Directions needed to implement original addresses log with PF and pflog

Hello, folks! I need some directions to implement a more refined NAT log with PF and pflog. Anyone can help me with that? Thank you, Raimundo Santos ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To

HZ kernel configuration still needed nowadays?

ed to compile my kernel with HZ=1000? And, in general, is it still needed to compile a custom kernel for dummynet to work more precisely? Thank you, Raimundo Santos ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-n

Re: Why anyone can read and write to a nobody NFS mounted volume?

Thank you for your time, Rick! I will take a look on the permissions of the dirs I am mounting from the server, but you clarified a big thing for me: it is up to the server machine to decide about permissions. Am I right? Thank you, Raimundo Santos On 15 April 2016 at 19:23, Rick Macklem

Why anyone can read and write to a nobody NFS mounted volume?

Hello all! i have a strange situation: everyone and not just root can read and write to a NFS mount point whose owner is nobody:nobody. Is this an expected behaviour? FreeBSD 10.2 RELEASE as NFS client. Seagate NAS400 as NFS server. Thank you all, Raimundo Santos

Re: strange nfs/rsync stalls

Hello, sorry for the necromancy here. I had issues with a simples NAS that exports NFS only for "nobody:nobody" as rsync tries to set uid and gid. Just take off this feature with: rsync -a --no-g --no-o and everything went fine. Hope it helps someone. Best regards, Raimundo Sa

How to log NATed addresses with ipfw and in-kernel libalias?

alias code don't gave me any clues where to know original address and nated address with AliasLog. Maybe an userland code could read this information? If yes, what would be the directions to follow? Thank you for your time, Raimundo Santos

Fwd: netmap-ipfw on em0 em1

Clarifying things for the sake of documentation: To use the host stack, append a ^ character after the name of the interface you want to use. (Info from netmap(4) shipped with FreeBSD 10.1 RELEASE.) Examples: "kipfw em0" does nothing useful. "kipfw netmap:em0" disconnects the NIC from the usual

Re: ipfw fwd duplicating packets in 9.3-RELEASE

For documentation: I do not know why or how, but after trying to reproduce the same strange behaviour, it did not happen. This was after restarting all the test environment. Weird. Sorry for take your time with this strange mess. Regards, Raimundo Santos On 29 October 2014 14:30, Raimundo

Re: ipfw fwd duplicating packets in 9.3-RELEASE

nt* machines in different networks. > > But what I want to say is the firewall rule > fwd 192.168.0.2 proto icmp src-ip 192.168.4.2 out xmit em1 > You can remove the "out" because "xmit" will check the "out interface". Thank you for the clarification. >

ipfw fwd duplicating packets in 9.3-RELEASE

e(INT) src-port 80 out recv EXT_IFACE But I am not confident that it will remains in good shape without knowing exactly why fwd behaves that way. Thank you in advance for your time, Raimundo Santos ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.o

ipfw and pf together are reliable?

of pain. I think that, if that works well, I can use only FWD in ipfw and the rest in pf. Is there a way and a reliable one to do that in 9.2 and 9.3? Thank you in advance, Raimundo Santos ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org

Re: 9.3 RELEASE not forwarding pkt-gen (netmap) packets over XenServer

On 26 August 2014 20:16, Olivier Cochard-Labbé wrote: > > On Tue, Aug 26, 2014 at 9:35 PM, Raimundo Santos wrote: >> >> >> 15:38:13.286119 00:1b:21:53:51:3d > 00:1b:21:53:51:39, ethertype IPv4 >> (0x0800), length 60: (tos 0x10, ttl 64, id 0, offset 0, flags [

Re: 9.3 RELEASE not forwarding pkt-gen (netmap) packets over XenServer

m, rxcsum and tso4 disabled. I am trying to test the performance of this virtual router in using dummynet to shape by IP and pkt-gen, with its said ability to generate packets with ranges of IP sources, could be a very good traffic generator. Once again, thank yo

9.3 RELEASE not forwarding pkt-gen (netmap) packets over XenServer

: 192.168.10/24 gateway 192.168.2.2 192.168.11/24 gateway 192.168.2.2 10/8 gateway 192.168.1.1 ARP static: 192.168.2.2 192.168.1.1 Thank you for your attention! Raimundo Santos ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman

Re: running netmap-ipfw with real NICs

On 28 April 2014 01:58, Mahnaz Talebi wrote: > I am trying to run netmap-based ipfw with real NICs Hello, there are some drivers that does not support netmap yet. Raimundo Santos ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.

Re: dummynet/ipfw high load?

On 11 April 2014 05:58, Dennis Yusupoff wrote: > NAT realized with pf nat, shaping with ipfw dummynet and traffic > accounting with ng_netflow via ipfw ng_tee. > Good time, Dennis. May I ask how much clients do you nat, shape and account? Why you do that with both engines (pf + ipfw)? Why not

Re: ipfw / routing issue on 9.2-RELEASE

Hello, Andreas. If table(12) is empty, how will fwd know where to send the packets that hits it? Best regards, Raimundo On 4 March 2014 02:58, Andreas Nilsson wrote: > Hello, > > I'm having a strange problem with ipfw and/or routing. I've only tested > this on 9.2-RELEASE-p3, amd64. The machi