similar to: question about routing, firewall, natd and bridge

Can anyone help with this. Bridge is enabled, even in sysctl. Firewall is enabled and configured. But my reality is done this way.. Cisco (NATing 192.168.1.0/24) ---- Freebsd Bridge (Public IP) ------ stations (Public IP) (NATing 172.16.0.0/24 192.168.1.xx or something similar) 172.16.0.xx and on one public IP one

Hi all, 1.0-test76 is crashing about every two weeks. Got this in the log file: pid 76217 (dovecot-auth), uid 0: exited on signal 6 (core dumped) pid 61724 (dovecot-auth), uid 0: exited on signal 6 (core dumped) pid 52961 (dovecot-auth), uid 0: exited on signal 6 (core dumped) pid 81257 (dovecot-auth), uid 0: exited on signal 6 (core dumped) Also a bunch of these around the same time...

Hi, in the kernel I have these lines: [...] device miibus # MII bus support device rl device ed options IPFIREWALL #firewall options IPFIREWALL_VERBOSE #enable logging to syslogd(8) options IPFIREWALL_VERBOSE_LIMIT=0 #limit verbosity options IPDIVERT #divert sockets options DUMMYNET

I've just had a 4.9p1 system partially deadlock for about 30 minutes and then spontaneously(?) recover. The "ps" results point at vinum. I've never seen this before and don't recall anything like this being mentioned here before. At the time, I had two find's running in a large NFS mounted filesystem and was doing a "cvs -d /usr/ncvs -R checkout -P ports" from

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:14.arp Security Advisory The FreeBSD Project Topic: denial of service due to ARP resource starvation Category: core Module: sys Announced:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:14.arp Security Advisory The FreeBSD Project Topic: denial of service due to ARP resource starvation Category: core Module: sys Announced:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:14.arp Security Advisory The FreeBSD Project Topic: denial of service due to ARP resource starvation Category: core Module: sys Announced:

I have setup natd, enabled logging with -l and it is working perfectly. However is there a more detailed log to see the translation tables. I need to log the ipaddress internal 172.*.*.* to the outside with what port is being used. natd just seems to log the statistics such as icmp=5 and so on. If natd does not have this function what does?

Hello I am trying to redirect all http traffic of unauthorized wifi users on a wireless hotspot to a login page. The problem I have is that I can not disable the regular address translation (I want the source address to stay the same). 10.0.0.7 is the wifi client 195.250.155.29 is the web wifi user tries to access from his browser 195.113.17.94 is my login page 10.0.0.1 is the wifi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:14.arp Security Advisory The FreeBSD Project Topic: denial of service due to ARP resource starvation Category: core Module: sys Announced:

[ -netters, please Cc me or security@ with replies. ] I'm running into trouble integrating dynamic racoon-based IPSec into a network with ipfw and natd. I need to be able to allow VPN access from any address from authenticated clients. I've got the dynamic VPN working, with racoon negotiating SAs and installing SPs, but the problem is that I can't tell whether an incoming packet on

I've been using ipfw for a while to create a router with NAT and packet filtering, but have never combined it with stateful filtering, instead using things like "established" to accept incoming TCP packets which are part of a conversation initiated from the "inside". I'd like to move to using keep-state/check-state to get tighter filtering and also to allow outgoing

Does anybody know more about groups? I am considering switching from NT to Samba domain and have made some test. Unfortunately I need to make two additional groups, except Domain Admin (one of them is Domain Users). Is it possible to make that with the stable version of Samba? And another, but not so important (for now) question. Currently I have a Samba server, providing files and printers

Hello, Before a couple of days ago I started /usr/local/sbin/cupsd manualy from console. When I press CTRL+C to interrupt a program, the system change runlevel and going to reboot. This was on FreeBSD V5.3, today I installed fresh new 5.4 but the problem is the same. cups-base-1.1.23.0_3 -- Todor Dragnev <todor.dragnev@gmail.com>

Hi All - I looked for mention of this in the archives but wasn''t able to find anything. This isn''t even an advanced routing question, it should be a dirt-simple, basic, no-brainer, routine routing job. But I''m not getting it! I have a Linux iptables based firewall system that is making me crazy. The gist of the problem is, even when I turn off all firewall rules

https://bugs.freedesktop.org/show_bug.cgi?id=72458 Priority: medium Bug ID: 72458 Assignee: nouveau at lists.freedesktop.org Summary: Machine freezes when launching Firefox QA Contact: xorg-team at lists.x.org Severity: normal Classification: Unclassified OS: Linux (All) Reporter: konglomeratum at mpp.hu

Hello everybody, I am quite new to asterisk. I have tried to connect two asterisk boxes with the iax2 protocol, but although the web is full of documetation for that, I was quite unsuccessful. The last try was Example 2 from http://www.voip-info.org/wiki/index.php?page=Asterisk+-+dual+servers I am running two machines, "gonzo", my home system and "laptop", a machine wit a

Hello, I have some code that encodes PCM data into a vorbis stream, using the workflow shown in http://www.xiph.org/vorbis/doc/libvorbis/overview.html. By analyzing that process with valgrind/cachegrind I found out that 95% of the time used for encoding is spent in the function "vorbis_analysis(&vb, 0)". My question now is: would it be technically possible to parallelize this? I

Hi all... I''ve just got my hands on a Solaris 10 box for the first time. I''ve heard wonderous things about dtrace, so the first command I type is dtrace -l which disappointingly does nothing at all. It just hangs, and neither Ctrl-D, Ctrl-C or kill -9 from another shell will do anything to kill it. The box is: SunOS t2000 5.10 Generic_118822-25 sun4v sparc SUNW,Sun-Fire-T200

I've been using Samba with OpenLDAP with great success on normal servers. Recently however, it appeared to us that for remote locations it is more economically viable to replace Samba servers with Samba running on little routers like ASUS WL-500g with openwrt firmware/software. It has a broadcom/mipsel CPU, and thanks to openwrt (http://openwrt.org), it is possible to run lots of software