From owner-freebsd-net Sun May 7 7:59:45 2000 Delivered-To: freebsd-net@freebsd.org Received: from juice.shallow.net (node16229.a2000.nl [24.132.98.41]) by hub.freebsd.org (Postfix) with ESMTP id D642D37BAE3 for ; Sun, 7 May 2000 07:59:41 -0700 (PDT) (envelope-from joshua@roughtrade.net) Received: from localhost (joshua@localhost) by juice.shallow.net (8.9.3/8.9.3) with ESMTP id RAA19044; Sun, 7 May 2000 17:00:20 +0200 (CEST) (envelope-from joshua@roughtrade.net) Date: Sun, 7 May 2000 17:00:20 +0200 (CEST) From: Joshua Goodall To: Jan Koum Cc: freebsd-net@FreeBSD.ORG Subject: Re: possible /etc/rc.firewall bug? In-Reply-To: <20000506162221.B45391@ethereal.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org This is a "known problem". Since the implications compromise natd security, it should have been fixed. However, it isn't in the latest 4.0-STABLE. There is a potential fix that may work for you. See http://www.freebsd.org/cgi/query-pr.cgi?pr=13769 but beware the warnings about making your firewall "weak". The resulting firewall ruleset should provide a basis for a stronger configuration. -- Joshua Goodall IP Systems Engineer - InterXion - http://www.InterXion.com/ On Sat, 6 May 2000, Jan Koum wrote: > > i just noticed something. if you setup natd and ipfw, you end up with: > > # ipfw -a l > 00100 677369 166815520 divert 8668 ip from any to any via ed0 > 00100 397358 45078874 allow ip from any to any via lo0 > 00200 0 0 deny ip from any to 127.0.0.0/8 > 65000 1709011 373169093 allow ip from any to any > 65535 0 0 deny ip from any to any > > two rules with number 100 -- i suggest moving divert rule to 50 by changing > > ${fwcmd} add divert natd all from any to any via ${natd_interface} > > to: > > ${fwcmd} add 50 divert natd all from any to any via ${natd_interface} > > > of course another way to do this is to remove #'s from following rules: > ${fwcmd} add 100 pass all from any to any via lo0 > ${fwcmd} add 200 deny all from any to 127.0.0.0/8 > > > thanks, > > -- yan > > > p.s. - this is 4.0 box with rc.firewall: > # $FreeBSD: src/etc/rc.firewall,v 1.30 2000/02/06 19:24:37 paul Exp $ > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Sun May 7 16:39:22 2000 Delivered-To: freebsd-net@freebsd.org Received: from camel.ethereal.net (216.200.22.209.cp.net [216.200.22.209]) by hub.freebsd.org (Postfix) with ESMTP id 6C7A037B540 for ; Sun, 7 May 2000 16:39:16 -0700 (PDT) (envelope-from jkb@camel.ethereal.net) Received: (from jkb@localhost) by camel.ethereal.net (8.10.0.Beta10/8.10.0.Beta10) id e47NcvS16705; Sun, 7 May 2000 16:38:57 -0700 (PDT) Date: Sun, 7 May 2000 16:38:57 -0700 From: Jan Koum To: Joshua Goodall Cc: freebsd-net@FreeBSD.ORG Subject: Re: possible /etc/rc.firewall bug? Message-ID: <20000507163857.A92100@ethereal.net> References: <20000506162221.B45391@ethereal.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.1.14i In-Reply-To: ; from joshua@roughtrade.net on Sun, May 07, 2000 at 05:00:20PM +0200 X-Operating-System: FreeBSD camel.ethereal.net 3.4-RELEASE FreeBSD 3.4-RELEASE X-Unix-Uptime: 10:34PM up 1 day, 9:11, 15 users, load averages: 0.13, 0.05, 0.06 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org i don't need a fix that works for me -- i can figure out how to make things work. i'd like someone to commit change i describe below (either giving natd rule assignment of 50 or going away from numbers all together in rc.firewall and let ipfw do internal number assignments) it's a very simple fix. i don't know why nobody commited it yet. On Sun, May 07, 2000 at 05:00:20PM +0200, Joshua Goodall wrote: > > This is a "known problem". Since the implications compromise natd > security, it should have been fixed. However, it isn't in the latest > 4.0-STABLE. > > There is a potential fix that may work for you. See > > http://www.freebsd.org/cgi/query-pr.cgi?pr=13769 > > but beware the warnings about making your firewall "weak". The resulting > firewall ruleset should provide a basis for a stronger configuration. > > -- > Joshua Goodall > IP Systems Engineer - InterXion - http://www.InterXion.com/ > > On Sat, 6 May 2000, Jan Koum wrote: > > > > > i just noticed something. if you setup natd and ipfw, you end up with: > > > > # ipfw -a l > > 00100 677369 166815520 divert 8668 ip from any to any via ed0 > > 00100 397358 45078874 allow ip from any to any via lo0 > > 00200 0 0 deny ip from any to 127.0.0.0/8 > > 65000 1709011 373169093 allow ip from any to any > > 65535 0 0 deny ip from any to any > > > > two rules with number 100 -- i suggest moving divert rule to 50 by changing > > > > ${fwcmd} add divert natd all from any to any via ${natd_interface} > > > > to: > > > > ${fwcmd} add 50 divert natd all from any to any via ${natd_interface} > > > > > > of course another way to do this is to remove #'s from following rules: > > ${fwcmd} add 100 pass all from any to any via lo0 > > ${fwcmd} add 200 deny all from any to 127.0.0.0/8 > > > > > > thanks, > > > > -- yan > > > > > > p.s. - this is 4.0 box with rc.firewall: > > # $FreeBSD: src/etc/rc.firewall,v 1.30 2000/02/06 19:24:37 paul Exp $ > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-net" in the body of the message > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Sun May 7 19:21:53 2000 Delivered-To: freebsd-net@freebsd.org Received: from web125.yahoomail.com (web125.yahoomail.com [205.180.60.193]) by hub.freebsd.org (Postfix) with SMTP id 7CF7137B84C for ; Sun, 7 May 2000 19:21:39 -0700 (PDT) (envelope-from fmirand@yahoo.com) Received: (qmail 21790 invoked by uid 60001); 8 May 2000 02:21:34 -0000 Message-ID: <20000508022134.21789.qmail@web125.yahoomail.com> Received: from [200.30.54.81] by web125.yahoomail.com; Sun, 07 May 2000 19:21:34 PDT Date: Sun, 7 May 2000 19:21:34 -0700 (PDT) From: Fabio Miranda Subject: Request of help! To: freebsd-questions@FreeBSD.org Cc: FreeBSD-net@freebsd.org, FreeBSD@es.FreeBSD.org, FreeBSD-isp@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi, i've been trying to set up my network and it has been imposible. I have sent many emails and noone has pointed me in the right way. Please, can anyone help me? Problem: I'm connecting a network to a leased line from my local company. I have a sever that uses a isa card(et5025-16 etinc.com) to connect to a dce (dsu/csu) and from it to the isp. The isp router is 209.88.252.105 and my IP is 209.88.252.106(the point to point link), and we belongs to 209.88.252.114 subnet. Also, the ISP gave me a subnet: 209.88.252.104/29 and i want the same server to have 209.88.252.113 and 209.88.252.114 to 118 are my local machines. the diagrama: ISProuter (209.88.252.105) - - - - eth0(209.88.252.106) FreeBSD fxp0(209.88.252.113)----->209.88.252.114to118 machines. I want the freebsd machine to route from 209.88.252.106 interface to 209.88.252.114 and viceversa, a multihomed server. Friends, i have really tried many things and the answered of my pasts email are kinda confused. Can anyone tell me something clear? i want to belongs to FreeBSD comunity! but, docs and all are hard. this is what i have done: ifconfig eth0 209.88.252.106 209.88.252.106 netmask 255.255.255.248 ifconfig fxp0 209.88.252.113 netmask 255.255.255.248 route add -net 209.88.252.104/29 209.88.252.105 -interface 209.88.252.106 route add -net 209.88.252.112/29 209.88.252.113 -interface 209.88.252.113 route add -net 0.0.0.0 209.88.252.113 1. What else do i need to make freebsd a router between the subnet .104 and .112 and make it use the .113? (pls, write the commands) 2. Do i need another software? like gated or routed or natd? 3. if i dont need any software, what makes "route" a packages from any of my local machines to the internet passing by the gatedway (the server)?. Thanks alot for any type of help. p.s. servers it's a l440gx intel using 3.4-release, others machines are win98 __________________________________________________ Do You Yahoo!? Send instant messages & get email alerts with Yahoo! Messenger. http://im.yahoo.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Sun May 7 19:57:44 2000 Delivered-To: freebsd-net@freebsd.org Received: from smtp11.bellglobal.com (smtp11.bellglobal.com [204.101.251.53]) by hub.freebsd.org (Postfix) with ESMTP id D3F2537BBF8 for ; Sun, 7 May 2000 19:57:38 -0700 (PDT) (envelope-from cybernetik@sympatico.ca) Received: from jordan (HSE-Toronto-ppp90888.sympatico.ca [216.209.40.107]) by smtp11.bellglobal.com (8.8.5/8.8.5) with SMTP id XAA10000; Sun, 7 May 2000 23:03:39 -0400 (EDT) Message-ID: <000d01bfb899$1ebd6920$1021fea9@sympatico.ca> From: "Jordan Blanchard" To: "Jan Koum" Cc: References: <20000506162221.B45391@ethereal.net> <20000507163857.A92100@ethereal.net> Subject: Re: possible /etc/rc.firewall bug? Date: Sun, 7 May 2000 22:57:16 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2615.200 X-MIMEOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org may I asked how you have web working without a proxy program??? I've got freebsd 4.0 running and I have never been able to get web working without a proxy program, everything else works just not web! ----- Original Message ----- From: Jan Koum To: Joshua Goodall Cc: Sent: Sunday, May 07, 2000 7:38 PM Subject: Re: possible /etc/rc.firewall bug? > > i don't need a fix that works for me -- i can figure out how to make > things work. i'd like someone to commit change i describe below (either > giving natd rule assignment of 50 or going away from numbers all together > in rc.firewall and let ipfw do internal number assignments) > > it's a very simple fix. i don't know why nobody commited it yet. > > > On Sun, May 07, 2000 at 05:00:20PM +0200, Joshua Goodall wrote: > > > > This is a "known problem". Since the implications compromise natd > > security, it should have been fixed. However, it isn't in the latest > > 4.0-STABLE. > > > > There is a potential fix that may work for you. See > > > > http://www.freebsd.org/cgi/query-pr.cgi?pr=13769 > > > > but beware the warnings about making your firewall "weak". The resulting > > firewall ruleset should provide a basis for a stronger configuration. > > > > -- > > Joshua Goodall > > IP Systems Engineer - InterXion - http://www.InterXion.com/ > > > > On Sat, 6 May 2000, Jan Koum wrote: > > > > > > > > i just noticed something. if you setup natd and ipfw, you end up with: > > > > > > # ipfw -a l > > > 00100 677369 166815520 divert 8668 ip from any to any via ed0 > > > 00100 397358 45078874 allow ip from any to any via lo0 > > > 00200 0 0 deny ip from any to 127.0.0.0/8 > > > 65000 1709011 373169093 allow ip from any to any > > > 65535 0 0 deny ip from any to any > > > > > > two rules with number 100 -- i suggest moving divert rule to 50 by changing > > > > > > ${fwcmd} add divert natd all from any to any via ${natd_interface} > > > > > > to: > > > > > > ${fwcmd} add 50 divert natd all from any to any via ${natd_interface} > > > > > > > > > of course another way to do this is to remove #'s from following rules: > > > ${fwcmd} add 100 pass all from any to any via lo0 > > > ${fwcmd} add 200 deny all from any to 127.0.0.0/8 > > > > > > > > > thanks, > > > > > > -- yan > > > > > > > > > p.s. - this is 4.0 box with rc.firewall: > > > # $FreeBSD: src/etc/rc.firewall,v 1.30 2000/02/06 19:24:37 paul Exp $ > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-net" in the body of the message > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-net" in the body of the message > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Sun May 7 20: 4: 0 2000 Delivered-To: freebsd-net@freebsd.org Received: from camel.ethereal.net (216.200.22.209.cp.net [216.200.22.209]) by hub.freebsd.org (Postfix) with ESMTP id 6153437BCC2 for ; Sun, 7 May 2000 20:03:57 -0700 (PDT) (envelope-from jkb@camel.ethereal.net) Received: (from jkb@localhost) by camel.ethereal.net (8.10.0.Beta10/8.10.0.Beta10) id e4833mL22371; Sun, 7 May 2000 20:03:48 -0700 (PDT) Date: Sun, 7 May 2000 20:03:48 -0700 From: Jan Koum To: Jordan Blanchard Cc: freebsd-net@FreeBSD.ORG Subject: Re: possible /etc/rc.firewall bug? Message-ID: <20000507200348.B92100@ethereal.net> References: <20000506162221.B45391@ethereal.net> <20000507163857.A92100@ethereal.net> <000d01bfb899$1ebd6920$1021fea9@sympatico.ca> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.1.14i In-Reply-To: <000d01bfb899$1ebd6920$1021fea9@sympatico.ca>; from cybernetik@sympatico.ca on Sun, May 07, 2000 at 10:57:16PM -0400 X-Operating-System: FreeBSD camel.ethereal.net 3.4-RELEASE FreeBSD 3.4-RELEASE X-Unix-Uptime: 10:34PM up 1 day, 9:11, 15 users, load averages: 0.13, 0.05, 0.06 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org the web has been turned off in the US last night around 9:30pm. it is now illegal to use the web here. you have to go through proxy based in china or cuba - which is why it only works for you via proxy. really -- what do you mean "how i have web working"??? and please, this does not belong on -net, this belongs on -questions mailing list. On Sun, May 07, 2000 at 10:57:16PM -0400, Jordan Blanchard wrote: > may I asked how you have web working without a proxy program??? I've got > freebsd 4.0 running and I have never been able to get web working without a > proxy program, everything else works just not web! > > > ----- Original Message ----- > From: Jan Koum > To: Joshua Goodall > Cc: > Sent: Sunday, May 07, 2000 7:38 PM > Subject: Re: possible /etc/rc.firewall bug? > > > > > > i don't need a fix that works for me -- i can figure out how to make > > things work. i'd like someone to commit change i describe below (either > > giving natd rule assignment of 50 or going away from numbers all together > > in rc.firewall and let ipfw do internal number assignments) > > > > it's a very simple fix. i don't know why nobody commited it yet. > > > > > > On Sun, May 07, 2000 at 05:00:20PM +0200, Joshua Goodall > wrote: > > > > > > This is a "known problem". Since the implications compromise natd > > > security, it should have been fixed. However, it isn't in the latest > > > 4.0-STABLE. > > > > > > There is a potential fix that may work for you. See > > > > > > http://www.freebsd.org/cgi/query-pr.cgi?pr=13769 > > > > > > but beware the warnings about making your firewall "weak". The resulting > > > firewall ruleset should provide a basis for a stronger configuration. > > > > > > -- > > > Joshua Goodall > > > IP Systems Engineer - InterXion - http://www.InterXion.com/ > > > > > > On Sat, 6 May 2000, Jan Koum wrote: > > > > > > > > > > > i just noticed something. if you setup natd and ipfw, you end up with: > > > > > > > > # ipfw -a l > > > > 00100 677369 166815520 divert 8668 ip from any to any via ed0 > > > > 00100 397358 45078874 allow ip from any to any via lo0 > > > > 00200 0 0 deny ip from any to 127.0.0.0/8 > > > > 65000 1709011 373169093 allow ip from any to any > > > > 65535 0 0 deny ip from any to any > > > > > > > > two rules with number 100 -- i suggest moving divert rule to 50 by > changing > > > > > > > > ${fwcmd} add divert natd all from any to any via ${natd_interface} > > > > > > > > to: > > > > > > > > ${fwcmd} add 50 divert natd all from any to any via > ${natd_interface} > > > > > > > > > > > > of course another way to do this is to remove #'s from following > rules: > > > > ${fwcmd} add 100 pass all from any to any via lo0 > > > > ${fwcmd} add 200 deny all from any to 127.0.0.0/8 > > > > > > > > > > > > thanks, > > > > > > > > -- yan > > > > > > > > > > > > p.s. - this is 4.0 box with rc.firewall: > > > > # $FreeBSD: src/etc/rc.firewall,v 1.30 2000/02/06 19:24:37 paul Exp $ > > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > > with "unsubscribe freebsd-net" in the body of the message > > > > > > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-net" in the body of the message > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-net" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Sun May 7 20:43: 4 2000 Delivered-To: freebsd-net@freebsd.org Received: from isis.nccw.net (isis.nccw.net [208.198.227.253]) by hub.freebsd.org (Postfix) with ESMTP id 5738D37B5ED for ; Sun, 7 May 2000 20:43:00 -0700 (PDT) (envelope-from jacob@void.mapopolis.com) Received: from void.mapopolis.com (64.32.130.228 [64.32.130.228]) by isis.nccw.net with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21) id KHFY4W71; Sun, 7 May 2000 23:41:30 -0400 Message-ID: <3915FF74.4F2D3AD@void.mapopolis.com> Date: Sun, 07 May 2000 23:42:44 +0000 From: jacob@void.mapopolis.com X-Mailer: Mozilla 4.7 [en] (X11; I; Linux 2.2.14 i686) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-net@freebsd.org Subject: netboot troubles :( Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org well..i've been working on netboot for a few days now, and i've been making little bursts of progress every now and then. right now, i'm stuck. what i'm trying to do is boot a diskless box (192.168.0.4) that will eventually act as a NAT/gateway/firewall. i have my server (192.168.0.3) setup right as far as i can tell. netboot loads its configuration fine, loads the kernel fine, and boots the kernel fine. when the kernel boots and tries to mount /, however, it gets an nfs error (13,) which i think means access denied. this makes no sense seeing as netboot is able to use nfs to transfer the kernel. here is a log of what happens: A:\>nb8390 BOOTP/TFTP/NFS bootstrap loader ESC for menu Search for adapter...Looking for NE1000/NE2000 at 0x0300 NE1000/NE2000 (16 bit) base 0x03000, addr 00:00:21:4A:2D:37 Searching for server... Unknown RFC1048-tag 0006 0004 00A8 0000 0003 My IP 192.168.0.4, Server IP 192.168.0.3, GW IP 0.0.0.0 Loading /tftpboot/freebsd.192.168.0.4... ip 192.168.0.4 hostname hades netmask 255.255.255.0 server 192.168.0.3 rootfs /usr/diskless-root Loading /kernel... text=0x000DC000, data=0x00011000, bss=0x0001A8A0, symbols=[+0x0004+0x14D8+0xC1EF] ... kernel boot messages ... NFS ROOT: 192.168.0.3:/usr/diskless-root nfs send error 13 for server 192.168.0.3:/usr/diskless-root the only thing that i can think of is that since netboot has already mounted the root filesystem, the server might not like it trying to mount the root fs again. assuming that was the problem, i'd have no idea how to fix it. if *anyone* could give me *any* help, i'd greatly appreciate it. in case it helps, i'll include all the relevant configuration files. the server is fbsd 3.4-STABLE. /etc/bootptab: hades:\ :ht=ether:\ :ha=0000214a2d37:\ :sm=255.255.255.0:\ :hn:\ :ds=192.168.0.3:\ :ip=192.168.0.4:\ :vm=rfc1048: /etc/exports: /usr -maproot=0:0 -alldirs 192.168.0.4 /tftpboot/freebsd.192.168.0.4: ip 192.168.0.4 hostname hades netmask 255.255.255.0 server 192.168.0.3 rootfs /usr/diskless-root thank you for even *reading* this post. if you need to contact me, my email address is jacob@void.mapopolis.com. if you respond to this, please email me the response, because i'm apt to miss it otherwise. -jacob kuenzel To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Sun May 7 22:49:44 2000 Delivered-To: freebsd-net@freebsd.org Received: from juice.shallow.net (node16229.a2000.nl [24.132.98.41]) by hub.freebsd.org (Postfix) with ESMTP id E250637B924 for ; Sun, 7 May 2000 22:49:26 -0700 (PDT) (envelope-from joshua@roughtrade.net) Received: from localhost (joshua@localhost) by juice.shallow.net (8.9.3/8.9.3) with ESMTP id HAA25992; Mon, 8 May 2000 07:50:09 +0200 (CEST) (envelope-from joshua@roughtrade.net) Date: Mon, 8 May 2000 07:50:09 +0200 (CEST) From: Joshua Goodall To: Jan Koum Cc: freebsd-net@FreeBSD.ORG Subject: Re: possible /etc/rc.firewall bug? In-Reply-To: <20000507163857.A92100@ethereal.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org hi Jan ... You may be comfortable fixing it yourself - but other readers of this list may not, and these *are* related issues. I agree that the inadequacies of rc.firewall+natd have been highlighted often enough that a fix should've been committed long ago. Anyone committers listening to this thread? - joshua On Sun, 7 May 2000, Jan Koum wrote: > > i don't need a fix that works for me -- i can figure out how to make > things work. i'd like someone to commit change i describe below (either > giving natd rule assignment of 50 or going away from numbers all together > in rc.firewall and let ipfw do internal number assignments) > > it's a very simple fix. i don't know why nobody commited it yet. > > > On Sun, May 07, 2000 at 05:00:20PM +0200, Joshua Goodall wrote: > > > > This is a "known problem". Since the implications compromise natd > > security, it should have been fixed. However, it isn't in the latest > > 4.0-STABLE. > > > > There is a potential fix that may work for you. See > > > > http://www.freebsd.org/cgi/query-pr.cgi?pr=13769 > > > > but beware the warnings about making your firewall "weak". The resulting > > firewall ruleset should provide a basis for a stronger configuration. > > > > -- > > Joshua Goodall > > IP Systems Engineer - InterXion - http://www.InterXion.com/ > > > > On Sat, 6 May 2000, Jan Koum wrote: > > > > > > > > i just noticed something. if you setup natd and ipfw, you end up with: > > > > > > # ipfw -a l > > > 00100 677369 166815520 divert 8668 ip from any to any via ed0 > > > 00100 397358 45078874 allow ip from any to any via lo0 > > > 00200 0 0 deny ip from any to 127.0.0.0/8 > > > 65000 1709011 373169093 allow ip from any to any > > > 65535 0 0 deny ip from any to any > > > > > > two rules with number 100 -- i suggest moving divert rule to 50 by changing > > > > > > ${fwcmd} add divert natd all from any to any via ${natd_interface} > > > > > > to: > > > > > > ${fwcmd} add 50 divert natd all from any to any via ${natd_interface} > > > > > > > > > of course another way to do this is to remove #'s from following rules: > > > ${fwcmd} add 100 pass all from any to any via lo0 > > > ${fwcmd} add 200 deny all from any to 127.0.0.0/8 > > > > > > > > > thanks, > > > > > > -- yan > > > > > > > > > p.s. - this is 4.0 box with rc.firewall: > > > # $FreeBSD: src/etc/rc.firewall,v 1.30 2000/02/06 19:24:37 paul Exp $ > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-net" in the body of the message > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-net" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Mon May 8 5:44: 7 2000 Delivered-To: freebsd-net@freebsd.org Received: from apollo.ocsny.com (apollo.ocsny.com [204.107.76.2]) by hub.freebsd.org (Postfix) with ESMTP id CEEBE37B51F; Mon, 8 May 2000 05:43:45 -0700 (PDT) (envelope-from mikel@ocsny.com) Received: from ocsny.com (thoth.upan.org [204.107.76.16]) by apollo.ocsny.com (8.9.2/8.9.3) with ESMTP id IAA68276; Mon, 8 May 2000 08:41:22 -0400 (EDT) Message-ID: <3916B6A4.7F5A3728@ocsny.com> Date: Mon, 08 May 2000 08:44:20 -0400 From: Mikel Organization: Optimized Computer Solutions, Inc. X-Mailer: Mozilla 4.73 [en] (Win98; U) X-Accept-Language: en,it MIME-Version: 1.0 To: Fabio Miranda Cc: freebsd-questions@FreeBSD.ORG, FreeBSD-net@FreeBSD.ORG, FreeBSD-isp@FreeBSD.ORG Subject: Re: Request of help! References: <20000508022134.21789.qmail@web125.yahoomail.com> Content-Type: multipart/mixed; boundary="------------1DAE3D92FF4B71017F0BB8F6" Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org This is a multi-part message in MIME format. --------------1DAE3D92FF4B71017F0BB8F6 Content-Type: multipart/alternative; boundary="------------84C0ABF8769A475D786EFF59" --------------84C0ABF8769A475D786EFF59 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Have you tried a more simplistic approach to your route statements? from below you gave us... ifconfig eth0 209.88.252.106 209.88.252.106 netmask 255.255.255.248 ifconfig fxp0 209.88.252.113 netmask 255.255.255.248 route add -net 209.88.252.104/29 209.88.252.105 -interface 209.88.252.106 route add -net 209.88.252.112/29 209.88.252.113 -interface 209.88.252.113 route add -net 0.0.0.0 209.88.252.113 Suggest altering to something like...I am assuming that fxp0 is your eterior interface and eth0 is your interior. # section 1 # 0xfffffff8 should be the same as .248 netmask.... #for /etc/rc.conf network_interfaces="eht0 fxp0 lo0" ifconfig_eth0=" inet $IP netmask $MSK" ifconfig_fxp0="inet 209.88.252.105 netmask 0xfffffff8" # section 2 # recommend creating a file called /usr/local/etc/rc.d/vhosts.sh # then put these entries in it... route add -net 0.0.0.0 -interface fxp0 route add -net 209.88.252.104 netmask 0xfffffff8 -interface fxp0 # oh yeah make sure you set the appropriate permissions... #-rwxr-x--x 1 root wheel 1764 May 2 03:57 /usr/local/etc/rc.d/vhost.sh Ok now how to make this work...personally I wouldn't try using my fBSD box to route same mask traffic accross two interfaces...because if you do then you will have to set up route for each host on the interior network...you would find it far easier to recompile the kernel to add ipfw support, and then use the natd/ipfw combo in which case you can use a fictitious ip block like 10.0.0.0 for $IP and 0xff000000 for $MSK, or if you have trouble with class 'A' scopes then try Class a 'B' 192.168.0.0 for $IP and 0xFFFF0000 for $MSK Then it would be a matter of setting up your firewall rules (in /etc/rc.firewall) and turning natd on (in /etc/rc.conf) Fabio Miranda wrote: > Hi, i've been trying to set up my network and it has > been imposible. I have sent many emails and noone has > pointed me in the right way. Please, can anyone help > me? > Problem: > I'm connecting a network to a leased line from my > local company. I have a sever that uses a isa > card(et5025-16 etinc.com) to connect to a dce > (dsu/csu) and from it to the isp. > The isp router is 209.88.252.105 and my IP is > 209.88.252.106(the point to point link), and we > belongs to 209.88.252.114 subnet. > Also, the ISP gave me a subnet: 209.88.252.104/29 and > i want the same server to have 209.88.252.113 and > 209.88.252.114 to 118 are my local machines. > the diagrama: > ISProuter > (209.88.252.105) > - > - > - > - > eth0(209.88.252.106) > FreeBSD > fxp0(209.88.252.113)----->209.88.252.114to118 > machines. > > I want the freebsd machine to route from > 209.88.252.106 interface to 209.88.252.114 and > viceversa, a multihomed server. > > Friends, i have really tried many things and the > answered of my pasts email are kinda confused. > Can anyone tell me something clear? i want to belongs > to FreeBSD comunity! but, docs and all are hard. > > this is what i have done: > > ifconfig eth0 209.88.252.106 209.88.252.106 netmask > 255.255.255.248 > ifconfig fxp0 209.88.252.113 netmask 255.255.255.248 > route add -net 209.88.252.104/29 209.88.252.105 > -interface 209.88.252.106 > route add -net 209.88.252.112/29 209.88.252.113 > -interface 209.88.252.113 > route add -net 0.0.0.0 209.88.252.113 > > 1. What else do i need to make freebsd a router > between the subnet .104 and .112 and make it use the > .113? (pls, write the commands) > 2. Do i need another software? like gated or routed or > natd? > 3. if i dont need any software, what makes "route" a > packages from any of my local machines to the internet > passing by the gatedway (the server)?. > > Thanks alot for any type of help. > > p.s. servers it's a l440gx intel using 3.4-release, > others machines are win98 > > __________________________________________________ > Do You Yahoo!? > Send instant messages & get email alerts with Yahoo! Messenger. > http://im.yahoo.com/ > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message -- Cheers, Mikel +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+ | Optimized Computer Solutions, Inc http://www.ocsny.com | 39 W14th Street, Suite 203 212 727 2100 | New York, NY 10011 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+ --------------84C0ABF8769A475D786EFF59 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit Have you tried a more simplistic approach to your route statements?

 from below you gave us...
ifconfig eth0 209.88.252.106 209.88.252.106 netmask
255.255.255.248
ifconfig fxp0 209.88.252.113 netmask 255.255.255.248
route add -net 209.88.252.104/29 209.88.252.105
-interface 209.88.252.106
route add -net 209.88.252.112/29 209.88.252.113
-interface 209.88.252.113
route add -net 0.0.0.0 209.88.252.113

 Suggest altering to something like...I am assuming that fxp0 is your eterior interface and eth0 is your interior.

# section 1
# 0xfffffff8 should be the same as .248 netmask....
#for /etc/rc.conf
network_interfaces="eht0 fxp0 lo0"
ifconfig_eth0=" inet $IP netmask $MSK"
ifconfig_fxp0="inet 209.88.252.105 netmask 0xfffffff8"

# section 2
# recommend creating a file called /usr/local/etc/rc.d/vhosts.sh
# then put these entries in it...
route add -net 0.0.0.0 -interface fxp0
route add -net 209.88.252.104 netmask 0xfffffff8 -interface fxp0

# oh yeah make sure you set the appropriate permissions...
#-rwxr-x--x  1 root  wheel  1764 May  2 03:57 /usr/local/etc/rc.d/vhost.sh

Ok now how to make this work...personally I wouldn't try using my fBSD box to route same mask traffic accross two interfaces...because if you do then you will have to set up route for each host on the interior network...you would find it far easier to recompile the kernel to add ipfw support, and then use the natd/ipfw combo in which case you can use a fictitious ip block like 10.0.0.0 for $IP and 0xff000000 for $MSK, or if you have trouble with class 'A' scopes then try Class a 'B' 192.168.0.0 for $IP and 0xFFFF0000 for $MSK Then it would be a matter of setting up your firewall rules (in /etc/rc.firewall) and turning natd on (in /etc/rc.conf)
 

Fabio Miranda wrote:

Hi, i've been trying to set up my network and it has
been imposible. I have sent many emails and noone has
pointed me in the right way. Please, can anyone help
me?
Problem:
I'm connecting a network to a leased line from my
local company. I have a sever that uses a isa
card(et5025-16 etinc.com) to connect to a dce
(dsu/csu) and from it to the isp.
The isp router is 209.88.252.105 and my IP is
209.88.252.106(the point to point link), and we
belongs to 209.88.252.114 subnet.
Also, the ISP gave me a subnet: 209.88.252.104/29 and
i want the same server to have 209.88.252.113 and
209.88.252.114 to 118 are my local machines.
the diagrama:
    ISProuter
(209.88.252.105)
       -
       -
       -
       -
eth0(209.88.252.106)
     FreeBSD
fxp0(209.88.252.113)----->209.88.252.114to118
machines.

I want the freebsd machine to route from
209.88.252.106 interface to 209.88.252.114 and
viceversa, a multihomed server.

Friends, i have really tried many things and the
answered of my pasts email are kinda confused.
Can anyone tell me something clear? i want to belongs
to FreeBSD comunity! but, docs and all are hard.

this is what i have done:

ifconfig eth0 209.88.252.106 209.88.252.106 netmask
255.255.255.248
ifconfig fxp0 209.88.252.113 netmask 255.255.255.248
route add -net 209.88.252.104/29 209.88.252.105
-interface 209.88.252.106
route add -net 209.88.252.112/29 209.88.252.113
-interface 209.88.252.113
route add -net 0.0.0.0 209.88.252.113

1. What else do i need to make freebsd a router
between the subnet .104 and .112 and make it use the
.113? (pls, write the commands)
2. Do i need another software? like gated or routed or
natd?
3. if i dont need any software, what makes "route" a
packages from any of my local machines to the internet
passing by the gatedway (the server)?.

Thanks alot for any type of help.

p.s. servers it's a l440gx intel using 3.4-release,
others machines are win98

__________________________________________________
Do You Yahoo!?
Send instant messages & get email alerts with Yahoo! Messenger.
http://im.yahoo.com/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message

--
Cheers,
Mikel
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+
| Optimized Computer Solutions, Inc        http://www.ocsny.com
| 39 W14th Street, Suite 203                   212 727 2100
| New York, NY 10011
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+
  --------------84C0ABF8769A475D786EFF59-- --------------1DAE3D92FF4B71017F0BB8F6 Content-Type: text/x-vcard; charset=us-ascii; name="mikel.vcf" Content-Transfer-Encoding: 7bit Content-Description: Card for Mikel Content-Disposition: attachment; filename="mikel.vcf" begin:vcard n:King;Mikel tel;fax:2124638402 tel;home:http://www.upan.org tel;work:2127272100 x-mozilla-html:TRUE org:Optimized Computer Solutions version:2.1 email;internet:mikel@ocsny.com title:Director of Network Operations & Technology adr;quoted-printable:;;39 W14th St.=0D=0ASte 203;New York;NY;10011;US note;quoted-printable:fBSD, PHP, MySql and OCS Rule!!!=0D=0A=0D=0AGoal is to be MS free by the end of 2k. x-mozilla-cpt:;7312 fn:Mikel King end:vcard --------------1DAE3D92FF4B71017F0BB8F6-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Mon May 8 6:41:20 2000 Delivered-To: freebsd-net@freebsd.org Received: from mail3.mia.bellsouth.net (mail3.mia.bellsouth.net [205.152.144.15]) by hub.freebsd.org (Postfix) with ESMTP id 7E65D37B639; Mon, 8 May 2000 06:41:08 -0700 (PDT) (envelope-from almacen@bellsouth.net) Received: from bellsouth.net (host-209-215-29-211.mia.bellsouth.net [209.215.29.211]) by mail3.mia.bellsouth.net (3.3.5alt/0.75.2) with ESMTP id JAA28301; Mon, 8 May 2000 09:36:15 -0400 (EDT) Message-ID: <39171852.8BFDC4E6@bellsouth.net> Date: Mon, 08 May 2000 12:41:06 -0700 From: "O. Nunez de Villavicencio" Organization: The ONVA Group X-Mailer: Mozilla 4.73 [en]C-bls40 (Win95; I) X-Accept-Language: en MIME-Version: 1.0 To: Fabio Miranda Cc: freebsd-questions@FreeBSD.ORG, FreeBSD-net@FreeBSD.ORG, FreeBSD@es.FreeBSD.org, FreeBSD-isp@FreeBSD.ORG Subject: Re: Spanish/English translations on rqst. Request of help! References: <20000508022134.21789.qmail@web125.yahoomail.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Estimado Fabio, Si tuvieras dificultad alguna con lo que te plantean -al ayudarte- dejamelo saber. OK? Orlando = = = = Fabio Miranda wrote: > Hi, i've been trying to set up my network and it has > been imposible. I have sent many emails and noone has > pointed me in the right way. Please, can anyone help > me? > Problem: > I'm connecting a network to a leased line from my > local company. I have a sever that uses a isa > card(et5025-16 etinc.com) to connect to a dce > (dsu/csu) and from it to the isp. > The isp router is 209.88.252.105 and my IP is > 209.88.252.106(the point to point link), and we > belongs to 209.88.252.114 subnet. > Also, the ISP gave me a subnet: 209.88.252.104/29 and > i want the same server to have 209.88.252.113 and > 209.88.252.114 to 118 are my local machines. > the diagrama: > ISProuter > (209.88.252.105) > - > - > - > - > eth0(209.88.252.106) > FreeBSD > fxp0(209.88.252.113)----->209.88.252.114to118 > machines. > > I want the freebsd machine to route from > 209.88.252.106 interface to 209.88.252.114 and > viceversa, a multihomed server. > > Friends, i have really tried many things and the > answered of my pasts email are kinda confused. > Can anyone tell me something clear? i want to belongs > to FreeBSD comunity! but, docs and all are hard. > > this is what i have done: > > ifconfig eth0 209.88.252.106 209.88.252.106 netmask > 255.255.255.248 > ifconfig fxp0 209.88.252.113 netmask 255.255.255.248 > route add -net 209.88.252.104/29 209.88.252.105 > -interface 209.88.252.106 > route add -net 209.88.252.112/29 209.88.252.113 > -interface 209.88.252.113 > route add -net 0.0.0.0 209.88.252.113 > > 1. What else do i need to make freebsd a router > between the subnet .104 and .112 and make it use the > .113? (pls, write the commands) > 2. Do i need another software? like gated or routed or > natd? > 3. if i dont need any software, what makes "route" a > packages from any of my local machines to the internet > passing by the gatedway (the server)?. > > Thanks alot for any type of help. > > p.s. servers it's a l440gx intel using 3.4-release, > others machines are win98 > > __________________________________________________ > Do You Yahoo!? > Send instant messages & get email alerts with Yahoo! Messenger. > http://im.yahoo.com/ > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Mon May 8 7:10:40 2000 Delivered-To: freebsd-net@freebsd.org Received: from cod.progroup.com (cod.progroup.com [207.44.190.233]) by hub.freebsd.org (Postfix) with ESMTP id 4CC4137B8A0; Mon, 8 May 2000 07:10:30 -0700 (PDT) (envelope-from craig@progroup.com) Received: from progroup.com (guppy.progroup.com [207.44.190.237]) by cod.progroup.com (8.9.2/8.9.2) with ESMTP id HAA87950; Mon, 8 May 2000 07:10:16 -0700 (PDT) (envelope-from craig@progroup.com) Message-ID: <39177377.D7974551@progroup.com> Date: Mon, 08 May 2000 19:09:59 -0700 From: Craig Shaver Organization: Productivity Group, Inc. X-Mailer: Mozilla 4.7 [en] (Win95; I) X-Accept-Language: en MIME-Version: 1.0 To: "O. Nunez de Villavicencio" Cc: Fabio Miranda , freebsd-questions@FreeBSD.ORG, FreeBSD-net@FreeBSD.ORG, FreeBSD@es.FreeBSD.org, FreeBSD-isp@FreeBSD.ORG Subject: Re: Spanish/English translations on rqst. Request of help! References: <20000508022134.21789.qmail@web125.yahoomail.com> <39171852.8BFDC4E6@bellsouth.net> Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Also see http://translator.go.com I work on it También vea http://translator.go.com Trabajo en él "O. Nunez de Villavicencio" wrote: > > Estimado Fabio, > > Si tuvieras dificultad alguna con lo que te plantean -al ayudarte- > dejamelo saber. OK? > Orlando > = = = = > > Fabio Miranda wrote: > > > Hi, i've been trying to set up my network and it has > > been imposible. I have sent many emails and noone has > > pointed me in the right way. Please, can anyone help > > me? > > Problem: > > I'm connecting a network to a leased line from my > > local company. I have a sever that uses a isa > > card(et5025-16 etinc.com) to connect to a dce > > (dsu/csu) and from it to the isp. > > The isp router is 209.88.252.105 and my IP is > > 209.88.252.106(the point to point link), and we > > belongs to 209.88.252.114 subnet. > > Also, the ISP gave me a subnet: 209.88.252.104/29 and > > i want the same server to have 209.88.252.113 and > > 209.88.252.114 to 118 are my local machines. > > the diagrama: > > ISProuter > > (209.88.252.105) > > - > > - > > - > > - > > eth0(209.88.252.106) > > FreeBSD > > fxp0(209.88.252.113)----->209.88.252.114to118 > > machines. > > > > I want the freebsd machine to route from > > 209.88.252.106 interface to 209.88.252.114 and > > viceversa, a multihomed server. > > > > Friends, i have really tried many things and the > > answered of my pasts email are kinda confused. > > Can anyone tell me something clear? i want to belongs > > to FreeBSD comunity! but, docs and all are hard. > > > > this is what i have done: > > > > ifconfig eth0 209.88.252.106 209.88.252.106 netmask > > 255.255.255.248 > > ifconfig fxp0 209.88.252.113 netmask 255.255.255.248 > > route add -net 209.88.252.104/29 209.88.252.105 > > -interface 209.88.252.106 > > route add -net 209.88.252.112/29 209.88.252.113 > > -interface 209.88.252.113 > > route add -net 0.0.0.0 209.88.252.113 > > > > 1. What else do i need to make freebsd a router > > between the subnet .104 and .112 and make it use the > > .113? (pls, write the commands) > > 2. Do i need another software? like gated or routed or > > natd? > > 3. if i dont need any software, what makes "route" a > > packages from any of my local machines to the internet > > passing by the gatedway (the server)?. > > > > Thanks alot for any type of help. > > > > p.s. servers it's a l440gx intel using 3.4-release, > > others machines are win98 > > > > __________________________________________________ > > Do You Yahoo!? > > Send instant messages & get email alerts with Yahoo! Messenger. > > http://im.yahoo.com/ > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message -- Craig Shaver, Productivity Group POB 60458 Sunnyvale, CA 94088 (650)390-0654 http://www.progroup.com/ mailto:craig@progroup.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Mon May 8 8:18:47 2000 Delivered-To: freebsd-net@freebsd.org Received: from rapidnet.com (rapidnet.com [205.164.216.1]) by hub.freebsd.org (Postfix) with ESMTP id B324D37B65B; Mon, 8 May 2000 08:18:28 -0700 (PDT) (envelope-from nick@rapidnet.com) Received: from localhost (nick@localhost) by rapidnet.com (8.9.3/8.9.3) with ESMTP id JAA73282; Mon, 8 May 2000 09:18:09 -0600 (MDT) Date: Mon, 8 May 2000 09:18:09 -0600 (MDT) From: Nick Rogness To: Mikel Cc: Fabio Miranda , freebsd-questions@FreeBSD.ORG, FreeBSD-net@FreeBSD.ORG, FreeBSD-isp@FreeBSD.ORG Subject: Re: Request of help! In-Reply-To: <3916B6A4.7F5A3728@ocsny.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Mon, 8 May 2000, Mikel wrote: > > Fabio Miranda wrote: > > > Hi, i've been trying to set up my network and it has > > been imposible. I have sent many emails and noone has > > pointed me in the right way. Please, can anyone help > > me? > > Problem: > > I'm connecting a network to a leased line from my > > local company. I have a sever that uses a isa > > card(et5025-16 etinc.com) to connect to a dce > > (dsu/csu) and from it to the isp. > > The isp router is 209.88.252.105 and my IP is > > 209.88.252.106(the point to point link), and we > > belongs to 209.88.252.114 subnet. > > Also, the ISP gave me a subnet: 209.88.252.104/29 and > > i want the same server to have 209.88.252.113 and > > 209.88.252.114 to 118 are my local machines. > > the diagrama: 209.88.252.104/29 is not an even subnet. Verify with your ISP. read below. Probably 209.88.252.104/30. Either that or you are stating it wrong. > > ISProuter > > (209.88.252.105) > > - > > - > > - > > - > > eth0(209.88.252.106) > > FreeBSD > > fxp0(209.88.252.113)----->209.88.252.114to118 > > machines. I can't understand what you are trying to say. SO I am following your diagram completely. Give netblocks adn a little more detail. > > > > I want the freebsd machine to route from > > 209.88.252.106 interface to 209.88.252.114 and > > viceversa, a multihomed server. > > This happens automatically if ip_forwarding is on: GATEWAY_ENABLE="YES" > > Friends, i have really tried many things and the > > answered of my pasts email are kinda confused. > > Can anyone tell me something clear? i want to belongs > > to FreeBSD comunity! but, docs and all are hard. > > I think you and your ISP are confused on the subnetting end. You should verify your settings. THis is really not that hard. > > this is what i have done: > > > > ifconfig eth0 209.88.252.106 209.88.252.106 netmask > > 255.255.255.248 > > ifconfig fxp0 209.88.252.113 netmask 255.255.255.248 OK. > > route add -net 209.88.252.104/29 209.88.252.105 > > -interface 209.88.252.106 Shouldn't need this statement .104/29 is directly connected interface. > > route add -net 209.88.252.112/29 209.88.252.113 > > -interface 209.88.252.113 This satement is wrong. 209.88.252.112 is not a network boundary for a /29 CIDR. Your networks are .0/29 and .8/29. WHat are you trying to do here? 209.88.252.112/29 contains: 209.88.252.108 --> 209.88.252.115 > > route add -net 0.0.0.0 209.88.252.113 Why is your default route going to .113? SHouldn't it be 209.88.252.105, the ISP? > > > > 1. What else do i need to make freebsd a router > > between the subnet .104 and .112 and make it use the > > .113? (pls, write the commands) Look at your /etc/rc.conf file. You should see a couple of lines: GATEWAY_ENABLE="YES" > > 2. Do i need another software? like gated or routed or > > natd? Not neccessary unless you want to exchange routes between machines. Your setup is very simple. Static routes should not be neccessary (Except your default gateway) and as long asip forwarding is on (GATEWAY_ENABLE) it should work. Also, the ISP should be holding the static routes for the following net, within their routers, or you will have to run a Dynamic Routing package like gated, Eitherway, make sure the ISP can get to your .112/29 network: route add -net 209.88.252.112/29 209.88.252.6/32 Nick Rogness - Speak softly and carry a Gigabit switch. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Mon May 8 12:38:43 2000 Delivered-To: freebsd-net@freebsd.org Received: from bubba.whistle.com (bubba.whistle.com [207.76.205.7]) by hub.freebsd.org (Postfix) with ESMTP id 9E32737BBF9; Mon, 8 May 2000 12:38:24 -0700 (PDT) (envelope-from archie@whistle.com) Received: (from archie@localhost) by bubba.whistle.com (8.9.3/8.9.2) id MAA03269; Mon, 8 May 2000 12:38:23 -0700 (PDT) From: Archie Cobbs Message-Id: <200005081938.MAA03269@bubba.whistle.com> Subject: panic reading routing socket To: freebsd-net@freebsd.org Date: Mon, 8 May 2000 12:38:23 -0700 (PDT) Cc: freebsd-hackers@freebsd.org X-Mailer: ELM [version 2.4ME+ PL54 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org The patch below adds some INVARIANTS consistency checks to socket receive operations. This was motivated by a recurring "receive 1" panic that happens every couple of weeks on a 3.4-RELEASE based system. When I use this patch I get an immediate panic as the system comes up, when routed tries to read the routing socket (line 724 of uipc_socket.c (3.4-REL post patch)). But I can't figure out if the panic is occurring because the patch is bogus (i.e., checking too stringently) or if there really is a bug in there somewhere. Any thoughts appreciated.. Thanks, -Archie ___________________________________________________________________________ Archie Cobbs * Whistle Communications, Inc. * http://www.whistle.com diff -ur /usr/src/sys/kern/uipc_socket.c ./uipc_socket.c --- /usr/src/sys/kern/uipc_socket.c Sun Aug 29 09:26:11 1999 +++ ./uipc_socket.c Mon May 8 11:44:21 2000 @@ -55,6 +55,21 @@ #include +#ifdef INVARIANTS +#define SPLNETCHECK() do { \ + int s1, s2; \ + s1 = splnet(); \ + s2 = splnet(); \ + if (s1 != s2) \ + panic("%s: !splnet", __FUNCTION__); \ + splx(s1); \ + } while (0) +#define SBCHECK(sb) sbcheck(sb) +#else +#define SPLNETCHECK() do { } while (0) +#define SBCHECK(so) do { } while (0) +#endif + struct vm_zone *socket_zone; so_gen_t so_gencnt; /* generation count for sockets */ @@ -629,6 +644,7 @@ if (error) return (error); s = splnet(); + SBCHECK(&so->so_rcv); m = so->so_rcv.sb_mb; /* @@ -678,6 +694,7 @@ error = EWOULDBLOCK; goto release; } + SBCHECK(&so->so_rcv); sbunlock(&so->so_rcv); error = sbwait(&so->so_rcv); splx(s); @@ -686,6 +703,7 @@ goto restart; } dontblock: + SBCHECK(&so->so_rcv); if (uio->uio_procp) uio->uio_procp->p_stats->p_ru.ru_msgrcv++; nextrecord = m->m_nextpkt; @@ -695,6 +713,7 @@ if (psa) *psa = dup_sockaddr(mtod(m, struct sockaddr *), mp0 == 0); + SBCHECK(&so->so_rcv); if (flags & MSG_PEEK) { m = m->m_next; } else { @@ -702,8 +721,10 @@ MFREE(m, so->so_rcv.sb_mb); m = so->so_rcv.sb_mb; } + SBCHECK(&so->so_rcv); } while (m && m->m_type == MT_CONTROL && error == 0) { + SBCHECK(&so->so_rcv); if (flags & MSG_PEEK) { if (controlp) *controlp = m_copy(m, 0, m->m_len); @@ -724,6 +745,7 @@ m = so->so_rcv.sb_mb; } } + SBCHECK(&so->so_rcv); if (controlp) { orig_resid = 0; controlp = &(*controlp)->m_next; @@ -736,6 +758,7 @@ if (type == MT_OOBDATA) flags |= MSG_OOB; } + SBCHECK(&so->so_rcv); moff = 0; offset = 0; while (m && uio->uio_resid > 0 && error == 0) { @@ -762,13 +785,16 @@ * block interrupts again. */ if (mp == 0) { + SBCHECK(&so->so_rcv); splx(s); error = uiomove(mtod(m, caddr_t) + moff, (int)len, uio); s = splnet(); + SBCHECK(&so->so_rcv); if (error) goto release; } else uio->uio_resid -= len; + SBCHECK(&so->so_rcv); if (len == m->m_len - moff) { if (m->m_flags & M_EOR) flags |= MSG_EOR; @@ -801,6 +827,7 @@ so->so_rcv.sb_cc -= len; } } + SBCHECK(&so->so_rcv); if (so->so_oobmark) { if ((flags & MSG_PEEK) == 0) { so->so_oobmark -= len; @@ -814,6 +841,7 @@ break; } } + SBCHECK(&so->so_rcv); if (flags & MSG_EOR) break; /* @@ -837,19 +865,23 @@ if (m) nextrecord = m->m_nextpkt; } + SBCHECK(&so->so_rcv); } + SBCHECK(&so->so_rcv); if (m && pr->pr_flags & PR_ATOMIC) { flags |= MSG_TRUNC; if ((flags & MSG_PEEK) == 0) (void) sbdroprecord(&so->so_rcv); } + SBCHECK(&so->so_rcv); if ((flags & MSG_PEEK) == 0) { if (m == 0) so->so_rcv.sb_mb = nextrecord; if (pr->pr_flags & PR_WANTRCVD && so->so_pcb) (*pr->pr_usrreqs->pru_rcvd)(so, flags); } + SBCHECK(&so->so_rcv); if (orig_resid == uio->uio_resid && orig_resid && (flags & MSG_EOR) == 0 && (so->so_state & SS_CANTRCVMORE) == 0) { sbunlock(&so->so_rcv); @@ -860,6 +892,7 @@ if (flagsp) *flagsp |= flags; release: + SBCHECK(&so->so_rcv); sbunlock(&so->so_rcv); splx(s); return (error); diff -ur /usr/src/sys/kern/uipc_socket2.c ./uipc_socket2.c --- /usr/src/sys/kern/uipc_socket2.c Fri Oct 1 10:08:50 1999 +++ ./uipc_socket2.c Mon May 8 11:45:43 2000 @@ -48,6 +48,21 @@ #include #include +#ifdef INVARIANTS +#define SPLNETCHECK() do { \ + int s1, s2; \ + s1 = splnet(); \ + s2 = splnet(); \ + if (s1 != s2) \ + panic("%s: !splnet", __FUNCTION__); \ + splx(s1); \ + } while (0) +#define SBCHECK(sb) sbcheck(sb) +#else +#define SPLNETCHECK() do { } while (0) +#define SBCHECK(so) do { } while (0) +#endif + /* * Primitive routines for operating on sockets and socket buffers */ @@ -301,6 +316,7 @@ return (error); } sb->sb_flags |= SB_LOCK; + SBCHECK(sb); return (0); } @@ -450,6 +466,7 @@ { register struct mbuf *n; + SPLNETCHECK(); if (m == 0) return; n = sb->sb_mb; @@ -466,7 +483,7 @@ sbcompress(sb, m, n); } -#ifdef SOCKBUF_DEBUG +#ifdef INVARIANT_SUPPORT void sbcheck(sb) register struct sockbuf *sb; @@ -475,6 +492,7 @@ register struct mbuf *n = 0; register u_long len = 0, mbcnt = 0; + SPLNETCHECK(); for (m = sb->sb_mb; m; m = n) { n = m->m_nextpkt; for (; m; m = m->m_next) { @@ -490,7 +508,7 @@ panic("sbcheck"); } } -#endif +#endif /* INVARIANT_SUPPORT */ /* * As above, except the mbuf chain @@ -503,6 +521,7 @@ { register struct mbuf *m; + SPLNETCHECK(); if (m0 == 0) return; m = sb->sb_mb; @@ -540,6 +559,7 @@ register struct mbuf *m; register struct mbuf **mp; + SPLNETCHECK(); if (m0 == 0) return; for (mp = &sb->sb_mb; *mp ; mp = &((*mp)->m_nextpkt)) { @@ -588,8 +608,8 @@ register struct mbuf *m, *n; int space = asa->sa_len; -if (m0 && (m0->m_flags & M_PKTHDR) == 0) -panic("sbappendaddr"); + KASSERT(!m0 || (m0->m_flags & M_PKTHDR) != 0, ("sbappendaddr")); + SBCHECK(sb); if (m0) space += m0->m_pkthdr.len; for (n = control; n; n = n->m_next) { @@ -620,6 +640,7 @@ n->m_nextpkt = m; } else sb->sb_mb = m; + SBCHECK(sb); return (1); } @@ -631,6 +652,7 @@ register struct mbuf *m, *n; int space = 0; + SBCHECK(sb); if (control == 0) panic("sbappendcontrol"); for (m = control; ; m = m->m_next) { @@ -653,6 +675,7 @@ n->m_nextpkt = control; } else sb->sb_mb = control; + SBCHECK(sb); return (1); } @@ -669,6 +692,7 @@ register int eor = 0; register struct mbuf *o; + SBCHECK(sb); while (m) { eor |= m->m_flags & M_EOR; if (m->m_len == 0 && @@ -704,6 +728,7 @@ else printf("semi-panic: sbcompress\n"); } + SBCHECK(sb); } /* @@ -741,6 +766,7 @@ register struct mbuf *m, *mn; struct mbuf *next; + SBCHECK(sb); next = (m = sb->sb_mb) ? m->m_nextpkt : 0; while (len > 0) { if (m == 0) { @@ -771,6 +797,7 @@ m->m_nextpkt = next; } else sb->sb_mb = next; + SBCHECK(sb); } /* @@ -783,6 +810,7 @@ { register struct mbuf *m, *mn; + SBCHECK(sb); m = sb->sb_mb; if (m) { sb->sb_mb = m->m_nextpkt; @@ -792,6 +820,7 @@ m = mn; } while (m); } + SBCHECK(sb); } /* To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 1:50:26 2000 Delivered-To: freebsd-net@freebsd.org Received: from storm.FreeBSD.org.uk (storm.freebsd.org.uk [194.242.139.170]) by hub.freebsd.org (Postfix) with ESMTP id D6FEE37BAA4 for ; Tue, 9 May 2000 01:50:22 -0700 (PDT) (envelope-from brian@Awfulhak.org) Received: from hak.lan.Awfulhak.org (hak.nat.Awfulhak.org [172.31.0.12]) by storm.FreeBSD.org.uk (8.9.3/8.9.3) with ESMTP id JAA40301; Tue, 9 May 2000 09:50:20 +0100 (BST) (envelope-from brian@Awfulhak.org) Received: from hak.lan.Awfulhak.org (brian@localhost [127.0.0.1]) by hak.lan.Awfulhak.org (8.9.3/8.9.3) with ESMTP id IAA00483; Tue, 9 May 2000 08:33:50 +0100 (BST) (envelope-from brian@hak.lan.Awfulhak.org) Message-Id: <200005090733.IAA00483@hak.lan.Awfulhak.org> X-Mailer: exmh version 2.1.1 10/15/1999 To: Jaye Mathisen Cc: freebsd-net@FreeBSD.ORG, brian@hak.lan.Awfulhak.org Subject: Re: Anybody using PPPoE to to terminate customer DSL sessions? In-Reply-To: Message from Jaye Mathisen of "Sun, 30 Apr 2000 20:13:53 PDT." Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Tue, 09 May 2000 08:33:49 +0100 From: Brian Somers Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > Was looking at using FreeBSd 4.x to terminate DSL traffic from customer > DSLAM's. > > If anybody here has done that and wouldn't mind answering a couple > questions on it, please let me know. I haven't actually done it in quantity, but I did write the pppoed code. What appears to be the problem ? -- Brian Don't _EVER_ lose your sense of humour ! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 2:50:29 2000 Delivered-To: freebsd-net@freebsd.org Received: from bells.cs.ucl.ac.uk (bells.cs.ucl.ac.uk [128.16.5.31]) by hub.freebsd.org (Postfix) with SMTP id 3CAA137B940 for ; Tue, 9 May 2000 02:50:26 -0700 (PDT) (envelope-from T.Pagtzis@cs.ucl.ac.uk) Received: from ginger.cs.ucl.ac.uk by bells.cs.ucl.ac.uk with local SMTP id ; Tue, 9 May 2000 10:50:15 +0100 Message-ID: <3917DF55.9ABD99AD@cs.ucl.ac.uk> Date: Tue, 09 May 2000 10:50:14 +0100 From: Theo PAGTZIS Reply-To: t.pagtzis@cs.ucl.ac.uk Organization: UCL X-Mailer: Mozilla 4.72 [en] (X11; U; SunOS 5.7 sun4u) X-Accept-Language: el, en MIME-Version: 1.0 To: freebsd-net@freebsd.org Subject: Question on Tx queueing internals Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi all, I have been trying to understand the internals of an Ethernet driver but cannot answer the following questions, so any help on that would be appreciated. I am told that on the network card there is a Tx and Rx buffer.... Is the output queue of an interface driver the same thing as a transmit buffer on the actual network card or are they two different things...ie when the ip_output passes the packet to the if_output function of the Ether interface, the if_output will add the Ether header and then put it on the output queue (if_snd). Is this output queue (the driver's output queue ) the same as what one call the Tx/Rx buffer on the network card or are is it a different one? Also is the Tx buffer a different piece of memory than the Rx buffer on the Ethernet card. I am asking that trying to understand whethe Tx and Rx share a single buffer on the card so that Tx buffer could starv Rx buffering... Last, is a wireless network card full duplex? Thanks Theo To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 3:36:57 2000 Delivered-To: freebsd-net@freebsd.org Received: from ccserv.csie.nctu.edu.tw (ccserv.csie.nctu.edu.tw [140.113.209.2]) by hub.freebsd.org (Postfix) with ESMTP id 0FFF637BDFB for ; Tue, 9 May 2000 03:36:39 -0700 (PDT) (envelope-from freedom@ccserv.csie.nctu.edu.tw) Received: (from freedom@localhost) by ccserv.csie.nctu.edu.tw (8.9.3/8.9.0) id SAA28511; Tue, 9 May 2000 18:35:48 +0800 (CST) Date: Tue, 9 May 2000 18:35:48 +0800 From: Tan Koan-Sin To: Theo PAGTZIS Cc: freebsd-net@freebsd.org Subject: Re: Question on Tx queueing internals Message-ID: <20000509183548.A19208@ccserv.csie.nctu.edu.tw> References: <3917DF55.9ABD99AD@cs.ucl.ac.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <3917DF55.9ABD99AD@cs.ucl.ac.uk>; from T.Pagtzis@cs.ucl.ac.uk on Tue, May 09, 2000 at 10:50:14AM +0100 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, May 09, 2000 at 10:50:14AM +0100, Theo PAGTZIS wrote: > I am told that on the network card there is a Tx and Rx buffer.... > Is the output queue of an interface driver the same thing as a transmit > buffer on the actual network card or are they two different things...ie > when the ip_output passes the packet to the if_output function of the > Ether interface, the if_output will add the Ether header and then put it > on the output queue (if_snd). Is this output queue (the driver's output > queue ) the same as what one call the Tx/Rx buffer on the network card > or are is it a different one? They are different. The if_snd is a mbuf linked list in main memory. The Tx/Rx buffers are on the card. Take the Intel 82559 (fxp) on FreeBSD as a example, the Tx and Rx buffer on the network card are separate 3K FIFOs. > Also is the Tx buffer a different piece of memory than the Rx buffer on > the Ethernet card. I am asking that trying to understand whethe Tx and > Rx share a single buffer on the card so that Tx buffer could starv Rx > buffering... It depends the card you use. You must find the data sheet of the chips used on your card. -- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 4:20:20 2000 Delivered-To: freebsd-net@freebsd.org Received: from bells.cs.ucl.ac.uk (bells.cs.ucl.ac.uk [128.16.5.31]) by hub.freebsd.org (Postfix) with SMTP id CACB037BE25 for ; Tue, 9 May 2000 04:20:16 -0700 (PDT) (envelope-from T.Pagtzis@cs.ucl.ac.uk) Received: from ginger.cs.ucl.ac.uk by bells.cs.ucl.ac.uk with local SMTP id ; Tue, 9 May 2000 12:11:00 +0100 Message-ID: <3917F243.62FE8FEE@cs.ucl.ac.uk> Date: Tue, 09 May 2000 12:10:59 +0100 From: Theo PAGTZIS Reply-To: t.pagtzis@cs.ucl.ac.uk Organization: UCL X-Mailer: Mozilla 4.72 [en] (X11; U; SunOS 5.7 sun4u) X-Accept-Language: el, en MIME-Version: 1.0 To: Tan Koan-Sin Cc: freebsd-net@freebsd.org Subject: Re: Question on Tx queueing internals References: <3917DF55.9ABD99AD@cs.ucl.ac.uk> <20000509183548.A19208@ccserv.csie.nctu.edu.tw> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Tan Koan-Sin wrote: > On Tue, May 09, 2000 at 10:50:14AM +0100, Theo PAGTZIS wrote: > > I am told that on the network card there is a Tx and Rx buffer.... > > Is the output queue of an interface driver the same thing as a transmit > > buffer on the actual network card or are they two different things...ie > > when the ip_output passes the packet to the if_output function of the > > Ether interface, the if_output will add the Ether header and then put it > > on the output queue (if_snd). Is this output queue (the driver's output > > queue ) the same as what one call the Tx/Rx buffer on the network card > > or are is it a different one? > > They are different. The if_snd is a mbuf linked list in main memory. > The Tx/Rx buffers are on the card. Take the Intel 82559 (fxp) on > FreeBSD as a example, the Tx and Rx buffer on the network card are > separate 3K FIFOs. > > > Also is the Tx buffer a different piece of memory than the Rx buffer on > > the Ethernet card. I am asking that trying to understand whethe Tx and > > Rx share a single buffer on the card so that Tx buffer could starv Rx > > buffering... > > It depends the card you use. You must find the data sheet of the > chips used on your card. > > -- > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message Brill ! thanks Tan ! Would anyone have any idea what is the Tx/Rx buffs on the WavelanII 11Mbps cards? Also it has been my understanding for some time that wireless network cards are by nature half duplex...however some people argue about full duplex for which I am not at all convinced....could anyone enlighten on that? Theo To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 7: 1:55 2000 Delivered-To: freebsd-net@freebsd.org Received: from rsys001a.roke.co.uk (rsys001a.roke.co.uk [193.118.192.110]) by hub.freebsd.org (Postfix) with ESMTP id 585DB37B959 for ; Tue, 9 May 2000 07:01:51 -0700 (PDT) (envelope-from mick.gallagher@roke.co.uk) Received: by rsys001a.roke.co.uk with Internet Mail Service (5.5.2650.21) id ; Tue, 9 May 2000 15:01:44 +0100 Message-ID: From: "Gallagher, Mick" To: "'t.pagtzis@cs.ucl.ac.uk'" Cc: freebsd-net@freebsd.org Subject: RE: Question on Tx queueing internals Date: Tue, 9 May 2000 15:01:43 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org As I understand, WaveLAN is based on the IEEE 802.11 standard which I think operates half duplex. (Full duplex RF kit is much more expensive to build, so the IEEE went for a half duplex standard. At least that's my reading.) HTH, Mick --- mickg@iname.com -----Original Message----- From: Theo PAGTZIS [mailto:T.Pagtzis@cs.ucl.ac.uk] Sent: 09 May 2000 12:11 To: Tan Koan-Sin Cc: freebsd-net@freebsd.org Subject: Re: Question on Tx queueing internals Tan Koan-Sin wrote: > On Tue, May 09, 2000 at 10:50:14AM +0100, Theo PAGTZIS wrote: > > I am told that on the network card there is a Tx and Rx buffer.... > > Is the output queue of an interface driver the same thing as a transmit > > buffer on the actual network card or are they two different things...ie > > when the ip_output passes the packet to the if_output function of the > > Ether interface, the if_output will add the Ether header and then put it > > on the output queue (if_snd). Is this output queue (the driver's output > > queue ) the same as what one call the Tx/Rx buffer on the network card > > or are is it a different one? > > They are different. The if_snd is a mbuf linked list in main memory. > The Tx/Rx buffers are on the card. Take the Intel 82559 (fxp) on > FreeBSD as a example, the Tx and Rx buffer on the network card are > separate 3K FIFOs. > > > Also is the Tx buffer a different piece of memory than the Rx buffer on > > the Ethernet card. I am asking that trying to understand whethe Tx and > > Rx share a single buffer on the card so that Tx buffer could starv Rx > > buffering... > > It depends the card you use. You must find the data sheet of the > chips used on your card. > > -- > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message Brill ! thanks Tan ! Would anyone have any idea what is the Tx/Rx buffs on the WavelanII 11Mbps cards? Also it has been my understanding for some time that wireless network cards are by nature half duplex...however some people argue about full duplex for which I am not at all convinced....could anyone enlighten on that? Theo To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 9:25:32 2000 Delivered-To: freebsd-net@freebsd.org Received: from bells.cs.ucl.ac.uk (bells.cs.ucl.ac.uk [128.16.5.31]) by hub.freebsd.org (Postfix) with SMTP id 841FE37B8E5 for ; Tue, 9 May 2000 09:25:29 -0700 (PDT) (envelope-from T.Pagtzis@cs.ucl.ac.uk) Received: from ginger.cs.ucl.ac.uk by bells.cs.ucl.ac.uk with local SMTP id ; Tue, 9 May 2000 17:25:26 +0100 Message-ID: <39183BF5.F108BB09@cs.ucl.ac.uk> Date: Tue, 09 May 2000 17:25:25 +0100 From: Theo PAGTZIS Reply-To: t.pagtzis@cs.ucl.ac.uk Organization: UCL X-Mailer: Mozilla 4.72 [en] (X11; U; SunOS 5.7 sun4u) X-Accept-Language: el, en MIME-Version: 1.0 To: freebsd-net@freebsd.org Cc: wpaul@skynet.ctr.columbia.edu Subject: Re: Any known problems with routing in 3.4R? References: <200005110724.CAA60699@aurora.sol.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > Hi All/Bill, I am running Freebsd 3.4 + PAO and have the following problem when I try to get the statistics from the wi0 (wavelanII) interface, the interface keeps returning 0 for all values. Is that broken in 3.4 ?? I have the impression that I have seen it working in previous versions.... Has anyone managed to get statistics out of the wavelan (wi0) interface..?? If yes would it be possible to tell me how? I also notice that the wavelan drivers have changed for fbsd4.0 (some caching and wep stuff) has the driver been optimised to run better than the previous one (I mean faster)...? Thanks Theo To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 9:31:47 2000 Delivered-To: freebsd-net@freebsd.org Received: from paprika.michvhf.com (paprika.michvhf.com [209.103.136.12]) by hub.freebsd.org (Postfix) with SMTP id B694D37B710 for ; Tue, 9 May 2000 09:31:44 -0700 (PDT) (envelope-from vev@michvhf.com) Received: (qmail 28721 invoked by uid 1001); 9 May 2000 16:32:44 -0000 Date: Tue, 9 May 2000 12:32:44 -0400 (EDT) From: Vince Vielhaber To: Theo PAGTZIS Cc: freebsd-net@freebsd.org, wpaul@skynet.ctr.columbia.edu Subject: Re: Any known problems with routing in 3.4R? In-Reply-To: <39183BF5.F108BB09@cs.ucl.ac.uk> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, 9 May 2000, Theo PAGTZIS wrote: > > > > Hi All/Bill, > > > I am running Freebsd 3.4 + PAO and have the following problem > > when I try to get the statistics from the wi0 (wavelanII) interface, the interface keeps returning 0 for all values. Is that broken in 3.4 ?? > I have the impression that I have seen it working in previous versions.... Has anyone managed to get statistics out of the wavelan (wi0) interface..?? > > If yes would it be possible to tell me how? I got it working although it took a while. I found a note in the mail archives about using a separate file to configure the interface with wiconfig. Don't have the info handy but will later today. I know I had to make sure it was configured on the same interrupt as it was in windoze. After I did that it started reporting. Vince. -- ========================================================================== Vince Vielhaber -- KA8CSH email: vev@michvhf.com http://www.pop4.net 128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4 Networking Online Campground Directory http://www.camping-usa.com Online Giftshop Superstore http://www.cloudninegifts.com ========================================================================== To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 9:32:13 2000 Delivered-To: freebsd-net@freebsd.org Received: from bells.cs.ucl.ac.uk (bells.cs.ucl.ac.uk [128.16.5.31]) by hub.freebsd.org (Postfix) with SMTP id 9EB7E37BE52 for ; Tue, 9 May 2000 09:32:08 -0700 (PDT) (envelope-from T.Pagtzis@cs.ucl.ac.uk) Received: from ginger.cs.ucl.ac.uk by bells.cs.ucl.ac.uk with local SMTP id ; Tue, 9 May 2000 17:32:05 +0100 Message-ID: <39183D85.AAF44542@cs.ucl.ac.uk> Date: Tue, 09 May 2000 17:32:05 +0100 From: Theo PAGTZIS Reply-To: t.pagtzis@cs.ucl.ac.uk Organization: UCL X-Mailer: Mozilla 4.72 [en] (X11; U; SunOS 5.7 sun4u) X-Accept-Language: el, en MIME-Version: 1.0 To: t.pagtzis@cs.ucl.ac.uk Cc: freebsd-net@freebsd.org, wpaul@skynet.ctr.columbia.edu Subject: wavelan stats broken under 3.4 References: <200005110724.CAA60699@aurora.sol.net> <39183BF5.F108BB09@cs.ucl.ac.uk> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > > Hi All/Bill, > > I am running Freebsd 3.4 + PAO and have the following problem > > when I try to get the statistics from the wi0 (wavelanII) interface, the interface keeps returning 0 for all values. Is that broken in 3.4 ?? > I have the impression that I have seen it working in previous versions.... Has anyone managed to get statistics out of the wavelan (wi0) interface..?? > > If yes would it be possible to tell me how? > > I also notice that the wavelan drivers have changed for fbsd4.0 (some caching and wep stuff) has the driver been optimised to run better than the previous one > (I mean faster)...? > > Thanks > > Theo To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 10: 1:52 2000 Delivered-To: freebsd-net@freebsd.org Received: from bells.cs.ucl.ac.uk (bells.cs.ucl.ac.uk [128.16.5.31]) by hub.freebsd.org (Postfix) with SMTP id 551C937BE08 for ; Tue, 9 May 2000 10:01:47 -0700 (PDT) (envelope-from T.Pagtzis@cs.ucl.ac.uk) Received: from ginger.cs.ucl.ac.uk by bells.cs.ucl.ac.uk with local SMTP id ; Tue, 9 May 2000 18:01:21 +0100 Message-ID: <39184461.98B90E22@cs.ucl.ac.uk> Date: Tue, 09 May 2000 18:01:21 +0100 From: Theo PAGTZIS Reply-To: t.pagtzis@cs.ucl.ac.uk Organization: UCL X-Mailer: Mozilla 4.72 [en] (X11; U; SunOS 5.7 sun4u) X-Accept-Language: el, en MIME-Version: 1.0 To: Vince Vielhaber Cc: freebsd-net@freebsd.org Subject: Re: Any known problems with routing in 3.4R? References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Vince Vielhaber wrote: > On Tue, 9 May 2000, Theo PAGTZIS wrote: > > > > > > > > Hi All/Bill, > > > > > > I am running Freebsd 3.4 + PAO and have the following problem > > > > when I try to get the statistics from the wi0 (wavelanII) interface, the interface keeps returning 0 for all values. Is that broken in 3.4 ?? > > I have the impression that I have seen it working in previous versions.... Has anyone managed to get statistics out of the wavelan (wi0) interface..?? > > > > If yes would it be possible to tell me how? > > I got it working although it took a while. I found a note in the mail > archives about using a separate file to configure the interface with > wiconfig. Don't have the info handy but will later today. I know I had > to make sure it was configured on the same interrupt as it was in windoze. > After I did that it started reporting. Never heard that wiconfig before....I thought it was wicontrol.....is that a new config utility... for wavelan?? I would appreciate I you can get that file as soon as you can... T. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 12:44:12 2000 Delivered-To: freebsd-net@freebsd.org Received: from paprika.michvhf.com (paprika.michvhf.com [209.103.136.12]) by hub.freebsd.org (Postfix) with SMTP id 0905337C1DE for ; Tue, 9 May 2000 12:40:20 -0700 (PDT) (envelope-from vev@michvhf.com) Received: (qmail 29531 invoked by uid 1001); 9 May 2000 19:41:21 -0000 Date: Tue, 9 May 2000 15:41:21 -0400 (EDT) From: Vince Vielhaber To: Theo PAGTZIS Cc: freebsd-net@freebsd.org Subject: WaveLAN in 3.4R In-Reply-To: <39184461.98B90E22@cs.ucl.ac.uk> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, 9 May 2000, Theo PAGTZIS wrote: > Vince Vielhaber wrote: > > > On Tue, 9 May 2000, Theo PAGTZIS wrote: > > > > > > > > > > > > Hi All/Bill, > > > > > > > > > I am running Freebsd 3.4 + PAO and have the following problem > > > > > > when I try to get the statistics from the wi0 (wavelanII) interface, the interface keeps returning 0 for all values. Is that broken in 3.4 ?? > > > I have the impression that I have seen it working in previous versions.... Has anyone managed to get statistics out of the wavelan (wi0) interface..?? > > > > > > If yes would it be possible to tell me how? > > > > I got it working although it took a while. I found a note in the mail > > archives about using a separate file to configure the interface with > > wiconfig. Don't have the info handy but will later today. I know I had > > to make sure it was configured on the same interrupt as it was in windoze. > > After I did that it started reporting. > > Never heard that wiconfig before....I thought it was wicontrol.....is that a new config utility... for wavelan?? > > > I would appreciate I you can get that file as soon as you can... You are correct, it's wicontrol. I have a small script that set up the card called /etc/setup_wi: ------------------------------ #!/bin/sh cmd="wicontrol -i wi0" $cmd -s "hostname" $cmd -p 1 $cmd -n "WaveLAN Network" ------------------------------ Then for the Lucent WaveLAN/IEEE entry in pccard.conf: card "Lucent Technologies" "WaveLAN/IEEE" config default "wi0" IRQ insert logger -s Lucent WaveLAN/IEEE inserted insert /etc/setup_wi insert /etc/pccard_ether wi0 IPADDRESS netmask NETMASK insert /etc/ifc remove logger -s Lucent WaveLAN/IEEE removed remove /etc/pccard_ether_remove wi0 delete IPADDRESS And finally /etc/ifc: ifconfig wi0 down ifconfig wi0 inet IPADDRESS netmask NETMASK up Replace hostname with your hostname The "WaveLAN Network" above must match your access point's network name Replace IRQ above with the cards IRQ Replace IPADDRESS everywhere above with your IP Address Replace NETMASK everywhere above with your netmask That should be everything. The default route and hostname are still set in /etc/rc.conf. Good Luck!! Vince. -- ========================================================================== Vince Vielhaber -- KA8CSH email: vev@michvhf.com http://www.pop4.net 128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4 Networking Online Campground Directory http://www.camping-usa.com Online Giftshop Superstore http://www.cloudninegifts.com ========================================================================== To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 13: 1: 5 2000 Delivered-To: freebsd-net@freebsd.org Received: from bells.cs.ucl.ac.uk (bells.cs.ucl.ac.uk [128.16.5.31]) by hub.freebsd.org (Postfix) with SMTP id F0F2237C2F3 for ; Tue, 9 May 2000 12:50:29 -0700 (PDT) (envelope-from T.Pagtzis@cs.ucl.ac.uk) Received: from ginger.cs.ucl.ac.uk by bells.cs.ucl.ac.uk with local SMTP id ; Tue, 9 May 2000 20:50:16 +0100 Message-ID: <39186BF7.A6783ED5@cs.ucl.ac.uk> Date: Tue, 09 May 2000 20:50:15 +0100 From: Theo PAGTZIS Reply-To: t.pagtzis@cs.ucl.ac.uk Organization: UCL X-Mailer: Mozilla 4.72 [en] (X11; U; SunOS 5.7 sun4u) X-Accept-Language: el, en MIME-Version: 1.0 To: Vince Vielhaber Cc: Theo PAGTZIS , freebsd-net@freebsd.org Subject: Re: WaveLAN in 3.4R References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Vince Vielhaber wrote: > On Tue, 9 May 2000, Theo PAGTZIS wrote: > > > Vince Vielhaber wrote: > > > > > On Tue, 9 May 2000, Theo PAGTZIS wrote: > > > > > > > > > > > > > > > > Hi All/Bill, > > > > > > > > > > > > I am running Freebsd 3.4 + PAO and have the following problem > > > > > > > > when I try to get the statistics from the wi0 (wavelanII) interface, the interface keeps returning 0 for all values. Is that broken in 3.4 ?? > > > > I have the impression that I have seen it working in previous versions.... Has anyone managed to get statistics out of the wavelan (wi0) interface..?? > > > > > > > > If yes would it be possible to tell me how? > > > > > > I got it working although it took a while. I found a note in the mail > > > archives about using a separate file to configure the interface with > > > wiconfig. Don't have the info handy but will later today. I know I had > > > to make sure it was configured on the same interrupt as it was in windoze. > > > After I did that it started reporting. > > > > Never heard that wiconfig before....I thought it was wicontrol.....is that a new config utility... for wavelan?? > > > > > > I would appreciate I you can get that file as soon as you can... > > You are correct, it's wicontrol. > > I have a small script that set up the card called /etc/setup_wi: > > ------------------------------ > #!/bin/sh > > cmd="wicontrol -i wi0" > > $cmd -s "hostname" > $cmd -p 1 > $cmd -n "WaveLAN Network" > > ------------------------------ > > Then for the Lucent WaveLAN/IEEE entry in pccard.conf: > > card "Lucent Technologies" "WaveLAN/IEEE" > config default "wi0" IRQ > insert logger -s Lucent WaveLAN/IEEE inserted > insert /etc/setup_wi > insert /etc/pccard_ether wi0 IPADDRESS netmask NETMASK > insert /etc/ifc > remove logger -s Lucent WaveLAN/IEEE removed > remove /etc/pccard_ether_remove wi0 delete IPADDRESS > > And finally /etc/ifc: > > ifconfig wi0 down > ifconfig wi0 inet IPADDRESS netmask NETMASK up > > Replace hostname with your hostname > The "WaveLAN Network" above must match your access point's network name > Replace IRQ above with the cards IRQ > Replace IPADDRESS everywhere above with your IP Address > Replace NETMASK everywhere above with your netmask > > That should be everything. The default route and hostname are still > set in /etc/rc.conf. > > Good Luck!! > > Vince. Vince, perhaps I did not make myself clear. I do not have a problem with running the interface. My wavelan interface runs fine ! The problem is that when I probe with wicontrol -i wi0 -o , the driver to dump the statistics the values returned are all 0 !!!!! That is what I have been asking whether it is broken under 3.4 Theo To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 13: 1:37 2000 Delivered-To: freebsd-net@freebsd.org Received: from paprika.michvhf.com (paprika.michvhf.com [209.103.136.12]) by hub.freebsd.org (Postfix) with SMTP id 2B3C737C026 for ; Tue, 9 May 2000 13:00:15 -0700 (PDT) (envelope-from vev@michvhf.com) Received: (qmail 29585 invoked by uid 1001); 9 May 2000 20:01:09 -0000 Date: Tue, 9 May 2000 16:01:09 -0400 (EDT) From: Vince Vielhaber To: Theo PAGTZIS Cc: freebsd-net@freebsd.org Subject: Re: WaveLAN in 3.4R In-Reply-To: <39186BF7.A6783ED5@cs.ucl.ac.uk> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, 9 May 2000, Theo PAGTZIS wrote: > Vince Vielhaber wrote: > > > On Tue, 9 May 2000, Theo PAGTZIS wrote: > > > > > Vince Vielhaber wrote: > > > > > > > On Tue, 9 May 2000, Theo PAGTZIS wrote: > > > > > > > > > > > > > > > > > > > > Hi All/Bill, > > > > > > > > > > > > > > > I am running Freebsd 3.4 + PAO and have the following problem > > > > > > > > > > when I try to get the statistics from the wi0 (wavelanII) interface, the interface keeps returning 0 for all values. Is that broken in 3.4 ?? > > > > > I have the impression that I have seen it working in previous versions.... Has anyone managed to get statistics out of the wavelan (wi0) interface..?? > > > > > > > > > > If yes would it be possible to tell me how? > > > > > > > > I got it working although it took a while. I found a note in the mail > > > > archives about using a separate file to configure the interface with > > > > wiconfig. Don't have the info handy but will later today. I know I had > > > > to make sure it was configured on the same interrupt as it was in windoze. > > > > After I did that it started reporting. > > > > > > Never heard that wiconfig before....I thought it was wicontrol.....is that a new config utility... for wavelan?? > > > > > > > > > I would appreciate I you can get that file as soon as you can... > > > > You are correct, it's wicontrol. > > > > I have a small script that set up the card called /etc/setup_wi: > > > > ------------------------------ > > #!/bin/sh > > > > cmd="wicontrol -i wi0" > > > > $cmd -s "hostname" > > $cmd -p 1 > > $cmd -n "WaveLAN Network" > > > > ------------------------------ > > > > Then for the Lucent WaveLAN/IEEE entry in pccard.conf: > > > > card "Lucent Technologies" "WaveLAN/IEEE" > > config default "wi0" IRQ > > insert logger -s Lucent WaveLAN/IEEE inserted > > insert /etc/setup_wi > > insert /etc/pccard_ether wi0 IPADDRESS netmask NETMASK > > insert /etc/ifc > > remove logger -s Lucent WaveLAN/IEEE removed > > remove /etc/pccard_ether_remove wi0 delete IPADDRESS > > > > And finally /etc/ifc: > > > > ifconfig wi0 down > > ifconfig wi0 inet IPADDRESS netmask NETMASK up > > > > Replace hostname with your hostname > > The "WaveLAN Network" above must match your access point's network name > > Replace IRQ above with the cards IRQ > > Replace IPADDRESS everywhere above with your IP Address > > Replace NETMASK everywhere above with your netmask > > > > That should be everything. The default route and hostname are still > > set in /etc/rc.conf. > > > > Good Luck!! > > > > Vince. > > Vince, > > perhaps I did not make myself clear. I do not have a problem with running the interface. My wavelan interface runs fine ! > > The problem is that when I probe with wicontrol -i wi0 -o , the driver to dump the statistics > > the values returned are all 0 !!!!! > > > That is what I have been asking whether it is broken under 3.4 Nope, -o doesn't work on this one. Vince. -- ========================================================================== Vince Vielhaber -- KA8CSH email: vev@michvhf.com http://www.pop4.net 128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4 Networking Online Campground Directory http://www.camping-usa.com Online Giftshop Superstore http://www.cloudninegifts.com ========================================================================== To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 15:35:48 2000 Delivered-To: freebsd-net@freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21]) by hub.freebsd.org (Postfix) with ESMTP id 7936F37BAB8; Tue, 9 May 2000 15:35:46 -0700 (PDT) (envelope-from kris@FreeBSD.org) Received: from localhost (kris@localhost) by freefall.freebsd.org (8.9.3/8.9.2) with ESMTP id PAA47068; Tue, 9 May 2000 15:35:45 -0700 (PDT) (envelope-from kris@FreeBSD.org) X-Authentication-Warning: freefall.freebsd.org: kris owned process doing -bs Date: Tue, 9 May 2000 15:35:45 -0700 (PDT) From: Kris Kennaway To: Joshua Goodall Cc: Jan Koum , freebsd-net@FreeBSD.ORG Subject: Re: possible /etc/rc.firewall bug? In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Mon, 8 May 2000, Joshua Goodall wrote: > I agree that the inadequacies of rc.firewall+natd have been highlighted > often enough that a fix should've been committed long ago. Anyone > committers listening to this thread? The fix has been committed - it should be merged to stable in a few days. Kris ---- In God we Trust -- all others must submit an X.509 certificate. -- Charles Forsythe To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 18:38:29 2000 Delivered-To: freebsd-net@freebsd.org Received: from newmail.sentex.ca (newmail.sentex.ca [207.245.238.163]) by hub.freebsd.org (Postfix) with ESMTP id 4420437BF60 for ; Tue, 9 May 2000 18:38:26 -0700 (PDT) (envelope-from mike@sentex.net) Received: from granite.sentex.net (granite-atm.sentex.ca [209.112.4.1]) by newmail.sentex.ca (8.9.3/8.9.3) with ESMTP id UAA38870; Tue, 9 May 2000 20:32:22 GMT (envelope-from mike@sentex.net) Received: from chimp.simianscience.com (ospf-mdt.sentex.net [205.211.164.81]) by granite.sentex.net (8.8.8/8.6.9) with SMTP id VAA02011; Tue, 9 May 2000 21:34:37 -0400 (EDT) From: mike@sentex.net (Mike Tancsa) To: brian@Awfulhak.org (Brian Somers) Cc: freebsd-net@freebsd.org Subject: Re: Anybody using PPPoE to to terminate customer DSL sessions? Date: Wed, 10 May 2000 01:31:57 GMT Message-ID: <3918bbc4.765910521@mail.sentex.net> References: In-Reply-To: X-Mailer: Forte Agent .99e/32.227 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On 9 May 2000 04:50:36 -0400, in sentex.lists.freebsd.misc you wrote: >> Was looking at using FreeBSd 4.x to terminate DSL traffic from customer >> DSLAM's. >> >> If anybody here has done that and wouldn't mind answering a couple >> questions on it, please let me know. > >I haven't actually done it in quantity, but I did write the pppoed >code. What appears to be the problem ? Not sure of the original poster's situation, but in many cases its actually terminated as a L2TP tunnel. At least thats the Redback model :-( ---Mike Mike Tancsa (mdtancsa@sentex.net) Sentex Communications Corp, Waterloo, Ontario, Canada "Given enough time, 100 monkeys on 100 routers could setup a national IP network." (KDW2) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 21:56: 1 2000 Delivered-To: freebsd-net@freebsd.org Received: from t.ti.itb.ac.id (students.TI.ITB.ac.id [167.205.19.2]) by hub.freebsd.org (Postfix) with SMTP id 63FD137B6E1 for ; Tue, 9 May 2000 21:52:53 -0700 (PDT) (envelope-from suryadi@Students.ti.itb.ac.id) Received: (qmail 19066 invoked by uid 846); 5 May 2000 11:20:50 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 5 May 2000 11:20:50 -0000 Date: Fri, 5 May 2000 18:20:50 +0700 (JAVT) From: Suryadi Cc: FREEBSD-NET@FreeBSD.ORG Subject: FAKE DOMAIN In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hello everyone I want to ask about fake domain. Can I entered a server using fake domain ? PS: when we entered a server, and we type 'w'. So there will be my login name and my domain. That I want is to fake the domain. thx a lot. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Tue May 9 23:35:24 2000 Delivered-To: freebsd-net@freebsd.org Received: from mail-out1.apple.com (mail-out1.apple.com [17.254.0.52]) by hub.freebsd.org (Postfix) with ESMTP id 8EF7A37BE0F for ; Tue, 9 May 2000 23:35:15 -0700 (PDT) (envelope-from justin@walkeridsl1.apple.com) Received: from mailgate2.apple.com (A17-129-100-225.apple.com [17.129.100.225]) by mail-out1.apple.com (8.9.3/8.9.3) with ESMTP id XAA15067 for ; Tue, 9 May 2000 23:35:15 -0700 (PDT) Received: from scv3.apple.com (scv3.apple.com) by mailgate2.apple.com (Content Technologies SMTPRS 2.0.15) with ESMTP id for ; Tue, 09 May 2000 23:35:13 -0700 Received: from walkeridsl1.apple.com (walkeridsl1.apple.com [17.219.158.66]) by scv3.apple.com (8.9.3/8.9.3) with ESMTP id XAA18444 for ; Tue, 9 May 2000 23:35:13 -0700 (PDT) Received: by walkeridsl1.apple.com (8.9.1/8.9.1) id XAA00693 for freebsd-net@freebsd.org; Tue, 9 May 2000 23:35:11 -0700 (PDT) Message-Id: <200005100635.XAA00693@walkeridsl1.apple.com> To: freebsd-net@freebsd.org Subject: SO_RCVTIMEO values Date: Tue, 9 May 2000 23:35:09 -0700 From: "Justin C. Walker" Reply-To: justin@apple.com X-Mailer: by Apple MailViewer (2.105.dev) Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi, all, I pawed through the archives looking for 'SO_RCVTIMEO' and 'sb_timeo', and couldn't find anything of interest (a lot of hits on mail from folks at 'sb.net', tho :-}). Currently, the sockbuf struct has a 'short' (sb_timeo) to hold a timeout value, which, given the definition of SO_RCVTIMEO, works out to about 227 ticks (for us), which isn't that long. A few of my 'customers' are grousing about this, so I thought I'd ask. Is there a reason to keep this value as a short? There's the obvious ones of binary compatibility (for kernel plug-ins, at least), and "that's the way it's always been done", but I don't see any good ones. I'm interested in what might have transpired in the past, if anyone has brought this up before (it's mentioned in Stevens' "Illustrated, V2" book). Thanks, Justin -- Justin C. Walker, Curmudgeon-At-Large * Institute for General Semantics | Manager, CoreOS Networking | Men are from Earth. Apple Computer, Inc. | Women are from Earth. 2 Infinite Loop | Deal with it. Cupertino, CA 95014 | *-------------------------------------*-------------------------------* To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Wed May 10 4:13:40 2000 Delivered-To: freebsd-net@freebsd.org Received: from apollo.ocsny.com (apollo.ocsny.com [204.107.76.2]) by hub.freebsd.org (Postfix) with ESMTP id 8B1AE37B619 for ; Wed, 10 May 2000 04:13:36 -0700 (PDT) (envelope-from mikel@ocsny.com) Received: from ocsny.com (thoth.upan.org [204.107.76.16]) by apollo.ocsny.com (8.9.2/8.9.3) with ESMTP id HAA81791; Wed, 10 May 2000 07:06:33 -0400 (EDT) Message-ID: <3919436C.5F4FD526@ocsny.com> Date: Wed, 10 May 2000 07:09:32 -0400 From: Mikel Organization: Optimized Computer Solutions, Inc. X-Mailer: Mozilla 4.73 [en] (Win98; U) X-Accept-Language: en,it MIME-Version: 1.0 To: Suryadi Cc: FREEBSD-NET@FreeBSD.ORG Subject: Re: FAKE DOMAIN References: Content-Type: multipart/mixed; boundary="------------E01C5ABED27D5393015F5E17" Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org This is a multi-part message in MIME format. --------------E01C5ABED27D5393015F5E17 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit please elaborate...do you mean for use on a private lan? or are your going to connect to the internet some how? Suryadi wrote: > Hello everyone > > I want to ask about fake domain. Can I entered a server using fake domain > ? > > PS: when we entered a server, and we type 'w'. So there will be my login > name and my domain. That I want is to fake the domain. > > thx a lot. > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message -- Cheers, Mikel +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+ | Optimized Computer Solutions, Inc http://www.ocsny.com | 39 W14th Street, Suite 203 212 727 2238 x132 | New York, NY 10011 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+ --------------E01C5ABED27D5393015F5E17 Content-Type: text/x-vcard; charset=us-ascii; name="mikel.vcf" Content-Transfer-Encoding: 7bit Content-Description: Card for Mikel Content-Disposition: attachment; filename="mikel.vcf" begin:vcard n:King;Mikel tel;fax:2124638402 tel;home:http://www.upan.org tel;work:2127272100 x-mozilla-html:TRUE org:Optimized Computer Solutions version:2.1 email;internet:mikel@ocsny.com title:Director of Network Operations & Technology adr;quoted-printable:;;39 W14th St.=0D=0ASte 203;New York;NY;10011;US note;quoted-printable:fBSD, PHP, MySql and OCS Rule!!!=0D=0A=0D=0AGoal is to be MS free by the end of 2k. x-mozilla-cpt:;7312 fn:Mikel King end:vcard --------------E01C5ABED27D5393015F5E17-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Wed May 10 7:47:33 2000 Delivered-To: freebsd-net@freebsd.org Received: from khavrinen.lcs.mit.edu (khavrinen.lcs.mit.edu [18.24.4.193]) by hub.freebsd.org (Postfix) with ESMTP id E693337B5AD for ; Wed, 10 May 2000 07:47:30 -0700 (PDT) (envelope-from wollman@khavrinen.lcs.mit.edu) Received: (from wollman@localhost) by khavrinen.lcs.mit.edu (8.9.3/8.9.3) id KAA11649; Wed, 10 May 2000 10:47:20 -0400 (EDT) (envelope-from wollman) Date: Wed, 10 May 2000 10:47:20 -0400 (EDT) From: Garrett Wollman Message-Id: <200005101447.KAA11649@khavrinen.lcs.mit.edu> To: justin@apple.com Cc: freebsd-net@FreeBSD.ORG Subject: SO_RCVTIMEO values In-Reply-To: <200005100635.XAA00693@walkeridsl1.apple.com> References: <200005100635.XAA00693@walkeridsl1.apple.com> Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org < said: > Is there a reason to keep this value as a short? I don't see one. How about you file a PR with a patch to change it to an int? -GAWollman -- Garrett A. Wollman | O Siem / We are all family / O Siem / We're all the same wollman@lcs.mit.edu | O Siem / The fires of freedom Opinions not those of| Dance in the burning flame MIT, LCS, CRS, or NSA| - Susan Aglukark and Chad Irschick To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Wed May 10 12:13: 9 2000 Delivered-To: freebsd-net@freebsd.org Received: from dialup.nacamar.de (authsrv.nacamar.de [194.162.162.197]) by hub.freebsd.org (Postfix) with SMTP id 7DE2437B8B5 for ; Wed, 10 May 2000 12:13:03 -0700 (PDT) (envelope-from oliverko@dialup.nacamar.de) Received: (qmail 15267 invoked from network); 10 May 2000 19:13:01 -0000 Received: from dialup12-38.access.nacamar.de (HELO p3x2w2) (@62.144.243.38) by authsrv.nacamar.de with SMTP; 10 May 2000 19:13:01 -0000 Message-ID: <004301bfbab4$66095330$0201a8c0@p3x2w2> From: To: Subject: PLEASE HELP : name resolution doesn't work Date: Wed, 10 May 2000 21:17:34 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2919.6700 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hello, I've a big problem ! I've a little LAN. One machine (192.168.1.1 : a21064) is configured as a gateway which forwards requests to my ISP via ppp. I've also Linux (192.168.1.2 : p3x2lx) and FreeBSD (192.168.1.3 : p3x2fb) on other computers installed . All works fine if I use Linux : $ telnet a21064 -> telnet session to gateway established (no dialup to my ISP) $ telnet p3x2fb -> telnet session to FreeBSD box established (no dialup to my ISP) But if I try this on FreeBSD every time a connection is made to my ISP (I think FreeBSD tries to ask the nameservers of my ISP). : $ telnet a21064 -> connection to my ISP, then it establishes the telnet session to the gateway $ telnet p3x2lx -> connection to my ISP, then it establishes the telnet session to the Linux box I still don't know why because the scripts look similiar to the scripts from Linux. FreeBSD scripts: # /etc/hosts 127.0.0.1 localhost 192.168.1.3 p3x2fb.network.de . 192.168.1.1 a21064.network.de a21064 192.168.1.2 p3x2lx.network.de p3x2lx # /etc/host.conf hosts bind # /etc/resolv.conf domain network.de nameserver 195.185.185.195 # first nameserver of my ISP nameserver 194.162.141.17 # second nameserver of my ISP search network.de nacamar.de # my private domain and ISP domain I can't understand it - FreeBSD should first look into /etc/hosts and find a21064 and p3x2lx (the IPs belong to the network segment) and shouldn't ask the nameservers from my ISP. Why aren't the names resolved? The nameservers should only asked if FreeBSD can't find the hostname in /etc/hosts ?! Please help!!!! with regards, Oliver To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Wed May 10 12:40:50 2000 Delivered-To: freebsd-net@freebsd.org Received: from peace.mahoroba.org (peace.calm.imasy.or.jp [202.227.26.34]) by hub.freebsd.org (Postfix) with ESMTP id 33E3F37B946 for ; Wed, 10 May 2000 12:40:46 -0700 (PDT) (envelope-from ume@mahoroba.org) Received: from localhost (IDENT:DQKF2SPTAvEbuFjmhFgN7bUCH1QAzGPqtKXcIajJNLbbKoh7CGLpUISMO9BacV1u@localhost [::1]) by peace.mahoroba.org (8.10.1/3.7W-peace) with ESMTP id e4AJaWF27258; Thu, 11 May 2000 04:36:32 +0900 (JST) (envelope-from ume@mahoroba.org) Date: Thu, 11 May 2000 04:36:32 +0900 (JST) Message-Id: <200005101936.e4AJaWF27258@peace.mahoroba.org> To: oliverko@dialup.nacamar.de Cc: freebsd-net@freebsd.org Subject: Re: PLEASE HELP : name resolution doesn't work In-Reply-To: <004301bfbab4$66095330$0201a8c0@p3x2w2> References: <004301bfbab4$66095330$0201a8c0@p3x2w2> X-Mailer: xcite1.20> Mew version 1.94.2 on Emacs 20.6 / Mule 4.0 =?iso-2022-jp?B?KBskQjJWMWMbKEIp?= X-PGP-Public-Key: http://www.imasy.org/~ume/publickey.asc X-PGP-Fingerprint: 6B 0C 53 FC 5D D0 37 91 05 D0 B3 EF 36 9B 6A BC X-URL: http://www.imasy.org/~ume/ X-OS: FreeBSD 5.0-CURRENT Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit From: Hajimu UMEMOTO (=?ISO-2022-JP?B?GyRCR19LXBsoQiA=?= =?ISO-2022-JP?B?GyRCSCUbKEI=?=) X-Dispatcher: imput version 20000228(IM140) Lines: 18 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >>>>> On Wed, 10 May 2000 21:17:34 +0200 >>>>> said: I can't understand it - FreeBSD should first look into /etc/hosts and find a21064 and p3x2lx (the IPs belong to the network segment) and shouldn't ask the nameservers from my ISP. Why aren't the names resolved? The nameservers should only asked if FreeBSD can't find the hostname in /etc/hosts ?! Which version of FreeBSD are you using? If you are using 4.0-RELEASE, please apply following patches: http://www.freebsd.org/cgi/cvsweb.cgi/src/lib/libc/net/getaddrinfo.c.diff?r1=1.9&r2=1.9.2.1 http://www.freebsd.org/cgi/cvsweb.cgi/src/lib/libc/net/name6.c.diff?r1=1.6.2.1&r2=1.6.2.2 -- Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan ume@mahoroba.org ume@bisd.hitachi.co.jp ume@FreeBSD.org http://www.imasy.org/~ume/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Wed May 10 20:12:22 2000 Delivered-To: freebsd-net@freebsd.org Received: from bubba.whistle.com (bubba.whistle.com [207.76.205.7]) by hub.freebsd.org (Postfix) with ESMTP id DEA1C37B758 for ; Wed, 10 May 2000 20:12:20 -0700 (PDT) (envelope-from archie@whistle.com) Received: (from archie@localhost) by bubba.whistle.com (8.9.3/8.9.2) id UAA87288 for freebsd-net@freebsd.org; Wed, 10 May 2000 20:12:20 -0700 (PDT) From: Archie Cobbs Message-Id: <200005110312.UAA87288@bubba.whistle.com> Subject: Bridging patch final warning To: freebsd-net@freebsd.org Date: Wed, 10 May 2000 20:12:20 -0700 (PDT) X-Mailer: ELM [version 2.4ME+ PL54 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Final warning.. I haven't heard of any problems so this patch is going in tomorrow.. ftp://ftp.whistle.com/pub/archie/misc/net.cleanup.patch.4 Thanks, -Archie ___________________________________________________________________________ Archie Cobbs * Whistle Communications, Inc. * http://www.whistle.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 2:19:56 2000 Delivered-To: freebsd-net@freebsd.org Received: from mail.surf1.de (mail.Surf1.de [194.25.165.21]) by hub.freebsd.org (Postfix) with ESMTP id 2C3F237B9C0 for ; Thu, 11 May 2000 02:19:50 -0700 (PDT) (envelope-from alex@cichlids.com) Received: from cichlids.com (p3E9C1148.dip0.t-ipconnect.de [62.156.17.72]) by mail.surf1.de (8.9.3/8.9.3) with ESMTP id KAA30525 for ; Thu, 11 May 2000 10:18:18 +0200 Received: from cichlids.cichlids.com (cichlids.cichlids.com [192.168.0.10]) by cichlids.com (Postfix) with ESMTP id 0582AAC2C for ; Thu, 11 May 2000 11:24:50 +0200 (CEST) Received: (from alex@localhost) by cichlids.cichlids.com (8.9.3/8.9.3) id LAA12441 for freebsd-net@freebsd.org; Thu, 11 May 2000 11:19:46 +0200 (CEST) (envelope-from alex) Date: Thu, 11 May 2000 11:19:46 +0200 From: Alexander Langer To: freebsd-net@freebsd.org Subject: load-balancing over routes and redundancy Message-ID: <20000511111946.A5785@cichlids.cichlids.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0.1i X-PGP-Fingerprint: 44 28 CA 4C 46 5B D3 A8 A8 E3 BA F3 4E 60 7D 7F X-Verwirrung: Dieser Header dient der allgemeinen Verwirrung. Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hello! I wanted to ask if we have some kind of route-balancing stuff in the tree/kernel? Why I ask: Tonight, when I couldn't sleep (I have the best ideas in those situations), I had the following idea: - load balancing over routes. That is something, which is defenitely needed. For example, for web-server clusters you could filter out incoming SYN-flags for ONE IP (the router-machine) and then the router balances the load to a given cluster of private-addressed webservers, i.e. 10.0.0.0/8 or 192.168.0.0/16 machines or something. That needs dynamic route-handling. Question is: Will this be faster? The next concept, which belongs the above, is _much_ more interesting: It provides redundancy: Imagagine the following: You have three webservers behind that router. One crashes. Two are left. Now, the router could be used to ping the webservers every second or every 5 seconds or whatever. If the webserver doesn't response, it is supposed to have crashed or be under a too high load, and it is left out with the forwarding of the SYN-flags. That provides completely transparency. This is so nice, I love my concept. :-) You even can add more webservers without adding more IPs and other stuff. Comments? Is this worse to write? In my eyes, this could be a kernel-module with a frontend in userspace, e.g. loadcontrol(8). Then, when you add new machines, you do something like loadcontrol addmachine 192.168.0.23 80,12345 to add the machine to the cluster for the given ports 80 and 12345. Note: This are just thoughts that I had tonight. It can even be that such things already exist (or are implimented similar/better in the kernel/userland already) Alex -- I need a new ~/.sig. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 2:51:48 2000 Delivered-To: freebsd-net@freebsd.org Received: from info.iet.unipi.it (info.iet.unipi.it [131.114.9.184]) by hub.freebsd.org (Postfix) with ESMTP id 5975437B6A8 for ; Thu, 11 May 2000 02:51:30 -0700 (PDT) (envelope-from luigi@info.iet.unipi.it) Received: (from luigi@localhost) by info.iet.unipi.it (8.9.3/8.9.3) id LAA30928; Thu, 11 May 2000 11:52:13 +0200 (CEST) (envelope-from luigi) From: Luigi Rizzo Message-Id: <200005110952.LAA30928@info.iet.unipi.it> Subject: Re: load-balancing over routes and redundancy In-Reply-To: <20000511111946.A5785@cichlids.cichlids.com> from Alexander Langer at "May 11, 2000 11:19:46 am" To: Alexander Langer Date: Thu, 11 May 2000 11:52:13 +0200 (CEST) Cc: freebsd-net@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL61 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > I wanted to ask if we have some kind of route-balancing stuff in the > tree/kernel? RFC2391 (which i have not had the time to read yet) seems to deal with the problem in some way. I have been thinking independently for some time at this problem, (i even had a partial implementation which has become unavailable when my disk fell on the ground) using ipfw and forward-like rules: basically a machine sits between your clients and the servers, acting as a transparent redirector. Using ipfw, the machine is instructed with a list of potential servers. When a request for one of these arrives, the kernel installs a dynamic NAT entry (basically a dynamic ipfw rule, which i recently implemented) for the least loaded one (determined according to some criterion), The criterion for load can be either number of live connections, or traffic over some interval, etc. Being centralised, it is easy for the redirector to know global load information and act accordingly. When this will be done, i don;t know... and note that RFC2391 again might have similar concepts. One more thing: win2000 (the super-duper-pro-xtra-wow version) apparently supports some kind of clustering without a redirector in the middle. I am trying to think how this can be implemented safely, e.g. by electing a master node which is in charge of the arbitration for handling the incoming requests. cheers luigi > One crashes. Two are left. > Now, the router could be used to ping the webservers every second or > every 5 seconds or whatever. If the webserver doesn't response, it is > supposed to have crashed or be under a too high load, and it is > left out with the forwarding of the SYN-flags. > > That provides completely transparency. This is so nice, I love my > concept. :-) You even can add more webservers without adding more IPs > and other stuff. > > Comments? Is this worse to write? > In my eyes, this could be a kernel-module with a frontend in > userspace, e.g. loadcontrol(8). > Then, when you add new machines, you do something like loadcontrol > addmachine 192.168.0.23 80,12345 > to add the machine to the cluster for the given ports 80 and 12345. > > Note: This are just thoughts that I had tonight. It can even be that > such things already exist (or are implimented similar/better in the > kernel/userland already) > > Alex > -- > I need a new ~/.sig. > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 3:19: 0 2000 Delivered-To: freebsd-net@freebsd.org Received: from whale.sunbay.crimea.ua (sunbay-10BASE-T.cris.net [212.110.130.67]) by hub.freebsd.org (Postfix) with ESMTP id D5D5A37B797 for ; Thu, 11 May 2000 03:18:43 -0700 (PDT) (envelope-from ru@whale.sunbay.crimea.ua) Received: (from ru@localhost) by whale.sunbay.crimea.ua (8.9.3/1.13) id NAA52294; Thu, 11 May 2000 13:17:32 +0300 (EEST) Date: Thu, 11 May 2000 13:17:32 +0300 From: Ruslan Ermilov To: Alexander Langer Cc: freebsd-net@freebsd.org Subject: Re: load-balancing over routes and redundancy Message-ID: <20000511131732.A51911@whale.sunbay.crimea.ua> Mail-Followup-To: Alexander Langer , freebsd-net@freebsd.org References: <20000511111946.A5785@cichlids.cichlids.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <20000511111946.A5785@cichlids.cichlids.com>; from alex@big.endian.de on Thu, May 11, 2000 at 11:19:46AM +0200 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, May 11, 2000 at 11:19:46AM +0200, Alexander Langer wrote: > Hello! > > I wanted to ask if we have some kind of route-balancing stuff in the > tree/kernel? > We have the simplest form of load balancing implemented within libalias(3)/natd(8) in -current. The server is choosen on a round-robin basis. This feature is called LSNAT (Load Sharing using Network Address Translation), and is described in RFC 2391. Please see the natd(8) manpage, and search for word "LSNAT". Cheers, -- Ruslan Ermilov ru@sunbay.crimea.ua Sunbay Software AG, ru@FreeBSD.org FreeBSD committer, +380.652.512.251 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 3:56:49 2000 Delivered-To: freebsd-net@freebsd.org Received: from pooh.aist-nara.ac.jp (inet1.aist-nara.ac.jp [163.221.52.121]) by hub.freebsd.org (Postfix) with ESMTP id 7EE3037B797 for ; Thu, 11 May 2000 03:56:46 -0700 (PDT) (envelope-from demizu@dd.iij4u.or.jp) Received: from localhost by pooh.aist-nara.ac.jp (8.8.7/2.8Wb) id KAA22625; Thu, 11 May 2000 10:56:48 GMT From: Noritoshi Demizu To: freebsd-net@freebsd.org Subject: Re: load-balancing over routes and redundancy In-Reply-To: Your message of "Thu, 11 May 2000 11:19:46 +0200" References: <20000511111946.A5785@cichlids.cichlids.com> X-Mailer: Mew version 1.69 on Emacs 19.28.1 / Mule 2.3 X-URL: http://infonet.aist-nara.ac.jp/member/nori-d/ Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-Id: <20000511195647O.demizu@dd.iij4u.or.jp> Date: Thu, 11 May 2000 19:56:47 +0900 X-Dispatcher: impost version 0.99i (Apr. 6, 1997) Lines: 18 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > I wanted to ask if we have some kind of route-balancing stuff in the > tree/kernel? You might be interested in Linux Virtual Server Project. See http://www.linux-vs.org/ BTW, I have implemented a load-balancer (or dispatcher) on FreeBSD 3.2R. It uses "DirectRouting" (see the above page) method and has weighted round-robin and weighted least-connections. I also have implemented a protocol (LASP) to detect up/down of web servers. LASP is designed with a different concept from NECP (Network Element Control Protocol) . I am sorry they are not released yet. (I am sorry I cannot release an implementation of rfc2140 yet...) Best Regards, Noritoshi Demizu, NAIST To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 4:17: 6 2000 Delivered-To: freebsd-net@freebsd.org Received: from mail.surf1.de (mail.Surf1.de [194.25.165.21]) by hub.freebsd.org (Postfix) with ESMTP id 1927737BAEB for ; Thu, 11 May 2000 04:16:52 -0700 (PDT) (envelope-from alex@cichlids.com) Received: from cichlids.com (p3E9C1148.dip0.t-ipconnect.de [62.156.17.72]) by mail.surf1.de (8.9.3/8.9.3) with ESMTP id MAA22900 for ; Thu, 11 May 2000 12:15:07 +0200 Received: from cichlids.cichlids.com (cichlids.cichlids.com [192.168.0.10]) by cichlids.com (Postfix) with ESMTP id 02A33AC2C for ; Thu, 11 May 2000 13:21:38 +0200 (CEST) Received: (from alex@localhost) by cichlids.cichlids.com (8.9.3/8.9.3) id NAA14816 for freebsd-net@freebsd.org; Thu, 11 May 2000 13:16:34 +0200 (CEST) (envelope-from alex) Date: Thu, 11 May 2000 13:16:34 +0200 From: Alexander Langer To: freebsd-net@freebsd.org Subject: Re: load-balancing over routes and redundancy Message-ID: <20000511131634.A14744@cichlids.cichlids.com> References: <20000511111946.A5785@cichlids.cichlids.com> <20000511131732.A51911@whale.sunbay.crimea.ua> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0.1i In-Reply-To: <20000511131732.A51911@whale.sunbay.crimea.ua>; from ru@sunbay.crimea.ua on Thu, May 11, 2000 at 01:17:32PM +0300 X-PGP-Fingerprint: 44 28 CA 4C 46 5B D3 A8 A8 E3 BA F3 4E 60 7D 7F X-Verwirrung: Dieser Header dient der allgemeinen Verwirrung. Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Thus spake Ruslan Ermilov (ru@sunbay.crimea.ua): > round-robin basis. This feature is called LSNAT (Load Sharing > using Network Address Translation), and is described in RFC 2391. > Please see the natd(8) manpage, and search for word "LSNAT". What about the dynamic rules, and the stuff I mentioned? Is it worse to implement it? the LSNAT is a good point to start. Alex -- I need a new ~/.sig. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 5: 4:33 2000 Delivered-To: freebsd-net@freebsd.org Received: from mail.surf1.de (mail.Surf1.de [194.25.165.21]) by hub.freebsd.org (Postfix) with ESMTP id 812ED37B90D for ; Thu, 11 May 2000 05:04:28 -0700 (PDT) (envelope-from alex@cichlids.com) Received: from cichlids.com (p3E9C1125.dip0.t-ipconnect.de [62.156.17.37]) by mail.surf1.de (8.9.3/8.9.3) with ESMTP id NAA01220; Thu, 11 May 2000 13:02:58 +0200 Received: from cichlids.cichlids.com (cichlids.cichlids.com [192.168.0.10]) by cichlids.com (Postfix) with ESMTP id D5CC4AC2C; Thu, 11 May 2000 14:09:30 +0200 (CEST) Received: (from alex@localhost) by cichlids.cichlids.com (8.9.3/8.9.3) id OAA15552; Thu, 11 May 2000 14:04:10 +0200 (CEST) (envelope-from alex) Date: Thu, 11 May 2000 14:00:25 +0200 From: Alexander Langer To: Noritoshi Demizu Cc: freebsd-net@FreeBSD.ORG Subject: Re: load-balancing over routes and redundancy Message-ID: <20000511140025.B14744@cichlids.cichlids.com> References: <20000511111946.A5785@cichlids.cichlids.com> <20000511195647O.demizu@dd.iij4u.or.jp> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0.1i In-Reply-To: <20000511195647O.demizu@dd.iij4u.or.jp>; from nori-d@is.aist-nara.ac.jp on Thu, May 11, 2000 at 07:56:47PM +0900 X-PGP-Fingerprint: 44 28 CA 4C 46 5B D3 A8 A8 E3 BA F3 4E 60 7D 7F X-Verwirrung: Dieser Header dient der allgemeinen Verwirrung. Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Thus spake Noritoshi Demizu (nori-d@is.aist-nara.ac.jp): > BTW, I have implemented a load-balancer (or dispatcher) on FreeBSD 3.2R. > It uses "DirectRouting" (see the above page) method and has weighted > round-robin and weighted least-connections. Would you mind explaining me how that works? As far as I understood, the client connects to the virtual IP of the redirctor, which forwards it to a given server. The server itself responses directly to the client with a different source-IP. How can he do this? Does TCP/IP allow this? > I also have implemented a protocol (LASP) to detect up/down of web > servers. LASP is designed with a different concept from NECP Nice. Close to that what I invented last night :-) > I am sorry they are not released yet. Would you mind to release it?-)) Alex -- I need a new ~/.sig. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 5:28:29 2000 Delivered-To: freebsd-net@freebsd.org Received: from euromedia.pl (euromedia.pl [213.25.133.2]) by hub.freebsd.org (Postfix) with SMTP id 07A7737B633 for ; Thu, 11 May 2000 05:27:52 -0700 (PDT) (envelope-from rafal@euromedia.pl) Received: (qmail 19943 invoked from network); 11 May 2000 12:33:07 -0000 Received: from rafcio.euromedia.pl (HELO euromedia.pl) (rafal@213.25.133.6) by euromedia.pl with SMTP; 11 May 2000 12:33:07 -0000 Message-ID: <391AA868.8BD11BA3@euromedia.pl> Date: Thu, 11 May 2000 14:32:40 +0200 From: Rafal Banaszkiewicz Reply-To: raf@tb-303.org Organization: -={MeMbEr Of WsZyStKo Co FaJnE}=- X-Mailer: Mozilla 4.72 [en] (X11; I; FreeBSD 5.0-CURRENT i386) X-Accept-Language: pl MIME-Version: 1.0 To: freebsd-net@freebsd.org Subject: Ftpd and Virtual anonymous hosts Content-Type: text/plain; charset=iso-8859-2 Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org When i had 3.4-STABLE on my box, it worked properly. But now i've cvsup'ed and recompiled system to 4.0-STABLE, virtual hosts feature isn't working, when user tries to log as anonymous user on some virtual host he gets main anonymous ftp tree (not directory defined for that virtual host he connects to) -- regards, Rafal Banaszkiewicz To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 6: 4:26 2000 Delivered-To: freebsd-net@freebsd.org Received: from pooh.aist-nara.ac.jp (inet1.aist-nara.ac.jp [163.221.52.121]) by hub.freebsd.org (Postfix) with ESMTP id 5671937BB5F for ; Thu, 11 May 2000 06:04:22 -0700 (PDT) (envelope-from demizu@dd.iij4u.or.jp) Received: from localhost by pooh.aist-nara.ac.jp (8.8.7/2.8Wb) id NAA23075; Thu, 11 May 2000 13:04:24 GMT From: Noritoshi Demizu To: freebsd-net@FreeBSD.ORG Subject: Re: load-balancing over routes and redundancy In-Reply-To: Your message of "Thu, 11 May 2000 14:00:25 +0200" References: <20000511140025.B14744@cichlids.cichlids.com> X-Mailer: Mew version 1.69 on Emacs 19.28.1 / Mule 2.3 X-URL: http://infonet.aist-nara.ac.jp/member/nori-d/ Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-Id: <20000511220423Y.demizu@dd.iij4u.or.jp> Date: Thu, 11 May 2000 22:04:23 +0900 X-Dispatcher: impost version 0.99i (Apr. 6, 1997) Lines: 46 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > Would you mind explaining me how that works? On web servers: lo0 of web servers are configured to have the shared IP addresses in order to receive and send packets. On a dispatcher: +------------+-----------------+--------------+ | ---> ip_forward() ---> | | ip_input() +-----------------+ ip_output() | | A | | | | +-----|------+ +------|-------+ +-----+ +------+ | (ethernet) | | V |-->|flow |-->|server| | A | |ether_output()| |table| |table | +-----|------+ +------|-------+ +-----+ +------+ packet V When a packet reaches at a dispatcher, it is just forwarded to a segment where web servers are connected to. When the packet reaches at ether_output(), las_resolve() is called instead of arpresolve(). las_resolve() looks up a flow table to check if the flow ((ip_src, ip_dst) or (ip_src, sport, ip_dst, dport)) has been assigned to some web server. If there is an entry in the flow table, the packet is forwarded to the web server. Otherwise, choose one web server and make an entry for this flow in the flow table. Then, las_resolve() returns MAC address of the chosen web server. This MAC address will be used as the destination address in the ethernet frame. I think fastforwarding can be used with this mechanism. We named this mecanism as "Link Address Selector". After that, we found Linux Virtual Server Project. They call it "DirectRouting". We also found that this idea was invented researchers at IBM long ago. (I do not know about patent issues) > > I am sorry they are not released yet. > Would you mind to release it?-)) I'd like to. However, wait a moment, please. I think kernel part can be released as a normal free software. However, userland part will be released under IPA's copyright (IPA = http://www.ipa.go.jp/index-e.html). I have not received their copyright notice yet. Best Regards, Noritoshi Demizu, NAIST To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 7:16:17 2000 Delivered-To: freebsd-net@freebsd.org Received: from pail.ircache.net (pail.scd.ucar.edu [128.117.28.5]) by hub.freebsd.org (Postfix) with ESMTP id CA8B437B9A4 for ; Thu, 11 May 2000 07:16:13 -0700 (PDT) (envelope-from rousskov@ircache.net) Received: from localhost (rousskov@localhost) by pail.ircache.net (8.9.2/8.8.7) with ESMTP id IAA69761; Thu, 11 May 2000 08:16:01 -0600 (MDT) (envelope-from rousskov@ircache.net) Date: Thu, 11 May 2000 08:16:01 -0600 (MDT) From: Alex Rousskov To: Alexander Langer Cc: freebsd-net@FreeBSD.ORG Subject: Re: load-balancing over routes and redundancy In-Reply-To: <20000511195647O.demizu@dd.iij4u.or.jp> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, 11 May 2000, Noritoshi Demizu wrote: > > I wanted to ask if we have some kind of route-balancing stuff in the > > tree/kernel? > > You might be interested in Linux Virtual Server Project. > See http://www.linux-vs.org/ Also, an off-the-shelf Layer-4 and Layer-7 switches will do server or proxy load balancing with "health checks". Cisco routers can load balance proxies using Cisco's WCCP protocol. There is also a relatively new NECP protocol that allows switches/routers/others to balance servers/proxies. Both WCCP and NECP include health checks as well. You might want to look at these technologies before implementing your ideas. Alex. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 8:48:23 2000 Delivered-To: freebsd-net@freebsd.org Received: from mail.surf1.de (mail.Surf1.de [194.25.165.21]) by hub.freebsd.org (Postfix) with ESMTP id 86DA037B5F9 for ; Thu, 11 May 2000 08:48:18 -0700 (PDT) (envelope-from alex@cichlids.com) Received: from cichlids.com (p3E9C1125.dip0.t-ipconnect.de [62.156.17.37]) by mail.surf1.de (8.9.3/8.9.3) with ESMTP id QAA29703; Thu, 11 May 2000 16:46:42 +0200 Received: from cichlids.cichlids.com (cichlids.cichlids.com [192.168.0.10]) by cichlids.com (Postfix) with ESMTP id AB7F2AC2C; Thu, 11 May 2000 17:53:16 +0200 (CEST) Received: (from alex@localhost) by cichlids.cichlids.com (8.9.3/8.9.3) id RAA19485; Thu, 11 May 2000 17:48:12 +0200 (CEST) (envelope-from alex) Date: Thu, 11 May 2000 17:48:12 +0200 From: Alexander Langer To: Alex Rousskov Cc: freebsd-net@FreeBSD.ORG Subject: Re: load-balancing over routes and redundancy Message-ID: <20000511174812.A19424@cichlids.cichlids.com> References: <20000511195647O.demizu@dd.iij4u.or.jp> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0.1i In-Reply-To: ; from rousskov@ircache.net on Thu, May 11, 2000 at 08:16:01AM -0600 X-PGP-Fingerprint: 44 28 CA 4C 46 5B D3 A8 A8 E3 BA F3 4E 60 7D 7F X-Verwirrung: Dieser Header dient der allgemeinen Verwirrung. Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Thus spake Alex Rousskov (rousskov@ircache.net): > servers/proxies. Both WCCP and NECP include health checks as well. You > might want to look at these technologies before implementing your ideas. The thing is, I don't need it, but I searched for new ideas for FreeBSD. Alex -- I need a new ~/.sig. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 15: 3:49 2000 Delivered-To: freebsd-net@freebsd.org Received: from teaausdmz001.telusa.com (teaausdmz001.telusa.com [208.218.238.10]) by hub.freebsd.org (Postfix) with ESMTP id 8D09F37B853 for ; Thu, 11 May 2000 15:03:30 -0700 (PDT) (envelope-from EGravel@taz.telusa.com) Received: from teaaushub001.telusa.com ([172.17.40.252]) by teaausdmz001.telusa.com (Post.Office MTA v3.5.1 release 219 ID# 0-0U10L2S100) with ESMTP id com for ; Thu, 11 May 2000 16:55:42 -0500 Received: from teaaus0030.telusa.com ([172.17.40.130]) by teaaushub001.telusa.com (Post.Office MTA v3.5.1 release 219 ID# 0-57493U100L2S100V35) with ESMTP id com for ; Thu, 11 May 2000 17:03:31 -0500 Received: by teaaus0030.telusa.com with Internet Mail Service (5.5.2650.21) id ; Thu, 11 May 2000 17:03:24 -0500 Message-ID: <6BFFC6F3FB6AD211A9D800A0C99B3E6F014A4123@TEAPHX0031> From: "TAZ Gravel, Emmanuel" To: "'freebsd-net@freebsd.org'" Subject: Weirdness in small network Date: Thu, 11 May 2000 17:03:23 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01BFBB94.B9A95720" Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01BFBB94.B9A95720 Content-Type: text/plain I have a small network of about 20 machines, running many Unix-like OS'es of different age (some as old as over 10 years, discontinued). Something strange happened recently: two of the machines can't talk to each other, but can talk to the rest of the network. The network is primarily coax (10b2) but has a hub here and there, to add machines that have 10bT interfaces. All machines in the same network address space, and all have same netmask, so routing and other networking issues aren't a problem. Pinging doesn't work between each other (host unreachable) but can ping anywhere else in the network. Both machines are in the middle of the chain so hardware problems aren't an issue. The only truly odd thing I found was looking at the ARP cache. For one of the machines, it does have the proper MAC address associated with the IP address. This is a machine with the 10 year old OS. The other machine only shows (incomplete) instead of the proper info. I tried hardcoding the values in there but it didn't produce any results. I know no firewalling is in place. Right now I'm stuck and don't know where else to look. Anyone have any idea what this could be? Please also forward directly to me since I can't subscribe to mailing lists here. Thanks, Emmanuel Gravel ------_=_NextPart_001_01BFBB94.B9A95720 Content-Type: text/html Weirdness in small network

I have a small network of about 20 machines, running many Unix-like
OS'es of different age (some as old as over 10 years, discontinued).
Something strange happened recently: two of the machines can't
talk to each other, but can talk to the rest of the network. The network
is primarily coax (10b2) but has a hub here and there, to add machines
that have 10bT interfaces. All machines in the same network address
space, and all have same netmask, so routing and other networking
issues aren't a problem. Pinging doesn't work between each other
(host unreachable) but can ping anywhere else in the network. Both
machines are in the middle of the chain so hardware problems aren't
an issue.

The only truly odd thing I found was looking at the ARP cache. For
one of the machines, it does have the proper MAC address associated
with the IP address. This is a machine with the 10 year old OS. The
other machine only shows (incomplete) instead of the proper info. I
tried hardcoding the values in there but it didn't produce any results.
I know no firewalling is in place. Right now I'm stuck and don't know
where else to look.

Anyone have any idea what this could be?

Please also forward directly to me since I can't subscribe to mailing
lists here.

Thanks,

Emmanuel Gravel

------_=_NextPart_001_01BFBB94.B9A95720-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 15:58:17 2000 Delivered-To: freebsd-net@freebsd.org Received: from rapidnet.com (rapidnet.com [205.164.216.1]) by hub.freebsd.org (Postfix) with ESMTP id 05AE137BC2A for ; Thu, 11 May 2000 15:58:15 -0700 (PDT) (envelope-from nick@rapidnet.com) Received: from localhost (nick@localhost) by rapidnet.com (8.9.3/8.9.3) with ESMTP id QAA70192; Thu, 11 May 2000 16:58:08 -0600 (MDT) Date: Thu, 11 May 2000 16:58:08 -0600 (MDT) From: Nick Rogness To: "TAZ Gravel, Emmanuel" Cc: "'freebsd-net@freebsd.org'" Subject: Re: Weirdness in small network In-Reply-To: <6BFFC6F3FB6AD211A9D800A0C99B3E6F014A4123@TEAPHX0031> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, 11 May 2000, TAZ Gravel, Emmanuel wrote: > I have a small network of about 20 machines, running many Unix-like > OS'es of different age (some as old as over 10 years, discontinued). > Something strange happened recently: two of the machines can't > talk to each other, but can talk to the rest of the network. The network > is primarily coax (10b2) but has a hub here and there, to add machines > that have 10bT interfaces. All machines in the same network address > space, and all have same netmask, so routing and other networking > issues aren't a problem. Pinging doesn't work between each other > (host unreachable) but can ping anywhere else in the network. Both > machines are in the middle of the chain so hardware problems aren't > an issue. > Anyone have any idea what this could be? Ethernet Card went bad. cable termination problem?? WHat has changed? IP stack problem...run tcpdump to see if you are recieving packets at all. Nick Rogness - Speak softly and carry a Gigabit switch. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 21:15:48 2000 Delivered-To: freebsd-net@freebsd.org Received: from new1.utep.edu (new1.utep.edu [129.108.1.217]) by hub.freebsd.org (Postfix) with ESMTP id B720637BCC8 for ; Thu, 11 May 2000 21:15:45 -0700 (PDT) (envelope-from jan@janbeck.com) Received: from mail.utep.edu (mail.utep.edu [129.108.1.4]) by new1.utep.edu (8.9.3/8.9.3) with ESMTP id WAA14631 for ; Thu, 11 May 2000 22:15:43 -0600 (MDT) Received: from backup4 (atlas51.mmtlc.utep.edu [129.108.79.150]) by mail.utep.edu (8.9.2/8.9.2) with ESMTP id WAA16462 for ; Thu, 11 May 2000 22:15:41 -0600 Message-Id: <4.2.0.58.20000511231604.00a4b560@mail.janbeck.com> X-Sender: janbeck01@mail.janbeck.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.0.58 Date: Thu, 11 May 2000 23:19:00 -0500 To: freebsd-net@freebsd.org From: Jan Beck Subject: socket programming Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I am writing a small server that accepts telnet connections. I am trying to disable the display of the password, but am unable to do so. What do I have to do to disable the echoing of the password? I would really appreciate any pointers. Jan Beck To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 22:44:25 2000 Delivered-To: freebsd-net@freebsd.org Received: from ns1.tu-graz.ac.at (ns1.tu-graz.ac.at [129.27.2.3]) by hub.freebsd.org (Postfix) with ESMTP id 3CE9637B983 for ; Thu, 11 May 2000 22:44:22 -0700 (PDT) (envelope-from dada@sbox.tu-graz.ac.at) Received: from localhost.tu-graz.ac.at (isdn102.tu-graz.ac.at [129.27.240.102]) by ns1.tu-graz.ac.at (8.9.3/8.9.3) with ESMTP id HAA06490; Fri, 12 May 2000 07:44:16 +0200 (MET DST) Received: (from mkamm@localhost) by localhost.tu-graz.ac.at (8.9.3/8.9.3) id HAA00444; Fri, 12 May 2000 07:43:50 +0200 (CEST) (envelope-from mkamm) Date: Fri, 12 May 2000 07:43:09 +0200 (CEST) From: Martin Kammerhofer Reply-To: Martin Kammerhofer To: "Justin C. Walker" Cc: freebsd-net@freebsd.org Subject: Re: SO_RCVTIMEO values In-Reply-To: <200005100635.XAA00693@walkeridsl1.apple.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On 09.05.00 Justin C. Walker wrote: : I pawed through the archives looking for 'SO_RCVTIMEO' and : 'sb_timeo', and couldn't find anything of interest (a lot of hits on : mail from folks at 'sb.net', tho :-}). : : Is there a reason to keep this value as a short? There's the : obvious ones of binary compatibility (for kernel plug-ins, at least), : and "that's the way it's always been done", but I don't see any good : ones. : About a year ago I suggested along with PR 11252 (now closed) to change sb_timeo from short to int. Someone stated that it's a bad idea because of size and alignment issues but I don't know how to verify that argument. (Potentially the kernel has to keep _a_lot_ of struct sockbufs, but 4 bytes extra per socket should sum up to a few KB only.) Martin To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Thu May 11 23:32:17 2000 Delivered-To: freebsd-net@freebsd.org Received: from Gloria.CAM.ORG (Gloria.CAM.ORG [205.151.116.34]) by hub.freebsd.org (Postfix) with ESMTP id 0C10937B6C4 for ; Thu, 11 May 2000 23:32:14 -0700 (PDT) (envelope-from intmktg@CAM.ORG) Received: from localhost (intmktg@localhost) by Gloria.CAM.ORG (8.9.3/8.9.3) with ESMTP id CAA11593 for ; Fri, 12 May 2000 02:20:43 -0400 Date: Fri, 12 May 2000 02:20:43 -0400 (EDT) From: Marc Tardif To: freebsd-net@freebsd.org Subject: ppp filter Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org How can I redirect www requests from the modem interface on one host to another host on my local network? My current network consists of the following machines, where the "fbsd" host also has a modem interface (tun0) with the static IP 1.1.1.1 (for discussion's sake): 192.168.0.1 fbsd.box.com fbsd 192.168.0.2 fbsd2.box.com fbsd2 What I have tried so far is to connect to my isp using ppp and the nat flag and then setting a filter as follows: fbsd# ppp -nat isp ppp ON fbsd> dial PPP ON fbsd> set filter in 0 permit 1.1.1.1 192.168.0.2 tcp src eq 80 dst eq 80 Unfortunately, once I set the filter, I cannot ping anywhere outside my local network so I cannot put tcpdump to good use. Any suggestions to either solve the problem or help get anywhere with this problem would be much appreciated. Marc Tardif To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Fri May 12 0:57:39 2000 Delivered-To: freebsd-net@freebsd.org Received: from mail.surf1.de (mail.Surf1.de [194.25.165.21]) by hub.freebsd.org (Postfix) with ESMTP id 0937937BCF7 for ; Fri, 12 May 2000 00:57:36 -0700 (PDT) (envelope-from alex@cichlids.com) Received: from cichlids.com (p3E9D38CB.dip0.t-ipconnect.de [62.157.56.203]) by mail.surf1.de (8.9.3/8.9.3) with ESMTP id IAA23929; Fri, 12 May 2000 08:55:59 +0200 Received: from cichlids.cichlids.com (cichlids.cichlids.com [192.168.0.10]) by cichlids.com (Postfix) with ESMTP id 62E2EAC2C; Fri, 12 May 2000 10:02:38 +0200 (CEST) Received: (from alex@localhost) by cichlids.cichlids.com (8.9.3/8.9.3) id JAA02818; Fri, 12 May 2000 09:57:29 +0200 (CEST) (envelope-from alex) Date: Fri, 12 May 2000 09:57:29 +0200 From: Alexander Langer To: Jan Beck Cc: net@freebsd.org Subject: Re: socket programming Message-ID: <20000512095729.B742@cichlids.cichlids.com> References: <4.2.0.58.20000511231604.00a4b560@mail.janbeck.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0.1i In-Reply-To: <4.2.0.58.20000511231604.00a4b560@mail.janbeck.com>; from jan@janbeck.com on Thu, May 11, 2000 at 11:19:00PM -0500 X-PGP-Fingerprint: 44 28 CA 4C 46 5B D3 A8 A8 E3 BA F3 4E 60 7D 7F X-Verwirrung: Dieser Header dient der allgemeinen Verwirrung. Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Thus spake Jan Beck (jan@janbeck.com): > I am writing a small server that accepts telnet connections. I am trying to > disable the display of the password, but am unable to do so. What do I have > to do to disable the echoing of the password? Read the RfC, it is: IAC DONT ECHO NUL, which means "Interprete as Command, Don't ECHO, termination of command". Send the values: 255 253 1 0 To the server. Do reenable echo, send "DO" instead of "DONT" . I don't remember, which command is "DO", but it should be one of 250-254, irrc. Alex -- I need a new ~/.sig. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Fri May 12 3:45: 2 2000 Delivered-To: freebsd-net@freebsd.org Received: from cr31617-a.lndn1.on.wave.home.com (cr31617-a.lndn1.on.wave.home.com [24.112.227.163]) by hub.freebsd.org (Postfix) with ESMTP id 50A3837BA69 for ; Fri, 12 May 2000 03:44:59 -0700 (PDT) (envelope-from jbailie@cr31617-a.lndn1.on.wave.home.com) Received: (from jbailie@localhost) by cr31617-a.lndn1.on.wave.home.com (8.9.3/8.9.3) id GAA03665 for freebsd-net@freebsd.org; Fri, 12 May 2000 06:44:58 -0400 (EDT) (envelope-from jbailie) Date: Fri, 12 May 2000 06:44:58 -0400 From: James Bailie To: freebsd-net@freebsd.org Subject: Re: socket programming Message-ID: <20000512064458.A3593@cr31617-a.lndn1.on.wave.home.co> References: <4.2.0.58.20000511231604.00a4b560@mail.janbeck.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0.1i In-Reply-To: <4.2.0.58.20000511231604.00a4b560@mail.janbeck.com>; from jan@janbeck.com on Thu, May 11, 2000 at 11:19:00PM -0500 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, May 11, 2000 at 11:19:00PM -0500, Jan Beck wrote: > I am writing a small server that accepts telnet connections. I am trying to > disable the display of the password, but am unable to do so. What do I have > to do to disable the echoing of the password? > > I would really appreciate any pointers. > Jan Beck This is too vague. In what language are you working? Are you conversing with the client through a pseudo-terminal or you just exchanging newline terminated lines of character data? Are you actually implementing the telnet protocol, or just using the telnet port for your server? -- James Bailie http://members.home.net/jazzturk To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Fri May 12 17:36:19 2000 Delivered-To: freebsd-net@freebsd.org Received: from silby.com (adam042-051.resnet.wisc.edu [146.151.42.51]) by hub.freebsd.org (Postfix) with SMTP id 4212F37BD7D for ; Fri, 12 May 2000 17:36:12 -0700 (PDT) (envelope-from silby@silby.com) Received: (qmail 1266 invoked by uid 1000); 13 May 2000 00:36:10 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 13 May 2000 00:36:10 -0000 Date: Fri, 12 May 2000 19:36:10 -0500 (CDT) From: Mike Silbersack To: net@freebsd.org Subject: MFC of mbuf wait and other patch Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I now have two patches I'd enjoy if people looked at: The first is a patch I posted a week or two ago here which rate limits icmp echo responses and timestamp responses; while it doesn't address any particular DoS, I think it'd be wise to include, even if only in current for now. You can obtain it from: http://www.silby.com/patches/ip_icmp.c.patch The second patch is my backport of bosko milekic's mbuf waiting code to 3.4. The patch ported cleanly, but I'm seeing mbuf leaks in some cases when I reach the exhaustion stage. Unfortunately, since I only have a 3.4 box, I cannot tell if this is due to an error in my backport, or some case that isn't handled by the code. If you're running 4 or 5 and wish to see the results you get from the attack I'm running on myself, please e-mail me and I'll send you instructions on how to recreate it. That aside, the patch does stop the box from panicing, so it's still a win for us 3.xers - if you're running 3.4, please help test the patch. The mbuf wait patch is at: http://www.silby.com/patches/mbuf-wait-mfc.patch Thanks, Mike "Silby" Silbersack To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Fri May 12 19:51:58 2000 Delivered-To: freebsd-net@freebsd.org Received: from cr31617-a.lndn1.on.wave.home.com (cr31617-a.lndn1.on.wave.home.com [24.112.227.163]) by hub.freebsd.org (Postfix) with ESMTP id A561E37B83D for ; Fri, 12 May 2000 19:51:55 -0700 (PDT) (envelope-from jbailie@cr31617-a.lndn1.on.wave.home.com) Received: (from jbailie@localhost) by cr31617-a.lndn1.on.wave.home.com (8.9.3/8.9.3) id WAA02032; Fri, 12 May 2000 22:51:48 -0400 (EDT) (envelope-from jbailie) Date: Fri, 12 May 2000 22:51:48 -0400 From: James Bailie To: Jan Beck Cc: freebsd-net@freebsd.org Subject: Re: socket programming Message-ID: <20000512225148.A1992@cr31617-a.lndn1.on.wave.home.co> References: <4.2.0.58.20000511231604.00a4b560@mail.janbeck.com> <4.2.0.58.20000511231604.00a4b560@mail.janbeck.com> <20000512064458.A3593@cr31617-a.lndn1.on.wave.home.co> <4.2.0.58.20000512182856.00a45550@mail.janbeck.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0.1i In-Reply-To: <4.2.0.58.20000512182856.00a45550@mail.janbeck.com>; from jan@janbeck.com on Fri, May 12, 2000 at 06:34:47PM -0500 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri, May 12, 2000 at 06:34:47PM -0500, Jan Beck wrote: > I am using a telnet client to connect > to my server on a non-well known port. I can exchange messages (text) > between the server and the client, but dont know how to hide the password > on the initial login. The telnet client needs to be told not to echo keystrokes, by sending the appropriate commands in the telnet protocol. I have Steven's TCP/IP Illustrated Vol. I open on my lap. I've never done this myself, but it appears straightforward: You must send three bytes to the client with the following decimal values: 255, which means, "interpret the following data as a command," then 254, which means, "don't do this," and then 1 to specify echoing. The client must agree by sending 255, 252, 1. The client must agree under the protocol, so if you don't get that response, something's wrong. -- James Bailie http://members.home.net/jazzturk To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Fri May 12 21:20:10 2000 Delivered-To: freebsd-net@freebsd.org Received: from databus.databus.com (databus.databus.com [198.186.154.34]) by hub.freebsd.org (Postfix) with SMTP id 99A3D37BE46 for ; Fri, 12 May 2000 21:19:58 -0700 (PDT) (envelope-from barney@databus.databus.com) From: Barney Wolff To: freebsd-net@freebsd.org Date: Fri, 12 May 2000 23:56 EDT Subject: Re: socket programming Content-Length: 1095 Content-Type: text/plain Message-ID: <391cd7e80.3e9@databus.databus.com> Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Well, telnet is a funny protocol. Both answers have been wrong. The telnet echo mode controls whether a telnet peer will echo *back along the tcp connection* not, as one might think, to the screen. So the way to tell the telnet client to stop echoing to the user is to send IAC WILL ECHO (255,251,1). The client, seeing that the server wants to echo, should reply IAC DO ECHO (255,253,1) and stop echoing itself. The server, in this case, lies, because it really is not going to echo. To avoid a race condition, do all this before sending the password prompt. You don't have to wait for the client's do-echo, but you do have to avoid taking it as part of the password. The above assumes that it is the telnet client that is doing the echoing, of course. If it's the server, then just stop. For example, in the customary case of logging into a shell on a remote host, it's the server host that's echoing, not the client. And if the client is not a real telnet client, but some custom program that doesn't understand the telnet protocol, you're sunk. Barney Wolff To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Fri May 12 22:41:42 2000 Delivered-To: freebsd-net@freebsd.org Received: from falla.videotron.net (falla.videotron.net [205.151.222.106]) by hub.freebsd.org (Postfix) with ESMTP id 8155637B957 for ; Fri, 12 May 2000 22:41:39 -0700 (PDT) (envelope-from bmilekic@dsuper.net) Received: from modemcable009.62-201-24.mtl.mc.videotron.net ([24.201.62.9]) by falla.videotron.net (Sun Internet Mail Server sims.3.5.1999.12.14.10.29.p8) with ESMTP id <0FUH004JGH5CRX@falla.videotron.net> for net@FreeBSD.ORG; Sat, 13 May 2000 01:41:36 -0400 (EDT) Date: Sat, 13 May 2000 01:43:11 -0400 (EDT) From: Bosko Milekic Subject: Re: MFC of mbuf wait and other patch In-reply-to: X-Sender: bmilekic@jehovah.technokratis.com To: Mike Silbersack Cc: net@FreeBSD.ORG Message-id: MIME-version: 1.0 Content-type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri, 12 May 2000, Mike Silbersack wrote: > The first is a patch I posted a week or two ago here which rate limits > icmp echo responses and timestamp responses; while it doesn't address any > particular DoS, I think it'd be wise to include, even if only in current > for now. > > You can obtain it from: http://www.silby.com/patches/ip_icmp.c.patch Looks good to me. > > The second patch is my backport of bosko milekic's mbuf waiting code to > 3.4. The patch ported cleanly, but I'm seeing mbuf leaks in some cases > when I reach the exhaustion stage. Unfortunately, since I only have a 3.4 > box, I cannot tell if this is due to an error in my backport, or some case > that isn't handled by the code. If you're running 4 or 5 and wish to see > the results you get from the attack I'm running on myself, please e-mail > me and I'll send you instructions on how to recreate it. If you want, what you could do is also backport some of the changes to netstat (along with the addition of the kern.ipc.nmbufs sysctl node), as I've noticed that you also merged the bits that place hard limits on allocate-able mbufs and mclusters. As for the "leak," as previously mentionned, it would be helpful to know the state of some processes. In particular, you want to look for process(es) with WCHAN "mballc" or "mclalc" (particularily the ones that seem to be "hanging" on you during the exhaustion). As we've discussed, such processes are typically stuck in the kernel, trying to substitute clusters with mbufs, while continuously timing out on the tsleep()s in the mcluster allocation routine. Unfortunately, such system calls don't return until they decide that they have exhausted all mbufs, too... which means they'll be at it for a while because you usually run out of clusters sooner that you do of mbufs. In any case, carefully look at mbuf and mcluster variations, stop the "attack/DoS/whatever" simulation, and change the timeout on the sleeps. Then try again. Also, keep an eye out on those processes. > > That aside, the patch does stop the box from panicing, so it's still a win > for us 3.xers - if you're running 3.4, please help test the patch. > > The mbuf wait patch is at: > http://www.silby.com/patches/mbuf-wait-mfc.patch The patch looks fine, except for some mbuf.h-related stuff which would probably benefit from a quick review by Brian (green@freebsd.org), as he's done (much needed) cleanups there not too long ago. > > Thanks, > > Mike "Silby" Silbersack > Later, Bosko. -- Bosko Milekic * pages.infinit.net/bmilekic/index.html * www.technokratis.com bmilekic@dsuper.net * bmilekic@technokratis.com * b.milekic@marianopolis.edu "Give a man a fish and he will eat for a day. Teach him how to fish, and he will sit in a boat and drink beer all day." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Sat May 13 3:42:13 2000 Delivered-To: freebsd-net@freebsd.org Received: from t.ti.itb.ac.id (students.TI.ITB.ac.id [167.205.19.2]) by hub.freebsd.org (Postfix) with SMTP id 823FA37B8A1 for ; Sat, 13 May 2000 03:40:58 -0700 (PDT) (envelope-from suryadi@Students.ti.itb.ac.id) Received: (qmail 13360 invoked by uid 846); 13 May 2000 10:57:33 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 13 May 2000 10:57:33 -0000 Date: Sat, 13 May 2000 17:57:33 +0700 (JAVT) From: Suryadi To: Mikel Cc: FREEBSD-NET@FreeBSD.ORG Subject: Re: FAKE DOMAIN In-Reply-To: <3919436C.5F4FD526@ocsny.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org For now I only need for a private lan, but later maybe I need to connect to the internet too. Do you have any idea ? On Wed, 10 May 2000, Mikel wrote: > please elaborate...do you mean for use on a private lan? or are your going to > connect to the internet some how? > > Suryadi wrote: > > > Hello everyone > > > > I want to ask about fake domain. Can I entered a server using fake domain > > ? > > > > PS: when we entered a server, and we type 'w'. So there will be my login > > name and my domain. That I want is to fake the domain. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Sat May 13 6:53:56 2000 Delivered-To: freebsd-net@freebsd.org Received: from njord.bart.nl (njord.bart.nl [194.158.170.15]) by hub.freebsd.org (Postfix) with ESMTP id 35C4937B588 for ; Sat, 13 May 2000 06:53:51 -0700 (PDT) (envelope-from asmodai@wxs.nl) Received: from daemon.ninth-circle.org (abaddon@lucifer.is.an.elder.of.the.ninth-circle.org [195.38.216.226]) by njord.bart.nl (8.10.1/8.10.1) with ESMTP id e4DDrkR39141; Sat, 13 May 2000 15:53:47 +0200 (CEST) Received: (from asmodai@localhost) by daemon.ninth-circle.org (8.9.3/8.9.3) id PAA93012; Sat, 13 May 2000 15:41:16 +0200 (CEST) (envelope-from asmodai) Date: Sat, 13 May 2000 15:41:15 +0200 From: Jeroen Ruigrok/Asmodai To: "G.B.Naidu" Cc: Thierry Herbelot , freebsd-net@FreeBSD.org Subject: Re: sendmail hangs while booting... Message-ID: <20000513154115.X78993@daemon.ninth-circle.org> References: <390F1276.8174F3BE@cybercable.fr> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2i In-Reply-To: ; from gbnaidu@sasi.com on Wed, May 03, 2000 at 10:36:16AM +0530 Organisation: Ninth-Circle Enterprises Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org -On [20000503 07:31], G.B.Naidu (gbnaidu@sasi.com) wrote: >On Tue, 2 May 2000, Thierry Herbelot wrote: > >> Generally, sendmail is a bit slow to boot, as it tries to resolve the >> hostname of your machine via dns : if your hostname is not declared in a >> DNS, sendmail has to wait the timeout duration before finishing its >> startup. > >What I would like to know is: During it's initilization, does sendmail >sends/receive some packets? If there are any bugs in the code that I have >changed(in the files mentioned above), does they affect sendmail? Like Thierry said, it will try and do a lookup by means if gethostbyname() IIRC which could mean the resolver needs to contact a nameserver as specified in /etc/resolv.conf. So it could send out some packets. But that's entirely dependent on your configuration. -- Jeroen Ruigrok vd Werven/Asmodai asmodai@[wxs.nl|bart.nl|freebsd.org] Documentation nutter/C-rated Coder BSD: Technical excellence at its best The BSD Programmer's Documentation Project If we do not start at the beginning, we have no hope to arrive... To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message From owner-freebsd-net Sat May 13 13: 7:48 2000 Delivered-To: freebsd-net@freebsd.org Received: from silby.com (adam042-051.resnet.wisc.edu [146.151.42.51]) by hub.freebsd.org (Postfix) with SMTP id 3305437B9AC for ; Sat, 13 May 2000 13:07:40 -0700 (PDT) (envelope-from silby@silby.com) Received: (qmail 11672 invoked by uid 1000); 13 May 2000 20:07:35 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 13 May 2000 20:07:35 -0000 Date: Sat, 13 May 2000 15:07:35 -0500 (CDT) From: Mike Silbersack To: Bosko Milekic Cc: net@FreeBSD.ORG Subject: Re: MFC of mbuf wait and other patch In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sat, 13 May 2000, Bosko Milekic wrote: > As for the "leak," as previously mentionned, it would be helpful to > know the state of some processes. In particular, you want to look for > process(es) with WCHAN "mballc" or "mclalc" (particularily the ones that > seem to be "hanging" on you during the exhaustion). As we've discussed, > such processes are typically stuck in the kernel, trying to substitute > clusters with mbufs, while continuously timing out on the tsleep()s in > the mcluster allocation routine. Unfortunately, such system calls don't > return until they decide that they have exhausted all mbufs, too... which > means they'll be at it for a while because you usually run out of > clusters sooner that you do of mbufs. Ok, I created the situation again, this time using fstat/lsof to see if I could get any more additional information. Unfortunately, I've come up dry. What's occuring is that when I hit very close to all mbuf clusters and mbufs full, apache answers the request, but is unable to stuff the full ~15 of data (loopback's MTU size) into the send queue. It seems to wait in mclalc for a few seconds, and goes back to the accept state. At this point, the socket in question is no longer attached to any process, and sits in the LAST_ACK state. However, unlike the pre-exhaustion sockets, which are also in LAST_ACK, it seemingly never times out. I've been attempting to add to netstat so that it tells me more of the socket internals so that I can hopefully see what's different about these sockets than others, but it looks like adding all the various fields could take some time; is there a tool which already shows this info somewhere? Unfortunately, I'll be very busy during the next week, so I won't get time to look much more into it. > The patch looks fine, except for some mbuf.h-related stuff which > would probably benefit from a quick review by Brian (green@freebsd.org), > as he's done (much needed) cleanups there not too long ago. I agree. The mbuf.h changes look safe to me, but there may be something subtle I missed. Mike "Silby" Silbersack To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message