Re: RFC: Enabling VIMAGE in GENERIC

2014-11-20 Thread Craig Rodrigues
On Wed, Nov 19, 2014 at 4:33 PM, Bjoern A. Zeeb b...@freebsd.org wrote: https://people.freebsd.org/~bz/20100530-02.vnet.9.html The man page should be in that perforce branch you converted to github. Thank you for pointing that out. It is indeed in github:

[Bug 194264] race between unp_dispose (called from sofree) and unp_gc

2014-11-20 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194264 Andriy Gapon a...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[RFC] add macros for ifnet statistic accounting

2014-11-20 Thread Andrey V. Elsukov
Hi All, we already did some changes in network stack in head/, that made ability for merging changes into stable branches much harder. What you think about adding the following macro to head/: --- if_var.h(revision 274736) +++ if_var.h(working copy) @@ -111,6 +111,10 @@ typedef enum {

VIMAGE UDP memory leak fix

2014-11-20 Thread Craig Rodrigues
Hi, Can folks take a look at this? https://reviews.freebsd.org/D1201 -- Craig ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org

VIMAGE + pf security fix?

2014-11-20 Thread Craig Rodrigues
On Wed, Nov 19, 2014 at 6:05 AM, Bjoern A. Zeeb b...@freebsd.org wrote: For people to use pf with VIMAGE we first MUST have the security fix imported that I pointed out a couple of times in the past. At this link: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3830 I see the

IPsec is very broken...

2014-11-20 Thread John-Mark Gurney
As I'm about to commit my AES-GCM work, I've been trying to do some testing to make sure I didn't break IPsec. The first major issue I ran across was transport mode... ae@ has been nice enough to get ICMP working in transport mode for IPv4 and IPv6, but it looks like TCP is still broken. I

Re: IPsec is very broken...

2014-11-20 Thread Andrey V. Elsukov
On 21.11.2014 00:35, John-Mark Gurney wrote: As I'm about to commit my AES-GCM work, I've been trying to do some testing to make sure I didn't break IPsec. The first major issue I ran across was transport mode... ae@ has been nice enough to get ICMP working in transport mode for IPv4 and

Re: IPsec is very broken...

2014-11-20 Thread John-Mark Gurney
Andrey V. Elsukov wrote this message on Fri, Nov 21, 2014 at 01:20 +0300: On 21.11.2014 00:35, John-Mark Gurney wrote: As I'm about to commit my AES-GCM work, I've been trying to do some testing to make sure I didn't break IPsec. The first major issue I ran across was transport mode...

Re: VIMAGE UDP memory leak fix

2014-11-20 Thread Marko Zec
On Thu, 20 Nov 2014 10:02:46 -0800 Craig Rodrigues rodr...@freebsd.org wrote: Hi, Can folks take a look at this? https://reviews.freebsd.org/D1201 All UMA zones used in the network stack have been marked as UMA_ZONE_NOFREE for ages, probably for a reason, so perhaps it might not hurt to

Re: VIMAGE + pf security fix?

2014-11-20 Thread Ermal Luçi
The fix for that was imported with the new import of pf(4) AFARIR. On Thu, Nov 20, 2014 at 7:07 PM, Craig Rodrigues rodr...@freebsd.org wrote: On Wed, Nov 19, 2014 at 6:05 AM, Bjoern A. Zeeb b...@freebsd.org wrote: For people to use pf with VIMAGE we first MUST have the security fix