Re: tcp-md5 check for incomming connection

2008-01-31 Thread Andre Oppermann
Ingo Flaschberger wrote: Dear Bjoern, Bruce, Looking trough linux, netbsd and Bruce old patch (which works with minimal modification at my freebsd 6.2) I have 3 ideas how md5 could be integrated. 1) netbsd method: http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet/tcp_input.c?rev=1.277&con

Re: tcp-md5 check for incomming connection

2008-01-31 Thread Ingo Flaschberger
Dear Andre, 2) linux method: Look for CONFIG_TCP_MD5SIG in linux-2.6.24/net/ipv4/tcp_ipv4.c (sorry no weblink..) They check and block md5-packets early in tcp_v4_do_rcv. afinet.c -> tcp_v4_rcv -> tcp_v4_do_rcv -> for Freebsd: place some logic early in tcp_input function

Re: VLAN problems

2008-01-31 Thread Alexandre Biancalana
On 1/30/08, Christopher Cowart <[EMAIL PROTECTED]> wrote: > > Trunking is definitely what you want. I'm using it successfully > between Cisco switches and FreeBSD in a number of places. > > Here's IOS: > | interface GigabitEthernet1/0/8 > | description dev-wireless-aux > | switchport trunk encaps

Re: [PATCH] "/etc/rc.d/pf reload" fails if there are macros defined in pf_flags rcvar.

2008-01-31 Thread Niki Denev
On Jan 21, 2008 11:26 PM, Niki Denev <[EMAIL PROTECTED]> wrote: > > On Jan 21, 2008 11:42 AM, Niki Denev <[EMAIL PROTECTED]> wrote: > > Hi, > > > > I'm using the pf_flags rc var to set macros for pf.conf files i use in > > redundant router configuration. > > This way i can have exactly the same pf.

Re: kern/120130: [carp] [panic] carp causes kernel panics in any constellation

2008-01-31 Thread Max Laier
The following reply was made to PR kern/120130; it has been noted by GNATS. From: "Max Laier" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Re: kern/120130: [carp] [panic] carp causes kernel panics in any constellation Date: Thu, 31 Jan 2008 22:0

Re: tcp-md5 check for incomming connection

2008-01-31 Thread gnn
At Thu, 31 Jan 2008 13:15:12 +0100 (CET), Ingo Flaschberger wrote: > > Dear Andre, > > >> 2) linux method: > >> Look for CONFIG_TCP_MD5SIG in linux-2.6.24/net/ipv4/tcp_ipv4.c > >> (sorry no weblink..) > >> They check and block md5-packets early in tcp_v4_do_rcv. > >> afinet.c -> t