec, peak
0 bytes/sec on Thu Jun 25 11:59:56 2009
Jun 25 12:00:01 rtr-gw ppp[346]: tun0: Phase: deflink: hangup - opening
Jun 25 12:00:01 rtr-gw ppp[346]: tun0: Phase: deflink: Enter pause (0)
for redialing.
Jun 25 12:00:01 rtr-gw ppp[346]: tun0: Phase: deflink: Connected!
Jun 25 12:00:01 rtr-gw ppp[346]: tun0: Phase: deflink: opening - dial
Jun 25 12:00:01 rtr-gw ppp[346]: tun0: Phase: deflink: dial - carrier
Jun 25 12:00:06 rtr-gw ppp[346]: tun0: Phase: deflink: Disconnected!

And, with full debug mode:

Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Timer:  Begin of Timer
Service List---
Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Timer: physical throughput
timer[0x28412068]: freq = 1.00s, next = 0.00s, state = running
Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Timer:  End of Timer
Service List ---
Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Timer: timer_Start: Inserting
physical throughput timer[0x28412068]
Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Phase: deflink: Disconnected!
Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Phase: deflink: carrier - hangup
Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Debug: deflink: Close
Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Phase: deflink: Connect time:
5 secs: 0 octets in, 0 octets out
Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Phase: deflink: 0 packets in,
0 packets out
Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Phase:  total 0 bytes/sec,
peak 0 bytes/sec on Thu Jun 25 11:24:27 2009
Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Phase: deflink: hangup - opening
Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Timer: timer_Start: Inserting
dial timer[0x28410d44]
Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Phase: deflink: Enter pause
(0) for redialing.
Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Timer: Select returns -1
Jun 25 11:24:32 rtr-gw ppp[3090]: tun0: Chat: deflink: Redial timer expired.

Anyone know this problem.. my box very hard to negotiation with my ISP.

Thank You

-- 
budsz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: PPPoE trouble handshaking

2009-06-25 Thread budsz
On Thu, Jun 25, 2009 at 3:53 PM, Nikos Vassiliadisnvass9...@gmx.com wrote:
 budsz wrote:

 I got problem with FreeBSD 7.2-STABLE as router. I use TPLINK modem as
 bridging to my box.

 Could you run tcpdump -ni rl1 while trying and post
 it to the list?

If problem appear, I will do it. This problem not regularly, I got the
same problem 2 week ago and today. I don't know what happen exactly,
but I can dialing again after 3 hours.

Thank You.

-- 
budsz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: PPPoE trouble handshaking

2009-06-25 Thread budsz
On Thu, Jun 25, 2009 at 9:03 PM, Nikos Vassiliadisnvass9...@gmx.com wrote:
 budsz wrote:

 On Thu, Jun 25, 2009 at 3:53 PM, Nikos Vassiliadisnvass9...@gmx.com
 wrote:

 budsz wrote:

 I got problem with FreeBSD 7.2-STABLE as router. I use TPLINK modem as
 bridging to my box.

 Could you run tcpdump -ni rl1 while trying and post
 it to the list?

 If problem appear, I will do it. This problem not regularly, I got the
 same problem 2 week ago and today. I don't know what happen exactly,
 but I can dialing again after 3 hours.

 So, your configuration works, but at times it gets disconnected.
 And when that disconnection happens, it fails to re-connect. That
 means that if you pull the modem's power plug, you'll be able to
 establish a connection after some time and not immediately, right?

 1) You should also enable echo along with enable lqr.

 When you pull the FreeBSD's ethernet plug does it work?
 2) You should watch the logs and wait for it to disconnect, plug
 the ethernet in and wait to re-connect on its own.

 3) Then you should try the same with the DSL line, pull the plug
 from the modem and it should behave the same way, that is
 disconnect and re-connect on its own.

 Do these three steps and if everything works, wait for the
 random disconnection to happen. It should behave the same way.

 tcpdump is your friend while trying the above.

OK, dud. Right now I got some problem here output tcpdump -ni rl1:

20:14:58.764661 PPPoE PADO [Host-Uniq 0x009043C2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:14:58.864426 PPPoE PADO [Host-Uniq 0x009043C2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:15:00.799157 PPPoE PADI [Host-Uniq 0x408612C2] [Service-Name]
20:15:00.799165 PPPoE PADI [Host-Uniq 0x408612C2] [Service-Name]
20:15:04.014864 PPPoE PADO [Host-Uniq 0x408612C2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:15:04.031335 PPPoE PADO [Host-Uniq 0x408612C2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:15:05.905186 PPPoE PADI [Host-Uniq 0xC05C5CC2] [Service-Name]
20:15:05.905193 PPPoE PADI [Host-Uniq 0xC05C5CC2] [Service-Name]
20:15:08.964978 PPPoE PADO [Host-Uniq 0xC05C5CC2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:15:09.064289 PPPoE PADO [Host-Uniq 0xC05C5CC2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:15:11.011223 PPPoE PADI [Host-Uniq 0x008922C2] [Service-Name]
20:15:11.011231 PPPoE PADI [Host-Uniq 0x008922C2] [Service-Name]
20:15:14.164175 PPPoE PADO [Host-Uniq 0x008922C2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:15:14.181137 PPPoE PADO [Host-Uniq 0x008922C2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:15:16.117251 PPPoE PADI [Host-Uniq 0xC0595CC2] [Service-Name]
20:15:16.117259 PPPoE PADI [Host-Uniq 0xC0595CC2] [Service-Name]
20:15:19.248075 PPPoE PADO [Host-Uniq 0xC0595CC2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:15:19.264056 PPPoE PADO [Host-Uniq 0xC0595CC2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:15:22.367294 PPPoE PADI [Host-Uniq 0x007D22C2] [Service-Name]
20:15:22.367302 PPPoE PADI [Host-Uniq 0x408612C2] [Service-Name]
20:15:22.367311 PPPoE PADI [Host-Uniq 0x408612C2] [Service-Name]
20:15:25.464788 PPPoE PADO [Host-Uniq 0x007D22C2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:15:25.480781 PPPoE PADO [Host-Uniq 0x408612C2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:15:25.497286 PPPoE PADO [Host-Uniq 0x408612C2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:15:27.473336 PPPoE PADI [Host-Uniq 0x805B5CC2] [Service-Name]


tcpdump: WARNING: rl1: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on rl1, link-type EN10MB (Ethernet), capture size 96 bytes
20:16:18.533688 PPPoE PADI [Host-Uniq 0x009443C2] [Service-Name]
20:16:18.533695 PPPoE PADI [Host-Uniq 0x009443C2] [Service-Name]
20:16:18.968779 PPPoE  [ses 0x197f] LCP, Conf-Request (0x01), id 92, length 21
20:16:21.662866 PPPoE PADO [Host-Uniq 0x009443C2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:16:21.679340 PPPoE PADO [Host-Uniq 0x009443C2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:16:22.040825 PPPoE  [ses 0x197f] LCP, Conf-Request (0x01), id 92, length 21
20:16:23.639726 PPPoE PADI [Host-Uniq 0x005B5CC2] [Service-Name]
20:16:23.639733 PPPoE PADI [Host-Uniq 0x005B5CC2] [Service-Name]
20:16:25.138200 PPPoE  [ses 0x197f] LCP, Conf-Request (0x01), id 92, length 21
20:16:26.762773 PPPoE PADO [Host-Uniq 0x005B5CC2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:16:26.779243 PPPoE PADO [Host-Uniq 0x005B5CC2] [AC-Name
BRAS-D3-BDG-8Y224150703147] [Service-Name]
20:16:28.562282 PPPoE PADT [ses 0x197f]
20:16:28.562306 PPPoE PADI [Host-Uniq 0xC08722C2] [Service-Name]
20:16:28.745757 PPPoE PADI [Host-Uniq 0xC08722C2] [Service-Name]

We got disconnected after get some warning in /var/log/ppp.log:

Jun 25 20:12:15 rtr-gw ppp[346]: tun0: Phase: deflink: open - lcp
Jun 25 20:12:15 rtr-gw ppp[346]: tun0: Warning

Re: Syntax base IP

2008-05-12 Thread budsz
On Tue, May 6, 2008 at 3:59 PM, Andrey V. Elsukov [EMAIL PROTECTED] wrote:

 budsz wrote:
 
  
   ipunlimit=192.168.0.100/32,10.35.4.1/32,202.129.189.42/32,\
 202.129.189.45/32,125.163.77.180/32,202.43.167.70/32,\
  
  202.43.167.72/32,202.43.161.119/32,202.10.32.10/32,202.93.20.22/32,\
 202.93.20.23/32,202.93.20.24/32,122.102.49.132/32,\
 202.43.161.124/32,202.93.247.26/32,202.93.247.28/32
  
   ${fwcmd} add 100 pipe 1 ip from ${ippriviix} to { not ${ipunlimit} }
   ${portlim} via ${ifint0}
   ${fwcmd} add 101 pipe 1 ip from { not ${ipunlimit} } ${portlim} to
   ${ippriviix} via ${ifint0}
  
   Executing firewall I got error message like this:
   #sh /etc/rc.firewall
   ipfw: opcode 6 size 33 wrong
   ipfw: getsockopt(IP_FW_ADD): Invalid argument
   ipfw: opcode 2 size 33 wrong
   ipfw: getsockopt(IP_FW_ADD): Invalid argument
  
 

 Hallo,

 I got some problem here, these are the example of the rules i've set:


 portlim=20-21,80,88,443,2009,8080,8088,10007,18755
 bwunlimit=64Kbit/s


 ${fwcmd} pipe 1 config bw ${bwunlimit}

 ${fwcmd} table 1 add 10.35.4.1/32 1
 ${fwcmd} table 1 add 122.102.49.132/32 1
 ${fwcmd} table 1 add 125.163.77.180/32 1
 ${fwcmd} table 1 add 192.168.0.100/32 1
 ${fwcmd} table 1 add 202.10.32.10/32 1
 ${fwcmd} table 1 add 202.129.189.42/32 1
 ${fwcmd} table 1 add 202.129.189.45/32 1
 ${fwcmd} table 1 add 202.43.161.119/32 1
 ${fwcmd} table 1 add 202.43.161.124/32 1
 ${fwcmd} table 1 add 202.43.167.70/32 1
 ${fwcmd} table 1 add 202.43.167.72/32 1
 ${fwcmd} table 1 add 202.93.20.22/32 1
 ${fwcmd} table 1 add 202.93.20.23/32 1
 ${fwcmd} table 1 add 202.93.20.24/32 1
 ${fwcmd} table 1 add 202.93.247.26/32 1
 ${fwcmd} table 1 add 202.93.247.28/32 1

 ${fwcmd} add 100 pipe tablearg ip from ${ippriviix} to not table(1)
 ${portlim} via ${ifint0}
 ${fwcmd} add 101 pipe tablearg ip from not table(1) ${portlim} to
 ${ippriviix} via ${ifint0}

 As a result, those ip addresses can pass. But any other ip adresses
 (other than) those above could not be accessed, as if it were blocked.
 My intention is to limit (NOT blocking) any other ip addresses (other
 than) those ip's above. How could i use the 'not' keyword for above
 case ?

 Thank You

 --
 budsz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ACPI trouble FreeBSD 7.0 STABLE

2008-03-02 Thread budsz
Hi,

Yesterday, I try to CVSUP/make world from FreeBSD 6.3 STABLE to
FreeBSD 7.0 STABLE: I got strange debug message here:

Mar  2 14:14:14 gw-core-iixrouter kernel: acpi: suspend request
ignored (not ready yet)
Mar  2 14:14:14 gw-core-iixrouter kernel: acpi: request to enter state
S5 failed (err 6)
Mar  2 14:14:15 gw-core-iixrouter kernel: acpi: suspend request
ignored (not ready yet)
Mar  2 14:14:15 gw-core-iixrouter kernel: acpi: request to enter state
S5 failed (err 6)
Mar  2 14:14:16 gw-core-iixrouter kernel: acpi: suspend request
ignored (not ready yet)
Mar  2 14:14:16 gw-core-iixrouter kernel: acpi: request to enter state
S5 failed (err 6)
Mar  2 14:14:17 gw-core-iixrouter kernel: acpi: suspend request
ignored (not ready yet)
Mar  2 14:14:17 gw-core-iixrouter kernel: acpi: request to enter state
S5 failed (err 6)
Mar  2 14:14:18 gw-core-iixrouter kernel: acpi: suspend request
ignored (not ready yet)
Mar  2 14:14:18 gw-core-iixrouter kernel: acpi: request to enter state
S5 failed (err 6)
Mar  2 14:14:18 gw-core-iixrouter kernel: acpi: suspend request
ignored (not ready yet)
Mar  2 14:14:18 gw-core-iixrouter kernel: acpi: request to enter state
S5 failed (err 6)
Mar  2 14:14:19 gw-core-iixrouter syslogd: exiting on signal 15
Mar  2 14:21:20 gw-core-iixrouter syslogd: kernel boot file is
/boot/kernel/kernel
Mar  2 14:21:20 gw-core-iixrouter kernel: Copyright (c) 1992-2008 The
FreeBSD Project.
Mar  2 14:21:20 gw-core-iixrouter kernel: Copyright (c) 1979, 1980,
1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
Mar  2 14:21:20 gw-core-iixrouter kernel: The Regents of the
University of California. All rights reserved.
Mar  2 14:21:20 gw-core-iixrouter kernel: FreeBSD is a registered
trademark of The FreeBSD Foundation.
Mar  2 14:21:20 gw-core-iixrouter kernel: FreeBSD 7.0-STABLE #0: Sat
Mar  1 09:44:33 WIT 2008
Mar  2 14:21:20 gw-core-iixrouter kernel:
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/IIX-ROUTER
Mar  2 14:21:20 gw-core-iixrouter kernel: Timecounter i8254
frequency 1193182 Hz quality 0
Mar  2 14:21:20 gw-core-iixrouter kernel: CPU: Intel(R) Celeron(R) CPU
2.13GHz (2130.56-MHz 686-class CPU)
Mar  2 14:21:20 gw-core-iixrouter kernel: Origin = GenuineIntel  Id
= 0xf41  Stepping = 1
Mar  2 14:21:20 gw-core-iixrouter kernel:
Features=0xbfebfbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,F
Mar  2 14:21:20 gw-core-iixrouter kernel:
Features2=0x441dSSE3,RSVD2,MON,DS_CPL,CNXT-ID,xTPR
Mar  2 14:21:20 gw-core-iixrouter kernel: real memory  = 263454720 (251 MB)
Mar  2 14:21:20 gw-core-iixrouter kernel: avail memory = 247963648 (236 MB)
Mar  2 14:21:20 gw-core-iixrouter kernel: ACPI APIC Table: A M I  OEMAPIC 
Mar  2 14:21:20 gw-core-iixrouter kernel: ioapic0: Changing APIC ID to 1
Mar  2 14:21:20 gw-core-iixrouter kernel: ioapic0 Version 2.0 irqs
0-23 on motherboard
Mar  2 14:21:20 gw-core-iixrouter kernel: acpi0: A M I OEMRSDT on motherboard
Mar  2 14:21:20 gw-core-iixrouter kernel: acpi0: [ITHREAD]
Mar  2 14:21:20 gw-core-iixrouter kernel: acpi0: Power Button (fixed)
Mar  2 14:21:20 gw-core-iixrouter kernel: acpi0: reservation of 0,
a (3) failed
Mar  2 14:21:20 gw-core-iixrouter kernel: acpi0: reservation of
10, fb0 (3) failed


Someone give me clue to resolving this problem.


Thanks You.

-- 
budsz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Strange problem of ipfilter

2007-10-19 Thread budsz
Hallo,

I got strange problem ipfilter on FreeBSD 6.2-STABLE. After uptime my
machine running 7 days until 10 days, I can't access DNS, sometime
SSH, and etc,  to my box, but this happen randomly. For example I've
rule like this:

# SSH
pass  in   quick on rl0 proto tcp from 192.168.0.0/24 to
192.168.0.100/32 port = 22 keep state

# DNS
pass  in   quick proto udp from 192.168.0.0/24 to
192.168.0.100/32 port = 53 keep state

Whereis:

192.168.0.0/24 my client block ip, 192.168.0.200/32 ip box running ipfilter.

I try to create rule:

pass in all
pass out all

Then reload ipfilter rule. Or I try to restart my machine with my
default rule. So everything gone be alright. FYI, I use:

root:~# ipf -V
ipf: IP Filter: v4.1.13 (416)
Kernel: IP Filter: v4.1.13
Running: yes
Log Flags: 0 = none set
Default: block all, Logging: available
Active list: 0
Feature mask: 0xa

root:~# uname -srm
FreeBSD 6.2-STABLE i386

I do compile ipfilter with default block in kernel configuration. This
night I'll try to make world my FreeBSD box and I hope FreeBSD's
commiter already revision with this bug.

Would you give some clue to fix this problem. Thanks you for your help.


TIA
-- 
budsz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Help about dynamic rule dummynet

2006-09-22 Thread budsz

Hi,

I've old problem with dynamic rule dummynet. I've internet cafe and of
couse they could using download accelerator for download large file
from HTTP/FTP server. In this case they use Freshget or something like
that.  In /etc/rc.firewall I have rule like:

# Downstream for client
ipcl=192.168.0.0/24{1,10,11,12,13,14,50}
bwdown=68Kbit/s
${fwcmd} add 52 queue 1 ip from any to ${ipcl} out via ${ifint}
${fwcmd} queue 1 config weight 5 pipe 2 mask dst-ip 0x00ff
${fwcmd} pipe 2 config bw ${bwdown}

# Upstream for client
bwup=36Kbit/s
${fwcmd} add 53 queue 2 ip from ${ipcl} to any in via ${ifint}
${fwcmd} queue 2 config weight 5 pipe 3 mask src-ip 0x00ff
${fwcmd} pipe 3 config bw ${bwup}

My LAN using private ip address block C (192.168.0.0/24), my client's
ip address 192.168.0.1, 192.168.0.10 - 192.168.0.14, ${ifint} is
inside interface, also I use  4.10-STABLE FreeBSD.

This illustration with output iftop:
www.yahoo.com= client10.example.com  1.91Kb  1.93Kb  1.82Kb
www.hotmail.com  = client11.example.com  1.90Kb  1.91Kb  1.80Kb
www.friendster.com   = client12.example.com  1.50Kb  1.52Kb  1.51Kb
www.geocities.com= client13.example.com  1.60Kb  1.64Kb  1.61Kb
www.geocities.com= client14.example.com  1.54Kb  1.57Kb  1.53Kb

ftp.freebsd.org  = client01.example.com 10.92Kb 10.90Kb 10.89Kb
ftp.freebsd.org  = client01.example.com 11.87Kb 11.91Kb 11.90Kb
ftp.freebsd.org  = client01.example.com 12.88Kb 12.91Kb 12.89Kb
ftp.freebsd.org  = client01.example.com 10.70Kb 10.72Kb 10.71Kb
ftp.freebsd.org  = client01.example.com 10.75Kb 10.78Kb 10.77Kb

If 192.168.0.1 using accelerator to download large file and splited to
5 file simultantly, the client's (192.168.0.10 - 192.168.0.14) will
exhausted bandwidht.

How to resolve this problem, any suggestion?

TIA

--
budsz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Realtek ethernet problem

2005-11-06 Thread budsz
Hi folks,

I've some problem (can't ping etc) with rl (Realtek Ethernet
Manufacture), if I installing that ethernet on the one CPU rl0  rl,
either that ethernet can't be use. Whereas rl0  rl1 has been active
if I use `ifconfig` command. If I droping one of them from my CPU,
ethernet can use again. Would you give information with this situation

TIA

--
budsz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


CPU Hang after upgrade to -STABLE

2005-11-03 Thread budsz
Hi Folks

I use FreeBSD 4.10 -RELEASE for gateway with DSL Modem connection, so
far so good, but one day I decide to upgrade to 4.11 -STABLE version,
I don't know why with the same hardware suddenly my CPU hang, nothing
to do except press riset button.

I didn't find any log message so very difficult for us to find the
solution. I try to downgrade with FreeBSD 4.10 -RELEASE again, so the
trouble doesn't appear.

I've contact vendor hardware for solve problem, but they said my CPU
is OK, I don't know if the DSL modem doesn't compatible with -STABLE
version, or other hardware maybe?

I was running (CPU+FreeBSD -STABLE version) three years ago with
wireless connection, after I change to DSL modem, I get problem CPU
hang.

Would you like to guide me how to solve problem or at least advice.

Thank You.

--
budsz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Rule dummynet.

2005-04-16 Thread budsz
Hi,

I use FreeBSD 4.X using traffic shapper with dummynet, I've some
questions about implementation rule for my box, for example:

I've 4 client computer let's say A, B, C, and D. I've total bandwith 1
Mbps. If client A online and the other offline (B, C, D), client A
should get 100% bandwidht (In this case 1 Mbps), if client A  B
online then A should get = 50% (500 kbps), B = 50% (500 kbps). If
client A, B, C online
then they should get  33,33% of 1 Mbps, If all user online they should
get 25% of 1 Mbps.

Dummynet can do this?, Would you give me an example rule?  

Thank You.

-- 
budsz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Loading balancing with more than one ISP.

2004-01-16 Thread budsz
On Thu, Jan 15, 2004 at 04:41:47PM +0100, Dirk Meyer wrote:
Antoine Jacoutot schrieb:,

 What I'm hoping to do is find a way to route all paquets coming:
 - from DMZ to internet, using NET connexion1
 - from LAN to internet, using NET connection2
 
 To be more understandable, something like this:
 route add from DMZ defaut em0
 route add from LAN defaut em1
 -- I know it is not a real command line, it's just to make things clearer.

Thats easy on your router:
#!/bin/sh
gateway1=10.10.10.1
gateway2=10.10.10.2
dmz=10.10.20.0/24
lan=10.10.30.0/24
ipfw add fwd ${gateway2} ip from ${dmz} to any
ipfw add fwd ${gateway1} ip from ${lan} to any

I never try loading balancing using ipfw(8), but ever read in manual
ipf(5) using rdr for loading balancing. I think this is only work in NAT's box.
I want to know loading balancing with dual connection ISP with FreeBSD,
maybe like
http://www.lartc.org/howto/lartc.rpdb.multiple-links.html#AEN293, in
that URL only using routing can result loading balancing connection.
My questions is does FreeBSD with route(8) can do like that URL. We
playing only in routing table.

Thanks You.


-- 
budsz
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Loading balancing with more than one ISP.

2004-01-14 Thread budsz
Hi,

I was read in this URL:
http://www.lartc.org/howto/lartc.rpdb.multiple-links.html#AEN293

The questions is:

1. With FreeBSD can do like this?, example with route(8)?
2. Does FreeBSD support more than 1 as defaut gateway in routing table??
3. I found some options in /etc/default/rc.conf like static_routes=, 
   if I use static_routes= _WITHOUT_ defaut gateway (defaultrouter= in
   /etc/rc.conf) it's possible?
4. In that URL using weight as prority balancing connection, so in
   FreeBSD how do this?

Thanks You.   

-- 
budsz


pgp0.pgp
Description: PGP signature


Re: What's this mean?

2003-06-29 Thread budsz
On Sat, Jun 28, 2003 at 02:36:28PM -0400, Bill Moran wrote:
in_chksum is a routine that validates the checksum of recieved network data.
As far as I can tell from the code, that error means that the packet of data
was three bytes shorter than it should have been.  One way or the other it's
a network problem.  Could be crappy NIC or other hardware.  Could be some 
sort
of attack using invalid packets.  I'm not familiar enough with that corner 
of
the code to say for sure.
Is this happening frequently?  If you only saw the message once, you can
probably ignore it as a network glitch, but if it's showing up often, you'd
do well to track down the source and fix it.

Thanks Bill for explanation. I assume if I under attack with invalid
packet of data maybe you've any advice to prevent this problem?.

-- 
budsz
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: What's this mean?

2003-06-29 Thread budsz
On Sun, Jun 29, 2003 at 09:58:25AM -0400, Bill Moran wrote:
I'm guessing the problem is continuous.

Start monitoring your network traffic with tcpdump or ethereal or whatever
seems easiest for you.  Search the Internet for information on short packet
attacks or anything else that seems to be similar to your problem.  Lock
down your firewall rules in general.

As I said before, I'm not expert enough to give you any specific advice on
this particular issue, but standard security techniques still apply.

OK, this's clear Bill, I think this's like hardware error. I was check
it, the kernel's message has repeat only four times. I don't know in the
next time. Thanks for your reply. 

-- 
budsz


pgp0.pgp
Description: PGP signature


What's this mean?

2003-06-28 Thread budsz
Hi dude,

I get message in /var/log/message:

/kernel: in_cksum: out of data by 3

Would you explain this message? 


-- 
budsz
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Tunnel

2003-01-27 Thread budsz
Hi,

I've tried some tunnel in FreeBSD box, I started with this URL :
http://www.ezunix.org/modules.php?op=modloadname=Sectionsfile=indexreq=viewarticleartid=5page=1

I've two interface in that machine 'wi0' and 'xl0', wi0 link to my IPS
and xl0 link for my local net. My ifconfig output look like:

router# ifconfig -a
xl0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
inet 202.143.103.229 netmask 0xfff0 broadcast 202.143.103.239
inet6 fe80::260:97ff:fedc:f02e%xl0 prefixlen 64 scopeid 0x1
inet 202.143.103.225 netmask 0x broadcast 202.143.103.225
ether 00:60:97:dc:f0:2e
media: Ethernet autoselect (10baseT/UTP)
status: active
lp0: flags=8810POINTOPOINT,SIMPLEX,MULTICAST mtu 1500
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 16384
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet 127.0.0.1 netmask 0xff00
faith0: flags=8002BROADCAST,MULTICAST mtu 1500
wi0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
inet 202.143.98.250 netmask 0xfffc broadcast 202.143.98.251
inet6 fe80::202:2dff:fe2d:228b%wi0 prefixlen 64 scopeid 0x5
ether 00:02:2d:2d:22:8b
media: IEEE 802.11 Wireless Ethernet autoselect (DS/11Mbps)
status: associated
ssid terasnet-09 1:terasnet-09
stationname kumprang
channel 2 authmode OPEN powersavemode OFF powersavesleep 100
wepmode MIXED weptxkey 1
wepkey 1:64-bit
gif0: flags=8051UP,POINTOPOINT,RUNNING,MULTICAST mtu 1280
tunnel inet 202.143.103.229 -- 213.253.1.201
inet6 2001:618:4:2000::dde -- 2001:618:4:2000::ddd prefixlen 128
inet6 fe80::260:97ff:fedc:f02e%gif0 prefixlen 64 scopeid 0x6

I used ipng.org.uk for broke tunnel, so this /etc/tunnel.conf

# Account details
username=user
password=X

#host and port of tunnel server (5571 non ssl, 5572 ssl)
hostname=ipng.org.uk
port=5572

#interface containing the tunnel endpoint ip and the tunnel interface
name
local_interface=xl0
tunnel_interface=gif0

#remote tunnel ipv4 endpoint and tunnel ipv6 endpoints
#local_ip=youip - Only use this if you have a static address!
local_ip=202.143.103.229
remote_ip=213.253.1.201
local_endpoint=2001:618:4:2000::dde
remote_endpoint=2001:618:4:2000::ddd

I've tunnel in inside interface xl0 (202.143.103.229). and I run a
tunnelc like:

router# ifconfig gif0 destroy
router# tunnelc
WARNING: Unable to verify Server Certificate
210 - OK TLS Session Established. DES-CBC3-SHA
200 - Tunnel Server 0.2.1 waiting.
201 - OK Now a password if you please.
202 - OK Password accepted. Welcome budsz
203 - OK Ip updated to 202.143.103.229
210 - OK If you insist. Bye.
add net default: gateway 2001:618:4:2000::ddd
Tunnel(gif0) created

For ipf.rules and ipf6.rules:

router# cat /etc/ipf.rules
pass in all
pass out all

router# cat /etc/ipf6.rules
pass in all
pass out all

So, I try to ping to xl0:
router# ping6 2001:618:4:2000::dde
PING6(56=40+8+8 bytes) 2001:618:4:2000::dde -- 2001:618:4:2000::dde
16 bytes from 2001:618:4:2000::dde, icmp_seq=0 hlim=64 time=0.54 ms
16 bytes from 2001:618:4:2000::dde, icmp_seq=1 hlim=64 time=0.453 ms
^C
--- 2001:618:4:2000::dde ping6 statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/std-dev = 0.453/0.497/0.540/0.043 ms

If I try to broke gateway:

router# ping6 2001:618:4:2000::ddd
PING6(56=40+8+8 bytes) 2001:618:4:2000::dde -- 2001:618:4:2000::ddd
ping6: sendmsg: No route to host
ping6: wrote 2001:618:4:2000::ddd 16 chars, ret=-1
ping6: sendmsg: No route to host
ping6: wrote 2001:618:4:2000::ddd 16 chars, ret=-1

I try to find in routing table:

$ netstat -r | more

Internet6:
DestinationGatewayFlags  Netif Expire
:: localhost.kumprang UGRSc   lo0 =
defaultgif1635.tunnels.ip UGSc   gif0
localhost.kumprang localhost.kumprang UH  lo0
:::0.0.0.0 localhost.kumprang UGRSc   lo0
gif1635.tunnels.ipUH gif0
   link#6 UHL lo0
fe80:: localhost.kumprang UGRSc   lo0
fe80::%xl0 link#1 UC  xl0
fe80::260:97ff:fed 00:60:97:dc:f0:2e  UHL lo0
fe80::%lo0 fe80::1%lo0Uc  lo0
fe80::1%lo0link#3 UHL lo0
fe80::%wi0 link#5 UC  wi0
fe80::202:2dff:fe2 00:02:2d:2d:22:8b  UHL lo0
fe80::%gif0link#6 UC gif0
fe80::260:97ff:fed link#6 UHL lo0
ff01:: localhost.kumprang U   lo0
ff02:: localhost.kumprang UGRSlo0
ff02::%xl0 link#1 UC  xl0
ff02::%lo0 localhost.kumprang UC  lo0
ff02::%wi0 link#5 UC  wi0
ff02::%gif0link#6 UC gif0

I can't understand why it's happen, so finally I ask

About ipfilter

2003-01-17 Thread budsz
Hi folks,

I need ipfilter which supported by IPv6, I was try in FreeBSD 4.7 STABLE
it's OK, but if I compiled on FreeBSD 5.0 DP1 always failure, because
ipfilter in FreeBSD 5.0 DP1 is too old so not support IPv6. any sugestion
for this?, I finished searching in web resource but I can't found
anything.

TIA

-- 
budsz

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Tool conveter IPv4 to IPv6

2003-01-14 Thread budsz
Hi,

I've plan to learn IPv6, Now I use IPv4 but it's imposible to hint one
by one IPv4 change to IPv6, so anyone who know tool to convert them? and if my
ISP doen't support using IPv6 it's possible if I use IPv6? sorry if my
questions very silly but I want to know so far the concept to to this.

Thx


-- 
budsz

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Log about named

2002-12-14 Thread 'budsz'
Hi,

I've 2 interface xl0 and wi0 in my box with bind9:
$ cat /var/log/message | grep named

Dec 15 13:42:00 router named[300]: omitting IPv4 interface wi0 from
localnets ACL: address mask not contiguous

What that's mean?, It's normally or some problem...? anyone can explain?

Thx


-- 
budsz



msg12101/pgp0.pgp
Description: PGP signature


Orinoco problem

2002-12-13 Thread 'budsz'
Hi,

I tried using orinoco lucent ISA adapter on FreeBSD 5.0-DP2, But I can't
using it, Does FreeBSD 5.0-DP2 support orinoco ISA adapter?, Generally
if I use that card in FreeBSD will auto detected with GENERIC kernel
configuration. Of couse I was check my kernel and I found like:

device  card
device  wi

Anything else..?, Or what..?

TIA

-- 
budsz



msg11967/pgp0.pgp
Description: PGP signature


About options kernel

2002-12-05 Thread budsz
Hi,

Last night I tried FreeBSD 5.0-DP1, but I found some error message:

$ dmegs | more

cut
unknown: PNP0303 can't assign resources (port)
unknown: PNP0a03 can't assign resources (port)
unknown: PNP0501 can't assign resources (port)
unknown: PNP0700 can't assign resources (port)
unknown: PNP0401 can't assign resources (port)
unknown: PNP0501 can't assign resources (port)
/cut

I tried to find options in /usr/src/sys/i386/conf/SOME-CONFIG, So what
options/device should I remove?.

Thx

-- 
budsz

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: [oetiker@ee.ethz.ch: Re: MRTG problem]

2002-11-21 Thread budsz
On Wed, Nov 20, 2002 at 09:07:06PM +0100, Frank Reppin wrote:
budsz: have you already informed the maintainer?

Not yet sir. Maybe I'll try.

Thx

-- 
budsz

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: [oetiker@ee.ethz.ch: Re: MRTG problem]

2002-11-21 Thread budsz
On Wed, Nov 20, 2002 at 01:37:38PM -0600, Dan Nelson wrote:
For what it's worth 2.9.26 works fine on my -current system, monitoring
~500 ports.

Ups I forgot tell about this, I was upgrade mrtg via portupgrade and I
run in FreeBSD-4.7 STABLE version.

-- 
budsz

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



mrtg problem after portupgrade

2002-11-20 Thread budsz
Hi,

I've problem in my box, Yesterday I was try to upgrade port and packages
with this step :

1. Update port tree without X system.
   $ cvsup -g -L 2 port-file
2. Backup packages database.
   $ cd /var/db
   $ cp -rf pkg pkg.old
3. Check all dependecy application.
   $pkgdb -F 
4. Process updating. 
   $portupgrade -a -O -l /root/UpdateLog

   I was add -O because Amavis-Perl-11 require qmail-1.03_1 but in my
   system installed qmail-1.03.
   
5. Check again dependecy.   
   $ pkgdb -F

After that my mrtg graphic was broken, Look like full traffic but scale
does't increase (Only 1 bps/s - 10 bps/s), I tried to reinstall mrtg but
no change.

TIA
 
-- 
budsz

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



[oetiker@ee.ethz.ch: Re: MRTG problem]

2002-11-20 Thread budsz
- Forwarded message from Tobias Oetiker [EMAIL PROTECTED] -

Delivered-To: [EMAIL PROTECTED]
Date: Wed, 20 Nov 2002 16:28:55 +0100 (MET)
From: Tobias Oetiker [EMAIL PROTECTED]
To: budsz [EMAIL PROTECTED]
Subject: Re: MRTG problem
In-Reply-To: [EMAIL PROTECTED]
X-Virus-Scanned: by AMaViS perl-11

Today budsz wrote:

 Hi sir,

 Sorry if I send private this message, I use FreeBSD in my system, So far
 so good but yesterday I tried to upgrade mrtg 2.9.22 to mrtg 2.9.26
 (Via porting), After that I get some error in mrtg, I have bandwidth only
 64 kbps but in mrtg look like:

 Max  In: 34.4 Gb/s (343597.8%)Average  In: 34.3 Gb/s (343062.0%) 
  Current  In: 12.9 Gb/s (129421.8%)
 Max  Out: 9223372036.9 Gb/s (92233720368547.8%)   Average  Out:110364024184.7 Gb/s 
(1103640241846862.6%)   Current  Out: 41635330833.4 Gb/s (416353308334472.8%)

 No error in log or stout so I'am very difficult to trace the problem, And I
 tried to search in web but I can't find anything. Would you help me sir.

it seems 2.9.26 is broken on freebsd ... I don't know why ...

sorry ... hoping for a patch from some user of this system

tobi

 Thanks You very much.



-- 
 ____   _
/_  __/_  / /  (_) Oetiker, ETZ J97, ETH, CH-8092 Zurich, Switzerland
 / // _ \/ _ \/ /  System Manager Coach Time Lord Developer Designer
/_/ \.__/_.__/_/   http://people.ee.ethz.ch/~oetiker +41(0)1-632-5286



- End forwarded message -

-- 
budsz

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: [oetiker@ee.ethz.ch: Re: MRTG problem]

2002-11-20 Thread budsz
paul beard writes: 

budsz wrote: 


it seems 2.9.26 is broken on freebsd ... I don't know why ... 

sorry ... hoping for a patch from some user of this system 

tobi 

I guess the next question is, how to downgrade a port?


Maybe, But however downgrade is tempolary answer 

--
budsz 

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message


Sendmail questions

2002-11-05 Thread budsz
Hi,

I got some message from cron daemon like:

---cut
Mail in local queue:

Mail in submit queue:
mailq: illegal option -- A
sendmail: usage: sendmail [ -t ] [ -fsender ] [ -Fname] [ -bp ] [ -bs ]
[ arg... ]
---cut

Whereas I was try to disable sendmail daemon from /etc/rc.conf like:

---cut
# Settings for /etc/rc.sendmail:
sendmail_enable=NONE  # Run the sendmail inbound daemon (YES/NO/NONE).
sendmail_flags=-L sm-mta -bd -q30m # Flags to sendmail (as a server)
sendmail_submit_enable=NO # Start a localhost-only MTA for mail submission
sendmail_submit_flags=-L sm-mta -bd -q30m -ODaemonPortOptions=Addr=localhost
sendmail_outbound_enable=NO   # Dequeue stuck mail (YES/NO).
sendmail_outbound_flags=-L sm-queue -q30m # Flags to sendmail (outbound only)
sendmail_msp_queue_enable=NO  # Dequeue stuck clientmqueue mail (YES/NO).
sendmail_msp_queue_flags=-L sm-msp-queue -Ac -q30m # Flags for sendmail_msp_queue 
daemon.
---cut

How to resolve this problem?

PS : Now I use qmail system for email.

TIA


-- 
budsz

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Changing key in terminal

2002-10-26 Thread budsz
Hi, 

I was try last night to split/create new windows in BitchX for example
I typed /windows new hide in BX prompt and then I switched to other
window using alt+1, alt+2 etc but nothing happend (doesn't switch), Yes
If I trying using remote terminal it's OK. The question doesn't about
BitctX but How to change key in terminal (console)?, I didn't found this
reference in manual. The same problem I saw in ~/.bash_profile if I used
TERM=xterm-color variable in this case, I can't using editor like vim,
ed (I got like 22h char if I press a key), but if I remotly it's OK, In my 
box doesn't use X system.

Thanks for the solution before.

-- 
budsz

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



What's this mean

2002-10-25 Thread budsz
Hi,

I got same kernel messages like this:

Oct 24 10:30 kumprang /kernel: arp: unknown hardware address format
(0xa8aa)
Oct 24 10:30 kumprang /kernel: ed0: NIC memoru corrupt - invalid packet length 2094

Oct 24 10?30 kumprang /kernel: arp: runt packet
Oct 24 10:30 kumprang /kernel: ed0: NIC memoru corrupt - invalid packet length 2056

What this mean..? and how to resolve this problem..?

TIA

-- 
budsz

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



About rc.firewall

2002-10-15 Thread budsz

Hi,

I've already read some manual ipfw, firewall etc, but I can't found
explanation some variable in /etc/rc.firewall for example:

case ${firewall_type} in
[Oo][Pp][Ee][Nn]
Some rule
;;
*)
Some rule
;;
esac

I don't understand about [Oo][Pp][Ee][Nn], [Cc][Ll][Ee][Nn][Tt],
[Ss][Ii][Mm][Pp][Ee]...etc, Why we should write like this..? what
this mean..?, How this work?, Would somebody give me some URL about
this or something else.

TIA

-- 
budsz



msg05129/pgp0.pgp
Description: PGP signature


Re: About rc.firewall

2002-10-15 Thread budsz

On Tue, Oct 15, 2002 at 10:23:43AM -0400, MikeM wrote:
The [Oo][Pp][Ee][Nn] syntax allows you to specify Open, oPen, OPen, opeN,
etc. in rc.conf to configure the type of firewall you want from the samples
provided in the base install.  

OK thx, So if I use firewall_type= in /etc/rc.conf, what's relations with
line at /etc/rc.firewall for example [Oo][Pp][Ee][Nn]?, It's enough if I
define firewall type only in /etc/rc.firewall..?

-- 
budsz



msg05138/pgp0.pgp
Description: PGP signature


Re: About rc.firewall

2002-10-15 Thread budsz

On Tue, Oct 15, 2002 at 10:30:18AM -0500, Jack L. Stone wrote:
Designating the type open will make your system set up wide open and can
be useful when debugging the rc.firewall script and the kernel has been
compiled to deny all. If you want to the rc.firewall to load and bee
effective though, you must modify it for your own use, incuding the proper
designations of interfaces, ports, and rules.

Sorry, I mean is: 
What is the relation between firewall_type in /etc/rc.conf and the same
statement; firewall_type in rc.firewall? Is it enough if i only define
the firewall_type just once; In rc.firewall only?

-- 
budsz



msg05155/pgp0.pgp
Description: PGP signature


more virtual console

2002-10-14 Thread budsz

Hi,

Where I'am find some line config for adding more virtual for ex:
ALT + F1 until F12 maybe..?

Thanks

-- 
budsz



msg05010/pgp0.pgp
Description: PGP signature


Re: Question port in ipfw

2002-10-09 Thread budsz

On Wed, Oct 09, 2002 at 09:43:37PM -0700, Michael wrote:
This is a good question and maybe someone can answer the question with regards 
to using a variable to do it.

I do know however that it does support a range because I've used it within my 
rules like this: 1030-1050 but not seperating multiple ranges with comma's.

The one time I did try to use multiple ranges I couldn't get it to work 
either.  I just assumed that it was just my lack of knowing how to format it 
and not that it couldn't be done.

In man ipfw explain like:

 [-cut-]
 With the TCP and UDP protocols, optional ports may be specified
 as:

   {port|port-port|port:mask}[,port[,...]]

 The `-' notation specifies a range of ports (including bound-
 aries).
 [-cut-]

Well, If I following this manual of couse with multiple ranges port is no
problem. can somebody explain about this?

-- 
budsz



msg04642/pgp0.pgp
Description: PGP signature


Re: Some problem with dummynet

2002-09-20 Thread budsz

On Fri, Sep 20, 2002 at 10:11:57AM +0200, Oliver Fromme wrote:
budsz [EMAIL PROTECTED] wrote:
  Last night, I tried to limit my client which I changed 23Kbit/s to
  1bit/s (Just experiment), I got some message like below:

That's probably not a good idea, because it will take
several minutes to transfer even a small packet.  That
will trigger timeouts, confuse retransmit algorithms
etc.  I'm not surprised that the dummynet code is
confused by such useless values, too.

OK thx for information

-- 
budsz

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Some problem with dummynet

2002-09-19 Thread budsz

Hi,

Last night, I tried to limit my client which I changed 23Kbit/s to
1bit/s (Just experiment), I got some message like below:

---cut
-- dummynet: warning, heap 0 is 1531352822 ticks late
-- dummynet: warning, heap 0 is 1531314423 ticks late
-- dummynet: warning, heap 0 is 1531276024 ticks late
-- dummynet: warning, heap 0 is 1531237625 ticks late
-- dummynet: warning, heap 0 is 1531199226 ticks late
---cut

What's going on..?, does dummynet crash? any suggestion for this?

PS: I use FreeBSD 4.6.2-Release.

TIA

-- 
budsz

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message