Re: netmap-ipfw on em0 em1

2014-11-07 Thread Mahnaz Talebi
Hi Evandro. I've tested netmap-ipfw on real NICs. Use " ./kipfw -i netmap:em0 -i netmap:em1 " to run netmap-ipfw on em0 and em1. ipfw works as a bridge and copy incoming packets to em0 to em1 if they pass defined rules (and vice versa, from em1 to em0). If you still have problem with ipfw-netmap,

Re: netmap-ipfw on em0 em1

2014-11-07 Thread Evandro Nunes
On Fri, Nov 7, 2014 at 4:08 PM, Luigi Rizzo wrote: > > > On Fri, Nov 7, 2014 at 5:02 AM, Evandro Nunes > wrote: > >> On Thu, Nov 6, 2014 at 9:24 PM, Luigi Rizzo wrote: >> >>> The code on code.google.com/p/netmap-ipfw/ works well for me >>> on physical interfaces. >>> >>> For using the nics many

Re: [tor-relays] FreeBSD's global IP ID

2014-11-07 Thread John-Mark Gurney
Xin Li wrote this message on Fri, Nov 07, 2014 at 13:41 -0800: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On 11/07/14 08:31, Adrian Chadd wrote: > > ... that's .. odd. > > > > Let's poke the freebsd crypto and network stack people and ask. I > > can't imagine why this is a problem a

Re: [tor-relays] FreeBSD's global IP ID

2014-11-07 Thread Xin Li
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 11/07/14 08:31, Adrian Chadd wrote: > ... that's .. odd. > > Let's poke the freebsd crypto and network stack people and ask. I > can't imagine why this is a problem anymore and we should default > to it being on. The other thing you could do is

Re: [tor-relays] FreeBSD's global IP ID (was: Platform diversity in Tor network)

2014-11-07 Thread grarpamp
On Fri, Nov 7, 2014 at 11:31 AM, Adrian Chadd wrote: > ... that's .. odd. > > Let's poke the freebsd crypto and network stack people and ask. I > can't imagine why this is a problem anymore and we should default to > it being on. I don't think there's a crypto@ list, though security@ might repres

Re: netmap-ipfw on em0 em1

2014-11-07 Thread Luigi Rizzo
On Fri, Nov 7, 2014 at 5:02 AM, Evandro Nunes wrote: > On Thu, Nov 6, 2014 at 9:24 PM, Luigi Rizzo wrote: > >> The code on code.google.com/p/netmap-ipfw/ works well for me >> on physical interfaces. >> >> For using the nics many of your examples show that you are not using the >> various program

Re: [tor-relays] FreeBSD's global IP ID (was: Platform diversity in Tor network)

2014-11-07 Thread Adrian Chadd
... that's .. odd. Let's poke the freebsd crypto and network stack people and ask. I can't imagine why this is a problem anymore and we should default to it being on. The other thing you could do is have the tor port require it be turned on before tor runs. -adrian On 7 November 2014 00:20, gra

Re: IPv6 link-local addr && %interfacename

2014-11-07 Thread 神明達哉
At Fri, 7 Nov 2014 13:33:43 +0100, Matthias Apitz wrote: > My question is: What does the %em0 mean in the IPv6 addr and why it is > not working without it? [...] > I consulted the handbook and the RFC: > > https://www.freebsd.org/doc/handbook/network-ipv6.html > http://www.ietf.org/rfc/rfc3513.tx

Re: Checksumming outgoing packets in PF vs in ip[6]_output

2014-11-07 Thread Kristof Provost
On 2014-11-05 19:11:55 (+0100), Ilya Bakulin wrote: > On 2014-11-05 19:00, Mark Felder wrote: > > Now if we could only stamp out the bug with ipv6 fragment and pf I'd be > > a happy, happy daemon. :-) > > This is somewhat more complex problem, I'll take a look as the time > allows. > I've been

Re: netmap-ipfw on em0 em1

2014-11-07 Thread Evandro Nunes
On Thu, Nov 6, 2014 at 9:24 PM, Luigi Rizzo wrote: > The code on code.google.com/p/netmap-ipfw/ works well for me > on physical interfaces. > > For using the nics many of your examples show that you are not using the > various programs correctly. There is clearly a > mismatch between what this co

Re: IPv6 link-local addr && %interfacename

2014-11-07 Thread sthaug
> it does not work with the link-local addr: > > $ ./ipv6-client fe80::20c:29ff:fe47:a38d > host: fe80::20c:29ff:fe47:a38d > ssh: connect: Network is unreachable This is expected. > but with appending %em0 it does work: > > $ ./ipv6-client fe80::20c:29ff:fe47:a38d%em0 > host: fe80::20c:29ff

IPv6 link-local addr && %interfacename

2014-11-07 Thread Matthias Apitz
Hi, I have a small question re/ the IPv6 link-local address; I configured IPv6 in my 11-CURRENT with: /etc/rc.conf: ifconfig_em0_ipv6="inet6 accept_rtadv" rtsold_enable="YES" The em0 interface now looks like this: # ifconfig em0 em0: flags=8843 metric 0 mtu 1500 options=9b eth

Re: faith(4) / faithd(8) removal

2014-11-07 Thread Francois Tigeot
Hi, On Mon, Oct 27, 2014 at 03:42:28PM +0400, Alexander V. Chernikov wrote: > > I'd like to remove faith (IPv6/v4 translator) from base. Another data point: http://www.litech.org/ptrtd/ This project was similar to faith; the last release was in 2002 and it has been officially declared dead in 2

Re: [tor-relays] FreeBSD's global IP ID (was: Platform diversity in Tor network)

2014-11-07 Thread grarpamp
On Thu, Nov 6, 2014 at 8:52 AM, Philipp Winter wrote: > On Wed, Nov 05, 2014 at 04:04:41AM -0500, grarpamp wrote: >> 173 FreeBSD > > FreeBSD still seems to use globally incrementing IP IDs by default. > That's an issue as it leaks fine-grained information about how many > packets a relay's networ