Re: the future of sun4v

2008-09-08 Thread Darren Reed
Marius Strobl wrote: On Fri, Aug 22, 2008 at 01:44:25PM +0200, Kris Kennaway wrote: > Peter Jeremy wrote: > >[Replies re-directed to freebsd-sun4v] > > > >On 2008-Aug-21 14:42:55 -0700, Kip Macy <[EMAIL PROTECTED]> wrote: > >>I believe that there is a general expectation by freebsd users and > >>

RELENG_6 IPFilter MFC

2007-11-18 Thread Darren Reed
I've just completed an MFC of IPFIilter in the FreeBSD 6 branch (RELENG_6) from HEAD. This brings the code used for IPFilter in FreeBSD into sync on each of HEAD, RELENG_6 and RELENG_7. Hopefully I can close one or two bug reports now ;) If you encounter any problems, please let me know. Cheer

Re: ipfilter + bge strangeness

2006-02-26 Thread Darren Reed
On Tue, Jan 31, 2006 at 12:09:13PM +0300, Oleg Bulyzhin wrote: > > > Btw, until recent changes bge had txcsum (not rxcsum) only. > > > > > > As i can see there is no problem with checksum's at all (at least inside > > > bge driver). tcpdump reports bad checksum on outgoing packets due to > > > nat

who's been smoking crack in freebsd land now ?

2002-04-11 Thread Darren Reed
Ok, why on earth is there a #warning for including for kernel stuff ? By definition, /usr/include/sys _IS_ kernel include files. Has some crack monkey been playing with include files again ? If the current isn't for use in the kernel, will someone please replace it with one that is or just d

Re: IPFilter problem on current cvs

2001-08-26 Thread Darren Reed
All rules like this: pass out quick on * proto tcp from any to any keep state should have a "flags S" in them. Darren To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-stable" in the body of the message

Re: bugtraq posts: stream.c - new FreeBSD exploit?

2000-01-20 Thread Darren Reed
In some mail from Brett Glass, sie said: > > At 06:03 PM 1/20/2000 , Darren Reed wrote: > > >If you're using "flags S keep state" or "flags S/SA keep state", > >then as far as I'm aware, having read the code, you are safe. > > This mi

Re: bugtraq posts: stream.c - new FreeBSD exploit?

2000-01-20 Thread Darren Reed
In some mail from Brett Glass, sie said: > > Darren: > > Glad to see you are in on this discussion. > > The code you use for the "keep state" option in IPFilters might be > able to recognize that the ACK does not belong to an existing > connection. Could a fast check be implemented as a rule un

Re: bugtraq posts: stream.c - new FreeBSD exploit?

2000-01-20 Thread Darren Reed
What versions of FreeBSD are known to be vulnerable to it ? There appears to be some confusion about whether or not it is a wide spread problem. Darren To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-stable" in the body of the message