From owner-freebsd-hackers Thu Nov 16 13:41:34 2000 Delivered-To: freebsd-hackers@freebsd.org Received: from Awfulhak.org (tun.AwfulHak.org [194.242.139.173]) by hub.freebsd.org (Postfix) with ESMTP id 402A537B479 for ; Thu, 16 Nov 2000 13:41:28 -0800 (PST) Received: from hak.lan.Awfulhak.org (root@hak.lan.awfulhak.org [172.16.0.12]) by Awfulhak.org (8.11.1/8.11.1) with ESMTP id eAGLbMF31998; Thu, 16 Nov 2000 21:37:22 GMT (envelope-from brian@hak.lan.Awfulhak.org) Received: from hak.lan.Awfulhak.org (brian@localhost [127.0.0.1]) by hak.lan.Awfulhak.org (8.11.1/8.11.1) with ESMTP id eAGLbYb42529; Thu, 16 Nov 2000 21:37:34 GMT (envelope-from brian@hak.lan.Awfulhak.org) Message-Id: <200011162137.eAGLbYb42529@hak.lan.Awfulhak.org> X-Mailer: exmh version 2.2 06/23/2000 with nmh-1.0.4 To: "Renaud Waldura" Cc: "Brian Somers" , hackers@FreeBSD.ORG, brian@Awfulhak.org Subject: Re: PPPoE w/ nat auto fragmentation hack? (use tcpmssd port) In-Reply-To: Message from "Renaud Waldura" of "Wed, 15 Nov 2000 19:26:25 PST." <002a01c04f7d$00699680$0402010a@biohz.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Thu, 16 Nov 2000 21:37:33 +0000 From: Brian Somers Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > > ppp will run programs as the user id that invoked ppp rather than > > using the effective user id (ie, it runs things as *you*, not *root*). > > Mmm-mmh. In my case, since ppp is started at boot time, the only user that > ever invokes it is root, hence the tcpmssd thingy is run as root. As > confirmed by the multiple "ps" I ran: euid == ruid == svguid == 0. > > > > A good ``first step'' is to run > > ! sh -c "/usr/local/bin/tcpmssd -p 12345 -i INTERFACE >/tmp/log 2>&1" > > so that you can get to see any error messages - ppp redirects I/O to > > Yup, tried that, here's what I get: > > ******************** start *************** > Wed Nov 15 13:30:12 PST 2000 > id says: uid=0(root) gid=0(wheel) groups=0(wheel) > HOME=/ > PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin > 01001 divert 1234 tcp from any to any out xmit tun0 setup > > The rule gets inserted, tcpmssd runs as root, and I feel like a dummy. Any > other ideas? > > Thanks for the help Brian, I'm not sure what the problem could be - can you confirm that everything's seen if you divert everything ? > --Renaud > > > > ----- Original Message ----- > From: Brian Somers > To: Renaud Waldura > Cc: Brian Somers ; ; > > Sent: Wednesday, November 15, 2000 4:32 PM > Subject: Re: PPPoE w/ nat auto fragmentation hack? (use tcpmssd port) > > > > > Maybe I'm just being boneheaded, but... > > > > > > > ! sudo ipfw add 40000 divert 12345 all from any to any via INTERFACE > > > > ! sudo /usr/local/bin/tcpmssd -p 12345 -i INTERFACE > > > > > > I was under the (tested & confirmed) impression that programs executed > by > > > ppp are run under uid 0. Eg. I don't use "sudo" but the ipfw rule is > added > > > anyway, and tcpmssd is run as root. > > > > > > But maybe a sudo environment brings something else? That could explain a > lot > > > right there. > > > > > > --Renaud > > > > ppp will run programs as the user id that invoked ppp rather than > > using the effective user id (ie, it runs things as *you*, not *root*). > > > > AFAIK, sudo will not muck about with your environment.... > > > > A good ``first step'' is to run > > > > ! sh -c "/usr/local/bin/tcpmssd -p 12345 -i INTERFACE >/tmp/log 2>&1" > > > > so that you can get to see any error messages - ppp redirects I/O to > > /dev/null by default. -- Brian Don't _EVER_ lose your sense of humour ! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message