Re: IPSEC documentation

2005-12-30 Thread Brian Candler
On Thu, Dec 29, 2005 at 01:35:21PM +0100, VANHULLEBUS Yvan wrote: As it happens this FreeBSD box is also acting as a NAT gateway using pf (myhost is on a private IP) and actually its external IP is also private - it sits behind a second NAT firewall. So maybe that's where the problem

Re: IPSEC documentation

2005-12-30 Thread Brian Candler
On Thu, Dec 29, 2005 at 01:38:15PM +0100, VANHULLEBUS Yvan wrote: Known issues: - Non-threaded implementation. Simultaneous key negotiation performance should be improved. I think that would limit its usefulness as a scalable concentrator, if the comment is still valid. The

Re: forwarding icmp redirects.

2005-12-30 Thread Brian Candler
On Thu, Dec 29, 2005 at 09:01:50PM -0800, Julian Elischer wrote: IMHO we should disable emitting and acting upon ICMP redirects by default. I know many places that rely on them heavily.. please don't do that.. Cisco PIX doesn't generate them.. it makes that machine a pain in the to use

Re: forwarding icmp redirects.

2005-12-30 Thread Andre Oppermann
Brian Candler wrote: On Thu, Dec 29, 2005 at 09:01:50PM -0800, Julian Elischer wrote: IMHO we should disable emitting and acting upon ICMP redirects by default. I know many places that rely on them heavily.. please don't do that.. Cisco PIX doesn't generate them.. it makes that machine

Re: IPSEC documentation

2005-12-30 Thread VANHULLEBUS Yvan
On Fri, Dec 30, 2005 at 12:17:08PM +, Brian Candler wrote: [simultaneous negociations] You could have a crypto accelerator card even in a low-end CPU. Yep, but it doesn't help so much, for the same reasons. Crypto accelerator for IPSec traffic is really more important ! My concern is with

cpu?bsnmp

2005-12-30 Thread S.I
hi, I want to monitor my CPU with bsnmpd but I don't want to use external (prog, script). Any Ideas for that. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL

FreeBSD 6.0 release,

2005-12-30 Thread Paul
I've just installed FreeBSD 6.0 Release yesterday, I've spend the last two days trying to resolve a networking problem, the problem is this: when I try and connect to a domain or an IP for that matter, it takes several minutes for it to connect + receive the content. It doesn't seem to effect all

Troubles with outgoing TCP connections

2005-12-30 Thread Mikhail Teterin
Hello! I was experiencing serious problems with web-browsing on this one machine -- various sites would sometimes be very slow or timeout altogether. A Windows machine on the other desk is plugged into the same NAT-router going over to the same cable modem. It is running the same version of