Re: Propose a new stage `vnet_shutdown` before `vnet_destroy`

2022-12-18 Thread James Gritton
On 2022-12-18 00:01, Zhenlei Huang wrote: I'm currently working on route nexthop caching feature for tunneling interfaces such as if_gif, if_gre, if_vxlan, and potentially if_wg. I encounter a nasty bug related to VNET lifecycle. More preciously I'd like to call `rib_unsubscribe()` to

multicast packets not seen on PHY bridge member

2018-09-04 Thread James Blachly
I am new to FreeBSD so please forgive (and correct) wrong terminology and concepts. I’ve installed FreeBSD 11.2 as a VM host and run in to a problem with multicast packets over a bridge not being seen by programs [on the host] listening on the bridge’s physical interface constituent (igb1),

ixv driver 12.0 crash in AWS

2017-07-12 Thread James Jernigan
MBX API 1.2 negotiation failed! Error -32 The error appears to be coming from sys/dev/ixgbe/if_ixv.c in the source. Does this appear to be an AWS specific issue or a more widespread one? Let me know if I can provide any further information. Thanks, James ___

Re: Filtering outbound traffic for private address jails?

2016-06-26 Thread James Lodge
>'Lo. >On 2016-06-26T02:32:04 + >James Lodge <ja...@lodge.me.uk> wrote: > > If you clone lo1, give it a 192.168.x.x/32 IP and then use the following > pf.conf > Do you need to bridge the interfaces? You may need to add > gateway_enable="YES" to rc

Re: Filtering outbound traffic for private address jails?

2016-06-25 Thread James Lodge
IP and then use the following pf.conf Do you need to bridge the interfaces? You may need to add gateway_enable="YES" to rc.conf Not sure if that's what you're trying to do? James IP_PUB="Your Public IP Address Here" IP_JAIL="192.168.0.2" NET_JAIL="192

Re: NAT SIP ALG

2016-05-13 Thread James Lodge
> On 12 May 2016, at 20:08, Eugene Grosbein wrote: > > Hi! > > Does FreeBSD have any kind of NAT capable of parsing SIP signalling traffic > to properly translate IP addresses inside protocol? > > Eugene Grosbein > > ___ >

Re: vxlan interface rc.conf configuration

2016-01-09 Thread James Lodge
> >This is what I have > > >rc.conf >cloned_interfaces="vxlan0" >ifconfig_vxlan0="vxlanid 100 vxlanlocal x.x.x.x vxlanremote x.x.x.x inet >x.x.x.x netmask x.x.x.x" > >I'm sure I'm missing something obvious, but any help gratefully received.

vxlan interface rc.conf configuration

2016-01-09 Thread James Lodge
rc.conf cloned_interfaces="vxlan0" ifconfig_vxlan0="vxlanid 100 vxlanlocal x.x.x.x vxlanremote x.x.x.x inet x.x.x.x netmask x.x.x.x" I'm sure I'm missing something obvious, but any help gratefully received. Regards James ___ fre

Re: Netgroups in FreeBSD10

2015-12-15 Thread James Craig
On Fri, 11 Dec 2015, Mark Johnston wrote: On Fri, Dec 11, 2015 at 10:16:50AM -0500, James Craig wrote: On Thu, 10 Dec 2015, Mark Johnston wrote: On Thu, Dec 10, 2015 at 10:58:11AM -0500, James Craig wrote: Hey all! I am migrating some of our services to freeBSD, and in the process

Re: Netgroups in FreeBSD10

2015-12-11 Thread James Craig
On Thu, 10 Dec 2015, Mark Johnston wrote: On Thu, Dec 10, 2015 at 10:58:11AM -0500, James Craig wrote: Hey all! I am migrating some of our services to freeBSD, and in the process of this, I have discovered something that seems odd to me; netgroups don't seem to work as expected. I am

Netgroups in FreeBSD10

2015-12-10 Thread James Craig
have always used netgroups... Thank you! james craig -- James Craig, Department of Computer Science, RIT 102 Lomb Memorial Drive, Rochester, NY 14623 mailto:j...@cs.rit.edu, voice: (585) 475-5254 CONFIDENTIALITY NOTE: The information transmitted, including attachments, is intended only

Jail - PF - NAT - Network Performance

2015-10-25 Thread James Lodge
running on the FreeBSD host on DO is publicly accessible on the Internet. If I disconnect my OpenVPN and use the public IP to download the 1GB I get 5-6MB/s which is the speed on my VDSL2 circuit. Any help massively appreciated Regards James

Re: Jail - PF - NAT - Network Performance

2015-10-25 Thread James Lodge
> On 25 Oct 2015, at 18:47, James Lodge <ja...@lodge.me.uk> wrote: > >> On 25 Oct 2015, at 17:46, James Lodge <ja...@lodge.me.uk> wrote: >> I currently have a FreeBSD 10.1 host running on Digital Ocean. I have >> multiple jails and I'm not using vimage. >

Re: Jail - PF - NAT - Network Performance

2015-10-25 Thread James Lodge
> On 25 Oct 2015, at 17:46, James Lodge <ja...@lodge.me.uk> wrote: > I currently have a FreeBSD 10.1 host running on Digital Ocean. I have > multiple jails and I'm not using vimage. > > > I'm using PF on the host to NAT traffic from said jails and all is working as &

Re: Ethernet tunneling options under FreeBSD

2015-08-16 Thread James Lott
to connect to the VPN. Thank you for this great suggestion! On Sunday, August 16, 2015 22:04:52 Julian Elischer wrote: On 8/15/15 11:32 AM, James Lott wrote: n2n honestly looks wonderful, but it also appears to be dead... I'm trying to stay as close to the OS layer as possible with my options, so I

Re: Ethernet tunneling options under FreeBSD

2015-08-16 Thread James Lott
wrote: On 8/15/15 10:40 AM, James Lott wrote: you haven't really described the network well enough.. try an ascii-art diagram (don't forget to set fixed width font :-) a VPN required two ends.. one is FreeBSD... what's the other? The thing is, the other could be any number of operating

Re: Ethernet tunneling options under FreeBSD

2015-08-14 Thread James Lott
anymore! This is great stuff On Saturday, August 15, 2015 13:05:17 Outback Dingo wrote: On Sat, Aug 15, 2015 at 12:40 PM, James Lott ja...@lottspot.com wrote: you haven't really described the network well enough.. try an ascii-art diagram (don't forget to set fixed width font :-) a VPN

Re: Ethernet tunneling options under FreeBSD

2015-08-14 Thread James Lott
! I would love nothing more than to be wrong about that :) On Friday, August 14, 2015 23:16:41 Julian Elischer wrote: On 8/14/15 6:40 AM, James Lott wrote: Hello list, I am in the process of planning a build out of a L2 VPN, in which I'd like to have my primary switch and DHCP server

Ethernet tunneling options under FreeBSD

2015-08-13 Thread James Lott
Hello list, I am in the process of planning a build out of a L2 VPN, in which I'd like to have my primary switch and DHCP server be a FreeBSD system. I would like to join each new host to the VPN by establishing an IP tunnel with the primary switch which transports ethernet frames over the

Re: Ethernet tunneling options under FreeBSD

2015-08-13 Thread James Lott
Wow vxlans look awesome! I am definitely going to experiment with those next! Thanks for the great suggestions though everyone, this thread gave me a lot more to experiment with On Aug 13, 2015, at 7:39 PM, Mark Martinec mark.martinec+free...@ijs.si wrote: 2015-08-14 00:40 James Lott

MTP2/Q.703/SS7 cards

2013-07-29 Thread James Gosnell
Is there any hardware or support for MTP2/Q.703/SS7 line protocols in FreeBSD? I'm wanting to use FreeBSD to analyze FISUs and MSUs from a Q.703 stream. I don't know if this is a network or just just a TCP/IP email list, so sorry in advance if it's TCP/IP only. -- James Gosnell, ACP

Re: IPSec woes coming from OpenBSD to Free

2012-07-05 Thread James Shupe
. What documented security hole? The debunked IPsec backdoor allegation, or did I miss something else entirely? -- James Shupe ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail

Re: low network speed

2012-01-27 Thread James Shupe
On 01/24/2012 11:27 PM, Eugene M. Zheganin wrote: Hi. I'm suffering from low network performance on one of my FreeBSDs. I have an i386 8.2-RELEASE machine with an fxp(4) adapter. It's connected though a bunch of catalysts 2950 to another 8.2. While other machines in this server room using

Re: choosing distribution: FreeBSD

2011-11-27 Thread James Shupe
UNIX, FreeBSD if you want to learn a great, versatile server, and Linux if you enjoy the flavor of the week. -James On 11/27/11 09:13, LinuxIsOne wrote: Hi, Well, I am basically a Windows convert, but very frankly saying that: I am new to the world of Linux. So I should use FreeBSD

Re: Data centers failure proof with CARP.

2011-09-26 Thread James Shupe
z.z.z.z would have to be an anycast address announced by both datacenters, so your idea is unlikely to work. -- James Shupe, OSRE founder/ developer/ engineer jsh...@osre.org| 866.235.1288 BSD/ Linux Support | Metro Ethernet | Hosting check out our site at www.osre.org signature.asc

Order To New Zealand

2009-07-18 Thread Bryan James
No Message Collected ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org

Re: kern/120958: no response to ICMP traffic on interface configured with a link-local address

2008-03-13 Thread James Snow
The following reply was made to PR kern/120958; it has been noted by GNATS. From: James Snow [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: Subject: Re: kern/120958: no response to ICMP traffic on interface configured with a link-local address Date: Thu, 13 Mar 2008 20:23:55 -0400

[PATCH] kern/120958: no response to ICMP traffic on interface configured with a link-local address

2008-03-13 Thread James Snow
On Fri, Feb 22, 2008 at 10:04:12PM +, Bruce M. Simpson wrote: I looked at this very briefly. It's gnarly because in_canforward() is a candidate for inlining and is a predicate which is being overloaded with different meanings by ip_forward()/ip_input() and icmp_reflect(). So whilst

Re: [PATCH] kern/120958: no response to ICMP traffic on interface configured with a link-local address

2008-03-13 Thread James Snow
On Thu, Mar 13, 2008 at 08:40:07PM -0400, James Snow wrote: Also, I took a cue from the IN_LINKLOCAL() macro and added two new macros to sys/netinet/in.h to perform checks for the loopback network and the zero network. IN_LOOPBACK() and IN_ZERONET(), respectively. Woops. I suppose

7.0 Link-Local Addresses

2008-02-20 Thread James Snow
In 6.2-Rp7: 6.2-Rp7# uname -srm FreeBSD 6.2-RELEASE-p7 i386 6.2-Rp7# ifconfig lo1 create 6.2-Rp7# ifconfig lo1 inet 169.254.1.1 netmask 255.255.0.0 6.2-Rp7# ping -c1 169.254.1.1 PING 169.254.1.1 (169.254.1.1): 56 data bytes 64 bytes from 169.254.1.1: icmp_seq=0 ttl=64 time=0.065 ms ---

Re: Coordinating TCP projects

2008-01-20 Thread James Healy
a number of number of optimisations, this dynamic cap is now implemented. Hopefully we'll find some spare cycles to test the branch out soon. James Healy http://caia.swin.edu.au/ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (FreeBSD) Comment: Using GnuPG with Mozilla - http

unp_connect() locking problems with early returns

2008-01-02 Thread James Juran
); + UNP_GLOBAL_WLOCK(); return (EALREADY); } unp-unp_flags |= UNP_CONNECTING; -- James Juran Lead Secure Systems Engineer BAE Systems Information Technology Information Assurance Group XTS Operating Systems [EMAIL PROTECTED

SACK broken in HEAD/RELENG_7

2007-11-25 Thread James Healy
TOF_SACK 0x0080 /* SACK hole data */ In our opinion, it might also be worth renaming SCF_SACK to SCF_SACKPERM in tcp_syncache.c to semantically align it with the TOF defines in tcp_var.h. James Healy and Lawrence Stewart http://caia.swin.edu.au [1] http://caia.swin.edu.au/urp/newtcp

Re: Odd congestion window behaviour [ was: Draft email to freebsd-net ]

2007-07-17 Thread James Healy
with this fix we won't see transmission delays while the connection waits for a delayed ack timer to expire. James Swinburne University of Technology CRICOS Provider Code: 00111D NOTICE This e-mail and any attachments are confidential and intended only for the use of the addressee. They may contain

Re: Odd congestion window behaviour [ was: Draft email to freebsd-net ]

2007-07-16 Thread James Healy
to a peer you should not use any past value for the cwnd... So it's possible that the inital cwnd shouldn't be set by the hostcache at all? If this was the case, does that mean we'd just use the rfc 3390 logic if enabled, with fallback to the manual sysctl variables as a last resort? James -BEGIN

Draft email to freebsd-net

2007-07-15 Thread James Healy
= max(mss, min(metrics.rmx_cwnd / 2, so-so_snd.sb_hiwat)); James Healy Lawrence Stewart Centre for Advanced Internet Architectures -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGmvkW4oawkrbYo

Odd congestion window behaviour [ was: Draft email to freebsd-net ]

2007-07-15 Thread James Healy
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Whoops, we forgot to update the subject of our email. Our previous email isn't a draft. James James Healy wrote: We've recently been doing some TCP congestion control research, and have written a small logging module for 6.2 that outputs the cwnd

Re: Problems with BCE network adapter (Dell PE2950)

2007-07-11 Thread James
On 7/11/07, Tom Judge [EMAIL PROTECTED] wrote: Was this with jumbo or standard frames? Hi Tom. It was with standard frames. -- James. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe

Re: Problems with BCE network adapter (Dell PE2950)

2007-07-10 Thread James
patches in this thread to apply before your patch. If you have time, would you be so kind to cook a diff against a vanilla FreeBSD 6.2 tree or let me know which patches to apply first? Thanks! -- James. ___ freebsd-net@freebsd.org

Re: Problems with BCE network adapter (Dell PE2950)

2007-07-10 Thread James
-patch-10-7-2007.gz Thanks much. They both applied cleanly to my tree (also based on RELENG_6_2 p5). I'll start a build and give 'em a whirl tonight. -- James. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo

Re: Problems with BCE network adapter (Dell PE2950)

2007-07-10 Thread James
On 7/10/07, James [EMAIL PROTECTED] wrote: I'll start a build and give 'em a whirl tonight. hihi. I gave it a try by pxebooting a new release with the patches applied. During sysinstall the NIC comes up, gets a DHCP address, but fails to lookup my install server via DNS to install

Re: ftpd vs. lukemftpd (forcing FTP-uploaded ...)

2006-07-17 Thread James Ryan
. I'd suggest ProFTPd instead; it's CustomLog feature allows you to specify your own log format (like Apache). This means you can make a convenient string to regex, such as date|user|action|file. Good luck, James -- James Ryan Infinity Pro Sports http://www.infinityprosports.com em: [EMAIL

Zeroing wrong union member in in6_control()

2006-02-07 Thread James Juran
*)ifp-if_afdata[AF_INET6])-icmp6_ifstat; -- James Juran Senior Secure Systems Analyst XTS-400 Operating Systems BAE Systems Information Technology [EMAIL PROTECTED] (703) 563-8081 signature.asc Description: This is a digitally signed message part

Re: IPv6 for www.freebsd.org

2005-11-03 Thread James
. If you are interested in finding options for getting a free v6 transit for freebsd.org (unless you already have one) feel free to contact me off-list. Thanks, -- James Jun Infrastructure and Technology Services TowardEX Technologies Office +1-617-459-4051 x179 | Mobile +1-978-394-2867 [EMAIL

ssh chroot not working

2005-07-05 Thread Mrad James Deane
Hi, i have setup a chroot for a cvs server with ssh as CVS_RSH but when initializing the chroot for ssh like this : chroot /usr/local/www/cvs /sbin/sshd i have the followig reponse : PRNG perphaps no seeded : i'm in trouble please help to setup this , thanks, James mrad

www user than root

2005-06-22 Thread Mrad James Deane
hello i want to know how the www user with uid:80 can print on a priviliged port like 80 rather the root user im very in trouble i did not find a solution yet mac_portacl is one but it is very experimental please help. thanks _

port 80 listening than root user

2005-06-16 Thread Mrad James Deane
Hello i want to know how can the www user listen on the port 80 rather than root or what is the the step or commade to take that allow the www user listen on port 80 i'm tryin to run my webserver (aolserver)for www from root but i keep the message cannot listen to port 80 permission denied.

Re: vlan double tagging

2004-12-19 Thread James
On Sat, Dec 18, 2004 at 07:10:51PM +1030, Wilkinson, Alex wrote: 0n Sat, Dec 18, 2004 at 03:16:27AM -0500, James wrote: /me thinks he's asking for q-in-q tunneling feature. What is 'q-in-q tunneling' ? http://www.google.com/search?hl=enq=q-in-q+tunneling -J -- James Jun

Re: vlan double tagging

2004-12-18 Thread James
to prevent such badness. /me thinks he's asking for q-in-q tunneling feature. -J -- James JunTowardEX Technologies, Inc. Technical Lead Boston IPv4/IPv6 Web Hosting, Colocation and [EMAIL PROTECTED]Network design

Re: per-interface packet filters

2004-12-15 Thread James
firewalls operating inside ip_fastforward, not inside regular ip_input functions. At least in the way we modify things for our own, we insert all router-like functionalities within the ip_fastfwd.c ; ip_input.c and others are largely untouched for regular non-router host environment. -J -- James Jun

Re: per-interface packet filters [summary]

2004-12-15 Thread James
On Wed, Dec 15, 2004 at 12:13:29PM +0300, Gleb Smirnoff wrote: On Wed, Dec 15, 2004 at 03:49:09AM -0500, James wrote: J On Wed, Dec 15, 2004 at 11:45:40AM +0300, Gleb Smirnoff wrote: J On Tue, Dec 14, 2004 at 01:12:31PM -0500, James wrote: J J The way we have approached this in the past

Re: per-interface packet filters [summary]

2004-12-14 Thread James
hash lookups in ip_fastforward() that determine whether packet is destined to us or not. We are already doing an expensive radix lookup on the kernel RIB -- that alone is well enough to give us the information we need with respect to what needs to be done to the packet. -J -- James Jun

Re: per-interface packet filters

2004-12-13 Thread James
-- James JunTowardEX Technologies, Inc. Technical Lead Boston IPv4/IPv6 Web Hosting, Colocation and [EMAIL PROTECTED]Network design/consulting configuration services cell: 1(978)-394-2867 web: http://www.towardex.com

Re: New ICMP limits

2004-12-08 Thread James
and ready to go -- in that case there is no need ;) Thanks, -J -- James JunTowardEX Technologies, Inc. Technical Lead Boston IPv4/IPv6 Web Hosting, Colocation and [EMAIL PROTECTED]Network design/consulting configuration

Re: Initial review request for IPv6 Fast Forwarding and IP6STEALTH

2004-12-04 Thread James
for your time, -J -- James JunTowardEX Technologies, Inc. Technical Lead Boston IPv4/IPv6 Web Hosting, Colocation and [EMAIL PROTECTED]Network design/consulting configuration services cell: 1(978)-394-2867 web

Re: route cacheing for gif(4) should be optional

2004-11-26 Thread James
from existing link2 feature, so yea I agree in that link0 is good idea there. Thanks! -J -- James JunTowardEX Technologies, Inc. Technical Lead Boston IPv4/IPv6 Web Hosting, Colocation and [EMAIL PROTECTED]Network design

Re: resolving routes externally

2004-11-23 Thread James
routers violate the RFC unfortunately. It's a little harder to implement there (see J vendor) -J -- James JunTowardEX Technologies, Inc. Technical Lead Boston IPv4/IPv6 Web Hosting, Colocation and [EMAIL PROTECTED

Re: resolving routes externally

2004-11-23 Thread James
On Tue, Nov 23, 2004 at 08:49:19PM -0500, James wrote: On Tue, Nov 23, 2004 at 10:36:46AM -0800, Bruce M Simpson wrote: [ snip ] If I understand correctly, you want the kernel to queue packets until layer 2 address resolution is complete. Right now we don't do this. If there is no route

Re: Initial review request for IPv6 Fast Forwarding and IP6STEALTH

2004-11-21 Thread James
On Sun, Nov 21, 2004 at 09:12:10AM -0800, [EMAIL PROTECTED] wrote: Hi James, A few comments for you: Hi George, Thanks for your good comments and catch on the line 223! I'll integreate the fixes soon for the final draft. -J Issues found: ip6_forward_rt is a global value

Re: polling(4) rocks!

2004-11-17 Thread James
most applications. -J -- James JunTowardEX Technologies, Inc. Technical Lead IPv4 and Native IPv6 Colocation, Bandwidth, [EMAIL PROTECTED] and Web Hosting Services in the Metro Boston area cell: 1(978)-394-2867

Initial review request for IPv6 Fast Forwarding and IP6STEALTH

2004-11-15 Thread James
in the final draft. Thank you for your time and suggestions in the mean time. -J -- James JunTowardEX Technologies, Inc. Technical Lead IPv4 and Native IPv6 Colocation, Bandwidth, [EMAIL PROTECTED] and Web Hosting Services

Re: Initial review request for IPv6 Fast Forwarding and IP6STEALTH

2004-11-15 Thread James
___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED] -- James JunTowardEX Technologies, Inc. Technical Lead IPv4 and Native IPv6 Colocation, Bandwidth

ip_fastforward() sanity check..

2004-11-06 Thread James
any comments, please let me know. If this is not a concern please disregard my rant and excuse me for waste of time :) Thanks, -J -- James JunTowardEX Technologies, Inc. Technical Lead IPv4 and Native IPv6 Colocation, Bandwidth

Re: em driver problem with intel pro 1000xf - force 100/full

2004-08-29 Thread James
There is no such standard that calls for 100BaseSX. Try 100BaseFX and see if it works for ya... HTH, -J -- James JunTowardEX Technologies, Inc. Technical LeadNetwork Design, Consulting, IT Outsourcing [EMAIL PROTECTED

Re: em driver problem with intel pro 1000xf - force 100/full

2004-08-29 Thread James
On Sun, Aug 29, 2004 at 10:44:56AM -0700, Christopher McCrory wrote: On Sun, 2004-08-29 at 00:46, James wrote: On Sat, Aug 28, 2004 at 09:28:11PM -0700, Christopher McCrory wrote: Hello... I am trying to use an Intel Pro 1000xf (Multimode fiber/SC connector) card on a FreeBSD

Re: packet order, ipf or ipfw

2004-07-29 Thread James
) on both firewalls? I am not trying to start a religious war or anything. Just want to get an idea of what developers think on both packet filters in regards to stateless rules. Thanks, -J -- James JunTowardEX Technologies, Inc. Technical Lead

device polling takes more CPU hits??

2004-07-26 Thread James
irq 2 at device 0.0 on pci2 Jul 21 23:09:25 r2.bos /kernel: bge1: Broadcom BCM5704C Dual Gigabit Ethernet, ASIC rev. 0x2002 mem 0xfcf0-0xfcf0,0xfcf1-0xfcf1 irq 5 at device 0.1 on pci2 Thanks for any tips! -J -- James JunTowardEX

Re: device polling takes more CPU hits??

2004-07-26 Thread James
kern.polling.suspect: 10249 kern.polling.stalled: 3 [EMAIL PROTECTED] sysctl machdep.cpu_idle_hlt machdep.cpu_idle_hlt: 1 -- James JunTowardEX Technologies, Inc. Technical Lead

Re: device polling takes more CPU hits??

2004-07-26 Thread James
] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED] -- James JunTowardEX Technologies, Inc. Technical LeadNetwork Design, Consulting, IT Outsourcing [EMAIL

Re: device polling takes more CPU hits??

2004-07-26 Thread James
the firewall rules as well as a test... no difference :( Oh also, just FYI, each vlan interface has link0 set, since em(4) supports hardware 802.1q tag/detagging. Thanks! -J -- James JunTowardEX Technologies, Inc. Technical LeadNetwork

Re: IPFW2 versrcreach update

2004-07-21 Thread James
Andre, James, it just occured to me; but what is the purpose of versrcreach denying a packet that will be discarded a few cycles later anyway? When I mark a route with -reject I want the ICMPs go out and still use the versrcreach functionality in ipfw. The point is to have uRPF loose

Re: IPFW2 versrcreach update

2004-07-21 Thread James
Yea, sorry, you are right. Wasn't really up to speed this morning... ;-) Not a problem at all :) Thanks for committing this! -J -- James JunTowardEX Technologies, Inc. Technical LeadNetwork Design, Consulting

Re: IPFW2 versrcreach update

2004-07-21 Thread James
to null. -J -- James JunTowardEX Technologies, Inc. Technical LeadNetwork Design, Consulting, IT Outsourcing [EMAIL PROTECTED] Boston-based Colocation Bandwidth Services cell: 1(978)-394-2867 web: http

Re: IPFW2 versrcreach update

2004-07-21 Thread James
On Wed, Jul 21, 2004 at 02:14:10PM -0400, James wrote: Where would the ICMP go anyway because you either don?t have a route to where you would point the packet to or the route points to null. Hmm.. Soemthing tells me that whatever I said below is exactly same to whatever you said

Re: IPFW2 versrcreach update

2004-07-20 Thread James
deny ip from any to any not versrcreach uRPF is again failing. Packets are being dropped as exactly as expected. -J -- James JunTowardEX Technologies, Inc. Technical LeadNetwork Design, Consulting, IT Outsourcing [EMAIL PROTECTED

IPFW2 versrcreach update

2004-07-19 Thread James
need done before rebooting w/ a test kernel. Anyway the idea is to fail the check if the route has RTF_REJECT or RTF_BLACKHOLE flag, under loose-check (ifp set to NULL) operation, which is an easy straight forward change. Thanks, -J -- James Jun

Re: IPFW questions

2004-06-17 Thread James
___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED] -- James JunTowardEX Technologies, Inc. Technical LeadNetwork Design, Consulting

Re: My planned work on networking stack

2004-03-08 Thread James
this: ipfw add deny ip from any to any not versrcreach or for an individual interface only: ipfw add deny ip from any to any not versrcreach recv fxp0 I'd like to get some feedback (and a man page draft) before I commit it to -CURRENT. -- Andre -- James Jun

Re: My planned work on networking stack

2004-03-06 Thread James
it to -CURRENT. -- Andre -- James JunTowardEX Technologies, Inc. Technical LeadNetwork Design, Consulting, IT Outsourcing [EMAIL PROTECTED] Boston-based Colocation Bandwidth Services cell: 1(978)-394-2867

Re: My planned work on networking stack

2004-03-04 Thread James
Jwhy inject as_path info from userland to kernel fib? may be netflow turning Jinto an api that quagga can take advantage of to gather accounting information Jis more feasible? James, can you please describe your idea more understandible? I can't understand your last sentence

Re: My planned work on networking stack

2004-03-04 Thread James
that was my thought initially, BUT.. actually... you can actually do this no problem using mrtd dumps and pick it up with a program via bgp device :P no need to create another api it seems :) errr??? I meant bpf device... -J -- James Jun

Re: My planned work on networking stack

2004-03-03 Thread James
bgpd, or any bgpd of that matter -- James JunTowardEX Technologies, Inc. Technical LeadNetwork Design, Consulting, IT Outsourcing [EMAIL PROTECTED] Boston-based Colocation Bandwidth Services cell: 1(978)-394

Re: My planned work on networking stack

2004-03-03 Thread James
feasible? -- James JunTowardEX Technologies, Inc. Technical LeadNetwork Design, Consulting, IT Outsourcing [EMAIL PROTECTED] Boston-based Colocation Bandwidth Services cell: 1(978)-394-2867 web: http

Re: My planned work on networking stack (vimage)

2004-03-02 Thread James Read
'. If this can in _any way_ be pushed/implemented (with minimal distruption) so that is it in HEAD/CURRENT then its well on the way to complementing what 'jail' does. This is one thing that I would like to use, without patching systems. But then thats just my 'wish list' opinion of it. Regards, James

Re: My planned work on networking stack

2004-03-01 Thread James
potentially be tied to userlands like Quagga? -J -- James JunTowardEX Technologies, Inc. Technical LeadNetwork Design, Consulting, IT Outsourcing [EMAIL PROTECTED] Boston-based Colocation Bandwidth

Re: Two ISP connections

2003-12-10 Thread James
to backup ISP's IP address. d) If the primary ISP is back online, do vice versa to switch back. That's one way of doing it. You can also write a daemon too that's more robust than a simple shell script. -J -- James Jun (formerly Haesu) Network Operations TowardEX Technologies, Inc. Consulting

[no subject]

2003-12-05 Thread James Pickett
setting, but doesnt display the Ethernet MAC address. Could this mean the card is faulty, or have I done something wrong? * PS The card is second hand and I dont know if it does work or not. Also I have not tested it elsewhere. Thanks --- Begin signature --- :: James Pickett :: [EMAIL PROTECTED

can't get trpt to run

2002-11-13 Thread James B. Wilkinson
When I try to run trpt, it reports no namelist. If I do nm /kernel I get an extensive namelist. At this point I have no idea where else to look. Does anybody here have any ideas? Kernel is 4.6.1-RC2. Thanks -- - Jimmy Wilkinson

Re: dest vs source ports ...

2002-10-22 Thread James Pace
. I think this question is better suited for freebsd-questions than freebsd-net. I would also recommend picking up a tutorial on TCP/IP. Thanks, -James -- James Pace [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-net in the body of the message

Re: [zebra 15605] BGP/MPLS VPN using the mpls-linux patch and zebra ldp patch

2002-10-03 Thread James R. Leu
any liability for viruses. If you received this e-mail in error, please immediately notify [EMAIL PROTECTED] The rights to monitor all e-mail communication through our network are reserved with us. -- James R. Leu To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-net

ipsec + racoon + WatchGuard Firebox?

2002-07-12 Thread James Satterfield
Anyone have any success with creating a ipsec tunnel between a freebsd gateway and a WatchGuard Firebox? It looks like I'm getting past authentication. I can't tell if the tunnel is actually getting created, but I certainly cannot move traffic through it. James. To Unsubscribe: send mail

TCP/IP Illustrated, vol 2

2002-05-29 Thread James B. Wilkinson
This book seems to be essentially the annotated source for the BSD 4.4 networking code. Can anybody tell me whether it is still current enough to use with today's FreeBSD source in a networking course? Thanks -- - Jimmy Wilkinson

[no subject]

2002-05-16 Thread James B. Wilkinson
I've got to teach a new graduate course in networking this fall. I'm looking at using vol 1 and maybe vol 2 of TCP/IP Illustrated by Richard Stevens. The basic premise of the book seems to be to do experiments on a working network in order to learn about the protocols. One thing that I

Problem with if_nge and netatalk

2001-11-20 Thread James Chen
++; nge_newbuf(sc, cur_rx, m); continue; } However, it doesn't happen for TCP/IP packets. Do I have to disable some function on the chip? Thanks, James To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-net in the body of the message