search for: xl0

Dear list, A few days ago one of my machines were attacked by a DDoS-attack using UDP on random ports.. When I later on analyzed the logs, I found this in my dmesg: xl0: initialization of the rx ring failed (55) xl0: initialization of the rx ring failed (55) xl0: initialization of the rx ring failed (55) I tried to find out on google what it ment, but without any luck. What does that mean and how can I correct it (if it's a problem of course). Best regards,...

...ocal asterisk box -> iaxtel -> local asterisk The same degradation happens as soon as the second connection is connected. I am suspecting the ADSL connection. The internet part is ADSL with 512k down and 128k UP. The nic is a 3c905c 100baseTX and connected to a NEC ADSL modem. # ifconfig xl0 xl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 ^^^^^^^^ address: 00:01:02:78:11:e8 media: Ethernet autoselect (10baseT) status: active inet 203.219.167.126 netmask 0xfffffffc broadcast 203.219.167.12...

I've plugged in two 3com OfficeConnect 10/100 3CSOHO100B-TX in my freebsd 4.8 box and they are not detected. Do I have to enable some support in the kernel ? Cheers Hannes

I have a FreeBSD box acting as a firewall and NAT gateway I would like to set it up to transparently pass IPSec packets -- I have an IPSec VPN client running on another machine, connecting to a remote network. Is there a way to do this? I can't find any hints in the man pages.

...T,RUNNING,SIMPLEX,MULTICAST> mtu 1500 address: 00:02:55:30:54:28 media: Ethernet autoselect (100baseTX full-duplex) status: active inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255 inet6 fe80::202:55ff:fe30:5428%fxp0 prefixlen 64 scopeid 0x1 xl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 address: 00:01:02:78:11:e8 media: Ethernet autoselect (10baseT) status: active inet 203.219.167.126 netmask 0xfffffffc broadcast 203.219.167.127 inet6 fe80::201:2ff:fe78:11e8%xl0 prefixle...

...ing on it. I am also trying to set up the IPFILTER on it. I used the handbook to familiarize myself with the software and the sample script provided in the chapter discussing ipf, I decided to use as a starting point. After reading the ipf chapter I assumed that if "block in log first quick on xl0 all" is used, everything which is not opened by default will be blocked. Now I opened only samba and ssh ports: pass in quick on xl0 proto tcp/udp from any to any port 137 <> 139 keep state pass in quick on xl0 proto tcp/udp from any to any port = 445 keep state pass in quick on xl0 prot...

...where between 20-100kB/s and from freebsd -> windows I will get a few mbps. I'm getting no where near a full 100mbps and both ethernet cards are set for 100mbps full duplex working great. I've tried increasing buffer sizes on the network to over 65535 bytes and nothing seems to work. (xl0 = LAN, xl1 = internet) I've included some information and I know it's still a general question but I'm hoping someone can work with me on this issue. I'd really like to keep samba but I need it to perform. I need to be able to get atleast a 35% efficiency rate. Thanks in advance....

I've been using ipfw for a while to create a router with NAT and packet filtering, but have never combined it with stateful filtering, instead using things like "established" to accept incoming TCP packets which are part of a conversation initiated from the "inside". I'd like to move to using keep-state/check-state to get tighter filtering and also to allow outgoing

current setup SIP phone 192.168.1.30 --> linksys wrt54g sveasoft -- INTERNET -- (xl0) Firewall (xl2:172.16.0.50)--> (em1:172.16.0.101) Asterisk problem is RTP stream not oging trouhg from * to sip and vice versa. #1 and asterusk is pushing 192.168.1.30 back to linksys with 172 as return address.... or #2 asterisk trying to get back to me as 192.168 on public internet.. g...

...1.214.3173 > 192.168.1.2.139: . [tcp sum ok] ack 326 win 63916 (DF) (ttl 128, id 28180) Some snippets from the tcpdump to illustrate the bad checksum complaints. I've looked everywhere for info on this, but without luck. As you can see in the dmesg, there seems to be some weirdness with the xl0 drivers, but except for samba, this box also serves DNS, XDMCP, Squid, and of course SSH, which makes me look at other possible causes before thinking that's the problem. I mean, there has been no problems what so ever except for with this. Not saying anything though :) In the first snippet li...

...d to DOWN xl1: link state changed to UP xl1: watchdog timeout xl1: link state changed to DOWN xl1: link state changed to UP xl1: watchdog timeout xl1: link state changed to DOWN xl1: link state changed to UP --------------------------------------------- xer:/root# cat /var/run/dmesg.boot | grep xl xl0: <3Com 3c905C-TX Fast Etherlink XL> port 0xec00-0xec7f mem 0xfceffc00-0xfceffc7f irq 23 at device 11.0 on pci2 miibus0: <MII bus> on xl0 xlphy0: <3c905C 10/100 internal PHY> on miibus0 xlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto xl0: Ethernet address: 00:01:02:e...

How do I tell LogCheck that I don't care what's in the rest of the search string? ^\w{3} [ :0-9]{11} m0n0wall ipmon\[[0-9]+\]: [0-9:]{8}\.[0-9]{6} xl0 (@ 0:3|@100:3) (b|p) 192\.168\.2\.[0-9]{1,3} -> [0-9.]{7,15} PR igmp len [0-9]{2} \([0-9]{2}+\) IN$ ^\w{3} [ :0-9]{11} m0n0wall ipmon\[[0-9]+\]: [0-9:]{8}\.[0-9]{6} xl0 (@ 0:3|@100:3) (b|p) 192\.168\.2\.[0-9]{1,3} -> [0-9.]{7,15} PR igmp len [0-9]{2} \([0-9]{2}+\) K-S IN$ As you can see th...

...also attached with the email below for ur reference) After that I executed 'ping6' and 'tcpdump' commands to test the ipsec connection(on my system i.e.,host1-mohan), but it seems, it is not working properly... ########### ping6 command output at host1############ mohan# ping6 -I xl0 fe80::2b0:d0ff:fe48:7ce7 PING6(56=40+8+8 bytes) fe80::2b0:d0ff:fe6f:dfa0%xl0 --> fe80::2b0:d0ff:fe48:7ce7 ^C --- fe80::2b0:d0ff:fe48:7ce7 ping6 statistics --- 6 packets transmitted, 0 packets received, 100% packet loss mohan# ############################################# But, with tcpdump comma...

...ey.sh is also attached with the email below for ur reference) After that I executed 'ping6' and 'tcpdump' commands to test the connection(on my system i.e.,host1-mohan), but, it seems is not working properly... ########### ping6 command output at host1 ############ mohan# ping6 -I xl0 fe80::2b0:d0ff:fe48:7ce7 PING6(56=40+8+8 bytes) fe80::2b0:d0ff:fe6f:dfa0%xl0 --> fe80::2b0:d0ff:fe48:7ce7 ^C --- fe80::2b0:d0ff:fe48:7ce7 ping6 statistics --- 6 packets transmitted, 0 packets received, 100% packet loss mohan# ############################################# But, with tcpdump comma...

...n pcib3 adv0: <AdvanSys ASC1200B SCSI controller> port 0x3080-0x30bf irq 3 at device 5.0 on pci3 adv0: AdvanSys SCSI Host Adapter, SCSI ID 7, queue depth 20 rp0: <rp> port 0x30c0-0x30ff irq 10 at device 6.0 on pci3 RocketPort0 = 8 ports rp0: driver is using old-style compatibility shims xl0: <3Com 3c905C-TX Fast Etherlink XL> port 0x3000-0x307f mem 0x90101000-0x9010107f irq 5 at device 8.0 on pci3 xl0: reset didn't complete xl0: Ethernet address: 00:e0:81:20:3b:c8 xl0: media options word: a xl0: found MII/AUTO miibus0: <MII bus> on xl0 ukphy0: <Generic IEEE 802.3u m...

...other workgroup clients. \\serverip works fine though. The configuration was not changed at all during the migration. The only changes were some of the mount entries and the network device change from rl0 to sk0, with corresponding changes in /etc/rc.conf. After that I tried using another card on xl0, but with the same results. My Samba config is such that the network only relies on broadcast to learn the names of other workstations. No WINS server, or listing hostnames in /etc/hosts or lmhosts. Here's an nmbd logfile snippet. The Samba server here is MARIO, and workgroup WORKGROUP: [sni...

Hi, After the option IPFILTER_DEFAULT_BLOCK is specified at kernel conf on FreeBSD 4.8 stable (cvsup'd with tag RELENG_4_8), the machine cannot be ping'd by others on the same network. In addition, the machine cannot ping itself. ping localhost (or 127.0.0.1) -> no route to host ping itself with its own ip address -> no route to host The freebsd box, with an external pppoe

Hi, After the option IPFILTER_DEFAULT_BLOCK is specified at kernel conf on FreeBSD 4.8 stable (cvsup'd with tag RELENG_4_8), the machine cannot be ping'd by others on the same network. In addition, the machine cannot ping itself. ping localhost (or 127.0.0.1) -> no route to host ping itself with its own ip address -> no route to host The freebsd box, with an external pppoe

Hello, I am having a some problems getting SSHD to run on the Ipv6 interface. Interface/Ipv6 Address: ipv6.open-systems.org [kevin at satan kevin/xp-0.0.15] 536 $ping6 ipv6.open-systems.org PING6(56=40+8+8 bytes) 3ffe:1200:3028:ff01::cab --> 3ffe:1200:3028:ff01::caa 16 bytes from 3ffe:1200:3028:ff01::caa, icmp_seq=0 hlim=64 time=73.96 ms sshd_config: ListenAddress

...<AcerLabs M5237 (Aladdin-V) USB controller> on ohci1 usb1: USB revision 1.0 uhub1: AcerLabs OHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub1: 2 ports with 2 removable, self powered isab0: <AcerLabs M1533 portable PCI-ISA bridge> at device 7.0 on pci0 isa0: <ISA bus> on isab0 xl0: <3Com 3c905B-TX Fast Etherlink XL> port 0xb400-0xb47f mem 0xe9800000-0xe980007f irq 10 at device 11.0 on pci0 xl0: Ethernet address: 00:50:da:19:cc:b4 miibus0: <MII bus> on xl0 xlphy0: <3Com internal media interface> on miibus0 xlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-...