RE: TCP SACK backport to -STABLE

2004-08-25 Thread Maxim Konovalov
On Wed, 25 Aug 2004, 06:06+0200, Oldach, Helge wrote: So please go ahead, give Marko that bit and let him commit this decent work! Please don't touch RELENG_4. Helge -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Julian Elischer Sent:

Re: FIN_WAIT_2 timeout

2004-08-25 Thread Pavel Gulchouck
On Tue, Aug 24, 2004 at 01:55:08PM +0300, Pavel Gulchouck writes: PG On Tue, Aug 24, 2004 at 12:29:23PM +0200, Andre Oppermann writes: I have hangs tcp-sessions in the FIN_WAIT_2 state, in which packets sends to remote for several days. Sockstate tells none aboute its, restart httpd has no

Re: TCP SACK backport to -STABLE

2004-08-25 Thread Marko Zec
On Wednesday 25 August 2004 00:15, Julian Elischer wrote: You do know don't you, that if you continue to do these things, you will be punnished by getting a CVS commit bit..? Well, I didn't write the code myself, just ported it from -CURRENT. Anyhow, glad to see that people still care about

[CFR] Fix sockstat's handling of closed connections

2004-08-25 Thread Peter Pentchev
Hi, I first came across this a couple of months ago, but today I finally took the time to look into it. Basically, if a program has recently closed a TCP connection or three and they are currently in CLOSED or TIME_WAIT state, sockstat(1) will report them as active connected sockets and link

Re: [CFR] Fix sockstat's handling of closed connections

2004-08-25 Thread Andre Oppermann
Peter Pentchev wrote: Hi, I first came across this a couple of months ago, but today I finally took the time to look into it. Basically, if a program has recently closed a TCP connection or three and they are currently in CLOSED or TIME_WAIT state, sockstat(1) will report them as

Re: [CFR] Fix sockstat's handling of closed connections

2004-08-25 Thread Peter Pentchev
On Wed, Aug 25, 2004 at 05:48:38PM +0200, Andre Oppermann wrote: Peter Pentchev wrote: [snip] Luckily, the fix is simple, or at least so it seems to me. It turns out that those connections have a xt_socket-xso_so set to NULL, and the false positive comes from sockstat's matching them to a

Re: [CFR] Fix sockstat's handling of closed connections

2004-08-25 Thread Andre Oppermann
Peter Pentchev wrote: On Wed, Aug 25, 2004 at 05:48:38PM +0200, Andre Oppermann wrote: Peter Pentchev wrote: [snip] Luckily, the fix is simple, or at least so it seems to me. It turns out that those connections have a xt_socket-xso_so set to NULL, and the false positive comes from

IPCOMP on IPSEC

2004-08-25 Thread Thiago Pinto Damas
Hi, I configured a tunnel between two FreeBSD machines with IPSEC, for just using the IPCOMP (without ESP and AH), but the performance wasn't good. Has someone configured a tunnel for only compressing data? Sorry for the bad english! Thiago ___

Re: TCP SACK backport to -STABLE

2004-08-25 Thread Darcy Buskermolen
On August 25, 2004 06:44 am, Marko Zec wrote: On Wednesday 25 August 2004 00:15, Julian Elischer wrote: You do know don't you, that if you continue to do these things, you will be punnished by getting a CVS commit bit..? Well, I didn't write the code myself, just ported it from -CURRENT.

Re: TCP SACK backport to -STABLE

2004-08-25 Thread Eli Dart
In reply to Darcy Buskermolen [EMAIL PROTECTED] : On August 25, 2004 06:44 am, Marko Zec wrote: On Wednesday 25 August 2004 00:15, Julian Elischer wrote: You do know don't you, that if you continue to do these things, you will be punnished by getting a CVS commit bit..? Well, I

Re: TCP SACK backport to -STABLE

2004-08-25 Thread Jon Noack
Eli Dart wrote: Careful there.one major reason I use FreeBSD is that, compared with the other operating systems I can use, major breakages are rare. I expect the policy that prevents you from deploying the most featureful OS available is there to avoid the late-night pain required to run

Re: TCP SACK backport to -STABLE

2004-08-25 Thread Paul Saab
Jon Noack wrote: Eli Dart wrote: Careful there.one major reason I use FreeBSD is that, compared with the other operating systems I can use, major breakages are rare. I expect the policy that prevents you from deploying the most featureful OS available is there to avoid the late-night pain

pf load balancing

2004-08-25 Thread Muhammad Reza
Dear List I have one simple question regarding pf. Does pf load balancing outgoing internet conenction from LAN rules can work together with pf redirection rules are used to forward incoming connections from the Internet to a local server with a private address ? Please enlight me regards Reza