packets/second vs. bits/second

2004-03-15 Thread Lars Hansson
I have a OpenBSd box acting a s traffic shaper for a couple of clients and it is experience some, shall we say, odd problems. We have one client (more to come, wich is why this is a bit of a concern) that has very high packet/second rate while the actual bitrate is fairly low (small VOIP

Re: packets/second vs. bits/second

2004-03-15 Thread jared r r spiegel
On Mon, Mar 15, 2004 at 08:47:17PM +0800, Lars Hansson wrote: We have one client (more to come, wich is why this is a bit of a concern) that has very high packet/second rate while the actual bitrate is fairly low (small VOIP packets) and Am I missing something obvious here, or is cbq not

Re: Reverse ftp-proxy patch and active FTP

2004-03-15 Thread Tim Pushor
Daniel Hartmeier wrote: Passive/active can be ambiguous, for the client passive mode means the clients connects to the server for data connections. But from your further description I think you mean data connections from the server to the client, right? Yes, that is correct. As I understand

Re: Reverse ftp-proxy patch and active FTP

2004-03-15 Thread Daniel Hartmeier
On Mon, Mar 15, 2004 at 11:23:53AM -0700, Tim Pushor wrote: I am still testing the ramifications of my patch, and like I said, I'm not really a network programming guru, but if anyone wants it, they are free to have it. If it solves your problem, please send me a patch. I'll review it if

relaydb

2004-03-15 Thread Brent Bolin
I have a single file being used by relaydb. It contains whitelist and blacklist. Currently running pf fine with a spamd table containing many spam addresses. Using spamd-setup wtih RBL list and local spamassasin entries. How do I delete an IP from the blacklist ? How do I add an IP to the

Keeping a lot of states

2004-03-15 Thread Jedi/Sector One
Hello. Is there any kernel parameter like NMBCLUSTERS or NKMEMPAGES to increase in order to let pf work with millions of states? The host has 1Gb ram and does nothing but transparent firewalling. TIA, -- __ /*-Frank DENIS (Jedi/Sector One) j at 42-Networks.Com-*\ __ \ '/

Re: Keeping a lot of states

2004-03-15 Thread Jon Mosco
Yes. option NMBCLUSTERS=N , where N is the number of clusters. Read http://www.openbsd.org/faq/faq11.html#Network Jon On Tue, 16 Mar 2004 00:02:46 +0059 Jedi/Sector One [EMAIL PROTECTED] wrote: Hello. Is there any kernel parameter like NMBCLUSTERS or NKMEMPAGES to increase in

Re: Keeping a lot of states

2004-03-15 Thread Cedric Berger
No, i386 current pmap support is very poor, and won't allow you to reliably allocate more than 64M of RAM. You might be more lucky with sparc64 or amd64. Cedric Jon Mosco wrote: Yes. option NMBCLUSTERS=N , where N is the number of clusters. Read http://www.openbsd.org/faq/faq11.html#Network

Re: Keeping a lot of states

2004-03-15 Thread Jedi/Sector One
Hi Cedric. On Tue, Mar 16, 2004 at 01:08:13AM +0100, Cedric Berger wrote: No, i386 current pmap support is very poor, and won't allow you to reliably allocate more than 64M of RAM. Thanks for the clarification. What is the highest safe value I should raise NMBCLUSTERS to on x86? How

pf usage didn't meet goal in first test

2004-03-15 Thread Dr. David Johnson
I really need help with a pf application. I am trying to solve a problem on a friend's network and it looks to me like pf would be a wonderful solution, and some feedback was positive that it should work. But first test did not give good result. Here is the story. First the setup: 3 Computers on

Another clue why pf didn't meet goal in first test

2004-03-15 Thread Dr. David Johnson
Okay, I think I found some stuff on the Vonage site that gave me clues as to why I got the results in my testing. Please you pf gurus, can you give me feedback? Below is the testing I did (from previous message for background), and I found that maybe I am not getting the pf function when I have