Re: IPFW flaws with IPv6 fragments

2010-05-26 Thread Brandon Gooch
On Tue, May 25, 2010 at 2:10 PM, Michal wrote: > On 25/05/2010 04:57, Julian Elischer wrote: >> >> I think everyone is staying clear of ipfw at the moment as Luigi is >> dong work on it. if he gets done with his new work he will hopefully >> address the many ipfw bugs currently reported. > > Excus

Re: traffic bandwidth limit with dummynet

2010-06-04 Thread Brandon Gooch
On Fri, Jun 4, 2010 at 6:57 AM, Luigi Rizzo wrote: > On Fri, Jun 04, 2010 at 01:19:32AM -0700, bored to death wrote: >> thank you luigi for your reply, it helped. >> >> i changed the hz parameter to 1000 and then 4000 and then 8000 in my >> /boot/loader.conf. the result got much better. >> i conf

Re: phantom rules

2010-09-14 Thread Brandon Gooch
On Thu, Sep 9, 2010 at 8:17 AM, Gareth de Vaux wrote: > Hi all, for some reason these rules get loaded on boot up before the > ones I specify in a file: > > 00100   0     0 allow ip from any to any via lo0 > 00200   0     0 deny ip from any to 127.0.0.0/8 > 00300   0     0 deny ip from 127.0.0.0/8

Re: layer2 ipfw 'fwd' support

2010-10-04 Thread Brandon Gooch
On Mon, Oct 4, 2010 at 9:44 AM, Eduardo Meyer wrote: > Hello, > > In the past I have used this patch by Luigi Rizzo, which helped me well. > > http://lists.freebsd.org/pipermail/freebsd-ipfw/2003-September/000526.html > > I tried with a friend to port it to -STABLE, but we were not able to > find

Re: layer2 ipfw 'fwd' support

2010-10-08 Thread Brandon Gooch
On Fri, Oct 8, 2010 at 10:55 AM, Eduardo Meyer wrote: > On Thu, Oct 7, 2010 at 10:23 PM, Eduardo Meyer wrote: [SNIP] > Luiz has added it to: http://loos.no-ip.org:280/lusca_bridge.diff > > I have tested and it works pretty well. > > I hope someone can add it to -HEAD, so we won't loose it again.

Re: [Panic] Dummynet/IPFW related recurring crash.

2011-01-06 Thread Brandon Gooch
2011/1/6 Pawel Tyll : > Hi lists, > > I've reported this problem: > http://www.freebsd.org/cgi/query-pr.cgi?pr=152360 > > and ever since 8.1-RELEASE this machine keeps panicking every two weeks > or so. Any help will be much appreciated. I'll be happy to provide any > more info to help tracking thi

Re: [Panic] Dummynet/IPFW related recurring crash.

2011-01-07 Thread Brandon Gooch
On Fri, Jan 7, 2011 at 10:14 AM, Pawel Tyll wrote: > One more question tough, > > I have 4 identical machines, also with em-driven NICs - yet this is > the only one that dies like this. OTOH Other machines don't do traffic > shaping and do not use ipfw that extensively. Does this match your > theo

Re: Request for policy decision: kernel nat vs/and/or natd

2011-01-07 Thread Brandon Gooch
On Thu, Dec 23, 2010 at 8:58 AM, Ian Smith wrote: > Folks, > > [ If someone implements an /etc/rc.d/ipfw reload command that reliably > works over a remote session without any open firewall window, great, but > I'd rather not discuss the related issues below in reponses to any PR ] > > In order to

Re: [Panic] Dummynet/IPFW related recurring crash.

2011-01-24 Thread Brandon Gooch
On Sun, Jan 23, 2011 at 7:08 PM, Pawel Tyll wrote: > On Fri, Jan 7, 2011, Brandon Gooch wrote: >> It's likely that the mbuf handling problem (in em_refresh_mbufs()) is >> triggered by the processing you're doing with ipfw (or elsewhere for >> that matter), so, y

Re: [Panic] Dummynet/IPFW related recurring crash.

2011-02-19 Thread Brandon Gooch
2011/2/19 Pawel Tyll : > Hi guys, lists, > > It's me, the bi-weekly panic guy. Guess what, it crashed today. As an > act of desperation I disabled the pipe dumping script after previous > crash, which today turned out to be merely a coincidence and didn't > prevent panics. (I thought it to be a lon

Re: [Panic] Dummynet/IPFW related recurring crash.

2011-02-19 Thread Brandon Gooch
On Sat, Feb 19, 2011 at 8:40 PM, Jack Vogel wrote: > I've never seen a trace like this, and no absolutely nothing about dummynet, > sorry. > If it is in some way em's fault, then making sure you have the latest code > would be > a good idea. I have a test driver that is under selective test, it do