From owner-freebsd-net@FreeBSD.ORG Sun Apr 12 01:56:51 2009 Return-Path: Delivered-To: net@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EF1E5106566C; Sun, 12 Apr 2009 01:56:51 +0000 (UTC) (envelope-from mi+thun@aldan.algebra.com) Received: from aldan.algebra.com (aldan.algebra.com [216.254.65.224]) by mx1.freebsd.org (Postfix) with ESMTP id A52EC8FC14; Sun, 12 Apr 2009 01:56:50 +0000 (UTC) (envelope-from mi+thun@aldan.algebra.com) Received: from aldan.algebra.com (localhost [127.0.0.1]) by aldan.algebra.com (8.14.3/8.14.3) with ESMTP id n3C1bK2A055292; Sat, 11 Apr 2009 21:37:21 -0400 (EDT) (envelope-from mi+thun@aldan.algebra.com) Message-ID: <49E145D0.4060609@aldan.algebra.com> Date: Sat, 11 Apr 2009 21:37:20 -0400 From: "Mikhail T." User-Agent: Thunderbird 2.0.0.21 (X11/20090407) MIME-Version: 1.0 To: net@FreeBSD.org, ipfw@FreeBSD.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Subject: natd interferes with incoming RTSP/RTP X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Apr 2009 01:56:52 -0000 Hello! I'm trying to watch video via RTSP/RTP from a remote net-camera on my 7.0-STABLE/i386 from July 6th: vlc --verbose 2 rtsp://user:password@remote.example.com/nphMpeg4/g726-320x240 Things work fine, when my machine has the firewall disabled. Unfortunately, the machine is also in charge of protecting and NAT-ing for a small LAN, s keeping the ipfw down for long is not an option. Yet, with my usual firewall setup (the modified "simple" -- altered to not care, what the outside IP-address is, because it changes via DHCP), things time-out... However, if I disable just one of the rules below -- 1300, the one diverting all traffic to natd -- the video works fine... So it is not any of the other rules, that are the problem, nor is it the remote server... Why would this happen and how do I solve the problem? Thanks! Yours, -mi P.S. Output of /etc/rc.d/ipfw showing the rules, etc. net.inet.ip.fw.enable: 1 -> 0 Stopping natd. Waiting for PIDS: 62054, 62054, 62054, 62054, 62054. Starting natd. Loading /lib/libalias_cuseeme.so Loading /lib/libalias_ftp.so Loading /lib/libalias_irc.so Loading /lib/libalias_nbt.so Loading /lib/libalias_pptp.so Loading /lib/libalias_skinny.so Loading /lib/libalias_smedia.so Flushed all rules. 00100 allow ip from any to any via lo0 00200 deny ip from any to 127.0.0.0/8 00300 deny ip from 127.0.0.0/8 to any 00400 deny ip from 192.168.1.0/24 to any in via nve0 00500 deny ip from any to 10.0.0.0/8 via nve0 00600 deny ip from any to 172.16.0.0/12 via nve0 00700 deny ip from any to 192.168.0.0/16 via nve0 00800 deny ip from any to 0.0.0.0/8 via nve0 00900 deny ip from any to 169.254.0.0/16 via nve0 01000 deny ip from any to 192.0.2.0/24 via nve0 01100 deny ip from any to 224.0.0.0/4 via nve0 01200 deny ip from any to 240.0.0.0/4 via nve0 /01300 divert 8668 ip from any to any via nve0/ 01400 deny ip from 10.0.0.0/8 to any via nve0 01500 deny ip from 172.16.0.0/12 to any via nve0 01600 deny ip from 192.168.0.0/16 to any via nve0 01700 deny ip from 0.0.0.0/8 to any via nve0 01800 deny ip from 169.254.0.0/16 to any via nve0 01900 deny ip from 192.0.2.0/24 to any via nve0 02000 deny ip from 224.0.0.0/4 to any via nve0 02100 deny ip from 240.0.0.0/4 to any via nve0 02200 allow tcp from any to any established 02300 allow ip from any to any frag 02400 allow tcp from any to any dst-port 22 setup 02500 allow tcp from any to any dst-port 25 setup 02600 allow tcp from any to any dst-port 53 setup 02700 allow udp from any to any dst-port 53 02800 allow udp from any 53 to any 02900 allow tcp from any to any dst-port 80 setup 03000 allow tcp from any to any dst-port 2875 setup 03100 allow tcp from any to any dst-port 2885 setup 03200 allow tcp from any to any dst-port 2890 setup 03300 allow tcp from any to any dst-port 2895 setup 03400 allow tcp from any to any dst-port 2990 setup 03500 deny log logamount 100 tcp from any to any in via nve0 setup 03600 allow tcp from any to any setup 03700 allow udp from any to any dst-port 53 keep-state 03800 allow udp from any to any dst-port 123 keep-state Firewall rules loaded. net.inet.ip.fw.enable: 0 -> 1 From owner-freebsd-net@FreeBSD.ORG Sun Apr 12 12:14:42 2009 Return-Path: Delivered-To: net@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1ABC81065672; Sun, 12 Apr 2009 12:14:42 +0000 (UTC) (envelope-from p.pisati@oltrelinux.com) Received: from joe.mail.tiscali.it (joe.mail.tiscali.it [213.205.33.54]) by mx1.freebsd.org (Postfix) with ESMTP id CD1E78FC16; Sun, 12 Apr 2009 12:14:41 +0000 (UTC) (envelope-from p.pisati@oltrelinux.com) Received: from newluxor.wired.org (94.36.135.82) by joe.mail.tiscali.it (8.0.022) id 499F03960269EE41; Sun, 12 Apr 2009 14:03:28 +0200 Message-ID: <49E1D88F.30005@oltrelinux.com> Date: Sun, 12 Apr 2009 14:03:27 +0200 From: Paolo Pisati User-Agent: Thunderbird 2.0.0.18 (X11/20081214) MIME-Version: 1.0 To: "Mikhail T." References: <49E145D0.4060609@aldan.algebra.com> In-Reply-To: <49E145D0.4060609@aldan.algebra.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: ipfw@FreeBSD.org, net@FreeBSD.org Subject: Re: natd interferes with incoming RTSP/RTP X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Apr 2009 12:14:42 -0000 Mikhail T. wrote: > However, if I disable just one of the rules below -- 1300, the one > diverting all traffic to natd -- the video works fine... So it is not > any of the other rules, that are the problem, nor is it the remote > server... Why would this happen and how do I solve the problem? Thanks! > comment all the entries in /etc/libalias.conf, restart or send an HUP to natd and see if it helps. From owner-freebsd-net@FreeBSD.ORG Sun Apr 12 14:25:17 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7A07F1065670 for ; Sun, 12 Apr 2009 14:25:17 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from cyrus.watson.org (cyrus.watson.org [65.122.17.42]) by mx1.freebsd.org (Postfix) with ESMTP id 537A88FC13 for ; Sun, 12 Apr 2009 14:25:17 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from fledge.watson.org (fledge.watson.org [65.122.17.41]) by cyrus.watson.org (Postfix) with ESMTPS id 0A6CD46B1A; Sun, 12 Apr 2009 10:25:17 -0400 (EDT) Date: Sun, 12 Apr 2009 15:25:16 +0100 (BST) From: Robert Watson X-X-Sender: robert@fledge.watson.org To: Karim Fodil-Lemelin In-Reply-To: <49E0F5EF.3030807@xiplink.com> Message-ID: References: <49DF5F75.6080607@xiplink.com> <49DF9EAD.1050609@xiplink.com> <49E0F5EF.3030807@xiplink.com> User-Agent: Alpine 2.00 (BSF 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: freebsd-net@freebsd.org Subject: Re: m_tag, malloc vs uma X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Apr 2009 14:25:17 -0000 On Sat, 11 Apr 2009, Karim Fodil-Lemelin wrote: >> I think it would be desirable to make a change to more flexible m_tag types >> for 8.0, but I'm not sure I have time to implement/test it. Is this >> something you might be interested in working on? I'm thinking of basically >> replacing the m_tag_free pointer with a pointer to a small vector of >> operations, possibly something along these lines: >> >> struct m_tag_ops { >> void (*m_tag_free)(struct m_tag *); >> struct m_tag (*m_tag_copy)(struct m_tag *); >> }; >> >> If the m_tag_ops pointer is NULL, we go with today's default (requiring >> minimal change of existing consumers). I'm not sure if there are any other >> function pointers we'd need at this point? > > Is the m_tag_copy an 'overloaded' function for the current m_tag_copy or > something else? Now it could also be interesting to have another function > pointer to overload m_tag_alloc to give more control over which zone the > user wants its tags from (ex: pf_mtag ...). The interest is there not sure > if the schedule will allow it but that depends if the new m_tag designs > allows me to squeeze some performances in. My feeling is that, for types not maintained by the m_tag framework itself, the m_tag_ops.m_tag_copy() method should take an existing m_tag and produce a copy of it appropriate for inserting on the list of a copied mbuf header. That way both the allocation and copying of the m_tag are left to the subsystem that owns it, allowing it to use its own memory type, perform deep copying or reference counting of other structures, etc. Robert N M Watson Computer Laboratory University of Cambridge From owner-freebsd-net@FreeBSD.ORG Sun Apr 12 19:25:40 2009 Return-Path: Delivered-To: net@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 915991065673; Sun, 12 Apr 2009 19:25:40 +0000 (UTC) (envelope-from mi+thun@aldan.algebra.com) Received: from aldan.algebra.com (aldan.algebra.com [216.254.65.224]) by mx1.freebsd.org (Postfix) with ESMTP id 3A2B88FC28; Sun, 12 Apr 2009 19:25:40 +0000 (UTC) (envelope-from mi+thun@aldan.algebra.com) Received: from aldan.algebra.com (localhost [127.0.0.1]) by aldan.algebra.com (8.14.3/8.14.3) with ESMTP id n3CJPb8Z073216; Sun, 12 Apr 2009 15:25:39 -0400 (EDT) (envelope-from mi+thun@aldan.algebra.com) Message-ID: <49E24031.3050901@aldan.algebra.com> Date: Sun, 12 Apr 2009 15:25:37 -0400 From: "Mikhail T." User-Agent: Thunderbird 2.0.0.21 (X11/20090407) MIME-Version: 1.0 To: Paolo Pisati References: <49E145D0.4060609@aldan.algebra.com> <49E1D88F.30005@oltrelinux.com> In-Reply-To: <49E1D88F.30005@oltrelinux.com> Content-Type: text/plain; charset=KOI8-R Content-Transfer-Encoding: 8bit Cc: ipfw@FreeBSD.org, net@FreeBSD.org Subject: Re: natd interferes with incoming RTSP/RTP X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Apr 2009 19:25:41 -0000 Paolo Pisati написав(ла): > Mikhail T. wrote: >> However, if I disable just one of the rules below -- 1300, the one >> diverting all traffic to natd -- the video works fine... So it is not >> any of the other rules, that are the problem, nor is it the remote >> server... Why would this happen and how do I solve the problem? Thanks! >> > comment all the entries in /etc/libalias.conf, restart or send an HUP > to natd and see if it helps. Great pointer! As a matter of fact, all I had to comment out was the /lib/libalias_smedia.so... Now, what's wrong with it? Does not disabling this plugin mean, the hosts on the LAN can't access RTSP streams? Thanks! Yours, -mi From owner-freebsd-net@FreeBSD.ORG Sun Apr 12 21:36:43 2009 Return-Path: Delivered-To: net@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5766710656C8; Sun, 12 Apr 2009 21:36:43 +0000 (UTC) (envelope-from p.pisati@oltrelinux.com) Received: from joe.mail.tiscali.it (joe.mail.tiscali.it [213.205.33.54]) by mx1.freebsd.org (Postfix) with ESMTP id 14FDD8FC0A; Sun, 12 Apr 2009 21:36:42 +0000 (UTC) (envelope-from p.pisati@oltrelinux.com) Received: from nanobook.wired.org (94.36.135.82) by joe.mail.tiscali.it (8.0.022) id 499F0396026DC58D; Sun, 12 Apr 2009 23:36:35 +0200 Message-ID: <49E25EE9.3040309@oltrelinux.com> Date: Sun, 12 Apr 2009 23:36:41 +0200 From: Paolo Pisati User-Agent: Thunderbird 2.0.0.17 (X11/20081116) MIME-Version: 1.0 To: "Mikhail T." References: <49E145D0.4060609@aldan.algebra.com> <49E1D88F.30005@oltrelinux.com> <49E24031.3050901@aldan.algebra.com> In-Reply-To: <49E24031.3050901@aldan.algebra.com> Content-Type: text/plain; charset=KOI8-R; format=flowed Content-Transfer-Encoding: 7bit Cc: ipfw@FreeBSD.org, net@FreeBSD.org Subject: Re: natd interferes with incoming RTSP/RTP X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Apr 2009 21:36:44 -0000 Mikhail T. wrote: > Great pointer! As a matter of fact, all I had to comment out was the > /lib/libalias_smedia.so... > > Now, what's wrong with it? Does not disabling this plugin mean, the > hosts on the LAN can't access RTSP streams? Thanks! Yours, > try this patch: http://people.freebsd.org/~piso/alias_smedia.c.patch From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 00:50:02 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A39251065670 for ; Mon, 13 Apr 2009 00:50:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 745F48FC14 for ; Mon, 13 Apr 2009 00:50:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3D0o2l4001728 for ; Mon, 13 Apr 2009 00:50:02 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3D0o2ko001727; Mon, 13 Apr 2009 00:50:02 GMT (envelope-from gnats) Date: Mon, 13 Apr 2009 00:50:02 GMT Message-Id: <200904130050.n3D0o2ko001727@freefall.freebsd.org> To: freebsd-net@FreeBSD.org From: Brett Glass Cc: Subject: Re: bin/130159: [patch] ppp(8) fails to correctly set routes X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Brett Glass List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 00:50:03 -0000 The following reply was made to PR bin/130159; it has been noted by GNATS. From: Brett Glass To: bug-followup@FreeBSD.org, loos.br@gmail.com Cc: Subject: Re: bin/130159: [patch] ppp(8) fails to correctly set routes Date: Sun, 12 Apr 2009 18:41:27 -0600 Note: With the patch as written, the "gateway" (G) flag is set in the routing table entry. This does not seem to cause problems, but the flag should not be set because the "tun" interface is acting as a bridge, not a gateway. From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 04:46:09 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3BD4C1065674 for ; Mon, 13 Apr 2009 04:46:09 +0000 (UTC) (envelope-from craigcocca@yahoo.com) Received: from web31108.mail.mud.yahoo.com (web31108.mail.mud.yahoo.com [68.142.200.41]) by mx1.freebsd.org (Postfix) with SMTP id ED5EE8FC08 for ; Mon, 13 Apr 2009 04:46:08 +0000 (UTC) (envelope-from craigcocca@yahoo.com) Received: (qmail 84342 invoked by uid 60001); 13 Apr 2009 04:19:27 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1239596367; bh=lQg+81yhqXeK5FnkbHdfIvSaHEf0dgQsyjwcotISg2E=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=YJqfu+cA5Nd6tGfv9NOaWH96wXQu7GvMpbcuaOhKi3pdoMz47q17VDB6mgfYlQ5RDgDYe7TozrMekwaL4qJp/Jx+w6jOqHYsHQyflXRrRdbkWxaorAW72Ul0d41wWpcxYVIPUtyG7SRVb1+2X1V/mLDWjKXA5qh78Jil0AxZLFw= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=3Q+dXUKq+h6knFURPE4Tmhs/nDSJdhd9AxUDawZ2odRvhf9ol42By+sv8A6mbpkA9sddMfHN6X6TAhYGkMT95hUTLPgKqGLDCL2QkKN8I+dAcOLZyOYGoTBQPiN4HqKpbmUVqCzvSJkyHoX6uEHOe9Y2FjcKjSTeiLaszqdXO2c=; Message-ID: <798192.81782.qm@web31108.mail.mud.yahoo.com> X-YMail-OSG: CCWdgZAVM1kudAhysjRCMcI8psx_o4Mnnx8awe6LMi8QikZytwHWu1TDu05sf.RURl2NlSW_fzNWh46p3UCNHPObGcgGJx_EE1JhSXbGMqlqN2sFwj3AEhbG.IwjUX5okgADmrBnoKbzAf0H1EsX9IdPUnxjM4b3BLlnXQYih3SFoIczZ4qjxAFQUaRXLe8fQs3E8ussyaJwStoykNUhDGOAaQzUE1MpsGwDzIB894d0RadhgY0ACYiYeSWHHQ3Lk.cRsmN2ABFxOBJ6wlFOHxFld25ZkBtYVeQ480JsWhSG5kmcyzD0LA-- Received: from [96.229.140.205] by web31108.mail.mud.yahoo.com via HTTP; Sun, 12 Apr 2009 21:19:27 PDT X-Mailer: YahooMailRC/1277.35 YahooMailWebService/0.7.289.1 Date: Sun, 12 Apr 2009 21:19:27 -0700 (PDT) From: Craig Cocca To: freebsd-net@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Problem using Carp with NAT for High Availability Firewall X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 04:46:09 -0000 I have been experimenting recently with using Carp on FreeBSD 6.1 to implem= ent a high-availability firewall. I have two FreeBSD 6.1 machines set up, = each with their own static IP address, and both machines share a virtual IP= (VIP), which is the gateway IP for the machines behind the firewalls. My = network topology looks like this:=0A=0A Internet=0A = Switch=0A |=0A |---------------= -----------------|=0AFirewall 1 Firewall 2=0A10.0.0.1 = 10.0.0.2=0A 192.168.0.1 (VIP)=0A|----------= ---------------|-------------------|=0AServer 1 Server 2 Ser= ver N=0A=0A=0AI have been successful in getting the two firewall machines s= et up so that the slave machine takes over the VIP from the master if the m= aster machine loses connectivity. However, when the master comes back onli= ne and takes over the VIP again, I'm noticing something really odd, namely = that traffic starts going to the master again but ends up getting "swallowe= d alive" by the kernel. =0A=0AIn other words, I can have one of the machin= es behind the firewalls sending out a ping to a host on the Internet when t= he slave is servicing the VIP, and I will see traffic on Firewall 2's (slav= e's) inside and outside interfaces. As soon as the master comes online and= takes over the VIP from the slave again, I see the traffic switch to the i= nside interface of the master (I see this by watching tcpdump), but I don't= see the traffic getting routed to the outside interface! Either I am doin= g something wrong, or there is some kind of bug in Carp. Can anyone shed s= ome light on this? One other interesting thing to add to the mystery is th= at if I wait exactly 15 minutes from when the master takes back over the VI= P, the traffic starts getting routed again.=0A=0AThanks,=0A=0ACraig=0A=0A= =0A From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 05:30:19 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 95EDC1065675; Mon, 13 Apr 2009 05:30:19 +0000 (UTC) (envelope-from linimon@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 6D0838FC16; Mon, 13 Apr 2009 05:30:19 +0000 (UTC) (envelope-from linimon@FreeBSD.org) Received: from freefall.freebsd.org (linimon@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3D5UJfX087052; Mon, 13 Apr 2009 05:30:19 GMT (envelope-from linimon@freefall.freebsd.org) Received: (from linimon@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3D5UJoC087045; Mon, 13 Apr 2009 05:30:19 GMT (envelope-from linimon) Date: Mon, 13 Apr 2009 05:30:19 GMT Message-Id: <200904130530.n3D5UJoC087045@freefall.freebsd.org> To: linimon@FreeBSD.org, freebsd-i386@FreeBSD.org, freebsd-net@FreeBSD.org From: linimon@FreeBSD.org Cc: Subject: Re: kern/133490: [bpf] [panic] 'kmem_map too small' panic on Dell r900 when bpf_bufsize and bpf_maxbufsize are increased X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 05:30:20 -0000 Old Synopsis: 'kmem_map too small' panic on Dell r900 when bpf_bufsize and bpf_maxbufsize are increased New Synopsis: [bpf] [panic] 'kmem_map too small' panic on Dell r900 when bpf_bufsize and bpf_maxbufsize are increased Responsible-Changed-From-To: freebsd-i386->freebsd-net Responsible-Changed-By: linimon Responsible-Changed-When: Mon Apr 13 05:29:45 UTC 2009 Responsible-Changed-Why: Over to maintainer(s). http://www.freebsd.org/cgi/query-pr.cgi?pr=133490 From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 05:32:26 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5623D1065672; Mon, 13 Apr 2009 05:32:26 +0000 (UTC) (envelope-from linimon@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 2C6F58FC0C; Mon, 13 Apr 2009 05:32:26 +0000 (UTC) (envelope-from linimon@FreeBSD.org) Received: from freefall.freebsd.org (linimon@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3D5WPkP098655; Mon, 13 Apr 2009 05:32:25 GMT (envelope-from linimon@freefall.freebsd.org) Received: (from linimon@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3D5WP5H098651; Mon, 13 Apr 2009 05:32:25 GMT (envelope-from linimon) Date: Mon, 13 Apr 2009 05:32:25 GMT Message-Id: <200904130532.n3D5WP5H098651@freefall.freebsd.org> To: linimon@FreeBSD.org, freebsd-i386@FreeBSD.org, freebsd-net@FreeBSD.org From: linimon@FreeBSD.org Cc: Subject: Re: kern/133328: [bge] [panic] Kernel panics with Windows7 client X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 05:32:26 -0000 Old Synopsis: Kernel panics with Windows7 client New Synopsis: [bge] [panic] Kernel panics with Windows7 client Responsible-Changed-From-To: freebsd-i386->freebsd-net Responsible-Changed-By: linimon Responsible-Changed-When: Mon Apr 13 05:30:58 UTC 2009 Responsible-Changed-Why: reclassify. http://www.freebsd.org/cgi/query-pr.cgi?pr=133328 From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 05:33:23 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 862EF1065674; Mon, 13 Apr 2009 05:33:23 +0000 (UTC) (envelope-from linimon@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 5CBF98FC13; Mon, 13 Apr 2009 05:33:23 +0000 (UTC) (envelope-from linimon@FreeBSD.org) Received: from freefall.freebsd.org (linimon@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3D5XN7u099442; Mon, 13 Apr 2009 05:33:23 GMT (envelope-from linimon@freefall.freebsd.org) Received: (from linimon@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3D5XNjs099438; Mon, 13 Apr 2009 05:33:23 GMT (envelope-from linimon) Date: Mon, 13 Apr 2009 05:33:23 GMT Message-Id: <200904130533.n3D5XNjs099438@freefall.freebsd.org> To: linimon@FreeBSD.org, freebsd-i386@FreeBSD.org, freebsd-net@FreeBSD.org From: linimon@FreeBSD.org Cc: Subject: Re: kern/133204: [msk] msk driver timeouts X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 05:33:23 -0000 Old Synopsis: 'msk' driver problem New Synopsis: [msk] msk driver timeouts Responsible-Changed-From-To: freebsd-i386->freebsd-net Responsible-Changed-By: linimon Responsible-Changed-When: Mon Apr 13 05:32:33 UTC 2009 Responsible-Changed-Why: Reclassify. http://www.freebsd.org/cgi/query-pr.cgi?pr=133204 From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 11:06:58 2009 Return-Path: Delivered-To: freebsd-net@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0477D106566B for ; Mon, 13 Apr 2009 11:06:58 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id E46228FC0A for ; Mon, 13 Apr 2009 11:06:57 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3DB6vw3085024 for ; Mon, 13 Apr 2009 11:06:57 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3DB6vr3085020 for freebsd-net@FreeBSD.org; Mon, 13 Apr 2009 11:06:57 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 13 Apr 2009 11:06:57 GMT Message-Id: <200904131106.n3DB6vr3085020@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: freebsd-net@FreeBSD.org Cc: Subject: Current problem reports assigned to freebsd-net@FreeBSD.org X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 11:06:58 -0000 Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker Resp. Description -------------------------------------------------------------------------------- o kern/133613 net [wpi] [panic] kernel panic in wpi(4) o kern/133572 net [ppp] [hang] incoming PPTP connection hangs the system o kern/133490 net [bpf] [panic] 'kmem_map too small' panic on Dell r900 o kern/133328 net [bge] [panic] Kernel panics with Windows7 client o kern/133235 net [netinet] [patch] Process SIOCDLIFADDR command incorre o kern/133218 net [carp] [hang] use of carp(4) causes system to freeze o kern/133204 net [msk] msk driver timeouts o kern/133060 net [ipsec] [pfsync] [panic] Kernel panic with ipsec + pfs o kern/132991 net [bge] if_bge low performance problem o kern/132984 net [netgraph] swi1: net 100% cpu usage f bin/132911 net ip6fw(8): argument type of fill_icmptypes is wrong and o kern/132889 net [ndis] [panic] NDIS kernel crash on load BCM4321 AGN d o kern/132885 net [wlan] 802.1x broken after SVN rev 189592 o conf/132851 net [fib] [patch] allow to setup fib for service running f o bin/132798 net [patch] ggatec(8): ggated/ggatec connection slowdown p o kern/132734 net [ifmib] [panic] panic in net/if_mib.c o kern/132722 net [ath] Wifi ath0 associates fine with AP, but DHCP or I o kern/132715 net [lagg] [panic] Panic when creating vlan's on lagg inte o kern/132705 net [libwrap] [patch] libwrap - infinite loop if hosts.all o kern/132672 net [ndis] [panic] ndis with rt2860.sys causes kernel pani o kern/132669 net [xl] 3c905-TX send DUP! in reply on ping (sometime) o kern/132625 net [iwn] iwn drivers don't support setting country o kern/132554 net [ipl] There is no ippool start script/ipfilter magic t o kern/132354 net [nat] Getting some packages to ipnat(8) causes crash o kern/132285 net [carp] alias gives incorrect hash in dmesg o kern/132277 net [crypto] [ipsec] poor performance using cryptodevice f o conf/132179 net [patch] /etc/network.subr: ipv6 rtsol on incorrect wla o kern/132107 net [carp] carp(4) advskew setting ignored when carp IP us o kern/131781 net [ndis] ndis keeps dropping the link o kern/131776 net [wi] driver fails to init o kern/131753 net [altq] [panic] kernel panic in hfsc_dequeue o bin/131567 net [socket] [patch] Update for regression/sockets/unix_cm o kern/131549 net ifconfig(8) can't clear 'monitor' mode on the wireless o kern/131536 net [netinet] [patch] kernel does allow manipulation of su o bin/131365 net route(8): route add changes interpretation of network o kern/131310 net [netgraph] [panic] 7.1 panics with mpd netgraph interf o kern/131162 net [ath] Atheros driver bugginess and kernel crashes o kern/131153 net [iwi] iwi doesn't see a wireless network f kern/131087 net [ipw] [panic] ipw / iwi - no sent/received packets; iw f kern/130820 net [ndis] wpa_supplicant(8) returns 'no space on device' o kern/130628 net [nfs] NFS / rpc.lockd deadlock on 7.1-R o conf/130555 net [rc.d] [patch] No good way to set ipfilter variables a o kern/130525 net [ndis] [panic] 64 bit ar5008 ndisgen-erated driver cau o kern/130311 net [wlan_xauth] [panic] hostapd restart causing kernel pa o bin/130159 net [patch] ppp(8) fails to correctly set routes o kern/130109 net [ipfw] Can not set fib for packets originated from loc f kern/130059 net [panic] Leaking 50k mbufs/hour o kern/129750 net [ath] Atheros AR5006 exits on "cannot map register spa f kern/129719 net [nfs] [panic] Panic during shutdown, tcp_ctloutput: in o kern/129580 net [ndis] Netgear WG311v3 (ndis) causes kenel trap at boo o kern/129517 net [ipsec] [panic] double fault / stack overflow o kern/129508 net [carp] [panic] Kernel panic with EtherIP (may be relat o kern/129352 net [xl] [patch] xl0 watchdog timeout o kern/129219 net [ppp] Kernel panic when using kernel mode ppp o kern/129197 net [panic] 7.0 IP stack related panic o kern/129135 net [vge] vge driver on a VIA mini-ITX not working o bin/128954 net ifconfig(8) deletes valid routes o kern/128917 net [wpi] [panic] if_wpi and wpa+tkip causing kernel panic o kern/128884 net [msk] if_msk page fault while in kernel mode o kern/128840 net [igb] page fault under load with igb/LRO o bin/128602 net [an] wpa_supplicant(8) crashes with an(4) o kern/128598 net [bluetooth] WARNING: attempt to net_add_domain(bluetoo o kern/128448 net [nfs] 6.4-RC1 Boot Fails if NFS Hostname cannot be res o conf/128334 net [request] use wpa_cli in the "WPA DHCP" situation o bin/128295 net [patch] ifconfig(8) does not print TOE4 or TOE6 capabi o bin/128001 net wpa_supplicant(8), wlan(4), and wi(4) issues o kern/127928 net [tcp] [patch] TCP bandwidth gets squeezed every time t o kern/127834 net [ixgbe] [patch] wrong error counting o kern/127826 net [iwi] iwi0 driver has reduced performance and connecti o kern/127815 net [gif] [patch] if_gif does not set vlan attributes from o kern/127724 net [rtalloc] rtfree: 0xc5a8f870 has 1 refs f bin/127719 net [arp] arp: Segmentation fault (core dumped) s kern/127587 net [bge] [request] if_bge(4) doesn't support BCM576X fami f kern/127528 net [icmp]: icmp socket receives icmp replies not owned by o bin/127192 net routed(8) removes the secondary alias IP of interface f kern/127145 net [wi]: prism (wi) driver crash at bigger traffic o kern/127102 net [wpi] Intel 3945ABG low throughput o kern/127057 net [udp] Unable to send UDP packet via IPv6 socket to IPv o kern/127050 net [carp] ipv6 does not work on carp interfaces [regressi o kern/126945 net [carp] CARP interface destruction with ifconfig destro o kern/126924 net [an] [patch] printf -> device_printf and simplify prob o kern/126895 net [patch] [ral] Add antenna selection (marked as TBD) o kern/126874 net [vlan]: Zebra problem if ifconfig vlanX destroy o bin/126822 net wpa_supplicant(8): WPA PSK does not work in adhoc mode o kern/126714 net [carp] CARP interface renaming makes system no longer o kern/126695 net rtfree messages and network disruption upon use of if_ o kern/126688 net [ixgbe] [patch] 1.4.7 ixgbe driver panic with 4GB and o kern/126475 net [ath] [panic] ath pcmcia card inevitably panics under o kern/126339 net [ipw] ipw driver drops the connection o kern/126214 net [ath] txpower problem with Atheros wifi card o kern/126075 net [inet] [patch] internet control accesses beyond end of o bin/125922 net [patch] Deadlock in arp(8) o kern/125920 net [arp] Kernel Routing Table loses Ethernet Link status o kern/125845 net [netinet] [patch] tcp_lro_rx() should make use of hard o kern/125816 net [carp] [if_bridge] carp stuck in init when using bridg f kern/125502 net [ral] ifconfig ral0 scan produces no output unless in o kern/125258 net [socket] socket's SO_REUSEADDR option does not work o kern/125239 net [gre] kernel crash when using gre f kern/125195 net [fxp] fxp(4) driver failed to initialize device Intel o kern/124904 net [fxp] EEPROM corruption with Compaq NC3163 NIC o kern/124767 net [iwi] Wireless connection using iwi0 driver (Intel 220 o kern/124753 net [ieee80211] net80211 discards power-save queue packets o kern/124341 net [ral] promiscuous mode for wireless device ral0 looses o kern/124160 net [libc] connect(2) function loops indefinitely o kern/124127 net [msk] watchdog timeout (missed Tx interrupts) -- recov o kern/124021 net [ip6] [panic] page fault in nd6_output() o kern/123968 net [rum] [panic] rum driver causes kernel panic with WPA. p kern/123961 net [vr] [patch] Allow vr interface to handle vlans o kern/123892 net [tap] [patch] No buffer space available o kern/123890 net [ppp] [panic] crash & reboot on work with PPP low-spee o kern/123858 net [stf] [patch] stf not usable behind a NAT o kern/123796 net [ipf] FreeBSD 6.1+VPN+ipnat+ipf: port mapping does not o bin/123633 net ifconfig(8) doesn't set inet and ether address in one f kern/123617 net [tcp] breaking connection when client downloading file o kern/123603 net [tcp] tcp_do_segment and Received duplicate SYN o kern/123559 net [iwi] iwi periodically disassociates/associates [regre o bin/123465 net [ip6] route(8): route add -inet6 -interfac o kern/123463 net [ipsec] [panic] repeatable crash related to ipsec-tool o kern/123429 net [nfe] [hang] "ifconfig nfe up" causes a hard system lo o kern/123347 net [bge] bge1: watchdog timeout -- linkstate changed to D o conf/123330 net [nsswitch.conf] Enabling samba wins in nsswitch.conf c o kern/123256 net [wpi] panic: blockable sleep lock with wpi(4) f kern/123172 net [bce] Watchdog timeout problems with if_bce o kern/123160 net [ip] Panic and reboot at sysctl kern.polling.enable=0 o kern/122989 net [swi] [panic] 6.3 kernel panic in swi1: net o kern/122954 net [lagg] IPv6 EUI64 incorrectly chosen for lagg devices o kern/122928 net [em] interface watchdog timeouts and stops receiving p f kern/122839 net [multicast] FreeBSD 7 multicast routing problem p kern/122794 net [lagg] Kernel panic after brings lagg(8) up if NICs ar o kern/122780 net [lagg] tcpdump on lagg interface during high pps wedge o kern/122772 net [em] em0 taskq panic, tcp reassembly bug causes radix o kern/122743 net [mbuf] [panic] vm_page_unwire: invalid wire count: 0 o kern/122697 net [ath] Atheros card is not well supported o kern/122685 net It is not visible passing packets in tcpdump(1) o kern/122551 net [bge] Broadcom 5715S no carrier on HP BL460c blade usi o kern/122319 net [wi] imposible to enable ad-hoc demo mode with Orinoco o kern/122290 net [netgraph] [panic] Netgraph related "kmem_map too smal f kern/122252 net [ipmi] [bge] IPMI problem with BCM5704 (does not work o kern/122195 net [ed] Alignment problems in if_ed o kern/122058 net [em] [panic] Panic on em1: taskq o kern/122033 net [ral] [lor] Lock order reversal in ral0 at bootup [reg o kern/121983 net [fxp] fxp0 MBUF and PAE o bin/121895 net [patch] rtsol(8)/rtsold(8) doesn't handle managed netw o kern/121872 net [wpi] driver fails to attach on a fujitsu-siemens s711 s kern/121774 net [swi] [panic] 6.3 kernel panic in swi1: net o kern/121706 net [netinet] [patch] "rtfree: 0xc4383870 has 1 refs" emit o kern/121624 net [em] [regression] Intel em WOL fails after upgrade to o kern/121555 net [panic] Fatal trap 12: current process = 12 (swi1: net o kern/121443 net [gif] [lor] icmp6_input/nd6_lookup o kern/121437 net [vlan] Routing to layer-2 address does not work on VLA o bin/121359 net [patch] ppp(8): fix local stack overflow in ppp o kern/121298 net [em] [panic] Fatal trap 12: page fault while in kernel o kern/121257 net [tcp] TSO + natd -> slow outgoing tcp traffic o kern/121181 net [panic] Fatal trap 3: breakpoint instruction fault whi o kern/121080 net [bge] IPv6 NUD problem on multi address config on bge0 o kern/120966 net [rum] kernel panic with if_rum and WPA encryption p docs/120945 net [patch] ip6(4) man page lacks documentation for TCLASS o kern/120566 net [request]: ifconfig(8) make order of arguments more fr o kern/120304 net [netgraph] [patch] netgraph source assumes 32-bit time o kern/120266 net [udp] [panic] gnugk causes kernel panic when closing U o kern/120232 net [nfe] [patch] Bring in nfe(4) to RELENG_6 o kern/120130 net [carp] [panic] carp causes kernel panics in any conste o bin/120060 net routed(8) deletes link-level routes in the presence of o kern/119945 net [rum] [panic] rum device in hostap mode, cause kernel o kern/119791 net [nfs] UDP NFS mount of aliased IP addresses from a Sol o kern/119617 net [nfs] nfs error on wpa network when reseting/shutdown f kern/119516 net [ip6] [panic] _mtx_lock_sleep: recursed on non-recursi o kern/119432 net [arp] route add -host -iface causes arp e o kern/119225 net [wi] 7.0-RC1 no carrier with Prism 2.5 wifi card [regr a bin/118987 net ifconfig(8): ifconfig -l (address_family) does not wor o sparc/118932 net [panic] 7.0-BETA4/sparc-64 kernel panic in rip_output a kern/118879 net [bge] [patch] bge has checksum problems on the 5703 ch o kern/118727 net [netgraph] [patch] [request] add new ng_pf module s kern/117717 net [panic] Kernel panic with Bittorrent client. o kern/117448 net [carp] 6.2 kernel crash [regression] o kern/117423 net [vlan] Duplicate IP on different interfaces o bin/117339 net [patch] route(8): loading routing management commands o kern/117271 net [tap] OpenVPN TAP uses 99% CPU on releng_6 when if_tap o kern/117043 net [em] Intel PWLA8492MT Dual-Port Network adapter EEPROM o kern/116837 net [tun] [panic] [patch] ifconfig tunX destroy: panic o kern/116747 net [ndis] FreeBSD 7.0-CURRENT crash with Dell TrueMobile o bin/116643 net [patch] [request] fstat(1): add INET/INET6 socket deta o kern/116328 net [bge]: Solid hang with bge interface o kern/116185 net [iwi] if_iwi driver leads system to reboot o kern/115239 net [ipnat] panic with 'kmem_map too small' using ipnat o kern/115019 net [netgraph] ng_ether upper hook packet flow stops on ad o kern/115002 net [wi] if_wi timeout. failed allocation (busy bit). ifco o kern/114915 net [patch] [pcn] pcn (sys/pci/if_pcn.c) ethernet driver f f kern/114899 net [bge] bge0: watchdog timeout -- resetting o kern/114839 net [fxp] fxp looses ability to speak with traffic o kern/113895 net [xl] xl0 fails on 6.2-RELEASE but worked fine on 5.5-R o kern/112722 net [ipsec] [udp] IP v4 udp fragmented packet reject o kern/112686 net [patm] patm driver freezes System (FreeBSD 6.2-p4) i38 o kern/112570 net [bge] packet loss with bge driver on BCM5704 chipset o bin/112557 net [patch] ppp(8) lock file should not use symlink name o kern/112528 net [nfs] NFS over TCP under load hangs with "impossible p o kern/111457 net [ral] ral(4) freeze o kern/110140 net [ipw] ipw fails under load o kern/109733 net [bge] bge link state issues [regression] o kern/109470 net [wi] Orinoco Classic Gold PC Card Can't Channel Hop o kern/109308 net [pppd] [panic] Multiple panics kernel ppp suspected [r o kern/109251 net [re] [patch] if_re cardbus card won't attach o bin/108895 net pppd(8): PPPoE dead connections on 6.2 [regression] o kern/108542 net [bce] Huge network latencies with 6.2-RELEASE / STABLE o kern/107944 net [wi] [patch] Forget to unlock mutex-locks o kern/107850 net [bce] bce driver link negotiation is faulty o conf/107035 net [patch] bridge(8): bridge interface given in rc.conf n o kern/106438 net [ipf] ipfilter: keep state does not seem to allow repl o kern/106316 net [dummynet] dummynet with multipass ipfw drops packets o kern/106243 net [nve] double fault panic in if_nve.c on high loads o kern/105945 net Address can disappear from network interface s kern/105943 net Network stack may modify read-only mbuf chain copies o bin/105925 net problems with ifconfig(8) and vlan(4) [regression] o kern/105348 net [ath] ath device stopps TX o kern/104851 net [inet6] [patch] On link routes not configured when usi o kern/104751 net [netgraph] kernel panic, when getting info about my tr o kern/104485 net [bge] Broadcom BCM5704C: Intermittent on newer chip ve o kern/103191 net Unpredictable reboot o kern/103135 net [ipsec] ipsec with ipfw divert (not NAT) encodes a pac o conf/102502 net [netgraph] [patch] ifconfig name does't rename netgrap o kern/102035 net [plip] plip networking disables parallel port printing o kern/101948 net [ipf] [panic] Kernel Panic Trap No 12 Page Fault - cau o kern/100709 net [libc] getaddrinfo(3) should return TTL info o kern/100519 net [netisr] suggestion to fix suboptimal network polling o kern/98978 net [ipf] [patch] ipfilter drops OOW packets under 6.1-Rel o kern/98597 net [inet6] Bug in FreeBSD 6.1 IPv6 link-local DAD procedu o bin/98218 net wpa_supplicant(8) blacklist not working f bin/97392 net ppp(8) hangs instead terminating o kern/97306 net [netgraph] NG_L2TP locks after connection with failed f kern/96268 net [socket] TCP socket performance drops by 3000% if pack o kern/96030 net [bfe] [patch] Install hangs with Broadcomm 440x NIC in o kern/95519 net [ral] ral0 could not map mbuf o kern/95288 net [pppd] [tty] [panic] if_ppp panic in sys/kern/tty_subr o kern/95277 net [netinet] [patch] IP Encapsulation mask_match() return o kern/95267 net packet drops periodically appear s kern/94863 net [bge] [patch] hack to get bge(4) working on IBM e326m o kern/94162 net [bge] 6.x kenel stale with bge(4) o kern/93886 net [ath] Atheros/D-Link DWL-G650 long delay to associate f kern/93378 net [tcp] Slow data transfer in Postfix and Cyrus IMAP (wo o kern/93019 net [ppp] ppp and tunX problems: no traffic after restarti o kern/92880 net [libc] [patch] almost rewritten inet_network(3) functi f kern/92552 net A serious bug in most network drivers from 5.X to 6.X s kern/92279 net [dc] Core faults everytime I reboot, possible NIC issu o kern/92090 net [bge] bge0: watchdog timeout -- resetting o kern/91859 net [ndis] if_ndis does not work with Asus WL-138 s kern/91777 net [ipf] [patch] wrong behaviour with skip rule inside an o kern/91594 net [em] FreeBSD > 5.4 w/ACPI fails to detect Intel Pro/10 o kern/91364 net [ral] [wep] WF-511 RT2500 Card PCI and WEP o kern/91311 net [aue] aue interface hanging o kern/90890 net [vr] Problems with network: vr0: tx shutdown timeout s kern/90086 net [hang] 5.4p8 on supermicro P8SCT hangs during boot if f kern/88082 net [ath] [panic] cts protection for ath0 causes panic o kern/87521 net [ipf] [panic] using ipfilter "auth" keyword leads to k o kern/87506 net [vr] [patch] Fix alias support on vr interfaces o kern/87194 net [fxp] fxp(4) promiscuous mode seems to corrupt hw-csum s kern/86920 net [ndis] ifconfig: SIOCS80211: Invalid argument [regress o kern/86103 net [ipf] Illegal NAT Traversal in IPFilter o kern/85780 net 'panic: bogus refcnt 0' in routing/ipv6 o bin/85445 net ifconfig(8): deprecated keyword to ifconfig inoperativ o kern/85266 net [xe] [patch] xe(4) driver does not recognise Xircom XE o kern/84202 net [ed] [patch] Holtek HT80232 PCI NIC recognition on Fre o bin/82975 net route change does not parse classfull network as given o kern/82497 net [vge] vge(4) on AMD64 only works when loaded late, not f kern/81644 net [vge] vge(4) does not work properly when loaded as a K s kern/81147 net [net] [patch] em0 reinitialization while adding aliase o kern/80853 net [ed] [patch] add support for Compex RL2000/ISA in PnP o kern/79895 net [ipf] 5.4-RC2 breaks ipfilter NAT when using netgraph f kern/79262 net [dc] Adaptec ANA-6922 not fully supported o bin/79228 net [patch] extend arp(8) to be able to create blackhole r o kern/78090 net [ipf] ipf filtering on bridged packets doesn't work if p kern/77913 net [wi] [patch] Add the APDL-325 WLAN pccard to wi(4) o kern/77341 net [ip6] problems with IPV6 implementation o kern/77273 net [ipf] ipfilter breaks ipv6 statefull filtering on 5.3 s kern/77195 net [ipf] [patch] ipfilter ioctl SIOCGNATL does not match o kern/75873 net Usability problem with non-RFC-compliant IP spoof prot s kern/75407 net [an] an(4): no carrier after short time f kern/73538 net [bge] problem with the Broadcom BCM5788 Gigabit Ethern o kern/71469 net default route to internet magically disappears with mu o kern/70904 net [ipf] ipfilter ipnat problem with h323 proxy support o kern/64556 net [sis] if_sis short cable fix problems with NetGear FA3 s kern/60293 net [patch] FreeBSD arp poison patch o kern/54383 net [nfs] [patch] NFS root configurations without dynamic f i386/45773 net [bge] Softboot causes autoconf failure on Broadcom 570 s bin/41647 net ifconfig(8) doesn't accept lladdr along with inet addr s kern/39937 net ipstealth issue a kern/38554 net [patch] changing interface ipaddress doesn't seem to w o kern/35442 net [sis] [patch] Problem transmitting runts in if_sis dri o kern/34665 net [ipf] [hang] ipfilter rcmd proxy "hangs". o kern/31647 net [libc] socket calls can return undocumented EINVAL o kern/30186 net [libc] getaddrinfo(3) does not handle incorrect servna o kern/27474 net [ipf] [ppp] Interactive use of user PPP and ipfilter c o conf/23063 net [arp] [patch] for static ARP tables in rc.network 292 problems total. From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 12:30:04 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AD86310656E6 for ; Mon, 13 Apr 2009 12:30:04 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 9AD658FC19 for ; Mon, 13 Apr 2009 12:30:04 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3DCU48p098754 for ; Mon, 13 Apr 2009 12:30:04 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3DCU4RT098751; Mon, 13 Apr 2009 12:30:04 GMT (envelope-from gnats) Date: Mon, 13 Apr 2009 12:30:04 GMT Message-Id: <200904131230.n3DCU4RT098751@freefall.freebsd.org> To: freebsd-net@FreeBSD.org From: "Luiz Otavio O Souza" Cc: Subject: Re: bin/130159: [patch] ppp(8) fails to correctly set routes X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Luiz Otavio O Souza List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 12:30:06 -0000 The following reply was made to PR bin/130159; it has been noted by GNATS. From: "Luiz Otavio O Souza" To: "Qing Li" , "Brett Glass" , Cc: Subject: Re: bin/130159: [patch] ppp(8) fails to correctly set routes Date: Mon, 13 Apr 2009 09:01:21 -0300 > Note: With the patch as written, the "gateway" (G) flag is set in the > routing table entry. This does not seem to cause problems, but the flag > should not be set because the "tun" interface is acting as a bridge, not a > gateway. Brett, This patch doesn't fix or change the gateway flag, it only set the interface in route update message. The gateway problem was fixed in r186308 by Qing Li (http://svn.freebsd.org/viewvc/base/head/usr.sbin/ppp/route.c?sortdir=down&r1=186119&r2=186308&sortby=rev - check the commit log) Thanks, Luiz From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 14:20:44 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 84AA51065796 for ; Mon, 13 Apr 2009 14:20:44 +0000 (UTC) (envelope-from pcc@gmx.net) Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by mx1.freebsd.org (Postfix) with SMTP id BF4DD8FC13 for ; Mon, 13 Apr 2009 14:20:43 +0000 (UTC) (envelope-from pcc@gmx.net) Received: (qmail 9114 invoked by uid 0); 13 Apr 2009 13:54:02 -0000 Received: from 84.163.251.232 by www170.gmx.net with HTTP; Mon, 13 Apr 2009 15:54:02 +0200 (CEST) Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="iso-8859-1" Date: Mon, 13 Apr 2009 15:54:02 +0200 From: "Peter Cornelius" Message-ID: <20090413135402.78610@gmx.net> MIME-Version: 1.0 To: FreeBSD-Net X-Authenticated: #491680 X-Flags: 0001 X-Mailer: WWW-Mail 6100 (Global Message Exchange) X-Priority: 5 X-Provags-ID: V01U2FsdGVkX1+wr2Qdoc+w+57xDfSx88xrrcUUsQWqjBfndBQacA DBrcTR2o3SlCXORf9kFep2YWVZknLFoxzLMw== X-GMX-UID: wnHafI5TeWUoXsjhdHVzPTwxU3U4Nw/J X-FuHaFi: 0.6899999999999999 Subject: Multiple default routes / Force external routing X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 14:20:47 -0000 Dear list, I've poked about for weeks and asked similar questions in -questions and elsewhere without avail. Probably using the wrong keys to search and ask: I have set up a box with various vlan interfaces on it. I naively expected to be able to set individual "default" routes and route between them via an *external* router (and filter packets there etc.) but somehow all packets seem to "short-circuit" locally, and I don't seem to be able to see why this is so and how I prevent that. I also fiddled with FIBs (setfib(1)) but I think I need to correct my naive interpretation of FIBs :). Anyways, it did not help my interpretation of the above, at least not at first sight (but may wrt the default route if I get the short-circuit out of the way). Any help, pointers etc. appreciated (if need be off-list ok)... Thanks a lot, Peter. -- Psssst! Schon vom neuen GMX MultiMessenger gehЖrt? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger01 From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 14:30:03 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 670E1106567C for ; Mon, 13 Apr 2009 14:30:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 54A2F8FC0C for ; Mon, 13 Apr 2009 14:30:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3DEU3Ib060109 for ; Mon, 13 Apr 2009 14:30:03 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3DEU3gw060098; Mon, 13 Apr 2009 14:30:03 GMT (envelope-from gnats) Date: Mon, 13 Apr 2009 14:30:03 GMT Message-Id: <200904131430.n3DEU3gw060098@freefall.freebsd.org> To: freebsd-net@FreeBSD.org From: Brett Glass Cc: Subject: Re: bin/130159: [patch] ppp(8) fails to correctly set routes X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Brett Glass List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 14:30:04 -0000 The following reply was made to PR bin/130159; it has been noted by GNATS. From: Brett Glass To: "Luiz Otavio O Souza" , "Qing Li" , Cc: Subject: Re: bin/130159: [patch] ppp(8) fails to correctly set routes Date: Mon, 13 Apr 2009 08:20:40 -0600 At 06:01 AM 4/13/2009, Luiz Otavio O Souza wrote: >>Note: With the patch as written, the "gateway" (G) flag is set in >>the routing table entry. This does not seem to cause problems, >>but the flag should not be set because the "tun" interface is >>acting as a bridge, not a gateway. > >Brett, > >This patch doesn't fix or change the gateway flag, it only set the >interface in route update message. > >The gateway problem was fixed in r186308 by Qing Li >(http://svn.freebsd.org/viewvc/base/head/usr.sbin/ppp/route.c?sortdir=down&r1=186119&r2=186308&sortby=rev >- check the commit log) > >Thanks, >Luiz Luiz, Qing Li's patch must not have made it into 7.1-RELEASE, because I had to apply it manually. All three patches (your two plus Qing Li's) should be committed and MFCed before 7.2-RELEASE, because we (and others, I'm sure) really need PPP to work properly. --Brett Glass From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 14:30:11 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AD705106566C for ; Mon, 13 Apr 2009 14:30:11 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 9C3CB8FC21 for ; Mon, 13 Apr 2009 14:30:11 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3DEUB8U060958 for ; Mon, 13 Apr 2009 14:30:11 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3DEUBfK060947; Mon, 13 Apr 2009 14:30:11 GMT (envelope-from gnats) Date: Mon, 13 Apr 2009 14:30:11 GMT Message-Id: <200904131430.n3DEUBfK060947@freefall.freebsd.org> To: freebsd-net@FreeBSD.org From: Brett Glass Cc: Subject: Re: bin/130159: [patch] ppp(8) fails to correctly set routes X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Brett Glass List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 14:30:12 -0000 The following reply was made to PR bin/130159; it has been noted by GNATS. From: Brett Glass To: "Luiz Otavio O Souza" , "Qing Li" , Cc: Subject: Re: bin/130159: [patch] ppp(8) fails to correctly set routes Date: Mon, 13 Apr 2009 08:27:08 -0600 P.S. -- I am still seeing the gateway flag on PPP interfaces after installing Qing Li's patch. Here is the output of "netstat -ran" (note the bottom entries): Internet: Destination Gateway Flags Refs Use Netif Expire default 66.119.58.1 UGS 0 488 xl0 66.119.58.0/24 link#1 UC 0 0 xl0 66.119.58.1 00:02:b3:66:03:63 UHLW 2 0 xl0 1198 66.119.58.13 88:17:20:22:38:11 UHLW 1 97 xl0 1102 66.119.58.254 00:02:b3:66:03:63 UHLW 1 63 xl0 921 127.0.0.1 127.0.0.1 UH 0 34 lo0 172.17.0.0/16 link#2 UC 0 0 dc0 172.17.0.2/32 link#2 UC 0 0 dc0 172.17.0.3/32 link#2 UC 0 0 dc0 172.17.0.4/32 link#2 UC 0 0 dc0 172.17.2.53 00:60:b3:5e:20:bb UHLW 1 131 dc0 994 172.17.250.21 00:19:3b:80:36:68 UHLW 1 2 dc0 1093 172.17.250.22 00:19:3b:80:37:c6 UHLW 1 2035 dc0 1163 172.17.250.23 00:19:3b:80:37:c2 UHLW 1 2 dc0 1128 172.18.0.1 172.18.0.1 UH 2 0 lo0 172.18.5.1 172.18.0.1 UGH 0 128 tun0 172.18.217.33 172.18.0.1 UGH 0 596 tun2 172.18.217.62 172.18.0.1 UGH 0 18 tun1 The last two entries are PPTP sessions. They should say "UH", not "UGH". --Brett From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 16:40:03 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2CC4E106566C for ; Mon, 13 Apr 2009 16:40:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 179A28FC15 for ; Mon, 13 Apr 2009 16:40:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3DGe2OM039667 for ; Mon, 13 Apr 2009 16:40:02 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3DGe2VG039666; Mon, 13 Apr 2009 16:40:02 GMT (envelope-from gnats) Date: Mon, 13 Apr 2009 16:40:02 GMT Message-Id: <200904131640.n3DGe2VG039666@freefall.freebsd.org> To: freebsd-net@FreeBSD.org From: Rui Paulo Cc: Subject: Re: kern/133204: [msk] msk driver timeouts X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Rui Paulo List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 16:40:03 -0000 The following reply was made to PR kern/133204; it has been noted by GNATS. From: Rui Paulo To: bug-followup@FreeBSD.org, robert@heron.pl Cc: Subject: Re: kern/133204: [msk] msk driver timeouts Date: Mon, 13 Apr 2009 17:31:16 +0100 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --Apple-Mail-4--659928131 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Just FYI, you can also try to disable MSI in the msk interface. This should make the timeouts disappear and you still keep hw csums. -- Rui Paulo --Apple-Mail-4--659928131 content-type: application/pgp-signature; x-mac-type=70674453; name=PGP.sig content-description: This is a digitally signed message part content-disposition: inline; filename=PGP.sig content-transfer-encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) iEYEARECAAYFAknjaNQACgkQfD8M/ASTygKbqwCgsEa2v6h52Dk3s7DuxwVjyf+I ba8AnROOa7jSRwg9Atl1KupNoMVcvK1R =NjD6 -----END PGP SIGNATURE----- --Apple-Mail-4--659928131-- From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 17:31:05 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C0273106564A; Mon, 13 Apr 2009 17:31:05 +0000 (UTC) (envelope-from bz@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 961998FC12; Mon, 13 Apr 2009 17:31:05 +0000 (UTC) (envelope-from bz@FreeBSD.org) Received: from freefall.freebsd.org (bz@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3DHV5F8011425; Mon, 13 Apr 2009 17:31:05 GMT (envelope-from bz@freefall.freebsd.org) Received: (from bz@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3DHV5HX011418; Mon, 13 Apr 2009 17:31:05 GMT (envelope-from bz) Date: Mon, 13 Apr 2009 17:31:05 GMT Message-Id: <200904131731.n3DHV5HX011418@freefall.freebsd.org> To: bz@FreeBSD.org, freebsd-net@FreeBSD.org, bz@FreeBSD.org From: bz@FreeBSD.org Cc: Subject: Re: bin/130159: [patch] ppp(8) fails to correctly set routes X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 17:31:07 -0000 Synopsis: [patch] ppp(8) fails to correctly set routes Responsible-Changed-From-To: freebsd-net->bz Responsible-Changed-By: bz Responsible-Changed-When: Mon Apr 13 17:30:40 UTC 2009 Responsible-Changed-Why: I promised re@ to look but I cannot promise that it'll make 7.2-R. http://www.freebsd.org/cgi/query-pr.cgi?pr=130159 From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 20:09:35 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6CB141065670 for ; Mon, 13 Apr 2009 20:09:35 +0000 (UTC) (envelope-from sthaug@nethelp.no) Received: from bizet.nethelp.no (bizet.nethelp.no [195.1.209.33]) by mx1.freebsd.org (Postfix) with SMTP id C50A88FC1A for ; Mon, 13 Apr 2009 20:09:34 +0000 (UTC) (envelope-from sthaug@nethelp.no) Received: (qmail 82706 invoked from network); 13 Apr 2009 20:09:32 -0000 Received: from bizet.nethelp.no (HELO localhost) (195.1.209.33) by bizet.nethelp.no with SMTP; 13 Apr 2009 20:09:32 -0000 Date: Mon, 13 Apr 2009 22:09:32 +0200 (CEST) Message-Id: <20090413.220932.74699777.sthaug@nethelp.no> To: pcc@gmx.net From: sthaug@nethelp.no In-Reply-To: <20090413135402.78610@gmx.net> References: <20090413135402.78610@gmx.net> X-Mailer: Mew version 3.3 on Emacs 21.3 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org Subject: Re: Multiple default routes / Force external routing X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 20:09:35 -0000 > I've poked about for weeks and asked similar questions in -questions and elsewhere without avail. Probably using the wrong keys to search and ask: > > I have set up a box with various vlan interfaces on it. I naively expected to be able to set individual "default" routes and route between them via an *external* router (and filter packets there etc.) but somehow all packets seem to "short-circuit" locally, and I don't seem to be able to see why this is so and how I prevent that. I found this behavior also, and it breaks POLA pretty badly. There are several problems with the multiple routing table support (via setfib) that I see: - I found I needed "options ROUTETABLES= ..." to have additional routing tables. I could not find this option documented anywhere. - The standard behavior when adding new routes (via ifconfig or route command) is that the route is added to all routing tables. Coming from a router/MPLS/L3VPN background, this is extremely counterintuitive. I found I needed to set the sysctl net.add_addr_allfibs to 0 to avoid this behavior. - Having two routing tables (one default, one table number 1 via setfib) I also expected to be able to route between these via external router. Pinging from the default routing table to routing table 1, traffic from the default routing table goes out to external router and in via other interface (in routing table 1) - but the ping reply is returned via the loopback interface on the FreeBSD host, without going out to the router. I assume this is the "short-circuit" you're talking about, and I find this behavior also very counterintuitive. If I explicitly ping from routing table 1 with ping prefixed by setfib 1, everything works as expected (traffic both ways go via external router). Steinar Haug, Nethelp consulting, sthaug@nethelp.no From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 22:50:04 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 597D610656C1 for ; Mon, 13 Apr 2009 22:50:04 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 4565B8FC1B for ; Mon, 13 Apr 2009 22:50:04 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3DMo4Tk037585 for ; Mon, 13 Apr 2009 22:50:04 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3DMo4GP037584; Mon, 13 Apr 2009 22:50:04 GMT (envelope-from gnats) Date: Mon, 13 Apr 2009 22:50:04 GMT Message-Id: <200904132250.n3DMo4GP037584@freefall.freebsd.org> To: freebsd-net@FreeBSD.org From: dfilter@FreeBSD.ORG (dfilter service) Cc: Subject: Re: kern/131310: commit references a PR X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: dfilter service List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 22:50:05 -0000 The following reply was made to PR kern/131310; it has been noted by GNATS. From: dfilter@FreeBSD.ORG (dfilter service) To: bug-followup@FreeBSD.org Cc: Subject: Re: kern/131310: commit references a PR Date: Mon, 13 Apr 2009 22:47:12 +0000 (UTC) Author: mlaier Date: Mon Apr 13 22:17:03 2009 New Revision: 191025 URL: http://svn.freebsd.org/changeset/base/191025 Log: MFH r190903 & r190895: Remove interfaces from interface groups on detach. Reported by: various Submitted by: Mikolaj Golub (r190895) PR: kern/130977, kern/131310 Approved by: re (gnn) Modified: stable/7/sys/ (props changed) stable/7/sys/contrib/pf/ (props changed) stable/7/sys/dev/ath/ath_hal/ (props changed) stable/7/sys/dev/cxgb/ (props changed) stable/7/sys/net/if.c Modified: stable/7/sys/net/if.c ============================================================================== --- stable/7/sys/net/if.c Mon Apr 13 21:04:53 2009 (r191024) +++ stable/7/sys/net/if.c Mon Apr 13 22:17:03 2009 (r191025) @@ -128,6 +128,7 @@ static void if_start_deferred(void *cont static void do_link_state_change(void *, int); static int if_getgroup(struct ifgroupreq *, struct ifnet *); static int if_getgroupmembers(struct ifgroupreq *); +static void if_delgroups(struct ifnet *); #ifdef INET6 /* * XXX: declare here to avoid to include many inet6 related files.. @@ -828,6 +829,7 @@ if_detach(struct ifnet *ifp) rt_ifannouncemsg(ifp, IFAN_DEPARTURE); EVENTHANDLER_INVOKE(ifnet_departure_event, ifp); devctl_notify("IFNET", ifp->if_xname, "DETACH", NULL); + if_delgroups(ifp); IF_AFDATA_LOCK(ifp); for (dp = domains; dp; dp = dp->dom_next) { @@ -963,6 +965,53 @@ if_delgroup(struct ifnet *ifp, const cha } /* + * Remove an interface from all groups + */ +static void +if_delgroups(struct ifnet *ifp) +{ + struct ifg_list *ifgl; + struct ifg_member *ifgm; + char groupname[IFNAMSIZ]; + + IFNET_WLOCK(); + while (!TAILQ_EMPTY(&ifp->if_groups)) { + ifgl = TAILQ_FIRST(&ifp->if_groups); + + strlcpy(groupname, ifgl->ifgl_group->ifg_group, IFNAMSIZ); + + IF_ADDR_LOCK(ifp); + TAILQ_REMOVE(&ifp->if_groups, ifgl, ifgl_next); + IF_ADDR_UNLOCK(ifp); + + TAILQ_FOREACH(ifgm, &ifgl->ifgl_group->ifg_members, ifgm_next) + if (ifgm->ifgm_ifp == ifp) + break; + + if (ifgm != NULL) { + TAILQ_REMOVE(&ifgl->ifgl_group->ifg_members, ifgm, + ifgm_next); + free(ifgm, M_TEMP); + } + + if (--ifgl->ifgl_group->ifg_refcnt == 0) { + TAILQ_REMOVE(&ifg_head, ifgl->ifgl_group, ifg_next); + EVENTHANDLER_INVOKE(group_detach_event, + ifgl->ifgl_group); + free(ifgl->ifgl_group, M_TEMP); + } + IFNET_WUNLOCK(); + + free(ifgl, M_TEMP); + + EVENTHANDLER_INVOKE(group_change_event, groupname); + + IFNET_WLOCK(); + } + IFNET_WUNLOCK(); +} + +/* * Stores all groups from an interface in memory pointed * to by data */ _______________________________________________ svn-src-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/svn-src-all To unsubscribe, send any mail to "svn-src-all-unsubscribe@freebsd.org" From owner-freebsd-net@FreeBSD.ORG Mon Apr 13 23:35:55 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 75D001065676; Mon, 13 Apr 2009 23:35:55 +0000 (UTC) (envelope-from mlaier@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 48CE28FC19; Mon, 13 Apr 2009 23:35:55 +0000 (UTC) (envelope-from mlaier@FreeBSD.org) Received: from freefall.freebsd.org (mlaier@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3DNZttt004988; Mon, 13 Apr 2009 23:35:55 GMT (envelope-from mlaier@freefall.freebsd.org) Received: (from mlaier@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3DNZtMQ004984; Mon, 13 Apr 2009 23:35:55 GMT (envelope-from mlaier) Date: Mon, 13 Apr 2009 23:35:55 GMT Message-Id: <200904132335.n3DNZtMQ004984@freefall.freebsd.org> To: dreamer.two@gmail.com, mlaier@FreeBSD.org, freebsd-net@FreeBSD.org From: mlaier@FreeBSD.org Cc: Subject: Re: kern/131310: [netgraph] [panic] 7.1 panics with mpd netgraph interface changes X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2009 23:35:56 -0000 Synopsis: [netgraph] [panic] 7.1 panics with mpd netgraph interface changes State-Changed-From-To: open->closed State-Changed-By: mlaier State-Changed-When: Mon Apr 13 23:35:02 UTC 2009 State-Changed-Why: Fix commited to head and stable/7. Thanks. http://www.freebsd.org/cgi/query-pr.cgi?pr=131310 From owner-freebsd-net@FreeBSD.ORG Tue Apr 14 04:20:08 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 646B91065672 for ; Tue, 14 Apr 2009 04:20:08 +0000 (UTC) (envelope-from rainofchaos@gmail.com) Received: from qw-out-2122.google.com (qw-out-2122.google.com [74.125.92.27]) by mx1.freebsd.org (Postfix) with ESMTP id 1A42C8FC16 for ; Tue, 14 Apr 2009 04:20:07 +0000 (UTC) (envelope-from rainofchaos@gmail.com) Received: by qw-out-2122.google.com with SMTP id 9so1685182qwb.7 for ; Mon, 13 Apr 2009 21:20:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=LJDiiaYeRpx/8j7YXQcKRWCGKnCknu7N4bT+vJJ/wLI=; b=ee3H9SZf5kbysFI7wxUxVJ/dmg1O4VzGtnLb8XzOyrbyjknJ92SdbS/LWLpLw82xaM sM+OlR1eo0kzg8WAyNhA/4/Mqar0KoluSa4BNlG8iP43JXmdS5VvRfqY0184x96vYj0u aV7ziIc0Zh1MAh8njj3Z2apXu0n372/cU104s= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=orJElzvqvKDvtW7+tpjP8wKtzuMciJGw7cgFFvxZ5hH8GW0XS93mMto5FIyQNPJKRJ 4IkbMRQO12F6KxBMcDNQE/nvLi3K4GxI/l+1L0Ixv5uH3AFcPuhuLm9FbXeTIStX7cPI ftybgpU3nwVQOoJSb0T3NSNmM8zJ3bcKKvTvU= MIME-Version: 1.0 Received: by 10.220.100.6 with SMTP id w6mr7313236vcn.59.1239681356234; Mon, 13 Apr 2009 20:55:56 -0700 (PDT) Date: Tue, 14 Apr 2009 11:55:55 +0800 Message-ID: From: Leon Feng To: freebsd-net@freebsd.org Content-Type: multipart/mixed; boundary=0016e647eb6edf7f4504677bce39 Subject: [vge] VIA VT6130 only auto negotiating to 1000baseT after down/up X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2009 04:20:08 -0000 --0016e647eb6edf7f4504677bce39 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Hi, I am running CURRENT r190987 on VIA EPIA board with VT6130 chip. I found two problems: 1. After normal boot, vge only auto negotiate to 100baseTX. Then # ifconfig vge1 down # ifconfig vge1 up And vge1 will auto negotiate to 1000baseT. 2. After reboot the system, there is an error message: " savecore: reboot after panic: mutex vge0 not owned at /usr/src/sys/modules/vge/../../dev/vge/if_vge.c:2395" Do not know whether these two are related. Any one has an idea? dmesg attached. thanks, Leon Feng --0016e647eb6edf7f4504677bce39 Content-Type: application/octet-stream; name=dmesg Content-Disposition: attachment; filename=dmesg Content-Transfer-Encoding: base64 X-Attachment-Id: f_fti1vbx00 Q29weXJpZ2h0IChjKSAxOTkyLTIwMDkgVGhlIEZyZWVCU0QgUHJvamVjdC4KQ29weXJpZ2h0IChj KSAxOTc5LCAxOTgwLCAxOTgzLCAxOTg2LCAxOTg4LCAxOTg5LCAxOTkxLCAxOTkyLCAxOTkzLCAx OTk0CglUaGUgUmVnZW50cyBvZiB0aGUgVW5pdmVyc2l0eSBvZiBDYWxpZm9ybmlhLiBBbGwgcmln aHRzIHJlc2VydmVkLgpGcmVlQlNEIGlzIGEgcmVnaXN0ZXJlZCB0cmFkZW1hcmsgb2YgVGhlIEZy ZWVCU0QgRm91bmRhdGlvbi4KRnJlZUJTRCA4LjAtQ1VSUkVOVCAjMjYgcjE5MDk4NzoxOTEwMzU6 IFR1ZSBBcHIgMTQgMTE6MTI6NTggVVRDIDIwMDkKICAgIHJvb3RAOi91c3Ivc3JjL3N5cy9pMzg2 L2NvbXBpbGUvR0VORVJJQwpXQVJOSU5HOiBXSVRORVNTIG9wdGlvbiBlbmFibGVkLCBleHBlY3Qg cmVkdWNlZCBwZXJmb3JtYW5jZS4KVGltZWNvdW50ZXIgImk4MjU0IiBmcmVxdWVuY3kgMTE5MzE4 MiBIeiBxdWFsaXR5IDAKQ1BVOiBWSUEgRXN0aGVyIHByb2Nlc3NvciAxNTAwTUh6ICgxNTAwLjAy LU1IeiA2ODYtY2xhc3MgQ1BVKQogIE9yaWdpbiA9ICJDZW50YXVySGF1bHMiICBJZCA9IDB4NmE5 ICBTdGVwcGluZyA9IDkKICBGZWF0dXJlcz0weGE3YzliYWZmPEZQVSxWTUUsREUsUFNFLFRTQyxN U1IsUEFFLE1DRSxBUElDLFNFUCxNVFJSLFBHRSxDTU9WLFBBVCxDTEZMVVNILEFDUEksTU1YLEZY U1IsU1NFLFNTRTIsVE0sUEJFPgogIEZlYXR1cmVzMj0weDE4MTxTU0UzLEVTVCxUTTI+CiAgVklB IFBhZGxvY2sgRmVhdHVyZXM9MHgzZmNjPFJORyxBRVMsQUVTLUNUUixTSEExLFNIQTI1NixSU0E+ CnJlYWwgbWVtb3J5ICA9IDQ2ODI1NDcyMCAoNDQ2IE1CKQphdmFpbCBtZW1vcnkgPSA0NDkwMjgw OTYgKDQyOCBNQikKa2JkMSBhdCBrYmRtdXgwCmFjcGkwOiA8Q043MDAgQVdSREFDUEk+IG9uIG1v dGhlcmJvYXJkCmFjcGkwOiBbSVRIUkVBRF0KYWNwaTA6IFBvd2VyIEJ1dHRvbiAoZml4ZWQpCmFj cGkwOiByZXNlcnZhdGlvbiBvZiAwLCBhMDAwMCAoMykgZmFpbGVkCmFjcGkwOiByZXNlcnZhdGlv biBvZiAxMDAwMDAsIDFiZGUwMDAwICgzKSBmYWlsZWQKVGltZWNvdW50ZXIgIkFDUEktZmFzdCIg ZnJlcXVlbmN5IDM1Nzk1NDUgSHogcXVhbGl0eSAxMDAwCmFjcGlfdGltZXIwOiA8MjQtYml0IHRp bWVyIGF0IDMuNTc5NTQ1TUh6PiBwb3J0IDB4NDA4LTB4NDBiIG9uIGFjcGkwCmFjcGlfYnV0dG9u MDogPFBvd2VyIEJ1dHRvbj4gb24gYWNwaTAKYWNwaV9idXR0b24xOiA8U2xlZXAgQnV0dG9uPiBv biBhY3BpMApwY2liMDogPEFDUEkgSG9zdC1QQ0kgYnJpZGdlPiBwb3J0IDB4Y2Y4LTB4Y2ZmIG9u IGFjcGkwCnBjaV9saW5rMjogQklPUyBJUlEgNSBmb3IgMC4xNi5JTlRDIGlzIGludmFsaWQKcGNp MDogPEFDUEkgUENJIGJ1cz4gb24gcGNpYjAKYWdwMDogPFZJQSAzMzE0IChQNE04MDBDRSkgaG9z dCB0byBQQ0kgYnJpZGdlPiBvbiBob3N0YjAKYWdwMDogYXBlcnR1cmUgc2l6ZSBpcyAxMjhNCnBj aWIxOiA8UENJLVBDSSBicmlkZ2U+IGF0IGRldmljZSAxLjAgb24gcGNpMApwY2kxOiA8UENJIGJ1 cz4gb24gcGNpYjEKdmdhcGNpMDogPFZHQS1jb21wYXRpYmxlIGRpc3BsYXk+IG1lbSAweGQ4MDAw MDAwLTB4ZGJmZmZmZmYsMHhkZDAwMDAwMC0weGRkZmZmZmZmIGlycSAxMSBhdCBkZXZpY2UgMC4w IG9uIHBjaTEKYXRhcGNpMDogPFZJQSBBSENJIGNvbnRyb2xsZXI+IHBvcnQgMHhmYzAwLTB4ZmMw NywweGY4MDAtMHhmODAzLDB4ZjQwMC0weGY0MDcsMHhmMDAwLTB4ZjAwMywweGVjMDAtMHhlYzBm IG1lbSAweGRmZmZmMDAwLTB4ZGZmZmYzZmYgaXJxIDEwIGF0IGRldmljZSAxNS4wIG9uIHBjaTAK YXRhcGNpMDogW0lUSFJFQURdCmF0YXBjaTA6IEFIQ0kgVmVyc2lvbiAwMS4wMCBjb250cm9sbGVy IHdpdGggNCBwb3J0cyBQTSBzdXBwb3J0ZWQKYXRhMjogPEFUQSBjaGFubmVsIDA+IG9uIGF0YXBj aTAKYXRhMjogcG9ydCBpcyBub3QgcmVhZHkgKHRpbWVvdXQgMG1zKSB0ZmQgPSAwMDAwMDFkMAph dGEyOiBzb2Z0d2FyZSByZXNldCBjbGVhciB0aW1lb3V0CmF0YTI6IFtJVEhSRUFEXQphdGEzOiA8 QVRBIGNoYW5uZWwgMT4gb24gYXRhcGNpMAphdGEzOiBbSVRIUkVBRF0KYXRhNDogPEFUQSBjaGFu bmVsIDI+IG9uIGF0YXBjaTAKYXRhNDogW0lUSFJFQURdCmF0YTU6IDxBVEEgY2hhbm5lbCAzPiBv biBhdGFwY2kwCmF0YTU6IFtJVEhSRUFEXQphdGFwY2kxOiA8VklBIEFUQSBjb250cm9sbGVyPiBw b3J0IDB4MWYwLTB4MWY3LDB4M2Y2LDB4MTcwLTB4MTc3LDB4Mzc2LDB4ZTgwMC0weGU4MGYgYXQg ZGV2aWNlIDE1LjEgb24gcGNpMAphdGEwOiA8QVRBIGNoYW5uZWwgMD4gb24gYXRhcGNpMQphdGEw OiBbSVRIUkVBRF0KYXRhMTogPEFUQSBjaGFubmVsIDE+IG9uIGF0YXBjaTEKYXRhMTogW0lUSFJF QURdCnVoY2kwOiA8VklBIDgzQzU3MiBVU0IgY29udHJvbGxlcj4gcG9ydCAweGU0MDAtMHhlNDFm IGlycSAxMSBhdCBkZXZpY2UgMTYuMCBvbiBwY2kwCnVoY2kwOiBbSVRIUkVBRF0KdWhjaTA6IExl Z1N1cCA9IDB4MDAwYgp1c2J1czA6IDxWSUEgODNDNTcyIFVTQiBjb250cm9sbGVyPiBvbiB1aGNp MAp1aGNpMTogPFZJQSA4M0M1NzIgVVNCIGNvbnRyb2xsZXI+IHBvcnQgMHhlMDAwLTB4ZTAxZiBp cnEgNyBhdCBkZXZpY2UgMTYuMSBvbiBwY2kwCnVoY2kxOiBbSVRIUkVBRF0KdWhjaTE6IExlZ1N1 cCA9IDB4MDAwMAp1c2J1czE6IDxWSUEgODNDNTcyIFVTQiBjb250cm9sbGVyPiBvbiB1aGNpMQp1 aGNpMjogPFZJQSA4M0M1NzIgVVNCIGNvbnRyb2xsZXI+IHBvcnQgMHhkYzAwLTB4ZGMxZiBpcnEg MTAgYXQgZGV2aWNlIDE2LjIgb24gcGNpMAp1aGNpMjogW0lUSFJFQURdCnVoY2kyOiBMZWdTdXAg PSAweDAwMDAKdXNidXMyOiA8VklBIDgzQzU3MiBVU0IgY29udHJvbGxlcj4gb24gdWhjaTIKdWhj aTM6IDxWSUEgODNDNTcyIFVTQiBjb250cm9sbGVyPiBwb3J0IDB4ZDgwMC0weGQ4MWYgaXJxIDcg YXQgZGV2aWNlIDE2LjMgb24gcGNpMAp1aGNpMzogW0lUSFJFQURdCnVoY2kzOiBMZWdTdXAgPSAw eDAwMDAKdXNidXMzOiA8VklBIDgzQzU3MiBVU0IgY29udHJvbGxlcj4gb24gdWhjaTMKZWhjaTA6 IDxWSUEgVlQ2MjAyIFVTQiAyLjAgY29udHJvbGxlcj4gbWVtIDB4ZGZmZmUwMDAtMHhkZmZmZTBm ZiBpcnEgNyBhdCBkZXZpY2UgMTYuNCBvbiBwY2kwCmVoY2kwOiBbSVRIUkVBRF0KdXNidXM0OiBF SENJIHZlcnNpb24gMS4wCnVzYnVzNDogPFZJQSBWVDYyMDIgVVNCIDIuMCBjb250cm9sbGVyPiBv biBlaGNpMAppc2FiMDogPFBDSS1JU0EgYnJpZGdlPiBhdCBkZXZpY2UgMTcuMCBvbiBwY2kwCmlz YTA6IDxJU0EgYnVzPiBvbiBpc2FiMApwY2liMjogPEFDUEkgUENJLVBDSSBicmlkZ2U+IGF0IGRl dmljZSAxOS4xIG9uIHBjaTAKcGNpX2xpbmsyOiBCSU9TIElSUSA1IGZvciAyLjE0LklOVEEgaXMg aW52YWxpZApwY2kyOiA8QUNQSSBQQ0kgYnVzPiBvbiBwY2liMgp2Z2UwOiA8VklBIE5ldHdvcmtp bmcgR2lnYWJpdCBFdGhlcm5ldD4gcG9ydCAweGJjMDAtMHhiY2ZmIG1lbSAweGRmZWZmMDAwLTB4 ZGZlZmYwZmYgaXJxIDcgYXQgZGV2aWNlIDE0LjAgb24gcGNpMgptaWlidXMwOiA8TUlJIGJ1cz4g b24gdmdlMApjaXBoeTA6IDxDaWNhZGEgQ1M4MjAxIDEwLzEwMC8xMDAwVFggUEhZPiBQSFkgMSBv biBtaWlidXMwCmNpcGh5MDogIDEwYmFzZVQsIDEwYmFzZVQtRkRYLCAxMDBiYXNlVFgsIDEwMGJh c2VUWC1GRFgsIDEwMDBiYXNlVCwgMTAwMGJhc2VULUZEWCwgYXV0bwp2Z2UwOiBXQVJOSU5HOiB1 c2luZyBvYnNvbGV0ZWQgaWZfd2F0Y2hkb2cgaW50ZXJmYWNlCnZnZTA6IEV0aGVybmV0IGFkZHJl c3M6IDAwOjQwOjYzOmY0OjlmOjgzCnZnZTA6IFtJVEhSRUFEXQpwY2liMzogPEFDUEkgSG9zdC1Q Q0kgYnJpZGdlPiBvbiBhY3BpMApwY2kxMjg6IDxBQ1BJIFBDSSBidXM+IG9uIHBjaWIzCnBjaWI0 OiA8QUNQSSBQQ0ktUENJIGJyaWRnZT4gaXJxIDcgYXQgZGV2aWNlIDAuMCBvbiBwY2kxMjgKcGNp MTI5OiA8QUNQSSBQQ0kgYnVzPiBvbiBwY2liNAp2Z2UxOiA8VklBIE5ldHdvcmtpbmcgR2lnYWJp dCBFdGhlcm5ldD4gcG9ydCAweGFjMDAtMHhhY2ZmIG1lbSAweGNmZmZmMDAwLTB4Y2ZmZmYwZmYg aXJxIDExIGF0IGRldmljZSAwLjAgb24gcGNpMTI5Cm1paWJ1czE6IDxNSUkgYnVzPiBvbiB2Z2Ux CmlwMTAwMHBoeTA6IDxJQyBQbHVzIElQMTAwMSAxMC8xMDAvMTAwMCBtZWRpYSBpbnRlcmZhY2U+ IFBIWSAyMiBvbiBtaWlidXMxCmlwMTAwMHBoeTA6ICAxMGJhc2VULCAxMGJhc2VULUZEWCwgMTAw YmFzZVRYLCAxMDBiYXNlVFgtRkRYLCAxMDAwYmFzZVQsIDEwMDBiYXNlVC1GRFgsIGF1dG8Kdmdl MTogV0FSTklORzogdXNpbmcgb2Jzb2xldGVkIGlmX3dhdGNoZG9nIGludGVyZmFjZQp2Z2UxOiBF dGhlcm5ldCBhZGRyZXNzOiAwMDo0MDo2MzpmNDo5Zjo4NAp2Z2UxOiBbSVRIUkVBRF0KcGNpYjU6 IDxBQ1BJIFBDSS1QQ0kgYnJpZGdlPiBpcnEgNyBhdCBkZXZpY2UgMC4xIG9uIHBjaTEyOApwY2kx MzA6IDxBQ1BJIFBDSSBidXM+IG9uIHBjaWI1CmF0YXBjaTI6IDxNYXJ2ZWxsIDg4U1g2MTQ1IFVE TUExMzMgY29udHJvbGxlcj4gcG9ydCAweDljMDAtMHg5YzA3LDB4OTgwMC0weDk4MDMsMHg5NDAw LTB4OTQwNywweDkwMDAtMHg5MDAzLDB4OGMwMC0weDhjMGYgbWVtIDB4Y2ZkZmYwMDAtMHhjZmRm ZjNmZiBpcnEgMTEgYXQgZGV2aWNlIDAuMCBvbiBwY2kxMzAKYXRhcGNpMjogW0lUSFJFQURdCmF0 YTY6IDxBVEEgY2hhbm5lbCAwPiBvbiBhdGFwY2kyCmF0YTY6IFtJVEhSRUFEXQphdGE3OiA8QVRB IGNoYW5uZWwgMT4gb24gYXRhcGNpMgphdGE3OiBbSVRIUkVBRF0KYXRydGMwOiA8QVQgcmVhbHRp bWUgY2xvY2s+IHBvcnQgMHg3MC0weDczIGlycSA4IG9uIGFjcGkwCnVhcnQwOiA8MTY1NTAgb3Ig Y29tcGF0aWJsZT4gcG9ydCAweDNmOC0weDNmZiBpcnEgNCBmbGFncyAweDEwIG9uIGFjcGkwCnVh cnQwOiBbRklMVEVSXQp1YXJ0MTogPDE2NTUwIG9yIGNvbXBhdGlibGU+IHBvcnQgMHgyZjgtMHgy ZmYgaXJxIDMgb24gYWNwaTAKdWFydDE6IFtGSUxURVJdCmF0a2JkYzA6IDxLZXlib2FyZCBjb250 cm9sbGVyIChpODA0Mik+IHBvcnQgMHg2MCwweDY0IGlycSAxIG9uIGFjcGkwCmF0a2JkMDogPEFU IEtleWJvYXJkPiBpcnEgMSBvbiBhdGtiZGMwCmtiZDAgYXQgYXRrYmQwCmF0a2JkMDogW0dJQU5U LUxPQ0tFRF0KYXRrYmQwOiBbSVRIUkVBRF0KcHNtMDogPFBTLzIgTW91c2U+IGlycSAxMiBvbiBh dGtiZGMwCnBzbTA6IFtHSUFOVC1MT0NLRURdCnBzbTA6IFtJVEhSRUFEXQpwc20wOiBtb2RlbCBJ bnRlbGxpTW91c2UgRXhwbG9yZXIsIGRldmljZSBJRCA0CmNwdTA6IDxBQ1BJIENQVT4gb24gYWNw aTAKYWNwaV9wZXJmMDogPEFDUEkgQ1BVIEZyZXF1ZW5jeSBDb250cm9sPiBvbiBjcHUwCnBtdGlt ZXIwIG9uIGlzYTAKb3JtMDogPElTQSBPcHRpb24gUk9Ncz4gYXQgaW9tZW0gMHhkMjAwMC0weGQy ZmZmLDB4ZDMwMDAtMHhkM2ZmZiBwbnBpZCBPUk0wMDAwIG9uIGlzYTAKc2MwOiA8U3lzdGVtIGNv bnNvbGU+IGF0IGZsYWdzIDB4MTAwIG9uIGlzYTAKc2MwOiBWR0EgPDE2IHZpcnR1YWwgY29uc29s ZXMsIGZsYWdzPTB4MzAwPgp2Z2EwOiA8R2VuZXJpYyBJU0EgVkdBPiBhdCBwb3J0IDB4M2MwLTB4 M2RmIGlvbWVtIDB4YTAwMDAtMHhiZmZmZiBvbiBpc2EwClRpbWVjb3VudGVyICJUU0MiIGZyZXF1 ZW5jeSAxNTAwMDE5NTc2IEh6IHF1YWxpdHkgODAwClRpbWVjb3VudGVycyB0aWNrIGV2ZXJ5IDEu MDAwIG1zZWMKdXNidXMyOiAxMk1icHMgRnVsbCBTcGVlZCBVU0IgdjEuMAp1c2J1czM6IDEyTWJw cyBGdWxsIFNwZWVkIFVTQiB2MS4wCnVzYnVzNDogNDgwTWJwcyBIaWdoIFNwZWVkIFVTQiB2Mi4w CnVzYnVzMDogMTJNYnBzIEZ1bGwgU3BlZWQgVVNCIHYxLjAKdXNidXMxOiAxMk1icHMgRnVsbCBT cGVlZCBVU0IgdjEuMAphZDQ6IDIzODQ3NU1CIDxTZWFnYXRlIFNUOTI1MDgyN0FTIDMuQUFBPiBh dCBhdGEyLW1hc3RlciBTQVRBMzAwCldBUk5JTkc6IFdJVE5FU1Mgb3B0aW9uIGVuYWJsZWQsIGV4 cGVjdCByZWR1Y2VkIHBlcmZvcm1hbmNlLgp1Z2VuMi4xOiA8VklBPiBhdCB1c2J1czIKdWh1YjA6 IDxWSUEgVUhDSSByb290IEhVQiwgY2xhc3MgOS8wLCByZXYgMS4wMC8xLjAwLCBhZGRyIDE+IG9u IHVzYnVzMgp1Z2VuMy4xOiA8VklBPiBhdCB1c2J1czMKdWh1YjE6IDxWSUEgVUhDSSByb290IEhV QiwgY2xhc3MgOS8wLCByZXYgMS4wMC8xLjAwLCBhZGRyIDE+IG9uIHVzYnVzMwp1Z2VuNC4xOiA8 VklBPiBhdCB1c2J1czQKdWh1YjI6IDxWSUEgRUhDSSByb290IEhVQiwgY2xhc3MgOS8wLCByZXYg Mi4wMC8xLjAwLCBhZGRyIDE+IG9uIHVzYnVzNAp1Z2VuMC4xOiA8VklBPiBhdCB1c2J1czAKdWh1 YjM6IDxWSUEgVUhDSSByb290IEhVQiwgY2xhc3MgOS8wLCByZXYgMS4wMC8xLjAwLCBhZGRyIDE+ IG9uIHVzYnVzMAp1Z2VuMS4xOiA8VklBPiBhdCB1c2J1czEKdWh1YjQ6IDxWSUEgVUhDSSByb290 IEhVQiwgY2xhc3MgOS8wLCByZXYgMS4wMC8xLjAwLCBhZGRyIDE+IG9uIHVzYnVzMQpHRU9NOiBh ZDRzMzogZ2VvbWV0cnkgZG9lcyBub3QgbWF0Y2ggbGFiZWwgKDI1NWgsNjNzICE9IDE2aCw2M3Mp LgpHRU9NX0xBQkVMOiBMYWJlbCBmb3IgcHJvdmlkZXIgYWQ0czNhIGlzIHVmc2lkLzQ5ODdhMmZm NmEwNGVkZDEuCkdFT01fTEFCRUw6IExhYmVsIGZvciBwcm92aWRlciBhZDRzM2QgaXMgdWZzaWQv NDk4N2EyZmYyMTE4OGI0NS4KdWh1YjA6IDIgcG9ydHMgd2l0aCAyIHJlbW92YWJsZSwgc2VsZiBw b3dlcmVkCnVodWIxOiAyIHBvcnRzIHdpdGggMiByZW1vdmFibGUsIHNlbGYgcG93ZXJlZAp1aHVi MzogMiBwb3J0cyB3aXRoIDIgcmVtb3ZhYmxlLCBzZWxmIHBvd2VyZWQKdWh1YjQ6IDIgcG9ydHMg d2l0aCAyIHJlbW92YWJsZSwgc2VsZiBwb3dlcmVkCkdFT01fTEFCRUw6IExhYmVsIGZvciBwcm92 aWRlciBhZDRzM2UgaXMgdWZzaWQvNDk4N2EyZmYzZDI1ODMxMS4KR0VPTV9MQUJFTDogTGFiZWwg Zm9yIHByb3ZpZGVyIGFkNHMzZiBpcyB1ZnNpZC80OTg3YTJmZmI1YjhmNGViLgpHRU9NX0xBQkVM OiBMYWJlbCBmb3IgcHJvdmlkZXIgYWQ0czQrMDE2Njk3NDEgaXMgbnRmcy9OZXcgVm9sdW1lLgpS b290IG1vdW50IHdhaXRpbmcgZm9yOiB1c2J1czQKUm9vdCBtb3VudCB3YWl0aW5nIGZvcjogdXNi dXM0ClJvb3QgbW91bnQgd2FpdGluZyBmb3I6IHVzYnVzNAp1aHViMjogOCBwb3J0cyB3aXRoIDgg cmVtb3ZhYmxlLCBzZWxmIHBvd2VyZWQKVHJ5aW5nIHRvIG1vdW50IHJvb3QgZnJvbSB1ZnM6L2Rl di9hZDRzM2EKR0VPTV9MQUJFTDogTGFiZWwgdWZzaWQvNDk4N2EyZmY2YTA0ZWRkMSByZW1vdmVk LgpHRU9NX0xBQkVMOiBMYWJlbCBmb3IgcHJvdmlkZXIgYWQ0czNhIGlzIHVmc2lkLzQ5ODdhMmZm NmEwNGVkZDEuCkdFT01fTEFCRUw6IExhYmVsIHVmc2lkLzQ5ODdhMmZmM2QyNTgzMTEgcmVtb3Zl ZC4KR0VPTV9MQUJFTDogTGFiZWwgZm9yIHByb3ZpZGVyIGFkNHMzZSBpcyB1ZnNpZC80OTg3YTJm ZjNkMjU4MzExLgpHRU9NX0xBQkVMOiBMYWJlbCB1ZnNpZC80OTg3YTJmZmI1YjhmNGViIHJlbW92 ZWQuCkdFT01fTEFCRUw6IExhYmVsIGZvciBwcm92aWRlciBhZDRzM2YgaXMgdWZzaWQvNDk4N2Ey ZmZiNWI4ZjRlYi4KR0VPTV9MQUJFTDogTGFiZWwgdWZzaWQvNDk4N2EyZmYyMTE4OGI0NSByZW1v dmVkLgpHRU9NX0xBQkVMOiBMYWJlbCBmb3IgcHJvdmlkZXIgYWQ0czNkIGlzIHVmc2lkLzQ5ODdh MmZmMjExODhiNDUuCkdFT01fTEFCRUw6IExhYmVsIHVmc2lkLzQ5ODdhMmZmNmEwNGVkZDEgcmVt b3ZlZC4KR0VPTV9MQUJFTDogTGFiZWwgdWZzaWQvNDk4N2EyZmYzZDI1ODMxMSByZW1vdmVkLgpH RU9NX0xBQkVMOiBMYWJlbCB1ZnNpZC80OTg3YTJmZmI1YjhmNGViIHJlbW92ZWQuCkdFT01fTEFC RUw6IExhYmVsIHVmc2lkLzQ5ODdhMmZmMjExODhiNDUgcmVtb3ZlZC4KdmdlMDogbGluayBzdGF0 ZSBjaGFuZ2VkIHRvIERPV04KdmdlMDogbGluayBzdGF0ZSBjaGFuZ2VkIHRvIFVQCnZnZTA6IGxp bmsgc3RhdGUgY2hhbmdlZCB0byBET1dOCnZnZTA6IGxpbmsgc3RhdGUgY2hhbmdlZCB0byBVUApu ZXRzbWJfZGV2OiBsb2FkZWQK --0016e647eb6edf7f4504677bce39-- From owner-freebsd-net@FreeBSD.ORG Tue Apr 14 05:03:28 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5F4F4106564A for ; Tue, 14 Apr 2009 05:03:28 +0000 (UTC) (envelope-from pyunyh@gmail.com) Received: from rv-out-0506.google.com (rv-out-0506.google.com [209.85.198.229]) by mx1.freebsd.org (Postfix) with ESMTP id 2EED48FC0C for ; Tue, 14 Apr 2009 05:03:27 +0000 (UTC) (envelope-from pyunyh@gmail.com) Received: by rv-out-0506.google.com with SMTP id l9so2290300rvb.43 for ; Mon, 13 Apr 2009 22:03:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:received:from:date:to:cc :subject:message-id:reply-to:references:mime-version:content-type :content-disposition:in-reply-to:user-agent; bh=MDmjGhuRVl7jZevSwC70icPXuh0SoLkjFDOhkMYAnsY=; b=ouBnBi7bMFT1ntXw0k1p9WJYOiq7SdPG41+heS1yZL6qBXaagxIX52qiU1dKAVFbiL AcQa09XLgVV3vbKSqdkgAq7Z57eN0BgfDJVZbA7b5ZM+LczzmpJhPpWzioXx7K6VTK9U 4mzo9lL6UJ2stgEI16pNF76bCroljED1mA7qk= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:date:to:cc:subject:message-id:reply-to:references:mime-version :content-type:content-disposition:in-reply-to:user-agent; b=QYpYDobKlgDm+O+v4IlEd2C/xpSm9971TAN60FoE7yeAurz9GntRlgvMXudpqKkA+i AwZBsawOBC8ARgPCYHQ+YyaWCRIA3y1OZ5wSUhXEju0bfI0A0fez0olt8AYXkFtWME40 H+cLQRt5N2L4QiJwlgauHYQZDsMwPCdetwAgE= Received: by 10.141.37.8 with SMTP id p8mr3059476rvj.18.1239685407707; Mon, 13 Apr 2009 22:03:27 -0700 (PDT) Received: from michelle.cdnetworks.co.kr ([114.111.62.249]) by mx.google.com with ESMTPS id f42sm8913689rvb.11.2009.04.13.22.03.25 (version=SSLv3 cipher=RC4-MD5); Mon, 13 Apr 2009 22:03:26 -0700 (PDT) Received: by michelle.cdnetworks.co.kr (sSMTP sendmail emulation); Tue, 14 Apr 2009 14:05:38 +0900 From: Pyun YongHyeon Date: Tue, 14 Apr 2009 14:05:38 +0900 To: Leon Feng Message-ID: <20090414050538.GD65724@michelle.cdnetworks.co.kr> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i Cc: freebsd-net@freebsd.org Subject: Re: [vge] VIA VT6130 only auto negotiating to 1000baseT after down/up X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: pyunyh@gmail.com List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2009 05:03:28 -0000 On Tue, Apr 14, 2009 at 11:55:55AM +0800, Leon Feng wrote: > Hi, > > I am running CURRENT r190987 on VIA EPIA board with VT6130 chip. > I found two problems: > > 1. After normal boot, vge only auto negotiate to 100baseTX. Then > # ifconfig vge1 down > # ifconfig vge1 up > And vge1 will auto negotiate to 1000baseT. > It's normal to see negotiated speed/duplex only after configuring network interface(At least you have to up the interface to get valid link). You have configured vge1 in rc.conf, right? > 2. After reboot the system, there is an error message: > " savecore: reboot after panic: mutex vge0 not owned at > /usr/src/sys/modules/vge/../../dev/vge/if_vge.c:2395" > Hmm, there is no such line number 2395 in if_vge.c. Please make sure you've updated to latest CURRENT. And if you can see the panic again show me full back-trace info. > Do not know whether these two are related. Any one has an idea? > I think the former has nothing to do with the latter. From owner-freebsd-net@FreeBSD.ORG Tue Apr 14 05:13:13 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C6290106564A for ; Tue, 14 Apr 2009 05:13:13 +0000 (UTC) (envelope-from julian@elischer.org) Received: from mx1.fusionio.com (mx1.fusionio.com [64.244.102.30]) by mx1.freebsd.org (Postfix) with ESMTP id 95A3B8FC18 for ; Tue, 14 Apr 2009 05:13:13 +0000 (UTC) (envelope-from julian@elischer.org) X-ASG-Debug-ID: 1239684955-7e4000070000-QdxwpM X-Barracuda-URL: http://10.101.1.180:8000/cgi-bin/mark.cgi Received: from zim.fusionio.com (localhost [127.0.0.1]) by mx1.fusionio.com (Spam Firewall) with ESMTP id 93EBF6EDE6; Mon, 13 Apr 2009 22:55:55 -0600 (MDT) Received: from zim.fusionio.com ([10.101.1.182]) by mx1.fusionio.com with ESMTP id 0ERsBMTTrTKyF9g0; Mon, 13 Apr 2009 22:55:55 -0600 (MDT) X-Barracuda-Envelope-From: julian@elischer.org Received: from localhost (localhost.localdomain [127.0.0.1]) by zim.fusionio.com (Postfix) with ESMTP id 87F4D4500002; Mon, 13 Apr 2009 22:55:55 -0600 (MDT) X-Virus-Scanned: amavisd-new at X-Spam-Flag: NO X-Spam-Score: -2.499 X-Spam-Level: X-Spam-Status: No, score=-2.499 tagged_above=-10 required=6.6 tests=[BAYES_00=-2.599, RDNS_DYNAMIC=0.1] Received: from zim.fusionio.com ([127.0.0.1]) by localhost (zim.fusionio.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GYpY4XXnHwOP; Mon, 13 Apr 2009 22:55:45 -0600 (MDT) Received: from julian-mac.elischer.org (72-254-106-5.client.stsn.net [72.254.106.5]) by zim.fusionio.com (Postfix) with ESMTP id F093C4500001; Mon, 13 Apr 2009 22:55:44 -0600 (MDT) Message-ID: <49E41755.8050701@elischer.org> Date: Mon, 13 Apr 2009 21:55:49 -0700 From: Julian Elischer User-Agent: Thunderbird 2.0.0.21 (Macintosh/20090302) MIME-Version: 1.0 To: sthaug@nethelp.no X-ASG-Orig-Subj: Re: Multiple default routes / Force external routing References: <20090413135402.78610@gmx.net> <20090413.220932.74699777.sthaug@nethelp.no> In-Reply-To: <20090413.220932.74699777.sthaug@nethelp.no> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Barracuda-Connect: UNKNOWN[10.101.1.182] X-Barracuda-Start-Time: 1239684955 X-Barracuda-Virus-Scanned: by Barracuda Spam Firewall at fusionio.com Cc: freebsd-net@freebsd.org, pcc@gmx.net Subject: Re: Multiple default routes / Force external routing X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2009 05:13:14 -0000 sthaug@nethelp.no wrote: >> I've poked about for weeks and asked similar questions in >> -questions and elsewhere without avail. Probably using the wrong keys >> to search and ask: >> >> I have set up a box with various vlan interfaces on it. I naively >> expected to be able to set individual "default" routes and route >> between them via an *external* router (and filter packets there etc.) >> but somehow all packets seem to "short-circuit" locally, and I don't >> seem to be able to see why this is so and how I prevent that. I think you are rather confused about what Multiple FIBs is.. All it is is teh ability to make a packet use a particular FIB on it's outgoing path. There is not such thing as an interface being "In" a FIB. All interfaces are still visible to the routing code by default, and The IP stack still knows about them.I think the IP stack set's the 'loopback' flag on a packet regardless of the FIB selected if teh dest is one of its own addresses. What you want is VIMAGE. > > I found this behavior also, and it breaks POLA pretty badly. > > There are several problems with the multiple routing table support (via > setfib) that I see: > > - I found I needed "options ROUTETABLES= ..." to have additional routing > tables. I could not find this option documented anywhere. in LINT where all such are documented. > > - The standard behavior when adding new routes (via ifconfig or route > command) is that the route is added to all routing tables. Coming from > a router/MPLS/L3VPN background, this is extremely counterintuitive. I > found I needed to set the sysctl net.add_addr_allfibs to 0 to avoid > this behavior. the route is only added to all routing tables for NEIGHBOUR routes. there is a sysctl to turn this off. By default all interfaces are available no matter what FIB you are using > > - Having two routing tables (one default, one table number 1 via setfib) > I also expected to be able to route between these via external router. what do you mean by that. Routing tables are not a destination. how can you 'ping' it? you cant route between tables. what does that mean? > Pinging from the default routing table to routing table 1, what are you talking about? It's a routing table not another machine how can you ping it? > traffic from > the default routing table goes out to external router and in via other > interface > (in routing table 1) ??? routing tables are for OUTGOING packets. incoming packets don't use routing tables. If you want to assign a FIB to an incoming packet for the purpose of controlling further routing, then there is a patch that will be applied to assign a FIB as the "default FIB for packets received on an interface", but until that is applied use ipfw or pf to apply it. > - but the ping reply is returned via the > loopback interface on the FreeBSD host, without going out to the router. > I assume this is the "short-circuit" you're talking about, and I find > this behavior also very counterintuitive. I don't see what is so counterintuitive about it.. you sent the packet to your own machine.. all such packets are short circuited by the IP stack. > > If I explicitly ping from routing table 1 with ping prefixed by setfib 1, > everything works as expected (traffic both ways go via external router). anyhow I hope to be able to address some of the issues you have raised. At least, to add more functionality. > > Steinar Haug, Nethelp consulting, sthaug@nethelp.no > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" CONFIDENTIAL This document and attachments contain information from Fusion-io, Inc. which is confidential and/or legally privileged. The information is intended only for the use of the individual or entity named on this transmission. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or taking of any action in reliance on the contents of this emailed information is strictly prohibited, and that the documents should be returned to Fusion-io, Inc. immediately. In this regard, if you have received this email in error, please notify us by return email immediately. From owner-freebsd-net@FreeBSD.ORG Tue Apr 14 06:18:24 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BDA65106566B for ; Tue, 14 Apr 2009 06:18:24 +0000 (UTC) (envelope-from rainofchaos@gmail.com) Received: from qw-out-2122.google.com (qw-out-2122.google.com [74.125.92.25]) by mx1.freebsd.org (Postfix) with ESMTP id 75D4B8FC0A for ; Tue, 14 Apr 2009 06:18:24 +0000 (UTC) (envelope-from rainofchaos@gmail.com) Received: by qw-out-2122.google.com with SMTP id 9so1702356qwb.7 for ; Mon, 13 Apr 2009 23:18:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=gEue7ZtFS2l0/iXXoeNI2W6geLg67S5FNByo8PMVuPc=; b=WLHGmPpV+duk5mGz6t+821rim0DP3b4iHtNQrgILruRL/TbuOY0qcGjLbAZDXIxiZE ETS3QELXczcPBOBcGd5SzpCQIT/S1IeWmeLv0KUeR7h3uDFuYOn+z8jCnsk4YBG07ssI Bem1I6YA7jxIWxT6Jf2ZbM2TOP466kDzaMHcM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=m3wFp6voBBTAtVPCp+eS7DEsrLNkIGzwf3Uj0UNRagpLOrehk6l8ZMtmTJPdL3IXxv yEBBre1MYH88D6dqcSahTS8DvDdVsItYdKAlCIwfcMkbhWLYTbqX4HpLbW5iu0b2tuyg 9hnqn79WU3ywzmVkcEQNYLoG//fPEunlgm6+A= MIME-Version: 1.0 Received: by 10.220.76.3 with SMTP id a3mr7357649vck.119.1239689903572; Mon, 13 Apr 2009 23:18:23 -0700 (PDT) In-Reply-To: <20090414050538.GD65724@michelle.cdnetworks.co.kr> References: <20090414050538.GD65724@michelle.cdnetworks.co.kr> Date: Tue, 14 Apr 2009 14:18:23 +0800 Message-ID: From: Leon Feng To: pyunyh@gmail.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org Subject: Re: [vge] VIA VT6130 only auto negotiating to 1000baseT after down/up X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2009 06:18:25 -0000 2009/4/14 Pyun YongHyeon : > On Tue, Apr 14, 2009 at 11:55:55AM +0800, Leon Feng wrote: >> Hi, >> >> I am running CURRENT r190987 on VIA EPIA board with VT6130 chip. >> I found two problems: >> >> 1. After normal boot, vge only auto negotiate to 100baseTX. Then >> # ifconfig vge1 down >> # ifconfig vge1 up >> And vge1 will auto negotiate to 1000baseT. >> > > It's normal to see negotiated speed/duplex only after configuring > network interface(At least you have to up the interface to get > valid link). You have configured vge1 in rc.conf, right? > My fault, after add ifconfig_vge1="up", vge1 works great. I see "Link auto-negotiation speed 100M bps full duplex" in the machine connected to it at reboot. Thought it were auto negotiated by FreeBSD. In fact it comes from BIOS. >> 2. After reboot the system, there is an error message: >> " savecore: reboot after panic: mutex vge0 not owned at >> /usr/src/sys/modules/vge/../../dev/vge/if_vge.c:2395" >> > > Hmm, there is no such line number 2395 in if_vge.c. Please make > sure you've updated to latest CURRENT. And if you can see the panic > again show me full back-trace info. > After savecore -c , it is gone. >> Do not know whether these two are related. Any one has an idea? >> > > I think the former has nothing to do with the latter. > Both solved. Great thanks. From owner-freebsd-net@FreeBSD.ORG Tue Apr 14 12:55:02 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 31EA51065672 for ; Tue, 14 Apr 2009 12:55:02 +0000 (UTC) (envelope-from steve@ibctech.ca) Received: from ibctech.ca (v6.ibctech.ca [IPv6:2607:f118::b6]) by mx1.freebsd.org (Postfix) with SMTP id B5B528FC16 for ; Tue, 14 Apr 2009 12:55:01 +0000 (UTC) (envelope-from steve@ibctech.ca) Received: (qmail 30107 invoked by uid 89); 14 Apr 2009 13:02:53 -0000 Received: from unknown (HELO ?IPv6:2607:f118::5?) (steve@ibctech.ca@2607:f118::5) by v6.ibctech.ca with ESMTPA; 14 Apr 2009 13:02:53 -0000 Message-ID: <49E48799.1000300@ibctech.ca> Date: Tue, 14 Apr 2009 08:54:49 -0400 From: Steve Bertrand User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) MIME-Version: 1.0 To: Julian Elischer References: <20090413135402.78610@gmx.net> <20090413.220932.74699777.sthaug@nethelp.no> <49E41755.8050701@elischer.org> In-Reply-To: <49E41755.8050701@elischer.org> X-Enigmail-Version: 0.95.7 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org, pcc@gmx.net, sthaug@nethelp.no Subject: Re: Multiple default routes / Force external routing X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2009 12:55:02 -0000 Julian Elischer wrote: > sthaug@nethelp.no wrote: >>> I've poked about for weeks and asked similar questions in >>> -questions and elsewhere without avail. Probably using the wrong keys >>> to search and ask: >>> >>> I have set up a box with various vlan interfaces on it. I naively >>> expected to be able to set individual "default" routes and route >>> between them via an *external* router (and filter packets there etc.) >>> but somehow all packets seem to "short-circuit" locally, and I don't >>> seem to be able to see why this is so and how I prevent that. > > I think you are rather confused about what Multiple FIBs is.. > All it is is teh ability to make a packet use a particular > FIB on it's outgoing path. There is not such thing as an interface > being "In" a FIB. All interfaces are still visible to the routing code > by default, and The IP stack still knows about them.I think the IP > stack set's the 'loopback' flag on a packet regardless of the FIB > selected if teh dest is one of its own addresses. > > What you want is VIMAGE. Perhaps the OP should rephrase his desire. To me, it sounds like he wants to turn the FBSD box into a VLAN aggregator, and then "trunk" the VLANs to an external router to route between the VLAN subnets. If this is the case, then the default route that points to the 'external' router would need to be applied on the devices within each VLAN subnet, not on the VLAN aggregator device(s) themselves. Do I understand what you are trying to do correctly? Steve From owner-freebsd-net@FreeBSD.ORG Tue Apr 14 17:59:15 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 43EB01065673 for ; Tue, 14 Apr 2009 17:59:15 +0000 (UTC) (envelope-from sthaug@nethelp.no) Received: from bizet.nethelp.no (bizet.nethelp.no [195.1.209.33]) by mx1.freebsd.org (Postfix) with SMTP id 9C6088FC1A for ; Tue, 14 Apr 2009 17:59:14 +0000 (UTC) (envelope-from sthaug@nethelp.no) Received: (qmail 68418 invoked from network); 14 Apr 2009 17:59:12 -0000 Received: from bizet.nethelp.no (HELO localhost) (195.1.209.33) by bizet.nethelp.no with SMTP; 14 Apr 2009 17:59:12 -0000 Date: Tue, 14 Apr 2009 19:59:12 +0200 (CEST) Message-Id: <20090414.195912.74700172.sthaug@nethelp.no> To: steve@ibctech.ca From: sthaug@nethelp.no In-Reply-To: <49E48799.1000300@ibctech.ca> References: <20090413.220932.74699777.sthaug@nethelp.no> <49E41755.8050701@elischer.org> <49E48799.1000300@ibctech.ca> X-Mailer: Mew version 3.3 on Emacs 21.3 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org, julian@elischer.org, pcc@gmx.net Subject: Re: Multiple default routes / Force external routing X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2009 17:59:15 -0000 > Perhaps the OP should rephrase his desire. > > To me, it sounds like he wants to turn the FBSD box into a VLAN > aggregator, and then "trunk" the VLANs to an external router to route > between the VLAN subnets. It's more that I'd like my FreeBSD box to be able to handle multiple routing tables completely, as seen from an L3VPN point of view (this is what Cisco calls VRF-lite, which is obviously not a full fledged MPLS L3VPN implementation): - A box can have multiple routing tables. These are logically separate. - Each interface is connected to one and only one routing table. Each routing table may have zero or more interfaces connected to it. Cisco and many other vendors call a routing table with interfaces connected to it a VRF, Virtual Router and Forwarding instance, see for instance http://en.wikipedia.org/wiki/VRF - There is no traffic between VRFs within the box (and thus, if two interfaces are in different routing tables, you can *not* get traffic between them within the box). There is no "short-circuit" between VRFs. If two interfaces are in the *same* routing table (same VRF) you can of course have traffic between them. - To go between VRFs you need to send the traffic to an external device, for instance a firewall. Thus if I have a box with the following routing tables/interfaces/ IP addresses: Table Intf IP address 1 vlan0 192.168.1.1/30 2 vlan1 192.168.2.1/30 2 vlan2 192.168.3.1/30 then I can communicate from 192.168.2.1 to 192.168.3.1 within the box, since both of these interfaces are in the same routing table. But I cannot communicate from 192.168.2.1 to 192.168.1.1 within the box, since these interfaces are in separate routing tables. To get from 192.168.2.1 to 192.168.1.1 I need to send the traffic to an external device. Steinar Haug, Nethelp consulting, sthaug@nethelp.no From owner-freebsd-net@FreeBSD.ORG Tue Apr 14 19:05:58 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0684E106564A for ; Tue, 14 Apr 2009 19:05:58 +0000 (UTC) (envelope-from pcc@gmx.net) Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by mx1.freebsd.org (Postfix) with SMTP id 6204C8FC15 for ; Tue, 14 Apr 2009 19:05:57 +0000 (UTC) (envelope-from pcc@gmx.net) Received: (qmail 9043 invoked by uid 0); 14 Apr 2009 19:05:52 -0000 Received: from 84.163.201.44 by www068.gmx.net with HTTP; Tue, 14 Apr 2009 21:05:52 +0200 (CEST) Content-Type: text/plain; charset="iso-8859-1" Date: Tue, 14 Apr 2009 21:05:52 +0200 From: "Peter Cornelius" In-Reply-To: <49E48799.1000300@ibctech.ca> Message-ID: <20090414190552.298990@gmx.net> MIME-Version: 1.0 References: <20090413135402.78610@gmx.net> <20090413.220932.74699777.sthaug@nethelp.no> <49E41755.8050701@elischer.org> <49E48799.1000300@ibctech.ca> To: Steve Bertrand , julian@elischer.org X-Authenticated: #491680 X-Flags: 0001 X-Mailer: WWW-Mail 6100 (Global Message Exchange) X-Priority: 3 X-Provags-ID: V01U2FsdGVkX1+X9S5ar0OXpb9GoU4k3UEJLnZVD/31os6DoZY7vV 80EG+YkdlO+M0S/oisoWZk+xB5xJG6ui9a0w== Content-Transfer-Encoding: 8bit X-GMX-UID: qOnRfb4zTiE+T9PhYGRwcoh9ZUVSRFe3 X-FuHaFi: 0.63 Cc: freebsd-net@freebsd.org, sthaug@nethelp.no Subject: Re: Multiple default routes / Force external routing X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2009 19:05:58 -0000 Re... Thanks for the numerous responses, first time I feel like home :) > >>> I have set up a box with various vlan interfaces on it. I naively > >>> expected to be able to set individual "default" routes and route > >>> between them via an *external* router (and filter packets there etc.) > >>> but somehow all packets seem to "short-circuit" locally, and I don't > >>> seem to be able to see why this is so and how I prevent that. > > > > I think you are rather confused about what Multiple FIBs is.. > > All it is is teh ability to make a packet use a particular > > FIB on it's outgoing path. There is not such thing as an interface > > being "In" a FIB. All interfaces are still visible to the routing code > > by default, and The IP stack still knows about them.I think the IP > > stack set's the 'loopback' flag on a packet regardless of the FIB > > selected if teh dest is one of its own addresses. Yup, that is roughly what I expected to hear from what I observed. Took a while to get there mentally though, sorry... > > What you want is VIMAGE. I haven't fiddled with that (yet) since it seems to be somewhat separate from the src trunk (isn't it?) and I hoped to remain mainstream. At first glance, it seems attractive ... > To me, it sounds like he wants to turn the FBSD box into a VLAN > aggregator, and then "trunk" the VLANs to an external router to route > between the VLAN subnets. > > If this is the case, then the default route that points to the > 'external' router would need to be applied on the devices within each > VLAN subnet, not on the VLAN aggregator device(s) themselves. > > Do I understand what you are trying to do correctly? The idea was to set up a server which behaves as if it was a set of servers with different tasks offering different services with different access rights etc. Think of it as a farm of physical servers some of which are virtualised on a single box, typical virtualisation task, I think. The key point I want to achieve is a good separation of the networks and control packet interchange via a physically separate device (which also is a FreeBSD box btw). The Ethernet trunk goes into a switch and from there on to the router. So yes, that's the setup currently. But I may mention that the vlans extend to other holes on the switch, and I definitely want to avoid packets sneaking past the router if at all possible. To cut a long story short, I this would expect vimage to be a solution at my server end, provided that (I can get it built and) I can tie several jail instances to a given vlan interface (representing several servers) and be sure that the packets are only seen there (and not on other vlan ifs). I'll give it a closer look than I did so far asap, so thanks. All the best, Peter. -- Neu: GMX FreeDSL Komplettanschluss mit DSL 6.000 Flatrate + Telefonanschluss fЭr nur 17,95 Euro/mtl.!* http://dslspecial.gmx.de/freedsl-surfflat/?ac=OM.AD.PD003K11308T4569a From owner-freebsd-net@FreeBSD.ORG Tue Apr 14 19:08:47 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id F2435106566C for ; Tue, 14 Apr 2009 19:08:47 +0000 (UTC) (envelope-from pcc@gmx.net) Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by mx1.freebsd.org (Postfix) with SMTP id 38BD28FC1B for ; Tue, 14 Apr 2009 19:08:47 +0000 (UTC) (envelope-from pcc@gmx.net) Received: (qmail 18258 invoked by uid 0); 14 Apr 2009 19:08:42 -0000 Received: from 84.163.201.44 by www079.gmx.net with HTTP; Tue, 14 Apr 2009 21:08:42 +0200 (CEST) Content-Type: text/plain; charset="iso-8859-1" Date: Tue, 14 Apr 2009 21:08:42 +0200 From: "Peter Cornelius" In-Reply-To: <20090414.195912.74700172.sthaug@nethelp.no> Message-ID: <20090414190842.299000@gmx.net> MIME-Version: 1.0 References: <20090413.220932.74699777.sthaug@nethelp.no> <49E41755.8050701@elischer.org> <49E48799.1000300@ibctech.ca> <20090414.195912.74700172.sthaug@nethelp.no> To: sthaug@nethelp.no, steve@ibctech.ca X-Authenticated: #491680 X-Flags: 0001 X-Mailer: WWW-Mail 6100 (Global Message Exchange) X-Priority: 5 X-Provags-ID: V01U2FsdGVkX18W4S414ZMW+beLJP7qxLD8FmVUiYz9wv7EtbKLZ0 bZV2hCqo8udW5pKdfTK2qIWMQS7bR9WzPrZw== Content-Transfer-Encoding: 8bit X-GMX-UID: DefSeP5HYmYBcpa3Ync3q9xCWkZTQVQO X-FuHaFi: 0.77 Cc: freebsd-net@freebsd.org, julian@elischer.org Subject: Re: Multiple default routes / Force external routing X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2009 19:08:48 -0000 Re^2... > (...VRF...etc...pp...) > - To go between VRFs you need to send the traffic to an external > device, for instance a firewall. That was my first line of thought but my way simply does not work like that. Regards, Peter. -- Psssst! Schon vom neuen GMX MultiMessenger gehЖrt? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger01 From owner-freebsd-net@FreeBSD.ORG Tue Apr 14 19:23:20 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1C4E51065985 for ; Tue, 14 Apr 2009 19:23:20 +0000 (UTC) (envelope-from sthaug@nethelp.no) Received: from bizet.nethelp.no (bizet.nethelp.no [195.1.209.33]) by mx1.freebsd.org (Postfix) with SMTP id 558AD8FC2D for ; Tue, 14 Apr 2009 19:23:18 +0000 (UTC) (envelope-from sthaug@nethelp.no) Received: (qmail 83850 invoked from network); 14 Apr 2009 19:23:18 -0000 Received: from bizet.nethelp.no (HELO localhost) (195.1.209.33) by bizet.nethelp.no with SMTP; 14 Apr 2009 19:23:18 -0000 Date: Tue, 14 Apr 2009 21:23:18 +0200 (CEST) Message-Id: <20090414.212318.41684722.sthaug@nethelp.no> To: julian@elischer.org From: sthaug@nethelp.no In-Reply-To: <49E48799.1000300@ibctech.ca> References: <20090413.220932.74699777.sthaug@nethelp.no> <49E41755.8050701@elischer.org> <49E48799.1000300@ibctech.ca> X-Mailer: Mew version 3.3 on Emacs 21.3 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org, steve@ibctech.ca, pcc@gmx.net Subject: Re: Multiple default routes / Force external routing X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2009 19:23:22 -0000 > > I think you are rather confused about what Multiple FIBs is.. > > All it is is teh ability to make a packet use a particular > > FIB on it's outgoing path. There is not such thing as an interface > > being "In" a FIB. All interfaces are still visible to the routing code > > by default, and The IP stack still knows about them.I think the IP > > stack set's the 'loopback' flag on a packet regardless of the FIB > > selected if teh dest is one of its own addresses. > > > > What you want is VIMAGE. I read a bit about VIMAGE (http://imunes.tel.fer.hr/virtnet/). No, I don't see the need for complete virtualization of network interfaces etc. I *would* very much like separate routing tables. If you look at a traditional router from Cisco, Juniper or similar, they offer separate routing tables without virtualizing everything. Steinar Haug, Nethelp consulting, sthaug@nethelp.no From owner-freebsd-net@FreeBSD.ORG Tue Apr 14 19:44:12 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CECA01065696; Tue, 14 Apr 2009 19:44:12 +0000 (UTC) (envelope-from bz@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id A3DFB8FC1B; Tue, 14 Apr 2009 19:44:12 +0000 (UTC) (envelope-from bz@FreeBSD.org) Received: from freefall.freebsd.org (bz@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3EJiC2L074740; Tue, 14 Apr 2009 19:44:12 GMT (envelope-from bz@freefall.freebsd.org) Received: (from bz@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3EJiCRg074736; Tue, 14 Apr 2009 19:44:12 GMT (envelope-from bz) Date: Tue, 14 Apr 2009 19:44:12 GMT Message-Id: <200904141944.n3EJiCRg074736@freefall.freebsd.org> To: bz@FreeBSD.org, freebsd-net@FreeBSD.org, bz@FreeBSD.org From: bz@FreeBSD.org Cc: Subject: Re: kern/125079: [ppp] host routes added by ppp with gateway flag (regression) X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2009 19:44:13 -0000 Synopsis: [ppp] host routes added by ppp with gateway flag (regression) Responsible-Changed-From-To: freebsd-net->bz Responsible-Changed-By: bz Responsible-Changed-When: Tue Apr 14 19:43:57 UTC 2009 Responsible-Changed-Why: follow-ups to me. http://www.freebsd.org/cgi/query-pr.cgi?pr=125079 From owner-freebsd-net@FreeBSD.ORG Tue Apr 14 19:44:34 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 70D291065680; Tue, 14 Apr 2009 19:44:34 +0000 (UTC) (envelope-from bz@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 450DA8FC17; Tue, 14 Apr 2009 19:44:34 +0000 (UTC) (envelope-from bz@FreeBSD.org) Received: from freefall.freebsd.org (bz@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3EJiYfU074790; Tue, 14 Apr 2009 19:44:34 GMT (envelope-from bz@freefall.freebsd.org) Received: (from bz@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3EJiY7g074786; Tue, 14 Apr 2009 19:44:34 GMT (envelope-from bz) Date: Tue, 14 Apr 2009 19:44:34 GMT Message-Id: <200904141944.n3EJiY7g074786@freefall.freebsd.org> To: bz@FreeBSD.org, freebsd-net@FreeBSD.org, bz@FreeBSD.org From: bz@FreeBSD.org Cc: Subject: Re: kern/122068: [ppp] ppp can not set the correct interface with pptpd X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2009 19:44:36 -0000 Synopsis: [ppp] ppp can not set the correct interface with pptpd Responsible-Changed-From-To: freebsd-net->bz Responsible-Changed-By: bz Responsible-Changed-When: Tue Apr 14 19:44:22 UTC 2009 Responsible-Changed-Why: follow-ups to me. http://www.freebsd.org/cgi/query-pr.cgi?pr=122068 From owner-freebsd-net@FreeBSD.ORG Tue Apr 14 20:54:56 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 00B7F106566C; Tue, 14 Apr 2009 20:54:56 +0000 (UTC) (envelope-from sullrich@gmail.com) Received: from mail-fx0-f167.google.com (mail-fx0-f167.google.com [209.85.220.167]) by mx1.freebsd.org (Postfix) with ESMTP id 582858FC12; Tue, 14 Apr 2009 20:54:55 +0000 (UTC) (envelope-from sullrich@gmail.com) Received: by fxm11 with SMTP id 11so2659850fxm.43 for ; Tue, 14 Apr 2009 13:54:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :from:date:message-id:subject:to:cc:content-type :content-transfer-encoding; bh=qQ4gwaxZCb8Rgu6Dy0XS/2kRiijk0lNtFgG6/I21Pew=; b=EdSmBgJArqpCQ9T04Qrte4QQZ928V9MfGR5tsyD+lT6Rpgj5noybNUlfNQZb5ChbDm RdvNro0G3zdPbRIQQZHLLCP4B0beUfoTNclpoL9MrXPh1E9HP88WbFX+WVnOTBzioAhx IsJWF1rqskujZXxYLMNnQ2qT6N2/SN8TV+/7k= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:content-transfer-encoding; b=REs6Ctwd8TsEcCdEcN0DEY5Lgi3FpbRm/vctDla5mKnfH9fTb8M2ba7Tz5kqBHHgkO H59r3/1S4rPfyNiLqME0Zw02SWfONN1PshXPPWklIO2q5XhI0Tfc1ZtimY+etCuWdFd1 pL+ib0yMH6W6kW+RDJr0h1Vq4vAgxlvFpWtZs= MIME-Version: 1.0 Received: by 10.103.2.14 with SMTP id e14mr4175605mui.41.1239740699202; Tue, 14 Apr 2009 13:24:59 -0700 (PDT) In-Reply-To: <20090226141138.GA91564@zeninc.net> References: <85c4b1850902170448p7a59d50bt6bdaa89aa01c51d7@mail.gmail.com> <20090217143425.GA58591@zeninc.net> <20090217143409.J53478@maildrop.int.zabbadoz.net> <20090226141138.GA91564@zeninc.net> From: Scott Ullrich Date: Tue, 14 Apr 2009 16:24:44 -0400 Message-ID: To: VANHULLEBUS Yvan Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: "Bjoern A. Zeeb" , freebsd-net@freebsd.org Subject: Re: NATT patch and FreeBSD's setkey X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2009 20:54:56 -0000 On Thu, Feb 26, 2009 at 10:11 AM, VANHULLEBUS Yvan wrot= e: > On Tue, Feb 17, 2009 at 02:41:41PM +0000, Bjoern A. Zeeb wrote: [snip] >> We have about 3 months left to get that patch in for 8; ideally 6 >> weeks. =A0Can you update the nat-t patch in a way as discussed here >> before so that the extra address is in etc. and we can move forward? > > Done, new version is available here: > http://people.freebsd.org/~vanhu/NAT-T/experimental/patch-FreeBSD-TRUNK-N= ATT-pfkey-clean-2009-02-26.diff Hello, We recently tested this patch on a up to date current as of a couple hours ago and it seems to break all outgoing UDP traffic (DNS included). Has anyone else experienced this issue? Backing the patch out of our pfSense patch roster cleared up the problem. Is there a newer patch available by chance? Thanks, Scott From owner-freebsd-net@FreeBSD.ORG Tue Apr 14 21:39:35 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6C2FE1065676; Tue, 14 Apr 2009 21:39:35 +0000 (UTC) (envelope-from linimon@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 428A58FC12; Tue, 14 Apr 2009 21:39:35 +0000 (UTC) (envelope-from linimon@FreeBSD.org) Received: from freefall.freebsd.org (linimon@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3ELdZcw025213; Tue, 14 Apr 2009 21:39:35 GMT (envelope-from linimon@freefall.freebsd.org) Received: (from linimon@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3ELdZJj025209; Tue, 14 Apr 2009 21:39:35 GMT (envelope-from linimon) Date: Tue, 14 Apr 2009 21:39:35 GMT Message-Id: <200904142139.n3ELdZJj025209@freefall.freebsd.org> To: linimon@FreeBSD.org, freebsd-bugs@FreeBSD.org, freebsd-net@FreeBSD.org From: linimon@FreeBSD.org Cc: Subject: Re: kern/133736: [udp] ip_id not protected ... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2009 21:39:36 -0000 Old Synopsis: ip_id not protected ... New Synopsis: [udp] ip_id not protected ... Responsible-Changed-From-To: freebsd-bugs->freebsd-net Responsible-Changed-By: linimon Responsible-Changed-When: Tue Apr 14 21:38:57 UTC 2009 Responsible-Changed-Why: Over to maintainer(s). http://www.freebsd.org/cgi/query-pr.cgi?pr=133736 From owner-freebsd-net@FreeBSD.ORG Tue Apr 14 21:50:42 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3E62D106566C for ; Tue, 14 Apr 2009 21:50:42 +0000 (UTC) (envelope-from p.pisati@oltrelinux.com) Received: from joe.mail.tiscali.it (joe.mail.tiscali.it [213.205.33.54]) by mx1.freebsd.org (Postfix) with ESMTP id 024EA8FC1C for ; Tue, 14 Apr 2009 21:50:41 +0000 (UTC) (envelope-from p.pisati@oltrelinux.com) Received: from newluxor.wired.org (94.36.100.254) by joe.mail.tiscali.it (8.0.022) id 499F0396027CFF34; Tue, 14 Apr 2009 23:38:43 +0200 Message-ID: <49E50262.8060603@oltrelinux.com> Date: Tue, 14 Apr 2009 23:38:42 +0200 From: Paolo Pisati User-Agent: Thunderbird 2.0.0.18 (X11/20081214) MIME-Version: 1.0 To: freebsd-ipfw@freebsd.org, freebsd-net@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Subject: [patch] mbuf aware libalias X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2009 21:50:42 -0000 http://people.freebsd.org/~piso/libalias_mbuf.diff this patch makes libalias able to handle mbuf: TOS, big MTU, much less copy-around, etcetc. I encourage people to test it, since i would like to commit it soon. Known issues: -documentation was not updated -i didn't convert the fragment handling part (GetFragment, SaveFragment&C) since i would like to axe it -all the modules still require some copy-around to work, but i'm teaching them, piece by piece, how to use mbuf bye, P. From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 00:22:59 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 693521065749 for ; Wed, 15 Apr 2009 00:22:59 +0000 (UTC) (envelope-from sfourman@gmail.com) Received: from qw-out-2122.google.com (qw-out-2122.google.com [74.125.92.27]) by mx1.freebsd.org (Postfix) with ESMTP id 1EE7B8FC0A for ; Wed, 15 Apr 2009 00:22:58 +0000 (UTC) (envelope-from sfourman@gmail.com) Received: by qw-out-2122.google.com with SMTP id 9so2017136qwb.7 for ; Tue, 14 Apr 2009 17:22:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=Ae/eQYGiiu7cETm8m85KjTEk34tnD4F9Gt60Ooy2tMs=; b=MN+XOyBMgytBTezn2jJBcO3mD3Xrz+uLYafOk38jlfMW+34brgbcOI7fkpKZIwd1IW aFblXjuL3e4eei88UBrPSrfUPG0AwUTa8fLn3UPI0D0g+MtDW0WOA1bR2VXYOlBX41WM X+a0lAabFrFjRXVzAbiFiKylG79JWmaN8g/EA= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=c85inS/vvOus+L9BFJzR1X55O5eDjFaWlBf6G5ZRq8B80rQRUU4DX5yRFM6fgQC3c0 khxU1m1oyPtoDWB1euNG0Sh3xEcw65vluD8FCUtYTVrIVLHkz/LqfwHKnF46bhgDuA1h REPHe/CSffHV424qxZ9JpY5NsZ60EjZRDpcwM= MIME-Version: 1.0 Received: by 10.229.79.7 with SMTP id n7mr2293840qck.87.1239754978402; Tue, 14 Apr 2009 17:22:58 -0700 (PDT) In-Reply-To: <20090414.212318.41684722.sthaug@nethelp.no> References: <20090413.220932.74699777.sthaug@nethelp.no> <49E41755.8050701@elischer.org> <49E48799.1000300@ibctech.ca> <20090414.212318.41684722.sthaug@nethelp.no> Date: Tue, 14 Apr 2009 19:22:58 -0500 Message-ID: <11167f520904141722r16b537a9o58497c9719fb6fc5@mail.gmail.com> From: "Sam Fourman Jr." To: sthaug@nethelp.no Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-net@freebsd.org, julian@elischer.org, pcc@gmx.net, steve@ibctech.ca Subject: Re: Multiple default routes / Force external routing X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 00:22:59 -0000 On Tue, Apr 14, 2009 at 2:23 PM, wrote: >> > I think you are rather confused about what Multiple FIBs is.. >> > All it is is teh =A0ability to make a packet use a particular >> > FIB on it's outgoing path. There is not such thing as an interface >> > being "In" a FIB. All interfaces are still visible to the routing code >> > by default, and The IP stack still knows about them.I think the IP >> > stack set's the 'loopback' flag on a packet regardless of the FIB >> > selected if teh dest is one of its own addresses. >> > >> > What you want is VIMAGE. is VIMAGE fully integrated into FreeBSD 8 CURRENT? (I believe this answer is no) also is VIMAGE expected to make it into FreeBSD 8? Maybe Someone will give a VIMAGE update at BSDCan this year Sam Fourman Jr. From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 00:52:48 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7D3321065670 for ; Wed, 15 Apr 2009 00:52:48 +0000 (UTC) (envelope-from steve@ibctech.ca) Received: from ibctech.ca (unknown [IPv6:2607:f118::b6]) by mx1.freebsd.org (Postfix) with SMTP id 0C49E8FC14 for ; Wed, 15 Apr 2009 00:52:47 +0000 (UTC) (envelope-from steve@ibctech.ca) Received: (qmail 2573 invoked by uid 89); 15 Apr 2009 00:52:47 -0000 Received: from unknown (HELO ?IPv6:2607:f118::5?) (steve@ibctech.ca@2607:f118::5) by 2607:f118::b6 with ESMTPA; 15 Apr 2009 00:52:47 -0000 Message-ID: <49E52FD4.2060103@ibctech.ca> Date: Tue, 14 Apr 2009 20:52:36 -0400 From: Steve Bertrand User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) MIME-Version: 1.0 To: "Sam Fourman Jr." References: <20090413.220932.74699777.sthaug@nethelp.no> <49E41755.8050701@elischer.org> <49E48799.1000300@ibctech.ca> <20090414.212318.41684722.sthaug@nethelp.no> <11167f520904141722r16b537a9o58497c9719fb6fc5@mail.gmail.com> In-Reply-To: <11167f520904141722r16b537a9o58497c9719fb6fc5@mail.gmail.com> X-Enigmail-Version: 0.95.7 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: pcc@gmx.net, freebsd-net@freebsd.org, julian@elischer.org, sthaug@nethelp.no Subject: Re: [OT] Multiple default routes / Force external routing X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 00:52:48 -0000 Sam Fourman Jr. wrote: > On Tue, Apr 14, 2009 at 2:23 PM, wrote: >>>> I think you are rather confused about what Multiple FIBs is.. >>>> All it is is teh ability to make a packet use a particular >>>> FIB on it's outgoing path. There is not such thing as an interface >>>> being "In" a FIB. All interfaces are still visible to the routing code >>>> by default, and The IP stack still knows about them.I think the IP >>>> stack set's the 'loopback' flag on a packet regardless of the FIB >>>> selected if teh dest is one of its own addresses. >>>> >>>> What you want is VIMAGE. > > is VIMAGE fully integrated into FreeBSD 8 CURRENT? (I believe this > answer is no) > also is VIMAGE expected to make it into FreeBSD 8? > > Maybe Someone will give a VIMAGE update at BSDCan this year Don't know about VIMAGE, but regarding BSDCan, will those who are going respond to me off-list? I'm pretty close to Toronto, and I am seriously considering attending this year. Knowing who is close to me geographically on this list would be great! Steve From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 05:44:29 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 29196106564A for ; Wed, 15 Apr 2009 05:44:29 +0000 (UTC) (envelope-from julian@elischer.org) Received: from s-utl01-sjpop.stsn.net (s-utl01-sjpop.stsn.net [72.254.0.201]) by mx1.freebsd.org (Postfix) with SMTP id 0E56B8FC17 for ; Wed, 15 Apr 2009 05:44:28 +0000 (UTC) (envelope-from julian@elischer.org) Received: from s-utl01-sjpop.stsn.net ([127.0.0.1]) by s-utl01-sjpop.stsn.net (SMSSMTP 4.1.2.20) with SMTP id M2009041422285307532 ; Tue, 14 Apr 2009 22:28:53 -0700 X-Spam-Status: No, hits=0.0 required=9.9 tests=ALL_TRUSTED: -2.867,BAYES_00: -1.665 X-Spam-Level: Received: from julian-mac.elischer.org ([10.64.87.166]) by s-utl01-sjpop.stsn.net (using TLSv1/SSLv3 with cipher AES256-SHA (256 bits)); Tue, 14 Apr 2009 22:28:51 -0700 Message-ID: <49E57076.7040509@elischer.org> Date: Tue, 14 Apr 2009 22:28:22 -0700 From: Julian Elischer User-Agent: Thunderbird 2.0.0.21 (Macintosh/20090302) MIME-Version: 1.0 To: "Sam Fourman Jr." References: <20090413.220932.74699777.sthaug@nethelp.no> <49E41755.8050701@elischer.org> <49E48799.1000300@ibctech.ca> <20090414.212318.41684722.sthaug@nethelp.no> <11167f520904141722r16b537a9o58497c9719fb6fc5@mail.gmail.com> In-Reply-To: <11167f520904141722r16b537a9o58497c9719fb6fc5@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: pcc@gmx.net, freebsd-net@freebsd.org, steve@ibctech.ca, sthaug@nethelp.no Subject: Re: Multiple default routes / Force external routing X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 05:44:29 -0000 Sam Fourman Jr. wrote: > On Tue, Apr 14, 2009 at 2:23 PM, wrote: >>>> I think you are rather confused about what Multiple FIBs is.. >>>> All it is is teh ability to make a packet use a particular >>>> FIB on it's outgoing path. There is not such thing as an interface >>>> being "In" a FIB. All interfaces are still visible to the routing code >>>> by default, and The IP stack still knows about them.I think the IP >>>> stack set's the 'loopback' flag on a packet regardless of the FIB >>>> selected if teh dest is one of its own addresses. >>>> >>>> What you want is VIMAGE. > > is VIMAGE fully integrated into FreeBSD 8 CURRENT? (I believe this > answer is no) > also is VIMAGE expected to make it into FreeBSD 8? not fully but a lot of it is under way > > Maybe Someone will give a VIMAGE update at BSDCan this year I'm hoping the report will be "try this option in your kernel" but real life tends to make these plans variable. > > Sam Fourman Jr. From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 07:09:10 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4E0331065670 for ; Wed, 15 Apr 2009 07:09:10 +0000 (UTC) (envelope-from vanhu@zeninc.net) Received: from smtp.zeninc.net (smtp.zeninc.net [80.67.176.25]) by mx1.freebsd.org (Postfix) with ESMTP id E85278FC15 for ; Wed, 15 Apr 2009 07:09:09 +0000 (UTC) (envelope-from vanhu@zeninc.net) Received: from astro.zen.inc (astro.zen.inc [192.168.1.239]) by smtp.zeninc.net (smtpd) with ESMTP id 897CE2798B8; Wed, 15 Apr 2009 09:09:08 +0200 (CEST) Received: by astro.zen.inc (Postfix, from userid 1000) id 1D97A1704F; Wed, 15 Apr 2009 09:12:48 +0200 (CEST) Date: Wed, 15 Apr 2009 09:12:48 +0200 From: VANHULLEBUS Yvan To: Scott Ullrich Message-ID: <20090415071247.GA78251@zeninc.net> References: <85c4b1850902170448p7a59d50bt6bdaa89aa01c51d7@mail.gmail.com> <20090217143425.GA58591@zeninc.net> <20090217143409.J53478@maildrop.int.zabbadoz.net> <20090226141138.GA91564@zeninc.net> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: All mail clients suck. This one just sucks less. Cc: "Bjoern A. Zeeb" , freebsd-net@freebsd.org Subject: Re: NATT patch and FreeBSD's setkey X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 07:09:10 -0000 On Tue, Apr 14, 2009 at 04:24:44PM -0400, Scott Ullrich wrote: > On Thu, Feb 26, 2009 at 10:11 AM, VANHULLEBUS Yvan wrote: > > On Tue, Feb 17, 2009 at 02:41:41PM +0000, Bjoern A. Zeeb wrote: > [snip] > >> We have about 3 months left to get that patch in for 8; ideally 6 > >> weeks. ═Can you update the nat-t patch in a way as discussed here > >> before so that the extra address is in etc. and we can move forward? > > > > Done, new version is available here: > > http://people.freebsd.org/~vanhu/NAT-T/experimental/patch-FreeBSD-TRUNK-NATT-pfkey-clean-2009-02-26.diff > > Hello, Hi. > We recently tested this patch on a up to date current as of a couple > hours ago and it seems to break all outgoing UDP traffic (DNS > included). There's a conflict between INP_ESPINUDP* and other INP_* commited since 2009-02-26. > Has anyone else experienced this issue? Backing the patch out of our > pfSense patch roster cleared up the problem. > > Is there a newer patch available by chance? Actually, not, because there are no bits left in inp_flags, so we are actually looking for another location to put them. Yvan. From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 10:50:05 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5171E106568B for ; Wed, 15 Apr 2009 10:50:05 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 3E2A28FC1D for ; Wed, 15 Apr 2009 10:50:05 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3FAo5dZ023804 for ; Wed, 15 Apr 2009 10:50:05 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3FAo5CG023803; Wed, 15 Apr 2009 10:50:05 GMT (envelope-from gnats) Date: Wed, 15 Apr 2009 10:50:05 GMT Message-Id: <200904151050.n3FAo5CG023803@freefall.freebsd.org> To: freebsd-net@FreeBSD.org From: Dennis Melentyev Cc: Subject: Re: kern/133572: [ppp] [hang] incoming PPTP connection hangs the system X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Dennis Melentyev List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 10:50:06 -0000 The following reply was made to PR kern/133572; it has been noted by GNATS. From: Dennis Melentyev To: Max Laier Cc: bug-followup@freebsd.org Subject: Re: kern/133572: [ppp] [hang] incoming PPTP connection hangs the system Date: Wed, 15 Apr 2009 13:27:41 +0300 Hi Max, It was some hard time for me, sorry for late response. I did enabled KDB, DDB and WITNESS on the same sources. Unfortunately there was just plain hangs once some GRE was trying to get through (netgraph? PF? routing?) With these options enabled, hangs are much more often than without them. Once hung, no way to break into debugger, no panics, numlock not changing lights on keyboard, mouse not responding, hdd silent, network not available, nothing. 3 different HW platforms were tried (all of them were UP+i386+32bit). Highest CPU temperature was 52C. No chance to go with 7.2-PRERELEASE. Had to downgrade to 7.1-RELEASE. /dennis 2009/4/11 Max Laier : > Is it possible for you to turn on WITNESS on this machine to obtain possi= ble > LORs that might be responsible for the hang? =C2=A0Also, do you have the > possibility to enable DDB and drop into it from the console (if it is not= a > hard hang but a live lock)? > > -- > =C2=A0Max > --=20 Dennis Melentyev From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 11:36:33 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 894BE1065690 for ; Wed, 15 Apr 2009 11:36:33 +0000 (UTC) (envelope-from bms@incunabulum.net) Received: from out2.smtp.messagingengine.com (out2.smtp.messagingengine.com [66.111.4.26]) by mx1.freebsd.org (Postfix) with ESMTP id 5BADD8FC19 for ; Wed, 15 Apr 2009 11:36:33 +0000 (UTC) (envelope-from bms@incunabulum.net) Received: from compute2.internal (compute2.internal [10.202.2.42]) by out1.messagingengine.com (Postfix) with ESMTP id C51AE31E6AA for ; Wed, 15 Apr 2009 07:36:32 -0400 (EDT) Received: from heartbeat1.messagingengine.com ([10.202.2.160]) by compute2.internal (MEProxy); Wed, 15 Apr 2009 07:36:32 -0400 X-Sasl-enc: 4hebuHgCtFR6NZtnXeWNU4Grw8Vn3iGcgH7lVQ4aQ/dL 1239795392 Received: from empiric.lon.incunabulum.net (82-35-112-254.cable.ubr07.dals.blueyonder.co.uk [82.35.112.254]) by mail.messagingengine.com (Postfix) with ESMTPSA id 6653A36744 for ; Wed, 15 Apr 2009 07:36:32 -0400 (EDT) Message-ID: <49E5D4CF.8050707@incunabulum.net> Date: Wed, 15 Apr 2009 12:36:31 +0000 From: Bruce Simpson User-Agent: Thunderbird 2.0.0.21 (X11/20090302) MIME-Version: 1.0 To: FreeBSD Net Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: OpenSSL DTLS bug fix patches X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 11:36:34 -0000 I know it's late in the 7.2 game, but does our OpenSSL maintainer know about this? http://sctp.fh-muenster.de/dtls-patches.html It would be nice to have in a release, although I'm tracking branches for anything I'm doing at the moment. JFYI, BMS From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 11:40:07 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 91F77106564A for ; Wed, 15 Apr 2009 11:40:05 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 63BD38FC08 for ; Wed, 15 Apr 2009 11:40:05 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3FBe4cP093374 for ; Wed, 15 Apr 2009 11:40:04 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3FBe43E093373; Wed, 15 Apr 2009 11:40:04 GMT (envelope-from gnats) Date: Wed, 15 Apr 2009 11:40:04 GMT Message-Id: <200904151140.n3FBe43E093373@freefall.freebsd.org> To: freebsd-net@FreeBSD.org From: Adam K Kirchhoff Cc: Subject: Re: kern/131153: [iwi] iwi doesn't see a wireless network X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Adam K Kirchhoff List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 11:40:07 -0000 The following reply was made to PR kern/131153; it has been noted by GNATS. From: Adam K Kirchhoff To: bug-followup@FreeBSD.org, adamk@voicenet.com Cc: Subject: Re: kern/131153: [iwi] iwi doesn't see a wireless network Date: Wed, 15 Apr 2009 07:18:15 -0400 This problem persists with 7.2-PRERELEASE, with both iwi and ath. Any ideas? Adam From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 14:05:22 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4016E1065678 for ; Wed, 15 Apr 2009 14:05:22 +0000 (UTC) (envelope-from alexey.blinkov@gmail.com) Received: from fg-out-1718.google.com (fg-out-1718.google.com [72.14.220.158]) by mx1.freebsd.org (Postfix) with ESMTP id C95A68FC28 for ; Wed, 15 Apr 2009 14:05:18 +0000 (UTC) (envelope-from alexey.blinkov@gmail.com) Received: by fg-out-1718.google.com with SMTP id 13so816744fge.12 for ; Wed, 15 Apr 2009 07:05:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type:content-transfer-encoding; bh=9Ef3a/vmIxVSM8pSxwBbN+WVPYoju3tZGtZ+4i2Fyr8=; b=bQ2OR3xj+rlM+WHmHdSuBStuiR29XIWNNAaUGxxdtrJIxnbz+7qjsWJQ8+h4QQzsXc UCqunzYCLKS4YY/426NoipLpn2mpPRi/MQMsHwVCQVNUM14fgoDAM7fzBo7r/kjBZBiA 51zlkORffAst6P30r/FkWt8H2CZwykodvqWHo= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type :content-transfer-encoding; b=yFgW7l6YJvZqxH7l4T599N3F6+96057Aq+L/Dwx3tnduzmrsDofs0how6BcIiJyfwf Z34bt3OTNN507ujB2eJR2kTILjitpzPQMbJYi4xsiYdx2diMMT6ugBbzdB61rSnc3whS hg9nDLQqCNN9MkcadomCRnCu9wClMkCflJsog= MIME-Version: 1.0 Received: by 10.86.61.13 with SMTP id j13mr163149fga.68.1239802972168; Wed, 15 Apr 2009 06:42:52 -0700 (PDT) Date: Wed, 15 Apr 2009 16:42:52 +0300 Message-ID: <2d934d80904150642r585049b4wadfdfc82a3d8c7fc@mail.gmail.com> From: =?UTF-8?B?0JDQu9C10LrRgdC10Lkg0JHQu9C40L3QutC+0LI=?= To: freebsd-net@freebsd.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Subject: MD5 authentication in quagga X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 14:05:22 -0000 Hi. I have a problem with Subj. In mailing list quagga me say for mailing to frebsd list. Quote: It is well documented that md5 'password' authentication for bgpd works, but only for outgoing packets... there is no way for FreeBSD (to my knowledge) to actually verify packets inbound. ...it's better than nothing ;) First one. My configuration in FreeBSD 7.1 /etc/rc.conf ipsec_enable=3D"YES" ipsec_file=3D"/etc/ipsec.conf" /etc/ipsec.conf flush; add x.x.x.x y.y.y.y tcp 0x1000 -A tcp-md5 "*********"; where: x.x.x.x - IP local side y.y.y.y - IP remote side ******** - password Next. My kernel was rebuilded with next options: options TCP_SIGNATURE options IPSEC device crypto device cryptodev device cryptodev Now i set password to bgp neighbor quagga-router(config router)# neighbor y.y.y.y password ******** And clear session quagga-router(config router)# do clear ip bgp y.y.y.y In remote side PASSWORD NOT SET YET, but bgp session passes to state UP, and network prefixes sending from local to remote side and vice versa. But neigborship must no upping if password not coincide... --=20 =D0=A1 =D1=83=D0=B2=D0=B0=D0=B6=D0=B5=D0=BD=D0=B8=D0=B5=D0=BC =D0=90=D0=BB= =D0=B5=D0=BA=D1=81=D0=B5=D0=B9 =D0=91=D0=BB=D0=B8=D0=BD=D0=BA=D0=BE=D0=B2 From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 14:20:11 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 414421065707 for ; Wed, 15 Apr 2009 14:20:11 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 2F8F08FC19 for ; Wed, 15 Apr 2009 14:20:11 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3FEKBsh007430 for ; Wed, 15 Apr 2009 14:20:11 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3FEKBfr007429; Wed, 15 Apr 2009 14:20:11 GMT (envelope-from gnats) Date: Wed, 15 Apr 2009 14:20:11 GMT Message-Id: <200904151420.n3FEKBfr007429@freefall.freebsd.org> To: freebsd-net@FreeBSD.org From: plethora87@aim.com Cc: Subject: Re: kern/133490: [bpf] [panic] 'kmem_map too small' panic on Dell r900 when bpf_bufsize and bpf_maxbufsize are increased X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: plethora87@aim.com List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 14:20:11 -0000 The following reply was made to PR kern/133490; it has been noted by GNATS. From: plethora87@aim.com To: bug-followup@FreeBSD.org Cc: Subject: Re: kern/133490: [bpf] [panic] 'kmem_map too small' panic on Dell r900 when bpf_bufsize and bpf_maxbufsize are increased Date: Wed, 15 Apr 2009 10:00:04 -0400 If I set the net.bpf buffers after boot-up, there's no immediate crash. But I just had a crash after a couple days of uptime: Dump header from device /dev/mfid0s1b Architecture: i386 Architecture Version: 2 Dump Length: 456548352B (435 MB) Blocksize: 512 Dumptime: Wed Apr 15 09:04:06 2009 Hostname: schnozz-nap-b Magic: FreeBSD Kernel Dump Version String: FreeBSD 7.1-RELEASE #3: Wed Apr 1 11:04:28 EDT 2009 root@schnozz-nap-a:/usr/obj/usr/src/sys/CCSP-KERNEL Panic String: kmem_malloc(16777216): kmem_map too small: 326787072 total allocated Dump Parity: 366409564 Bounds: 7 Dump Status: good I can upload the core file somewhere if it would be helpful. -Terry From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 14:55:07 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4340E106564A for ; Wed, 15 Apr 2009 14:55:07 +0000 (UTC) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from mail.cksoft.de (mail.cksoft.de [195.88.108.3]) by mx1.freebsd.org (Postfix) with ESMTP id F1E1E8FC1D for ; Wed, 15 Apr 2009 14:55:06 +0000 (UTC) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from localhost (amavis.fra.cksoft.de [192.168.74.71]) by mail.cksoft.de (Postfix) with ESMTP id C031E41C6F2; Wed, 15 Apr 2009 16:55:05 +0200 (CEST) X-Virus-Scanned: amavisd-new at cksoft.de Received: from mail.cksoft.de ([195.88.108.3]) by localhost (amavis.fra.cksoft.de [192.168.74.71]) (amavisd-new, port 10024) with ESMTP id gRv2mER7Fk3r; Wed, 15 Apr 2009 16:55:05 +0200 (CEST) Received: by mail.cksoft.de (Postfix, from userid 66) id 5353441C6DB; Wed, 15 Apr 2009 16:55:05 +0200 (CEST) Received: from maildrop.int.zabbadoz.net (maildrop.int.zabbadoz.net [10.111.66.10]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.int.zabbadoz.net (Postfix) with ESMTP id D52294448E6; Wed, 15 Apr 2009 14:50:56 +0000 (UTC) Date: Wed, 15 Apr 2009 14:50:56 +0000 (UTC) From: "Bjoern A. Zeeb" X-X-Sender: bz@maildrop.int.zabbadoz.net To: alexey.blinkov@gmail.com In-Reply-To: <2d934d80904150642r585049b4wadfdfc82a3d8c7fc@mail.gmail.com> Message-ID: <20090415144956.T15361@maildrop.int.zabbadoz.net> References: <2d934d80904150642r585049b4wadfdfc82a3d8c7fc@mail.gmail.com> X-OpenPGP-Key: 0x14003F198FEFA3E77207EE8D2B58B8F83CCF1842 MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: freebsd-net@freebsd.org Subject: Re: MD5 authentication in quagga X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 14:55:07 -0000 On Wed, 15 Apr 2009, wrote: > Hi. I have a problem with Subj. In mailing list quagga me say for > mailing to frebsd list. > > Quote: > > It is well documented that md5 'password' authentication for bgpd works, > but only for outgoing packets... there is no way for FreeBSD (to my > knowledge) to actually verify packets inbound. > > ...it's better than nothing ;) > > > First one. My configuration in FreeBSD 7.1 > > /etc/rc.conf > > ipsec_enable="YES" > ipsec_file="/etc/ipsec.conf" > > /etc/ipsec.conf > > flush; > add x.x.x.x y.y.y.y tcp 0x1000 -A tcp-md5 "*********"; > > where: > > x.x.x.x - IP local side > y.y.y.y - IP remote side > ******** - password > > Next. My kernel was rebuilded with next options: > > options TCP_SIGNATURE > options IPSEC > device crypto > device cryptodev > device cryptodev > > Now i set password to bgp neighbor > > quagga-router(config router)# neighbor y.y.y.y password ******** > > And clear session > > quagga-router(config router)# do clear ip bgp y.y.y.y > > In remote side PASSWORD NOT SET YET, but bgp session passes to state > UP, and network prefixes sending from local to remote side and vice > versa. > > But neigborship must no upping if password not coincide... And what's the peer? If it's another FreeBSD box uon't check incoming packets either and thus it won't make a difference to when it's not there. /bz -- Bjoern A. Zeeb The greatest risk is not taking one. From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 15:07:15 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B1B0610656BF for ; Wed, 15 Apr 2009 15:07:15 +0000 (UTC) (envelope-from alexey.blinkov@gmail.com) Received: from fg-out-1718.google.com (fg-out-1718.google.com [72.14.220.156]) by mx1.freebsd.org (Postfix) with ESMTP id 42A968FC1F for ; Wed, 15 Apr 2009 15:07:15 +0000 (UTC) (envelope-from alexey.blinkov@gmail.com) Received: by fg-out-1718.google.com with SMTP id 19so571377fgg.12 for ; Wed, 15 Apr 2009 08:07:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=QiylY1FMV+SqOVL+sO94KY/iiDzlsG+TqziULSb17xA=; b=NtCxDO/BYniwIcmgsFto6CbzE7xVr36iF9K/DqOPu1+GJ9qpGcr9mn7lpdfGCZCPzp mEwXsrgGR/3Ki3ZfQJZ1aisPcfwokYpNH8JLK+q3iOepbbvcZlo7D7vJgyQvxskk5OJc xrpNazBgld4cxurB2CDTWzoIGZiZZLN95y94o= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=ftg90mNbonWdowcp1OXZ5rENqu1LkpWb4s5JyuL5J9mc1OVcXyixY76qYt5jfk1xy9 RMEFHh81fFmjIu2d4aLRN5Z1/KTTMzDgojaEk5gVIFKaMi/qTLft/WNcVay46YF+VyKX DcjaAFK9XjlHm+jg7N7HCxrvbNI2krLl+c7r4= MIME-Version: 1.0 Received: by 10.86.26.11 with SMTP id 11mr245468fgz.33.1239808034453; Wed, 15 Apr 2009 08:07:14 -0700 (PDT) In-Reply-To: <20090415144956.T15361@maildrop.int.zabbadoz.net> References: <2d934d80904150642r585049b4wadfdfc82a3d8c7fc@mail.gmail.com> <20090415144956.T15361@maildrop.int.zabbadoz.net> Date: Wed, 15 Apr 2009 18:07:14 +0300 Message-ID: <2d934d80904150807p732bce43gc110fe6ae042507d@mail.gmail.com> From: =?UTF-8?B?0JDQu9C10LrRgdC10Lkg0JHQu9C40L3QutC+0LI=?= To: "Bjoern A. Zeeb" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: freebsd-net Subject: Re: MD5 authentication in quagga X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 15:07:16 -0000 If modelling ideal situation, then: md5 password doesn`t match or empty, then peering must be closed... Now md5 working only for outgoing packets, not for input. And peering not closed if password miss or not match. because bsd not check incoming packets, i think... From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 15:59:41 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A2053106564A for ; Wed, 15 Apr 2009 15:59:41 +0000 (UTC) (envelope-from renaud@vmware.com) Received: from smtp-outbound-2.vmware.com (smtp-outbound-2.vmware.com [65.115.85.73]) by mx1.freebsd.org (Postfix) with ESMTP id 8EB988FC17 for ; Wed, 15 Apr 2009 15:59:41 +0000 (UTC) (envelope-from renaud@vmware.com) Received: from mailhost2.vmware.com (mailhost2.vmware.com [10.16.67.167]) by smtp-outbound-2.vmware.com (Postfix) with ESMTP id CC9B451005 for ; Wed, 15 Apr 2009 08:40:20 -0700 (PDT) Received: from renaud-dev1 (renaud-dev1.eng.vmware.com [10.20.118.23]) by mailhost2.vmware.com (Postfix) with ESMTP id A7FF58E5DF for ; Wed, 15 Apr 2009 08:40:20 -0700 (PDT) Date: Wed, 15 Apr 2009 08:40:31 -0700 From: Renaud Lienhart To: freebsd-net@freebsd.org Message-ID: <20090415084031.6d149fef@renaud-dev1> Organization: VMware, Inc. X-Mailer: Claws Mail 3.6.1 (GTK+ 2.16.1; i486-pc-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: tcp_output() might generate invalid TSO frames X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 15:59:41 -0000 Hi, We're having trouble virtualizing FreeBSD 7+ on ESX because of an issue with the stack's TSO implementation: it sometimes generates TSO packets whose payload size is actually smaller than the MSS. The faulty logic is described, along with a patch, in PR #132832. It has been opened for a while now, without any apparent activity, which is why I'm reaching the mailing list directly. ESX currently drops these packets as many physical nics are known to choke on such frames, which effectively limits FreeBSD guests' performance. I don't know about other virtualization stacks' behavior. http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/132832 Thanks for your time, Renaud From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 16:58:05 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D8C14106564A; Wed, 15 Apr 2009 16:58:05 +0000 (UTC) (envelope-from sullrich@gmail.com) Received: from mail-fx0-f167.google.com (mail-fx0-f167.google.com [209.85.220.167]) by mx1.freebsd.org (Postfix) with ESMTP id 390FE8FC1B; Wed, 15 Apr 2009 16:58:04 +0000 (UTC) (envelope-from sullrich@gmail.com) Received: by fxm11 with SMTP id 11so3059031fxm.43 for ; Wed, 15 Apr 2009 09:58:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :from:date:message-id:subject:to:cc:content-type :content-transfer-encoding; bh=Qqi1+d4UAK8cU99xvDKwWOSJvCJgs2cOGJo1ngl7Vtk=; b=kqYCa9n7afnAvyBhAWbop0nQV5cPxIHzQG/em/O7FPCgxJVdUNLCcFhU9cs2mQBVSd q131FUoTpL4BdCbHSiW4xG4DiSqkn7uJska/91XECdas6F4ljTI3PtjUpclHKGVoGxzd u87sHjOndOosIQaAkC+d4nySuM2tf6qz5YCNQ= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:content-transfer-encoding; b=c7hpnHWWhseGgM3oDuZFsL20ra8B9fEkVW5hflvDg/cg8Wv3GTc1BC7JQchleeVtho 2kzxLlsoVccuwQpVO6i4CjG8w5XE0koO7CJXyDjTI2o0zCf5rpnW06XJRbTIWcizkcM3 aSOUIL5zkK33yDb6fWD5LyUkt4LDlErlpOgl0= MIME-Version: 1.0 Received: by 10.103.244.19 with SMTP id w19mr254474mur.134.1239814684158; Wed, 15 Apr 2009 09:58:04 -0700 (PDT) In-Reply-To: <20090415071247.GA78251@zeninc.net> References: <85c4b1850902170448p7a59d50bt6bdaa89aa01c51d7@mail.gmail.com> <20090217143425.GA58591@zeninc.net> <20090217143409.J53478@maildrop.int.zabbadoz.net> <20090226141138.GA91564@zeninc.net> <20090415071247.GA78251@zeninc.net> From: Scott Ullrich Date: Wed, 15 Apr 2009 12:57:49 -0400 Message-ID: To: VANHULLEBUS Yvan Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: "Bjoern A. Zeeb" , freebsd-net@freebsd.org Subject: Re: NATT patch and FreeBSD's setkey X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 16:58:06 -0000 On Wed, Apr 15, 2009 at 3:12 AM, VANHULLEBUS Yvan wrote: > Actually, not, because there are no bits left in inp_flags, so we are > actually looking for another location to put them. Sounds good and thanks for the information. We will be happy to test the next patch when it's ready. Thanks for maintaing the patch so far, Scott From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 18:09:22 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 608DB106566C for ; Wed, 15 Apr 2009 18:09:22 +0000 (UTC) (envelope-from alexey-lukashin@yandex.ru) Received: from mail.nevalink.net (mail.nevalink.net [89.223.40.206]) by mx1.freebsd.org (Postfix) with ESMTP id 1E35C8FC1B for ; Wed, 15 Apr 2009 18:09:22 +0000 (UTC) (envelope-from alexey-lukashin@yandex.ru) Received: from [192.168.1.101] (unknown [10.145.216.33]) by mail.nevalink.net (Nevalink) with ESMTP id 31CAF83D8D0 for ; Wed, 15 Apr 2009 22:29:12 +0400 (MSD) Message-ID: <49E619CD.4000502@yandex.ru> Date: Wed, 15 Apr 2009 21:30:53 +0400 From: Alexey Lukashin User-Agent: Thunderbird 2.0.0.21 (X11/20090318) MIME-Version: 1.0 To: freebsd-net@freebsd.org Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Subject: Netgraph. panic in kernel X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 18:09:22 -0000 Hi all, I'm studying how Netgraph system works and trying to write my own netgraph node similar to ng_bridge. It catches packets from lower ng_ether hooks and transmits it to other interfaces using mac address hashtable. Packet processing in my node implemented similar to ng_bridge_rcvdata() in ng_bridge.c. I don't do anything with packet. I don't modifying packet header, I only send it to another interface. My interfaces are working in promiscuous mode with autosrc=0. But sometimes (after one or two hours working in network) I have an error with message: "rl1: discard frame w/o packet header" After it, my system halts. Is anybody knows, where the problem can be? When does this message appears? (system is FreeBSD 7.1-STABLE) Thank you. -- Best regards, Alexey Lukashin Saint-Petersburg, Russia From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 18:39:09 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9ACF91065675 for ; Wed, 15 Apr 2009 18:39:09 +0000 (UTC) (envelope-from mat.macy@gmail.com) Received: from an-out-0708.google.com (an-out-0708.google.com [209.85.132.246]) by mx1.freebsd.org (Postfix) with ESMTP id 516DE8FC0C for ; Wed, 15 Apr 2009 18:39:08 +0000 (UTC) (envelope-from mat.macy@gmail.com) Received: by an-out-0708.google.com with SMTP id d11so26864and.13 for ; Wed, 15 Apr 2009 11:39:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:date:x-google-sender-auth:message-id:subject:from:to:cc :content-type:content-transfer-encoding; bh=kkd7PzHvNQ1JIcW2XxGGFuIlib1LET1BKkc5j8JYxuM=; b=D4vuRsZtORIVNIwEsZL777XsJjRToIrkP8jKXmcOs/TaCFl7rnzdGoexaQ+QIr0Dj1 9LTcNBzbw3j9lYlreBnEagPs2NPa5UvOcZjCS3mVSE/EJTYLDGFMFF8wVsuwpXyM1Zw9 S9391V/mAD35pPXjCfPbQqAi1NhJWU5Z/roYs= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; b=dQcdre5sWw/62qakA67Hi+87vHE6qZ+Itd6p7aBBbnG0eIQ4J/Rtk4gcb6XKI8DmZN /552eNV3U5j6zZCNOG+9/550DnUzkKKfMkGRqG6y1J1zolhf4BnULzxAXKhScl+8Fa33 JotpgJ6FcvxwWoU0S59w/Tdkz4fGgPC5F3L0s= MIME-Version: 1.0 Sender: mat.macy@gmail.com Received: by 10.100.151.8 with SMTP id y8mr832880and.106.1239818820142; Wed, 15 Apr 2009 11:07:00 -0700 (PDT) In-Reply-To: <20090415084031.6d149fef@renaud-dev1> References: <20090415084031.6d149fef@renaud-dev1> Date: Wed, 15 Apr 2009 11:06:59 -0700 X-Google-Sender-Auth: cd3e7e9a9e708900 Message-ID: <3c1674c90904151106j543d4772s25786f81d7ff55a1@mail.gmail.com> From: Kip Macy To: Renaud Lienhart Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-net@freebsd.org Subject: Re: tcp_output() might generate invalid TSO frames X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 18:39:10 -0000 Interesting. That might explain a problem that Mike Silbersack is seeing with the latest em driver on vmware. I don't know of any NICs that actually choke on such frames. Nonetheless, it is silly behavior. I'll try to see if we can get this fixed before 7.2. Thanks, Kip On Wed, Apr 15, 2009 at 8:40 AM, Renaud Lienhart wrote: > Hi, > > We're having trouble virtualizing FreeBSD 7+ on ESX because of an issue > with the stack's TSO implementation: it sometimes generates TSO packets > whose payload size is actually smaller than the MSS. > > The faulty logic is described, along with a patch, in PR #132832. It > has been opened for a while now, without any apparent activity, which > is why I'm reaching the mailing list directly. > > ESX currently drops these packets as many physical nics are known to > choke on such frames, which effectively limits FreeBSD guests' > performance. > I don't know about other virtualization stacks' behavior. > > http://www.freebsd.org/cgi/query-pr.cgi?pr=3Dkern/132832 > > Thanks for your time, > > =A0 =A0 =A0 =A0Renaud > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > --=20 All that is necessary for the triumph of evil is that good men do nothing. Edmund Burke From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 19:10:43 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CD7CB10657CB for ; Wed, 15 Apr 2009 19:10:43 +0000 (UTC) (envelope-from Michael.Tuexen@lurchi.franken.de) Received: from mail-n.franken.de (drew.ipv6.franken.de [IPv6:2001:638:a02:a001:20e:cff:fe4a:feaa]) by mx1.freebsd.org (Postfix) with ESMTP id 60B218FC0C for ; Wed, 15 Apr 2009 19:10:43 +0000 (UTC) (envelope-from Michael.Tuexen@lurchi.franken.de) Received: from [192.168.1.194] (p508FF3B2.dip.t-dialin.net [80.143.243.178]) by mail-n.franken.de (Postfix) with ESMTP id 8A5D01C0B4049; Wed, 15 Apr 2009 21:10:41 +0200 (CEST) Message-Id: <822B17FC-60E1-4F19-8E62-BB2E5351CB99@lurchi.franken.de> From: =?ISO-8859-1?Q?Michael_T=FCxen?= To: Bruce Simpson In-Reply-To: <49E5D4CF.8050707@incunabulum.net> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v930.4) Date: Wed, 15 Apr 2009 21:10:39 +0200 References: <49E5D4CF.8050707@incunabulum.net> X-Mailer: Apple Mail (2.930.4) Cc: FreeBSD Net , Robin Seggelmann Subject: Re: OpenSSL DTLS bug fix patches X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 19:10:45 -0000 Hi Bruce, at least one member of the OpenSSL core team (Steven) has integrated our patches regarding bug fixes in the source code. So they will be included in the next release of OpenSSL. Best regards Michael On Apr 15, 2009, at 2:36 PM, Bruce Simpson wrote: > I know it's late in the 7.2 game, but does our OpenSSL maintainer > know about this? > > http://sctp.fh-muenster.de/dtls-patches.html > > It would be nice to have in a release, although I'm tracking > branches for anything I'm doing at the moment. > > JFYI, > BMS > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > From owner-freebsd-net@FreeBSD.ORG Wed Apr 15 20:34:11 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B626C1065670 for ; Wed, 15 Apr 2009 20:34:11 +0000 (UTC) (envelope-from jfvogel@gmail.com) Received: from rv-out-0506.google.com (rv-out-0506.google.com [209.85.198.227]) by mx1.freebsd.org (Postfix) with ESMTP id 87EC68FC1C for ; Wed, 15 Apr 2009 20:34:11 +0000 (UTC) (envelope-from jfvogel@gmail.com) Received: by rv-out-0506.google.com with SMTP id l9so73231rvb.43 for ; Wed, 15 Apr 2009 13:34:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=iX0nyAAJFYhyS3AlYTmoYwM3yln0inRPBcgeYFLclig=; b=xeeKTq1/ZtR9gcp1Pl1zjF30U3lrLJVQW/+NJPtUqHrq2xK8bUjX3sdGt9t/K4Ff4n MlwpeKIB+6YKw4t3eX0Q8ObY+b6zphAie2ArKXGgJuDWTu8c0oZOJF5YE0wtsZ0Dom/C GPqkBzslFA5m+bMCzlx7WE5s87/WfrUHSVamQ= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=QLr5teHCGbQMCNLiBmJz7co50wRwHoekM4qaypm163Zrh267MT9wQgXoJAZuxfqtbP XGTYs8ZwNELdrHRZSiXQQ4D1dJtluo1TDmsvAaLREnT92HBP2Y7/5FjURUj8uP6DFi0+ wxwNpUEcbQZZXY7SDp7CvLtlwgDQxt1w5b4Eo= MIME-Version: 1.0 Received: by 10.114.183.20 with SMTP id g20mr255738waf.142.1239825897570; Wed, 15 Apr 2009 13:04:57 -0700 (PDT) In-Reply-To: <3c1674c90904151106j543d4772s25786f81d7ff55a1@mail.gmail.com> References: <20090415084031.6d149fef@renaud-dev1> <3c1674c90904151106j543d4772s25786f81d7ff55a1@mail.gmail.com> Date: Wed, 15 Apr 2009 13:04:57 -0700 Message-ID: <2a41acea0904151304t69ff9f61q3053b2a011402626@mail.gmail.com> From: Jack Vogel To: Kip Macy Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Renaud Lienhart , freebsd-net@freebsd.org Subject: Re: tcp_output() might generate invalid TSO frames X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2009 20:34:12 -0000 No, the problem Mike is having is due to an issue in our new shared code in how we get the mac address, we changed it to support alt mac addresses, and it works find on our hardware, there is an issue in the vmware emulation. Nevertheless, if there's a problem in the TSO code it would be nice to get that fixed. Jack On Wed, Apr 15, 2009 at 11:06 AM, Kip Macy wrote: > Interesting. That might explain a problem that Mike Silbersack is > seeing with the latest em driver on vmware. > > I don't know of any NICs that actually choke on such frames. > Nonetheless, it is silly behavior. I'll try to see if we can get this > fixed before 7.2. > > Thanks, > Kip > > On Wed, Apr 15, 2009 at 8:40 AM, Renaud Lienhart > wrote: > > Hi, > > > > We're having trouble virtualizing FreeBSD 7+ on ESX because of an issue > > with the stack's TSO implementation: it sometimes generates TSO packets > > whose payload size is actually smaller than the MSS. > > > > The faulty logic is described, along with a patch, in PR #132832. It > > has been opened for a while now, without any apparent activity, which > > is why I'm reaching the mailing list directly. > > > > ESX currently drops these packets as many physical nics are known to > > choke on such frames, which effectively limits FreeBSD guests' > > performance. > > I don't know about other virtualization stacks' behavior. > > > > http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/132832 > > > > Thanks for your time, > > > > Renaud > > _______________________________________________ > > freebsd-net@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-net > > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > > > > > > -- > All that is necessary for the triumph of evil is that good men do nothing. > Edmund Burke > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > From owner-freebsd-net@FreeBSD.ORG Thu Apr 16 00:16:41 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DC093106566B for ; Thu, 16 Apr 2009 00:16:41 +0000 (UTC) (envelope-from bms@incunabulum.net) Received: from out2.smtp.messagingengine.com (out2.smtp.messagingengine.com [66.111.4.26]) by mx1.freebsd.org (Postfix) with ESMTP id AEE8C8FC15 for ; Thu, 16 Apr 2009 00:16:41 +0000 (UTC) (envelope-from bms@incunabulum.net) Received: from compute1.internal (compute1.internal [10.202.2.41]) by out1.messagingengine.com (Postfix) with ESMTP id 0FA7931BCD7; Wed, 15 Apr 2009 20:16:41 -0400 (EDT) Received: from heartbeat2.messagingengine.com ([10.202.2.161]) by compute1.internal (MEProxy); Wed, 15 Apr 2009 20:16:41 -0400 X-Sasl-enc: YwFo/jKi/OUpVm9kosXYphy0VJ1cPu96qkzjAXz2dwWO 1239841000 Received: from [192.168.123.18] (82-35-112-254.cable.ubr07.dals.blueyonder.co.uk [82.35.112.254]) by mail.messagingengine.com (Postfix) with ESMTPSA id 3C8853A76B; Wed, 15 Apr 2009 20:16:40 -0400 (EDT) Message-ID: <49E678E6.102@incunabulum.net> Date: Thu, 16 Apr 2009 01:16:38 +0100 From: Bruce Simpson User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: =?UTF-8?B?0JDQu9C10LrRgdC10Lkg0JHQu9C40L3QutC+0LI=?= References: <2d934d80904150642r585049b4wadfdfc82a3d8c7fc@mail.gmail.com> <20090415144956.T15361@maildrop.int.zabbadoz.net> <2d934d80904150807p732bce43gc110fe6ae042507d@mail.gmail.com> In-Reply-To: <2d934d80904150807p732bce43gc110fe6ae042507d@mail.gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Cc: "Bjoern A. Zeeb" , freebsd-net Subject: Re: MD5 authentication in quagga X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2009 00:16:42 -0000 п░п╩п╣п╨я│п╣п╧ п▒п╩п╦п╫п╨п╬п╡ wrote: > If modelling ideal situation, then: > > md5 password doesn`t match or empty, then peering must be closed... > > Now md5 working only for outgoing packets, not for input. And peering > not closed if password miss or not match. because bsd not check > incoming packets, i think... > I thought someone had fixed this ages ago? I seem to remember someone had merged some changes to what I'd originally done for Sentex from NetBSD... but I could be wrong. cheers, BMS From owner-freebsd-net@FreeBSD.ORG Thu Apr 16 00:19:23 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3BEEE1065670 for ; Thu, 16 Apr 2009 00:19:23 +0000 (UTC) (envelope-from bms@incunabulum.net) Received: from out2.smtp.messagingengine.com (out2.smtp.messagingengine.com [66.111.4.26]) by mx1.freebsd.org (Postfix) with ESMTP id 0D6E48FC20 for ; Thu, 16 Apr 2009 00:19:23 +0000 (UTC) (envelope-from bms@incunabulum.net) Received: from compute1.internal (compute1.internal [10.202.2.41]) by out1.messagingengine.com (Postfix) with ESMTP id A091A31E1F3; Wed, 15 Apr 2009 20:19:22 -0400 (EDT) Received: from heartbeat2.messagingengine.com ([10.202.2.161]) by compute1.internal (MEProxy); Wed, 15 Apr 2009 20:19:22 -0400 X-Sasl-enc: 3UtteMM5KSaMfLp5d8Xry1se2+nntmGir01aTF4KpMp4 1239841162 Received: from [192.168.123.18] (82-35-112-254.cable.ubr07.dals.blueyonder.co.uk [82.35.112.254]) by mail.messagingengine.com (Postfix) with ESMTPSA id C9E88326D3; Wed, 15 Apr 2009 20:19:21 -0400 (EDT) Message-ID: <49E67988.2020008@incunabulum.net> Date: Thu, 16 Apr 2009 01:19:20 +0100 From: Bruce Simpson User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: =?ISO-8859-1?Q?Michael_T=FCxen?= References: <49E5D4CF.8050707@incunabulum.net> <822B17FC-60E1-4F19-8E62-BB2E5351CB99@lurchi.franken.de> In-Reply-To: <822B17FC-60E1-4F19-8E62-BB2E5351CB99@lurchi.franken.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Cc: FreeBSD Net , Robin Seggelmann Subject: Re: OpenSSL DTLS bug fix patches X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2009 00:19:23 -0000 Michael TЭxen wrote: > Hi Bruce, > > at least one member of the OpenSSL core team (Steven) has integrated > our patches regarding bug fixes in the source code. > So they will be included in the next release of OpenSSL. > That's excellent news, and these fixes look good, but I was more wondering if this drop would be in FreeBSD 7.2-RELEASE :-) If not no biggie, I am tracking -STABLE for work. thanks, BMS From owner-freebsd-net@FreeBSD.ORG Thu Apr 16 05:58:30 2009 Return-Path: Delivered-To: freebsd-net@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EEF0F106564A for ; Thu, 16 Apr 2009 05:58:30 +0000 (UTC) (envelope-from ngharibyan@arm.synisys.com) Received: from mx.arm.synisys.com (mx.arm.synisys.com [93.94.223.225]) by mx1.freebsd.org (Postfix) with ESMTP id EB2108FC0C for ; Thu, 16 Apr 2009 05:58:29 +0000 (UTC) (envelope-from ngharibyan@arm.synisys.com) X-MDAV-Processed: mx.arm.synisys.com, Thu, 16 Apr 2009 10:36:54 +0500 Received: from sis2n001 by mx.arm.synisys.com (Cipher TLSv1:RC4-SHA:128) (MDaemon PRO v10.0.4) with ESMTP id md50000063324.msg for ; Thu, 16 Apr 2009 10:36:52 +0500 X-Spam-Processed: mx.arm.synisys.com, Thu, 16 Apr 2009 10:36:52 +0500 (not processed: message from trusted or authenticated source) X-Authenticated-Sender: ngharibyan@arm.synisys.com X-Return-Path: ngharibyan@arm.synisys.com X-Envelope-From: ngharibyan@arm.synisys.com X-MDaemon-Deliver-To: freebsd-net@FreeBSD.org From: "Narek Gharibyan" To: Date: Thu, 16 Apr 2009 10:36:47 +0500 Message-ID: <0588BB0DDA024074A71CFF7A93877E11@arm.synisys.com> MIME-Version: 1.0 X-Priority: 1 (Highest) X-MSMail-Priority: High X-Mailer: Microsoft Office Outlook 11 thread-index: Acm+VVVhoanVebf4T2mUxlS8Ppyi6Q== Importance: High X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579 Content-Type: text/plain; charset="koi8-r" Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Subject: A Quick Question X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2009 05:58:31 -0000 Hello Sir/Mdm I would like to know is there any solution to problem show below, because we use FreeBSD 7.0 in our network structure and we are meeting face to face to this problem everyday kern/121555: [panic] Fatal trap 12: current process = 12 (swi1: net) From: Alexey Sopov Date: Mon, 10 Mar 2008 11:46:51 GMT Subject: [7.0-RELEASE] Fatal trap 12: current process = 12 (swi1: net) Send-pr version: www-3.1 Number: 121555 Category: kern Synopsis: [panic] Fatal trap 12: current process = 12 (swi1: net) Severity: serious Priority: high Responsible: freebsd-net@FreeBSD.org State: open Class: sw-bug Arrival-Date: Mon Mar 10 12:00:01 UTC 2008 Closed-Date: Last-Modified: Fri May 23 20:48:21 UTC 2008 Originator: Alexey Sopov Release: 7.0-RELEASE Best Regards, Narek Gharibyan Network Administration Team leader Synergy International Systems Inc. / Armenia http://www.synisys.com Tel.: mobile: +37494 - 353489 work: +37410 - 650202 ext 772 From owner-freebsd-net@FreeBSD.ORG Thu Apr 16 06:35:44 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A8D2E10657A1 for ; Thu, 16 Apr 2009 06:35:44 +0000 (UTC) (envelope-from Michael.Tuexen@lurchi.franken.de) Received: from mail-n.franken.de (drew.ipv6.franken.de [IPv6:2001:638:a02:a001:20e:cff:fe4a:feaa]) by mx1.freebsd.org (Postfix) with ESMTP id 38E6D8FC1A for ; Thu, 16 Apr 2009 06:35:44 +0000 (UTC) (envelope-from Michael.Tuexen@lurchi.franken.de) Received: from [192.168.1.194] (p508FF550.dip.t-dialin.net [80.143.245.80]) by mail-n.franken.de (Postfix) with ESMTP id 3C2C41C0B4045; Thu, 16 Apr 2009 08:35:42 +0200 (CEST) Message-Id: <0A42378E-1193-41B4-964D-C1A4E4632616@lurchi.franken.de> From: =?ISO-8859-1?Q?Michael_T=FCxen?= To: Bruce Simpson In-Reply-To: <49E67988.2020008@incunabulum.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed; delsp=yes Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Apple Message framework v930.4) Date: Thu, 16 Apr 2009 08:35:40 +0200 References: <49E5D4CF.8050707@incunabulum.net> <822B17FC-60E1-4F19-8E62-BB2E5351CB99@lurchi.franken.de> <49E67988.2020008@incunabulum.net> X-Mailer: Apple Mail (2.930.4) Cc: FreeBSD Net , Robin Seggelmann Subject: Re: OpenSSL DTLS bug fix patches X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2009 06:35:47 -0000 On Apr 16, 2009, at 2:19 AM, Bruce Simpson wrote: > Michael T=FCxen wrote: >> Hi Bruce, >> >> at least one member of the OpenSSL core team (Steven) has integrated >> our patches regarding bug fixes in the source code. >> So they will be included in the next release of OpenSSL. >> > > That's excellent news, and these fixes look good, but I was more =20 > wondering if this drop would be in FreeBSD 7.2-RELEASE :-) I know, but I wanted to make the state of the patches clear to make the decision for the port maintainer easier. Are you using DTLS? > > If not no biggie, I am tracking -STABLE for work. > > thanks, > BMS > From owner-freebsd-net@FreeBSD.ORG Thu Apr 16 06:38:32 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A09B11065670 for ; Thu, 16 Apr 2009 06:38:32 +0000 (UTC) (envelope-from mat.macy@gmail.com) Received: from yw-out-2324.google.com (yw-out-2324.google.com [74.125.46.30]) by mx1.freebsd.org (Postfix) with ESMTP id 595008FC12 for ; Thu, 16 Apr 2009 06:38:32 +0000 (UTC) (envelope-from mat.macy@gmail.com) Received: by yw-out-2324.google.com with SMTP id 5so193888ywh.13 for ; Wed, 15 Apr 2009 23:38:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:date:x-google-sender-auth:message-id:subject:from:to:cc :content-type:content-transfer-encoding; bh=LQkFcYOpRTG1agMjRM8RW25HEIDgg82hD6dRZ268xds=; b=ejuMzcCF0249r17E82y6XECVLuNQSxnnA0qh1XcZ0yHHNSLGOcl+knC6aJMokn+YVx f5531xCBwoc7g44fqsOi8XE+O5M6vOceJ+s7oitRaJfa/v+A6r71Boxq+rV7kBwu5jcu 5qL8ADLmTQtNJ8Y2DotkBp1Ttn4J95xF38vPc= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; b=jMxS6rxdGTLCKMfuund09yJEnZ4p2GFXDDYqVIjnLbILe2C1nacw3h00q0DonlM5kf bTk2Q5PWne4up7nFQspsJSHjXTxdoD0JjGkMqKBbIsf33CioUy+mAlFdRoGTvL8ttGED +0qBUIyqUYCJLr1KIAQf4yvICUXDqjNZ9eaUc= MIME-Version: 1.0 Sender: mat.macy@gmail.com Received: by 10.100.10.15 with SMTP id 15mr1387136anj.107.1239863911103; Wed, 15 Apr 2009 23:38:31 -0700 (PDT) In-Reply-To: <0588BB0DDA024074A71CFF7A93877E11@arm.synisys.com> References: <0588BB0DDA024074A71CFF7A93877E11@arm.synisys.com> Date: Wed, 15 Apr 2009 23:38:31 -0700 X-Google-Sender-Auth: 59614e34c124f7e9 Message-ID: <3c1674c90904152338g1e25fe45n930db60d84958b5a@mail.gmail.com> From: Kip Macy To: Narek Gharibyan Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-net@freebsd.org Subject: Re: A Quick Question X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2009 06:38:33 -0000 Please see the handbook for providing debugging information. This is a very generic panic. -Kip 2009/4/15 Narek Gharibyan : > Hello Sir/Mdm > > > > I would like to know is there any solution to problem show below, because= we > use FreeBSD 7.0 in our network structure and we are meeting face to face = to > this problem everyday > > > > > > kern/121555: [panic] Fatal trap 12: current process =3D 12 (swi1: net) > > > From: > > Alexey Sopov > > > Date: > > Mon, 10 Mar 2008 11:46:51 GMT > > > Subject: > > [7.0-RELEASE] Fatal trap 12: current process =3D 12 (swi1: net) > > > Send-pr version: > > www-3.1 > > > > > Number: > > 121555 > > > Category: > > kern > > > Synopsis: > > [panic] Fatal trap 12: current process =3D 12 (swi1: net) > > > Severity: > > serious > > > Priority: > > high > > > Responsible: > > freebsd-net@FreeBSD.org > > > State: > > open > > > Class: > > sw-bug > > > Arrival-Date: > > Mon Mar 10 12:00:01 UTC 2008 > > > Closed-Date: > > > > > Last-Modified: > > Fri May 23 20:48:21 UTC 2008 > > > Originator: > > Alexey Sopov > > > Release: > > 7.0-RELEASE > > > > > > > > Best Regards, > > Narek Gharibyan > > > > Network Administration Team leader > > Synergy International Systems Inc. / Armenia > > =A0 http://www.synisys.com > > > > Tel.: > > mobile: +37494 - 353489 > > work: =A0 =A0+37410 - 650202 ext 772 > > > > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > --=20 All that is necessary for the triumph of evil is that good men do nothing. Edmund Burke From owner-freebsd-net@FreeBSD.ORG Thu Apr 16 07:52:46 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DCFEC1065675 for ; Thu, 16 Apr 2009 07:52:46 +0000 (UTC) (envelope-from alexey.blinkov@gmail.com) Received: from mail-fx0-f167.google.com (mail-fx0-f167.google.com [209.85.220.167]) by mx1.freebsd.org (Postfix) with ESMTP id 467438FC1D for ; Thu, 16 Apr 2009 07:52:45 +0000 (UTC) (envelope-from alexey.blinkov@gmail.com) Received: by fxm11 with SMTP id 11so262918fxm.43 for ; Thu, 16 Apr 2009 00:52:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=i0CstgGCrJFtoaeSoa2Q/hyQjiM3k8hVaFC6gINW5so=; b=UmcFYnobia7F8FKYNWk27aQIUnCf4X4UQ9ZBMkQMSOdtWQZHA1QK957WuV6URAdf/r RlnyHJvww5Dqcfi9gr0zzuLjw8SN08vH0kTRT8R1hVcaijyJYadpAHjWwWaAr9EPMs6V IMSk/xHCKesbysti1EzxZFC/zfhR7gMZMwOVo= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=FrzFReI1LQR2z0UUgpqUm1s/jJKN1catOrRsqbmZw0Iw1SoorIjxyeAiIALherXdzp ATbAxZ7hgp/5i39wTYdChbgKTXXq6JiSuD4IwBUjglcU6VTR/kCvChj9Q3Bx5ppzNjBC 2jMsYa+HMklndoP+kgesyG1O6fd693KBc0zgk= MIME-Version: 1.0 Received: by 10.86.26.11 with SMTP id 11mr840882fgz.33.1239868365289; Thu, 16 Apr 2009 00:52:45 -0700 (PDT) In-Reply-To: <49E678E6.102@incunabulum.net> References: <2d934d80904150642r585049b4wadfdfc82a3d8c7fc@mail.gmail.com> <20090415144956.T15361@maildrop.int.zabbadoz.net> <2d934d80904150807p732bce43gc110fe6ae042507d@mail.gmail.com> <49E678E6.102@incunabulum.net> Date: Thu, 16 Apr 2009 10:52:45 +0300 Message-ID: <2d934d80904160052u70980215v1a32b07d4b1168f@mail.gmail.com> From: =?UTF-8?B?0JDQu9C10LrRgdC10Lkg0JHQu9C40L3QutC+0LI=?= To: Bruce Simpson Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: "Bjoern A. Zeeb" , freebsd-net Subject: Re: MD5 authentication in quagga X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2009 07:52:47 -0000 16 =D0=B0=D0=BF=D1=80=D0=B5=D0=BB=D1=8F 2009 =D0=B3. 3:16 =D0=BF=D0=BE=D0= =BB=D1=8C=D0=B7=D0=BE=D0=B2=D0=B0=D1=82=D0=B5=D0=BB=D1=8C Bruce Simpson =D0=BD=D0=B0=D0=BF=D0=B8=D1=81=D0=B0=D0=BB: > =D0=90=D0=BB=D0=B5=D0=BA=D1=81=D0=B5=D0=B9 =D0=91=D0=BB=D0=B8=D0=BD=D0=BA= =D0=BE=D0=B2 wrote: >> >> If modelling ideal situation, then: >> >> md5 password doesn`t match or empty, then peering must be closed... >> >> Now md5 working only for outgoing packets, not for input. And peering >> not closed if password miss or not match. because bsd not check >> incoming packets, i think... >> > > I thought someone had fixed this ages ago? > I seem to remember someone had merged some changes to what I'd originally > done for Sentex from NetBSD... but I could be wrong. > > cheers, > BMS > I don`t know about how kernel works with md5 hashing, because i`m newly in bsd... --=20 =D0=A1 =D1=83=D0=B2=D0=B0=D0=B6=D0=B5=D0=BD=D0=B8=D0=B5=D0=BC =D0=90=D0=BB= =D0=B5=D0=BA=D1=81=D0=B5=D0=B9 =D0=91=D0=BB=D0=B8=D0=BD=D0=BA=D0=BE=D0=B2 From owner-freebsd-net@FreeBSD.ORG Thu Apr 16 08:22:50 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E62AF106564A; Thu, 16 Apr 2009 08:22:50 +0000 (UTC) (envelope-from gavin@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id BAE148FC12; Thu, 16 Apr 2009 08:22:50 +0000 (UTC) (envelope-from gavin@FreeBSD.org) Received: from freefall.freebsd.org (gavin@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3G8Mov5008793; Thu, 16 Apr 2009 08:22:50 GMT (envelope-from gavin@freefall.freebsd.org) Received: (from gavin@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3G8MoQu008789; Thu, 16 Apr 2009 08:22:50 GMT (envelope-from gavin) Date: Thu, 16 Apr 2009 08:22:50 GMT Message-Id: <200904160822.n3G8MoQu008789@freefall.freebsd.org> To: gavin@FreeBSD.org, freebsd-bugs@FreeBSD.org, freebsd-net@FreeBSD.org From: gavin@FreeBSD.org Cc: Subject: Re: kern/132832: [netinet] [patch] tcp_output() might generate invalid TSO frames when len > TCP_MAXWIN - hdrlen - optlen X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2009 08:22:51 -0000 Synopsis: [netinet] [patch] tcp_output() might generate invalid TSO frames when len > TCP_MAXWIN - hdrlen - optlen Responsible-Changed-From-To: freebsd-bugs->freebsd-net Responsible-Changed-By: gavin Responsible-Changed-When: Thu Apr 16 08:19:28 UTC 2009 Responsible-Changed-Why: Over to maintainer(s). This may be the cause of some of the other TSO issues that have been spotted recently. http://www.freebsd.org/cgi/query-pr.cgi?pr=132832 From owner-freebsd-net@FreeBSD.ORG Thu Apr 16 09:30:07 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B36151065674 for ; Thu, 16 Apr 2009 09:30:07 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 875B28FC08 for ; Thu, 16 Apr 2009 09:30:07 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3G9U7NT090206 for ; Thu, 16 Apr 2009 09:30:07 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3G9U7kh090202; Thu, 16 Apr 2009 09:30:07 GMT (envelope-from gnats) Date: Thu, 16 Apr 2009 09:30:07 GMT Message-Id: <200904160930.n3G9U7kh090202@freefall.freebsd.org> To: freebsd-net@FreeBSD.org From: Dennis Melentyev Cc: Subject: Re: kern/133572: [ppp] [hang] incoming PPTP connection hangs the system X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Dennis Melentyev List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2009 09:30:08 -0000 The following reply was made to PR kern/133572; it has been noted by GNATS. From: Dennis Melentyev To: Max Laier Cc: bug-followup@freebsd.org Subject: Re: kern/133572: [ppp] [hang] incoming PPTP connection hangs the system Date: Thu, 16 Apr 2009 12:28:46 +0300 Hi Max, Just read your discussion with Matt and Rembrandt on DragonflyBSD list on OpenBSD's PF issues. Although I can't afford to restore the configuration to test the issue, but I feel, that problem could be connected to IPv6 + PPTP/GRE/PF/IPv4. The machine we've tried to connect from was running Vista. AFAIR, it tries to make some use of IPv6. Can't tell anything on XP or other clients - never tried that. OTOH, outgoing PPTP (IPv4) session from MPD4 to some HW VPN router (sorry, anonymous to me) was just fine. Hope this helps. I can't upgrade ATM, but still can supply config files if needed. /dennis 2009/4/15 Dennis Melentyev : > Hi Max, > > It was some hard time for me, sorry for late response. > > I did enabled KDB, DDB and WITNESS on the same sources. > Unfortunately there was just plain hangs once some GRE was trying to > get through (netgraph? PF? routing?) > With these options enabled, hangs are much more often than without them. > Once hung, no way to break into debugger, no panics, numlock not > changing lights on keyboard, mouse not responding, hdd silent, network > not available, nothing. > > 3 different HW platforms were tried (all of them were UP+i386+32bit). > Highest CPU temperature was 52C. No chance to go with 7.2-PRERELEASE. > > Had to downgrade to 7.1-RELEASE. > > /dennis > > 2009/4/11 Max Laier : >> Is it possible for you to turn on WITNESS on this machine to obtain poss= ible >> LORs that might be responsible for the hang? =C2=A0Also, do you have the >> possibility to enable DDB and drop into it from the console (if it is no= t a >> hard hang but a live lock)? >> >> -- >> =C2=A0Max >> > > > > -- > Dennis Melentyev > --=20 Dennis Melentyev From owner-freebsd-net@FreeBSD.ORG Thu Apr 16 10:39:20 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 163931065679 for ; Thu, 16 Apr 2009 10:39:20 +0000 (UTC) (envelope-from bms@incunabulum.net) Received: from out2.smtp.messagingengine.com (out2.smtp.messagingengine.com [66.111.4.26]) by mx1.freebsd.org (Postfix) with ESMTP id DDE778FC26 for ; Thu, 16 Apr 2009 10:39:19 +0000 (UTC) (envelope-from bms@incunabulum.net) Received: from compute1.internal (compute1.internal [10.202.2.41]) by out1.messagingengine.com (Postfix) with ESMTP id 7257C31E116; Thu, 16 Apr 2009 06:39:19 -0400 (EDT) Received: from heartbeat2.messagingengine.com ([10.202.2.161]) by compute1.internal (MEProxy); Thu, 16 Apr 2009 06:39:19 -0400 X-Sasl-enc: HpFXnfXAeSd7kDLn/ZxpM3xNxcXhnKH9AceZlQtBmmxe 1239878359 Received: from [192.168.123.18] (82-35-112-254.cable.ubr07.dals.blueyonder.co.uk [82.35.112.254]) by mail.messagingengine.com (Postfix) with ESMTPSA id C22ED3251E; Thu, 16 Apr 2009 06:39:18 -0400 (EDT) Message-ID: <49E70AD5.8000700@incunabulum.net> Date: Thu, 16 Apr 2009 11:39:17 +0100 From: Bruce Simpson User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: =?ISO-8859-1?Q?Michael_T=FCxen?= References: <49E5D4CF.8050707@incunabulum.net> <822B17FC-60E1-4F19-8E62-BB2E5351CB99@lurchi.franken.de> <49E67988.2020008@incunabulum.net> <0A42378E-1193-41B4-964D-C1A4E4632616@lurchi.franken.de> In-Reply-To: <0A42378E-1193-41B4-964D-C1A4E4632616@lurchi.franken.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Cc: FreeBSD Net , Robin Seggelmann Subject: Re: OpenSSL DTLS bug fix patches X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2009 10:39:20 -0000 Michael TЭxen wrote: > On Apr 16, 2009, at 2:19 AM, Bruce Simpson wrote: > ... >> >> That's excellent news, and these fixes look good, but I was more >> wondering if this drop would be in FreeBSD 7.2-RELEASE :-) > I know, but I wanted to make the state of the patches clear to make > the decision for the port maintainer easier. > > Are you using DTLS? Not yet, but I came across these patches whilst researching TLS adaptation for SCTP. cheers, BMS From owner-freebsd-net@FreeBSD.ORG Thu Apr 16 10:40:03 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C3D43106567E for ; Thu, 16 Apr 2009 10:40:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id B21B68FC1E for ; Thu, 16 Apr 2009 10:40:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3GAe3c0086045 for ; Thu, 16 Apr 2009 10:40:03 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3GAe3lZ086044; Thu, 16 Apr 2009 10:40:03 GMT (envelope-from gnats) Date: Thu, 16 Apr 2009 10:40:03 GMT Message-Id: <200904161040.n3GAe3lZ086044@freefall.freebsd.org> To: freebsd-net@FreeBSD.org From: Adam K Kirchhoff Cc: Subject: Re: kern/131153: [iwi] iwi doesn't see a wireless network X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Adam K Kirchhoff List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2009 10:40:04 -0000 The following reply was made to PR kern/131153; it has been noted by GNATS. From: Adam K Kirchhoff To: bug-followup@FreeBSD.org, adamk@voicenet.com Cc: Subject: Re: kern/131153: [iwi] iwi doesn't see a wireless network Date: Thu, 16 Apr 2009 06:37:18 -0400 FYI, I'm showing the debug output of wpa_supplicant from connecting to my home network with the same WPA settings that we have at work. WPA with the same preshared key. Initializing interface 'iwi0' conf '/etc/wpa_supplicant.conf' driver 'bsd' ctrl_interface 'N/A' bridge 'N/A' Configuration file '/etc/wpa_supplicant.conf' -> '/etc/wpa_supplicant.conf' Reading configuration file '/etc/wpa_supplicant.conf' Line: 2 - start of a new network block scan_ssid=1 (0x1) ssid - hexdump_ascii(len=5): 61 73 68 6b 65 ashke key_mgmt: 0x2 pairwise: 0x8 PSK (ASCII passphrase) - hexdump_ascii(len=10): [REMOVED] PSK (from passphrase) - hexdump(len=32): [REMOVED] Line 8: removed CCMP from group cipher list since it was not allowed for pairwise cipher Line: 10 - start of a new network block scan_ssid=1 (0x1) ssid - hexdump_ascii(len=15): 4d 63 6b 65 6c 6c 61 32 38 30 46 72 6f 6e 74 Mckella280Front key_mgmt: 0x2 pairwise: 0x8 PSK (ASCII passphrase) - hexdump_ascii(len=10): [REMOVED] PSK (from passphrase) - hexdump(len=32): [REMOVED] Line 16: removed CCMP from group cipher list since it was not allowed for pairwise cipher Priority group 0 id=0 ssid='ashke' id=1 ssid='Mckella280Front' Initializing interface (2) 'iwi0' EAPOL: SUPP_PAE entering state DISCONNECTED EAPOL: KEY_RX entering state NO_KEY_RECEIVE EAPOL: SUPP_BE entering state INITIALIZE EAP: EAP entering state DISABLED EAPOL: External notification - portEnabled=0 EAPOL: External notification - portValid=0 Own MAC address: 00:13:ce:a8:10:ea wpa_driver_bsd_set_wpa: enabled=1 wpa_driver_bsd_set_wpa_internal: wpa=3 privacy=1 wpa_driver_bsd_del_key: keyidx=0 wpa_driver_bsd_del_key: keyidx=1 wpa_driver_bsd_del_key: keyidx=2 wpa_driver_bsd_del_key: keyidx=3 wpa_driver_bsd_set_countermeasures: enabled=0 wpa_driver_bsd_set_drop_unencrypted: enabled=1 Setting scan request: 0 sec 100000 usec Added interface iwi0 State: DISCONNECTED -> SCANNING Starting AP scan (specific SSID) Scan SSID - hexdump_ascii(len=5): 61 73 68 6b 65 ashke Trying to get current scan results first without requesting a new scan to speed up initial association Received 0 bytes of scan results (6 BSSes) Scan results: 6 Selecting BSS from priority group 0 Try to find WPA-enabled AP 0: 00:30:bd:fb:ca:31 ssid='ashke' wpa_ie_len=24 rsn_ie_len=0 caps=0x11 selected based on WPA IE selected WPA AP 00:30:bd:fb:ca:31 ssid='ashke' Try to find non-WPA AP Trying to associate with 00:30:bd:fb:ca:31 (SSID='ashke' freq=2422 MHz) Cancelling scan request WPA: clearing own WPA/RSN IE Automatic auth_alg selection: 0x1 wpa_driver_bsd_set_auth_alg alg 0x1 authmode 1 WPA: using IEEE 802.11i/D3.0 WPA: Selected cipher suites: group 8 pairwise 8 key_mgmt 2 proto 1 WPA: set AP WPA IE - hexdump(len=24): dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02 WPA: clearing AP RSN IE WPA: using GTK TKIP WPA: using PTK TKIP WPA: using KEY_MGMT WPA-PSK WPA: Set own WPA IE default - hexdump(len=24): dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02 No keys have been configured - skip key clearing wpa_driver_bsd_set_drop_unencrypted: enabled=1 State: SCANNING -> ASSOCIATING wpa_driver_bsd_associate: ssid 'ashke' wpa ie len 24 pairwise 2 group 2 key mgmt 1 wpa_driver_bsd_associate: set PRIVACY 1 Setting authentication timeout: 10 sec 0 usec EAPOL: External notification - EAP success=0 EAPOL: External notification - EAP fail=0 EAPOL: External notification - portControl=Auto Authentication with 00:30:bd:fb:ca:31 timed out. Added BSSID 00:30:bd:fb:ca:31 into blacklist No keys have been configured - skip key clearing State: ASSOCIATING -> DISCONNECTED EAPOL: External notification - portEnabled=0 EAPOL: External notification - portValid=0 EAPOL: External notification - EAP success=0 Setting scan request: 0 sec 0 usec State: DISCONNECTED -> SCANNING Starting AP scan (specific SSID) Scan SSID - hexdump_ascii(len=15): 4d 63 6b 65 6c 6c 61 32 38 30 46 72 6f 6e 74 Mckella280Front Received 0 bytes of scan results (6 BSSes) Scan results: 6 Selecting BSS from priority group 0 Try to find WPA-enabled AP 0: 00:30:bd:fb:ca:31 ssid='ashke' wpa_ie_len=24 rsn_ie_len=0 caps=0ioctl[SIOCS80211, op 21, len 42]: Invalid argument x11 selected based on WPA IE selected WPA AP 00:30:bd:fb:ca:31 ssid='ashke' Try to find non-WPA AP Trying to associate with 00:30:bd:fb:ca:31 (SSID='ashke' freq=2422 MHz) Cancelling scan request WPA: clearing own WPA/RSN IE Automatic auth_alg selection: 0x1 wpa_driver_bsd_set_auth_alg alg 0x1 authmode 1 WPA: using IEEE 802.11i/D3.0 WPA: Selected cipher suites: group 8 pairwise 8 key_mgmt 2 proto 1 WPA: set AP WPA IE - hexdump(len=24): dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02 WPA: clearing AP RSN IE WPA: using GTK TKIP WPA: using PTK TKIP WPA: using KEY_MGMT WPA-PSK WPA: Set own WPA IE default - hexdump(len=24): dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02 No keys have been configured - skip key clearing wpa_driver_bsd_set_drop_unencrypted: enabled=1 State: SCANNING -> ASSOCIATING wpa_driver_bsd_associate: ssid 'ashke' wpa ie len 24 pairwise 2 group 2 key mgmt 1 wpa_driver_bsd_associate: set PRIVACY 1 Association request to the driver failed Setting authentication timeout: 5 sec 0 usec EAPOL: External notification - EAP success=0 EAPOL: External notification - EAP fail=0 EAPOL: External notification - portControl=Auto Authentication with 00:30:bd:fb:ca:31 timed out. BSSID 00:30:bd:fb:ca:31 blacklist count incremented to 2 No keys have been configured - skip key clearing State: ASSOCIATING -> DISCONNECTED EAPOL: External notification - portEnabled=0 EAPOL: External notification - portValid=0 EAPOL: External notification - EAP success=0 Setting scan request: 0 sec 0 usec State: DISCONNECTED -> SCANNING Starting AP scan (broadcast SSID) Received 0 bytes of scan results (6 BSSes) Scan results: 6 Selecting BSS from priority group 0 Try to find WPA-enabled AP 0: 00:30:bd:fb:ca:31 ssid='ashke' wpa_ie_len=24 rsn_ie_len=0 caps=0x11 skip - blacklisted 1: 00:13:10:96:62:bb ssid='linksys' wpa_ie_len=0 rsn_ie_len=0 caps=0x1 skip - no WPA/RSN IE 2: 00:18:f8:6a:0e:6b ssid='carlie' wpa_ie_len=0 rsn_ie_len=0 caps=0x31 skip - no WPA/RSN IE 3: 00:12:0e:54:6b:0f ssid='06B410521966' wpa_ie_len=0 rsn_ie_len=0 caps=0x11 skip - no WPA/RSN IE 4: 00:1c:df:7e:5b:0d ssid='Deck Entertainment, LLP' wpa_ie_len=0 rsn_ie_len=0 caps=0x11 skip - no WPA/RSN IE 5: 00:18:01:81:1c:4a ssid='johnreynolds' wpa_ie_len=0 rsn_ie_len=0 caps=0x71 skip - no WPA/RSN IE Try to find non-WPA AP 0: 00:30:bd:fb:ca:31 ssid='ashke' wpa_ie_len=24 rsn_ie_len=0 caps=0x11 skip - blacklisted 1: 00:13:10:96:62:bb ssid='linksys' wpa_ie_len=0 rsn_ie_len=0 caps=0x1 skip - SSID mismatch skip - SSID mismatch 2: 00:18:f8:6a:0e:6b ssid='carlie' wpa_ie_len=0 rsn_ie_len=0 caps=0x31 skip - SSID mismatch skip - SSID mismatch 3: 00:12:0e:54:6b:0f ssid='06B410521966' wpa_ie_len=0 rsn_ie_len=0 caps=0x11 skip - SSID mismatch skip - SSID mismatch 4: 00:1c:df:7e:5b:0d ssid='Deck Entertainment, LLP' wpa_ie_len=0 rsn_ie_len=0 caps=0x11 skip - SSID mismatch skip - SSID mismatch 5: 00:18:01:81:1c:4a ssid='johnreynolds' wpa_ie_len=0 rsn_ie_len=0 caps=0x71 skip - SSID mismatch skip - SSID mismatch No APs found - clear blacklist and try again Removed BSSID 00:30:bd:fb:ca:31 from blacklist (clear) Selecting BSS from priority group 0 Try to find WPA-enabled AP 0: 00:30:bd:fb:ca:31 ssid='ashke' wpa_ie_len=24 rsn_ie_len=0 caps=0x11 selected based on WPA IE selected WPA AP 00:30:bd:fb:ca:31 ssid='ashke' Try to find non-WPA AP Trying to associate with 00:30:bd:fb:ca:31 (SSID='ashke' freq=2422 MHz) Cancelling scan request WPA: clearing own WPA/RSN IE Automatic auth_alg selection: 0x1 wpa_driver_bsd_set_auth_alg alg 0x1 authmode 1 WPA: using IEEE 802.11i/D3.0 WPA: Selected cipher suites: group 8 pairwise 8 key_mgmt 2 proto 1 WPA: set AP WPA IE - hexdump(len=24): dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02 WPA: clearing AP RSN IE WPA: using GTK TKIP WPA: using PTK TKIP WPA: using KEY_MGMT WPA-PSK WPA: Set own WPA IE default - hexdump(len=24): dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02 No keys have been configured - skip key clearing wpa_driver_bsd_set_drop_unencrypted: enabled=1 State: SCANNING -> ASSOCIATING wpa_driver_bsd_associate: ssid 'ashke' wpa ie len 24 pairwise 2 group 2 key mgmt 1 wpa_driver_bsd_associate: set PRIVACY 1 Setting authentication timeout: 10 sec 0 usec EAPOL: External notification - EAP success=0 EAPOL: External notification - EAP fail=0 EAPOL: External notification - portControl=Auto State: ASSOCIATING -> ASSOCIATED Associated to a new BSS: BSSID=00:30:bd:fb:ca:31 No keys have been configured - skip key clearing Associated with 00:30:bd:fb:ca:31 WPA: Association event - clear replay counter EAPOL: External notification - portEnabled=0 EAPOL: External notification - portValid=0 EAPOL: External notification - EAP success=0 EAPOL: External notification - portEnabled=1 EAPOL: SUPP_PAE entering state CONNECTING EAPOL: SUPP_BE entering state IDLE Setting authentication timeout: 10 sec 0 usec Cancelling scan request RX EAPOL from 00:30:bd:fb:ca:31 RX EAPOL - hexdump(len=99): 01 03 00 5f fe 00 89 00 20 00 00 00 00 00 00 00 00 5c b7 62 1b 6f da 13 6e 27 b2 4a 35 c0 89 f8 67 28 b6 d4 55 4e 23 c5 3a 68 f3 e6 47 2b 54 8c e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Setting authentication timeout: 10 sec 0 usec IEEE 802.1X RX: version=1 type=3 length=95 EAPOL-Key type=254 key_info 0x89 (ver=1 keyidx=0 rsvd=0 Pairwise Ack) key_length=32 key_data_length=0 replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 00 key_nonce - hexdump(len=32): 5c b7 62 1b 6f da 13 6e 27 b2 4a 35 c0 89 f8 67 28 b6 d4 55 4e 23 c5 3a 68 f3 e6 47 2b 54 8c e6 key_iv - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 key_rsc - hexdump(len=8): 00 00 00 00 00 00 00 00 key_id (reserved) - hexdump(len=8): 00 00 00 00 00 00 00 00 key_mic - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 WPA: RX EAPOL-Key - hexdump(len=99): 01 03 00 5f fe 00 89 00 20 00 00 00 00 00 00 00 00 5c b7 62 1b 6f da 13 6e 27 b2 4a 35 c0 89 f8 67 28 b6 d4 55 4e 23 c5 3a 68 f3 e6 47 2b 54 8c e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 State: ASSOCIATED -> 4WAY_HANDSHAKE WPA: RX message 1 of 4-Way Handshake from 00:30:bd:fb:ca:31 (ver=1) WPA: Renewed SNonce - hexdump(len=32): 8e 31 70 bc 1e 1d 24 47 29 e9 07 c6 23 9b 1f 6c 28 47 e3 e3 c1 01 fa a3 0f cc 05 ba 8e 0f d7 69 WPA: PMK - hexdump(len=32): [REMOVED] WPA: PTK - hexdump(len=64): [REMOVED] WPA: WPA IE for msg 2/4 - hexdump(len=24): dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02 WPA: Sending EAPOL-Key 2/4 WPA: TX EAPOL-Key - hexdump(len=123): 01 03 00 77 fe 01 09 00 20 00 00 00 00 00 00 00 00 8e 31 70 bc 1e 1d 24 47 29 e9 07 c6 23 9b 1f 6c 28 47 e3 e3 c1 01 fa a3 0f cc 05 ba 8e 0f d7 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 1f bb d0 4a 9e e3 5c e5 76 34 f1 56 ee 90 c6 00 18 dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02 RX EAPOL from 00:30:bd:fb:ca:31 RX EAPOL - hexdump(len=123): 01 03 00 77 fe 01 c9 00 20 00 00 00 00 00 00 00 01 5c b7 62 1b 6f da 13 6e 27 b2 4a 35 c0 89 f8 67 28 b6 d4 55 4e 23 c5 3a 68 f3 e6 47 2b 54 8c e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 ea 3c 6a 49 fb 35 81 f4 62 96 7e 9b c0 50 95 00 18 dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02 IEEE 802.1X RX: version=1 type=3 length=119 EAPOL-Key type=254 key_info 0x1c9 (ver=1 keyidx=0 rsvd=0 Pairwise Install Ack MIC) key_length=32 key_data_length=24 replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 01 key_nonce - hexdump(len=32): 5c b7 62 1b 6f da 13 6e 27 b2 4a 35 c0 89 f8 67 28 b6 d4 55 4e 23 c5 3a 68 f3 e6 47 2b 54 8c e6 key_iv - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 key_rsc - hexdump(len=8): 00 00 00 00 00 00 00 00 key_id (reserved) - hexdump(len=8): 00 00 00 00 00 00 00 00 key_mic - hexdump(len=16): 19 ea 3c 6a 49 fb 35 81 f4 62 96 7e 9b c0 50 95 WPA: RX EAPOL-Key - hexdump(len=123): 01 03 00 77 fe 01 c9 00 20 00 00 00 00 00 00 00 01 5c b7 62 1b 6f da 13 6e 27 b2 4a 35 c0 89 f8 67 28 b6 d4 55 4e 23 c5 3a 68 f3 e6 47 2b 54 8c e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 ea 3c 6a 49 fb 35 81 f4 62 96 7e 9b c0 50 95 00 18 dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02 State: 4WAY_HANDSHAKE -> 4WAY_HANDSHAKE WPA: RX message 3 of 4-Way Handshake from 00:30:bd:fb:ca:31 (ver=1) WPA: IE KeyData - hexdump(len=24): dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02 WPA: Sending EAPOL-Key 4/4 WPA: TX EAPOL-Key - hexdump(len=99): 01 03 00 5f fe 01 09 00 20 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 5d a0 ab f1 73 0a ef 95 9c f1 fe e9 44 2b 1d 00 00 WPA: Installing PTK to the driver. WPA: RSC - hexdump(len=6): 00 00 00 00 00 00 wpa_driver_bsd_set_key: alg=TKIP addr=00:30:bd:fb:ca:31 key_idx=0 set_tx=1 seq_len=6 key_len=32 State: 4WAY_HANDSHAKE -> GROUP_HANDSHAKE RX EAPOL from 00:30:bd:fb:ca:31 RX EAPOL - hexdump(len=131): 01 03 00 7f fe 03 91 00 20 00 00 00 00 00 00 00 02 5c b7 62 1b 6f da 13 6e 27 b2 4a 35 c0 89 f8 67 28 b6 d4 55 4e 23 c5 3a 68 f3 e6 47 2b 54 8c e7 28 b6 d4 55 4e 23 c5 3a 68 f3 e6 47 2b 54 8c e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 92 14 4d 9a 51 95 42 b9 92 a3 dd 3c 4a 88 23 4c 00 20 8c cc a9 e5 9e 22 ab de 49 da 88 03 ac 97 46 9b 55 7a 54 76 0e a2 98 38 f7 b9 43 ec 74 cd 51 f0 IEEE 802.1X RX: version=1 type=3 length=127 EAPOL-Key type=254 key_info 0x391 (ver=1 keyidx=1 rsvd=0 Group Ack MIC Secure) key_length=32 key_data_length=32 replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 02 key_nonce - hexdump(len=32): 5c b7 62 1b 6f da 13 6e 27 b2 4a 35 c0 89 f8 67 28 b6 d4 55 4e 23 c5 3a 68 f3 e6 47 2b 54 8c e7 key_iv - hexdump(len=16): 28 b6 d4 55 4e 23 c5 3a 68 f3 e6 47 2b 54 8c e8 key_rsc - hexdump(len=8): 00 00 00 00 00 00 00 00 key_id (reserved) - hexdump(len=8): 00 00 00 00 00 00 00 00 key_mic - hexdump(len=16): 92 14 4d 9a 51 95 42 b9 92 a3 dd 3c 4a 88 23 4c WPA: RX EAPOL-Key - hexdump(len=131): 01 03 00 7f fe 03 91 00 20 00 00 00 00 00 00 00 02 5c b7 62 1b 6f da 13 6e 27 b2 4a 35 c0 89 f8 67 28 b6 d4 55 4e 23 c5 3a 68 f3 e6 47 2b 54 8c e7 28 b6 d4 55 4e 23 c5 3a 68 f3 e6 47 2b 54 8c e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 92 14 4d 9a 51 95 42 b9 92 a3 dd 3c 4a 88 23 4c 00 20 8c cc a9 e5 9e 22 ab de 49 da 88 03 ac 97 46 9b 55 7a 54 76 0e a2 98 38 f7 b9 43 ec 74 cd 51 f0 WPA: RX message 1 of Group Key Handshake from 00:30:bd:fb:ca:31 (ver=1) State: GROUP_HANDSHAKE -> GROUP_HANDSHAKE WPA: Group Key - hexdump(len=32): [REMOVED] WPA: Installing GTK to the driver (keyidx=1 tx=0). WPA: RSC - hexdump(len=6): 00 00 00 00 00 00 wpa_driver_bsd_set_key: alg=TKIP addr=ff:ff:ff:ff:ff:ff key_idx=1 set_tx=0 seq_len=6 key_len=32 WPA: Sending EAPOL-Key 2/2 WPA: TX EAPOL-Key - hexdump(len=99): 01 03 00 5f fe 03 11 00 20 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe 62 2b 85 de e0 17 ab 1e cb 1d bf 73 00 da cb 00 00 WPA: Key negotiation completed with 00:30:bd:fb:ca:31 [PTK=TKIP GTK=TKIP] Cancelling authentication timeout State: GROUP_HANDSHAKE -> COMPLETED CTRL-EVENT-CONNECTED - Connection to 00:30:bd:fb:ca:31 completed (auth) [id=0 id_str=] EAPOL: External notification - portValid=1 EAPOL: External notification - EAP success=1 EAPOL: SUPP_PAE entering state AUTHENTICATING EAPOL: SUPP_BE entering state SUCCESS EAP: EAP entering state DISABLED EAPOL: SUPP_PAE entering state AUTHENTICATED EAPOL: SUPP_BE entering state IDLE EAPOL: startWhen --> 0 CTRL-EVENT-TERMINATING - signal 2 received Removing interface iwi0 State: COMioctl[SIOCS80211, op 20, len 7]: Can't assign requested address PLETED -> DISCONNECTED wpa_driver_bsd_deauthenticate wpa_driver_bsd_del_key: keyidx=0 wpa_driver_bsd_del_key: keyidx=1 wpa_driver_bsd_del_key: keyidx=2 wpa_driver_bsd_del_key: keyidx=3 wpa_driver_bsd_del_key: addr=00:30:bd:fb:ca:31 keyidx=0 EAPOL: External notification - portEnabled=0 EAPOL: SUPP_PAE entering state DISCONNECTED EAPOL: SUPP_BE entering state INITIALIZE EAPOL: External notification - portValid=0 wpa_driver_bsd_set_wpa: enabled=0 wpa_driver_bsd_set_wpa_internal: wpa=0 privacy=0 wpa_driver_bsd_set_drop_unencrypted: enabled=0 wpa_driver_bsd_set_countermeasures: enabled=0 No keys have been configured - skip key clearing Cancelling scan request Cancelling authentication timeout wpa_driver_bsd_set_wpa_internal: wpa=0 privacy=0 I'm willing to try to debug this further, or even try any patches that a developer thinks might fix/diagnose the issue. Unfortunately, I can't upgrade to -CURRENT at the moment since this is a production machine. Adam From owner-freebsd-net@FreeBSD.ORG Thu Apr 16 11:15:23 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 74020106568C for ; Thu, 16 Apr 2009 11:15:23 +0000 (UTC) (envelope-from Michael.Tuexen@lurchi.franken.de) Received: from mail-n.franken.de (drew.ipv6.franken.de [IPv6:2001:638:a02:a001:20e:cff:fe4a:feaa]) by mx1.freebsd.org (Postfix) with ESMTP id 064128FC17 for ; Thu, 16 Apr 2009 11:15:23 +0000 (UTC) (envelope-from Michael.Tuexen@lurchi.franken.de) Received: from [192.168.1.194] (p508FF550.dip.t-dialin.net [80.143.245.80]) by mail-n.franken.de (Postfix) with ESMTP id 0E9771C0B4044; Thu, 16 Apr 2009 13:15:20 +0200 (CEST) Message-Id: From: =?ISO-8859-1?Q?Michael_T=FCxen?= To: Bruce Simpson In-Reply-To: <49E70AD5.8000700@incunabulum.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed; delsp=yes Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Apple Message framework v930.4) Date: Thu, 16 Apr 2009 13:15:19 +0200 References: <49E5D4CF.8050707@incunabulum.net> <822B17FC-60E1-4F19-8E62-BB2E5351CB99@lurchi.franken.de> <49E67988.2020008@incunabulum.net> <0A42378E-1193-41B4-964D-C1A4E4632616@lurchi.franken.de> <49E70AD5.8000700@incunabulum.net> X-Mailer: Apple Mail (2.930.4) Cc: FreeBSD Net , Robin Seggelmann Subject: Re: OpenSSL DTLS bug fix patches X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2009 11:15:23 -0000 On Apr 16, 2009, at 12:39 PM, Bruce Simpson wrote: > Michael T=FCxen wrote: >> On Apr 16, 2009, at 2:19 AM, Bruce Simpson wrote: >> ... >>> >>> That's excellent news, and these fixes look good, but I was more =20 >>> wondering if this drop would be in FreeBSD 7.2-RELEASE :-) >> I know, but I wanted to make the state of the patches clear to make >> the decision for the port maintainer easier. >> >> Are you using DTLS? > > Not yet, but I came across these patches whilst researching TLS =20 > adaptation for SCTP. Ahh, I see. Even more interesting. If you try our DTLS/SCTP =20 implementation, please let us know if it works for you or if you have any questions... > > > cheers, > BMS > From owner-freebsd-net@FreeBSD.ORG Thu Apr 16 11:56:32 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D95D2106564A; Thu, 16 Apr 2009 11:56:32 +0000 (UTC) (envelope-from gavin@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id AE93E8FC12; Thu, 16 Apr 2009 11:56:32 +0000 (UTC) (envelope-from gavin@FreeBSD.org) Received: from freefall.freebsd.org (gavin@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3GBuWHt095245; Thu, 16 Apr 2009 11:56:32 GMT (envelope-from gavin@freefall.freebsd.org) Received: (from gavin@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3GBuWp1095241; Thu, 16 Apr 2009 11:56:32 GMT (envelope-from gavin) Date: Thu, 16 Apr 2009 11:56:32 GMT Message-Id: <200904161156.n3GBuWp1095241@freefall.freebsd.org> To: francisgendreau@videotron.ca, gavin@FreeBSD.org, freebsd-net@FreeBSD.org From: gavin@FreeBSD.org Cc: Subject: Re: kern/125195: [fxp] fxp(4) driver failed to initialize device Intel 82801DB X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2009 11:56:33 -0000 Synopsis: [fxp] fxp(4) driver failed to initialize device Intel 82801DB State-Changed-From-To: feedback->open State-Changed-By: gavin State-Changed-When: Thu Apr 16 11:54:40 UTC 2009 State-Changed-Why: Feedback was received. Card is: vendor=0x8086, dev=0x103e, revid=0x83 http://www.freebsd.org/cgi/query-pr.cgi?pr=125195 From owner-freebsd-net@FreeBSD.ORG Thu Apr 16 20:41:40 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7F006106566C for ; Thu, 16 Apr 2009 20:41:40 +0000 (UTC) (envelope-from andre@freebsd.org) Received: from c00l3r.networx.ch (c00l3r.networx.ch [62.48.2.2]) by mx1.freebsd.org (Postfix) with ESMTP id E5DF28FC20 for ; Thu, 16 Apr 2009 20:41:39 +0000 (UTC) (envelope-from andre@freebsd.org) Received: (qmail 3193 invoked from network); 16 Apr 2009 20:15:01 -0000 Received: from localhost (HELO [127.0.0.1]) ([127.0.0.1]) (envelope-sender ) by c00l3r.networx.ch (qmail-ldap-1.03) with SMTP for ; 16 Apr 2009 20:15:01 -0000 Message-ID: <49E791C3.7060703@freebsd.org> Date: Thu, 16 Apr 2009 22:14:59 +0200 From: Andre Oppermann User-Agent: Thunderbird 1.5.0.14 (Windows/20071210) MIME-Version: 1.0 To: Renaud Lienhart References: <20090415084031.6d149fef@renaud-dev1> In-Reply-To: <20090415084031.6d149fef@renaud-dev1> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org Subject: Re: tcp_output() might generate invalid TSO frames X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2009 20:41:40 -0000 Renaud Lienhart wrote: > Hi, > > We're having trouble virtualizing FreeBSD 7+ on ESX because of an issue > with the stack's TSO implementation: it sometimes generates TSO packets > whose payload size is actually smaller than the MSS. > > The faulty logic is described, along with a patch, in PR #132832. It > has been opened for a while now, without any apparent activity, which > is why I'm reaching the mailing list directly. > > ESX currently drops these packets as many physical nics are known to > choke on such frames, which effectively limits FreeBSD guests' > performance. Network cards should not choke on frames with TSO but less than one MSS worth of data. Though it's not useful to create such frames in the stack. > I don't know about other virtualization stacks' behavior. > > http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/132832 Your patch should fix the issue. I don't have time to commit it and to run the MFC process though. Maybe Kip or Jack can run that process. -- Andre From owner-freebsd-net@FreeBSD.ORG Fri Apr 17 11:01:52 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B1F4B1065675 for ; Fri, 17 Apr 2009 11:01:52 +0000 (UTC) (envelope-from xdsgrrr@consultcommerce.com) Received: from mail.consultcommerce.com (ns.consultcommerce.com [87.246.2.254]) by mx1.freebsd.org (Postfix) with ESMTP id E2E898FC31 for ; Fri, 17 Apr 2009 11:01:51 +0000 (UTC) (envelope-from xdsgrrr@consultcommerce.com) Received: (qmail 56384 invoked by uid 0); 17 Apr 2009 13:35:09 +0300 Received: from 85.118.192.131 by ns.consultcommerce.com (envelope-from , uid 0) with qmail-scanner-1.25 (clamdscan: 0.87/1102. spamassassin: 3.1.0. Clear:RC:0(85.118.192.131):SA:0(2.4/4.5):. Processed in 3.323055 secs); 17 Apr 2009 10:35:09 -0000 X-Spam-Status: No, hits=2.4 required=4.5 X-Spam-Level: ++ X-Qmail-Scanner-Mail-From: xdsgrrr@consultcommerce.com via ns.consultcommerce.com X-Qmail-Scanner: 1.25 (Clear:RC:0(85.118.192.131):SA:0(2.4/4.5):. Processed in 3.323055 secs) Received: from unknown (HELO ?172.16.3.221?) (xdsgrrr@consultcommerce.com@85.118.192.131) by ns.consultcommerce.com with SMTP; 17 Apr 2009 13:35:05 +0300 From: xdsgrrr To: =?koi8-r?Q?=E1=CC=C5=CB=D3=C5=CA_?= =?koi8-r?Q?=E2=CC=C9=CE=CB=CF=D7?= In-Reply-To: <2d934d80904160052u70980215v1a32b07d4b1168f@mail.gmail.com> References: <2d934d80904150642r585049b4wadfdfc82a3d8c7fc@mail.gmail.com> <20090415144956.T15361@maildrop.int.zabbadoz.net> <2d934d80904150807p732bce43gc110fe6ae042507d@mail.gmail.com> <49E678E6.102@incunabulum.net> <2d934d80904160052u70980215v1a32b07d4b1168f@mail.gmail.com> Content-Type: text/plain; charset="koi8-r" Date: Fri, 17 Apr 2009 13:34:17 +0300 Message-Id: <1239964457.46223.2.camel@so1-ay279.globul.bg> Mime-Version: 1.0 X-Mailer: Evolution 2.24.5 FreeBSD GNOME Team Port Content-Transfer-Encoding: 8bit Cc: freebsd-net Subject: Re: MD5 authentication in quagga X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Apr 2009 11:01:54 -0000 Its depends on what protocol you talking i use md5 auth for quagga ospfd for more than 5-6 years without problems you maybe talk about bgpd ? md5 peer auth ? On Thu, 2009-04-16 at 10:52 +0300, Алексей Блинков wrote: > 16 апреля 2009 г. 3:16 пользователь Bruce Simpson написал: > > Алексей Блинков wrote: > >> > >> If modelling ideal situation, then: > >> > >> md5 password doesn`t match or empty, then peering must be closed... > >> > >> Now md5 working only for outgoing packets, not for input. And peering > >> not closed if password miss or not match. because bsd not check > >> incoming packets, i think... > >> > > > > I thought someone had fixed this ages ago? > > I seem to remember someone had merged some changes to what I'd originally > > done for Sentex from NetBSD... but I could be wrong. > > > > cheers, > > BMS > > > > I don`t know about how kernel works with md5 hashing, because i`m > newly in bsd... > > > -- br, Atanas Yankov Network Engineer, IT Division CCIE # 21756 mobile: (+359 89) 8400734 e-mail: ayankov@globul.bg www.globul.bg From owner-freebsd-net@FreeBSD.ORG Fri Apr 17 11:25:43 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 69EA5106566B for ; Fri, 17 Apr 2009 11:25:43 +0000 (UTC) (envelope-from alexey.blinkov@gmail.com) Received: from mail-fx0-f167.google.com (mail-fx0-f167.google.com [209.85.220.167]) by mx1.freebsd.org (Postfix) with ESMTP id EA2CC8FC16 for ; Fri, 17 Apr 2009 11:25:42 +0000 (UTC) (envelope-from alexey.blinkov@gmail.com) Received: by fxm11 with SMTP id 11so855984fxm.43 for ; Fri, 17 Apr 2009 04:25:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=+ayZZx+JTPmVNNFJv2tzJMf+m97CJUcF4ClsCbxbSuo=; b=DsQsRLru6bfr2sDJp+4DSLQrr0oLScsUByMKLQZNFiXEQo8L2CqfV5WNJjINhxXyTn SHhEmkKxbfruqn1Q3NvWWzEIOZkCA+5ZzvkM62O5ZZwyqmpJabZsJ0d7pJKZuvW5kzzM RAo2Bo6vxoMaKplDRBEmvd/CCBjqNEqCpDsH4= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=u+rNXRl3q3S4dLlOf24YTGznqD2Z4Q6ru9N1/+mgB36xuTB45I0LkwlR24k7F/0gT7 EhhViLtiF3dkWmrJorJi+Vnby0ZvyCMv6noykofjjcNKaw8L/Hh4OPVwigxcv5SI7ggR u88zSrJ3T4zKvmrz7zgxI3sS2Gt4WqDFsmzU0= MIME-Version: 1.0 Received: by 10.86.68.1 with SMTP id q1mr1956593fga.19.1239967541916; Fri, 17 Apr 2009 04:25:41 -0700 (PDT) In-Reply-To: <1239964457.46223.2.camel@so1-ay279.globul.bg> References: <2d934d80904150642r585049b4wadfdfc82a3d8c7fc@mail.gmail.com> <20090415144956.T15361@maildrop.int.zabbadoz.net> <2d934d80904150807p732bce43gc110fe6ae042507d@mail.gmail.com> <49E678E6.102@incunabulum.net> <2d934d80904160052u70980215v1a32b07d4b1168f@mail.gmail.com> <1239964457.46223.2.camel@so1-ay279.globul.bg> Date: Fri, 17 Apr 2009 14:25:41 +0300 Message-ID: <2d934d80904170425h4269580ds54a2fc3c46f4d4a4@mail.gmail.com> From: =?UTF-8?B?0JDQu9C10LrRgdC10Lkg0JHQu9C40L3QutC+0LI=?= To: xdsgrrr Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: freebsd-net Subject: Re: MD5 authentication in quagga X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Apr 2009 11:25:43 -0000 > Its depends on what protocol you talking i use md5 auth for quagga ospfd > for more than 5-6 years without problems =C2=A0you maybe talk about bgpd = ? > md5 peer auth ? I talking about BGPD. With authorisation in OSPFD i don`t have any problems= . --=20 =D0=A1 =D1=83=D0=B2=D0=B0=D0=B6=D0=B5=D0=BD=D0=B8=D0=B5=D0=BC =D0=90=D0=BB= =D0=B5=D0=BA=D1=81=D0=B5=D0=B9 =D0=91=D0=BB=D0=B8=D0=BD=D0=BA=D0=BE=D0=B2 From owner-freebsd-net@FreeBSD.ORG Fri Apr 17 14:08:13 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 13B621065670; Fri, 17 Apr 2009 14:08:13 +0000 (UTC) (envelope-from gavin@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id DC7918FC0C; Fri, 17 Apr 2009 14:08:12 +0000 (UTC) (envelope-from gavin@FreeBSD.org) Received: from freefall.freebsd.org (gavin@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3HE8CSG021777; Fri, 17 Apr 2009 14:08:12 GMT (envelope-from gavin@freefall.freebsd.org) Received: (from gavin@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3HE8CO9021772; Fri, 17 Apr 2009 14:08:12 GMT (envelope-from gavin) Date: Fri, 17 Apr 2009 14:08:12 GMT Message-Id: <200904171408.n3HE8CO9021772@freefall.freebsd.org> To: stefano.guidi@it.transport.bombardier.com, gavin@FreeBSD.org, freebsd-net@FreeBSD.org, gavin@FreeBSD.org From: gavin@FreeBSD.org Cc: Subject: Re: kern/114899: [bge] bge0: watchdog timeout -- resetting X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Apr 2009 14:08:13 -0000 Synopsis: [bge] bge0: watchdog timeout -- resetting State-Changed-From-To: feedback->closed State-Changed-By: gavin State-Changed-When: Fri Apr 17 14:06:34 UTC 2009 State-Changed-Why: Feedback timeout (~3 months). Toi submitter: if this is still an issue with more recent versions of FreeBSD, we can reopen this PR, however the driver has changed so much since 5.4-RELEASE that keeping this open without confirmation is probably counterproductive. Responsible-Changed-From-To: freebsd-net->gavin Responsible-Changed-By: gavin Responsible-Changed-When: Fri Apr 17 14:06:34 UTC 2009 Responsible-Changed-Why: Track http://www.freebsd.org/cgi/query-pr.cgi?pr=114899 From owner-freebsd-net@FreeBSD.ORG Fri Apr 17 15:40:24 2009 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AA85F106564A; Fri, 17 Apr 2009 15:40:24 +0000 (UTC) (envelope-from gavin@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 8103A8FC15; Fri, 17 Apr 2009 15:40:24 +0000 (UTC) (envelope-from gavin@FreeBSD.org) Received: from freefall.freebsd.org (gavin@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n3HFeOsk046625; Fri, 17 Apr 2009 15:40:24 GMT (envelope-from gavin@freefall.freebsd.org) Received: (from gavin@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n3HFeOaa046615; Fri, 17 Apr 2009 15:40:24 GMT (envelope-from gavin) Date: Fri, 17 Apr 2009 15:40:24 GMT Message-Id: <200904171540.n3HFeOaa046615@freefall.freebsd.org> To: gavin@FreeBSD.org, freebsd-bugs@FreeBSD.org, freebsd-net@FreeBSD.org From: gavin@FreeBSD.org Cc: Subject: Re: kern/133595: [panic] Kernel Panic at pcpu.h:195 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Apr 2009 15:40:25 -0000 Synopsis: [panic] Kernel Panic at pcpu.h:195 Responsible-Changed-From-To: freebsd-bugs->freebsd-net Responsible-Changed-By: gavin Responsible-Changed-When: Fri Apr 17 15:38:56 UTC 2009 Responsible-Changed-Why: Over to maintainer(s). To submitter: are you able to provide more information about your configuration? http://www.freebsd.org/cgi/query-pr.cgi?pr=133595 From owner-freebsd-net@FreeBSD.ORG Sat Apr 18 19:05:21 2009 Return-Path: Delivered-To: freebsd-net@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 141A610656BB for ; Sat, 18 Apr 2009 19:05:21 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from cyrus.watson.org (cyrus.watson.org [65.122.17.42]) by mx1.freebsd.org (Postfix) with ESMTP id DF8198FC08 for ; Sat, 18 Apr 2009 19:05:20 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from fledge.watson.org (fledge.watson.org [65.122.17.41]) by cyrus.watson.org (Postfix) with ESMTPS id 6F07046B9C; Sat, 18 Apr 2009 15:05:20 -0400 (EDT) Date: Sat, 18 Apr 2009 20:05:20 +0100 (BST) From: Robert Watson X-X-Sender: robert@fledge.watson.org To: Narek Gharibyan In-Reply-To: <0588BB0DDA024074A71CFF7A93877E11@arm.synisys.com> Message-ID: References: <0588BB0DDA024074A71CFF7A93877E11@arm.synisys.com> User-Agent: Alpine 2.00 (BSF 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: freebsd-net@FreeBSD.org Subject: Re: A Quick Question X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Apr 2009 19:05:25 -0000 On Thu, 16 Apr 2009, Narek Gharibyan wrote: > I would like to know is there any solution to problem show below, because we > use FreeBSD 7.0 in our network structure and we are meeting face to face to > this problem everyday\ Hi Narek: As Kip mentions, this panic message (a fatal trap in a software ithread) is fairly generic. If your stack trace matches the one in the PR (the panic is in rt_check() or the like) then this problem may well be fixed in FreeBSD 7.1 or the forthcoming FreeBSD 7.2, which contain a number of routing-related fixes. My advice would be to see if you can reproduce the problem with FreeBSD 7.2-RC1, which is due out in the next few days, and if so, we should debug it starting with that information. Robert N M Watson Computer Laboratory University of Cambridge > > > > > > kern/121555: [panic] Fatal trap 12: current process = 12 (swi1: net) > > > From: > > Alexey Sopov > > > Date: > > Mon, 10 Mar 2008 11:46:51 GMT > > > Subject: > > [7.0-RELEASE] Fatal trap 12: current process = 12 (swi1: net) > > > Send-pr version: > > www-3.1 > > > > > Number: > > 121555 > > > Category: > > kern > > > Synopsis: > > [panic] Fatal trap 12: current process = 12 (swi1: net) > > > Severity: > > serious > > > Priority: > > high > > > Responsible: > > freebsd-net@FreeBSD.org > > > State: > > open > > > Class: > > sw-bug > > > Arrival-Date: > > Mon Mar 10 12:00:01 UTC 2008 > > > Closed-Date: > > > > > Last-Modified: > > Fri May 23 20:48:21 UTC 2008 > > > Originator: > > Alexey Sopov > > > Release: > > 7.0-RELEASE > > > > > > > > Best Regards, > > Narek Gharibyan > > > > Network Administration Team leader > > Synergy International Systems Inc. / Armenia > > http://www.synisys.com > > > > Tel.: > > mobile: +37494 - 353489 > > work: +37410 - 650202 ext 772 > > > > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > From owner-freebsd-net@FreeBSD.ORG Sat Apr 18 20:54:22 2009 Return-Path: Delivered-To: net@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 16859106566C; Sat, 18 Apr 2009 20:54:22 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from cyrus.watson.org (cyrus.watson.org [65.122.17.42]) by mx1.freebsd.org (Postfix) with ESMTP id E6A8F8FC12; Sat, 18 Apr 2009 20:54:21 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from fledge.watson.org (fledge.watson.org [65.122.17.41]) by cyrus.watson.org (Postfix) with ESMTPS id 9E3C946B23; Sat, 18 Apr 2009 16:54:21 -0400 (EDT) Date: Sat, 18 Apr 2009 21:54:21 +0100 (BST) From: Robert Watson X-X-Sender: robert@fledge.watson.org To: net@FreeBSD.org, current@FreeBSD.org Message-ID: User-Agent: Alpine 2.00 (BSF 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: Subject: IFF_NEEDSGIANT now gone from 8.x (was: svn commit: r191253 - head/sys/net (fwd)) X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Apr 2009 20:54:22 -0000 Dear all: Just under four years ago, the non-MPSAFE network stack de-orbit burn schedule was announced, setting out a plan for eliminating remaining use of the Giant lock in the FreeBSD network stack. With the attached commit, that plan is now complete, and almost all of the network stack neither requires Giant nor runs with it. As always there are some loose ends, especially in IPv6, but with any luck those can be dealt with 8.0 also. Special thanks are due to the people who worked on and shepherded the last steps of this process -- especially Hans Petter Selasky, Alfred Perlstein, Andrew Thompson, Ed Schouten, and John Baldwin, who collectively bought our USB, tty, and other non-MPSAFE device driver stacks into a post-SMPng world. Thanks, Robert N M Watson Computer Laboratory University of Cambridge ---------- Forwarded message ---------- Date: Sat, 18 Apr 2009 20:39:18 +0000 (UTC) From: Robert Watson To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: svn commit: r191253 - head/sys/net Author: rwatson Date: Sat Apr 18 20:39:17 2009 New Revision: 191253 URL: http://svn.freebsd.org/changeset/base/191253 Log: Remove IFF_NEEDSGIANT interface flag: we no longer provide ifnet-layer infrastructure to support non-MPSAFE network device drivers. Modified: head/sys/net/if.h Modified: head/sys/net/if.h ============================================================================== --- head/sys/net/if.h Sat Apr 18 20:10:39 2009 (r191252) +++ head/sys/net/if.h Sat Apr 18 20:39:17 2009 (r191253) @@ -149,7 +149,6 @@ struct if_data { #define IFF_PPROMISC 0x20000 /* (n) user-requested promisc mode */ #define IFF_MONITOR 0x40000 /* (n) user-requested monitor mode */ #define IFF_STATICARP 0x80000 /* (n) static ARP */ -#define IFF_NEEDSGIANT 0x100000 /* (i) hold Giant over if_start calls */ /* * Old names for driver flags so that user space tools can continue to use @@ -163,8 +162,7 @@ struct if_data { /* flags set internally only: */ #define IFF_CANTCHANGE \ (IFF_BROADCAST|IFF_POINTOPOINT|IFF_DRV_RUNNING|IFF_DRV_OACTIVE|\ - IFF_SIMPLEX|IFF_MULTICAST|IFF_ALLMULTI|IFF_SMART|IFF_PROMISC|\ - IFF_NEEDSGIANT) + IFF_SIMPLEX|IFF_MULTICAST|IFF_ALLMULTI|IFF_SMART|IFF_PROMISC) /* * Values for if_link_state. From owner-freebsd-net@FreeBSD.ORG Sat Apr 18 22:10:06 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 94B5F106566B for ; Sat, 18 Apr 2009 22:10:06 +0000 (UTC) (envelope-from steve@ibctech.ca) Received: from ibctech.ca (v6.ibctech.ca [IPv6:2607:f118::b6]) by mx1.freebsd.org (Postfix) with SMTP id 28E538FC08 for ; Sat, 18 Apr 2009 22:10:05 +0000 (UTC) (envelope-from steve@ibctech.ca) Received: (qmail 75049 invoked by uid 89); 18 Apr 2009 22:10:32 -0000 Received: from unknown (HELO ?IPv6:2607:f118::5?) (steve@ibctech.ca@2607:f118::5) by 2607:f118::b6 with ESMTPA; 18 Apr 2009 22:10:31 -0000 Message-ID: <49EA4FBC.4040202@ibctech.ca> Date: Sat, 18 Apr 2009 18:10:04 -0400 From: Steve Bertrand User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) MIME-Version: 1.0 To: FreeBSD Net X-Enigmail-Version: 0.95.7 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Subject: Route traffic on a gateway through SSH tunnel X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Apr 2009 22:10:06 -0000 >From what I believe, I'm attempting to do something that has most likely been achieved before, but there is something that I'm missing. This is for my personal home setup. I've built a flash-based CPE, which connects to our DSL network with mpd5. I've enabled NAT, and am using IPFW as the packet filter. I have a Squid proxy/content filter at my office that I would like to route all 80/443 traffic from my home connection, through the proxy. The proxy and the termination point of my home connection are located in two different PoPs, within different ASs. My desire is to have this proxy-routing enabled within the network hardware, as to not need to set application layer details on the PC(s) at home. At this point, I have the FBSD (7.2) gateway device set up with an SSH tunnel. The local tunnel endpoint terminates on a LAN interface which utilizes 1918 space. It listens for traffic on 172.16.250.1:80, and forwards it to the proxyIP:8080. When I configure a workstation's Firefox to use 172.16.250.1:80 as a proxy, everything works as expected. Now, I need to figure out a way so that the same setup will work, but with no proxy configured within Firefox. At this time, I'm recompiling the kernel on the gateway device to include IPFIREWALL_FORWARD. I'm going to try a fwd rule to pass all traffic destined to *:80 to 172.16.250.1:80, in hopes that the traffic will be first redirected to itself, and therefore through the SSH tunnel to the proxy. My past experience with this however, is that FBSD will complain that the dst IP doesn't reside on the box. Does anyone have any suggestions or comments they can share regarding such a setup? Steve