Re: known TCP vulnerability ??

2005-02-11 Thread Don Lewis
On 11 Feb, Andre Oppermann wrote: > "Li, Qing" wrote: >> >> http://www.kb.cert.org/vuls/id/464113 >> >> http://www.linuxsecurity.com/content/view/104980/98/ >> >> Ran the packet tests against FreeBSD 5.3 and 6-CURRENT and both >> respond to the SYN+FIN packets wit

Patch to set TCP_NOPUSH on libfetch HTTP connections

2005-02-11 Thread Kelly Yancey
I recently noticed that libfetch often splits HTTP GET requests across multiple packets as a result of calling writev() for each line of the header. A simple request ends up on the wire as: 13:19:42.647461 216.69.71.45.1390 > 216.69.64.149.80: S 1287054177:1287054177(0) win 57344 (DF) 0x000

Re: kernel mode httpd/ftpd for FreeBSD?

2005-02-11 Thread Julian Elischer
CHOI Junho wrote: Again, I know what is tux and why there is no such experiment on FreeBSD. As I mentionned earlier. This is not totally true. An in-kernel httpd was implemented using the netgraph ksocket node to open a socket in the kernel. The httpd was I believe implemented as a netgraph modul

Re: known TCP vulnerability ??

2005-02-11 Thread Andre Oppermann
"Li, Qing" wrote: > > http://www.kb.cert.org/vuls/id/464113 > > http://www.linuxsecurity.com/content/view/104980/98/ > > Ran the packet tests against FreeBSD 5.3 and 6-CURRENT and both > respond to the SYN+FIN packets with SYN+ACK. This is expected behaviour beca

known TCP vulnerability ??

2005-02-11 Thread Li, Qing
http://www.kb.cert.org/vuls/id/464113 http://www.linuxsecurity.com/content/view/104980/98/ Ran the packet tests against FreeBSD 5.3 and 6-CURRENT and both respond to the SYN+FIN packets with SYN+ACK. Should I file a PR if there isn't one already ?

arp -s auto fails for inet alias subnets

2005-02-11 Thread Pawel Malachowski
Hello, ifconfig fxp0 inet 10.0.0.1/24 ifconfig fxp0 inet add 10.0.1.1/24 both arp -s 10.0.0.2 1:1:1:1:1:1 pub arp -s 10.0.1.2 1:1:1:1:1:1 pub work. however arp -s 10.0.0.2 auto pub works, but arp -s 10.0.1.2 auto pub fails with no interface found for 10.0.1.2. Tested with FreeBSD 4.10-STABL

Re: kernel mode httpd/ftpd for FreeBSD?

2005-02-11 Thread Christian Brueffer
On Mon, Feb 07, 2005 at 06:20:21PM +0900, CHOI Junho wrote: > > Anyone knows about kernel-mode httpd/ftpd for FreeBSD? (just like tux > of linuxI searched several times but failed. > Hiten Pandya played with that a while ago, the outcome is here: http://people.freebsd.org/~hmp/code/fritz.tgz

Re: kernel mode httpd/ftpd for FreeBSD?

2005-02-11 Thread CHOI Junho
From: Gleb Smirnoff <[EMAIL PROTECTED]> Subject: Re: kernel mode httpd/ftpd for FreeBSD? Date: Fri, 11 Feb 2005 13:43:52 +0300 > Junho, > > On Tue, Feb 08, 2005 at 10:42:27PM +0900, CHOI Junho wrote: > C> I understand what you mean. If so, why serious network server like nfs > C> is still in ke

Re: Netgraph performance question

2005-02-11 Thread Gleb Smirnoff
On Fri, Feb 04, 2005 at 11:03:31AM -0600, Guy Helmer wrote: G> I'm wondering if bumping the recvspace should help, if changing the G> ngsocket hook to queue incoming data should help, if it would be best to G> replace ngsocket with a memory-mapped interface, or if anyone has any G> other ideas t

Re: kernel mode httpd/ftpd for FreeBSD?

2005-02-11 Thread Gleb Smirnoff
Junho, On Tue, Feb 08, 2005 at 10:42:27PM +0900, CHOI Junho wrote: C> I understand what you mean. If so, why serious network server like nfs C> is still in kernel? Because it is filesystem. Do you want kernel httpd or fast httpd for static content? In case of the latter use nginx from ports, in