IPFW2 and count rules ... broken ?

2003-02-13 Thread Josh Brooks
Hello, I have recently upgraded to ipfw2 running on 4.7-RELEASE. It seems to be working fine. However, my count rules ... aren't working well at all. I have clear and correct testing that shows that many count rules do not increment at all when traffic is clearly flowing. For instance: count

5.0-REL alias problem

2003-02-13 Thread Matthew Jonkman
I can't add more than one alias to an interface on a new install of 5.0-rel. I have tried specifying every possible detail of the alias but no change, just get this: ifconfig: ioctl (SIOCAIFADDR): File exists The first alias works fine, can't add more. Notable details: The aliases are in the sam

Re: SAPDB port for FreeBSD

2003-02-13 Thread Matthew Emmerton
> Hello FreeBSD gurus, > > I was surprised; there are no SAPDB (www.sapdb.org) in > http://www.freebsd.org/ports/databases.html list! > Has someone tried to install SAPDB on FreeBSD? Is it possible to create new > port? I tried about a year or so ago, but gave up. The SAPDB "build tools" are extr

detecting increases in PMTU

2003-02-13 Thread Neeraj Bhatia
hello All, I am running Freebsd 4.7 stable release. in6_mtuexpire is called approximately every MTUTIMO_DEFAULT ie every 1 minute. Shouldn't this value be such that the increases in MTU can be detected less frequently,in accordance with RFC 1981, Path MTU Discovery for IPv6. Also the flag RTF_PRO

bridging-problem

2003-02-13 Thread Markus Brueffer
Hi, I set up bridging as described in the freebsd-handbook: kldload bridge sysctl net.link.ether.bridge=1 sysctl net.link.ether.bridge_cfg="xl0 sf1" sysctl net.inet.ip.forwarding=1 Bridging itself works well so far and I can ping all host from both sides of the bridge. Now I have the following

How to get interface's sockaddr_dl with the routing socket ?

2003-02-13 Thread Vincent Jardin
Most of the userland program gets the informations about the interfaces via the Kernel sysctl_iflist() function. When a new interface is added, it is announced by the routing socket with a RTM_IFANNOUNCE message. However the structure if_announcemsghdr does not provide information about the inte

Re: still troubles with MPD and WinXP

2003-02-13 Thread Anthony Volodkin
Sergey Matveychuk wrote: I still a troubles with MPD (now 3.12) and WinXP. Slow and bad connection :( set iface mtu 1400 doesn't help. I'v tried poptop from ports. Works fine but disconnect me when connection idle for a few minutes and doesn't connect till I'v killed pptpd and restart it. In y

Re: ipsec & ipfw: 4.7-release vs -stable

2003-02-13 Thread Mike Durian
On Thursday 13 February 2003 01:44 pm, Andriy Gapon wrote: > > Mike, filing a PR is an excellent idea. I think that should have been from > the start. > Thank you. FYI, it's PR#48159 in case you want to add anything. mike To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd

Re: ipsec & ipfw: 4.7-release vs -stable

2003-02-13 Thread Andriy Gapon
On Mon, 10 Feb 2003, Mike Durian wrote: > once in their decrypted form. So, despite the comment in the commit > message: > > Get rid of checking for ip sec history. It is true that > packets are not supposed to be checked by the firewall rules > twice. However, because the vari

SAPDB port for FreeBSD

2003-02-13 Thread Pranas Baliuka
Hello FreeBSD gurus, I was surprised; there are no SAPDB (www.sapdb.org) in http://www.freebsd.org/ports/databases.html list! Has someone tried to install SAPDB on FreeBSD? Is it possible to create new port? Thanks, - Pranas Baliuka M.Sc. CS Danet Baltic UA

EICON Networks Diva PRI Servers

2003-02-13 Thread Willie Viljoen
Sorry for the cross-posts. The same ISP I was posting about earlier today also have an EICON Diva PRI Server adaptor which they are using to take incoming V.90 and ISDN dial-up calls. The adaptor is currently hooked up to a machine running Windows 2000, and the customers are allowed onto their

still troubles with MPD and WinXP

2003-02-13 Thread Sergey Matveychuk
I still a troubles with MPD (now 3.12) and WinXP. Slow and bad connection :( set iface mtu 1400 doesn't help. I'v tried poptop from ports. Works fine but disconnect me when connection idle for a few minutes and doesn't connect till I'v killed pptpd and restart it. Any help? Any suggestion?

Re: ipfw: count=pass?

2003-02-13 Thread Andrey Simonenko
On Thu, 13 Feb 2003 10:25:17 + (UTC) in lucky.freebsd.net, Andrea Venturoli wrote: > >> You should find "allow" rule before "deny" rule which allows some traffic. > > I'm really sure there wasn't any. I don't have the system here available now, but >I'm sure rules 1001-1255 were counting >

Re: ipfw: count=pass?

2003-02-13 Thread Andrea Venturoli
** Reply to note from Andrey Simonenko <[EMAIL PROTECTED]> Thu, 13 Feb 2003 11:23:16 +0200 (EET) > If the counter of some IPFW rule is always 0, then this means that this > rule is not reached (you are right here). So rule 2000 (deny) was not reached. > After "count" rule the search > conti

Re: ipfw: count=pass?

2003-02-13 Thread Andrey Simonenko
On Wed, 12 Feb 2003 16:02:37 + (UTC) in lucky.freebsd.net, Andrea Venturoli wrote: > Hello! > I've tried to block users from surfing the web, once they have moved > a certain amount of traffic per week. I put a series of "count" rules > in ipfw and let cron call a script every 5 minutes to read