From owner-freebsd-questions@FreeBSD.ORG  Thu Sep  4 09:26:52 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 47AEB16A4BF
	for <freebsd-questions@freebsd.org>;
	Thu,  4 Sep 2003 09:26:52 -0700 (PDT)
Received: from illustrious.cnchost.com (illustrious.concentric.net
	[207.155.252.7])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9323443FDF
	for <freebsd-questions@freebsd.org>;
	Thu,  4 Sep 2003 09:26:49 -0700 (PDT)
	(envelope-from mwoodson@sricrm.com)
Received: from squelcher.redlands.sricrm.com (bdsl.66.14.215.39.gte.net
	[66.14.215.39])	by illustrious.cnchost.com
	id MAA11259; Thu, 4 Sep 2003 12:26:46 -0400 (EDT)
	[ConcentricHost SMTP Relay 1.15]
Errors-To: <mwoodson@sricrm.com>
From: Mark Woodson <mwoodson@sricrm.com>
Organization: Statistical Research, Inc.
To: "Putinas" <pilkis@gmx.net>
Date: Thu, 4 Sep 2003 09:26:46 -0700
User-Agent: KMail/1.5.3
References: <00ee01c372e0$c80557e0$0464a8c0@spotripoli.local>
In-Reply-To: <00ee01c372e0$c80557e0$0464a8c0@spotripoli.local>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200309040926.46086.mwoodson@sricrm.com>
cc: freebsd-questions@freebsd.org
Subject: Re: Entropy harvesting: interrupts ethernet point_to_point
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Sep 2003 16:26:52 -0000

On Thursday 04 September 2003 05:33 am, Putinas wrote:
[snip]
> and also part of my custom kernel, I tried to commend RANDOM_IP_ID,
> PFIL_HOOKS but I got same results :
>
> options         INCLUDE_CONFIG_FILE
> options         IPFIREWALL              #firewall
> options         IPFIREWALL_VERBOSE      #enable logging to
> syslogd(8) options         IPFIREWALL_FORWARD      #enable
> transparent proxy support options        
> IPFIREWALL_DEFAULT_TO_ACCEPT    #allow everything by default
> options         IPV6FIREWALL            #firewall for IPv6 options 
>        IPV6FIREWALL_VERBOSE
> options         IPV6FIREWALL_DEFAULT_TO_ACCEPT
> options         IPDIVERT                #divert sockets
> options         IPFILTER                #ipfilter support
> options         IPFILTER_LOG            #ipfilter logging
> options         IPSTEALTH               #support for stealth
> forwarding options         PFIL_HOOKS
> options         TCPDEBUG
> options         RANDOM_IP_ID
> options         TCP_DROP_SYNFIN         #drop TCP packets with
> SYN+FIN options         DUMMYNET
> options         BRIDGE
> options         DEVICE_POLLING

Is ipfilter and ipfw supported at the same time?  Are you planning on 
using both of them at the same time?  If you are planning on using 
ipfirewall you can safely comment out ipfilter options.

-Mark