search for: nixdorf

..._changeaddr ? | +- br_fdb_change_mac_address ? | +- br_fdb_add_local ? +- br_fdb_update ? +- fdb_add_entry <--- __br_fdb_add ? +- br_fdb_external_learn_add ? Signed-off-by: Johannes Nixdorf <jnixdorf-oss at avm.de> --- include/uapi/linux/if_link.h | 1 + net/bridge/br_device.c | 2 ++ net/bridge/br_fdb.c | 6 ++++++ net/bridge/br_netlink.c | 9 ++++++++- net/bridge/br_private.h | 2 ++ 5 files changed, 19 insertions(+), 1 deletion(-) diff --git a/inclu...

...[ { ... "linkinfo": { "info_kind": "bridge", "info_data": { ... "fdb_n_learned": 2, "fdb_max_learned": 1024, ... } }, ... } ] Signed-off-by: Johannes Nixdorf <jnixdorf-oss at avm.de> --- The corresponding kernel changes are in net-next.git as commit ddd1ad68826d ("net: bridge: Add netlink knobs for number / max learned FDB entries"). --- Changes in v5: - Removed the RFC status again, as the kernel changes landed. - Link to v4: https://...

..."linkinfo": { "info_kind": "bridge", "info_data": { ... "fdb_n_learned_entries": 2, "fdb_max_learned_entries": 1024, ... } }, ... } ] Signed-off-by: Johannes Nixdorf <jnixdorf-oss at avm.de> --- Changes since v2: - Properly split the net-next and iproute2-next threads. (from review) - Changed to *_n_* instead of *_cur_*. (from review) - Use strcmp() instead of matches(). (from review) - Made names in code and documentation consistent. (from review) -...

This allows the called fdb_create to detect that the entry was added by the user early in the process. This is in preparation to adding limits in fdb_create that should not apply to user created fdb entries. Signed-off-by: Johannes Nixdorf <jnixdorf-oss at avm.de> --- Changes since v1: - Added this change to ensure user added entries are not limited. net/bridge/br_fdb.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/net/bridge/br_fdb.c b/net/bridge/br_fdb.c index e69a872bfc1d..ac1dc8723b9c 100644...

On 20/06/2023 16:35, Johannes Nixdorf wrote: > On Tue, Jun 20, 2023 at 09:55:31AM +0300, Nikolay Aleksandrov wrote: >> On 6/19/23 10:14, Johannes Nixdorf wrote: >>> +/* Set a FDB flag that implies the entry was not learned, and account >>> + * for changes in the learned status. >>> + */ >>>...

...L or BR_FDB_ADDED_BY_USER, and changes to those flags are protected under a lock. This means the limit also applies to entries created with BR_FDB_ADDED_BY_EXT_LEARN but none of the other two, e.g. ones added by SWITCHDEV_FDB_ADD_TO_BRIDGE. v1: https://lore.kernel.org/netdev/20230515085046.4457-1-jnixdorf-oss at avm.de/ Changes since v1: - Added BR_FDB_ADDED_BY_USER earlier in fdb_add_entry to ensure the limit is not applied. - Do not initialize fdb_*_entries to 0. (from review) - Do not skip decrementing on 0. (from review) - Moved the counters to a conditional hole in struct net_bridge to...

...quot;linkinfo": { "info_kind": "bridge", "info_data": { ... "fdb_cur_learned_entries": 2, "fdb_max_learned_entries": 1024, ... } }, ... } ] Signed-off-by: Johannes Nixdorf <jnixdorf-oss at avm.de> --- include/uapi/linux/if_link.h | 2 ++ ip/iplink_bridge.c | 21 +++++++++++++++++++++ man/man8/ip-link.8.in | 9 +++++++++ 3 files changed, 32 insertions(+) diff --git a/include/uapi/linux/if_link.h b/include/uapi/linux/if_link.h index 94fb7ef9e...

On 15/05/2023 11:50, Johannes Nixdorf wrote: > This is a convenience setting, which allows the administrator to limit > the default limit of FDB entries for all created bridges, instead of > having to set it for each created bridge using the netlink property. > > The setting is network namespace local, and defaults to 0...

...read_socket_data: recv failure for 4. Error = Protocol error [1999/10/05 09:47:32, 2] server.c:(406) Closing connections Cheers and thanks, Anke Hoffmann ---------------------------------------------------------------- Anke Hoffmann SBS SIS 6 tel: +49-5251-8-25403 Heinz-Nixdorf-Ring 1 email: Anke.Hoffmann@pdb.sbs.de 33106 Paderborn fax: +49-5251-8-25209 ----------------------------------------------------------------

On Tue, Jun 20, 2023 at 09:55:31AM +0300, Nikolay Aleksandrov wrote: > On 6/19/23 10:14, Johannes Nixdorf wrote: > > +/* Set a FDB flag that implies the entry was not learned, and account > > + * for changes in the learned status. > > + */ > > +static void __fdb_set_flag_not_learned(struct net_bridge *br, > > + struct net_bridge_fdb_entry *fdb, > > +...

...erstand any of the text, but I interpret that the Japanese version of CentOS-5.2 delivers nspluginwrapper as a new package... So, looking on the FTP-server, this package seems to be available in os/x86_64, maybe it should be listed in all release notes (arch specific)? Cheers, Niels -- WINCOR NIXDORF International GmbH Sitz der Gesellschaft: Paderborn Registergericht Paderborn HRB 3507 Gesch?ftsf?hrer: Eckard Heidloff (Vorsitzender), Stefan Auerbach, Dr. J?rgen Wunram Vorsitzender des Aufsichtsrats: Karl-Heinz Stiller Steuernummer: 339/5884/0020 - Ust-ID Nr.: DE812927716 - WEEE-Reg.-Nr. DE44...

On 15/05/2023 11:50, Johannes Nixdorf wrote: > A malicious actor behind one bridge port may spam the kernel with packets > with a random source MAC address, each of which will create an FDB entry, > each of which is a dynamic allocation in the kernel. > > There are roughly 2^48 different MAC addresses, further limited b...

...t;flags & BR_FDB_NOT_LEARNED_MASK) changes the accounting is updated. This introduces one additional locked update in br_fdb_update if BR_FDB_ADDED_BY_USER was set. This is only the case when creating a new entry via netlink, and never in the packet handling fast path. Signed-off-by: Johannes Nixdorf <jnixdorf-oss at avm.de> --- Changes since v1: - Do not initialize fdb_*_entries to 0. (from review) - Do not skip decrementing on 0. (from review) - Moved the counters to a conditional hole in struct net_bridge to avoid growing the struct. (from review, it still grows the struct as...

On Mon, 15 May 2023 10:50:46 +0200 Johannes Nixdorf <jnixdorf-oss at avm.de> wrote: > +static struct ctl_table br_sysctl_table[] = { > + { > + .procname = "bridge-fdb-max-entries-default", That name is too long. Also, all the rest of bridge code does not use sysctl's. Why is this special and why should the prop...

This adds a Kconfig option to configure a default FDB learning limit system wide, so a distributor building a special purpose kernel can limit all created bridges by default. The limit is only a soft default setting and overridable per bridge using netlink. Signed-off-by: Johannes Nixdorf <jnixdorf-oss at avm.de> --- Changes since v1: - Added a default limit in Kconfig. (deemed acceptable in review comments) net/bridge/Kconfig | 13 +++++++++++++ net/bridge/br_device.c | 2 ++ 2 files changed, 15 insertions(+) diff --git a/net/bridge/Kconfig b/net/bridge/Kconfig...

...erisk 'drop' the call completely once it has been returned to the HiPath PBX. I've tried to dig up information on the web, but wasn't able to find out whether that is possible at all - any feedback is appreciated! Marc Rohlfing -- Marc Rohlfing Training Manager OASY AG Heinz-Nixdorf-Ring 1 Geb?ude C 33106 Paderborn Telefon: +49 5251 / 68893 -13 Fax: +49 5251 / 68893 -09 E-Mail: marc.rohlfing@oasy.de Internet: www.oasy.de

...e stuff was free downloadable, so that > you can build your own cards. > Does anybody have the link? you're probably talking about the Zapata Telephony Project and their "Tormenta"-Cards: http://www.zapatatelephony.org/ Marc -- Marc Rohlfing Training Manager OASY AG Heinz-Nixdorf-Ring 1 Geb?ude C 33106 Paderborn Telefon: +49 5251 / 68893 -13 Fax: +49 5251 / 68893 -09 E-Mail: marc.rohlfing@oasy.de Internet: www.oasy.de

...only and am using a line FLAGSM = -DSVR4 -DSHADOW_PWD -DGUEST_SESSSETUP=1 -DFAST_SHARE_MODES -DALLOW_CHANGE_PASSWORD regards Stefan -- Stefan Kanthak e-mail: Stefan.Kanthak@mch.sni.de OEC BS2000 OS AP 2 'POSIX' WWW: http://D255S050.mch.sni.de/ Siemens Nixdorf Informationssysteme AG LAN-Manager: \\D255S050\PUBLIC\ Otto-Hahn-Ring 6 Telefon: +49 (89) 636-47598 81730 Muenchen Telefax: +49 (89) 636-46472 -- Jacco de Leeuw | Fac. Phys,Math.&Comp Sc. | mailto:leeuw@wins.uva.nl J.C. van...

...ran perfectly smooth ... Which interface address does nmbd use to register with a WINS server when configured to be a WINS client? I have not been able to find something pointing me to a specific direction when browsing through the sources. TIA, Robert -- Robert.Dahlem@rm.sni.de Siemens Nixdorf Business Services GmbH & Co. OHG LOB FS KORDOBA Service Tel: +49-69-97965-130 Fax: +49-69-97965-234 Private BBS: +49-69-4930830 (V34/ZYX Fido 2:2461/332) +49-69-94414444 (ISDN/X75 Fido 2:2461/326)

Hi, trying to investigate my xfs-acl problem I think I have found the missing part: In smbd/uid.c the function "sid_to_uid" resolves SIDs to unix user names. This is done as follows: - First the domain part of the SID is compared to the local domain (if the SID belongs to the samba server it can be resolved locally) - In any other cases winbindd is asked This works well if the