Re: removing RIP/RIPng (routed/route6d)

2024-05-16 Thread Dag-Erling Smørgrav
Scott writes: > Anyway, fun's over. Perhaps this is a greater lesson that the Foundation > provide the rules under which code is added or removed from base and then > we'd all be the wiser. The FreeBSD Foundation does not set project policy, the FreeBSD Core Team does. DES -- D

Re: Request for Testing: TCP RACK

2024-03-14 Thread Dag-Erling Smørgrav
ld > always read options instead of option. It's not a typo, both spellings work, cf. config(5). DES -- Dag-Erling Smørgrav - d...@freebsd.org

Re: DNS KSK rollover, local_unbound and 11.2-STABLE

2018-10-13 Thread Dag-Erling Smørgrav
> @@ -4,7 +4,7 @@ > # > > # PROVIDE: local_unbound > -# REQUIRE: FILESYSTEMS netif resolv > +# REQUIRE: FILESYSTEMS defaultroute netwait resolv > # BEFORE: NETWORKING > # KEYWORD: shutdown This should work, but it's weird that routing does not already require defaultroute. DE

Re: DNS KSK rollover, local_unbound and 11.2-STABLE

2018-10-13 Thread Dag-Erling Smørgrav
# > > # PROVIDE: local_unbound > -# REQUIRE: FILESYSTEMS netif resolv > -# BEFORE: NETWORKING > +# REQUIRE: NETWORKING > +# BEFORE: DAEMON > # KEYWORD: shutdown > > . /etc/rc.subr No, this is wrong. Unbound has to start before NETWORKING. Everything after NETWORKING assumes

Re: DNS KSK rollover, local_unbound and 11.2-STABLE

2018-10-13 Thread Dag-Erling Smørgrav
Eugene Grosbein writes: > Dag-Erling Smørgrav writes: > > The local_unbound service was never intended to be started without a > > network connection. > Then this is regression since ISC BIND removal because it does not > have this problem. Unbound is not a replacement

Re: DNS KSK rollover, local_unbound and 11.2-STABLE

2018-10-13 Thread Dag-Erling Smørgrav
d = 19036 (ksk), size = 2048b} ;;state=1 [ ADDPEND ] ;;count=1 ;;lastchange=1539426235 ;;Sat Oct 13 12:23:55 2018 DES -- Dag-Erling Smørgrav - d...@des.no [1539426235] unbound[13250:0] notice: Start of unbound 1.5.10. [1539426235] unbound[13250:0] debug: chdir to /var/unbound [1539426235] unbound[

Re: DNS KSK rollover, local_unbound and 11.2-STABLE

2018-10-13 Thread Dag-Erling Smørgrav
d idea to make it explicit. DES -- Dag-Erling Smørgrav - d...@des.no ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: DNS KSK rollover, local_unbound and 11.2-STABLE

2018-10-13 Thread Dag-Erling Smørgrav
Dag-Erling Smørgrav - d...@des.no Index: contrib/unbound/smallapp/unbound-anchor.c === --- contrib/unbound/smallapp/unbound-anchor.c (revision 339291) +++ contrib/unbound/smallapp/unbound-anchor.c (working copy) @@ -241,7 +241

Re: DNS KSK rollover, local_unbound and 11.2-STABLE

2018-10-13 Thread Dag-Erling Smørgrav
es, that is always the case. DES -- Dag-Erling Smørgrav - d...@des.no ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: DNS KSK rollover, local_unbound and 11.2-STABLE

2018-10-13 Thread Dag-Erling Smørgrav
(and the rc script will automatically do that if /var/unbound/root.key does not exist). What you're seeing now is unbound periodically overwriting root.key with what it has in memory. DES -- Dag-Erling Smørgrav - d...@des.no ___ freebsd-net@freebsd.org ma

Re: DNS KSK rollover, local_unbound and 11.2-STABLE

2018-10-13 Thread Dag-Erling Smørgrav
Here's the thing though, I am unable to reproduce the issue in 11.2-RELEASE (see attached log). Can you send me this tarball: # tar zcf unbound.tgz /etc/resolv.conf /var/unbound and also tell me which variables are set, i.e. the output from: # grep -r unbound /etc/rc.conf* DES -- Dag-Erling

Re: DNS KSK rollover, local_unbound and 11.2-STABLE

2018-10-12 Thread Dag-Erling Smørgrav
it will fall back to getting it over http (using an unvalidated DNS lookup) and verifying the accompanying signature against a hardcoded x509 certificate which is valid until 2023. DES -- Dag-Erling Smørgrav - d...@des.no ___ freebsd-net@freebsd.org mailing li

Re: FCP-0101: Deprecating most 10/100 Ethernet drivers

2018-10-04 Thread Dag-Erling Smørgrav
ers he proposed to remove; all you had to do was say “I still use this driver”. There was no need to attack him, much less to swear. DES -- Dag-Erling Smørgrav - d...@des.no ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listi

Re: local_unbound, resolvconf, vpn

2017-11-21 Thread Dag-Erling Smørgrav
s emitted before syslogd starts will go to the console, so they won't be lost. For bonus points, modify syslogd so log sockets can be specified in syslog.conf instead of (or in addition to) being passed on the command line. DES -- Dag-Erling Smørgrav - d...@des.no ___

Re: local_unbound, resolvconf, vpn

2017-11-20 Thread Dag-Erling Smørgrav
few hours after 1.5.9 was released. DES -- Dag-Erling Smørgrav - d...@des.no ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: local_unbound, resolvconf, vpn

2017-11-20 Thread Dag-Erling Smørgrav
Andriy Gapon <a...@freebsd.org> writes: > Dag-Erling Smørgrav <d...@des.no> writes: > > Andriy Gapon <a...@freebsd.org> writes: > > > What and when is going to overwrite my modifications? > > service local_unbound setup > So, this is not going to

Re: local_unbound, resolvconf, vpn

2017-11-13 Thread Dag-Erling Smørgrav
irective in the "server" section and fails to chdir to the specified directory, but there should be a name there. Can you do: # service local_unbound stop # mv /var/unbound /var/unbound.orig # mtree -deU -f /etc/mtree/BSD.var.dist # service local_unbound setup # diff -ru /var/unbound.o

Locking issues in CARP in 10.2

2016-06-08 Thread Dag-Erling Smørgrav
one else had similar problems, or does anyone know of locking issues in the CARP code which might trigger a livelock or panic when a CARP address is added or removed? DES -- Dag-Erling Smørgrav - d...@des.no ___ freebsd-net@freebsd.org mailing list https

Re: RFC: Enabling VIMAGE in GENERIC

2014-11-17 Thread Dag-Erling Smørgrav
Willem Jan Withagen w...@digiware.nl writes: The constraints as you put them are indeed rather tight. There is little to be done about it. I was not aware of the fact that 11.0 is planned for release in such short time. It isn't. ISTR that the target is 2015Q4. DES -- Dag-Erling Smørgrav

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-16 Thread Dag-Erling Smørgrav
://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3830 There are other serious issues with our current pf (checksum corruption) which I think can only be resolved by importing a newer version. DES -- Dag-Erling Smørgrav - d...@des.no ___ freebsd-net

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-16 Thread Dag-Erling Smørgrav
Bjoern A. Zeeb bzeeb-li...@lists.zabbadoz.net writes: Dag-Erling Smørgrav d...@des.no writes: There are other serious issues with our current pf (checksum corruption) which I think can only be resolved by importing a newer version. Sorry, but you lost context. I was talking about security

Re: ipfilter(4) needs maintainer

2013-04-14 Thread Dag-Erling Smørgrav
OpenBSD's code into our kernel without significant performance issues. DES -- Dag-Erling Smørgrav - d...@des.no ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net

10 Gbps NIC selection

2012-05-29 Thread Dag-Erling Smørgrav
Chelsio, these are the only choices our supplier offers) DES -- Dag-Erling Smørgrav - d...@des.no ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr

Re: 10 Gbps NIC selection

2012-05-29 Thread Dag-Erling Smørgrav
Sean Bruno sean...@yahoo-inc.com writes: Dag-Erling Smørgrav d...@des.no writes: Given the choice between the following adapters: Broadcom 5720 Haven't gotten this one working on the Dell R series I'm testing (thought this was a 1G chipset) Broadcom 5719 Thought this was a 1G

Re: [PATCH] Fix a socket leak in libfetch

2009-11-16 Thread Dag-Erling Smørgrav
-- Dag-Erling Smørgrav - d...@des.no ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org

Re: Confused tcpdump

2009-09-25 Thread Dag-Erling Smørgrav
Michael Proto m...@jellydonut.org writes: Dag-Erling Smørgrav d...@des.no writes: 15:50:42.622040 IP 10.0.0.10.871009576 10.0.0.4.2049: 192 lookup [|nfs] 15:50:42.622386 IP 10.0.0.4.2049 10.0.0.10.871009576: reply ok 236 lookup [|nfs] I'm pretty sure 871009576 is not a valid port

Confused tcpdump

2009-09-24 Thread Dag-Erling Smørgrav
15:50:42.622040 IP 10.0.0.10.871009576 10.0.0.4.2049: 192 lookup [|nfs] 15:50:42.622386 IP 10.0.0.4.2049 10.0.0.10.871009576: reply ok 236 lookup [|nfs] I'm pretty sure 871009576 is not a valid port number... DES -- Dag-Erling Smørgrav - d...@des.no

Re: ssh window

2008-06-13 Thread Dag-Erling Smørgrav
the default key type back to RSA). I hope to import 5.0p1 as soon as we have a vendor import policy in place for Subversion. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd

Routing error messages from ppp

2008-02-17 Thread Dag-Erling Smørgrav
mtu max 1492 add default HISADDR DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Routing error messages from ppp

2008-02-17 Thread Dag-Erling Smørgrav
Dag-Erling Smørgrav [EMAIL PROTECTED] writes: % netstat -rn Routing tables Internet: DestinationGatewayFlagsRefs Use Netif Expire I left out a line here: default80.203.47.1UGS 1 3184881 tun0 80.203.47.180.203.243.180

Re: if_ral regression

2008-01-13 Thread Dag-Erling Smørgrav
Sepherosa Ziehau [EMAIL PROTECTED] writes: revert the old patch at your AP side and try this one http://people.freebsd.org/~sephe/rt2560_test.diff1 No improvement. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing

Re: if_ral regression

2008-01-12 Thread Dag-Erling Smørgrav
version - my AP is a soekris net4801 which I suspect supports only good old 1.1. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail

Re: if_ral regression

2008-01-11 Thread Dag-Erling Smørgrav
... the only laptop I have that does has a flat battery and I can't find the mains adapter :( DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe

Re: if_ral regression

2008-01-05 Thread Dag-Erling Smørgrav
a solution to you? I will try to get the wlandebug output tonight. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL

Re: if_ral regression

2008-01-04 Thread Dag-Erling Smørgrav
to pull out an old laptop to do that, my current one runs Ubuntu. Hopefully, I'll have the results for you later today. I imagine you want to see the output from wlandebug both when the AP is working and when it is stuck? DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED

Re: if_ral regression

2008-01-04 Thread Dag-Erling Smørgrav
Max Khon [EMAIL PROTECTED] writes: Have you tried to turn off bgscan? bgscan is obviously not running since the broken ral is in the AP. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org

Re: if_ral regression

2008-01-03 Thread Dag-Erling Smørgrav
Dag-Erling Smørgrav [EMAIL PROTECTED] writes: Sepherosa Ziehau [EMAIL PROTECTED] writes: http://people.freebsd.org/~sephe/rt2560_test.diff I built a new kernel with the patch applied, and it seems to help, though it's a bit early to say for sure. Didn't help. A large rsync over ssh stalls

Re: if_ral regression

2008-01-02 Thread Dag-Erling Smørgrav
Sepherosa Ziehau [EMAIL PROTECTED] writes: http://people.freebsd.org/~sephe/rt2560_test.diff Thank you, I'll try that. Could you explain what the RT2560_BBP_BUSY loop is about? DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net

Re: if_ral regression

2008-01-02 Thread Dag-Erling Smørgrav
Sepherosa Ziehau [EMAIL PROTECTED] writes: http://people.freebsd.org/~sephe/rt2560_test.diff Hope it will have some effect. I built a new kernel with the patch applied, and it seems to help, though it's a bit early to say for sure. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED

Re: if_ral regression

2008-01-01 Thread Dag-Erling Smørgrav
Sepherosa Ziehau [EMAIL PROTECTED] writes: I don't whether following thingies will fix your problem: [...] Can you provide a diff? DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org

if_ral regression

2007-12-29 Thread Dag-Erling Smørgrav
roam:rssi11g 7 roam:rate11g 5 protmode CTS dtimperiod 1 DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: if_ral regression

2007-12-29 Thread Dag-Erling Smørgrav
Kimi [EMAIL PROTECTED] writes: sysctl net.isr.direct=0 Tried that, problem still occurs. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe

Re: Added native socks support to libc in FreeBSD 7

2007-12-10 Thread Dag-Erling Smørgrav
in a separate library which you load with LD_PRELOAD. The strong symbols in the wrapper library will override the weak symbols in libc. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman

Re: pf misfeature

2007-11-09 Thread Dag-Erling Smørgrav
Max Laier [EMAIL PROTECTED] writes: No, I don't see why these two should behave differently, but you should add a scrub in on sk0 in any case. scrub is known and documented to interfere with NFS. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED

Re: pf misfeature

2007-11-08 Thread Dag-Erling Smørgrav
Max Laier [EMAIL PROTECTED] writes: On Thursday 08 November 2007, Dag-Erling Smørgrav wrote: but what you actually get is this: pass on $eth from $lan to $lan flags S/SA keep state which only matches TCP handshakes, so your UDP streams are screwed. I don't think this is true. With pass

pf misfeature

2007-11-08 Thread Dag-Erling Smørgrav
proto { tcp, udp } from $lan to $lan becomes pass on $eth inet proto tcp from $lan to $lan flags S/SA keep state pass on $eth inet proto udp from $lan to $lan keep state There does not seem to be any way to turn off this misguided rewriting of firewall rules. DES -- Dag-Erling Smørgrav

Re: pf misfeature

2007-11-08 Thread Dag-Erling Smørgrav
Max Laier [EMAIL PROTECTED] writes: On Thursday 08 November 2007, Dag-Erling Smørgrav wrote: With pass on $eth from $lan to $lan, NFS doesn't work. With pass on $eth inet proto { tcp, udp } from $lan to $lan, it does. thinking about it, this could be a strange interaction with skip steps

Re: Merging rc.d/network_ipv6 into rc.d/netif

2007-03-29 Thread Dag-Erling Smørgrav
-- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]

if_bridge broadcast

2005-11-17 Thread Dag-Erling Smørgrav
all its members have it? DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Bug in libfetch handling of FTP urls..

2005-07-05 Thread Dag-Erling Smørgrav
John Baldwin [EMAIL PROTECTED] writes: On Sunday 03 July 2005 10:48 pm, Dag-Erling Smørgrav wrote: John Baldwin [EMAIL PROTECTED] writes: I verified this by doing 'fetch -vv' and seeing that it does one big CWD (instead of the multiple CWD's the RFC says should happen

Re: FreeVRRPd project status

2005-04-07 Thread Dag-Erling Smørgrav
support for this soon, as well. CARP comes from OpenBSD, not NetBSD, and is already in FreeBSD. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe

Re: FreeVRRPd project status

2005-04-07 Thread Dag-Erling Smørgrav
-212.22: invalid $ value config_gram.y:217.4-219.22: invalid $ value *** Error code 1 You're probably using the wrong version of bison. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman

Re: Removing T/TCP and replacing it with something simpler

2004-10-22 Thread Dag-Erling Smørgrav
[EMAIL PROTECTED] (Dag-Erling Smørgrav) writes: [...] I should add: I'm not against removing T/TCP support (especially if it helps simplify our network stack), but I don't see the point in replacing it with some homebrew protocol that noone else supports. DES -- Dag-Erling Smørgrav - [EMAIL

Re: Preliminary sys/netinet style patch

2004-07-06 Thread Dag-Erling Smørgrav
Xin LI [EMAIL PROTECTED] writes: I have a patchset to remove tailing spaces, convert leading spaces to tabs, and removes spaces before tabs. As a rule, we never do this except in conjunction with other changes. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED

Re: New preview patch for ipfw to pfil_hooks conversion

2004-06-22 Thread Dag-Erling Smørgrav
, by accelerating code drift between HEAD and 5-STABLE. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: New preview patch for ipfw to pfil_hooks conversion

2004-06-22 Thread Dag-Erling Smørgrav
-CURRENT, and none of them show signs of any kind of leak. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: New preview patch for ipfw to pfil_hooks conversion

2004-06-22 Thread Dag-Erling Smørgrav
different RAID controller drivers (aac and twe). They all run -CURRENT just fine. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail

Re: libalias patch for review / testing

2004-03-16 Thread Dag-Erling Smørgrav
[EMAIL PROTECTED] (Dag-Erling Smrgrav) writes: Anybody running natd on -CURRENT, please test the attached patch Umm, here's a patch that actually compiles. DES -- Dag-Erling Smrgrav - [EMAIL PROTECTED] Index: Makefile === RCS

Re: libalias patch for review / testing

2004-03-16 Thread Dag-Erling Smørgrav
Ruslan Ermilov [EMAIL PROTECTED] writes: I know this code quite well. Where do you suspect could be a bug affecting -O2 compiles, or you just simply fixed -O2 and hope it will auto-fix the (possible) bugs in -O2? Since there is no inline asm, the most likely suspect is aliasing, which is what

Re: Who wants SACK? (Re: was My planned work on networking stack)

2004-03-10 Thread Dag-Erling Smørgrav
Mike Hoskins [EMAIL PROTECTED] writes: the thing is... it's kind of sad more of the companies that have built their products on *BSD don't donate regularly. How do you know they don't? DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ [EMAIL

Re: Who wants SACK? (Re: was My planned work on networking stack)

2004-03-09 Thread Dag-Erling Smørgrav
of their competitors. Just for giggles, what kind of money are we talking here? I might be able to liberate funds for work that improves network performance in the high end. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list

Re: Fwd: [is this mbuf problem real?]

2004-02-26 Thread Dag-Erling Smørgrav
-- Dag-Erling Smørgrav - [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]