similar to: Strange fork-trlated problem

Hi. On my FreeBSD 4.8 configured IPFW2+IPF+IPNAT and I use them all: - IPFW - traffic accounting, shaping, balancing and filtering; - IPFilter - policy routing; - IPNAT - masquerading. I want to know, how IP-packets flow through all of this components? What's the path? incoming: IPFW Layer2 -> IPFW&Dummynet -> IPNAT -> IPFilter ? outgoing: IPFW Layer2 ->

From: tarkhil@over.ru [mailto:tarkhil@over.ru] > On Wed, Aug 20, 2003 at 01:12:51PM +0400, tarkhil@over.ru wrote: > > 10-20 minutes of work. New processes doesn't create anymore, process trying > > to fork looks in top having -20 PRI and "temp" STATE. I was unable to find > > I've got infected computers in my network. When ipnat mapping > table grew to

Hi, I''m afraid I have some problems understanding how crossbow is supposed to work ;) On my machine (OpenSolaris, snv_111) I''m running VirtualBox with couple of linux / XP installation and additionally a zone with exclusive IP. My network configuration looks like this: [6]elsinore:~>dladm show-link LINK CLASS MTU STATE OVER bge0 phys 1500 up

Hello, I have configured jail for users with sshd ftpd and auth. I started this jail on IP 127.0.0.10(there is an alias on lo0 interface), there was not any bigger problem to start it. But i have a problem with internet in this jail. I can log in to this jail through ssh or ftpd but i can't connect to the internet. I try to set up some kind of nat but it doesn't work. Can anybody help me

I want to run a non-global zone as a virtual router and run ipnat inside the non-global zone, however, when I try to enable routing it can''t find route:default or network/ipfilter. I''m using exclusive IP inside the zones and using OpenSolaris 2008.11 build 110. I''ve tried sparse root and whole root zones without success. I''ve read blogs and posts and

Hi All, I currently have setup a site to site vpn using racoon on my freebsd firewall. All is well there and I can connect through the vpn when I am on the firewall and get the connection fine. Now I want to be able to connect from other machines through the firewall - this is where I come unstuck, the ipsec policy allows for my external address range to connect through the vpn, but then I would

Hi all! Short question: could anyone point me to documents regarding topics: jails! & nat & (ipfw|ip tables) - I'm in process to build a new system... Planned layout: NET---router/nat-----gateway:freebsd5.x/nat--------inner net | | | | | L- apache/php (lo_alias1) | L------ mail server (lo_alias2)

Dear all I am working on unbalanced panel data and I can readily fit a "pooling" model using plm(), but not a "within" or "random" model. Reproducing the examples in vignette("plm") and in the AER package I encountered no such issues. ##unfortunately I cannot disclose the data, and it is too big anyway > dim(ibes.kld.exp.p[x.subs , ]) [1] 13189 34

Howdy all, I posted this message to the netfilter mailing-list and didn''t get much response. I apologize if anyone here is getting this for a second time. Anyway, I recently migrated my firewall from a FreeBSD box running ipfilter, ipnat and dummynet to a Gentoo Linux box running netfilter and tc. I have to admit that I''m having problems visualizing tc in my head. So, I was

Hi! I'm trying to increase security on my FreeBSD 4.8 firewall/DSL router/VPN router. My problem is with firewalling the VPN part. I'm using a tunnel to a RedHat 7.1 box running FreeS/WAN. This tunnel allows traffic from my internal net (172.17.0.0/24) to that box only: spdadd 172.17.0.0/24 $REDHAT/32 any -P out ipsec esp/tunnel/$MYADDR-$REDHAT/unique; spdadd $REDHAT/32 172.17.0.0/24

I have a FreeBSD box acting as a firewall and NAT gateway I would like to set it up to transparently pass IPSec packets -- I have an IPSec VPN client running on another machine, connecting to a remote network. Is there a way to do this? I can't find any hints in the man pages.

Hello, I'm running FreeBSD 9.0/amd64, pure ZFS setup, one Seagate disk ST2000NM0011 SN02 on LSI Logic (mpt) controller. Yes, I know that running one disk on RAID controller is a bit weird, I have to find yet if it is possible to connect disk to internal SATA controller. About two days ago, system became SLOW. Disk usage is constantly 100%, and sometimes I'm getting swap_pager:

Hi David! Thanks for reaching out, the codegen part of the tutorial is fine, but when I try to generate the object code file, it throws segfault. Also please note that I'm using release build of llvm, actually I don't know whether that is the root cause or not. I also run through valgrind, it seems like a invalid read from stack. |||Error Summary: | |1 errors in context 1 of 1:

Hi, I plan to connect to remote Asterisk that will terminate calls to ISDN primary channel. I'd certainly like to secure this type of service, so would kindly ask for any advice on how to secure this authentication as much as reasonably possible. Since there is long IP route I guess VPN will take too much additional bandwidth... Regards, Robert.

Hello! I've found that on two FreeBSD 4.5-RELEASE boxes chkrootkit finds: Checking `chfn'... INFECTED Checking `chsh'... INFECTED Checking `date'... INFECTED Checking `ls'... INFECTED Checking `ps'... INFECTED recompiling, say, ls from souces didn't help. False positive or source changed as well? -- Alex.

I've installed successfully LEGO LOGO, a game made by LEGO Media. But, when I run it, I get a messagebox with the following error: ?LEGO LOCO only runs in High Colour (16-bit) 800x600, 1024x768 and 1280x1024. Please change to one of these settings.? Is there any workaround for this? Or must I change xorg.conf? (I'm using 1024x768. I suppose the problem is depth - mine is perhaps 24.)

I am usong three ehternet cards eth0 , eth1 , eth2 and eth0 and eth2 is connected to two diffrent ISP and eth1 is connected to local lan. I am tring to route all the mail traffic to eth1 and I have followed the lartc doc. But it seems the solution does not work for me . is there a way I could connect two diffrent ISP in one linux box with diffrent gateway address and dns. Thanks Imthiyaz

hi i have a problem with my icmp, i have a router that performs nat. i cannot ping to internet hosts from more than one stations situated behind NAT at once. if i want to ping from another station i have to stop the ping that was initiated from the first host, and after a few seconds i can ping from another station.i've checked firewll and i have no ipfw rules that could stop icmp traffic.

First, there are two fundamentally diffrent types of doing multihead: The "one big screen" solution, usually achieved with xinerama , twinview or similar. This provides us with one Screen, and therefor one CompScreen structure. The output extens are retrieved from xinerama, or possibly randr (in the future?), I would assume. Then there is the less used "multiscreen" way, which

Hello! I'd like to setup quota for for virtualusers, i'm using both maildir++ and mdbox as storage, and i'm using postgresql to keep users. I'm keeping all users data in one table: [...] login text NOT NULL, domain text, password text, quota_mb integer NOT NULL DEFAULT 0 [... other columns ...] i'd like to keep present quota in such two columns: quota_dict_bytes integer NOT