GRE tunnels anyone?

2005-10-11 Thread Joshua Weaver
 

The company I work for uses a lot of multicast tunnels, usually with a
QOS/GRE implementation with quite pricy hardware.  I googled around a bit,
it looks like basic vpn is supported for FreeBSD. I guess my questions are

1.)Does FreeBSD play well with vpn-capable routers  (like a 3Com 5012)

2.)Would getting acceptable latency tunneling multicast mean hardware
that's just as expensive as a router costing thousands?

TINA

Joshua Weaver

Senior Systems Engineer

Metropark Communications, Inc.
(314) 439-1900 main
(314) 439-1313 fax
(866) NBX-HELP

Metropark's Home Pagehttp://www.metropark.com/
http://www.metropark.com
WorldWide NBX Supporthttp://www.nbxhelpdesk.com/
http://www.nbxhelpdesk.com
NBX Accessories http://www.nbxsoftware.com/
http://www.nbxsoftware.com

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

RE: Here's the proof.

2005-10-06 Thread Joshua Weaver
 [mailer daemon - original message truncated]

It appears you are right. I guess the Gates foundation does have a
controlling interest in FreeBSD. I wonder what direction Microsoft will take
when the complete the merger?

-Josh

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Hidden spot on hard drives?

2005-10-06 Thread Joshua Weaver
What is the software called? Let somebody research it from there.  Or dload
the prog and crack it open wit Ida...

-Josh

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: two questions in one

2005-09-20 Thread Joshua Weaver

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:owner-freebsd-
 [EMAIL PROTECTED] On Behalf Of Erik Nørgaard
 Sent: Tuesday, September 20, 2005 1:11 AM
 To: steve lasiter
 Cc: free bsd
 Subject: Re: two questions in one
 
 steve lasiter wrote:
  My web server is up and running well and I can test
  all by going to 192.168.0.2 from any internal
  workstation, but if I try to go to www.mywebsite.com
  from any internal workstation, which maps to the
  66.190.xxx.xxx IP directed to web server port 80 as it
  should, 

That’s the problem - you are using NAT, you can't go out and come back in,
your packets will expire because they will not be routed back in, and that's
by design.   You need to set up an internal forward zone in your DNS to
direct requests to the internal address .To see what I am talking about,
trying pinging your website from the inside using the external address.  If
your router is set up appropriately, you should get a  'TTL expired'
message.

Set up an 'A' record for www in mywebsite.com on one of your internal boxes
to point to 192.168.0.2, and set up forwarders to your ISP's name servers on
this box.  Set all your internal hosts to use that machine for DNS requests,
and you will be good to go.

-Joshua Weaver

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: port scanning and hidden servers

2005-09-07 Thread Joshua Weaver
google up arp-sk, use it to modify the arp tables in switch and play with
him a bit :)

-Joshua

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:owner-freebsd-
 [EMAIL PROTECTED] On Behalf Of Mike Hernandez
 Sent: Wednesday, September 07, 2005 10:26 AM
 To: [EMAIL PROTECTED]
 Subject: Re: port scanning and hidden servers
 
 If you ask him not to do so, then you know who he is, correct? The
 best way to prevent him from continuing is to deny him access to the
 network.  AFAIK there is no way to block a scan, though you could
 close ports and otherwise secure your systems so that the scans won't
 produce any helpful information?  Hiding a server wont help much, nmap
 can scan blocks of IP's.  If the servers aren't on the same network as
 your users they can't be scanned easily, but that might complicate
 your setup.
 
 IMHO, revoke the user's permission to access the network, or bring up
 the issue with someone who has the authority to do so.
 
 Mike
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Will this actually work?

2005-08-24 Thread Joshua Weaver
No,  it uses layer 2 communication at that point.  On the 6 FreeBSD stations
I have, you are apparently right. It looks like a way to exploit a system
without access to the ports. I'm not sure why the kernel intercepts the data
that way (you didn't even use a NOP sled.)

-Josh

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: OT: Re: WinXP administration guide for unix guru

2005-08-22 Thread Joshua Weaver
What are the symptoms that you need administrator privileges? The default
security scheme, even with the SP2 behemoth installed, require an
administrator or power user to install the printer, but a user can print to
it.  Is this just a postfix or pdl printer installed with a local tcp/ip
port or are you connecting to a shared network printer off a samba machine?
Is the sky really blue and will I get flamed for replying to a windows
question? Only time will tell

Joshua Weaver

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:owner-freebsd-
 [EMAIL PROTECTED] On Behalf Of Louis LeBlanc
 Sent: Monday, August 22, 2005 4:29 PM
 To: freebsd-questions@freebsd.org
 Subject: Re: OT: Re: WinXP administration guide for unix guru
 
 On 08/22/05 04:56 PM, Gerard Seibert sat at the `puter and typed:
  On Mon, 22 Aug 2005 15:28:38 +0400 Igor Robul [EMAIL PROTECTED]
wrote:
  
   Louis LeBlanc wrote:
   
   Does it tell you why XP requires any user wishing to print to a
   network printer must have administrator privileges?
   
   It doesnt
 
 
  ** Reply Separator **
  Monday, August 22, 2005 4:50:11 PM
 
  That is a simple fix. If this is a domain environment, open up the
  security properties of the printer and add Authenticated Users and give
  them the print privilege.
 
  This is similar to having to change permissions, etc. in order to allow
  non-root users the ability to mount floppy drives, etc. in FreeBSD.
 
 Thanks for the tip, but this isn't a domain environment.  There is NO
 security property available for this printer.  This is the only
 machine I'm tolerating a M$ OS on, so I don't really need the hassle
 of a domain.  The printer in question has its own ethernet port, and
 runs its own printserver, and security is intended to be open to any
 system within my network.
 
 Lou
 --
 Louis LeBlanc  FreeBSD-at-keyslapper-DOT-net
 Fully Funded Hobbyist,   KeySlapper Extrordinaire :)
 Please send off-list email to: leblanc at keyslapper d.t net
 Key fingerprint = C5E7 4762 F071 CE3B ED51  4FB8 AF85 A2FE 80C8 D9A2
 
 bureaucrat, n:
   A politician who has tenure.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: man malloc

2005-08-17 Thread Joshua Weaver
Pointer coercion is standard terminology, it is used when you force cast a
pointer as a different data type.
Btw, most processors since the late 90's can handle a variable not aligned
to their word length, so it would be uncommon.

Good question, Sergey.

Josh

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:owner-freebsd-
 [EMAIL PROTECTED] On Behalf Of Erik Trulsson
 Sent: Wednesday, August 17, 2005 4:33 PM
 To: Sergey Matveychuk
 Cc: [EMAIL PROTECTED]
 Subject: Re: man malloc
 
 On Thu, Aug 18, 2005 at 01:03:46AM +0400, Sergey Matveychuk wrote:
  I know it may be stupid, but I can't understand this sentence from
  malloc(3) man page:
 
  
  The allocated space is suitably aligned (after possible pointer
  coercion) for storage of any type of object.
  
 
  What does suitable aligned for storage of *any* type of object means?
 
 In what way is that difficult to understand?  It can't really be expressed
any
 simpler, and it means exactly what it says:  That the storage allocated by
malloc is
 suitably aligned for storing any kind of object.
 
 As an example, it is not uncommon for many systems to require that a
 32-bit integer must be aligned on a 4-byte boundary. (I.e. if the CPU
tries
 to access such an object placed on an address that is not a multiple of 4,
 then the program will crash.)  Exactly what alignment is required for
 different objects can vary quite a bit, but malloc guarantees that the
 storage it allocates is aligned in such a way that you can store any kind
 object in it (assuming it is large enough, of course.)
 
 
 
  What is pointer coercion?
 
 No idea.  It is not standard terminology anway.
 
  I have no pointer before malloc() returns.
 
 Then where do you store the value returned by malloc?
 You almost certainly do have some pointer even before malloc returns, but
 that pointer might not contain any useful value.
 
 
 --
 Insert your favourite quote here.
 Erik Trulsson
 [EMAIL PROTECTED]
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]