Re: FIREWALL_FORWARD vs. using /sbin/natd ?

2002-01-18 Thread Andreas Klemm
On Mon, Jan 14, 2002 at 01:19:39AM -0800, Crist J . Clark wrote: > On Mon, Jan 14, 2002 at 09:40:23AM +0100, Andreas Klemm wrote: > > On Sun, Jan 13, 2002 at 11:25:41PM -0800, Crist J . Clark wrote: > > > On Sun, Jan 13, 2002 at 11:56:36AM +0100, Andreas Klemm wrote: > > It is also there for any

Re: ICMP Redirect

2002-01-18 Thread Crist J . Clark
On Thu, Jan 17, 2002 at 12:03:02PM +0100, Reto Trachsel (NetModule) wrote: > Hi Crist > > Here the Logs and outputs for you > > Regards > Reto > > # tcpdump -vvXs 1500 'icmp' > > 172.16.224.24 -> BSD Host > 172.16.1.254 -> BSD Router > > 12:00:43.658869 172.16.1.254 > 172.16.224.24: i

Re: interface creation notification

2002-01-18 Thread Ruslan Ermilov
On Thu, Jan 17, 2002 at 06:58:26PM +0100, Harti Brandt wrote: > > Hi, > > how is a daemon supposed to get informed that a network interface has been > created? I had hoped, that an RTM_IFINFO message would be created on the > routing socket, but this is not the case. If an interface is destroyed

what is the corect ISEC behaviour for new connections over old ones?

2002-01-18 Thread Tariq Rashid
i know there's been some debate on this... but what is the current thinking in the light of any possible changes to KAME? the problem is that classic one: two ipsec hosts negotiate keys.. one's a server, one's a client... establish SAs and all is well. now, if one ike daemon is gracefully pulled

Re: interface creation notification

2002-01-18 Thread Harti Brandt
On Fri, 18 Jan 2002, Ruslan Ermilov wrote: RE>On Thu, Jan 17, 2002 at 06:58:26PM +0100, Harti Brandt wrote: RE>> RE>> Hi, RE>> RE>> how is a daemon supposed to get informed that a network interface has been RE>> created? I had hoped, that an RTM_IFINFO message would be created on the RE>> routing

Re: interface creation notification

2002-01-18 Thread Ruslan Ermilov
On Fri, Jan 18, 2002 at 10:41:58AM +0100, Harti Brandt wrote: > On Fri, 18 Jan 2002, Ruslan Ermilov wrote: > > RE>On Thu, Jan 17, 2002 at 06:58:26PM +0100, Harti Brandt wrote: > RE>> > RE>> Hi, > RE>> > RE>> how is a daemon supposed to get informed that a network interface has been > RE>> created

RE: ICMP Redirect

2002-01-18 Thread Reto Trachsel (NetModule)
Good Morning Crist Ok, this with the Network-IP aliases, you are right, tnx for the tip. I think you are intrested in the Flags, D for dynamic redirect and M for modified dynamical from redirect. On the BSDClient, there are no entries in the routing table with the D or M Flag. I detected two "mi

Re: netgraph: how to setsockopt on ksocket node ?

2002-01-18 Thread Rogier R. Mulhuijzen
Hi Florent, You use: struct opts { int level; int name; int value; } myopts; myopts.level = SOL_SOCKET; myopts.name = SO_REUSEPORT; myopts.value = 1; But socket options (on this level) are a predefined struct. Here's an example from some co

Re: interface creation notification

2002-01-18 Thread Harti Brandt
On Fri, 18 Jan 2002, Ruslan Ermilov wrote: RE>On Fri, Jan 18, 2002 at 10:41:58AM +0100, Harti Brandt wrote: RE>> On Fri, 18 Jan 2002, Ruslan Ermilov wrote: RE>> RE>> RE>On Thu, Jan 17, 2002 at 06:58:26PM +0100, Harti Brandt wrote: RE>> RE>> RE>> RE>> Hi, RE>> RE>> RE>> RE>> how is a daemon suppos

Re: interface creation notification

2002-01-18 Thread Ruslan Ermilov
On Fri, Jan 18, 2002 at 03:23:09PM +0100, Harti Brandt wrote: > On Fri, 18 Jan 2002, Ruslan Ermilov wrote: > > RE>On Fri, Jan 18, 2002 at 10:41:58AM +0100, Harti Brandt wrote: > RE>> On Fri, 18 Jan 2002, Ruslan Ermilov wrote: > RE>> > RE>> RE>On Thu, Jan 17, 2002 at 06:58:26PM +0100, Harti Brandt

Re: interface creation notification

2002-01-18 Thread Harti Brandt
On Fri, 18 Jan 2002, Ruslan Ermilov wrote: RE>On Fri, Jan 18, 2002 at 03:23:09PM +0100, Harti Brandt wrote: RE>> On Fri, 18 Jan 2002, Ruslan Ermilov wrote: ... RE>> RE>I've just committed this feature. RE> RE>> Just one question: RE>> is there any locking that does a user process prevent from see

Re: netgraph: how to setsockopt on ksocket node ?

2002-01-18 Thread Florent Parent
--On 2002-01-18 11:55:09 +0100 [EMAIL PROTECTED] wrote: > But socket options (on this level) are a predefined struct. Here's an > example from some code I am working on: > > struct sockopt sopt; > > /* some code removed */ > > bzero(&sopt, sizeof(sopt)); > sopt.sopt_level =

Re: ICMP Redirect

2002-01-18 Thread Crist J . Clark
On Fri, Jan 18, 2002 at 11:28:12AM +0100, Reto Trachsel (NetModule) wrote: > Problem 1 > - > > If i'm doing a ping to an external address, on the router machine i can see > two ICMP request packets: > > 10:41:33.868478 172.16.224.24 > 157.161.7.7: icmp: echo request > 10:41:33.868501 17

Re: netgraph: how to setsockopt on ksocket node ?

2002-01-18 Thread Archie Cobbs
Florent Parent writes: > >> Anyone has an example on how to setsockopt on a ksocket node in netgraph? > >> > >> struct opts { > >> int level; > >> int name; > >> int value; > >> } myopts = { SOL_SOCKET, SO_REUSEADDR, 1 > >> }; > >> > >> ret = NgSendMsg(cs, e