trasport-mode ESP packet and pf `rdr-to'

2012-03-13 Thread YASUOKA Masahiko
Hi, In ip_input(), there is a filter to disable all packets to 127.0.0.0/27. That filter drops a packet that was a transport-mode ESP packet and that has been redirected to 127.0.0.1 with pf `rdr-to' rule. Below diff will fix the filter not to drop such packets. ok? or comment? The problem was

Re: one usb_mem pool per host controller

2012-03-13 Thread Ted Unangst
On Wed, Mar 14, 2012, Tobias Ulmer wrote: > I have a couple of machines with an EHCI controller that refuses to work > with memory above 2G, causing all kinds of trouble. This diff enables > setting a bus_dma boundary and allows me to make off-site backups again. > > Due to the bus_dma pool being

one usb_mem pool per host controller

2012-03-13 Thread Tobias Ulmer
I have a couple of machines with an EHCI controller that refuses to work with memory above 2G, causing all kinds of trouble. This diff enables setting a bus_dma boundary and allows me to make off-site backups again. Due to the bus_dma pool being shared across all HCs, it was necessary to pull the

Re: CVS: cvs.openbsd.org: src

2012-03-13 Thread Gilles Chehade
On Tue, Mar 13, 2012 at 05:07:58PM -0600, Gilles Chehade wrote: > CVSROOT: /cvs > Module name: src > Changes by: gil...@cvs.openbsd.org 2012/03/13 17:07:58 > > Modified files: > usr.sbin/smtpd : scheduler_ramqueue.c > > Log message: > When moving back envelope from offload tree to

Re: Sun Fire v215 panic at boot

2012-03-13 Thread Kenneth R Westerback
On Tue, Mar 13, 2012 at 08:15:33PM +0100, Mark Kettenis wrote: > > Date: Mon, 12 Mar 2012 22:39:31 +0100 (CET) > > From: Mark Kettenis > > > > > Date: Sat, 25 Feb 2012 09:55:57 +0100 > > > From: Paul de Weerd > > > > > > I recently got a v215 from a friend and have installed OpenBSD on it. > >

Re: Sun Fire v215 panic at boot

2012-03-13 Thread Mark Kettenis
> Date: Mon, 12 Mar 2012 22:39:31 +0100 (CET) > From: Mark Kettenis > > > Date: Sat, 25 Feb 2012 09:55:57 +0100 > > From: Paul de Weerd > > > > I recently got a v215 from a friend and have installed OpenBSD on it. > > Occassionally, it will panic during boot. This happened during > > install a

Re: gif: allow layer2 tunnels over ipv6

2012-03-13 Thread Mike Belopuhov
On Tue, Mar 13, 2012 at 16:51 +, Stuart Henderson wrote: > On 2012/03/13 16:41, Mike Belopuhov wrote: > > this allows us to bridge two ipv4 networks over an ipv6 link with gif. > > any objections? oks? the change was well tested by phessler. > > > > Not that it matters much, but is there an

Re: gif: allow layer2 tunnels over ipv6

2012-03-13 Thread Stuart Henderson
On 2012/03/13 16:41, Mike Belopuhov wrote: > this allows us to bridge two ipv4 networks over an ipv6 link with gif. > any objections? oks? the change was well tested by phessler. > > diff --git netinet6/in6_proto.c netinet6/in6_proto.c > index 7575055..8cf3de4 100644 > --- netinet6/in6_proto.c >

Re: gif: allow layer2 tunnels over ipv6

2012-03-13 Thread Peter Hessler
obviously, OK from me. On 2012 Mar 13 (Tue) at 16:41:52 +0100 (+0100), Mike Belopuhov wrote: :this allows us to bridge two ipv4 networks over an ipv6 link with gif. :any objections? oks? the change was well tested by phessler. : :diff --git netinet6/in6_proto.c netinet6/in6_proto.c :index 757505

gif: allow layer2 tunnels over ipv6

2012-03-13 Thread Mike Belopuhov
this allows us to bridge two ipv4 networks over an ipv6 link with gif. any objections? oks? the change was well tested by phessler. diff --git netinet6/in6_proto.c netinet6/in6_proto.c index 7575055..8cf3de4 100644 --- netinet6/in6_proto.c +++ netinet6/in6_proto.c @@ -105,6 +105,7 @@ #include

Re: ubsec: generate proper mbuf chain for destination

2012-03-13 Thread Mike Belopuhov
On Tue, Mar 13, 2012 at 15:11 +0200, Joosep wrote: > On Tue, Mar 13, 2012 at 2:20 PM, Mike Belopuhov wrote: > > > heh. does this diff make a difference? > > > Hi! > > No difference. Previously given packet sizes were with SHA1+3DES not with > AES as said earlier. > > Thanks, > Joosep then i h

Re: ubsec: generate proper mbuf chain for destination

2012-03-13 Thread Mike Belopuhov
On Tue, Mar 13, 2012 at 14:10 +0200, Joosep wrote: > Hi > > I have been testing with this diff for 2 hours now. I haven't been able to > reproduce the error with same size packets as before, but something is > still wrong. > I still see packet verification errors in netstat. I did some testing and

Re: ubsec: generate proper mbuf chain for destination

2012-03-13 Thread Joosep
Hi I have been testing with this diff for 2 hours now. I haven't been able to reproduce the error with same size packets as before, but something is still wrong. I still see packet verification errors in netstat. I did some testing and found out that there are still packets that fail. The sizes ar