Re: ACK filtering?

2023-07-25 Thread Rozhuk Ivan
On Tue, 18 Jul 2023 00:03:59 -0400 Mason Loring Bliss wrote: > I'm likely going to have to move to an Internet connection with > asymmetric bandwidth soon, and I want to be proactive with the > firewalling to avoid the connection choking on itself. > > There's a fair amount of documentation out

Re: Bug in MAC filter on IGB/if_vlan?

2021-11-09 Thread Rozhuk Ivan
On Tue, 9 Nov 2021 13:30:46 -0500 Ryan Stone wrote: > You're trying to use different MACs with each vlan. I don't believe > that this is really a support configuration in our stack, although > putting the interface into promiscuous I guess works. I try to look into if_vlan code and if I underst

Re: Bug in MAC filter on IGB/if_vlan?

2021-11-09 Thread Rozhuk Ivan
On Tue, 9 Nov 2021 08:39:12 -0600 Kevin Bowling wrote: > > I have in rc.conf: > > > > = > > vlans_igb0="vlan77 vlan86 vlan87" > > create_args_vlan87="vlan 87" > > create_args_vlan86="vlan 86" > > create_args_vlan7

if_vlan allow to set incorrect mtu

2021-11-07 Thread Rozhuk Ivan
Hi! Why if_vlan allow to set same MTU size or bigger as on parrent nic? Setup: - workstation with MTU 9000 and IPv4 on h/w nic - server with MTU 9000 on h/w nic and IPv4 on vlan nic with MTU 9000 (set by defauil on iface creation) This setup have issue: - big packets from server->wks - OK - b

Bug in MAC filter on IGB/if_vlan?

2021-11-06 Thread Rozhuk Ivan
Hi! I have in rc.conf: = vlans_igb0="vlan77 vlan86 vlan87" create_args_vlan87="vlan 87" create_args_vlan86="vlan 86" create_args_vlan77="vlan 77" ifconfig_vlan87="inet 185.44.68.92 netmask 255.255.252.0 mtu 1500 do

Re: TCP connection ignore RST

2021-09-07 Thread Rozhuk Ivan
On Tue, 7 Sep 2021 10:47:01 +0200 Michael Tuexen wrote: > >>> I have strange case: FreeBSD 12.2 ignore TCP RST from windows host > >>> and continue retransmitting packets. sockstat show that socket > >>> connected even after many tcp rst packets received. > >>> > >>> Any ideas how to fix it?

Re: TCP connection ignore RST

2021-09-06 Thread Rozhuk Ivan
On Sat, 4 Sep 2021 13:19:52 +0200 Michael Tuexen wrote: > > On 4. Sep 2021, at 01:37, Rozhuk Ivan wrote: > > > > Hi! > > > > > > I have strange case: FreeBSD 12.2 ignore TCP RST from windows host > > and continue retransmitting packets. sockstat show

TCP connection ignore RST

2021-09-03 Thread Rozhuk Ivan
Hi! I have strange case: FreeBSD 12.2 ignore TCP RST from windows host and continue retransmitting packets. sockstat show that socket connected even after many tcp rst packets received. Any ideas how to fix it? System build from: commit 8c01699f9194cfa3805ac734ae912529a10c063a CommitDate: Wed

Re: How to run script on network address change?

2021-06-22 Thread Rozhuk Ivan
On Tue, 22 Jun 2021 09:52:18 -0600 Warner Losh wrote: > These two patches appear to be good (I’ll need to do a little testing) > > But, can you update devd.conf(5) man page to include these new events > in the IFNET section? If so, I’ll land this in the tree... > This is updated version, they

Re: How to run script on network address change?

2021-06-20 Thread Rozhuk Ivan
On Sun, 20 Jun 2021 08:42:46 -0600 Ian Lepore wrote: > > I have FreeBSD 13@amd64 router with DHCP client on uplink. > > > > How to run script on IP address change? > > > > > > I do not see events from devd, only: > > !system=IFNET subsystem=em3 type=LINK_DOWN > > !system=IFNET subsystem=em3 ty

Re: How to run script on network address change?

2021-06-20 Thread Rozhuk Ivan
fig lan1 name lan0 devd output: !system=IFNET subsystem=lan0 type=RENAME lan1 !system=IFNET subsystem=lan1 type=RENAME lan0 >From 18a08c5f17d3b54f029a4e8c9ffbcd1370dbf3b1 Mon Sep 17 00:00:00 2001 From: Rozhuk Ivan Date: Sun, 20 Jun 2021 19:10:36 +0300 Subject: [PATCH] sys/net/if.c: add REN

How to run script on network address change?

2021-06-20 Thread Rozhuk Ivan
Hi! I have FreeBSD 13@amd64 router with DHCP client on uplink. How to run script on IP address change? I do not see events from devd, only: !system=IFNET subsystem=em3 type=LINK_DOWN !system=IFNET subsystem=em3 type=LINK_UP

Re: TCP Connection hang - MSS again

2021-04-05 Thread Rozhuk Ivan
On Mon, 5 Apr 2021 13:04:19 +0200 tue...@freebsd.org wrote: > > As I understand, in some cases remote host does not reply with MSS > > option, and host behind router continue use mss 8960, that dropped > > by router. > If the peer does not provide an MSS option, your local FreeBSD based > host s

Re: TCP Connection hang - MSS again

2021-04-05 Thread Rozhuk Ivan
On Mon, 5 Apr 2021 17:23:39 +0700 Eugene Grosbein wrote: > > Is any other other options to work around this? > > Yes. Each entry in the routing table has "mtu" attribute limiting TCP > MSS, too. You should use default route with -mtu 1500 attribute. For > example, in /etc/rc.conf: > > default

Re: TCP Connection hang - MSS again

2021-04-05 Thread Rozhuk Ivan
On Mon, 5 Apr 2021 12:44:50 +0300 Rozhuk Ivan wrote: > FreeBSD 13 desktop have no known problems with other websites. > Only with one remonte FreeBSD 12 with same sysctl.conf and mtu 9k. Forgot. FreeBSD 12 reply with MSS 8960, and I fix it in PF: > scrub in on $ext_v4_if0 all max-mss

TCP Connection hang - MSS again

2021-04-05 Thread Rozhuk Ivan
Hi! TCP Connection hang then I try to open https://online.sberbank.ru/CSAFront/index.do#/ FreeBSD 13 desktop + FreeBSD 13 router (pf). http://www.netlab.linkpc.net/download/software/os_cfg/FBSD/13/base/etc/sysctl.conf FreeBSD 13 desktop have no known problems with other websites. Only with one

Re: Multicast issue, interface not leaving Mutlicast Group

2021-04-02 Thread Rozhuk Ivan
On Fri, 7 Aug 2020 15:25:25 +0200 Abelenda Diego wrote: > Hello, > > I have discovered that I had a multicast issue for years I did not > know about. I use a FreeBSD (opnsense) setup as router for my home > network and have igmpproxy for IPTV. Somehow everything seems to > work, until I realized

WiFi with AC on FreeBSD

2020-06-09 Thread Rozhuk Ivan
Hi! For peoples who want to use linux WiFi drivers on FreeBSD with minimum support overhead :) This "how-to" (draft) describes how to use OpenWRT as driver with web GUI for WiFi adapters. No more pain with slow speed, no strange wpa_supplicant gui tools :) This upgrades WiFi speed from media:

Re: Multicast/SSDP not working (on VLAN interface)

2018-03-19 Thread Rozhuk Ivan
On Mon, 19 Mar 2018 16:11:05 -0700 (PDT) "Rodney W. Grimes" wrote: > Are you running with "firewall_type="simple""? > If so it is set to block all 224/4 packets, see this part > of /etc/rc.firewall: > # And stop draft-manning-dsua-03.txt (1 May 2000) nets > (includes RESERVED-1, # DHCP au

Re: Multicast/SSDP not working (on VLAN interface)

2018-03-19 Thread Rozhuk Ivan
On Mon, 19 Mar 2018 22:29:12 +0100 Andreas Scherrer wrote: > Now, if I (manually) add a static route for 224.0.0.0/4 via the > interface the M-SEARCH messages are coming in, everything starts to > work! > > route add -net 224.0.0.0/4 -iface re1.32 > > The (main) problem here is that I have mul

Re: upnp/dlna

2016-01-15 Thread Rozhuk Ivan
On Fri, 15 Jan 2016 14:52:25 +0100 Gerrit Kühn wrote: > So I have the strange feeling that my FreeBSD boxes ignore multicast > packages on the receiving end. The only thing that works is sending a > multicast package from the box. I did not change the default > configuration of the network device

Re: upnp/dlna

2016-01-15 Thread Rozhuk Ivan
On Fri, 15 Jan 2016 14:52:25 +0100 Gerrit Kühn wrote: > I have two FreeBSD boxes running mediatomb and minidlna. I also have a > couple of clients, mostly internet radios by different manufacturers > (Sangean, Philips, Renkforce...). > I have the (weird) issue that neither mediatomb nor minidlna

LAGG on netgraph + rc.d script

2015-07-21 Thread Rozhuk Ivan
Hi! if_lagg together with two multicast igb at more than 100 megabits led to 100% CPU interrupts one of the igb. The problem is not reproduced on other systems without igb adapters. So I gathered on lagg netgraph and with him there is no problem. Manual on russian: http://netlab.dhis.org/wiki/

ng_vlan improvements

2011-06-24 Thread Rozhuk Ivan
Diffs   -- Rozhuk Ivan   ng_vlan.h.orig.patch Description: Binary data ng_vlan.c.orig.patch Description: Binary data ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to

kern/152141: [vlan] encapsulate vlan in ng_ether before output to if

2010-12-02 Thread Rozhuk Ivan
Hi! This is a patch for ng_ether_rcv_lower function in ng_ether.c to encapsulate vlan before send to net.   -- Rozhuk Ivan   ng_ether.patch Description: Binary data ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo

struct sockaddr_in6 ia_net - unused

2010-11-22 Thread Rozhuk Ivan
/netinet/ip_input.c:if (ia->ia_netbroadcast.s_addr == ip->ip_dst.s_addr) { /usr/src/sys/netinet6/in6_var.h:struct sockaddr_in6 ia_net;/* network number of interface */ /usr/src/sys/netipx/ipx_if.h: struct sockaddr_ipx ia_netmask;/* space for my ne

kern/152141: [vlan] encapsulate vlan in ng_ether before output to if

2010-11-14 Thread Rozhuk Ivan
P_VLAN_HWTAGGING) == 0) { m = ether_vlanencap(m, m->m_pkthdr.ether_vtag); if (m == NULL) { ifp->if_oerrors++; return (ENOBUFS); } m->m_flags &= ~M_VLANTAG;