From owner-freebsd-isp  Sun Dec 16  0:20:31 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from leaf.lumiere.net (leaf.lumiere.net [208.44.192.100])
	by hub.freebsd.org (Postfix) with ESMTP id A235737B405
	for <freebsd-isp@freebsd.org>; Sun, 16 Dec 2001 00:20:29 -0800 (PST)
Received: by leaf.lumiere.net (Postfix, from userid 1082)
	id D875BCD13; Sun, 16 Dec 2001 00:20:28 -0800 (PST)
Date: Sun, 16 Dec 2001 00:20:28 -0800
From: Derrick John Klise <derrick@lumiere.net>
To: Jeff Lasman <jblists@nobaloney.net>
Cc: freebsd-isp@freebsd.org
Subject: Re: Using DNAT and DNS round-robin
Message-ID: <20011216002028.A1264@leaf.lumiere.net>
References: <PGECILGGNJGDPJKLFEMIMEJGCIAA.dpuryear@usa.net> <196254713265.20011209213749@hostonfly.com> <3C1C270F.164076BA@nobaloney.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <3C1C270F.164076BA@nobaloney.net>; from jblists@nobaloney.net on Sat, Dec 15, 2001 at 08:46:07PM -0800
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Sat, Dec 15, 2001 at 08:46:07PM -0800, Jeff Lasman wrote:
> Are you sure?  I've been looking for a definitive answer in my DNS &
> Bind book for about an hour now, and I'm still not certain <frown>.  Any
> page references welcome <smile>.

IIRC, something like:

  monkey.example.net    IN A   192.168.0.1
                        IN A   192.168.0.2
                        IN A   192.168.0.3

> And how about failure rollover?  We'd like to offer clients
> geographically dispersed hosting; there's a call for it since September
> 11th showed everyone of the hazards of hosting at only one location. 
> But I don't think we can rely on short TTL; too many large ISPs seem to
> ignore it <frown>.

> Is there a way to handle high-availability strictly in DNS?

Possibly; I'm unaware of one if there is, though.

If you're not too worried about the TTL problem, you could set up a monitoring
program to remove an entry from the rotation if it's corresponding address
becomes unavailable, then add it when it comes back up.

-- 
Derrick John Klise			<derrick@lumiere.net>
"I went into a general store, and they wouldn't sell me anything
specific".  -- Steven Wright

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Dec 16  5:49:28 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from mailout01.sul.t-online.com (mailout01.sul.t-online.com [194.25.134.80])
	by hub.freebsd.org (Postfix) with ESMTP id 0202937B41A
	for <freebsd-isp@freebsd.org>; Sun, 16 Dec 2001 05:49:12 -0800 (PST)
Received: from fwd07.sul.t-online.de 
	by mailout01.sul.t-online.de with smtp 
	id 16FbaT-0007v9-09; Sun, 16 Dec 2001 14:44:17 +0100
Received: from carstenshome (520075190812-0001@[217.230.104.105]) by fwd07.sul.t-online.com
	with esmtp id 16FbaK-0pby8OC; Sun, 16 Dec 2001 14:44:08 +0100
From: stefan.sonnenberg-carstens@t-online.de (Stefan Sonnenberg-Carstens)
To: <freebsd-isp@freebsd.org>
Subject:  Strange load jumps
Date: Sun, 16 Dec 2001 14:44:30 +0100
Message-ID: <000001c18637$ca201cf0$0100a8c0@carstenshome>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2627
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Sender: 520075190812-0001@t-dialin.net
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

 Hi there.
 I've set up freebsd 4.4-RELEASE mashines running on IBM x330 series 
 hardware. Both with SMP support compiled kernels, apache 1.3.22 and 
 php 4.0.6 with sybase support to connect to an ms sql server.
 Both have 2 NIC online, one to get over a bigip loadbalancer to the
 internet, and one internal for database link.
 Both are running fast and stable, but sometimes the load goes up to
20,30 or
 even >140 for a few seconds and then comes relativly fast back down to
an
 avg of ~0.5.
 So the question is, why ?
 Both mashines have 1GB of RAM, a 1GB swap partition, two 866PIII procs
and
 an adaptec U160SCSI controller, which accesses a 9GB U160 disk.
 
 I also attach the kernel config file.
 Thanks in advance !
> 
> KERNEL CONFIG
> 
> 
> 
> machine  i386
> cpu  I686_CPU
> ident  KERNEL
> maxusers 512
> 
> options  NMBCLUSTERS=16384
> options  MATH_EMULATE  #Support for x87 emulation
> options  INET   #InterNETworking
> options  INET6   #IPv6 communications protocols
> options  FFS   #Berkeley Fast Filesystem
> options  FFS_ROOT  #FFS usable as root device [keep this!] options  
> SOFTUPDATES  #Enable FFS soft updates support
> options  MFS   #Memory Filesystem
> options  MD_ROOT   #MD is a potential root device
> options  NFS   #Network Filesystem
> options  NFS_ROOT  #NFS usable as root device, NFS required
> options  MSDOSFS   #MSDOS Filesystem
> options  CD9660   #ISO 9660 Filesystem
> options  CD9660_ROOT  #CD-ROM usable as root, CD9660 required
> options  PROCFS   #Process filesystem
> options  COMPAT_43  #Compatible with BSD 4.3 [KEEP THIS!] options  
> SCSI_DELAY=500  #Delay (in ms) before probing SCSI options  UCONSOLE  
> #Allow users to grab the console options  USERCONFIG  #boot -c editor
> options  VISUAL_USERCONFIG #visual boot -c editor
> options  KTRACE   #ktrace(1) support
> options  SYSVSHM   #SYSV-style shared memory
> options  SYSVMSG   #SYSV-style message queues
> options  SYSVSEM   #SYSV-style semaphores
> options  P1003_1B  #Posix P1003_1B real-time extensions
> options  _KPOSIX_PRIORITY_SCHEDULING
> options  ICMP_BANDLIM  #Rate limit bad replies
> options  KBD_INSTALL_CDEV # install a CDEV entry in /dev
> 
> # To make an SMP kernel, the next two are needed
> options  SMP   # Symmetric MultiProcessor Kernel
> options  APIC_IO   # Symmetric (APIC) I/O
> 
> device  isa
> device  eisa
> device  pci
> 
> # Floppy drives
> device  fdc0 at isa? port IO_FD1 irq 6 drq 2
> device  fd0 at fdc0 drive 0
> device  fd1 at fdc0 drive 1
> #
> # If you have a Toshiba Libretto with its Y-E Data PCMCIA floppy, # 
> don't use the above line for fdc0 but the following one: #device  fdc0
> 
> # ATA and ATAPI devices
> device  ata0 at isa? port IO_WD1 irq 14
> device  ata1 at isa? port IO_WD2 irq 15
> device  ata
> device  atadisk   # ATA disk drives
> device  atapicd   # ATAPI CDROM drives
> device  atapifd   # ATAPI floppy drives
> device  atapist   # ATAPI tape drives
> options  ATA_STATIC_ID  #Static device numbering
> 
> # SCSI Controllers
> device  ahb  # EISA AHA1742 family
> device  ahc  # AHA2940 and onboard AIC7xxx devices
> device  amd  # AMD 53C974 (Tekram DC-390(T))
> device  isp  # Qlogic family
> device  ncr  # NCR/Symbios Logic
> device  sym  # NCR/Symbios Logic (newer chipsets)
> options  SYM_SETUP_LP_PROBE_MAP=0x40
>     # Allow ncr to attach legacy NCR devices when
>     # both sym and ncr are configured
> 
> device  adv0 at isa?
> device  adw
> device  bt0 at isa?
> device  aha0 at isa?
> device  aic0 at isa?
> 
> device  ncv  # NCR 53C500
> device  nsp  # Workbit Ninja SCSI-3
> device  stg  # TMC 18C30/18C50
> 
> # SCSI peripherals
> device  scbus  # SCSI bus (required)
> device  da  # Direct Access (disks)
> device  sa  # Sequential Access (tape etc)
> device  cd  # CD
> device  pass  # Passthrough device (direct SCSI access)
> 
> # RAID controllers interfaced to the SCSI subsystem
> device  asr  # DPT SmartRAID V, VI and Adaptec SCSI RAID device  dpt  
> # DPT Smartcache - See LINT for options! device  mly  # Mylex 
> AcceleRAID/eXtremeRAID
> 
> # RAID controllers
> device  aac  # Adaptec FSA RAID, Dell PERC2/PERC3
> device  ida  # Compaq Smart RAID
> device  amr  # AMI MegaRAID
> device  mlx  # Mylex DAC960 family
> device  twe  # 3ware Escalade
> 
> # atkbdc0 controls both the keyboard and the PS/2 mouse device  
> atkbdc0 at isa? port IO_KBD device  atkbd0 at atkbdc? irq 1 flags 0x1
> device  psm0 at atkbdc? irq 12
> 
> device  vga0 at isa?
> 
> # splash screen/screen saver
> pseudo-device splash
> 
> # syscons is the default console driver, resembling an SCO console 
> device  sc0 at isa? flags 0x100
> 
> # Enable this and PCVT_FREEBSD for pcvt vt220 compatible console 
> driver #device  vt0 at isa?
> #options  XSERVER   # support for X server on a vt console
> #options  FAT_CURSOR  # start with block cursor
> # If you have a ThinkPAD, uncomment this along with the rest of the 
> PCVT lines #options  PCVT_SCANSET=2  # IBM keyboards are non-std
> 
> # Floating point support - do not disable.
> device  npx0 at nexus? port IO_NPX irq 13
> 
> # Power management support (see LINT for more options)
> device  apm0    at nexus? disable flags 0x20 # Advanced Power
Management
> 
> # PCCARD (PCMCIA) support
> device  card
> device  pcic0 at isa? irq 0 port 0x3e0 iomem 0xd0000
> device  pcic1 at isa? irq 0 port 0x3e2 iomem 0xd4000 disable
> 
> # Serial (COM) ports
> device  sio0 at isa? port IO_COM1 flags 0x10 irq 4
> device  sio1 at isa? port IO_COM2 irq 3
> device  sio2 at isa? disable port IO_COM3 irq 5
> device  sio3 at isa? disable port IO_COM4 irq 9
> 
> # Parallel port
> device  ppc0 at isa? irq 7
> device  ppbus  # Parallel port bus (required)
> device  lpt  # Printer
> device  plip  # TCP/IP over parallel
> device  ppi  # Parallel port interface device
> #device  vpo  # Requires scbus and da
> 
> 
> # PCI Ethernet NICs.
> device  de  # DEC/Intel DC21x4x (``Tulip'')
> device  txp  # 3Com 3cR990 (``Typhoon'')
> device  vx  # 3Com 3c590, 3c595 (``Vortex'')
> 
> # PCI Ethernet NICs that use the common MII bus controller code. # 
> NOTE: Be sure to keep the 'device miibus' line in order to use these 
> NICs! device  miibus  # MII bus support device  dc  # DEC/Intel 21143 
> and various workalikes device  fxp  # Intel EtherExpress PRO/100B 
> (82557, 82558) device  pcn  # AMD Am79C97x PCI 10/100 NICs
> device  rl  # RealTek 8129/8139
> device  sf  # Adaptec AIC-6915 (``Starfire'')
> device  sis  # Silicon Integrated Systems SiS 900/SiS 7016
> device  ste  # Sundance ST201 (D-Link DFE-550TX)
> device  tl  # Texas Instruments ThunderLAN
> device  tx  # SMC EtherPower II (83c170 ``EPIC'')
> device  vr  # VIA Rhine, Rhine II
> device  wb  # Winbond W89C840F
> device  wx  # Intel Gigabit Ethernet Card (``Wiseman'')
> device  xl  # 3Com 3c90x (``Boomerang'', ``Cyclone'')
> 
> # ISA Ethernet NICs.
> # 'device ed' requires 'device miibus'
> device  ed0 at isa? port 0x280 irq 10 iomem 0xd8000
> device  ex
> device  ep
> device  fe0 at isa? port 0x300
> # Xircom Ethernet
> device  xe
> # PRISM I IEEE 802.11b wireless NIC.
> device  awi
> # WaveLAN/IEEE 802.11 wireless NICs. Note: the WaveLAN/IEEE really # 
> exists only as a PCMCIA device, so there is no ISA attachment needed #

> and resources will always be dynamically assigned by the pccard code. 
> device  wi # Aironet 4500/4800 802.11 wireless NICs. Note: the 
> declaration below will # work for PCMCIA and PCI cards, as well as ISA

> cards set to ISA PnP # mode (the factory default). If you set the 
> switches on your ISA # card for a manually chosen I/O address and IRQ,

> you must specify # those parameters here.
> device  an
> # The probe order of these is presently determined by
i386/isa/isa_compat.c.
> device  ie0 at isa? port 0x300 irq 10 iomem 0xd0000
> #device  le0 at isa? port 0x300 irq 5 iomem 0xd0000
> device  lnc0 at isa? port 0x280 irq 10 drq 0
> device  cs0 at isa? port 0x300
> device  sn0 at isa? port 0x300 irq 10
> 
> # Pseudo devices - the number indicates how many units to allocate. 
> pseudo-device loop  # Network loopback pseudo-device ether  # Ethernet

> support pseudo-device sl 1 # Kernel SLIP
> pseudo-device ppp 1 # Kernel PPP
> pseudo-device tun  # Packet tunnel.
> pseudo-device pty  # Pseudo-ttys (telnet etc)
> pseudo-device md  # Memory "disks"
> pseudo-device gif  # IPv6 and IPv4 tunneling
> pseudo-device faith 1 # IPv6-to-IPv4 relaying (translation)
> 
> # The `bpf' pseudo-device enables the Berkeley Packet Filter. # Be 
> aware of the administrative consequences of enabling this! 
> pseudo-device bpf  #Berkeley packet filter
> 
> # USB support
> device  uhci  # UHCI PCI->USB interface
> device  ohci  # OHCI PCI->USB interface
> device  usb  # USB Bus (required)
> device  ugen  # Generic
> device  uhid  # "Human Interface Devices"
> device  ukbd  # Keyboard
> device  ulpt  # Printer
> device  umass  # Disks/Mass storage - Requires scbus and da device  
> ums  # Mouse device  uscanner # Scanners
> # USB Ethernet, requires mii
> device  aue  # ADMtek USB ethernet
> device  cue  # CATC USB ethernet
> device  kue  # Kawasaki LSI USB ethernet
> 
> 
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Dec 16  7:25:19 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from niwun.pair.com (niwun.pair.com [209.68.2.70])
	by hub.freebsd.org (Postfix) with SMTP id 42F7D37B41B
	for <isp@freebsd.org>; Sun, 16 Dec 2001 07:25:13 -0800 (PST)
Received: (qmail 97152 invoked by uid 3193); 16 Dec 2001 15:25:12 -0000
Received: from localhost (sendmail-bs@127.0.0.1)
  by localhost with SMTP; 16 Dec 2001 15:25:12 -0000
Date: Sun, 16 Dec 2001 10:25:12 -0500 (EST)
From: Mike Silbersack <silby@silby.com>
X-Sender:  <silby@niwun.pair.com>
To: <HP889@aol.com>
Cc: <hackers@freebsd.org>, <isp@freebsd.org>
Subject: RE: 3Com driver problems
In-Reply-To: <176.cf4901.294bd7bc@aol.com>
Message-ID: <Pine.BSF.4.30.0112160926580.75640-100000@niwun.pair.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


On Fri, 14 Dec 2001 HP889@aol.com wrote:

> We dont sell ethernet drivers, and Im not trying to "hide". Why does linux
> have specific code to disable the stats under load if Im making this up? Why
> can you lock up a FreeBSD 4.4 system with a 3com card at 20Kpps due to
> counter overflow interrupts in about 3 seconds?

Well, I'm unable to lock up my -current box with a 3c905-tx (non-B or C).
However, I can see the delay (apparently) caused by the stat collection
routine, which was previously mentioned in the message

http://docs.freebsd.org/cgi/getmsg.cgi?fetch=12982+0+archive/2001/freebsd-net/20010114.freebsd-net

Interestingly enough, the delay seems to grow as I run the test longer and
longer.  (My test is ping -s 1400 -i .001 boxwithxlnic.)  The delay seems
to be able to grow to as much as 12 ms, though it's typically less, around
5 ms or so.  If I switch back to the dc interface, I see no delayed
packets.

I see the hack you refer to in the 3c59x.c driver; I also notice that
3com's official driver (3c90x.c) doesn't contain such a workaround.  They
must be doing something subtly different which avoids the problem.

I have a few ideas, I'll try them out next week and see what I can come up
with.

Mike "Silby" Silbersack


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Dec 16  8: 6:15 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from mailout04.sul.t-online.com (mailout04.sul.t-online.com [194.25.134.18])
	by hub.freebsd.org (Postfix) with ESMTP id 60E4C37B41C
	for <freebsd-isp@freebsd.org>; Sun, 16 Dec 2001 08:06:13 -0800 (PST)
Received: from fwd07.sul.t-online.de 
	by mailout04.sul.t-online.de with smtp 
	id 16Fdnk-0004Ri-02; Sun, 16 Dec 2001 17:06:08 +0100
Received: from carstenshome (520075190812-0001@[217.230.104.105]) by fwd07.sul.t-online.com
	with smtp id 16FdnP-0ENlbcC; Sun, 16 Dec 2001 17:05:47 +0100
Message-ID: <000901c1864b$943190b0$0100a8c0@carstenshome>
From: stefan.sonnenberg-carstens@t-online.de (Stefan Sonnenberg-Carstens)
To: <absinthe@pobox.com>, <freebsd-isp@freebsd.org>
References: <000001c18637$ca201cf0$0100a8c0@carstenshome> <20011216101939.C1680@absinthe>
Subject: Re: Strange load jumps
Date: Sun, 16 Dec 2001 17:06:10 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Sender: 520075190812-0001@t-dialin.net
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

I don't think that that's the point,
on both mashines the swap space is used by ~ 10 MByte.

----- Original Message -----
From: "Dylan Carlson" <absinthe@pobox.com>
To: "Stefan Sonnenberg-Carstens" <stefan.sonnenberg-carstens@t-online.de>
Sent: Sunday, December 16, 2001 4:19 PM
Subject: Re: Strange load jumps


> Stefan Sonnenberg-Carstens <stefan.sonnenberg-carstens@t-online.de> wrote:
> >  Hi there.
> >  Both mashines have 1GB of RAM, a 1GB swap partition, two 866PIII procs
> > and
> >  an adaptec U160SCSI controller, which accesses a 9GB U160 disk.
>
> The VM algorithms are tuned to have swap slices that are 2 times
> physical RAM.   I don't believe this is your problem but you should
> probably read the tuning(7) manpage anyhow.
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Dec 16  9:51:29 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from imo-r09.mx.aol.com (imo-r09.mx.aol.com [152.163.225.105])
	by hub.freebsd.org (Postfix) with ESMTP
	id 6FFFE37B41D; Sun, 16 Dec 2001 09:51:24 -0800 (PST)
Received: from TD790@aol.com
	by imo-r09.mx.aol.com (mail_out_v31_r1.9.) id n.14a.5dcd50d (4330);
	Sun, 16 Dec 2001 12:51:12 -0500 (EST)
From: TD790@aol.com
Message-ID: <14a.5dcd50d.294e390f@aol.com>
Date: Sun, 16 Dec 2001 12:51:11 EST
Subject: 3Com driver problems
To: hackers@freebsd.org
Cc: isp@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Mailer: AOL 5.0 for Windows sub 138
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

In a message dated 12/16/01 10:25:31 AM Eastern Standard Time, 
silby@silby.com writes:

> Well, I'm unable to lock up my -current box with a 3c905-tx (non-B or C).
>  However, I can see the delay (apparently) caused by the stat collection
>  routine, which was previously mentioned in the message
>  
>  http://docs.freebsd.org/cgi/getmsg.cgi?fetch=12982+0+archive/2001/freebsd-
> net/20010114.freebsd-net
>  
>  Interestingly enough, the delay seems to grow as I run the test longer and
>  longer.  (My test is ping -s 1400 -i .001 boxwithxlnic.)  The delay seems
>  to be able to grow to as much as 12 ms, though it's typically less, around
>  5 ms or so.  If I switch back to the dc interface, I see no delayed
>  packets.
>  

ping is not a very good test...one of the reasons that most people cant find 
problems generally. plus you want to use smaller packets to get the pps up. 
The ave size packet is under 400 bytes on the net and it better simulates 
real life.  Once you saturate the wire the lockup occurs  rather 
quickly....you have to get to the point where the overflows are happening 
faster than the machine can process the interupts. 

intels "official" driver for linux locks up quite easily...dont assume that 
the manufacturer puts out bulletproof drivers, because they dont test them 
that rigorously. 

dennis

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Dec 16 13:15: 5 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from smtp.popsite.net (smtp.popsite.net [216.126.128.17])
	by hub.freebsd.org (Postfix) with ESMTP id AA00437B419
	for <freebsd-isp@FreeBSD.ORG>; Sun, 16 Dec 2001 13:15:03 -0800 (PST)
Received: from nobaloney.net (c5T2-131.015.popsite.net [216.126.188.131])
	by smtp.popsite.net (Postfix) with ESMTP id 4467E5086C
	for <freebsd-isp@FreeBSD.ORG>; Sun, 16 Dec 2001 15:14:52 -0600 (CST)
Message-ID: <3C1D0EF1.783B48AD@nobaloney.net>
Date: Sun, 16 Dec 2001 13:15:29 -0800
From: Jeff Lasman <jblists@nobaloney.net>
Organization: nobaloney.net
X-Mailer: Mozilla 4.72 [en] (Win98; U)
X-Accept-Language: en,en-US
MIME-Version: 1.0
To: freebsd-isp@FreeBSD.ORG
Subject: Re: Using DNAT and DNS round-robin
References: <PGECILGGNJGDPJKLFEMIMEJGCIAA.dpuryear@usa.net> <196254713265.20011209213749@hostonfly.com> <3C1C270F.164076BA@nobaloney.net> <20011216002028.A1264@leaf.lumiere.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Derrick John Klise wrote:

> IIRC, something like:
> 
>   monkey.example.net    IN A   192.168.0.1
>                         IN A   192.168.0.2
>                         IN A   192.168.0.3

Thanks.  Finally found it on page 259 of DNS and Bind.

> > Is there a way to handle high-availability strictly in DNS?
> 
> Possibly; I'm unaware of one if there is, though.
> 
> If you're not too worried about the TTL problem, you could set up a monitoring
> program to remove an entry from the rotation if it's corresponding address
> becomes unavailable, then add it when it comes back up.

That's exactly what we're planning on.  Along with very low TTL.  Won't
help with AOL, Earthlink, etc., though <frown>.

Jeff
-- 
Jeff Lasman <jblists@nobaloney.net>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net
P. O. Box 52672, Riverside, CA  92517
voice: (909) 778-9980  *  fax: (702) 548-9484

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Dec 16 14:20:16 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from postoffice.aims.com.au (eth0.lnk.aims.com.au [203.31.73.253])
	by hub.freebsd.org (Postfix) with ESMTP id 4481637B41C
	for <freebsd-isp@freebsd.org>; Sun, 16 Dec 2001 14:20:09 -0800 (PST)
Received: from postoffice.aims.com.au (nts-ts1.aims.private [192.168.10.2])
	by postoffice.aims.com.au  with ESMTP id fBGMK7X13292
	for <freebsd-isp@freebsd.org>; Mon, 17 Dec 2001 09:20:07 +1100 (EST)
	(envelope-from chris@aims.com.au)
Received: from ntsts1 by aims.com.au
	with SMTP (MDaemon.v3.5.3.R)
	for <freebsd-isp@freebsd.org>; Mon, 17 Dec 2001 09:19:26 +1100
Reply-To: <chris@aims.com.au>
From: "Chris Knight" <chris@aims.com.au>
To: <freebsd-isp@freebsd.org>
Cc: <jblists@nobaloney.net>
Subject: RE: Using DNAT and DNS round-robin
Date: Mon, 17 Dec 2001 09:19:24 +1100
Message-ID: <020c01c1867f$b885ce70$020aa8c0@aims.private>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0)
In-Reply-To: <3C1C270F.164076BA@nobaloney.net>
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4807.1700
Importance: Normal
X-Return-Path: chris@aims.com.au
X-MDaemon-Deliver-To: freebsd-isp@freebsd.org
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Howdy,

> -----Original Message-----
> From: owner-freebsd-isp@FreeBSD.ORG
> [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Jeff Lasman
> Sent: Sunday, 16 December 2001 15:46
> To: Dmitry Koltsov; freebsd-isp@FreeBSD.ORG
> Subject: Re: Using DNAT and DNS round-robin
>
> [snip]
> And how about failure rollover?  We'd like to offer clients
> geographically dispersed hosting; there's a call for it since
> September 11th showed everyone of the hazards of hosting at
> only one location.
> But I don't think we can rely on short TTL; too many large
> ISPs seem to ignore it <frown>.
>
> Is there a way to handle high-availability strictly in DNS?
>
You might want to look at Eddieware. It's in the ports tree - www/eddie. It
contains a load-balancing DNS engine, plus a swag of other tools to create
highly available sites with geopgraphic distribution of servers in mind.
Also in the ports tree is net/dns_balance. This may also meet your needs.

> Thanks.
>
> Jeff

Regards,
Chris Knight
Systems Administrator
AIMS Independent Computer Professionals
Tel: +61 3 6334 6664  Fax: +61 3 6331 7032  Mob: +61 419 528 795
Web: http://www.aims.com.au



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Dec 16 15:49:39 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from inet03.citec.qld.gov.au (inet03.citec.qld.gov.au [203.5.10.10])
	by hub.freebsd.org (Postfix) with ESMTP id 57D5E37B419
	for <freebsd-isp@FreeBSD.ORG>; Sun, 16 Dec 2001 15:49:32 -0800 (PST)
Received: by inet03.citec.qld.gov.au; id JAA08489; Mon, 17 Dec 2001 09:49:29 +1000 (EST)
Received: from citecub.citec.qld.gov.au( 131.242.4.98) by inet03.citec.qld.gov.au via smap (V2.0)
	id xma008274; Mon, 17 Dec 01 09:49:21 +1000
Received: from guru.citec.qld.gov.au by citecub.citec.qld.gov.au (SMI-8.6/SMI-SVR4)
	id JAA10936; Mon, 17 Dec 2001 09:49:20 +1000
Received: from localhost (sgcccdc@localhost)
	by guru.citec.qld.gov.au (8.9.3/8.9.3) with ESMTP id JAA24171;
	Mon, 17 Dec 2001 09:49:19 +1000 (EST)
	(envelope-from sgcccdc@citec.qld.gov.au)
X-Authentication-Warning: guru.citec.qld.gov.au: sgcccdc owned process doing -bs
Date: Mon, 17 Dec 2001 09:49:19 +1000 (EST)
From: Colin Campbell <sgcccdc@citec.qld.gov.au>
To: Jeff Lasman <jblists@nobaloney.net>
Cc: <freebsd-isp@FreeBSD.ORG>
Subject: Re: Using DNAT and DNS round-robin
In-Reply-To: <3C1D0EF1.783B48AD@nobaloney.net>
Message-ID: <Pine.BSF.4.33.0112170945380.23989-100000@guru.citec.qld.gov.au>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hi,

On Sun, 16 Dec 2001, Jeff Lasman wrote:

> Derrick John Klise wrote:
>
> > IIRC, something like:
> >
> >   monkey.example.net    IN A   192.168.0.1
> >                         IN A   192.168.0.2
> >                         IN A   192.168.0.3
>
> Thanks.  Finally found it on page 259 of DNS and Bind.
>
> > > Is there a way to handle high-availability strictly in DNS?
> >
> > Possibly; I'm unaware of one if there is, though.
> >
> > If you're not too worried about the TTL problem, you could set up a monitoring
> > program to remove an entry from the rotation if it's corresponding address
> > becomes unavailable, then add it when it comes back up.
>
> That's exactly what we're planning on.  Along with very low TTL.  Won't
> help with AOL, Earthlink, etc., though <frown>.

There used to be (still is? - cou;dn't find it) a paper on the ISC web
site (www.isc.org) exlpaining why using DNS for HA was pointless. If
memory serves, the main reasons were

- most browsers cache DNS lookups and so a system that goes down will
  simply appear as unreachable to the browser.

- most browsers ignore TTLs.

Colin


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Dec 16 15:59:41 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from lemon.national.com.au (lemon.national.com.au [203.57.241.81])
	by hub.freebsd.org (Postfix) with ESMTP id E456C37B41A
	for <freebsd-isp@FreeBSD.ORG>; Sun, 16 Dec 2001 15:59:37 -0800 (PST)
Received: by lemon.national.com.au (Postfix, from userid 5)
	id 586399F821; Mon, 17 Dec 2001 10:59:31 +1100 (EST)
Received: from unknown(10.25.154.32) by lemon.national.com.au via csmap (V4.1)
	id srcAAAlNaisS; Mon, 17 Dec 01 10:59:30 +1100
Received: (from uucp@localhost)
	by peppermint.national.com.au (8.9.3+Sun/8.8.8) id KAA15191;
	Mon, 17 Dec 2001 10:59:23 +1100 (EST)
Received: from webjump.national.com.au(164.53.27.38)
 via SMTP by peppermint, id smtpdAAAQZaOQD; Mon Dec 17 10:59:23 2001
Received: (from nconedd@localhost)
	by webjump.national.com.au (8.10.2+Sun/8.10.2) id fBGNxQS22427;
	Mon, 17 Dec 2001 10:59:26 +1100 (EST)
Date: Mon, 17 Dec 2001 10:59:26 +1100
From: Enno Davids <nconedd@webjump.national.com.au>
To: Colin Campbell <sgcccdc@citec.qld.gov.au>
Cc: Jeff Lasman <jblists@nobaloney.net>, freebsd-isp@FreeBSD.ORG
Subject: Re: Using DNAT and DNS round-robin
Message-ID: <20011217105926.K16592@webjump.national.com.au>
References: <3C1D0EF1.783B48AD@nobaloney.net> <Pine.BSF.4.33.0112170945380.23989-100000@guru.citec.qld.gov.au>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <Pine.BSF.4.33.0112170945380.23989-100000@guru.citec.qld.gov.au>; from sgcccdc@citec.qld.gov.au on Mon, Dec 17, 2001 at 09:49:19AM +1000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Mon, Dec 17, 2001 at 09:49:19AM +1000, Colin Campbell wrote:
|On Sun, 16 Dec 2001, Jeff Lasman wrote:
|> Derrick John Klise wrote:
|>
|> > IIRC, something like:
|> >
|> >   monkey.example.net    IN A   192.168.0.1
|> >                         IN A   192.168.0.2
|> >                         IN A   192.168.0.3
|>
|> Thanks.  Finally found it on page 259 of DNS and Bind.
|>
|> > > Is there a way to handle high-availability strictly in DNS?
|> >
|
|There used to be (still is? - cou;dn't find it) a paper on the ISC web
|site (www.isc.org) exlpaining why using DNS for HA was pointless. If
|memory serves, the main reasons were
|
|- most browsers cache DNS lookups and so a system that goes down will
|  simply appear as unreachable to the browser.
|
|- most browsers ignore TTLs.

FWIW, squid (and possibly other proxies) when faced with a list of address
for a name will retry on the next address in the list when they get a hard
error on the one they're using. Its still not HA, but its better than you
thought.

The real answer is hardware load balancers like F5, Foundry or Rad.


Enno.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Dec 16 23:13: 1 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from mailout01.sul.t-online.com (mailout01.sul.t-online.com [194.25.134.80])
	by hub.freebsd.org (Postfix) with ESMTP id 5459337B41B
	for <freebsd-isp@freebsd.org>; Sun, 16 Dec 2001 23:12:57 -0800 (PST)
Received: from fwd07.sul.t-online.de 
	by mailout01.sul.t-online.de with smtp 
	id 16FrxH-0005VW-04; Mon, 17 Dec 2001 08:12:55 +0100
Received: from carstenshome (520075190812-0001@[217.230.104.105]) by fwd07.sul.t-online.com
	with smtp id 16Frx8-20jKQCC; Mon, 17 Dec 2001 08:12:46 +0100
Message-ID: <003901c186ca$47d32420$0100a8c0@carstenshome>
From: stefan.sonnenberg-carstens@t-online.de (Stefan Sonnenberg-Carstens)
To: <freebsd-isp@freebsd.org>
References: <000001c18637$ca201cf0$0100a8c0@carstenshome> <20011216101939.C1680@absinthe> <000901c1864b$943190b0$0100a8c0@carstenshome>
Subject: Re: Strange load jumps
Date: Mon, 17 Dec 2001 08:13:08 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Sender: 520075190812-0001@t-dialin.net
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Ok, I switched off SMP support - and it goes !
The x330 series are running an ServerWorks chipset.
Any idea ?

----- Original Message -----
From: "Stefan Sonnenberg-Carstens" <stefan.sonnenberg-carstens@t-online.de>
To: <absinthe@pobox.com>; <freebsd-isp@freebsd.org>
Sent: Sunday, December 16, 2001 5:06 PM
Subject: Re: Strange load jumps


> I don't think that that's the point,
> on both mashines the swap space is used by ~ 10 MByte.
>
> ----- Original Message -----
> From: "Dylan Carlson" <absinthe@pobox.com>
> To: "Stefan Sonnenberg-Carstens" <stefan.sonnenberg-carstens@t-online.de>
> Sent: Sunday, December 16, 2001 4:19 PM
> Subject: Re: Strange load jumps
>
>
> > Stefan Sonnenberg-Carstens <stefan.sonnenberg-carstens@t-online.de>
wrote:
> > >  Hi there.
> > >  Both mashines have 1GB of RAM, a 1GB swap partition, two 866PIII
procs
> > > and
> > >  an adaptec U160SCSI controller, which accesses a 9GB U160 disk.
> >
> > The VM algorithms are tuned to have swap slices that are 2 times
> > physical RAM.   I don't believe this is your problem but you should
> > probably read the tuning(7) manpage anyhow.
> >
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17  0:19: 8 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from web20102.mail.yahoo.com (web20102.mail.yahoo.com [216.136.226.39])
	by hub.freebsd.org (Postfix) with SMTP id A35A537B41C
	for <freebsd-isp@freebsd.org>; Mon, 17 Dec 2001 00:19:02 -0800 (PST)
Message-ID: <20011217081901.62776.qmail@web20102.mail.yahoo.com>
Received: from [193.227.212.161] by web20102.mail.yahoo.com via HTTP; Mon, 17 Dec 2001 09:19:01 CET
Date: Mon, 17 Dec 2001 09:19:01 +0100 (CET)
From: =?iso-8859-1?q?Fabrizio=20Ravazzini?= <freefabri@yahoo.it>
Subject: vrrpd doesn't work
To: freebsd-cluster@freebsd.org
Cc: freebsd-isp@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hello all I've installed vrrpd 0.2 from the ports on
freebsd 4.3, if I launch it I've got the errors:

Indio# vrrpd -i ed0 -v 1 -p 150 192.168.0.90
Dec 16 21:01:27 Indio vrrpd[824]: starting
Dec 16 21:01:27 Indio vrrpd[824]: router 1 init
Dec 16 21:01:30 Indio vrrpd[824]: setting master 1
Dec 16 21:01:30 Indio vrrpd[824]: ioctl (set lladdr):
Inappropriate ioctl for device
Dec 16 21:01:30 Indio vrrpd[824]: ioctl (set lladdr):
Inappropriate ioctl for device
Dec 16 21:01:30 Indio vrrpd[824]: Can't SIOCADDMULTI
on ed0: Can't assign requested address
Dec 16 21:01:30 Indio vrrpd[824]: Can't SIOCADDMULTI
on ed0: Can't assign requested address


Any Ideas?
Thanks bye


______________________________________________________________________

Iscriviti al Meglio della Settimana, la newsletter di Yahoo!
Per saperne di piЫ vai alla pagina: http://buongiorno.yahoo.it

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17  0:38:18 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from web20108.mail.yahoo.com (web20108.mail.yahoo.com [216.136.226.45])
	by hub.freebsd.org (Postfix) with SMTP id 5B66537B41D
	for <freebsd-isp@freebsd.org>; Mon, 17 Dec 2001 00:38:12 -0800 (PST)
Message-ID: <20011217083812.63311.qmail@web20108.mail.yahoo.com>
Received: from [193.227.212.160] by web20108.mail.yahoo.com via HTTP; Mon, 17 Dec 2001 09:38:12 CET
Date: Mon, 17 Dec 2001 09:38:12 +0100 (CET)
From: =?iso-8859-1?q?Fabrizio=20Ravazzini?= <freefabri@yahoo.it>
Subject: Bridge/Firewall cluster?
To: freebsd-cluster@freebsd.org
Cc: freebsd-isp@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hello all I've done a bridge/firewall to connect a dmz
to Internet,this is the scheme:

             Internet
               |
               |
             Router cisco
               |
               | rl0
            Fbsd bridge/FW
               | rl1
               |
              DMZ

The public ip of the cisco is like 200.20.20.1
Then rl0 200.20.20.3.
I want to make this bridge high available putting
another freebsd bridge machine so that if one goes
down   there is the other and the dmz is still
available.
Can I put another Fbsd bridge between the cisco and
the dmz like this scheme:


             Internet
               |
               |
             Router cisco
               |
               |________________
               | rl0            |
              Fbsd              |ed0
            bridge/FW          Fbsd 
               | rl1           Bridge/FW
               |________________|
               |
              DMZ

For example ed0 could be 200.20.20.5, perhaps is
stupid question, but can it works?
Or is there other solutions?
Any help would be appreciated.
Bye


______________________________________________________________________

Iscriviti al Meglio della Settimana, la newsletter di Yahoo!
Per saperne di piЫ vai alla pagina: http://buongiorno.yahoo.it

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17  1:45:24 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from wells.tecc.co.uk (wells.tecc.co.uk [195.217.37.90])
	by hub.freebsd.org (Postfix) with ESMTP
	id 1ED6237B41E; Mon, 17 Dec 2001 01:45:16 -0800 (PST)
Received: from leven (leven.tecc.co.uk [195.217.37.153])
	by wells.tecc.co.uk (8.9.3+Sun/8.9.3) with SMTP id JAA11945;
	Mon, 17 Dec 2001 09:45:12 GMT
From: "Andy" <andy@tecc.co.uk>
To: "Fabrizio Ravazzini" <freefabri@yahoo.it>,
	<freebsd-cluster@freebsd.org>
Cc: <freebsd-isp@freebsd.org>
Subject: RE: vrrpd doesn't work
Date: Mon, 17 Dec 2001 09:45:12 -0000
Message-ID: <KOEELIKBDOKNEKMJNPFHGEGKCLAA.andy@tecc.co.uk>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
In-reply-to: <20011217081901.62776.qmail@web20102.mail.yahoo.com>
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4807.1700
Importance: Normal
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Funny, I thought I marked the vrrp port broken
since it doesn't quite meet the RFC like the docs
says they do. Anyhow, to get it working how you
want include the -n switch on the command line.

Regards
Andy

> -----Original Message-----
> From: owner-freebsd-isp@freebsd.org
> [mailto:owner-freebsd-isp@freebsd.org]On Behalf Of Fabrizio Ravazzini
> Sent: 17 December 2001 08:19
> To: freebsd-cluster@freebsd.org
> Cc: freebsd-isp@freebsd.org
> Subject: vrrpd doesn't work
>
>
> Hello all I've installed vrrpd 0.2 from the ports on
> freebsd 4.3, if I launch it I've got the errors:
>
> Indio# vrrpd -i ed0 -v 1 -p 150 192.168.0.90
> Dec 16 21:01:27 Indio vrrpd[824]: starting
> Dec 16 21:01:27 Indio vrrpd[824]: router 1 init
> Dec 16 21:01:30 Indio vrrpd[824]: setting master 1
> Dec 16 21:01:30 Indio vrrpd[824]: ioctl (set lladdr):
> Inappropriate ioctl for device
> Dec 16 21:01:30 Indio vrrpd[824]: ioctl (set lladdr):
> Inappropriate ioctl for device
> Dec 16 21:01:30 Indio vrrpd[824]: Can't SIOCADDMULTI
> on ed0: Can't assign requested address
> Dec 16 21:01:30 Indio vrrpd[824]: Can't SIOCADDMULTI
> on ed0: Can't assign requested address
>
>
> Any Ideas?
> Thanks bye
>
>
> ______________________________________________________________________
>
> Iscriviti al Meglio della Settimana, la newsletter di Yahoo!
> Per saperne di piЫ vai alla pagina: http://buongiorno.yahoo.it
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17  1:55: 3 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from SRDMAIL.SINP.MSU.RU (bigking.sinp.msu.ru [213.131.9.130])
	by hub.freebsd.org (Postfix) with ESMTP
	id 70E7637B41B; Mon, 17 Dec 2001 01:54:59 -0800 (PST)
Received: from dima (helo=localhost)
	by SRDMAIL.SINP.MSU.RU with local-esmtp (Exim 3.33 #3)
	id 16FuTa-000Kif-00; Mon, 17 Dec 2001 12:54:26 +0300
Date: Mon, 17 Dec 2001 12:54:26 +0300 (MSK)
From: Dmitry Mottl <dima@sinp.msu.ru>
To: freebsd-questions@FreeBSD.org, <freebsd-isp@FreeBSD.org>
Subject: readonly mount
Message-ID: <Pine.BSF.4.43.0112171249150.71267-100000@BigKing.sinp.msu.ru>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hi All

I want to organize virtual hosts with jails
So I need to mount (readonly) some parts of file system to virtual hosts
(for example /bin, /usr)
What mount_* will be fine for this?

mount_union? - is it actualy bugy or stable?
mount_nfs?
any other ideas?

Thank You

--
best regards,
Dmitry Mottl


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17  1:58:18 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from relay2.agava.net.ru (ofc.agava.net [213.59.3.194])
	by hub.freebsd.org (Postfix) with ESMTP
	id 712D737B41C; Mon, 17 Dec 2001 01:58:08 -0800 (PST)
Received: from hellbell.domain (hellbell.domain [192.168.1.12])
	by relay2.agava.net.ru (Postfix) with ESMTP
	id 17D4E66B40; Mon, 17 Dec 2001 12:58:03 +0300 (MSK)
Received: from localhost (localhost [127.0.0.1])
	by hellbell.domain (Postfix) with ESMTP
	id D6F86CD08; Mon, 17 Dec 2001 12:58:02 +0300 (MSK)
Date: Mon, 17 Dec 2001 12:58:02 +0300 (MSK)
From: Alexey Zakirov <frank@agava.com>
X-X-Sender:  <frank@hellbell.domain>
To: Dmitry Mottl <dima@sinp.msu.ru>
Cc: <freebsd-questions@FreeBSD.org>, <freebsd-isp@FreeBSD.org>
Subject: Re: readonly mount
In-Reply-To: <Pine.BSF.4.43.0112171249150.71267-100000@BigKing.sinp.msu.ru>
Message-ID: <Pine.BSF.4.32.0112171256240.41679-100000@hellbell.domain>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Mon, 17 Dec 2001, Dmitry Mottl wrote:

> I want to organize virtual hosts with jails
> So I need to mount (readonly) some parts of file system to virtual hosts
> (for example /bin, /usr)
> What mount_* will be fine for this?
>
> mount_union? - is it actualy bugy or stable?

works ok until you want to use fifo, unix-domain sockets or sendfile(2) on
it.

> mount_nfs?

slow?

> any other ideas?

there is a patch somewhere which allows to mount ufs partition more than
one time.

*** WBR, Alexey Zakirov (frank@agava.com)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17  2:56:37 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from mail.lkb.lv (ns.lkb.lv [195.13.170.2])
	by hub.freebsd.org (Postfix) with ESMTP id A0B5F37B41A
	for <FreeBSD-isp@freebsd.org>; Mon, 17 Dec 2001 02:56:32 -0800 (PST)
Received: from ramex1 ([195.13.170.15])
	by mail.lkb.lv (8.11.5/8.11.3) with SMTP id fBHAuPE89870
	for <FreeBSD-isp@freebsd.org>; Mon, 17 Dec 2001 12:56:25 +0200 (EET)
	(envelope-from vic@is.lv)
Received: from  ([192.168.203.21]) by ramex1; Mon, 17 Dec 2001 12:54:54 +0200 (EET)
Received: from kaktuss.lkb.lv ([192.168.203.21])           by kaktuss.lkb.lv (Lotus Domino Release 5.0.8)           with SMTP id 2001121712562100:2431 ;           Mon, 17 Dec 2001 12:56:21 +0200 
Received: from is.lv ([192.168.203.247])  by kaktuss.lkb.lv (NAVGW 2.5 bld 90) with SMTP id M2001121712561728508  for <FreeBSD-isp@freebsd.org>; Mon, 17 Dec 2001 12:56:20 +0200
Message-ID: <3C1DCF87.3080806@is.lv>
Date: Mon, 17 Dec 2001 12:57:11 +0200
From: Victor Meirans <vic@is.lv>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.6) Gecko/20011120
X-Accept-Language: en-us
MIME-Version: 1.0
To: FreeBSD-isp@freebsd.org
Subject: IDE Raid controllers on FreeBSD
X-MIMETrack: Itemize by SMTP Server on KAKTUSS/LKB/LV(Release 5.0.8 |June 18, 2001) at  12/17/2001 12:56:21 PM, 	Serialize by Router on KAKTUSS/LKB/LV(Release 5.0.8 |June 18, 2001) at 12/17/2001  12:56:23 PM, 	Serialize complete at 12/17/2001 12:56:23 PM
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=windows-1257; format=flowed
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hello,

Does anyone have the experience with IDE Raid controllers on FreeBSD??? 
What models/manufacturers would you recommend? A what with the 
drivers??? I am planning buing one, 'cos software raid seems to be kinda 
slow for me...

Thanks in advance,

--
ViC


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17  4:30:42 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from relay.office.bezpeka.net (gw.office.annaltd.com [193.108.112.118])
	by hub.freebsd.org (Postfix) with ESMTP id B2B5E37B41A
	for <freebsd-isp@freebsd.org>; Mon, 17 Dec 2001 04:30:18 -0800 (PST)
Received: (from admin@localhost)
	by unixbox.office.bezpeka.net (8.11.3/8.11.3) id fBHBG3g02310
	for freebsd-isp@freebsd.org; Mon, 17 Dec 2001 13:16:03 +0200 (EET)
	(envelope-from admin)
Date: Mon, 17 Dec 2001 13:16:03 +0200
From: apache@ukr.net
To: freebsd-isp@freebsd.org
Subject: firewall + ftp
Message-ID: <20011217131602.A1843@unixbox.office.annaltd.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hi, guys!

I am aranging firewall in my office network connected to Internet via dedicated
line. I wanna close everything but HTTP, SMTP, SSH and FTP from internal
network. The problem is FTP. I wanna make uploads/downloads to Internet hosts
via ftp.

What can i do with data ports?
Are there any solutions or start points for me (ftp proxy, etc.)?

-- 
e-mail:	apache@ukr.net

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17  4:50:20 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from creator.ukrsat.com (creator.ukrsat.com [212.35.160.30])
	by hub.freebsd.org (Postfix) with ESMTP id 11DB237B416
	for <freebsd-isp@FreeBSD.ORG>; Mon, 17 Dec 2001 04:50:07 -0800 (PST)
Received: from prophet.firewall (relay1.blitz.kiev.ua [212.35.160.68])
	by creator.ukrsat.com (8.11.6/8.11.6) with ESMTP id fBHGg9h15680;
	Mon, 17 Dec 2001 14:42:11 -0200
Received: by relay1.blitz.kiev.ua with Internet Mail Service (5.5.2653.19)
	id <ZCJTMC62>; Mon, 17 Dec 2001 14:47:50 +0200
Message-ID: <558A166DE464D511977C00304821AB160102465B@mainexch.firewall>
From: mikolaev@blitz.kiev.ua
To: apache@ukr.net, freebsd-isp@FreeBSD.ORG
Subject: RE: firewall + ftp
Date: Mon, 17 Dec 2001 14:47:51 +0200
X-Mailer: Internet Mail Service (5.5.2653.19)
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

hi

ftp protocol use ports 20,21,49152-65535(active mode)
http - 80
smtp - 25
ssh - 22

where is the problem? ;)

--------------------------------------------------
sorry for poor english,
  wbr, Roman V. Liskovenko
mail-to: romul_rules@mailru.com
            mikolaev@blitz.kiev.ua

> ----------
> От: 	apache@ukr.net[SMTP:apache@ukr.net]
> Отправлено: 	Monday, December 17, 2001 1:16 PM
> Кому: 	freebsd-isp@FreeBSD.ORG
> Тема: 	firewall + ftp
> 
> Hi, guys!
> 
> I am aranging firewall in my office network connected to Internet via
> dedicated
> line. I wanna close everything but HTTP, SMTP, SSH and FTP from internal
> network. The problem is FTP. I wanna make uploads/downloads to Internet
> hosts
> via ftp.
> 
> What can i do with data ports?
> Are there any solutions or start points for me (ftp proxy, etc.)?
> 
> -- 
> e-mail:	apache@ukr.net
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> ==============================================
> 
> Это сообщение не содержит вирусов.
> 
> 
> 
> Проверено KAV for MS Exchange.
> 
> 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17  5:32:22 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from blue.frogfoot.net (blue.frogfoot.net [66.8.28.50])
	by hub.freebsd.org (Postfix) with SMTP id 438B437B405
	for <freebsd-isp@freebsd.org>; Mon, 17 Dec 2001 05:32:08 -0800 (PST)
Received: (qmail 31250 invoked by uid 1004); 17 Dec 2001 13:31:58 -0000
Date: Mon, 17 Dec 2001 15:31:58 +0200
From: Johann Botha <joe@frogfoot.net>
To: apache@ukr.net
Cc: freebsd-isp@freebsd.org
Subject: Re: firewall + ftp
Message-ID: <20011217133158.GB30894@blue.frogfoot.net>
References: <20011217131602.A1843@unixbox.office.annaltd.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20011217131602.A1843@unixbox.office.annaltd.com>
User-Agent: Mutt/1.3.24i
Organization: Frogfoot Networks
X-Operating-System: Debian GNU/Linux blue 2.4.13-ac7 (Athlon)
X-GPG-Public-Key: http://blue.frogfoot.net/keys/frogfoot.gpg
X-Uptime: 2:57pm  up 1 day, 18:06,  6 users,  load average: 1.50, 1.37, 1.28
X-Edited-With-Muttmode: muttmail.sl - 2001-10-27
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hi apache!

> I am aranging firewall in my office network connected to Internet via dedicated
> line. I wanna close everything but HTTP, SMTP, SSH and FTP from internal
> network. The problem is FTP. I wanna make uploads/downloads to Internet hosts
> via ftp.
> 
> What can i do with data ports?
> Are there any solutions or start points for me (ftp proxy, etc.)?

man natd
------------< snip <------< snip <------< snip <------------
     -punch_fw basenumber:count
                 This option directs natd to `punch holes'' in an
                 ipfirewall(4) based firewall for FTP/IRC DCC connections.
                 This is done dynamically by installing temporary firewall
                 rules which allow a particular connection (and only that con-
                 nection) to go through the firewall.  The rules are removed
                 once the corresponding connection terminates.		 
------------< snip <------< snip <------< snip <------------

but.. i could not get this to work, imho natd is broken. (in 4.3 anyway)

so now i use jftpgw: http://www.mcknight.de/jftpgw/features.html

eg.
------------< snip <------< snip <------< snip <------------
   # Transparent Proxy for FTP
     fwd 66.8.1.1,2370 tcp from 66.8.1.48/29 to any 21 in recv ed1   
------------< snip <------< snip <------< snip <------------

and then just allow "1025-65535 to any 21" on the firewall's IP.

..or use IPF's NAT:  http://coombs.anu.edu.au/~avalon/ip-filter.html

-- 
Regards
Johann

  "FreD is not dead"
        - echo $(uname) is not dead | sed "s/eBS//"
_________________________________________________________
 Johann L. Botha          Debian GNU Jedi: joe@debian.org
 
    email: joe@frogfoot.net      snail mail: PO Box 3472
   mobile: +27 82 5626 167                   Matieland
 workpage: http://www.frogfoot.net           Stellenbosch
 homepage: http://blue.frogfoot.net          7602
      gps: 33deg 56.09S, 18deg 25.31E, 64m   South Africa
      ham: ZR1JOE

Copyright (c) 2001. The Sovereigns of Frogfoot. All rights reserved.
Disclaimer available upon request.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17  6:48:57 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from support.euronet.nl (support.euronet.nl [194.134.32.134])
	by hub.freebsd.org (Postfix) with ESMTP id 06BD537B417
	for <FreeBSD-isp@FreeBSD.ORG>; Mon, 17 Dec 2001 06:48:54 -0800 (PST)
Received: from localhost (franst@localhost)
	by support.euronet.nl (8.11.3/8.11.0) with ESMTP id fBHEmoV50767;
	Mon, 17 Dec 2001 15:48:50 +0100 (CET)
X-Authentication-Warning: support.euronet.nl: franst owned process doing -bs
Date: Mon, 17 Dec 2001 15:48:50 +0100 (CET)
From: Frans ter Borg <frans@quanza.net>
X-Sender: franst@support.euronet.nl
To: Victor Meirans <vic@is.lv>
Cc: FreeBSD-isp@FreeBSD.ORG
Subject: Re: IDE Raid controllers on FreeBSD
In-Reply-To: <3C1DCF87.3080806@is.lv>
Message-ID: <Pine.BSF.4.21.0112171546060.316-100000@support.euronet.nl>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Mon, 17 Dec 2001, Victor Meirans wrote:

> Does anyone have the experience with IDE Raid controllers on
> FreeBSD???  What models/manufacturers would you recommend? A what with
> the drivers??? I am planning buing one, 'cos software raid seems to be
> kinda slow for me...

I'm using a Promise Fasttrak 100, with two Matrox disks in stripe
configuration. With sequential reads and writes I've seen speeds up to
50 Megabyte/s using large blocks.

No config was required for FreeBSD, just mount the /dev/arXXX device that
shows up after installation.

regards,

Frans



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17  7:32: 7 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from fox.raw-io.com (dsl-216-227-24-201.telocity.com [216.227.24.201])
	by hub.freebsd.org (Postfix) with ESMTP id DF0B637B417
	for <FreeBSD-isp@FreeBSD.ORG>; Mon, 17 Dec 2001 07:31:58 -0800 (PST)
Received: from raw-io.com (cvig2 [192.168.0.199])
	by fox.raw-io.com (8.11.6/8.11.6) with ESMTP id fBHFVfJ87313;
	Mon, 17 Dec 2001 09:31:41 -0600 (CST)
	(envelope-from cvig@raw-io.com)
Message-ID: <3C1E0FD3.5000405@raw-io.com>
Date: Mon, 17 Dec 2001 09:31:31 -0600
From: Cymen Vig <cvig@raw-io.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.6+) Gecko/20011216
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Victor Meirans <vic@is.lv>
Cc: FreeBSD-isp@FreeBSD.ORG
Subject: Re: IDE Raid controllers on FreeBSD
References: <3C1DCF87.3080806@is.lv>
Content-Type: text/plain; charset=windows-1257; format=flowed
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Victor Meirans wrote:

> Does anyone have the experience with IDE Raid controllers on 
> FreeBSD??? What models/manufacturers would you recommend? A what with 
> the drivers??? I am planning buing one, 'cos software raid seems to be 
> kinda slow for me... 

I have a 3ware Escalade 6200 in a Freebsd 4.4-stable box.  I am using it 
with 2 20 gig Maxtor drives in a RAID mirror but I did run bonnie++ on 
it with it configured as a 40 gig stripe.  I'm happy with the Escalade 
but just so we are all on the same page recently 3ware stopped selling 
their IDE RAID cards then changed their minds and returned to the market 
due to demand.  I don't know anymore than that and IDE RAID is part of 
their core business (see their other products) but I thought I would 
mention it...

Hardware:
Celeron 550 Mhz (100 Mhz FSB)
440BX motherboard
512mb RAM
3ware Escalade 6200 (latest firmware)
2 x 20gb Maxtor D740X-6L (7200 RPM) with acoustic management left to 
factory default (on)
<http://www.maxtor.com/products/diamondmax/techsupport/technicalprocedures/21007.html>

RAID stripe:
static# /usr/local/sbin/bonnie++ -r 512 -s 1024 -d /mnt/twe/ -u root
Version  1.02       ------Sequential Output------ --Sequential Input- 
--Random-
                    -Per Chr- --Block-- -Rewrite- -Per Chr- --Block-- 
--Seeks--
Machine        Size K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP  
/sec %CP
static.raw-io.co 1G 22318  96 70591  91 17579  24 18807  97 65507  44 
238.4   2
                    ------Sequential Create------ --------Random 
Create--------
                    -Create-- --Read--- -Delete-- -Create-- --Read--- 
-Delete--
              files  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP  
/sec %CP
                 16   464  81 +++++ +++  3033  49   492  80   800  99  
1341  84
static.raw-io.com,1G,22318,96,70591,91,17579,24,18807,97,65507,44,238.4,2,16,464,81,4

RAID mirror:
root@static:/home# bonnie++ -u root -s 1024 -r 512
Version  1.02       ------Sequential Output------ --Sequential Input- 
--Random-
                    -Per Chr- --Block-- -Rewrite- -Per Chr- --Block-- 
--Seeks--
Machine        Size K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP 
/sec %CP
static.raw-io.co 1G 20986  94 31321  42 12913  17 18410  96 33787  22 
311.2   2
                    ------Sequential Create------ --------Random 
Create--------
                    -Create-- --Read--- -Delete-- -Create-- --Read--- 
-Delete--
              files  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP 
/sec %CP
                 16   544  93 +++++ +++  7895  95   594  97   771  97 
1772  98
static.raw-io.com,1G,20986,94,31321,42,12913,17,18410,96,33787,22,311.2,2,16,544,93,+++++,+++,7895,95,594,97,771,97,1772,98

For comparision a 40gb 7200 RPM Maxtor 5T040H4 on a Promise Ultra66 IDE 
card (not RAID) that was in the same machine:
static# /usr/local/sbin/bonnie++ -r 512 -s 1024 -d /home -u root
Version  1.02       ------Sequential Output------ --Sequential Input- 
--Random-
                    -Per Chr- --Block-- -Rewrite- -Per Chr- --Block-- 
--Seeks--
Machine        Size K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP  
/sec %CP
static.raw-io.co 1G 21645  95 29567  39 13861  22 18529  97 31890  21 
167.2   1
                    ------Sequential Create------ --------Random 
Create--------
                    -Create-- --Read--- -Delete-- -Create-- --Read--- 
-Delete--
              files  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP  
/sec %CP
                 16   561  94 +++++ +++  7024  95   612  98   781  97  
1721  98
static.raw-io.com,1G,21645,95,29567,39,13861,22,18529,97,31890,21,167.2,1,16,561,94,8

Some other IDE RAID providers to look at are Adaptec and Promise... 
 Apparently while some cards have the majority of the IDE RAID 
functionality on the card (Adaptec, 3ware) others have a lot of the 
functionality in the drivers (Promise).   I don't know how true that is 
so perhaps others can confirm this...  Also the 3ware (and I presume the 
Adaptec) support hotswap while the Promise does not (again, confirmation 
would be good).  Personally I use the 3ware products where IDE RAID is 
needed and the Promise Ultra66/100/?? where fast regular IDE is needed. 
 StorageReview.com should have reviews of all the products in question.

Cymen Vig
cvig@raw-io.com

ObDisclaimer: benchmarking drives is a pain in the rear because the 
speeds are different depending on where the head is (ie closer to the 
center of the disc or out at the edges) so these benchmarks while fun 
and dandy are inherently flawed and should be taken with a grain of salt.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17 12:56:41 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from c003.snv.cp.net (c003-h000.c003.snv.cp.net [209.228.32.214])
	by hub.freebsd.org (Postfix) with SMTP id 2374A37B41E
	for <freebsd-isp@FreeBSD.ORG>; Mon, 17 Dec 2001 12:56:24 -0800 (PST)
Received: (cpmta 28987 invoked from network); 17 Dec 2001 12:56:22 -0800
Received: from 216.227.100.85 (HELO vector)
  by smtp.telocity.com (209.228.32.214) with SMTP; 17 Dec 2001 12:56:22 -0800
X-Sent: 17 Dec 2001 20:56:22 GMT
From: "Dustin Puryear" <dpuryear@usa.net>
To: "Forrest W. Christian" <forrestc@imach.com>
Cc: <freebsd-isp@FreeBSD.ORG>
Subject: RE: Public DNS server and FreeBSD firewall
Date: Mon, 17 Dec 2001 15:04:31 -0600
Message-ID: <PGECILGGNJGDPJKLFEMIIEOFCJAA.dpuryear@usa.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
In-Reply-To: <Pine.BSF.4.21.0112160042110.4527-100000@workhorse.iMach.com>
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

gatekeeper# cat /etc/rc.conf|grep nat
natd_enable="YES"
natd_interface="rl0"
natd_flags="-f /etc/natd.conf"

gatekeeper# cat /etc/rc.conf | grep ifconfig
ifconfig_nge0="inet 10.0.0.1  netmask 255.255.255.0"
ifconfig_rl0="inet aa.aa.aa.aa netmask 255.255.255.192 media 10baseT/UTP"
ifconfig_rl0_alias0="inet xx.xx.xx.xx netmask 255.255.255.192"
ifconfig_rl0_alias1="inet yy.yy.yy.yy netmask 255.255.255.192"
ifconfig_rl0_alias2="inet zz.zz.zz.zz netmask 255.255.255.192"

gatekeeper# cat /etc/natd.conf 
redirect_address 10.0.0.20  xx.xx.xx.xx
redirect_address 10.0.0.21  yy.yy.yy.yy
redirect_address 10.0.0.5   zz.zz.zz.zz

Regards, Dustin

---
Dustin Puryear <dpuryear@usa.net>
Information Systems Consultant
http://members.telocity.com/~dpuryear
In the beginning the Universe was created. 
This has been widely regarded as a bad move. - Douglas Adams
 

> -----Original Message-----
> From: owner-freebsd-isp@FreeBSD.ORG
> [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Forrest W. Christian
> Sent: Sunday, December 16, 2001 1:43 AM
> To: Dustin Puryear
> Cc: freebsd-isp@FreeBSD.ORG
> Subject: Re: Public DNS server and FreeBSD firewall
> 
> 
> What is your nat configured as?
> 
> The problem is probably in your natd.conf file.
> 
> On Sun, 16 Dec 2001, Dustin Puryear wrote:
> 
> > Date: Sun, 16 Dec 2001 01:13:14 -0600
> > From: Dustin Puryear <dpuryear@usa.net>
> > To: freebsd-isp@FreeBSD.ORG
> > Subject: Public DNS server and FreeBSD firewall
> > 
> > I am setting up a public DNS server and having a bit of a 
> problem figuring
> > out why it cannot query outside of our network. I am using FreeBSD
> > 4.4-RELEASE on both the DNS server and firewall. Basically, 
> when I try to
> > resolve a host outside of my network the local named times out:
> > 
> > Server:  XXXXX.com
> > Address:  10.0.0.5
> > 
> >         *** XXXXXX.com can't find www.cdrom.com: Non-existent 
> host/domain
> > > www.google.com
> > Server:  XXXXX.com
> > Address:  10.0.0.5
> > 
> > *** XXXX.com can't find www.google.com: Non-existent host/domain
> > >
> > 
> > I can't figure out why, and darn if I am not getting any denied 
> packet log
> > entries in /var/log/security on the firewall. I am using static 
> NAT, with my
> > DNS server having the internal address 10.0.0.5, but an 
> external address of
> > aa.bb.cc.dd. The ipfw entries that appear relevant are:
> > 
> > # internal DNS..
> > 03000 allow udp from ww.xx.yy.zz to any 53 keep-state
> > 03100 allow tcp from ww.xx.yy.zz to any 53 keep-state
> > # this is the public DNS server..
> > 03200 allow udp from aa.bb.cc.dd to any 53 keep-state
> > 03300 allow tcp from aa.bb.cc.dd to any 53 keep-state
> > 
> > This should allow my name servers to access any outside name 
> servers right?
> > I even get dynamic rules that indicate some type of connection is being
> > attempted:
> > 
> > 03200 0 0 (T 29, # 91) ty 0 udp, aa.bb.cc.dd 1196 <-> 66.135.0.10 53
> > 
> > Despite this entry the local named still times out. The wierd 
> thing is that
> > the named running on the firewall, ww.xx.yy.zz (internal 
> 10.0.0.1), works.
> > But the named running on aa.bb.cc.dd (10.0.0.5) doesn't.
> > 
> > Note, the entire ruleset follows if you need more information:
> > 
> > 00100 allow ip from any to any via lo0
> > 00200 deny ip from any to 127.0.0.0/8
> > 00300 deny ip from 127.0.0.0/8 to any
> > 00400 allow ip from any to any via nge0
> > 00500 deny ip from 10.0.0.0/24 to any in recv rl0
> > 00600 deny ip from public-network-XXX/26 to any in recv nge0
> > 00700 deny ip from any to 10.0.0.0/8 via rl0
> > 00800 deny ip from any to 172.16.0.0/12 via rl0
> > 00900 deny ip from any to 192.168.0.0/16 via rl0
> > 01000 deny ip from any to 0.0.0.0/8 via rl0
> > 01100 deny ip from any to 169.254.0.0/16 via rl0
> > 01200 deny ip from any to 192.0.2.0/24 via rl0
> > 01300 deny ip from any to 224.0.0.0/4 via rl0
> > 01400 deny ip from any to 240.0.0.0/4 via rl0
> > 01500 divert 8668 ip from any to any via rl0
> > 01600 deny ip from 10.0.0.0/8 to any via rl0
> > 01700 deny ip from 172.16.0.0/12 to any via rl0
> > 01800 deny ip from 192.168.0.0/16 to any via rl0
> > 01900 deny ip from 0.0.0.0/8 to any via rl0
> > 02000 deny ip from 169.254.0.0/16 to any via rl0
> > 02100 deny ip from 192.0.2.0/24 to any via rl0
> > 02200 deny ip from 224.0.0.0/4 to any via rl0
> > 02300 deny ip from 240.0.0.0/4 to any via rl0
> > 02400 allow tcp from any to any established
> > 02500 allow ip from any to any frag
> > 02800 allow tcp from any to any 22 keep-state
> > 02900 allow icmp from any to any keep-state
> > 03000 deny log logamount 10 tcp from any to any in recv rl0 setup
> > 03100 allow tcp from any to any setup
> > 03200 allow udp from ww.xx.yy.zz to any 53 keep-state
> > 03300 allow tcp from ww.xx.yy.zz to any 53 keep-state
> > 03400 allow udp from aa.bb.cc.dd to any 53 keep-state
> > 03500 allow tcp from aa.bb.cc.dd to any 53 keep-state
> > 65535 deny ip from any to any
> > 
> > Regards, Dustin
> > 
> > ---
> > Dustin Puryear <dpuryear@usa.net>
> > Information Systems Consultant
> > http://members.telocity.com/~dpuryear
> > In the beginning the Universe was created.
> > This has been widely regarded as a bad move. - Douglas Adams
> > 
> > 
> > > -----Original Message-----
> > > From: Gabriel Ambuehl [mailto:gabriel_ambuehl@buz.ch]
> > > Sent: Tuesday, December 11, 2001 12:15 PM
> > > To: Dustin Puryear
> > > Cc: isp@freebsd.org
> > > Subject: Re[10]: Using DNAT and DNS round-robin
> > >
> > >
> > > -----BEGIN PGP SIGNED MESSAGE-----
> > >
> > > Hello Dustin,
> > >
> > > Tuesday, December 11, 2001, 6:29:35 PM, you wrote:
> > > > Yes, that is what I eventually found out. Apparently, unless you
> > > > have some type of special gear, you cannot do IP-based virtual
> > > > hosting in a
> > > > load-sharing or -balancing environment. Now, doing HA might not be
> > > > too much work depending on what your requirements for switch over
> > > > time are.
> > >
> > > <10s is doable with standard gear. <1s is quite a bit harder but
> > > perhaps still doable.
> > >
> > > >> That's nice. I wished I were in the same situation...
> > > > Yes, it is nice. I have yet to do work for a company providing web
> > > > hosting to consumers, but I can see how it would have some real
> > > > challenges. But it
> > >
> > > It certainly has.
> > >
> > > > synchronization issue. NAS being one. A second is using a few
> > > > "shell" servers that automatically get replicated to your web
> > > > servers seems to be another.
> > >
> > > I've been thinking about that approach too, but it doesn't buy you
> > > much since there are still that morons that use the FS as DB...
> > >
> > > >> Squid should do the job too, more flexibly, but probably slower.
> > > > I played with Squid and it works nicely. Indeed, I liked the fact
> > > > that with Squid I can make my web cluster disappear from outsiders
> > > > and use Squid as a reverse proxy. However, since we dropped the
> > > > requirement for IP-based virtual hosting the point is moot. We will
> > > > be using just a standard configuration where we will DNS
> > > > round-robin between web servers.
> > >
> > > That's the easiest approach, of course. OTOH, I haven't got a very
> > > high opinion of DNS round robin since it essentially still lets the
> > > remote client fuck it up...
> > >
> > >
> > >
> > >
> > > Best regards,
> > >  Gabriel
> > >
> > > -----BEGIN PGP SIGNATURE-----
> > > Version: PGP 6.5i
> > >
> > > iQEVAwUBPBY/HcZa2WpymlDxAQFoUQgAuCZrFy8u5EILeyiLBgjtLuRVcLhX8ItT
> > > 3LfKOnw2ve513rx4F6gT9nVNrapH4jWYtidrBla4Z8xtH3N6Yem9r53To6xCqYpd
> > > GMxv8RZdxuZtXCV92CnDxeKGIZ89nPBPFAsC6sQkDPX3jThf9+t6jI59J9rroqq+
> > > rwP63//vR8Pq63//Q7Lc7/TgAE6jJHs0nAXadiq1mUSwFZVF+nUgPYU3BnN9iyud
> > > 7CLLxYnArXguGZRx2wfdskPiZ7ZCSl5mC78kUimTDHLXrV2VofyzjIJWBcWyMzNA
> > > d9fo9b9OtDKRj3Hnvj5MpDjJySaxDBsyY15NaecYlAVazQIWuRMUyQ==
> > > =5dpk
> > > -----END PGP SIGNATURE-----
> > >
> > >
> > 
> > 
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-isp" in the body of the message
> > 
> 
> - Forrest W. Christian (forrestc@imach.com) AC7DE
> ----------------------------------------------------------------------
> The Innovation Machine Ltd.                              P.O. Box 5749
> http://www.imach.com/                                Helena, MT  59604
> Home of PacketFlux Technogies and BackupDNS.com         (406)-442-6648
> ----------------------------------------------------------------------
>       Protect your personal freedoms - visit http://www.lp.org/
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17 14:46:16 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from niwun.pair.com (niwun.pair.com [209.68.2.70])
	by hub.freebsd.org (Postfix) with SMTP id EDCA737B41D
	for <isp@freebsd.org>; Mon, 17 Dec 2001 14:46:09 -0800 (PST)
Received: (qmail 35688 invoked by uid 3193); 17 Dec 2001 22:46:08 -0000
Received: from localhost (sendmail-bs@127.0.0.1)
  by localhost with SMTP; 17 Dec 2001 22:46:08 -0000
Date: Mon, 17 Dec 2001 17:46:08 -0500 (EST)
From: Mike Silbersack <silby@silby.com>
X-Sender:  <silby@niwun.pair.com>
To: <TD790@aol.com>
Cc: <hackers@freebsd.org>, <isp@freebsd.org>
Subject: Re: 3Com driver problems (fixed)
In-Reply-To: <14a.5dcd50d.294e390f@aol.com>
Message-ID: <Pine.BSF.4.30.0112171726180.28492-100000@niwun.pair.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


On Sun, 16 Dec 2001 TD790@aol.com wrote:

> ping is not a very good test...one of the reasons that most people cant find
> problems generally. plus you want to use smaller packets to get the pps up.
> The ave size packet is under 400 bytes on the net and it better simulates
> real life.  Once you saturate the wire the lockup occurs  rather
> quickly....you have to get to the point where the overflows are happening
> faster than the machine can process the interupts.

Blah blah blah blah blah.  I know ping isn't a great network diagnostic
tool, but it allowed me to see the problem easily.  You're welcome to run
further tests with your flooder of choice to confirm my findings.

The problem with stats interrupts causing slowdown was indeed due to a bug
in our driver, and not some hardware bug.  I have fixed the bug and
committed the fix to -current; the fix will be MFC'd in a day or two,
before the 4.5 codefreeze begins.  In the meantime, you can grab the diff
out of cvsweb if you're interested.

And yes, it was pretty bad.  The reason I didn't notice it too much is
because stats interrupts were disabled under -current as a temporary fix;
that change never got ported back to 4.x.

Mike "Silby" Silbersack


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17 18:39: 3 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from hotmail.com (oe27.pav1.hotmail.com [64.4.30.84])
	by hub.freebsd.org (Postfix) with ESMTP
	id 0F1FA37B405; Mon, 17 Dec 2001 18:38:58 -0800 (PST)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
	 Mon, 17 Dec 2001 18:38:54 -0800
X-Originating-IP: [66.185.84.77]
From: "jack xiao" <jack_xiao99@hotmail.com>
To: <freebsd-net@FreeBSD.ORG>, <freebsd-isp@FreeBSD.ORG>
Subject: Fw: radiusclients questions
Date: Mon, 17 Dec 2001 21:41:00 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_00E5_01C18743.8494FE00"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <OE27aqbC8wSA1XvpFVj000041b7@hotmail.com>
X-OriginalArrivalTime: 18 Dec 2001 02:38:54.0027 (UTC) FILETIME=[225511B0:01C1876D]
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

This is a multi-part message in MIME format.

------=_NextPart_000_00E5_01C18743.8494FE00
Content-Type: text/plain;
	charset="gb2312"
Content-Transfer-Encoding: base64

DQpIaSwNCg0KTm93IEkgd2FudCB0byB1c2UgcmFkaXVzY2xpZW50ICggdmVyc2lvbiAwLjMuMSAp
IHVuZGVyIEZyZWVCU0QgcG9ydHMgYW5kIHVzZSByYWRsb2dpbiB0byBzdWJzdGl0dXRlIG5vcm1h
bCBsb2dpbiBmb3IgUFBQIGxvZ2luIHVzZXIuIEkgaGF2ZSBwb3J0ZWQgcmFkaXVzY2xpZW50IGFu
ZCByYWRsb2dpbiB3b3JrcyB3ZWxsLCBidXQgSSBkb24ndCBrbm93IGhvdyB0byB1c2UgcmFkbG9n
aW4gaW5zdGVhZCBvZiBsb2dpbi4gQW55IGlkZWFzIHdpbGwgYmUgYXBwcmVjaWF0ZWQuDQoNClRo
YW5rcyENCg0KSmFjaw0KDQoNCg0KDQo=

------=_NextPart_000_00E5_01C18743.8494FE00
Content-Type: text/html;
	charset="gb2312"
Content-Transfer-Encoding: base64
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------=_NextPart_000_00E5_01C18743.8494FE00--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17 18:49: 8 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from hotmail.com (oe64.pav1.hotmail.com [64.4.30.199])
	by hub.freebsd.org (Postfix) with ESMTP
	id 5361337B422; Mon, 17 Dec 2001 18:49:00 -0800 (PST)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
	 Mon, 17 Dec 2001 18:48:59 -0800
X-Originating-IP: [66.185.84.77]
From: "jack xiao" <jack_xiao99@hotmail.com>
To: <freebsd-isp@FreeBSD.ORG>, <freebsd-net@FreeBSD.ORG>
Subject: radiusclients questions
Date: Mon, 17 Dec 2001 21:51:06 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0135_01C18744.EE5ECA40"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <OE64e4zadTMVwVn20lb00001d8b@hotmail.com>
X-OriginalArrivalTime: 18 Dec 2001 02:48:59.0445 (UTC) FILETIME=[8B308650:01C1876E]
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

This is a multi-part message in MIME format.

------=_NextPart_000_0135_01C18744.EE5ECA40
Content-Type: text/plain;
	charset="Windows-1252"
Content-Transfer-Encoding: base64

DQpIaSwNCiANCk5vdyBJIHdhbnQgdG8gdXNlIHJhZGl1c2NsaWVudCAoIHZlcnNpb24gMC4zLjEg
KSB1bmRlciBGcmVlQlNEIHBvcnRzIGFuZCB1c2UgcmFkbG9naW4gdG8gc3Vic3RpdHV0ZSBub3Jt
YWwgbG9naW4gZm9yIFBQUCBsb2dpbiB1c2VyLiBJIGhhdmUgcG9ydGVkIHJhZGl1c2NsaWVudCBh
bmQgcmFkbG9naW4gd29ya3Mgd2VsbCwgYnV0IEkgZG9uJ3Qga25vdyBob3cgdG8gdXNlIHJhZGxv
Z2luIGluc3RlYWQgb2YgbG9naW4uIEFueSBpZGVhcyB3aWxsIGJlIGFwcHJlY2lhdGVkLg0KIA0K
VGhhbmtzIQ0KIA0KSmFjaw0KIA0K

------=_NextPart_000_0135_01C18744.EE5ECA40
Content-Type: text/html;
	charset="Windows-1252"
Content-Transfer-Encoding: base64

PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv
L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgaHR0cC1lcXVpdj1Db250ZW50LVR5cGUgY29udGVu
dD0idGV4dC9odG1sOyBjaGFyc2V0PXdpbmRvd3MtMTI1MiI+DQo8TUVUQSBjb250ZW50PSJNU0hU
TUwgNi4wMC4yNjAwLjAiIG5hbWU9R0VORVJBVE9SPg0KPFNUWUxFPjwvU1RZTEU+DQo8L0hFQUQ+
DQo8Qk9EWT4NCjxESVY+PEZPTlQgZmFjZT1BcmlhbCBzaXplPTI+PC9GT05UPjxGT05UIGZhY2U9
QXJpYWwgc2l6ZT0yPjwvRk9OVD4mbmJzcDs8L0RJVj4NCjxESVY+PEZPTlQgZmFjZT1BcmlhbCBz
aXplPTI+SGksPEJSPiZuYnNwOzxCUj5Ob3cgSSB3YW50IHRvIHVzZSByYWRpdXNjbGllbnQgKCAN
CnZlcnNpb24gMC4zLjEgKSB1bmRlciBGcmVlQlNEIHBvcnRzIGFuZCB1c2UgcmFkbG9naW4gdG8g
c3Vic3RpdHV0ZSBub3JtYWwgbG9naW4gDQpmb3IgUFBQIGxvZ2luIHVzZXIuIEkgaGF2ZSBwb3J0
ZWQgcmFkaXVzY2xpZW50IGFuZCByYWRsb2dpbiB3b3JrcyB3ZWxsLCBidXQgSSANCmRvbid0IGtu
b3cgaG93IHRvIHVzZSByYWRsb2dpbiBpbnN0ZWFkIG9mIGxvZ2luLiBBbnkgaWRlYXMgd2lsbCBi
ZSANCmFwcHJlY2lhdGVkLjxCUj4mbmJzcDs8QlI+VGhhbmtzITxCUj4mbmJzcDs8QlI+SmFjazxC
Uj48L0ZPTlQ+Jm5ic3A7PC9ESVY+PC9CT0RZPjwvSFRNTD4NCg==

------=_NextPart_000_0135_01C18744.EE5ECA40--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Dec 17 20:43: 7 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from hotmail.com (oe29.pav1.hotmail.com [64.4.30.86])
	by hub.freebsd.org (Postfix) with ESMTP
	id 2C76737B419; Mon, 17 Dec 2001 20:43:02 -0800 (PST)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
	 Mon, 17 Dec 2001 20:42:57 -0800
X-Originating-IP: [66.185.84.77]
From: "jack xiao" <jack_xiao99@hotmail.com>
To: <freebsd-isp@FreeBSD.ORG>, <freebsd-net@FreeBSD.ORG>
Subject: radius problem
Date: Mon, 17 Dec 2001 23:45:03 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_0013_01C18754.D937CD00"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <OE29gQUgQL20Nd1nHg70000434e@hotmail.com>
X-OriginalArrivalTime: 18 Dec 2001 04:42:57.0014 (UTC) FILETIME=[76B2C160:01C1877E]
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

This is a multi-part message in MIME format.

------=_NextPart_000_0013_01C18754.D937CD00
Content-Type: multipart/alternative;
	boundary="----=_NextPart_001_0014_01C18754.D937CD00"


------=_NextPart_001_0014_01C18754.D937CD00
Content-Type: text/plain;
	charset="gb2312"
Content-Transfer-Encoding: base64

DQo=

------=_NextPart_001_0014_01C18754.D937CD00
Content-Type: text/html;
	charset="gb2312"
Content-Transfer-Encoding: base64

PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv
L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgaHR0cC1lcXVpdj1Db250ZW50LVR5cGUgY29udGVu
dD0idGV4dC9odG1sOyBjaGFyc2V0PWdiMjMxMiI+DQo8TUVUQSBjb250ZW50PSJNU0hUTUwgNi4w
MC4yNjAwLjAiIG5hbWU9R0VORVJBVE9SPg0KPFNUWUxFPjwvU1RZTEU+DQo8L0hFQUQ+DQo8Qk9E
WSBiZ0NvbG9yPSNmZmZmZmY+DQo8RElWPiZuYnNwOzwvRElWPjwvQk9EWT48L0hUTUw+DQo=

------=_NextPart_001_0014_01C18754.D937CD00--

------=_NextPart_000_0013_01C18754.D937CD00
Content-Type: text/plain;
	name="radius problem.txt"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename="radius problem.txt"

Hi,
 
Now I want to use radiusclient ( version 0.3.1 ) under FreeBSD ports 
and use radlogin to substitute normal login for PPP login user. I have 
ported radiusclient and radlogin works well, but I don't know how to use 
radlogin instead of login. Any ideas will be appreciated.
 
Thanks!
 
Jack
------=_NextPart_000_0013_01C18754.D937CD00--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Tue Dec 18  1:33:48 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from arnold.neland.dk (0x3ef34d8c.albnxx2.adsl.tele.dk [62.243.77.140])
	by hub.freebsd.org (Postfix) with ESMTP id EA33037B417
	for <freebsd-isp@freebsd.org>; Tue, 18 Dec 2001 01:33:44 -0800 (PST)
Received: from localhost (localhost [127.0.0.1])
	by arnold.neland.dk (8.11.6/8.11.6) with ESMTP id fBI9ZVD79690
	for <freebsd-isp@freebsd.org>; Tue, 18 Dec 2001 10:35:32 +0100 (CET)
	(envelope-from leifn@neland.dk)
Date: Tue, 18 Dec 2001 10:35:31 +0100 (CET)
From: Leif Neland <leifn@neland.dk>
To: <freebsd-isp@freebsd.org>
Subject: OT: What if registrar folds?
Message-ID: <20011218102924.G79003-100000@arnold.neland.dk>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

If I've registrered a .com-domain at a registrar, but my own nameservers
hold the domain, what happens if the registrar goes bankrupt?

The domain is still registrered in my name, and the GTLD-servers will
continue to point to my nameservers unless somebody actively removes it, i
guess.

It might be an inconvenience if I need to change whois-information, but
nobody can "steal" my domain, right?

As somebody else mentioned, I'm pretty sure some other registrar will buy
the portfolio of customers quickly.

So is there _really_ a reason to stick with overpriced NSI/Verisign?

Leif



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Tue Dec 18  1:52:24 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from kermit.netivity.nl (wc-68.r-195-85-144.essentkabel.com [195.85.144.68])
	by hub.freebsd.org (Postfix) with ESMTP id EDA5837B405
	for <freebsd-isp@freebsd.org>; Tue, 18 Dec 2001 01:52:19 -0800 (PST)
Received: by KERMIT with Internet Mail Service (5.5.2653.19)
	id <YLX3D42N>; Tue, 18 Dec 2001 10:52:13 +0100
Message-ID: <510EAC2065C0D311929200A02472526237A6B9@NETIVITY-FS>
From: Enriko Groen <enriko.groen@netivity.nl>
To: 'Leif Neland' <leifn@neland.dk>, freebsd-isp@freebsd.org
Subject: RE: What if registrar folds?
Date: Tue, 18 Dec 2001 10:52:09 +0100
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain;
	charset="iso-8859-1"
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

> If I've registrered a .com-domain at a registrar, but my own 
> nameservers
> hold the domain, what happens if the registrar goes bankrupt?
> 
> The domain is still registrered in my name, and the GTLD-servers will
> continue to point to my nameservers unless somebody actively 
> removes it, i
> guess.
> 
> It might be an inconvenience if I need to change 
> whois-information, but
> nobody can "steal" my domain, right?

I'm not sure about the legal state of a domain when the registrar goes
bankrupt.
I think that you as the owner will get a chance to re-register/renew the
domain before it is "free".
After the final bankrupt it will probably become a free domain.
 
> As somebody else mentioned, I'm pretty sure some other 
> registrar will buy
> the portfolio of customers quickly.
> 
> So is there _really_ a reason to stick with overpriced NSI/Verisign?

IMHO yes... the Mail form and webinterface they use is quite nice.
I don't know about other registrars, but the ones I've seen until now all
need human interaction.

Although I have good experience with dotearth.com and heard good stuff about
gandi.net and joker.com.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Tue Dec 18  6:18:21 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from federation.addy.com (addy.com [208.11.142.20])
	by hub.freebsd.org (Postfix) with ESMTP id 1DAFA37B416
	for <freebsd-isp@FreeBSD.ORG>; Tue, 18 Dec 2001 06:18:17 -0800 (PST)
Received: from localhost (jim@localhost)
	by federation.addy.com (8.9.3/8.9.3) with ESMTP id JAA23931
	for <freebsd-isp@FreeBSD.ORG>; Tue, 18 Dec 2001 09:18:16 -0500 (EST)
	(envelope-from jim@federation.addy.com)
Date: Tue, 18 Dec 2001 09:18:16 -0500 (EST)
From: Jim Sander <jim@federation.addy.com>
Cc: freebsd-isp@FreeBSD.ORG
Subject: RE: What if registrar folds?
In-Reply-To: <510EAC2065C0D311929200A02472526237A6B9@NETIVITY-FS>
Message-ID: <Pine.BSF.4.10.10112180833410.21367-100000@federation.addy.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

> >  what happens if the registrar goes bankrupt?

   The absolute truth I think is that nobody knows for sure right now.
(witness the recent issues resulting in proposal of a fee escrow system)
But we can guess what might happen- *if* the process were rational...

   Short-term I imagine that domains controlled by that registrar would
continue in a steady-state until such time as the pieces could be put back
together. The only way I can see that causing problems is if you have a
domain that goes "On Hold" just before the registrar dies- you'd be out of
commission for non-payment, but there'd be nobody to pay. (moral of the
story, make sure you keep your account current with your registrar)

   Long-term I think it's likely that before any registrar goes bankrupt
one of their competitors will absorb them- and thus their customers. I
highly doubt any domains would be sold out from under anyone, and suspect
that because of the uniform domain name policy that can't legally happen.
(which is not to guaranty it won't)

   Remember that it's not terribly difficult to do a registrar-transfer,
and unless you're bumping up against the 10-year limit you won't lose any
time that you pay for. So, bottom line is that the risk is probably low.

> networksolutions' web controls

   Contrary to what someone else said, for day-to-day registration
activities I don't think it matters much. As far as I know, only the
odd-ball registrars (for a few ccTLDs) make you involve a human at any
stage of the normal domain life-cycle. The problem (ignoring price) I see
with networksolutions is that their service, from an ISP perspective
especially, is "somewhat lacking."

   That said, please, let's try to avoid a flame-war about
networksolutions, or the "I use <x> and they're good" types of cluttery
discussions. There are plenty of them in the archive already.

-=Jim=- 




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Tue Dec 18  7:18:56 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from smtp013.mail.yahoo.com (smtp013.mail.yahoo.com [216.136.173.57])
	by hub.freebsd.org (Postfix) with SMTP id 3542C37B41A
	for <freebsd-isp@freebsd.org>; Tue, 18 Dec 2001 07:18:53 -0800 (PST)
Received: from ihws.com (HELO ?192.168.0.102?) (63.218.21.114)
  by smtp.mail.vip.sc5.yahoo.com with SMTP; 18 Dec 2001 15:18:53 -0000
User-Agent: Microsoft-Outlook-Express-Macintosh-Edition/5.02.2022
Date: Tue, 18 Dec 2001 10:18:49 -0500
Subject: Simple E-Commerce Solution
From: Frank Laszlo <nez_lists@yahoo.com>
To: <freebsd-isp@freebsd.org>
Message-ID: <B844C889.14B9A%nez_lists@yahoo.com>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


What would be an affordable easy to manage e-commerce solution for FreeBSD
running Apache? possibly perl or php based.. Thanks

-Frank


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Tue Dec 18  8:55:45 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from mail.lkb.lv (ns.lkb.lv [195.13.170.2])
	by hub.freebsd.org (Postfix) with ESMTP id 719DD37B416
	for <FreeBSD-isp@freebsd.org>; Tue, 18 Dec 2001 08:55:33 -0800 (PST)
Received: from ramex1 ([195.13.170.15])
	by mail.lkb.lv (8.11.5/8.11.3) with SMTP id fBIGtME13307
	for <FreeBSD-isp@freebsd.org>; Tue, 18 Dec 2001 18:55:22 +0200 (EET)
	(envelope-from vic@is.lv)
Received: from  ([192.168.203.21]) by ramex1; Tue, 18 Dec 2001 18:53:18 +0200 (EET)
Received: from kaktuss.lkb.lv ([192.168.203.21])           by kaktuss.lkb.lv (Lotus Domino Release 5.0.8)           with SMTP id 2001121818544615:6841 ;           Tue, 18 Dec 2001 18:54:46 +0200 
Received: from is.lv ([192.168.203.247])  by kaktuss.lkb.lv (NAVGW 2.5 bld 90) with SMTP id M2001121818544530406  for <FreeBSD-isp@freebsd.org>; Tue, 18 Dec 2001 18:54:46 +0200
Message-ID: <3C1F74E3.2050306@is.lv>
Date: Tue, 18 Dec 2001 18:54:59 +0200
From: Victor Meirans <vic@is.lv>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.6) Gecko/20011120
X-Accept-Language: en-us
MIME-Version: 1.0
To: FreeBSD-isp <FreeBSD-isp@freebsd.org>
Subject: IDE Raid controllers - question #2
X-MIMETrack: Itemize by SMTP Server on KAKTUSS/LKB/LV(Release 5.0.8 |June 18, 2001) at  12/18/2001 06:54:46 PM, 	Serialize by Router on KAKTUSS/LKB/LV(Release 5.0.8 |June 18, 2001) at 12/18/2001  06:54:46 PM, 	Serialize complete at 12/18/2001 06:54:46 PM
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=windows-1257; format=flowed
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hello all,

Thanks for so many answers, now another question...
Is it possible with IDE Raid controller to make raid 0 with harddrives 
of different sizes? Width vinum I could make 100GB stripe with 3x20GB + 
1x40GB HDD... will it be possible with hardware IDE Raid controller? Or 
I have to use similar disks i.e 4x40GB or 4x20GB??? I'm considering 
buying one of "Promise" IDE Raid controllers...

Thanks in advance,

--
ViC


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Tue Dec 18  9: 1:12 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from mta05-svc.ntlworld.com (mta05-svc.ntlworld.com [62.253.162.45])
	by hub.freebsd.org (Postfix) with ESMTP id 81BDA37B419
	for <FreeBSD-isp@FreeBSD.ORG>; Tue, 18 Dec 2001 09:00:59 -0800 (PST)
Received: from pc1-stme2-0-cust102.cdf.cable.ntl.com ([62.252.56.102])
          by mta05-svc.ntlworld.com
          (InterMail vM.4.01.03.23 201-229-121-123-20010418) with ESMTP
          id <20011218170058.HLOK27606.mta05-svc.ntlworld.com@pc1-stme2-0-cust102.cdf.cable.ntl.com>;
          Tue, 18 Dec 2001 17:00:58 +0000
Received: from lfarr (snorlax.bka.epcdirect.co.uk [192.168.10.200])
	by pc1-stme2-0-cust102.cdf.cable.ntl.com (8.11.3/8.11.3) with ESMTP id fBIH0o061863;
	Tue, 18 Dec 2001 17:00:57 GMT
	(envelope-from freebsd-isp@epcdirect.co.uk)
From: "Lawrence Farr" <freebsd-isp@epcdirect.co.uk>
To: "'Victor Meirans'" <vic@is.lv>,
	"'FreeBSD-isp'" <FreeBSD-isp@FreeBSD.ORG>
Subject: RE: IDE Raid controllers - question #2
Date: Tue, 18 Dec 2001 17:00:52 -0000
Message-ID: <004a01c187e5$910b1e10$c80aa8c0@lfarr>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.3311
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
In-Reply-To: <3C1F74E3.2050306@is.lv>
Importance: Normal
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

The stripes use the entire disk, and are the size of the smallest disk:

eg 2x40Gb 2x20Gb ends up as 4x20Gb if striped together.

Lawrence Farr
EPC Direct Limited 

> -----Original Message-----
> From: owner-freebsd-isp@FreeBSD.ORG 
> [mailto:owner-freebsd-isp@FreeBSD.ORG] On Behalf Of Victor Meirans
> Sent: 18 December 2001 16:55
> To: FreeBSD-isp
> Subject: IDE Raid controllers - question #2
> 
> 
> Hello all,
> 
> Thanks for so many answers, now another question...
> Is it possible with IDE Raid controller to make raid 0 with 
> harddrives 
> of different sizes? Width vinum I could make 100GB stripe 
> with 3x20GB + 
> 1x40GB HDD... will it be possible with hardware IDE Raid 
> controller? Or 
> I have to use similar disks i.e 4x40GB or 4x20GB??? I'm considering 
> buying one of "Promise" IDE Raid controllers...
> 
> Thanks in advance,
> 
> --
> ViC
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Tue Dec 18 13: 8:52 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from smtp1.amigo.net (smtp1.amigo.net [209.94.64.30])
	by hub.freebsd.org (Postfix) with ESMTP id 99AFC37B405
	for <freebsd-isp@freebsd.org>; Tue, 18 Dec 2001 13:08:43 -0800 (PST)
Received: from there (billing.amigo.net [209.94.67.250])
	by smtp1.amigo.net (8.11.4/8.11.4) with SMTP id fBIL8kr24601
	for <freebsd-isp@freebsd.org>; Tue, 18 Dec 2001 14:08:46 -0700 (MST)
	(envelope-from randys@amigo.net)
Message-Id: <200112182108.fBIL8kr24601@smtp1.amigo.net>
Content-Type: text/plain;
  charset="iso-8859-1"
From: Randy Smith <randys@amigo.net>
Organization: Amigo.Net
To: freebsd-isp@freebsd.org
Subject: Sendmail issue?
Date: Tue, 18 Dec 2001 14:09:17 -0700
X-Mailer: KMail [version 1.3.1]
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hi all,

I am having what looks like a sendmail issue on my 4.4-R smtp server. I am 
getting hundreds of lines like this in /var/log/messages:

Dec 18 13:58:01 smtp1 sendmail[23994]: fBIDmVs10046: SYSERR(root): putbody: 
write error

I couldn't find anything on it on sendmail's site. Can someone point me to 
the right place?

Thanks,

-- 
Randy Smith
Amigo.Net Systems Administrator
1-719-589-6100 x 4185
http://www.amigo.net/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Tue Dec 18 13:13:45 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from smtp.kka.com (smtp.kka.com [63.141.65.2])
	by hub.freebsd.org (Postfix) with ESMTP id 9508337B405
	for <freebsd-isp@freebsd.org>; Tue, 18 Dec 2001 13:13:40 -0800 (PST)
Subject: Re: Sendmail issue?
To: freebsd-isp@freebsd.org
X-Mailer: Lotus Notes Release 5.0.8  June 18, 2001
Message-ID: <OF92E01928.ED446589-ON86256B26.007441A6@kka.com>
From: Eric_Stanfield@kenokozie.com
Date: Tue, 18 Dec 2001 15:10:32 -0600
X-MIMETrack: Serialize by Router on Notes1st/Keno(Release 5.0.4 |June 8, 2000) at 12/18/2001
 03:10:34 PM
MIME-Version: 1.0
Content-type: text/plain; charset=us-ascii
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


Quick search for 'putbody: write error' on www.deja.com yieleded tons of
info.

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Eric Stanfield, K2Access
Keno Kozie Associates
222 N LaSalle #1500
Chicago, IL 60606
(312) 332-3000




                                                                                                             
                    Randy Smith                                                                              
                    <randys@amigo.net>         To:     freebsd-isp@freebsd.org                               
                    Sent by:                   cc:                                                           
                    owner-freebsd-isp@F        Subject:     Sendmail issue?                                  
                    reeBSD.ORG                                                                               
                                                                                                             
                                                                                                             
                    12/18/2001 03:09 PM                                                                      
                                                                                                             
                                                                                                             



Hi all,

I am having what looks like a sendmail issue on my 4.4-R smtp server. I am
getting hundreds of lines like this in /var/log/messages:

Dec 18 13:58:01 smtp1 sendmail[23994]: fBIDmVs10046: SYSERR(root): putbody:

write error

I couldn't find anything on it on sendmail's site. Can someone point me to
the right place?

Thanks,

--
Randy Smith
Amigo.Net Systems Administrator
1-719-589-6100 x 4185
http://www.amigo.net/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Tue Dec 18 14:22:42 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from omnis.com (omnis-mail.omnis.com [216.239.128.28])
	by hub.freebsd.org (Postfix) with SMTP id 3365237B41B
	for <freebsd-isp@freebsd.org>; Tue, 18 Dec 2001 14:22:25 -0800 (PST)
Received: (qmail 18972 invoked from network); 18 Dec 2001 22:22:23 -0000
Received: from brad.omnis.com (HELO brad) (216.239.128.128)
  by omnis-mail.omnis.com with SMTP; 18 Dec 2001 22:22:23 -0000
From: "Brad Schuetz" <brad@omnis.com>
To: <freebsd-isp@freebsd.org>
Subject: RE: What if registrar folds?
Date: Tue, 18 Dec 2001 14:22:23 -0800
Organization: Omnis Network, LLC
Message-ID: <000801c18812$77246fb0$8080efd8@OMNIS.COM>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2627
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
In-Reply-To: <20011218102924.G79003-100000@arnold.neland.dk>
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

As a registrar I can tell you it's been thought of.  There are
agreements in place with ICANN for every registrar that covers the
possibility of an individual registrar going bankrupt.  Your domain is
safe.

I obviously have bias, but I don't see why anyone would stick with NSI.
:)

-Brad
Sys Admin
Omnis Network, LLC

-----Original Message-----
From: owner-freebsd-isp@FreeBSD.ORG
[mailto:owner-freebsd-isp@FreeBSD.ORG] On Behalf Of Leif Neland
Sent: Tuesday, December 18, 2001 1:36 AM
To: freebsd-isp@freebsd.org
Subject: OT: What if registrar folds?

If I've registrered a .com-domain at a registrar, but my own nameservers
hold the domain, what happens if the registrar goes bankrupt?

The domain is still registrered in my name, and the GTLD-servers will
continue to point to my nameservers unless somebody actively removes it,
i
guess.

It might be an inconvenience if I need to change whois-information, but
nobody can "steal" my domain, right?

As somebody else mentioned, I'm pretty sure some other registrar will
buy
the portfolio of customers quickly.

So is there _really_ a reason to stick with overpriced NSI/Verisign?

Leif



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19  0:53:19 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from mail.voljatel.si (mail.voljatel.si [217.72.64.15])
	by hub.freebsd.org (Postfix) with ESMTP id 6E60637B419
	for <freebsd-isp@freebsd.org>; Wed, 19 Dec 2001 00:53:16 -0800 (PST)
Received: from pxna.hide.voljatel.si (unknown [217.72.64.8])
	by mail.voljatel.si (Postfix) with SMTP id 4689853501
	for <freebsd-isp@freebsd.org>; Tue, 18 Dec 2001 08:35:20 +0100 (CET)
Date: Tue, 18 Dec 2001 08:35:31 +0100
From: Damir Horvat <damir@voljatel.si>
To: freebsd-isp@freebsd.org
Subject: Re: vrrpd doesn't work
Message-Id: <20011218083531.65d26d40.damir@voljatel.si>
In-Reply-To: <20011217081901.62776.qmail@web20102.mail.yahoo.com>
References: <20011217081901.62776.qmail@web20102.mail.yahoo.com>
Organization: Voljatel telekomunikacije d.d.
X-Mailer: Sylpheed version 0.6.1 (GTK+ 1.2.10; i386--freebsd4.4)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Mon, 17 Dec 2001 09:19:01 +0100 (CET)
Fabrizio Ravazzini <freefabri@yahoo.it> wrote:

> Hello all I've installed vrrpd 0.2 from the ports on
> freebsd 4.3, if I launch it I've got the errors:
> 
> Indio# vrrpd -i ed0 -v 1 -p 150 192.168.0.90
> Dec 16 21:01:27 Indio vrrpd[824]: starting
> Dec 16 21:01:27 Indio vrrpd[824]: router 1 init
> Dec 16 21:01:30 Indio vrrpd[824]: setting master 1
> Dec 16 21:01:30 Indio vrrpd[824]: ioctl (set lladdr):
> Inappropriate ioctl for device
> Dec 16 21:01:30 Indio vrrpd[824]: ioctl (set lladdr):
> Inappropriate ioctl for device
> Dec 16 21:01:30 Indio vrrpd[824]: Can't SIOCADDMULTI
> on ed0: Can't assign requested address
> Dec 16 21:01:30 Indio vrrpd[824]: Can't SIOCADDMULTI
> on ed0: Can't assign requested address

Use freevrrpd instead. It's RFC 2338 Compliant. More infos at
http://conan.lip6.fr/~spe/

I've try it and it works nice. Current DL version is 0.8 which has error
in config file - space character after device name ("fxp0 "). Get rid of
that space and it'll work.

regards,
Damir Horvat

-- 
.................................
Damir Horvat
System administrator
VOLJATEL telekomunikacije d.d.
Smartinska 106
SI-1000 Ljubljana
Slovenia

Tel. +386.(0)1.5875 832
Fax. +386.(0)1.5875 899
www.voljatel.si
E-mail: damir.horvat@voljatel.si
.................................

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19  8:31:48 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from c003.snv.cp.net (c003-h000.c003.snv.cp.net [209.228.32.214])
	by hub.freebsd.org (Postfix) with SMTP id 1BC3437B405
	for <freebsd-isp@freebsd.org>; Wed, 19 Dec 2001 08:31:44 -0800 (PST)
Received: (cpmta 17596 invoked from network); 19 Dec 2001 08:31:42 -0800
Received: from 216.227.100.85 (HELO vector)
  by smtp.telocity.com (209.228.32.214) with SMTP; 19 Dec 2001 08:31:42 -0800
X-Sent: 19 Dec 2001 16:31:42 GMT
From: "Dustin Puryear" <dpuryear@usa.net>
To: <freebsd-isp@freebsd.org>
Subject: Monitoring Performance
Date: Wed, 19 Dec 2001 10:39:58 -0600
Message-ID: <PGECILGGNJGDPJKLFEMIMEEFCKAA.dpuryear@usa.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
In-Reply-To: <20011218083531.65d26d40.damir@voljatel.si>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Importance: Normal
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

We would like to monitor performance over a given time interval for our
FreeBSD 4.4-RELEASE machines. (These machines will be used in a web hosting
and database serving capacity, so we would like to create a baseline before
they go in production.)  The hope is that we will have available to us the
same level of information as that provided by sar on SysV systems. Is
something like that available? I realize that system accounting (sa) is
available, but that doesn't provide information such as disk I/O, network
I/O, and detailed memory usage breakdowns(core, virtual, swap in, swap out,
etc).

Can anyone point me in the right direction? I looked in ports, but didn't
find anything that came close to providing the detail that we need.

Regards, Dustin

> -----Original Message-----
> From: owner-freebsd-isp@FreeBSD.ORG
> [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Damir Horvat
> Sent: Tuesday, December 18, 2001 1:36 AM
> To: freebsd-isp@freebsd.org
> Subject: Re: vrrpd doesn't work
>
>
> On Mon, 17 Dec 2001 09:19:01 +0100 (CET)
> Fabrizio Ravazzini <freefabri@yahoo.it> wrote:
>
> > Hello all I've installed vrrpd 0.2 from the ports on
> > freebsd 4.3, if I launch it I've got the errors:
> >
> > Indio# vrrpd -i ed0 -v 1 -p 150 192.168.0.90
> > Dec 16 21:01:27 Indio vrrpd[824]: starting
> > Dec 16 21:01:27 Indio vrrpd[824]: router 1 init
> > Dec 16 21:01:30 Indio vrrpd[824]: setting master 1
> > Dec 16 21:01:30 Indio vrrpd[824]: ioctl (set lladdr):
> > Inappropriate ioctl for device
> > Dec 16 21:01:30 Indio vrrpd[824]: ioctl (set lladdr):
> > Inappropriate ioctl for device
> > Dec 16 21:01:30 Indio vrrpd[824]: Can't SIOCADDMULTI
> > on ed0: Can't assign requested address
> > Dec 16 21:01:30 Indio vrrpd[824]: Can't SIOCADDMULTI
> > on ed0: Can't assign requested address
>
> Use freevrrpd instead. It's RFC 2338 Compliant. More infos at
> http://conan.lip6.fr/~spe/
>
> I've try it and it works nice. Current DL version is 0.8 which has error
> in config file - space character after device name ("fxp0 "). Get rid of
> that space and it'll work.
>
> regards,
> Damir Horvat
>
> --
> .................................
> Damir Horvat
> System administrator
> VOLJATEL telekomunikacije d.d.
> Smartinska 106
> SI-1000 Ljubljana
> Slovenia
>
> Tel. +386.(0)1.5875 832
> Fax. +386.(0)1.5875 899
> www.voljatel.si
> E-mail: damir.horvat@voljatel.si
> .................................
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19  8:53:46 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from lily.ezo.net (lily.ezo.net [206.102.130.13])
	by hub.freebsd.org (Postfix) with ESMTP id 2136537B405
	for <freebsd-isp@freebsd.org>; Wed, 19 Dec 2001 08:53:40 -0800 (PST)
Received: from savvyd (c3-1a119.neo.rr.com [24.93.230.119])
	by lily.ezo.net (8.11.3/8.11.3) with SMTP id fBJGtuN08712;
	Wed, 19 Dec 2001 11:55:56 -0500 (EST)
Message-ID: <013b01c188ad$ea3bc570$22b197ce@ezo.net>
From: "Jim Flowers" <jflowers@ezo.net>
To: <portmaster-users@portmasters.com>, <freebsd-isp@freebsd.org>
Subject: Infrastructure Design with Portmasters and FreeBSD/Zebra (long)
Date: Wed, 19 Dec 2001 11:55:06 -0500
Organization: EZNets, Inc.
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Our current ISP infrastructure has a head-end connection to the Internet and
a number of remote POPs at the end of point-to-point connections.  The
Internet routers are IRX-211s and the pop-connecting routers are IRX-114s.
Customer connections at the pops include dialup via PM3s and point-to-point
dedicated via fbsd routers.  5 subnetted class C address blocks are used
including /30 on the numbered point-to-point links.  Routing is ospf
(Zebra-0.92a on fbsd).  Additional Internet sources are being added to
several of the POPs using BGP routing as are some inter-pop telecom links
with ospf.

I am considering renumbering all of the interior (to the Internet)
infrastructure subnets to RFC1918 private addresses, primarily to promote
security but also to reclaim public addresses.  Customers, both dialup and
dedicated, would still have public addresses routed by ospf over the RFC1918
infrastructure to allow full access to Internet services.  Local servers
that require access to the Internet connections would have public addresses
on their own network allowing connections to the Internet via the RFC1918
infrastructure.  Customers would also have the option to connect via a
secured public subnet.

I question that a PM3 with a private Ethernet interface and a public
assigned address pool will work.  I think connections would just be routed
by ospf instead of proxy arp so it would be OK.  Is this correct?

This layout also relies on a web proxy (squid) host with a secondary public
address on the RFC1918 subnetwork to allow http connections to Internet
hosts and other cache servers.  Eliminates loading router to unsecured
public subnet that would result if the web proxy host were placed there.
Seems a compromise to the concept though explicit filtering at the IRX-211
could minimize the vulnerability.  Opinions?

I am also thinking of connecting all 3 subnets (private, public and public
secured) to a vlan segmented level 2 switch to take away sniffing capability
from a compromised host (mirrored to the MGMT host for management use).
Will this introduce additional problems?

Any other caveats?

Alternate suggestions?

Thanks.

Fixed width charcter spacing ASCII map follow:

POP layout

================= Internet
    |
    |                    ]--------> to previous POP (RFC1019)
   [IRX-211]     [IRX-411]--------> to next POP (RFC1918)
    |    |           |
    |    +--+--------+-------+-------+---- RFC1918 subnet
    |       |        |       |       |
    |     [W/P]     [R]    [PM3]    [R]
    |                |       |       +--------> ptp
    |                |       Unsecure Customers (public)
    |                |
    |                +----------+-- unsecured public subnet
    |                           |
    |    [W/P]    [MGMT]    [servers]
    |      |         |
    +------+---------+-------+---- secured (public) subnet
           |         |       |
       [servers]   [PM3]    [R]
       (secure)      |       +--------> ptp
                     Secure Customers (public)

IRX-211 and PM3 for unsecured network uses minimal filtering
IRX-211 and PM3 for secured network uses maximal filtering
RFC1918 addresses can only be reached from secure subnet
Unsecure customers may use W/P (web proxy)
Secure customers must use W/P
Management from Internet requires first to connect to MGMT host
Management by dialup to directly connected subnet only


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 10:26:33 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from knight.astranet.lv (knight.astranet.lv [62.85.45.36])
	by hub.freebsd.org (Postfix) with ESMTP id 97CE337B41A
	for <freebsd-isp@FreeBSD.ORG>; Wed, 19 Dec 2001 10:26:27 -0800 (PST)
Received: from weird ([159.148.83.150])
	by knight.astranet.lv (8.11.3/8.11.3) with SMTP id fBJIQfT98812
	for <freebsd-isp@FreeBSD.ORG>; Wed, 19 Dec 2001 20:26:42 +0200 (EET)
	(envelope-from matiss@astranet.lv)
Message-ID: <007c01c188ba$cb94dd70$0300a8c0@weird>
From: "Matiss Elsbergs" <matiss@astranet.lv>
To: <freebsd-isp@FreeBSD.ORG>
Subject: forwarding surfers..
Date: Wed, 19 Dec 2001 20:27:13 +0200
MIME-Version: 1.0
Content-Type: text/plain;
	charset="koi8-r"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hello there, fellow owners of many system processes..

Explanation:

I have a web server, which must display a one page to one network [ let's
say network A ], and the other one - to all other internet. And, it must be
done like that: some application [ perhaps ipfw ] checks if the IP belongs
to network A. If yes, then nothing's altered, and it goes to web page
sitting right there on let's say 159.148.108.4. If it belongs to other
Internet, [ which accesses the page by the same URL ], it goes to let's say
159.148.108.5. Is it possible?



With best regards -
Matiss Elsbergs,
Astranet IS Hostmaster
+371 6435911



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 10:39:49 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from hermes.intergate.ca (hermes.intergate.ca [207.34.179.108])
	by hub.freebsd.org (Postfix) with SMTP id 0972437B417
	for <freebsd-isp@freebsd.org>; Wed, 19 Dec 2001 10:39:39 -0800 (PST)
Received: (qmail 98531 invoked by uid 1007); 19 Dec 2001 19:20:40 -0000
Received: from tim@ke.uu.net by hermes.intergate.ca with qmail-scanner-0.93 (uvscan: v4.0.50/v4176. . Clean. Processed in 0.745521 secs); 19/12/2001 11:20:40
Received: from gateway-208.181.231.146.intergate.ca (HELO r0u5c9.ke.uu.net) (208.181.231.146)
  by hermes.intergate.ca with SMTP; 19 Dec 2001 19:20:39 -0000
Message-Id: <5.1.0.14.0.20011219102837.0244c980@pop.uunet.co.ke>
X-Sender: tpriebe@pop.uunet.co.ke
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Wed, 19 Dec 2001 10:34:50 -0800
To: Fabrizio Ravazzini <freefabri@yahoo.it>,
	freebsd-cluster@freebsd.org
From: Tim Priebe <tim@ke.uu.net>
Subject: Re: Bridge/Firewall cluster?
Cc: freebsd-isp@freebsd.org
In-Reply-To: <20011217083812.63311.qmail@web20108.mail.yahoo.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"; format=flowed
Content-Transfer-Encoding: quoted-printable
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

The problem with this is it would duplicate packets. My solution to this=20
was to not use bridging, but to route through the firewall, using dynamic=20
routing. As long as everything in the DMZ can understand some routing=20
protocol you will be fine. The Cisco advertises default to the two=20
firewalls, and the firewalls redistribute learned and directly connected=20
routes. You can limit which hosts you learn routes from in your firewall=20
rules, depending on the protocol used.

Tim.

At 09:38 AM 12/17/01 +0100, Fabrizio Ravazzini wrote:
>Hello all I've done a bridge/firewall to connect a dmz
>to Internet,this is the scheme:
>
>              Internet
>                |
>                |
>              Router cisco
>                |
>                | rl0
>             Fbsd bridge/FW
>                | rl1
>                |
>               DMZ
>
>The public ip of the cisco is like 200.20.20.1
>Then rl0 200.20.20.3.
>I want to make this bridge high available putting
>another freebsd bridge machine so that if one goes
>down   there is the other and the dmz is still
>available.
>Can I put another Fbsd bridge between the cisco and
>the dmz like this scheme:
>
>
>              Internet
>                |
>                |
>              Router cisco
>                |
>                |________________
>                | rl0            |
>               Fbsd              |ed0
>             bridge/FW          Fbsd
>                | rl1           Bridge/FW
>                |________________|
>                |
>               DMZ
>
>For example ed0 could be 200.20.20.5, perhaps is
>stupid question, but can it works?
>Or is there other solutions?
>Any help would be appreciated.
>Bye
>
>
>______________________________________________________________________
>
>Iscriviti al Meglio della Settimana, la newsletter di Yahoo!
>Per saperne di pi=F9 vai alla pagina: http://buongiorno.yahoo.it
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-isp" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 11:18: 6 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from white.netsurf.net (White.NetSurf.Net [206.186.135.4])
	by hub.freebsd.org (Postfix) with ESMTP id 789FD37B427
	for <freebsd-isp@freebsd.org>; Wed, 19 Dec 2001 11:17:50 -0800 (PST)
Received: from localhost (kadamski@localhost)
	by white.netsurf.net (8.9.3/8.9.3/Debian 8.9.3-21) with ESMTP id OAA32497;
	Wed, 19 Dec 2001 14:17:43 -0500
Date: Wed, 19 Dec 2001 14:17:43 -0500 (EST)
From: Krzysztof Adamski <kadamski@netsurf.net>
To: Jim Flowers <jflowers@ezo.net>
Cc: portmaster-users@portmasters.com, freebsd-isp@freebsd.org
Subject: Re: (PM) Infrastructure Design with Portmasters and FreeBSD/Zebra
 (long)
In-Reply-To: <013b01c188ad$ea3bc570$22b197ce@ezo.net>
Message-ID: <Pine.LNX.4.21.0112191413480.4776-100000@white.netsurf.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Replacing routable IPs with RFC1918 on a PM will work just fine, but there
is one problem with it. It breaks Path-MTU-discovery protocol. This would
be a problem for routers that can have different MTU size of different
interfaces, like a PM with dial in users.
If you are efficiently using your address space you should not have a
problem with getting more addresses.

K

 On Wed, 19 Dec 2001, Jim Flowers wrote:

> Our current ISP infrastructure has a head-end connection to the Internet and
> a number of remote POPs at the end of point-to-point connections.  The
> Internet routers are IRX-211s and the pop-connecting routers are IRX-114s.
> Customer connections at the pops include dialup via PM3s and point-to-point
> dedicated via fbsd routers.  5 subnetted class C address blocks are used
> including /30 on the numbered point-to-point links.  Routing is ospf
> (Zebra-0.92a on fbsd).  Additional Internet sources are being added to
> several of the POPs using BGP routing as are some inter-pop telecom links
> with ospf.
> 
> I am considering renumbering all of the interior (to the Internet)
> infrastructure subnets to RFC1918 private addresses, primarily to promote
> security but also to reclaim public addresses.  Customers, both dialup and
> dedicated, would still have public addresses routed by ospf over the RFC1918
> infrastructure to allow full access to Internet services.  Local servers
> that require access to the Internet connections would have public addresses
> on their own network allowing connections to the Internet via the RFC1918
> infrastructure.  Customers would also have the option to connect via a
> secured public subnet.
> 
> I question that a PM3 with a private Ethernet interface and a public
> assigned address pool will work.  I think connections would just be routed
> by ospf instead of proxy arp so it would be OK.  Is this correct?
> 
> This layout also relies on a web proxy (squid) host with a secondary public
> address on the RFC1918 subnetwork to allow http connections to Internet
> hosts and other cache servers.  Eliminates loading router to unsecured
> public subnet that would result if the web proxy host were placed there.
> Seems a compromise to the concept though explicit filtering at the IRX-211
> could minimize the vulnerability.  Opinions?
> 
> I am also thinking of connecting all 3 subnets (private, public and public
> secured) to a vlan segmented level 2 switch to take away sniffing capability
> from a compromised host (mirrored to the MGMT host for management use).
> Will this introduce additional problems?
> 
> Any other caveats?
> 
> Alternate suggestions?
> 
> Thanks.
> 
> Fixed width charcter spacing ASCII map follow:
> 
> POP layout
> 
> ================= Internet
>     |
>     |                    ]--------> to previous POP (RFC1019)
>    [IRX-211]     [IRX-411]--------> to next POP (RFC1918)
>     |    |           |
>     |    +--+--------+-------+-------+---- RFC1918 subnet
>     |       |        |       |       |
>     |     [W/P]     [R]    [PM3]    [R]
>     |                |       |       +--------> ptp
>     |                |       Unsecure Customers (public)
>     |                |
>     |                +----------+-- unsecured public subnet
>     |                           |
>     |    [W/P]    [MGMT]    [servers]
>     |      |         |
>     +------+---------+-------+---- secured (public) subnet
>            |         |       |
>        [servers]   [PM3]    [R]
>        (secure)      |       +--------> ptp
>                      Secure Customers (public)
> 
> IRX-211 and PM3 for unsecured network uses minimal filtering
> IRX-211 and PM3 for secured network uses maximal filtering
> RFC1918 addresses can only be reached from secure subnet
> Unsecure customers may use W/P (web proxy)
> Secure customers must use W/P
> Management from Internet requires first to connect to MGMT host
> Management by dialup to directly connected subnet only
> 
> -
> To unsubscribe, email 'majordomo@portmasters.com' with
> 'unsubscribe portmaster-users' in the body of the message.
> List archive: <URL:http://www.portmasters.com/archives/>
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 11:20:57 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from thor.ghim.org (thor.ghim.org [209.249.182.115])
	by hub.freebsd.org (Postfix) with ESMTP id 9479837B419
	for <freebsd-isp@FreeBSD.ORG>; Wed, 19 Dec 2001 11:20:48 -0800 (PST)
Received: from electra (electra.nexus [192.168.1.126])
	by thor.ghim.org (8.11.3/8.11.3) with SMTP id fBJJKOc03335;
	Wed, 19 Dec 2001 19:20:24 GMT
Received: by electra (sSMTP sendmail emulation); Wed, 19 Dec 2001 19:20:24 +0000
Date: Wed, 19 Dec 2001 19:20:24 +0000
From: George Lewis <schvin@schvin.net>
To: Matiss Elsbergs <matiss@astranet.lv>
Cc: freebsd-isp@FreeBSD.ORG
Subject: Re: forwarding surfers..
Message-ID: <20011219192023.D30870@schvin.net>
References: <007c01c188ba$cb94dd70$0300a8c0@weird>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <007c01c188ba$cb94dd70$0300a8c0@weird>; from matiss@astranet.lv on Wed, Dec 19, 2001 at 08:27:13PM +0200
X-PGP-Fingerprint: 3D79 875A 9E33 E7BE E868 7EFA A703 5DDA A7C0 9E2C
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Matiss Elsbergs (matiss@astranet.lv) wrote:
> Hello there, fellow owners of many system processes..
> 
> Explanation:
> 
> I have a web server, which must display a one page to one network [ let's
> say network A ], and the other one - to all other internet. And, it must be
> done like that: some application [ perhaps ipfw ] checks if the IP belongs
> to network A. If yes, then nothing's altered, and it goes to web page
> sitting right there on let's say 159.148.108.4. If it belongs to other
> Internet, [ which accesses the page by the same URL ], it goes to let's say
> 159.148.108.5. Is it possible?

Matiss,

You'd probably be best off to let an HTTP server like apache make
the distinctions, you can setup rules based on the inbound IP...
that should do quite nicely for what you need.

If you are not using Apache, other HTTP servers may have similar
features, or you could always put an Apache server with
mod_proxy/mod_rewrite in front of the "real" HTTP server.

HTH,

George

> 
> 
> 
> With best regards -
> Matiss Elsbergs,
> Astranet IS Hostmaster
> +371 6435911
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message

-- 
http://schvin.net/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 13:29:26 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from workhorse.iMach.com (workhorse.iMach.com [206.127.77.89])
	by hub.freebsd.org (Postfix) with ESMTP id 8304437B405
	for <freebsd-isp@FreeBSD.ORG>; Wed, 19 Dec 2001 13:29:18 -0800 (PST)
Received: from localhost (forrestc@localhost)
	by workhorse.iMach.com (8.9.3/8.9.3) with ESMTP id OAA18861;
	Wed, 19 Dec 2001 14:20:06 -0700 (MST)
Date: Wed, 19 Dec 2001 14:20:06 -0700 (MST)
From: "Forrest W. Christian" <forrestc@imach.com>
To: Jim Flowers <jflowers@ezo.net>
Cc: portmaster-users@portmasters.com, freebsd-isp@FreeBSD.ORG
Subject: Re: Infrastructure Design with Portmasters and FreeBSD/Zebra (long)
In-Reply-To: <013b01c188ad$ea3bc570$22b197ce@ezo.net>
Message-ID: <Pine.BSF.4.21.0112191352570.18716-100000@workhorse.iMach.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

I'm going to be very specific about this:

Using 1918 space as you have described is bad.  Very bad.

To make a long story short, if you use 1918 space, it will break things in
weird and unusual ways.  The reason for this is a lot of providers discard
any packets with a source address of 1918.  Certain internet protocols
require each router along the path to be able to reply with ICMP messages
with their own address.  If they are in the 1918 space, these will most
likely be discarded causing the functionality which needs these to break.

Most notably, this will break MTU path discovery which can cause a whole
set of other problems which I won't go into.  It also will prevent ICMP
Source qwench messages which are used to provide for some additional flow
control by certain ip stacks.

The only place to use 1918 space is behind a NAT box or on a network which
will never be connected to the internet.

On Wed, 19 Dec 2001, Jim Flowers wrote:

> Date: Wed, 19 Dec 2001 11:55:06 -0500
> From: Jim Flowers <jflowers@ezo.net>
> To: portmaster-users@portmasters.com, freebsd-isp@FreeBSD.ORG
> Subject: Infrastructure Design with Portmasters and FreeBSD/Zebra (long)
> 
> Our current ISP infrastructure has a head-end connection to the Internet and
> a number of remote POPs at the end of point-to-point connections.  The
> Internet routers are IRX-211s and the pop-connecting routers are IRX-114s.
> Customer connections at the pops include dialup via PM3s and point-to-point
> dedicated via fbsd routers.  5 subnetted class C address blocks are used
> including /30 on the numbered point-to-point links.  Routing is ospf
> (Zebra-0.92a on fbsd).  Additional Internet sources are being added to
> several of the POPs using BGP routing as are some inter-pop telecom links
> with ospf.
> 
> I am considering renumbering all of the interior (to the Internet)
> infrastructure subnets to RFC1918 private addresses, primarily to promote
> security but also to reclaim public addresses.  Customers, both dialup and
> dedicated, would still have public addresses routed by ospf over the RFC1918
> infrastructure to allow full access to Internet services.  Local servers
> that require access to the Internet connections would have public addresses
> on their own network allowing connections to the Internet via the RFC1918
> infrastructure.  Customers would also have the option to connect via a
> secured public subnet.
> 
> I question that a PM3 with a private Ethernet interface and a public
> assigned address pool will work.  I think connections would just be routed
> by ospf instead of proxy arp so it would be OK.  Is this correct?
> 
> This layout also relies on a web proxy (squid) host with a secondary public
> address on the RFC1918 subnetwork to allow http connections to Internet
> hosts and other cache servers.  Eliminates loading router to unsecured
> public subnet that would result if the web proxy host were placed there.
> Seems a compromise to the concept though explicit filtering at the IRX-211
> could minimize the vulnerability.  Opinions?
> 
> I am also thinking of connecting all 3 subnets (private, public and public
> secured) to a vlan segmented level 2 switch to take away sniffing capability
> from a compromised host (mirrored to the MGMT host for management use).
> Will this introduce additional problems?
> 
> Any other caveats?
> 
> Alternate suggestions?
> 
> Thanks.
> 
> Fixed width charcter spacing ASCII map follow:
> 
> POP layout
> 
> ================= Internet
>     |
>     |                    ]--------> to previous POP (RFC1019)
>    [IRX-211]     [IRX-411]--------> to next POP (RFC1918)
>     |    |           |
>     |    +--+--------+-------+-------+---- RFC1918 subnet
>     |       |        |       |       |
>     |     [W/P]     [R]    [PM3]    [R]
>     |                |       |       +--------> ptp
>     |                |       Unsecure Customers (public)
>     |                |
>     |                +----------+-- unsecured public subnet
>     |                           |
>     |    [W/P]    [MGMT]    [servers]
>     |      |         |
>     +------+---------+-------+---- secured (public) subnet
>            |         |       |
>        [servers]   [PM3]    [R]
>        (secure)      |       +--------> ptp
>                      Secure Customers (public)
> 
> IRX-211 and PM3 for unsecured network uses minimal filtering
> IRX-211 and PM3 for secured network uses maximal filtering
> RFC1918 addresses can only be reached from secure subnet
> Unsecure customers may use W/P (web proxy)
> Secure customers must use W/P
> Management from Internet requires first to connect to MGMT host
> Management by dialup to directly connected subnet only
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 

- Forrest W. Christian (forrestc@imach.com) AC7DE
----------------------------------------------------------------------
The Innovation Machine Ltd.                              P.O. Box 5749
http://www.imach.com/                                Helena, MT  59604
Home of PacketFlux Technogies and BackupDNS.com         (406)-442-6648
----------------------------------------------------------------------
      Protect your personal freedoms - visit http://www.lp.org/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 13:33:51 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from infiniteloop.ca (infiniteloop.ca [216.126.86.53])
	by hub.freebsd.org (Postfix) with ESMTP id A8A7137B425
	for <freebsd-isp@FreeBSD.ORG>; Wed, 19 Dec 2001 13:33:14 -0800 (PST)
Received: from localhost (localhost [127.0.0.1])
	by infiniteloop.ca (Postfix) with ESMTP
	id 63E2C220; Wed, 19 Dec 2001 16:33:13 -0500 (EST)
Received: from blake (CPE0050da7c7e5d.cpe.net.cable.rogers.com [24.101.32.246])
	(using TLSv1 with cipher RC4-MD5 (128/128 bits))
	(Client did not present a certificate)
	by infiniteloop.ca (Postfix) with ESMTP
	id 135AA20D; Wed, 19 Dec 2001 16:33:12 -0500 (EST)
From: "Blake Crosby" <dev@samurai.com>
To: "Forrest W. Christian" <forrestc@imach.com>,
	"Jim Flowers" <jflowers@ezo.net>
Cc: <portmaster-users@portmasters.com>, <freebsd-isp@FreeBSD.ORG>
Subject: RE: Infrastructure Design with Portmasters and FreeBSD/Zebra (long)
Date: Wed, 19 Dec 2001 16:33:09 -0500
Message-ID: <JAEEIJKIHAONENKPFCCPGENKCBAA.dev@samurai.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
In-Reply-To: <Pine.BSF.4.21.0112191352570.18716-100000@workhorse.iMach.com>
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Virus-Scanned: by AMaViS snapshot-20010714
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hmm

I am pretty sure the rogers@home network here uses 10/8 network space for
their internal routing:

A traceroute from my box on the rogers@home network to yahoo.com (abridged):

 2. 24.101.32.1
 3. 24.112.249.1
 4. 10.0.185.1
 5. 24.7.74.29
 6. 24.7.69.41

Notice that 10/8 ip address in there (there used to be more)

Blake

> -----Original Message-----
> From: owner-freebsd-isp@FreeBSD.ORG
> [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Forrest W. Christian
> Sent: December 19, 2001 4:20 PM
> To: Jim Flowers
> Cc: portmaster-users@portmasters.com; freebsd-isp@FreeBSD.ORG
> Subject: Re: Infrastructure Design with Portmasters and FreeBSD/Zebra
> (long)
>
>
> I'm going to be very specific about this:
>
> Using 1918 space as you have described is bad.  Very bad.
>
> To make a long story short, if you use 1918 space, it will break things in
> weird and unusual ways.  The reason for this is a lot of providers discard
> any packets with a source address of 1918.  Certain internet protocols
> require each router along the path to be able to reply with ICMP messages
> with their own address.  If they are in the 1918 space, these will most
> likely be discarded causing the functionality which needs these to break.
>
> Most notably, this will break MTU path discovery which can cause a whole
> set of other problems which I won't go into.  It also will prevent ICMP
> Source qwench messages which are used to provide for some additional flow
> control by certain ip stacks.
>
> The only place to use 1918 space is behind a NAT box or on a network which
> will never be connected to the internet.
>
> On Wed, 19 Dec 2001, Jim Flowers wrote:
>
> > Date: Wed, 19 Dec 2001 11:55:06 -0500
> > From: Jim Flowers <jflowers@ezo.net>
> > To: portmaster-users@portmasters.com, freebsd-isp@FreeBSD.ORG
> > Subject: Infrastructure Design with Portmasters and FreeBSD/Zebra (long)
> >
> > Our current ISP infrastructure has a head-end connection to the
> Internet and
> > a number of remote POPs at the end of point-to-point connections.  The
> > Internet routers are IRX-211s and the pop-connecting routers
> are IRX-114s.
> > Customer connections at the pops include dialup via PM3s and
> point-to-point
> > dedicated via fbsd routers.  5 subnetted class C address blocks are used
> > including /30 on the numbered point-to-point links.  Routing is ospf
> > (Zebra-0.92a on fbsd).  Additional Internet sources are being added to
> > several of the POPs using BGP routing as are some inter-pop
> telecom links
> > with ospf.
> >
> > I am considering renumbering all of the interior (to the Internet)
> > infrastructure subnets to RFC1918 private addresses, primarily
> to promote
> > security but also to reclaim public addresses.  Customers, both
> dialup and
> > dedicated, would still have public addresses routed by ospf
> over the RFC1918
> > infrastructure to allow full access to Internet services.  Local servers
> > that require access to the Internet connections would have
> public addresses
> > on their own network allowing connections to the Internet via
> the RFC1918
> > infrastructure.  Customers would also have the option to connect via a
> > secured public subnet.
> >
> > I question that a PM3 with a private Ethernet interface and a public
> > assigned address pool will work.  I think connections would
> just be routed
> > by ospf instead of proxy arp so it would be OK.  Is this correct?
> >
> > This layout also relies on a web proxy (squid) host with a
> secondary public
> > address on the RFC1918 subnetwork to allow http connections to Internet
> > hosts and other cache servers.  Eliminates loading router to unsecured
> > public subnet that would result if the web proxy host were placed there.
> > Seems a compromise to the concept though explicit filtering at
> the IRX-211
> > could minimize the vulnerability.  Opinions?
> >
> > I am also thinking of connecting all 3 subnets (private, public
> and public
> > secured) to a vlan segmented level 2 switch to take away
> sniffing capability
> > from a compromised host (mirrored to the MGMT host for management use).
> > Will this introduce additional problems?
> >
> > Any other caveats?
> >
> > Alternate suggestions?
> >
> > Thanks.
> >
> > Fixed width charcter spacing ASCII map follow:
> >
> > POP layout
> >
> > ================= Internet
> >     |
> >     |                    ]--------> to previous POP (RFC1019)
> >    [IRX-211]     [IRX-411]--------> to next POP (RFC1918)
> >     |    |           |
> >     |    +--+--------+-------+-------+---- RFC1918 subnet
> >     |       |        |       |       |
> >     |     [W/P]     [R]    [PM3]    [R]
> >     |                |       |       +--------> ptp
> >     |                |       Unsecure Customers (public)
> >     |                |
> >     |                +----------+-- unsecured public subnet
> >     |                           |
> >     |    [W/P]    [MGMT]    [servers]
> >     |      |         |
> >     +------+---------+-------+---- secured (public) subnet
> >            |         |       |
> >        [servers]   [PM3]    [R]
> >        (secure)      |       +--------> ptp
> >                      Secure Customers (public)
> >
> > IRX-211 and PM3 for unsecured network uses minimal filtering
> > IRX-211 and PM3 for secured network uses maximal filtering
> > RFC1918 addresses can only be reached from secure subnet
> > Unsecure customers may use W/P (web proxy)
> > Secure customers must use W/P
> > Management from Internet requires first to connect to MGMT host
> > Management by dialup to directly connected subnet only
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-isp" in the body of the message
> >
>
> - Forrest W. Christian (forrestc@imach.com) AC7DE
> ----------------------------------------------------------------------
> The Innovation Machine Ltd.                              P.O. Box 5749
> http://www.imach.com/                                Helena, MT  59604
> Home of PacketFlux Technogies and BackupDNS.com         (406)-442-6648
> ----------------------------------------------------------------------
>       Protect your personal freedoms - visit http://www.lp.org/
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 13:39:20 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from wow.atlasta.net (wow.atlasta.net [128.241.76.20])
	by hub.freebsd.org (Postfix) with ESMTP id 45BD637B416
	for <freebsd-isp@FreeBSD.ORG>; Wed, 19 Dec 2001 13:39:16 -0800 (PST)
Received: from localhost (drais@localhost)
	by wow.atlasta.net (8.11.2/8.11.2) with ESMTP id fBJLcUC53058;
	Wed, 19 Dec 2001 13:38:30 -0800 (PST)
Date: Wed, 19 Dec 2001 13:38:30 -0800 (PST)
From: David Raistrick <drais@wow.atlasta.net>
To: Blake Crosby <dev@samurai.com>
Cc: "Forrest W. Christian" <forrestc@imach.com>,
	Jim Flowers <jflowers@ezo.net>, portmaster-users@portmasters.com,
	freebsd-isp@FreeBSD.ORG
Subject: RE: Infrastructure Design with Portmasters and FreeBSD/Zebra (long)
In-Reply-To: <JAEEIJKIHAONENKPFCCPGENKCBAA.dev@samurai.com>
Message-ID: <Pine.BSF.4.21.0112191337140.45427-100000@wow.atlasta.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Wed, 19 Dec 2001, Blake Crosby wrote:

> Hmm
> 
> I am pretty sure the rogers@home network here uses 10/8 network space for
> their internal routing:

Bellsouth.net uses 172.16-31 addresses for their between-router networks,
as well. 

....david

---
david raistrick (no longer deep in the south georgia woods)
drais@atlasta.net		http://www.expita.com/nomime.html



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 13:41:45 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from mail4.cableaz.com (mail4.cableaz.com [63.241.150.20])
	by hub.freebsd.org (Postfix) with ESMTP id 8D9E237B419
	for <isp@FreeBSD.ORG>; Wed, 19 Dec 2001 13:41:37 -0800 (PST)
Received: from caz (cacmesa-150-67.cableaz.com [63.241.150.67])
	by mail4.cableaz.com (8.11.3/8.11.3) with SMTP id fBJLaAp67113
	for <isp@FreeBSD.ORG>; Wed, 19 Dec 2001 14:36:10 -0700 (MST)
	(envelope-from jeremy@cableaz.com)
Message-ID: <002f01c188d5$ad40c800$4396f13f@caz>
From: "Jeremy Buckner" <jeremy@cableaz.com>
To: <isp@FreeBSD.ORG>
References: <JAEEIJKIHAONENKPFCCPGENKCBAA.dev@samurai.com>
Subject: Re: Infrastructure Design with Portmasters and FreeBSD/Zebra (long)
Date: Wed, 19 Dec 2001 14:39:42 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

We use RFC1918 here for our routing too, and yes it saves public address space, but I agree with
Forest that you should only do it behind NAT or isolate it completely from the world. Otherwise you
are asking for the head-ache you will get.

Jeremy Buckner

----- Original Message -----
From: "Blake Crosby" <dev@samurai.com>
To: "Forrest W. Christian" <forrestc@imach.com>; "Jim Flowers" <jflowers@ezo.net>
Cc: <portmaster-users@portmasters.com>; <freebsd-isp@FreeBSD.ORG>
Sent: Wednesday, December 19, 2001 2:33 PM
Subject: RE: Infrastructure Design with Portmasters and FreeBSD/Zebra (long)


> Hmm
>
> I am pretty sure the rogers@home network here uses 10/8 network space for
> their internal routing:
>
> A traceroute from my box on the rogers@home network to yahoo.com (abridged):
>
>  2. 24.101.32.1
>  3. 24.112.249.1
>  4. 10.0.185.1
>  5. 24.7.74.29
>  6. 24.7.69.41
>
> Notice that 10/8 ip address in there (there used to be more)
>
> Blake
>
> > -----Original Message-----
> > From: owner-freebsd-isp@FreeBSD.ORG
> > [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Forrest W. Christian
> > Sent: December 19, 2001 4:20 PM
> > To: Jim Flowers
> > Cc: portmaster-users@portmasters.com; freebsd-isp@FreeBSD.ORG
> > Subject: Re: Infrastructure Design with Portmasters and FreeBSD/Zebra
> > (long)
> >
> >
> > I'm going to be very specific about this:
> >
> > Using 1918 space as you have described is bad.  Very bad.
> >
> > To make a long story short, if you use 1918 space, it will break things in
> > weird and unusual ways.  The reason for this is a lot of providers discard
> > any packets with a source address of 1918.  Certain internet protocols
> > require each router along the path to be able to reply with ICMP messages
> > with their own address.  If they are in the 1918 space, these will most
> > likely be discarded causing the functionality which needs these to break.
> >
> > Most notably, this will break MTU path discovery which can cause a whole
> > set of other problems which I won't go into.  It also will prevent ICMP
> > Source qwench messages which are used to provide for some additional flow
> > control by certain ip stacks.
> >
> > The only place to use 1918 space is behind a NAT box or on a network which
> > will never be connected to the internet.
> >
> > On Wed, 19 Dec 2001, Jim Flowers wrote:
> >
> > > Date: Wed, 19 Dec 2001 11:55:06 -0500
> > > From: Jim Flowers <jflowers@ezo.net>
> > > To: portmaster-users@portmasters.com, freebsd-isp@FreeBSD.ORG
> > > Subject: Infrastructure Design with Portmasters and FreeBSD/Zebra (long)
> > >
> > > Our current ISP infrastructure has a head-end connection to the
> > Internet and
> > > a number of remote POPs at the end of point-to-point connections.  The
> > > Internet routers are IRX-211s and the pop-connecting routers
> > are IRX-114s.
> > > Customer connections at the pops include dialup via PM3s and
> > point-to-point
> > > dedicated via fbsd routers.  5 subnetted class C address blocks are used
> > > including /30 on the numbered point-to-point links.  Routing is ospf
> > > (Zebra-0.92a on fbsd).  Additional Internet sources are being added to
> > > several of the POPs using BGP routing as are some inter-pop
> > telecom links
> > > with ospf.
> > >
> > > I am considering renumbering all of the interior (to the Internet)
> > > infrastructure subnets to RFC1918 private addresses, primarily
> > to promote
> > > security but also to reclaim public addresses.  Customers, both
> > dialup and
> > > dedicated, would still have public addresses routed by ospf
> > over the RFC1918
> > > infrastructure to allow full access to Internet services.  Local servers
> > > that require access to the Internet connections would have
> > public addresses
> > > on their own network allowing connections to the Internet via
> > the RFC1918
> > > infrastructure.  Customers would also have the option to connect via a
> > > secured public subnet.
> > >
> > > I question that a PM3 with a private Ethernet interface and a public
> > > assigned address pool will work.  I think connections would
> > just be routed
> > > by ospf instead of proxy arp so it would be OK.  Is this correct?
> > >
> > > This layout also relies on a web proxy (squid) host with a
> > secondary public
> > > address on the RFC1918 subnetwork to allow http connections to Internet
> > > hosts and other cache servers.  Eliminates loading router to unsecured
> > > public subnet that would result if the web proxy host were placed there.
> > > Seems a compromise to the concept though explicit filtering at
> > the IRX-211
> > > could minimize the vulnerability.  Opinions?
> > >
> > > I am also thinking of connecting all 3 subnets (private, public
> > and public
> > > secured) to a vlan segmented level 2 switch to take away
> > sniffing capability
> > > from a compromised host (mirrored to the MGMT host for management use).
> > > Will this introduce additional problems?
> > >
> > > Any other caveats?
> > >
> > > Alternate suggestions?
> > >
> > > Thanks.
> > >
> > > Fixed width charcter spacing ASCII map follow:
> > >
> > > POP layout
> > >
> > > ================= Internet
> > >     |
> > >     |                    ]--------> to previous POP (RFC1019)
> > >    [IRX-211]     [IRX-411]--------> to next POP (RFC1918)
> > >     |    |           |
> > >     |    +--+--------+-------+-------+---- RFC1918 subnet
> > >     |       |        |       |       |
> > >     |     [W/P]     [R]    [PM3]    [R]
> > >     |                |       |       +--------> ptp
> > >     |                |       Unsecure Customers (public)
> > >     |                |
> > >     |                +----------+-- unsecured public subnet
> > >     |                           |
> > >     |    [W/P]    [MGMT]    [servers]
> > >     |      |         |
> > >     +------+---------+-------+---- secured (public) subnet
> > >            |         |       |
> > >        [servers]   [PM3]    [R]
> > >        (secure)      |       +--------> ptp
> > >                      Secure Customers (public)
> > >
> > > IRX-211 and PM3 for unsecured network uses minimal filtering
> > > IRX-211 and PM3 for secured network uses maximal filtering
> > > RFC1918 addresses can only be reached from secure subnet
> > > Unsecure customers may use W/P (web proxy)
> > > Secure customers must use W/P
> > > Management from Internet requires first to connect to MGMT host
> > > Management by dialup to directly connected subnet only
> > >
> > >
> > > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > > with "unsubscribe freebsd-isp" in the body of the message
> > >
> >
> > - Forrest W. Christian (forrestc@imach.com) AC7DE
> > ----------------------------------------------------------------------
> > The Innovation Machine Ltd.                              P.O. Box 5749
> > http://www.imach.com/                                Helena, MT  59604
> > Home of PacketFlux Technogies and BackupDNS.com         (406)-442-6648
> > ----------------------------------------------------------------------
> >       Protect your personal freedoms - visit http://www.lp.org/
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-isp" in the body of the message
> >
> >
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 13:54:15 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from svishtov.digsys.bg (svishtov.digsys.bg [193.68.175.17])
	by hub.freebsd.org (Postfix) with ESMTP
	id B122937B416; Wed, 19 Dec 2001 13:54:04 -0800 (PST)
Received: from hp (pbc-svishtov.pip.digsys.bg [193.68.175.22])
	by svishtov.digsys.bg (8.10.1/8.10.1) with ESMTP id fBJLrsI04493;
	Wed, 19 Dec 2001 23:53:58 +0200 (EET)
Message-ID: <000b01c188d7$ecfcef30$0100a8c0@hp>
Reply-To: "pbc" <pbc@mbox.digsys.bg>
From: "pbc" <pbc@mbox.digsys.bg>
To: <freebsd-questions@FreeBSD.ORG>
Cc: <RESPONSABLE@FreeBSD.ORG>, <freebsd-isp@FreeBSD.ORG>
Subject: question
Date: Wed, 19 Dec 2001 23:55:45 +0200
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hi, 

Could ask you anything?Where I can find patch for pppd 

(FreeBSD) support radius, radius acct come back on the 

Radius server Nas-Port-Type = Async 

Thanks 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 14:23:37 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from tuxcom.net.mx (ns.tuxcom.net.mx [148.223.149.177])
	by hub.freebsd.org (Postfix) with SMTP id 91FEA37B405
	for <freebsd-isp@FreeBSD.ORG>; Wed, 19 Dec 2001 14:23:32 -0800 (PST)
Received: (qmail 31986 invoked from network); 19 Dec 2001 16:22:57 -0600
Received: from tux-34.tuxcom.net.mx (HELO tuxcom.net.mx) (148.235.171.34)
  by tux-33.tuxcom.net.mx with SMTP; 19 Dec 2001 16:22:57 -0600
Message-ID: <3C211337.93D0DD28@tuxcom.net.mx>
Date: Wed, 19 Dec 2001 16:22:47 -0600
From: Michael =?iso-8859-1?Q?Sch=F6nsee?= <schoensee@tuxcom.net.mx>
X-Mailer: Mozilla 4.78 [en] (X11; U; Linux 2.2.12 i386)
X-Accept-Language: en
MIME-Version: 1.0
To: pbc <pbc@mbox.digsys.bg>
Cc: freebsd-isp@FreeBSD.ORG
Subject: Re: question
References: <000b01c188d7$ecfcef30$0100a8c0@hp>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

pbc wrote:

> Hi,
>
> Could ask you anything?Where I can find patch for pppd
>
> (FreeBSD) support radius, radius acct come back on the
>
> Radius server Nas-Port-Type = Async
>
> Thanks
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message

I put:

# grep radius /etc/ppp/ppp.conf
 set radius /etc/radius.conf

and

# cat /etc/radius.conf
auth    localhost       RadiusPass
acct    localhost       RadiusPass

And get accounting. from userland ppp.

Saludos


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 19:56:21 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from lily.ezo.net (lily.ezo.net [206.102.130.13])
	by hub.freebsd.org (Postfix) with ESMTP id 7114337B405
	for <freebsd-isp@freebsd.org>; Wed, 19 Dec 2001 19:56:17 -0800 (PST)
Received: from savvyd (c3-1a119.neo.rr.com [24.93.230.119])
	by lily.ezo.net (8.11.3/8.11.3) with SMTP id fBK3x4N26697;
	Wed, 19 Dec 2001 22:59:04 -0500 (EST)
Message-ID: <002b01c1890a$7d553920$22b197ce@ezo.net>
From: "Jim Flowers" <jflowers@ezo.net>
To: "Krzysztof Adamski" <kadamski@netsurf.net>
Cc: <portmaster-users@portmasters.com>, <freebsd-isp@freebsd.org>
References: <Pine.LNX.4.21.0112191413480.4776-100000@white.netsurf.net>
Subject: Re: (PM) Infrastructure Design with Portmasters and FreeBSD/Zebra (long)
Date: Wed, 19 Dec 2001 22:57:46 -0500
Organization: EZNets, Inc.
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

OK, thanks for the heads up.  I think that what you are cautioning against
is that the `ICMP can't fragment' message will not be returned over the
Internet to a sender with an RFC1918 address (particularly as I deny them at
the edge router).  OTOH, in my proposed layout one of the basic concepts is
that hosts with RFC1918 addresses are never allowed to exchange packets with
hosts on the Internet so this situation should never arise.  All the working
system hosts and customer hosts have public addresses and in this case the
Internet sourced ICMP messages should be routed over the RFC1918 network
correctly - er, right? :-)  Shouldn't this work equally well for the PM3
dialups (who all have public addresses) as long as their host/router
supports pathMTU discovery?

Also, the inter-pop routers don't involve the Internet and as they are under
my administration I will advertise the RFC1918 addresses with ospf for any
inter-pop transmissions.

I am more interested in the security aspects than reclaiming the addresses
but it is also appealing to not have to justify the usage each time we (or a
customer) want another block (It has been a hassle).  Currently, we have
about 100 subnets on the 5 Class Cs with about 55% still available as we NAT
most of our commercial users.

Thanks again for your reply.

Jim Flowers - EZNets, Inc. <jflowers@ezo.net>
----- Original Message -----
From: "Krzysztof Adamski" <kadamski@netsurf.net>
To: "Jim Flowers" <jflowers@ezo.net>
Subject: Re: (PM) Infrastructure Design with Portmasters and FreeBSD/Zebra
(long)


> Replacing routable IPs with RFC1918 on a PM will work just fine, but there
> is one problem with it. It breaks Path-MTU-discovery protocol. This would
> be a problem for routers that can have different MTU size of different
> interfaces, like a PM with dial in users.
> If you are efficiently using your address space you should not have a
> problem with getting more addresses.
>
> K



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 20: 8:43 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from lily.ezo.net (lily.ezo.net [206.102.130.13])
	by hub.freebsd.org (Postfix) with ESMTP id CAEC537B417
	for <freebsd-isp@FreeBSD.ORG>; Wed, 19 Dec 2001 20:08:39 -0800 (PST)
Received: from savvyd (c3-1a119.neo.rr.com [24.93.230.119])
	by lily.ezo.net (8.11.3/8.11.3) with SMTP id fBK4BQN26926;
	Wed, 19 Dec 2001 23:11:27 -0500 (EST)
Message-ID: <003101c1890c$370d5cc0$22b197ce@ezo.net>
From: "Jim Flowers" <jflowers@ezo.net>
To: "Forrest W. Christian" <forrestc@imach.com>
Cc: <portmaster-users@portmasters.com>, <freebsd-isp@FreeBSD.ORG>
References: <Pine.BSF.4.21.0112191352570.18716-100000@workhorse.iMach.com>
Subject: Re: Infrastructure Design with Portmasters and FreeBSD/Zebra (long)
Date: Wed, 19 Dec 2001 23:10:08 -0500
Organization: EZNets, Inc.
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Well, I understand your caution.  Perhaps I did not explain very well that
in the proposed concept machines on the RFC1918 network are never allowed to
exchange packets with machines on the Internet and, in fact, are prevented
from doing so by filter rules in the edge routers.  The RFC1918 network is
only a transit network consisting of our own routing devices (all with
ospf).  The only Internet connections are initiated from/to our public and
public/secure networks/devices where path MTU discovery should work.

Thanks for the reply.

From: "Forrest W. Christian" <forrestc@imach.com>
To: "Jim Flowers" <jflowers@ezo.net>
Cc: <portmaster-users@portmasters.com>; <freebsd-isp@FreeBSD.ORG>
Sent: Wednesday, December 19, 2001 4:20 PM
Subject: Re: Infrastructure Design with Portmasters and FreeBSD/Zebra (long)


> I'm going to be very specific about this:
>
> Using 1918 space as you have described is bad.  Very bad.
>
> To make a long story short, if you use 1918 space, it will break things in
> weird and unusual ways.  The reason for this is a lot of providers discard
> any packets with a source address of 1918.  Certain internet protocols
> require each router along the path to be able to reply with ICMP messages
> with their own address.  If they are in the 1918 space, these will most
> likely be discarded causing the functionality which needs these to break.
>
> Most notably, this will break MTU path discovery which can cause a whole
> set of other problems which I won't go into.  It also will prevent ICMP
> Source qwench messages which are used to provide for some additional flow
> control by certain ip stacks.
>
> The only place to use 1918 space is behind a NAT box or on a network which
> will never be connected to the internet.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 20:22:48 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from lily.ezo.net (lily.ezo.net [206.102.130.13])
	by hub.freebsd.org (Postfix) with ESMTP id 1318837B416
	for <freebsd-isp@FreeBSD.ORG>; Wed, 19 Dec 2001 20:22:43 -0800 (PST)
Received: from savvyd (c3-1a119.neo.rr.com [24.93.230.119])
	by lily.ezo.net (8.11.3/8.11.3) with SMTP id fBK4PWN27181;
	Wed, 19 Dec 2001 23:25:32 -0500 (EST)
Message-ID: <003d01c1890e$2e49cae0$22b197ce@ezo.net>
From: "Jim Flowers" <jflowers@ezo.net>
To: "David Raistrick" <drais@wow.atlasta.net>
Cc: <portmaster-users@portmasters.com>, <freebsd-isp@FreeBSD.ORG>
References: <Pine.BSF.4.21.0112191337140.45427-100000@wow.atlasta.net>
Subject: Re: Infrastructure Design with Portmasters and FreeBSD/Zebra (long)
Date: Wed, 19 Dec 2001 23:24:11 -0500
Organization: EZNets, Inc.
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Yeah, I think it's a pretty common practice.  We have actually used 192.168
addresses for numbered point-to-point links without any problems but then
changed them for simpler troubleshooting.  That was with static routes
before we had implemented ospf routing and before the latest crush of DOS
and intrusion attacks.  I didn't want to jump off the deep end on doing this
systemwide without finding out what other people are doing.  There have been
a number of good suggestions.

Thanks for the info.

Jim Flowers - EZNets, Inc. <jflowers@ezo.net>
----- Original Message -----
From: "David Raistrick" <drais@wow.atlasta.net>
To: "Blake Crosby" <dev@samurai.com>
Cc: "Forrest W. Christian" <forrestc@imach.com>; "Jim Flowers"
<jflowers@ezo.net>; <portmaster-users@portmasters.com>;
<freebsd-isp@FreeBSD.ORG>
Sent: Wednesday, December 19, 2001 4:38 PM
Subject: RE: Infrastructure Design with Portmasters and FreeBSD/Zebra (long)


> On Wed, 19 Dec 2001, Blake Crosby wrote:
>
> > Hmm
> >
> > I am pretty sure the rogers@home network here uses 10/8 network space
for
> > their internal routing:
>
> Bellsouth.net uses 172.16-31 addresses for their between-router networks,
> as well.
>
> ....david
>
> ---
> david raistrick (no longer deep in the south georgia woods)
> drais@atlasta.net http://www.expita.com/nomime.html
>
>
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 20:38: 7 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from mailsrv.amplex.net (mailsrv.amplex.net [65.165.120.194])
	by hub.freebsd.org (Postfix) with ESMTP id 2AF9937B41A
	for <freebsd-isp@FreeBSD.ORG>; Wed, 19 Dec 2001 20:37:47 -0800 (PST)
Received: from mark2000 (mark-laptop.amplex.net [65.165.120.147])
	(authenticated (0 bits))
	by mailsrv.amplex.net (8.11.6/8.11.6) with ESMTP id fBJKv2U99888
	(using TLSv1/SSLv3 with cipher RC4-MD5 (128 bits) verified NO)
	for <freebsd-isp@FreeBSD.ORG>; Wed, 19 Dec 2001 15:57:06 -0500 (EST)
From: "Mark Radabaugh - Amplex" <mark@amplex.net>
To: <freebsd-isp@FreeBSD.ORG>
Subject: RE: forwarding surfers..
Date: Wed, 19 Dec 2001 15:57:08 -0500
Message-ID: <MOEMIEFAGIMHBFOCOJKHAEBKGJAA.mark@amplex.net>
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
Importance: Normal
In-Reply-To: <007c01c188ba$cb94dd70$0300a8c0@weird>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

We do something like this with a combination of Apache and a Cisco
router.

On the Ethernet interface on the Cisco:

ip policy route-map SUSPENDED

access-list 192 permit tcp 192.168.0.0 0.0.0.255 any eq www

route-map SUSPENDED permit 10
 match ip address 192
 set interface FastEthernet0/0
 set ip next-hop 65.165.120.180
!

What this does is forward all packets with a source address anywhere in
192.168.0.0/24 and connecting to port 80 to 65.165.120.180.

The next trick is getting the Unix box to accept the packets...  A
little packet rewriting in IPFW:

rack0# ipfw show

00100      8964      881988 fwd 65.165.120.180 tcp from 192.168.0.0/24
to any 80

Any packets that arrive with a source address in the 192.168.0.0/24 get
redirected to this box.

Apache has a custom 404 error page.  No matter what web page a customer
with a 192.168.0.0/24 address requests they get the custom 404 error
page ("Pay up bum - your account is toast").

Mark Radabaugh
Amplex
(419) 833-3635


> -----Original Message-----
> From: owner-freebsd-isp@FreeBSD.ORG
> [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Matiss Elsbergs
> Sent: Wednesday, December 19, 2001 1:27 PM
> To: freebsd-isp@FreeBSD.ORG
> Subject: forwarding surfers..
>
>
> Hello there, fellow owners of many system processes..
>
> Explanation:
>
> I have a web server, which must display a one page to one
> network [ let's
> say network A ], and the other one - to all other internet.
> And, it must be
> done like that: some application [ perhaps ipfw ] checks if
> the IP belongs
> to network A. If yes, then nothing's altered, and it goes to web page
> sitting right there on let's say 159.148.108.4. If it belongs to other
> Internet, [ which accesses the page by the same URL ], it
> goes to let's say
> 159.148.108.5. Is it possible?
>
>
>
> With best regards -
> Matiss Elsbergs,
> Astranet IS Hostmaster
> +371 6435911
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Dec 19 20:40:21 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from white.netsurf.net (White.NetSurf.Net [206.186.135.4])
	by hub.freebsd.org (Postfix) with ESMTP id B8FE537B417
	for <freebsd-isp@freebsd.org>; Wed, 19 Dec 2001 20:40:17 -0800 (PST)
Received: from localhost (kadamski@localhost)
	by white.netsurf.net (8.9.3/8.9.3/Debian 8.9.3-21) with ESMTP id XAA24218;
	Wed, 19 Dec 2001 23:40:14 -0500
Date: Wed, 19 Dec 2001 23:40:13 -0500 (EST)
From: Krzysztof Adamski <kadamski@netsurf.net>
To: Jim Flowers <jflowers@ezo.net>
Cc: portmaster-users@portmasters.com, freebsd-isp@freebsd.org
Subject: Re: (PM) Infrastructure Design with Portmasters and FreeBSD/Zebra
 (long)
In-Reply-To: <002b01c1890a$7d553920$22b197ce@ezo.net>
Message-ID: <Pine.LNX.4.21.0112192326030.14020-100000@white.netsurf.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Wed, 19 Dec 2001, Jim Flowers wrote:

> OK, thanks for the heads up.  I think that what you are cautioning against
> is that the `ICMP can't fragment' message will not be returned over the
> Internet to a sender with an RFC1918 address (particularly as I deny them at
> the edge router).  OTOH, in my proposed layout one of the basic concepts is
> that hosts with RFC1918 addresses are never allowed to exchange packets with
> hosts on the Internet so this situation should never arise.  All the working
> system hosts and customer hosts have public addresses and in this case the
> Internet sourced ICMP messages should be routed over the RFC1918 network
> correctly - er, right? :-)  Shouldn't this work equally well for the PM3
> dialups (who all have public addresses) as long as their host/router
> supports pathMTU discovery?

Exactly. Except with the PM3, if the customers MTU is smaller then 1500,
and a large packet comes, the PM3 will have to fragment it, but if it
can't then the PM3 will send the `ICMP can't fragment' with the PM3s IP
address.

> Also, the inter-pop routers don't involve the Internet and as they are under
> my administration I will advertise the RFC1918 addresses with ospf for any
> inter-pop transmissions.

This is fine, the only thing that will break is a traceroute done from the
outside of your network for this routers. It will show '*' for the hop
that has the RFC1918 addresses. Unless you allow icmp ttl-exceeded for
this addresses to leave your network. A second nuisance is the reverse DNS
for this addresses, you can set up your DNS server to be authorative for
10.x.x.x so the traceroutes inside your network give you useful info.

 > 
> I am more interested in the security aspects than reclaiming the addresses
> but it is also appealing to not have to justify the usage each time we (or a
> customer) want another block (It has been a hassle).  Currently, we have
> about 100 subnets on the 5 Class Cs with about 55% still available as we NAT
> most of our commercial users.

There is really no security gained from using RFC1918 addresses, at first
glance, it looks like it would be secured, but as soon as a single host on
the inside of you network is compromised, it has full access to all
routers with RFC1918 addresses. Also there is no protection from your own
customers. You should secure your routers with access lists, both from
outside and inside.

Don't get me wrong, I use RFC1918 addresses in my network, for instance
the two DNS server IPs that are hard coded in my customer setups (where
needed) are from RFC1918. This way when I renumber I will not need to
change this.

K

> Thanks again for your reply.
> 
> Jim Flowers - EZNets, Inc. <jflowers@ezo.net>
> ----- Original Message -----
> From: "Krzysztof Adamski" <kadamski@netsurf.net>
> To: "Jim Flowers" <jflowers@ezo.net>
> Subject: Re: (PM) Infrastructure Design with Portmasters and FreeBSD/Zebra
> (long)
> 
> 
> > Replacing routable IPs with RFC1918 on a PM will work just fine, but there
> > is one problem with it. It breaks Path-MTU-discovery protocol. This would
> > be a problem for routers that can have different MTU size of different
> > interfaces, like a PM with dial in users.
> > If you are efficiently using your address space you should not have a
> > problem with getting more addresses.
> >
> > K
> 
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Dec 20  0:55:38 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from lannt1.lansystems.co.uk (ns1.lansystems.co.uk [212.43.185.2])
	by hub.freebsd.org (Postfix) with ESMTP id 34E5B37B41A
	for <freebsd-isp@freebsd.org>; Thu, 20 Dec 2001 00:55:36 -0800 (PST)
Received: by ns1.lansystems.co.uk with Internet Mail Service (5.5.2650.21)
	id <X2NVWN0A>; Thu, 20 Dec 2001 09:03:29 -0000
Message-ID: <6F8544E9B883D21192170000E215549F20FE90@ns1.lansystems.co.uk>
From: Phil Taylor <phil@lansystems.co.uk>
To: portmaster-users@portmasters.com
Cc: freebsd-isp@freebsd.org
Subject: RE: (PM) Infrastructure Design with Portmasters and FreeBSD/Zebra
	 (long)
Date: Thu, 20 Dec 2001 09:03:21 -0000
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)
Content-Type: text/plain;
	charset="iso-8859-1"
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Among other things Krzysztof Adamski wrote:
> 
> Don't get me wrong, I use RFC1918 addresses in my network, 
> for instance
> the two DNS server IPs that are hard coded in my customer 
> setups (where
> needed) are from RFC1918. This way when I renumber I will not need to
> change this.
> 

One caveat on this. I got caught-out when I did this as I had a number of
customers who couldn't access my dns servers when they were connected to a
LAN cause they were using the same RFC1918 addresses for their local
network.....

Just a thought, if you do this I would recommend that you pick a fairly
obscure 192.168 address, not 10.x.x.x as the default subnet mask gives you a
better chance of not using the same subnet as customers local networks, do
NOT pick 10.0.0.x for example as everyone with MS SBS will suffer :->

Cheers

Phil

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Dec 20  1: 8:57 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from workhorse.iMach.com (workhorse.iMach.com [206.127.77.89])
	by hub.freebsd.org (Postfix) with ESMTP id 593D537B423
	for <freebsd-isp@FreeBSD.ORG>; Thu, 20 Dec 2001 01:08:48 -0800 (PST)
Received: from localhost (forrestc@localhost)
	by workhorse.iMach.com (8.9.3/8.9.3) with ESMTP id BAA21196;
	Thu, 20 Dec 2001 01:59:38 -0700 (MST)
Date: Thu, 20 Dec 2001 01:59:38 -0700 (MST)
From: "Forrest W. Christian" <forrestc@imach.com>
To: Krzysztof Adamski <kadamski@netsurf.net>
Cc: Jim Flowers <jflowers@ezo.net>, portmaster-users@portmasters.com,
	freebsd-isp@FreeBSD.ORG
Subject: Re: (PM) Infrastructure Design with Portmasters and FreeBSD/Zebra
 (long)
In-Reply-To: <Pine.LNX.4.21.0112192326030.14020-100000@white.netsurf.net>
Message-ID: <Pine.BSF.4.21.0112200141350.21127-100000@workhorse.iMach.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Wed, 19 Dec 2001, Krzysztof Adamski wrote:

> > Internet sourced ICMP messages should be routed over the RFC1918 network
> > correctly - er, right? :-)  Shouldn't this work equally well for the PM3
> > dialups (who all have public addresses) as long as their host/router
> > supports pathMTU discovery?
> 
> Exactly. Except with the PM3, if the customers MTU is smaller then 1500,
> and a large packet comes, the PM3 will have to fragment it, but if it
> can't then the PM3 will send the `ICMP can't fragment' with the PM3s IP
> address.

Which would be a RFC1918 address in some cases, depending on where the
original "can't fragment" packet came from.

Let's say a dial user with a low (say 576) mtu is trying to reach a web
site on the internet which both has to pass through a network which
filters 1918 space (very common), and supports MTU path discovery (also
quite common).

User connects to web site, web site starts mtu path discovery.  To
oversimplify, web server sends different sized packets to user with the DF
flag set.   When they reach the PM3, the pm realizes that it can't send
the packet on, and sends back an ICMP can't fragment packet to the web
site.

If this packet originates from a 1918 address (which would be the case if
the PM3's ethernet port is a 1918 address), it will never reach the web
site server, as it will be dropped by the filtering isp's filter.

Again, to oversimplify, this will screw things up immensely.   The most
common symptom is small and/or interactive things get through but big
things wont.  See http://www.worldgate.com/~marcs/mtu/ for another
discription of the problem.

Filtering ICMP packets in general (not saying don't filter ping
packets) will do the same thing.

There are some cases where this won't break things.  If either endpoint of
the flow has a lower mtu than any hop of the path, things will work
good.  Also, if you can guarantee that the router will either never
generate the ICMP from a 1918 address OR if the router will never generate
a icmp can't fragment, then things will work.

However, if these end up (even unintentially) being not the case, things
will break - and not in an intuitive fashon.


- Forrest W. Christian (forrestc@imach.com) AC7DE
----------------------------------------------------------------------
The Innovation Machine Ltd.                              P.O. Box 5749
http://www.imach.com/                                Helena, MT  59604
Home of PacketFlux Technogies and BackupDNS.com         (406)-442-6648
----------------------------------------------------------------------
      Protect your personal freedoms - visit http://www.lp.org/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Dec 20  5:54: 1 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from web20110.mail.yahoo.com (web20110.mail.yahoo.com [216.136.226.47])
	by hub.freebsd.org (Postfix) with SMTP id 84EC337B41A
	for <freebsd-isp@freebsd.org>; Thu, 20 Dec 2001 05:53:51 -0800 (PST)
Message-ID: <20011220135351.34424.qmail@web20110.mail.yahoo.com>
Received: from [195.223.20.3] by web20110.mail.yahoo.com via HTTP; Thu, 20 Dec 2001 14:53:51 CET
Date: Thu, 20 Dec 2001 14:53:51 +0100 (CET)
From: =?iso-8859-1?q?Fabrizio=20Ravazzini?= <freefabri@yahoo.it>
Subject: Re: vrrpd doesn't work
To: Damir Horvat <damir@voljatel.si>
Cc: freebsd-isp@freebsd.org, freebsd-cluster@freebsd.org
In-Reply-To: <20011218083531.65d26d40.damir@voljatel.si>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

hello,thanks for reply, in that vrrpd is implemented
the option -b prog  or -m prog in order to execute
some commands or scripts when they become master or
backup?
I've seen that vrrpd but didn't find this feature.
Thanks 
--- Damir Horvat <damir@voljatel.si> ha scritto: > On
Mon, 17 Dec 2001 09:19:01 +0100 (CET)
> Fabrizio Ravazzini <freefabri@yahoo.it> wrote:
> 
> > Hello all I've installed vrrpd 0.2 from the ports
> on
> > freebsd 4.3, if I launch it I've got the errors:
> > 
> > Indio# vrrpd -i ed0 -v 1 -p 150 192.168.0.90
> > Dec 16 21:01:27 Indio vrrpd[824]: starting
> > Dec 16 21:01:27 Indio vrrpd[824]: router 1 init
> > Dec 16 21:01:30 Indio vrrpd[824]: setting master 1
> > Dec 16 21:01:30 Indio vrrpd[824]: ioctl (set
> lladdr):
> > Inappropriate ioctl for device
> > Dec 16 21:01:30 Indio vrrpd[824]: ioctl (set
> lladdr):
> > Inappropriate ioctl for device
> > Dec 16 21:01:30 Indio vrrpd[824]: Can't
> SIOCADDMULTI
> > on ed0: Can't assign requested address
> > Dec 16 21:01:30 Indio vrrpd[824]: Can't
> SIOCADDMULTI
> > on ed0: Can't assign requested address
> 
> Use freevrrpd instead. It's RFC 2338 Compliant. More
> infos at
> http://conan.lip6.fr/~spe/
> 
> I've try it and it works nice. Current DL version is
> 0.8 which has error
> in config file - space character after device name
> ("fxp0 "). Get rid of
> that space and it'll work.
> 
> regards,
> Damir Horvat
> 
> -- 
> .................................
> Damir Horvat
> System administrator
> VOLJATEL telekomunikacije d.d.
> Smartinska 106
> SI-1000 Ljubljana
> Slovenia
> 
> Tel. +386.(0)1.5875 832
> Fax. +386.(0)1.5875 899
> www.voljatel.si
> E-mail: damir.horvat@voljatel.si
> .................................
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the
message 

______________________________________________________________________

Iscriviti al Meglio della Settimana, la newsletter di Yahoo!
Per saperne di piЫ vai alla pagina: http://buongiorno.yahoo.it

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Dec 20  6:30:35 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from relay.office.bezpeka.net (gw.office.bezpeka.net [193.108.112.118])
	by hub.freebsd.org (Postfix) with ESMTP id 6914737B43B
	for <freebsd-isp@freebsd.org>; Thu, 20 Dec 2001 06:30:17 -0800 (PST)
Received: (from admin@localhost)
	by relay.office.bezpeka.net (8.11.3/8.11.3) id fBKERmK09473;
	Thu, 20 Dec 2001 16:27:48 +0200 (EET)
	(envelope-from admin)
Date: Thu, 20 Dec 2001 16:27:48 +0200
From: apache@ukr.net
To: Matiss Elsbergs <matiss@astranet.lv>
Cc: freebsd-isp@freebsd.org
Subject: Re: forwarding surfers..
Message-ID: <20011220162748.A562@unixbox.office.annaltd.com>
References: <007c01c188ba$cb94dd70$0300a8c0@weird>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <007c01c188ba$cb94dd70$0300a8c0@weird>; from matiss@astranet.lv on Wed, Dec 19, 2001 at 08:27:13PM +0200
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Yoy can Deny access to page_1 for all accept network A in httpd.conf and set
ErrorDocument for 403 error code to page_2.

-- 
e-mail:	apache@ukr.net

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Dec 20  6:47:58 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from infiniteloop.ca (infiniteloop.ca [216.126.86.53])
	by hub.freebsd.org (Postfix) with ESMTP id 543DA37B405
	for <freebsd-isp@freebsd.org>; Thu, 20 Dec 2001 06:47:52 -0800 (PST)
Received: from localhost (localhost [127.0.0.1])
	by infiniteloop.ca (Postfix) with ESMTP id 8E6DB1E4
	for <freebsd-isp@freebsd.org>; Thu, 20 Dec 2001 09:47:51 -0500 (EST)
Received: from blake (CPE0050da7c7e5d.cpe.net.cable.rogers.com [24.101.32.246])
	(using TLSv1 with cipher RC4-MD5 (128/128 bits))
	(Client did not present a certificate)
	by infiniteloop.ca (Postfix) with ESMTP id 6693013E
	for <freebsd-isp@freebsd.org>; Thu, 20 Dec 2001 09:47:50 -0500 (EST)
From: "Blake Crosby" <dev@samurai.com>
To: <freebsd-isp@freebsd.org>
Subject: PPTP Behind NAT?
Date: Thu, 20 Dec 2001 09:47:49 -0500
Message-ID: <JAEEIJKIHAONENKPFCCPGENLCBAA.dev@samurai.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Importance: Normal
X-Virus-Scanned: by AMaViS snapshot-20010714
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

I'm having trouble getting tcp/ip working once I connect to a machine using
PPTP. Here is my network setup.

pptp server (freebsd 4.4 - using mpd-netgraph)
|
|
Internet
|
|
Gateway, running ipnat (freebsd 4.3)
|
|
Windows XP Machine.

I can connect fine, except I can't really do much from that point on. The
server has the ip address 192.168.0.1 and the client has 192.168.0.2. When
I try to ping the clients ip address from the server I get this:

PING 192.168.0.2 (192.168.0.2): 56 data bytes
ping: sendto: Permission denied
ping: sendto: Permission denied

according to ifconfig, the tunnel seems to be up:

ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> mtu 1500
         inet 192.168.0.1 --> 192.168.0.2 netmask 0xffffffff

my mpd.conf file looks like:

pptp:
         new -i ng0 pptp pptp
         set iface disable on-demand
         set iface enable proxy-arp
         set iface idle 1800
         set bundle disable multilink
         set link yes acfcomp protocomp
         set link no pap chap
         set link enable chap
         set link keep-alive 10 60
         set ipcp yes vjcomp
         set ipcp ranges 192.168.0.1/32 192.168.0.2/30
         set ipcp dns xxx.xxx.xxx.xxx <--- IP address of external interface
(yes a dns server is listening)

         set bundle enable compression
         set ccp yes mppc
         set ccp yes mpp-e40
         set ccp yes mpp-e128
         set ccp yes mpp-stateless

and mpd.links:

pptp:
         set link type pptp
         set pptp self xxx.xxx.xxx.xxx <-- External IP address
         set pptp enable incoming
         set pptp disable originate

any idea what could be wrong? Is this a nat problem?

Blake


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Dec 20  7:20:49 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from white.netsurf.net (White.NetSurf.Net [206.186.135.4])
	by hub.freebsd.org (Postfix) with ESMTP id F057637B417
	for <freebsd-isp@freebsd.org>; Thu, 20 Dec 2001 07:20:46 -0800 (PST)
Received: from localhost (kadamski@localhost)
	by white.netsurf.net (8.9.3/8.9.3/Debian 8.9.3-21) with ESMTP id KAA08240;
	Thu, 20 Dec 2001 10:20:41 -0500
Date: Thu, 20 Dec 2001 10:20:40 -0500 (EST)
From: Krzysztof Adamski <kadamski@netsurf.net>
To: Phil Taylor <phil@lansystems.co.uk>
Cc: portmaster-users@portmasters.com, freebsd-isp@freebsd.org
Subject: RE: (PM) Infrastructure Design with Portmasters and FreeBSD/Zebra 
 (long)
In-Reply-To: <6F8544E9B883D21192170000E215549F20FE90@ns1.lansystems.co.uk>
Message-ID: <Pine.LNX.4.21.0112201017150.4786-100000@white.netsurf.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Thu, 20 Dec 2001, Phil Taylor wrote:

> Among other things Krzysztof Adamski wrote:
> > 
> > Don't get me wrong, I use RFC1918 addresses in my network, 
> > for instance
> > the two DNS server IPs that are hard coded in my customer 
> > setups (where
> > needed) are from RFC1918. This way when I renumber I will not need to
> > change this.
> > 
> 
> One caveat on this. I got caught-out when I did this as I had a number of
> customers who couldn't access my dns servers when they were connected to a
> LAN cause they were using the same RFC1918 addresses for their local
> network.....
> 
> Just a thought, if you do this I would recommend that you pick a fairly
> obscure 192.168 address, not 10.x.x.x as the default subnet mask gives you a
> better chance of not using the same subnet as customers local networks, do
> NOT pick 10.0.0.x for example as everyone with MS SBS will suffer :->

I use 172.20.5.3/16 as one DNS server. I should have used 172.19/16 this
range instead.

Very few people use the 172.16-172.31 range anyways, so this is fairly
safe.

K


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Dec 20  9: 1: 0 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from linux2.portmasters.com (ns2.jakes.org [216.138.104.67])
	by hub.freebsd.org (Postfix) with ESMTP id 1C15F37B416
	for <freebsd-isp@freebsd.org>; Thu, 20 Dec 2001 09:00:58 -0800 (PST)
Received: from localhost (jake@localhost)
	by linux2.portmasters.com (8.11.1/8.11.1) with ESMTP id fBKGiqn16958;
	Thu, 20 Dec 2001 10:44:52 -0600
Date: Thu, 20 Dec 2001 10:44:51 -0600 (CST)
From: "Jake 'Portmaster' Messinger" <jake@portmasters.com>
To: Phil Taylor <phil@lansystems.co.uk>
Cc: portmaster-users@portmasters.com, freebsd-isp@freebsd.org
Subject: RE: (PM) Infrastructure Design with Portmasters and FreeBSD/Zebra 
 (long)
In-Reply-To: <6F8544E9B883D21192170000E215549F20FE90@ns1.lansystems.co.uk>
Message-ID: <Pine.LNX.4.10.10112201043080.16440-100000@linux2.portmasters.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Thu, 20 Dec 2001, Phil Taylor wrote:

> Just a thought, if you do this I would recommend that you pick a fairly
> obscure 192.168 address, not 10.x.x.x as the default subnet mask gives you a
> better chance of not using the same subnet as customers local networks, do
> NOT pick 10.0.0.x for example as everyone with MS SBS will suffer :->

We DO pick 10.0.0.x and it caused me some probs, but MOST of these NAT
router things you buy use 192.168.x.x. However, if its using Nat, it
doesnt matter. It only gets you when the local PC has 10.0.0.something,
and they have a modem dialing in on that PC and ALSO getting 10.0.0.
something.  You could just pick 10.0.1.something.

-- 
~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~
Jake Messinger, VP.	ph:713-772-6690		Visit:	portmasters.com
AMS, Inc.		fx:713-774-3498 		advmed.com
8300 Bissonnet  #400	jake@jakes.org			disc.cba.uh.edu
Houston, Texas  77074	http://jakes.org		ICQ# 4403734  		

Adjunct Professor	University of Houston, CBA	jake@uh.edu
~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~

		INVENTOR OF the _.,-*~''~*-,._ SQUIGGLES (c) 1978


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Dec 20 10:58:16 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from kira.epconline.net (kira.epconline.net [207.206.185.2])
	by hub.freebsd.org (Postfix) with ESMTP id C647237B417
	for <freebsd-isp@FreeBSD.ORG>; Thu, 20 Dec 2001 10:58:04 -0800 (PST)
Received: from isp4 (betterguard.epconline.net [207.206.185.193])
	by kira.epconline.net (8.11.4/8.11.4) with SMTP id fBKIw3x39395
	for <freebsd-isp@FreeBSD.ORG>; Thu, 20 Dec 2001 12:58:04 -0600 (CST)
Reply-To: <carock@epctech.com>
From: "Chuck Rock" <carock@epctech.com>
To: <freebsd-isp@FreeBSD.ORG>
Subject: RE: forwarding surfers..
Date: Thu, 20 Dec 2001 12:57:59 -0600
Message-ID: <JDEAIDLKPMMILNJHADGCOEPEEHAA.carock@epctech.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
In-Reply-To: <MOEMIEFAGIMHBFOCOJKHAEBKGJAA.mark@amplex.net>
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4807.1700
Importance: Normal
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Wouldn't it be easier to use standard HTML/CGI scripting to determine the
browser address, and display one page or another based on it's IP address?

I think that could probably be accomplished with about 15 mintues of work,
and not much thought.

This is standard for many forms to record the address of the browser that is
viewing it.

Try searching for "CGI Environment Variables" with the quotes on Yahoo, and
you'll get a lot of CGI examples you can use.

Chuck

-----Original Message-----
From: owner-freebsd-isp@FreeBSD.ORG
[mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Mark Radabaugh -
Amplex
Sent: Wednesday, December 19, 2001 2:57 PM
To: freebsd-isp@FreeBSD.ORG
Subject: RE: forwarding surfers..


We do something like this with a combination of Apache and a Cisco
router.

On the Ethernet interface on the Cisco:

ip policy route-map SUSPENDED

access-list 192 permit tcp 192.168.0.0 0.0.0.255 any eq www

route-map SUSPENDED permit 10
 match ip address 192
 set interface FastEthernet0/0
 set ip next-hop 65.165.120.180
!

What this does is forward all packets with a source address anywhere in
192.168.0.0/24 and connecting to port 80 to 65.165.120.180.

The next trick is getting the Unix box to accept the packets...  A
little packet rewriting in IPFW:

rack0# ipfw show

00100      8964      881988 fwd 65.165.120.180 tcp from 192.168.0.0/24
to any 80

Any packets that arrive with a source address in the 192.168.0.0/24 get
redirected to this box.

Apache has a custom 404 error page.  No matter what web page a customer
with a 192.168.0.0/24 address requests they get the custom 404 error
page ("Pay up bum - your account is toast").

Mark Radabaugh
Amplex
(419) 833-3635


> -----Original Message-----
> From: owner-freebsd-isp@FreeBSD.ORG
> [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Matiss Elsbergs
> Sent: Wednesday, December 19, 2001 1:27 PM
> To: freebsd-isp@FreeBSD.ORG
> Subject: forwarding surfers..
>
>
> Hello there, fellow owners of many system processes..
>
> Explanation:
>
> I have a web server, which must display a one page to one
> network [ let's
> say network A ], and the other one - to all other internet.
> And, it must be
> done like that: some application [ perhaps ipfw ] checks if
> the IP belongs
> to network A. If yes, then nothing's altered, and it goes to web page
> sitting right there on let's say 159.148.108.4. If it belongs to other
> Internet, [ which accesses the page by the same URL ], it
> goes to let's say
> 159.148.108.5. Is it possible?
>
>
>
> With best regards -
> Matiss Elsbergs,
> Astranet IS Hostmaster
> +371 6435911
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Dec 20 11:22: 9 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from buffnet4.buffnet.net (buffnet4.buffnet.net [205.246.19.13])
	by hub.freebsd.org (Postfix) with ESMTP id 312AA37B431
	for <freebsd-isp@FreeBSD.ORG>; Thu, 20 Dec 2001 11:20:18 -0800 (PST)
Received: from buffnet11.buffnet.net (buffnet11.buffnet.net [205.246.19.55])
	by buffnet4.buffnet.net (8.9.3/8.8.7) with ESMTP id OAA60718;
	Thu, 20 Dec 2001 14:36:09 -0500 (EST)
	(envelope-from shovey@buffnet.net)
Date: Thu, 20 Dec 2001 14:20:10 -0500 (EST)
From: Stephen Hovey <shovey@buffnet.net>
To: Chuck Rock <carock@epctech.com>
Cc: freebsd-isp@FreeBSD.ORG
Subject: RE: forwarding surfers..
In-Reply-To: <JDEAIDLKPMMILNJHADGCOEPEEHAA.carock@epctech.com>
Message-ID: <Pine.BSF.4.05.10112201419350.9680-100000@buffnet11.buffnet.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


if a server has PHP enabled it can just check the addr of the person
connecting and do an include based on what it sees.  Much easier than
fadigling routers

On Thu, 20 Dec 2001, Chuck Rock wrote:

> Wouldn't it be easier to use standard HTML/CGI scripting to determine the
> browser address, and display one page or another based on it's IP address?
> 
> I think that could probably be accomplished with about 15 mintues of work,
> and not much thought.
> 
> This is standard for many forms to record the address of the browser that is
> viewing it.
> 
> Try searching for "CGI Environment Variables" with the quotes on Yahoo, and
> you'll get a lot of CGI examples you can use.
> 
> Chuck
> 
> -----Original Message-----
> From: owner-freebsd-isp@FreeBSD.ORG
> [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Mark Radabaugh -
> Amplex
> Sent: Wednesday, December 19, 2001 2:57 PM
> To: freebsd-isp@FreeBSD.ORG
> Subject: RE: forwarding surfers..
> 
> 
> We do something like this with a combination of Apache and a Cisco
> router.
> 
> On the Ethernet interface on the Cisco:
> 
> ip policy route-map SUSPENDED
> 
> access-list 192 permit tcp 192.168.0.0 0.0.0.255 any eq www
> 
> route-map SUSPENDED permit 10
>  match ip address 192
>  set interface FastEthernet0/0
>  set ip next-hop 65.165.120.180
> !
> 
> What this does is forward all packets with a source address anywhere in
> 192.168.0.0/24 and connecting to port 80 to 65.165.120.180.
> 
> The next trick is getting the Unix box to accept the packets...  A
> little packet rewriting in IPFW:
> 
> rack0# ipfw show
> 
> 00100      8964      881988 fwd 65.165.120.180 tcp from 192.168.0.0/24
> to any 80
> 
> Any packets that arrive with a source address in the 192.168.0.0/24 get
> redirected to this box.
> 
> Apache has a custom 404 error page.  No matter what web page a customer
> with a 192.168.0.0/24 address requests they get the custom 404 error
> page ("Pay up bum - your account is toast").
> 
> Mark Radabaugh
> Amplex
> (419) 833-3635
> 
> 
> > -----Original Message-----
> > From: owner-freebsd-isp@FreeBSD.ORG
> > [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Matiss Elsbergs
> > Sent: Wednesday, December 19, 2001 1:27 PM
> > To: freebsd-isp@FreeBSD.ORG
> > Subject: forwarding surfers..
> >
> >
> > Hello there, fellow owners of many system processes..
> >
> > Explanation:
> >
> > I have a web server, which must display a one page to one
> > network [ let's
> > say network A ], and the other one - to all other internet.
> > And, it must be
> > done like that: some application [ perhaps ipfw ] checks if
> > the IP belongs
> > to network A. If yes, then nothing's altered, and it goes to web page
> > sitting right there on let's say 159.148.108.4. If it belongs to other
> > Internet, [ which accesses the page by the same URL ], it
> > goes to let's say
> > 159.148.108.5. Is it possible?
> >
> >
> >
> > With best regards -
> > Matiss Elsbergs,
> > Astranet IS Hostmaster
> > +371 6435911
> >
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-isp" in the body of the message
> >
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Dec 20 12:46:24 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from c003.snv.cp.net (c003-h004.c003.snv.cp.net [209.228.32.218])
	by hub.freebsd.org (Postfix) with SMTP id EF18D37B417
	for <freebsd-isp@FreeBSD.ORG>; Thu, 20 Dec 2001 12:46:11 -0800 (PST)
Received: (cpmta 3174 invoked from network); 20 Dec 2001 12:46:09 -0800
Received: from 216.227.100.85 (HELO vector)
  by smtp.telocity.com (209.228.32.218) with SMTP; 20 Dec 2001 12:46:09 -0800
X-Sent: 20 Dec 2001 20:46:09 GMT
From: "Dustin Puryear" <dpuryear@usa.net>
To: <freebsd-isp@FreeBSD.ORG>
Subject: FreeBSD firewall and DNS
Date: Thu, 20 Dec 2001 14:54:28 -0600
Message-ID: <PGECILGGNJGDPJKLFEMIEEKBCKAA.dpuryear@usa.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
Importance: Normal
In-Reply-To: <003101c1890c$370d5cc0$22b197ce@ezo.net>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

I am having problems configuring a FreeBSD 4.4-RELEASE firewall to allow a
DNS server to work. When I say "work" I mean it is unable to resolve names.
Instead, it just times out. Please note that we are using static NAT. Also,
the DNS server is NOT located on the firewall. (On a related note, if I run
a DNS server on the firewall it works.) The DNS server does have a public IP
address via the static NAT mapping, but I would think it should work
regardless. At least, for resolving names.

Okay, so I have a firewall at 10.0.0.1 private a.b.c.d public. Via NAT the
DNS server, which will be for public use, has a private address of 10.0.0.5
and w.x.y.z public. If I install the DNS server on the firewall and use the
rules:

01500 divert 8668 ip from any to any via rl0
...
02600 allow udp from a.b.c.d to any 53 keep-state
02700 allow tcp from a.b.c.d to any 53 keep-state

The DNS server on the firewall works and can resolve names for me. However,
if I put the DNS server on another internal machine and use the rules:

01500 divert 8668 ip from any to any via rl0
...
02800 allow udp from w.x.y.z to any 53 keep-state
02900 allow tcp from w.x.y.z to any 53 keep-state

The internal server times out. Okay, so I am thinking that perhaps since the
divert rule comes first I should be using the internal address:

01500 divert 8668 ip from any to any via rl0
...
02800 allow udp from 10.0.0.5 to any 53 keep-state
02900 allow tcp from 10.0.0.5 to any 53 keep-state

Unfortunately, I get the same result. The DNS server cannot resolve the name
and nslookup eventually times out. Now, I can make it work by adding the
rule:

03640 allow udp from any to 10.0.0.5

But why is this necessary? Assuming my DNS server does not need to be
accessible to external users I should just need to allow the server to hit
remote DNS server's and to expect replies via the keep-state. Am I missing
something here?

BTW, I am including my full ruleset below just in case.

00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
00400 allow ip from any to any via nge0
00500 deny ip from 10.0.0.0/24 to any in recv rl0
00600 deny ip from a.b.c.0/26 to any in recv nge0
00700 deny ip from any to 10.0.0.0/8 via rl0
00800 deny ip from any to 172.16.0.0/12 via rl0
00900 deny ip from any to 192.168.0.0/16 via rl0
01000 deny ip from any to 0.0.0.0/8 via rl0
01100 deny ip from any to 169.254.0.0/16 via rl0
01200 deny ip from any to 192.0.2.0/24 via rl0
01300 deny ip from any to 224.0.0.0/4 via rl0
01400 deny ip from any to 240.0.0.0/4 via rl0
01500 divert 8668 ip from any to any via rl0
01600 deny ip from 10.0.0.0/8 to any via rl0
01700 deny ip from 172.16.0.0/12 to any via rl0
01800 deny ip from 192.168.0.0/16 to any via rl0
01900 deny ip from 0.0.0.0/8 to any via rl0
02000 deny ip from 169.254.0.0/16 to any via rl0
02100 deny ip from 192.0.2.0/24 to any via rl0
02200 deny ip from 224.0.0.0/4 to any via rl0
02300 deny ip from 240.0.0.0/4 to any via rl0
02400 allow tcp from any to any established
02500 allow ip from any to any frag
02600 allow udp from a.b.c.d to any 53 keep-state  # for DNS on firewall
02700 allow tcp from a.b.c.d to any 53 keep-state  # ""
02800 allow udp from w.x.y.z to any 53 keep-state  # for DNS on another box
02900 allow tcp from w.x.y.z to any 53 keep-state  # ""
03000 allow tcp from any to 10.0.0.5 25 setup
03100 allow tcp from any to 10.0.0.20 80 via rl0 setup # web
03200 allow tcp from any to 10.0.0.21 80 via rl0 setup # web
03300 allow tcp from any to any 22 setup
03400 allow icmp from any to any keep-state
03500 allow tcp from any to any setup
03640 allow udp from any to 10.0.0.5 # crappy fix to allow DNS to work
03900 deny log logamount 10 tcp from any to any in recv rl0 setup
65535 deny ip from any to any

Regards, Dustin

---
Dustin Puryear <dpuryear@usa.net>
Information Systems Consultant
http://members.telocity.com/~dpuryear
In the beginning the Universe was created.
This has been widely regarded as a bad move. - Douglas Adams


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Dec 20 13: 9:53 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from smtp.kka.com (smtp.kka.com [63.141.65.2])
	by hub.freebsd.org (Postfix) with ESMTP id 89DC337B419
	for <freebsd-isp@FreeBSD.ORG>; Thu, 20 Dec 2001 13:09:45 -0800 (PST)
Subject: Re: FreeBSD firewall and DNS
To: "Dustin Puryear" <dpuryear@usa.net>
Cc: freebsd-isp@FreeBSD.ORG
X-Mailer: Lotus Notes Release 5.0.8  June 18, 2001
Message-ID: <OF51328C04.31DA7769-ON86256B28.0073B1BC@kka.com>
From: Eric_Stanfield@kenokozie.com
Date: Thu, 20 Dec 2001 15:06:36 -0600
X-MIMETrack: Serialize by Router on Notes1st/Keno(Release 5.0.4 |June 8, 2000) at 12/20/2001
 03:06:38 PM
MIME-Version: 1.0
Content-type: text/plain; charset=us-ascii
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


In all those examples you are allowing queries to be sent TO port 53 of a
dns server, but you are not allowing replies FROM port 53 of the dns
server.  Which is why your very last rule is the only one that makes things
work.  allow udp from any to 10.0.0.5 is allowing the dns server to reply
form port 53 to your machine at 10.0.0.5.

Also, someone else jump in, since when can you keep-state on udp based
traffic?  Maybe I've just forgotten something along the way.

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Eric Stanfield, K2Access
Keno Kozie Associates
222 N LaSalle #1500
Chicago, IL 60606
(312) 332-3000




                                                                                                             
                    "Dustin Puryear"                                                                         
                    <dpuryear@usa.net>         To:     <freebsd-isp@FreeBSD.ORG>                             
                    Sent by:                   cc:                                                           
                    owner-freebsd-isp@F        Subject:     FreeBSD firewall and DNS                         
                    reeBSD.ORG                                                                               
                                                                                                             
                                                                                                             
                    12/20/2001 02:54 PM                                                                      
                                                                                                             
                                                                                                             



I am having problems configuring a FreeBSD 4.4-RELEASE firewall to allow a
DNS server to work. When I say "work" I mean it is unable to resolve names.
Instead, it just times out. Please note that we are using static NAT. Also,
the DNS server is NOT located on the firewall. (On a related note, if I run
a DNS server on the firewall it works.) The DNS server does have a public
IP
address via the static NAT mapping, but I would think it should work
regardless. At least, for resolving names.

Okay, so I have a firewall at 10.0.0.1 private a.b.c.d public. Via NAT the
DNS server, which will be for public use, has a private address of 10.0.0.5
and w.x.y.z public. If I install the DNS server on the firewall and use the
rules:

01500 divert 8668 ip from any to any via rl0
...
02600 allow udp from a.b.c.d to any 53 keep-state
02700 allow tcp from a.b.c.d to any 53 keep-state

The DNS server on the firewall works and can resolve names for me. However,
if I put the DNS server on another internal machine and use the rules:

01500 divert 8668 ip from any to any via rl0
...
02800 allow udp from w.x.y.z to any 53 keep-state
02900 allow tcp from w.x.y.z to any 53 keep-state

The internal server times out. Okay, so I am thinking that perhaps since
the
divert rule comes first I should be using the internal address:

01500 divert 8668 ip from any to any via rl0
...
02800 allow udp from 10.0.0.5 to any 53 keep-state
02900 allow tcp from 10.0.0.5 to any 53 keep-state

Unfortunately, I get the same result. The DNS server cannot resolve the
name
and nslookup eventually times out. Now, I can make it work by adding the
rule:

03640 allow udp from any to 10.0.0.5

But why is this necessary? Assuming my DNS server does not need to be
accessible to external users I should just need to allow the server to hit
remote DNS server's and to expect replies via the keep-state. Am I missing
something here?

BTW, I am including my full ruleset below just in case.

00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
00400 allow ip from any to any via nge0
00500 deny ip from 10.0.0.0/24 to any in recv rl0
00600 deny ip from a.b.c.0/26 to any in recv nge0
00700 deny ip from any to 10.0.0.0/8 via rl0
00800 deny ip from any to 172.16.0.0/12 via rl0
00900 deny ip from any to 192.168.0.0/16 via rl0
01000 deny ip from any to 0.0.0.0/8 via rl0
01100 deny ip from any to 169.254.0.0/16 via rl0
01200 deny ip from any to 192.0.2.0/24 via rl0
01300 deny ip from any to 224.0.0.0/4 via rl0
01400 deny ip from any to 240.0.0.0/4 via rl0
01500 divert 8668 ip from any to any via rl0
01600 deny ip from 10.0.0.0/8 to any via rl0
01700 deny ip from 172.16.0.0/12 to any via rl0
01800 deny ip from 192.168.0.0/16 to any via rl0
01900 deny ip from 0.0.0.0/8 to any via rl0
02000 deny ip from 169.254.0.0/16 to any via rl0
02100 deny ip from 192.0.2.0/24 to any via rl0
02200 deny ip from 224.0.0.0/4 to any via rl0
02300 deny ip from 240.0.0.0/4 to any via rl0
02400 allow tcp from any to any established
02500 allow ip from any to any frag
02600 allow udp from a.b.c.d to any 53 keep-state  # for DNS on firewall
02700 allow tcp from a.b.c.d to any 53 keep-state  # ""
02800 allow udp from w.x.y.z to any 53 keep-state  # for DNS on another box
02900 allow tcp from w.x.y.z to any 53 keep-state  # ""
03000 allow tcp from any to 10.0.0.5 25 setup
03100 allow tcp from any to 10.0.0.20 80 via rl0 setup # web
03200 allow tcp from any to 10.0.0.21 80 via rl0 setup # web
03300 allow tcp from any to any 22 setup
03400 allow icmp from any to any keep-state
03500 allow tcp from any to any setup
03640 allow udp from any to 10.0.0.5 # crappy fix to allow DNS to work
03900 deny log logamount 10 tcp from any to any in recv rl0 setup
65535 deny ip from any to any

Regards, Dustin

---
Dustin Puryear <dpuryear@usa.net>
Information Systems Consultant
http://members.telocity.com/~dpuryear
In the beginning the Universe was created.
This has been widely regarded as a bad move. - Douglas Adams


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Dec 20 14:11:40 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from c003.snv.cp.net (c003-h004.c003.snv.cp.net [209.228.32.218])
	by hub.freebsd.org (Postfix) with SMTP id AC73E37B417
	for <freebsd-isp@FreeBSD.ORG>; Thu, 20 Dec 2001 14:11:28 -0800 (PST)
Received: (cpmta 9609 invoked from network); 20 Dec 2001 14:11:27 -0800
Received: from 216.227.100.85 (HELO vector)
  by smtp.telocity.com (209.228.32.218) with SMTP; 20 Dec 2001 14:11:27 -0800
X-Sent: 20 Dec 2001 22:11:27 GMT
From: "Dustin Puryear" <dpuryear@usa.net>
To: <Eric_Stanfield@kenokozie.com>
Cc: <freebsd-isp@FreeBSD.ORG>
Subject: RE: FreeBSD firewall and DNS
Date: Thu, 20 Dec 2001 16:19:46 -0600
Message-ID: <PGECILGGNJGDPJKLFEMIMEKLCKAA.dpuryear@usa.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
Importance: Normal
In-Reply-To: <OF51328C04.31DA7769-ON86256B28.0073B1BC@kka.com>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

> In all those examples you are allowing queries to be sent TO port 53 of a
> dns server, but you are not allowing replies FROM port 53 of the dns
> server.  Which is why your very last rule is the only one that
> makes things
> work.  allow udp from any to 10.0.0.5 is allowing the dns server to reply
> form port 53 to your machine at 10.0.0.5.

But isn't that the idea behind keep-state? Shouldn't the rule:

01400 divert 8668 ip from any to any via rl0
...
02900 allow udp from 10.0.0.5 to any 53 keep-state

Do this for us?

> Also, someone else jump in, since when can you keep-state on udp based
> traffic?  Maybe I've just forgotten something along the way.

This is from /etc/rc.firewall that came with stock FreeBSD:

# Allow DNS queries out in the world
${fwcmd} add pass udp from ${oip} to any 53 keep-state

I am just trying to tweak it for our use. Anyway, this assumes that the DNS
query will originate from the firewall itself I believe. However, our DNS
server is not located on the firewall but on a machine setup via static NAT
inside our private network. Our DNS server has the private IP 10.0.0.5.

All I know is that it is not working, and I can't figure out why. I have a
feeling that it may have to do with NAT, but I'm not sure. From my
perspective it should work.

Anyway, I found that my dynamic rules are a bit funky. It seems that they
are being build for both my private and public IP addresses for the DNS
server:

02700 2 124 (T 0, # 56) ty 0 udp, aa.bb.cc.dd 1487 <-> 66.135.0.10 53
02900 8 1358 (T 0, # 245) ty 0 udp, 10.0.0.5 1487 <-> 66.135.0.10 53

Where aa.bb.cc.dd is my public IP.

Regards, Dustin

>
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
>
> Eric Stanfield, K2Access
> Keno Kozie Associates
> 222 N LaSalle #1500
> Chicago, IL 60606
> (312) 332-3000
>
>
>
>
>
>
>                     "Dustin Puryear"
>
>                     <dpuryear@usa.net>         To:
> <freebsd-isp@FreeBSD.ORG>
>                     Sent by:                   cc:
>
>                     owner-freebsd-isp@F        Subject:
> FreeBSD firewall and DNS
>                     reeBSD.ORG
>
>
>
>
>
>                     12/20/2001 02:54 PM
>
>
>
>
>
>
>
>
> I am having problems configuring a FreeBSD 4.4-RELEASE firewall to allow a
> DNS server to work. When I say "work" I mean it is unable to
> resolve names.
> Instead, it just times out. Please note that we are using static
> NAT. Also,
> the DNS server is NOT located on the firewall. (On a related
> note, if I run
> a DNS server on the firewall it works.) The DNS server does have a public
> IP
> address via the static NAT mapping, but I would think it should work
> regardless. At least, for resolving names.
>
> Okay, so I have a firewall at 10.0.0.1 private a.b.c.d public. Via NAT the
> DNS server, which will be for public use, has a private address
> of 10.0.0.5
> and w.x.y.z public. If I install the DNS server on the firewall
> and use the
> rules:
>
> 01500 divert 8668 ip from any to any via rl0
> ...
> 02600 allow udp from a.b.c.d to any 53 keep-state
> 02700 allow tcp from a.b.c.d to any 53 keep-state
>
> The DNS server on the firewall works and can resolve names for
> me. However,
> if I put the DNS server on another internal machine and use the rules:
>
> 01500 divert 8668 ip from any to any via rl0
> ...
> 02800 allow udp from w.x.y.z to any 53 keep-state
> 02900 allow tcp from w.x.y.z to any 53 keep-state
>
> The internal server times out. Okay, so I am thinking that perhaps since
> the
> divert rule comes first I should be using the internal address:
>
> 01500 divert 8668 ip from any to any via rl0
> ...
> 02800 allow udp from 10.0.0.5 to any 53 keep-state
> 02900 allow tcp from 10.0.0.5 to any 53 keep-state
>
> Unfortunately, I get the same result. The DNS server cannot resolve the
> name
> and nslookup eventually times out. Now, I can make it work by adding the
> rule:
>
> 03640 allow udp from any to 10.0.0.5
>
> But why is this necessary? Assuming my DNS server does not need to be
> accessible to external users I should just need to allow the server to hit
> remote DNS server's and to expect replies via the keep-state. Am I missing
> something here?
>
> BTW, I am including my full ruleset below just in case.
>
> 00100 allow ip from any to any via lo0
> 00200 deny ip from any to 127.0.0.0/8
> 00300 deny ip from 127.0.0.0/8 to any
> 00400 allow ip from any to any via nge0
> 00500 deny ip from 10.0.0.0/24 to any in recv rl0
> 00600 deny ip from a.b.c.0/26 to any in recv nge0
> 00700 deny ip from any to 10.0.0.0/8 via rl0
> 00800 deny ip from any to 172.16.0.0/12 via rl0
> 00900 deny ip from any to 192.168.0.0/16 via rl0
> 01000 deny ip from any to 0.0.0.0/8 via rl0
> 01100 deny ip from any to 169.254.0.0/16 via rl0
> 01200 deny ip from any to 192.0.2.0/24 via rl0
> 01300 deny ip from any to 224.0.0.0/4 via rl0
> 01400 deny ip from any to 240.0.0.0/4 via rl0
> 01500 divert 8668 ip from any to any via rl0
> 01600 deny ip from 10.0.0.0/8 to any via rl0
> 01700 deny ip from 172.16.0.0/12 to any via rl0
> 01800 deny ip from 192.168.0.0/16 to any via rl0
> 01900 deny ip from 0.0.0.0/8 to any via rl0
> 02000 deny ip from 169.254.0.0/16 to any via rl0
> 02100 deny ip from 192.0.2.0/24 to any via rl0
> 02200 deny ip from 224.0.0.0/4 to any via rl0
> 02300 deny ip from 240.0.0.0/4 to any via rl0
> 02400 allow tcp from any to any established
> 02500 allow ip from any to any frag
> 02600 allow udp from a.b.c.d to any 53 keep-state  # for DNS on firewall
> 02700 allow tcp from a.b.c.d to any 53 keep-state  # ""
> 02800 allow udp from w.x.y.z to any 53 keep-state  # for DNS on
> another box
> 02900 allow tcp from w.x.y.z to any 53 keep-state  # ""
> 03000 allow tcp from any to 10.0.0.5 25 setup
> 03100 allow tcp from any to 10.0.0.20 80 via rl0 setup # web
> 03200 allow tcp from any to 10.0.0.21 80 via rl0 setup # web
> 03300 allow tcp from any to any 22 setup
> 03400 allow icmp from any to any keep-state
> 03500 allow tcp from any to any setup
> 03640 allow udp from any to 10.0.0.5 # crappy fix to allow DNS to work
> 03900 deny log logamount 10 tcp from any to any in recv rl0 setup
> 65535 deny ip from any to any
>
> Regards, Dustin
>
> ---
> Dustin Puryear <dpuryear@usa.net>
> Information Systems Consultant
> http://members.telocity.com/~dpuryear
> In the beginning the Universe was created.
> This has been widely regarded as a bad move. - Douglas Adams
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>
>
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Dec 20 14:25:52 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from smtp.kka.com (smtp.kka.com [63.141.65.2])
	by hub.freebsd.org (Postfix) with ESMTP id 6CE6437B416
	for <freebsd-isp@FreeBSD.ORG>; Thu, 20 Dec 2001 14:25:42 -0800 (PST)
Subject: RE: FreeBSD firewall and DNS
To: "Dustin Puryear" <dpuryear@usa.net>
Cc: freebsd-isp@FreeBSD.ORG
X-Mailer: Lotus Notes Release 5.0.8  June 18, 2001
Message-ID: <OFC7B9562E.F1A22314-ON86256B28.0079F9EF@kka.com>
From: Eric_Stanfield@kenokozie.com
Date: Thu, 20 Dec 2001 16:22:33 -0600
X-MIMETrack: Serialize by Router on Notes1st/Keno(Release 5.0.4 |June 8, 2000) at 12/20/2001
 04:22:35 PM
MIME-Version: 1.0
Content-type: text/plain; charset=us-ascii
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


From my firewall machine at home:

# Enable NAT on the external interface

/sbin/ipfw add divert 8668 ip from any to any via xl0

# Allow name queries

/sbin/ipfw add pass udp from any 53 to any
/sbin/ipfw add pass udp from any to any 53

...works like a charm.  YMMV


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-


"Tell them what you know. Tell them what you don't know. And, only then,
tell them what you think."

Eric Stanfield, K2Access
Keno Kozie Associates
222 N LaSalle #1500
Chicago, IL 60606
(312) 332-3000




                                                                                                       
                    "Dustin                                                                            
                    Puryear"             To:     <Eric_Stanfield@kenokozie.com>                        
                    <dpuryear@usa        cc:     <freebsd-isp@FreeBSD.ORG>                             
                    .net>                Subject:     RE: FreeBSD firewall and DNS                     
                                                                                                       
                    12/20/2001                                                                         
                    04:19 PM                                                                           
                                                                                                       
                                                                                                       



> In all those examples you are allowing queries to be sent TO port 53 of a
> dns server, but you are not allowing replies FROM port 53 of the dns
> server.  Which is why your very last rule is the only one that
> makes things
> work.  allow udp from any to 10.0.0.5 is allowing the dns server to reply
> form port 53 to your machine at 10.0.0.5.

But isn't that the idea behind keep-state? Shouldn't the rule:

01400 divert 8668 ip from any to any via rl0
...
02900 allow udp from 10.0.0.5 to any 53 keep-state

Do this for us?

> Also, someone else jump in, since when can you keep-state on udp based
> traffic?  Maybe I've just forgotten something along the way.

This is from /etc/rc.firewall that came with stock FreeBSD:

# Allow DNS queries out in the world
${fwcmd} add pass udp from ${oip} to any 53 keep-state

I am just trying to tweak it for our use. Anyway, this assumes that the DNS
query will originate from the firewall itself I believe. However, our DNS
server is not located on the firewall but on a machine setup via static NAT
inside our private network. Our DNS server has the private IP 10.0.0.5.

All I know is that it is not working, and I can't figure out why. I have a
feeling that it may have to do with NAT, but I'm not sure. From my
perspective it should work.

Anyway, I found that my dynamic rules are a bit funky. It seems that they
are being build for both my private and public IP addresses for the DNS
server:

02700 2 124 (T 0, # 56) ty 0 udp, aa.bb.cc.dd 1487 <-> 66.135.0.10 53
02900 8 1358 (T 0, # 245) ty 0 udp, 10.0.0.5 1487 <-> 66.135.0.10 53

Where aa.bb.cc.dd is my public IP.

Regards, Dustin

>
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
>
> Eric Stanfield, K2Access
> Keno Kozie Associates
> 222 N LaSalle #1500
> Chicago, IL 60606
> (312) 332-3000
>
>
>
>
>
>
>                     "Dustin Puryear"
>
>                     <dpuryear@usa.net>         To:
> <freebsd-isp@FreeBSD.ORG>
>                     Sent by:                   cc:
>
>                     owner-freebsd-isp@F        Subject:
> FreeBSD firewall and DNS
>                     reeBSD.ORG
>
>
>
>
>
>                     12/20/2001 02:54 PM
>
>
>
>
>
>
>
>
> I am having problems configuring a FreeBSD 4.4-RELEASE firewall to allow
a
> DNS server to work. When I say "work" I mean it is unable to
> resolve names.
> Instead, it just times out. Please note that we are using static
> NAT. Also,
> the DNS server is NOT located on the firewall. (On a related
> note, if I run
> a DNS server on the firewall it works.) The DNS server does have a public
> IP
> address via the static NAT mapping, but I would think it should work
> regardless. At least, for resolving names.
>
> Okay, so I have a firewall at 10.0.0.1 private a.b.c.d public. Via NAT
the
> DNS server, which will be for public use, has a private address
> of 10.0.0.5
> and w.x.y.z public. If I install the DNS server on the firewall
> and use the
> rules:
>
> 01500 divert 8668 ip from any to any via rl0
> ...
> 02600 allow udp from a.b.c.d to any 53 keep-state
> 02700 allow tcp from a.b.c.d to any 53 keep-state
>
> The DNS server on the firewall works and can resolve names for
> me. However,
> if I put the DNS server on another internal machine and use the rules:
>
> 01500 divert 8668 ip from any to any via rl0
> ...
> 02800 allow udp from w.x.y.z to any 53 keep-state
> 02900 allow tcp from w.x.y.z to any 53 keep-state
>
> The internal server times out. Okay, so I am thinking that perhaps since
> the
> divert rule comes first I should be using the internal address:
>
> 01500 divert 8668 ip from any to any via rl0
> ...
> 02800 allow udp from 10.0.0.5 to any 53 keep-state
> 02900 allow tcp from 10.0.0.5 to any 53 keep-state
>
> Unfortunately, I get the same result. The DNS server cannot resolve the
> name
> and nslookup eventually times out. Now, I can make it work by adding the
> rule:
>
> 03640 allow udp from any to 10.0.0.5
>
> But why is this necessary? Assuming my DNS server does not need to be
> accessible to external users I should just need to allow the server to
hit
> remote DNS server's and to expect replies via the keep-state. Am I
missing
> something here?
>
> BTW, I am including my full ruleset below just in case.
>
> 00100 allow ip from any to any via lo0
> 00200 deny ip from any to 127.0.0.0/8
> 00300 deny ip from 127.0.0.0/8 to any
> 00400 allow ip from any to any via nge0
> 00500 deny ip from 10.0.0.0/24 to any in recv rl0
> 00600 deny ip from a.b.c.0/26 to any in recv nge0
> 00700 deny ip from any to 10.0.0.0/8 via rl0
> 00800 deny ip from any to 172.16.0.0/12 via rl0
> 00900 deny ip from any to 192.168.0.0/16 via rl0
> 01000 deny ip from any to 0.0.0.0/8 via rl0
> 01100 deny ip from any to 169.254.0.0/16 via rl0
> 01200 deny ip from any to 192.0.2.0/24 via rl0
> 01300 deny ip from any to 224.0.0.0/4 via rl0
> 01400 deny ip from any to 240.0.0.0/4 via rl0
> 01500 divert 8668 ip from any to any via rl0
> 01600 deny ip from 10.0.0.0/8 to any via rl0
> 01700 deny ip from 172.16.0.0/12 to any via rl0
> 01800 deny ip from 192.168.0.0/16 to any via rl0
> 01900 deny ip from 0.0.0.0/8 to any via rl0
> 02000 deny ip from 169.254.0.0/16 to any via rl0
> 02100 deny ip from 192.0.2.0/24 to any via rl0
> 02200 deny ip from 224.0.0.0/4 to any via rl0
> 02300 deny ip from 240.0.0.0/4 to any via rl0
> 02400 allow tcp from any to any established
> 02500 allow ip from any to any frag
> 02600 allow udp from a.b.c.d to any 53 keep-state  # for DNS on firewall
> 02700 allow tcp from a.b.c.d to any 53 keep-state  # ""
> 02800 allow udp from w.x.y.z to any 53 keep-state  # for DNS on
> another box
> 02900 allow tcp from w.x.y.z to any 53 keep-state  # ""
> 03000 allow tcp from any to 10.0.0.5 25 setup
> 03100 allow tcp from any to 10.0.0.20 80 via rl0 setup # web
> 03200 allow tcp from any to 10.0.0.21 80 via rl0 setup # web
> 03300 allow tcp from any to any 22 setup
> 03400 allow icmp from any to any keep-state
> 03500 allow tcp from any to any setup
> 03640 allow udp from any to 10.0.0.5 # crappy fix to allow DNS to work
> 03900 deny log logamount 10 tcp from any to any in recv rl0 setup
> 65535 deny ip from any to any
>
> Regards, Dustin
>
> ---
> Dustin Puryear <dpuryear@usa.net>
> Information Systems Consultant
> http://members.telocity.com/~dpuryear
> In the beginning the Universe was created.
> This has been widely regarded as a bad move. - Douglas Adams
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>
>
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>






To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Dec 20 19:28: 4 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from mailsrv.amplex.net (mailsrv.amplex.net [65.165.120.194])
	by hub.freebsd.org (Postfix) with ESMTP id 60D4B37B405
	for <freebsd-isp@freebsd.org>; Thu, 20 Dec 2001 19:28:02 -0800 (PST)
Received: from mark2000 (65-165-120-240.amplex.net [65.165.120.240])
	(authenticated (0 bits))
	by mailsrv.amplex.net (8.11.6/8.11.6) with ESMTP id fBL3T9p95048
	(using TLSv1/SSLv3 with cipher RC4-MD5 (128 bits) verified NO)
	for <freebsd-isp@freebsd.org>; Thu, 20 Dec 2001 22:29:10 -0500 (EST)
From: "Mark Radabaugh - Amplex" <mark@amplex.net>
To: <freebsd-isp@freebsd.org>
Subject: RE: forwarding surfers..
Date: Thu, 20 Dec 2001 22:27:55 -0500
Message-ID: <MOEMIEFAGIMHBFOCOJKHKEBOGJAA.mark@amplex.net>
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
In-Reply-To: <Pine.BSF.4.05.10112201419350.9680-100000@buffnet11.buffnet.net>
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

> if a server has PHP enabled it can just check the addr of the person
> connecting and do an include based on what it sees.  Much easier than
> fadigling routers
>

You assume that you normally are routing all traffic through the Apache
box - we do not normally do that.  A unsuspended dialup customer gets a
regular IP address and is directly on the Internet.  Suspended customers
get a 192.168.0.0/24 IP address - we want all of that traffic directed
by the router to the Apache machine so that no matter what web site they
request in the browser they are sent to the 'suspended' page.

If you don't redirect the traffic at the router how are you going to get
the packets from a dialup customer on a terminal server to the Apache
box?

Once you get the packets to the Apache box you still need to get it to
accept the traffic rather than bouncing it back out to the router -
that's what the IPFW stuff is for.

There are lot's of ways that Apache can determine the calling IP
address - the problem is getting the packets to Apache in the first
place.

Mark Radabaugh
Amplex
(419) 833-3635




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Dec 21  1:50: 8 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from jolabraise.virtua.ch (jolabraise.virtua.ch [62.2.186.253])
	by hub.freebsd.org (Postfix) with ESMTP id 2250E37B416
	for <freebsd-isp@FreeBSD.ORG>; Fri, 21 Dec 2001 01:50:04 -0800 (PST)
Received: from RATAMIAOU (unknown [192.168.1.127])
	by jolabraise.virtua.ch (Postfix) with SMTP id A62DB3577
	for <freebsd-isp@FreeBSD.ORG>; Wed, 19 Dec 2001 10:39:58 +0100 (CET)
Message-ID: <004301c18872$b7ca9200$7f01a8c0@gastroleader.com>
From: "Marcel Prisi" <marcel-lists@virtua.ch>
To: "BSD-ISP" <freebsd-isp@FreeBSD.ORG>
Subject: Restore procedures
Date: Wed, 19 Dec 2001 10:51:23 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hi !

I just wanted to share some advice on the proper way to restore a FreeBSD
after a disaster.

How to create a disaster recovery floppy / CD ? (infos in the handbook seem
out-of-date)

Is there a way to script fdisk / disklabel ?

Would you use the Live Filesystem ?

Thanks for helping !


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Dec 21  3:22: 4 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from digitaldaemon.com (digitaldaemon.com [63.105.9.34])
	by hub.freebsd.org (Postfix) with SMTP id A848F37B405
	for <freebsd-isp@FreeBSD.ORG>; Fri, 21 Dec 2001 03:22:01 -0800 (PST)
Received: (qmail 25635 invoked from network); 21 Dec 2001 11:21:21 -0000
Received: from 213-84-202-101.adsl.xs4all.nl (HELO jak.nl) (213.84.202.101)
  by jak.nl with SMTP; 21 Dec 2001 11:21:21 -0000
Message-ID: <3C231C0F.4070608@jak.nl>
Date: Fri, 21 Dec 2001 12:25:03 +0100
From: Arjan Knepper <arjan@jak.nl>
Organization: JAK++ Software Development B.V.
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.4) Gecko/20011128 Netscape6/6.2.1
X-Accept-Language: en-us
MIME-Version: 1.0
To: Marcel Prisi <marcel-lists@virtua.ch>
Cc: BSD-ISP <freebsd-isp@FreeBSD.ORG>
Subject: Re: Restore procedures
References: <004301c18872$b7ca9200$7f01a8c0@gastroleader.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Marcel Prisi wrote:

>Hi !
>
>I just wanted to share some advice on the proper way to restore a FreeBSD
>after a disaster.
>
>How to create a disaster recovery floppy / CD ? (infos in the handbook seem
>out-of-date)
>
Type: man picobsd
Also see :

http://www.daemonnews.org/199911/fbsdlab.html

for more information.

>Is there a way to script fdisk / disklabel ?
>
Depends on what you want to achieve.

>
>Would you use the Live Filesystem ?
>
>Thanks for helping !
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-isp" in the body of the message
>
>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Dec 21  5:49: 7 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from buffnet4.buffnet.net (buffnet4.buffnet.net [205.246.19.13])
	by hub.freebsd.org (Postfix) with ESMTP id CF20337B419
	for <freebsd-isp@FreeBSD.ORG>; Fri, 21 Dec 2001 05:49:04 -0800 (PST)
Received: from buffnet11.buffnet.net (buffnet11.buffnet.net [205.246.19.55])
	by buffnet4.buffnet.net (8.9.3/8.8.7) with ESMTP id JAA54382;
	Fri, 21 Dec 2001 09:05:07 -0500 (EST)
	(envelope-from shovey@buffnet.net)
Date: Fri, 21 Dec 2001 08:49:00 -0500 (EST)
From: Stephen Hovey <shovey@buffnet.net>
To: Mark Radabaugh - Amplex <mark@amplex.net>
Cc: freebsd-isp@FreeBSD.ORG
Subject: RE: forwarding surfers..
In-Reply-To: <MOEMIEFAGIMHBFOCOJKHKEBOGJAA.mark@amplex.net>
Message-ID: <Pine.BSF.4.05.10112210848530.13790-100000@buffnet11.buffnet.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


Ah.. I missed that piece.

On Thu, 20 Dec 2001, Mark Radabaugh - Amplex wrote:

> > if a server has PHP enabled it can just check the addr of the person
> > connecting and do an include based on what it sees.  Much easier than
> > fadigling routers
> >
> 
> You assume that you normally are routing all traffic through the Apache
> box - we do not normally do that.  A unsuspended dialup customer gets a
> regular IP address and is directly on the Internet.  Suspended customers
> get a 192.168.0.0/24 IP address - we want all of that traffic directed
> by the router to the Apache machine so that no matter what web site they
> request in the browser they are sent to the 'suspended' page.
> 
> If you don't redirect the traffic at the router how are you going to get
> the packets from a dialup customer on a terminal server to the Apache
> box?
> 
> Once you get the packets to the Apache box you still need to get it to
> accept the traffic rather than bouncing it back out to the router -
> that's what the IPFW stuff is for.
> 
> There are lot's of ways that Apache can determine the calling IP
> address - the problem is getting the packets to Apache in the first
> place.
> 
> Mark Radabaugh
> Amplex
> (419) 833-3635
> 
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Dec 21  6:28:22 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from xela.oopz.com (xela.oopz.com [209.20.244.131])
	by hub.freebsd.org (Postfix) with ESMTP id 0B8F637B41B
	for <freebsd-isp@FreeBSD.ORG>; Fri, 21 Dec 2001 06:28:08 -0800 (PST)
Subject: Sendmail vacation
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Fri, 21 Dec 2001 06:28:07 -0800
Message-ID: <A6A82340FB3DB643A0678E3B10CD5AC1062FA2@xela.oopz.com>
content-class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft Exchange V6.0.4712.0
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Sendmail vacation
Thread-Index: AcGKK7WSfwJWKerASWa/syjZwffLqA==
From: "Noah Davidson" <Noah@oopz.com>
To: "FreeBSD-ISP List (E-mail)" <freebsd-isp@FreeBSD.ORG>
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

I have built sendmail 8.12 and I am configuring it to be our main mail
server for about 5000 or so users.  The only problem is that the
.vacation files do not seam to work.  How can I get this feature
working, or could someone point me in the direction to get this working.

Thanks
Noah

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Dec 21  6:31:35 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from xela.oopz.com (xela.oopz.com [209.20.244.131])
	by hub.freebsd.org (Postfix) with ESMTP id E071E37B405
	for <freebsd-isp@FreeBSD.ORG>; Fri, 21 Dec 2001 06:31:33 -0800 (PST)
Subject: backup
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Fri, 21 Dec 2001 06:31:33 -0800
Message-ID: <A6A82340FB3DB643A0678E3B10CD5AC1062FA3@xela.oopz.com>
content-class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft Exchange V6.0.4712.0
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: backup
Thread-Index: AcGKLDBKkyzwOXZ8SgCqKHGalKGAAw==
From: "Noah Davidson" <Noah@oopz.com>
To: "FreeBSD-ISP List (E-mail)" <freebsd-isp@FreeBSD.ORG>
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Can anyone recommend any backup software that will run on a windows 2000
server and back up our windows environment as well as our UNIX mainly
FreeBSD.  Most of or people are windows people so we need something that
will run from a windows system or interface. =20

Thanks
Noah

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Dec 21  7:45:44 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from news.lucky.net (news.lucky.net [193.193.193.102])
	by hub.freebsd.org (Postfix) with ESMTP id 57B9A37B507
	for <freebsd-isp@freebsd.org>; Fri, 21 Dec 2001 07:45:33 -0800 (PST)
Received: (from mail@localhost)
        by news.lucky.net (8.Who.Cares/8.Who.Cares) id RRM25670
        for freebsd-isp@freebsd.org; Fri, 21 Dec 2001 17:45:29 +0200
        (envelope-from vlad@majar.com)
From: "Vlad Shvedenko" <vlad@majar.com>
To: freebsd-isp@freebsd.org
Subject: pppd <unitN> facility
Date: Fri, 21 Dec 2001 17:06:57 +0200
Organization: Utel
Message-ID: <9vvja8$1ufs$1@bn.utel.com.ua>
X-Trace: bn.utel.com.ua 1008947336 63996 212.113.36.141 (21 Dec 2001 15:08:56 GMT)
X-Complaints-To: postmaster@utel.net.ua
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.00.2615.200
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hello.
I'd read man for both ppp and pppd just now and I found that there's
option -unit N appears in ppp's  only.
Please tell me, are there any oportunities to specify address of unit
(ppp0,ppp1...) for a specific interface.

Thanx in advance.
Vlad


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Dec 21  8:58:49 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from smtpzilla1.xs4all.nl (smtpzilla1.xs4all.nl [194.109.127.137])
	by hub.freebsd.org (Postfix) with ESMTP id EC91337B416
	for <freebsd-isp@freebsd.org>; Fri, 21 Dec 2001 08:58:43 -0800 (PST)
Received: from grand.canyon.xs4all.nl (canyon.xs4all.nl [194.109.195.185])
	by smtpzilla1.xs4all.nl (8.12.0/8.12.0) with ESMTP id fBLGwaBE025519;
	Fri, 21 Dec 2001 17:58:42 +0100 (CET)
Received: by grand.canyon.xs4all.nl (Postfix, from userid 1000)
	id BCB575F37; Fri, 21 Dec 2001 17:58:36 +0100 (CET)
Received: from meandrix.tunix.nl (localhost [127.0.0.1])
	by grand.canyon.xs4all.nl (Postfix) with ESMTP
	id 56DB25D1A; Fri, 21 Dec 2001 17:58:36 +0100 (CET)
Date: Fri, 21 Dec 2001 17:37:27 +0100
Subject: Re: PPTP Behind NAT?
Content-Type: text/plain; charset=US-ASCII; format=flowed
Mime-Version: 1.0 (Apple Message framework v480)
Cc: freebsd-isp@freebsd.org
To: "Blake Crosby" <dev@samurai.com>
From: Rene de Vries <rene@canyon.xs4all.nl>
In-Reply-To: <JAEEIJKIHAONENKPFCCPGENLCBAA.dev@samurai.com>
Message-Id: <052DACBA-F631-11D5-BF09-00039357FA7A@canyon.xs4all.nl>
Content-Transfer-Encoding: 7bit
X-Mailer: Apple Mail (2.480)
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Blake,

What is the ruleset used for ipnat?
Did you remember to also add a line for non tcp/udp natting (pptp uses 
GRE).

Rene

On Thursday, December 20, 2001, at 03:47 PM, Blake Crosby wrote:
> I'm having trouble getting tcp/ip working once I connect to a machine 
> using
> PPTP. Here is my network setup.
>
> pptp server (freebsd 4.4 - using mpd-netgraph)
> |
> |
> Internet
> |
> |
> Gateway, running ipnat (freebsd 4.3)
> |
> |
> Windows XP Machine.
>
> I can connect fine, except I can't really do much from that point on. 
> The
> server has the ip address 192.168.0.1 and the client has 192.168.0.2. 
> When
> I try to ping the clients ip address from the server I get this:
>
> PING 192.168.0.2 (192.168.0.2): 56 data bytes
> ping: sendto: Permission denied
> ping: sendto: Permission denied
>
> according to ifconfig, the tunnel seems to be up:
>
> ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> mtu 1500
>          inet 192.168.0.1 --> 192.168.0.2 netmask 0xffffffff
>
> my mpd.conf file looks like:
>
> pptp:
>          new -i ng0 pptp pptp
>          set iface disable on-demand
>          set iface enable proxy-arp
>          set iface idle 1800
>          set bundle disable multilink
>          set link yes acfcomp protocomp
>          set link no pap chap
>          set link enable chap
>          set link keep-alive 10 60
>          set ipcp yes vjcomp
>          set ipcp ranges 192.168.0.1/32 192.168.0.2/30
>          set ipcp dns xxx.xxx.xxx.xxx <--- IP address of external 
> interface
> (yes a dns server is listening)
>
>          set bundle enable compression
>          set ccp yes mppc
>          set ccp yes mpp-e40
>          set ccp yes mpp-e128
>          set ccp yes mpp-stateless
>
> and mpd.links:
>
> pptp:
>          set link type pptp
>          set pptp self xxx.xxx.xxx.xxx <-- External IP address
>          set pptp enable incoming
>          set pptp disable originate
>
> any idea what could be wrong? Is this a nat problem?
>
> Blake
--
Rene de Vries <rene@tunix.nl>
TUNIX Open System Consultants BV
Wijchenseweg 111, 6538 SW Nijmegen, the Netherlands
phone: +31-(0)24-3455000 / fax: +31-(0)24-3455001


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Dec 21  9: 1:14 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from mail2.mediadesign.nl (md2.mediadesign.nl [212.19.205.67])
	by hub.freebsd.org (Postfix) with SMTP id 7489737B405
	for <freebsd-isp@FreeBSD.ORG>; Fri, 21 Dec 2001 09:01:11 -0800 (PST)
Received: (qmail 32402 invoked by uid 1002); 21 Dec 2001 17:01:02 -0000
From: "Alson van der Meulen" <alm@flutnet.org>
Date: Fri, 21 Dec 2001 18:01:02 +0100
To: "FreeBSD-ISP List (E-mail)" <freebsd-isp@FreeBSD.ORG>
Subject: Re: backup
Message-ID: <20011221180101.A26878@alm.xs4all.nl>
Mail-Followup-To: "FreeBSD-ISP List (E-mail)" <freebsd-isp@FreeBSD.ORG>
References: <A6A82340FB3DB643A0678E3B10CD5AC1062FA3@xela.oopz.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <A6A82340FB3DB643A0678E3B10CD5AC1062FA3@xela.oopz.com>
User-Agent: Mutt/1.3.23i
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Noah Davidson(Noah@oopz.com)@2001.12.21 06:31:33 +0000:
> Can anyone recommend any backup software that will run on a windows 2000
> server and back up our windows environment as well as our UNIX mainly
> FreeBSD.  Most of or people are windows people so we need something that
> will run from a windows system or interface.  
You could use amanda (www.amanda.org). I'm not sure if it's been ported
to windows, but you could at least use smbtar from a FreeBSD box. You
really want to backup your unix box from windows, I suggest that you
export the drivers via samba and ask on a windows list how to backup
these.

There is a win32 client for amanda in development, but I haven't tested
it, so I don't know how stable it is:
http://sourceforge.net/projects/amanda-win32/

Amanda is especially useful if you've to backup/restore multiple hosts
on one single tape.

HTH,
Alson
-- 
,-------------------------------------------.
> Name:           Alson van der Meulen      <
> Personal:        alson@flutnet.org        <
> School:       alson@gymnasiumleiden.nl    <
`-------------------------------------------'
I have never seen it do *that* before...
---------------------------------------------

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Dec 21 10:15: 5 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from infiniteloop.ca (infiniteloop.ca [216.126.86.53])
	by hub.freebsd.org (Postfix) with ESMTP id D37AE37B405
	for <freebsd-isp@freebsd.org>; Fri, 21 Dec 2001 10:14:59 -0800 (PST)
Received: from localhost (localhost [127.0.0.1])
	by infiniteloop.ca (Postfix) with ESMTP
	id 18985152; Fri, 21 Dec 2001 13:14:59 -0500 (EST)
Received: from blake (CPE0050da7c7e5d.cpe.net.cable.rogers.com [24.101.32.246])
	(using TLSv1 with cipher RC4-MD5 (128/128 bits))
	(Client did not present a certificate)
	by infiniteloop.ca (Postfix) with ESMTP
	id 0EAE241; Fri, 21 Dec 2001 13:14:58 -0500 (EST)
From: "Blake Crosby" <dev@samurai.com>
To: "Rene de Vries" <rene@canyon.xs4all.nl>,
	"Blake Crosby" <dev@samurai.com>
Cc: <freebsd-isp@freebsd.org>
Subject: RE: PPTP Behind NAT?
Date: Fri, 21 Dec 2001 13:15:13 -0500
Message-ID: <JAEEIJKIHAONENKPFCCPGEOBCBAA.dev@samurai.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Importance: Normal
In-Reply-To: <052DACBA-F631-11D5-BF09-00039357FA7A@canyon.xs4all.nl>
X-Virus-Scanned: by AMaViS snapshot-20010714
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Yeah, IPNAT is forwarding all types of packets. The problem seems to be an
arp one, on the server.

For some reason, I cannot get proxy-arping to work. I've also posted to
freebsd-net about this , and haven't gotten any answer.

Blake

> -----Original Message-----
> From: Rene de Vries [mailto:rene@canyon.xs4all.nl]
> Sent: December 21, 2001 11:37 AM
> To: Blake Crosby
> Cc: freebsd-isp@freebsd.org
> Subject: Re: PPTP Behind NAT?
>
>
> Blake,
>
> What is the ruleset used for ipnat?
> Did you remember to also add a line for non tcp/udp natting (pptp uses
> GRE).
>
> Rene
>
> On Thursday, December 20, 2001, at 03:47 PM, Blake Crosby wrote:
> > I'm having trouble getting tcp/ip working once I connect to a machine
> > using
> > PPTP. Here is my network setup.
> >
> > pptp server (freebsd 4.4 - using mpd-netgraph)
> > |
> > |
> > Internet
> > |
> > |
> > Gateway, running ipnat (freebsd 4.3)
> > |
> > |
> > Windows XP Machine.
> >
> > I can connect fine, except I can't really do much from that point on.
> > The
> > server has the ip address 192.168.0.1 and the client has 192.168.0.2.
> > When
> > I try to ping the clients ip address from the server I get this:
> >
> > PING 192.168.0.2 (192.168.0.2): 56 data bytes
> > ping: sendto: Permission denied
> > ping: sendto: Permission denied
> >
> > according to ifconfig, the tunnel seems to be up:
> >
> > ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> mtu 1500
> >          inet 192.168.0.1 --> 192.168.0.2 netmask 0xffffffff
> >
> > my mpd.conf file looks like:
> >
> > pptp:
> >          new -i ng0 pptp pptp
> >          set iface disable on-demand
> >          set iface enable proxy-arp
> >          set iface idle 1800
> >          set bundle disable multilink
> >          set link yes acfcomp protocomp
> >          set link no pap chap
> >          set link enable chap
> >          set link keep-alive 10 60
> >          set ipcp yes vjcomp
> >          set ipcp ranges 192.168.0.1/32 192.168.0.2/30
> >          set ipcp dns xxx.xxx.xxx.xxx <--- IP address of external
> > interface
> > (yes a dns server is listening)
> >
> >          set bundle enable compression
> >          set ccp yes mppc
> >          set ccp yes mpp-e40
> >          set ccp yes mpp-e128
> >          set ccp yes mpp-stateless
> >
> > and mpd.links:
> >
> > pptp:
> >          set link type pptp
> >          set pptp self xxx.xxx.xxx.xxx <-- External IP address
> >          set pptp enable incoming
> >          set pptp disable originate
> >
> > any idea what could be wrong? Is this a nat problem?
> >
> > Blake
> --
> Rene de Vries <rene@tunix.nl>
> TUNIX Open System Consultants BV
> Wijchenseweg 111, 6538 SW Nijmegen, the Netherlands
> phone: +31-(0)24-3455000 / fax: +31-(0)24-3455001
>
>
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Dec 21 19:15: 3 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from c003.snv.cp.net (c003-h016.c003.snv.cp.net [209.228.32.230])
	by hub.freebsd.org (Postfix) with SMTP id 34B3937B419
	for <freebsd-isp@freebsd.org>; Fri, 21 Dec 2001 19:14:58 -0800 (PST)
Received: (cpmta 22486 invoked from network); 21 Dec 2001 19:14:57 -0800
Received: from 216.227.100.85 (HELO vector)
  by smtp.telocity.com (209.228.32.230) with SMTP; 21 Dec 2001 19:14:57 -0800
X-Sent: 22 Dec 2001 03:14:57 GMT
From: "Dustin Puryear" <dpuryear@usa.net>
To: <freebsd-isp@freebsd.org>, <freebsd-questions@freebsd.org>
Subject: FreeBSD Performance Monitoring and SNMP
Date: Fri, 21 Dec 2001 21:23:20 -0600
Message-ID: <PGECILGGNJGDPJKLFEMIEEAACLAA.dpuryear@usa.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Importance: Normal
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Earlier I asked about performance monitoring ala sar for FreeBSD.
Unfortunately, there doesn't seem to be a sar-like tool available (and
please nobody suggest that vmstat and related tools are anything close), but
I was directed toward the use of SNMP for performance monitoring. While I
had hoped for a system tool, SNMP is a viable alternative. Therefore, we
will be moving forward with using MRTG to track server performance. Now, the
next task.

Has anyone gone down this road before? If so, would you mind sharing your
MRTG configuration? Certainly, we can do this on our own. However, the
values that need monitoring may take a bit of research and digging, and I
hate to reinvent the wheel. Also, I'd like to hear about your experiences in
doing this.

Any tips, advice, or leads? Thanks!

Regards, Dustin

---
Dustin Puryear <dpuryear@usa.net>
Information Systems Consultant
http://members.telocity.com/~dpuryear
In the beginning the Universe was created.
This has been widely regarded as a bad move. - Douglas Adams



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Dec 21 20:21:55 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from lily.ezo.net (lily.ezo.net [206.102.130.13])
	by hub.freebsd.org (Postfix) with ESMTP
	id CEBCB37B405; Fri, 21 Dec 2001 20:21:47 -0800 (PST)
Received: from savvyd (c3-1a119.neo.rr.com [24.93.230.119])
	by lily.ezo.net (8.11.3/8.11.3) with SMTP id fBM4VwN12862;
	Fri, 21 Dec 2001 23:31:58 -0500 (EST)
Message-ID: <001f01c18aa0$48828bc0$22b197ce@ezo.net>
From: "Jim Flowers" <jflowers@ezo.net>
To: "Dustin Puryear" <dpuryear@usa.net>, <freebsd-isp@FreeBSD.ORG>,
	<freebsd-questions@FreeBSD.ORG>
References: <PGECILGGNJGDPJKLFEMIEEAACLAA.dpuryear@usa.net>
Subject: Re: FreeBSD Performance Monitoring and SNMP
Date: Fri, 21 Dec 2001 23:22:32 -0500
Organization: EZNets, Inc.
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Yeah, I've done a bit of it but as I don't know anything about sar, I don't
really know what you are trying to do.  Mrtg will do a good job of
displaying graphs of incremental or non-incremental counter values and can
even operate on or mathematically combine them.  Formats are somewhat fixed
but you can easily generate both configuration files and summary index
pages.  Look at the contributed directory when you install it for a lot of
ideas.

You might want to look at RRD which is a followup to Mrtg, both more
flexible and more difficult.  If you follow the links from the web page you
will also find more front/back ends that may do things pretty much the way
you want them.

They are both great tools for extensive display of sampled data.


Jim Flowers - EZNets, Inc. <jflowers@ezo.net>
----- Original Message -----
From: "Dustin Puryear" <dpuryear@usa.net>
To: <freebsd-isp@FreeBSD.ORG>; <freebsd-questions@FreeBSD.ORG>
Sent: Friday, December 21, 2001 10:23 PM
Subject: FreeBSD Performance Monitoring and SNMP


> Earlier I asked about performance monitoring ala sar for FreeBSD.
> Unfortunately, there doesn't seem to be a sar-like tool available (and
> please nobody suggest that vmstat and related tools are anything close),
but
> I was directed toward the use of SNMP for performance monitoring. While I
> had hoped for a system tool, SNMP is a viable alternative. Therefore, we
> will be moving forward with using MRTG to track server performance. Now,
the
> next task.
>
> Has anyone gone down this road before? If so, would you mind sharing your
> MRTG configuration? Certainly, we can do this on our own. However, the
> values that need monitoring may take a bit of research and digging, and I
> hate to reinvent the wheel. Also, I'd like to hear about your experiences
in
> doing this.
>
> Any tips, advice, or leads? Thanks!
>
> Regards, Dustin
>
> ---
> Dustin Puryear <dpuryear@usa.net>
> Information Systems Consultant
> http://members.telocity.com/~dpuryear
> In the beginning the Universe was created.
> This has been widely regarded as a bad move. - Douglas Adams
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Dec 21 23:49: 0 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from arnold.neland.dk (0x3ef31288.albnxx2.adsl.tele.dk [62.243.18.136])
	by hub.freebsd.org (Postfix) with ESMTP id 68E4737B416
	for <freebsd-isp@FreeBSD.ORG>; Fri, 21 Dec 2001 23:48:57 -0800 (PST)
Received: from localhost (localhost [127.0.0.1])
	by arnold.neland.dk (8.11.6/8.11.6) with ESMTP id fBM7ojd40211;
	Sat, 22 Dec 2001 08:50:45 +0100 (CET)
	(envelope-from leifn@neland.dk)
Date: Sat, 22 Dec 2001 08:50:45 +0100 (CET)
From: Leif Neland <leifn@neland.dk>
To: Marcel Prisi <marcel-lists@virtua.ch>
Cc: BSD-ISP <freebsd-isp@FreeBSD.ORG>
Subject: Re: Restore procedures
In-Reply-To: <004301c18872$b7ca9200$7f01a8c0@gastroleader.com>
Message-ID: <20011222084702.G95956-100000@arnold.neland.dk>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org



On Wed, 19 Dec 2001, Marcel Prisi wrote:

> Hi !
>
> I just wanted to share some advice on the proper way to restore a FreeBSD
> after a disaster.
>
> How to create a disaster recovery floppy / CD ? (infos in the handbook seem
> out-of-date)
>
While it will not be fully automatic, I think it is possible to create
backups in a format sysinstall can install as a distribution. I hope to
find time to try it soon.

Leif



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sat Dec 22  3:51:23 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from net2.dinoex.sub.org (net2.dinoex.de [212.184.201.182])
	by hub.freebsd.org (Postfix) with ESMTP id 02F1737B405
	for <freebsd-isp@FreeBSD.ORG>; Sat, 22 Dec 2001 03:51:17 -0800 (PST)
Received: from gate.dinoex.sub.org (dinoex@localhost)
	by net2.dinoex.sub.org (8.11.6/8.11.6) with BSMTP id fBMBt3821637; Sat, 22 Dec 2001 12:55:03 +0100 (CET)
	(envelope-from dirk.meyer@dinoex.sub.org)
To: freebsd-isp@FreeBSD.ORG, Noah@oopz.com
Message-ID: <gBVYIaeWMZ@dmeyer.dinoex.sub.org>
From: dirk.meyer@dinoex.sub.org (Dirk Meyer)
Organization: privat
Subject: Re: Sendmail vacation
Date: Sat, 22 Dec 2001 12:52:41 +0100
X-Mailer: Dinoex 1.77
References: <A6A82340FB3DB643A0678E3B10CD5AC1062FA2@xela.oopz.com>
X-Gateway: ZCONNECT gate.dinoex.sub.org [UNIX/Connect 0.93]
X-Accept-Language: de,en
X-PGP-Fingerprint: 44 16 EC 0A D3 3A 4F 28  8A 8A 47 93 F1 CF
	2F 12
X-Noad: Please don't send me ad's by mail.  I'm bored by this
	type of mail.
X-Copyright: (C) Copyright 2001 by Dirk Meyer -- All rights reserved.
X-Note: sending SPAM is a violation of both german and US law
	and will at least trigger a complaint at your provider's
	postmaster.
X-PGP-Key-Avail: mailto:pgp-public-keys@keys.de.pgp.net Subject:GET
	0x331CDA5D
X-No-Archive: yes
X-ZC-VIA: 20011222000000W+1@dinoex.sub.org
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Noah Davidson wrote:

> I have built sendmail 8.12 and I am configuring it to be our main mail
> server for about 5000 or so users.  The only problem is that the
> .vacation files do not seam to work.  How can I get this feature
> working, or could someone point me in the direction to get this working.

Sendmail-8.12.1 from the ports:

1) add in your hots.mc for security
FEATURE(`smrsh')dnl

2) create a executable shell script
/usr/local/libexec/sm.bin/vacation:
#!/bin/sh
exec /usr/local/bin/vacation -m vacation.txt -r 1 "$@"

3) The user can now create their files
~user/.forward:
user,second-user,"|vacation user"

kind regards Dirk

- Dirk Meyer, Im Grund 4, 34317 Habichtswald, Germany

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sat Dec 22 13:29:10 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from mserver1.corp2net.com (ip208148.igreatlink.com [202.122.208.148])
	by hub.freebsd.org (Postfix) with ESMTP id 6E10237B417
	for <isp@freebsd.org>; Sat, 22 Dec 2001 13:28:34 -0800 (PST)
Received: from inbound-mail.netzero.net [4.4.85.54] by mserver1.corp2net.com with ESMTP
  (SMTPD32-6.06) id A6372C01D6; Sun, 23 Dec 2001 05:08:07 +0800
Message-ID: <00005ca5542b$00003337$00000b29@inbound-mail.netzero.net>
To: <Undisclosed Recipients@FreeBSD.ORG>
From: "workathome@aol.com" <workathome@aol.com>
Subject: HI!
Date: Sat, 22 Dec 2001 16:10:46 -2000
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Reply-To: ebusinesses.org <ebusinesses.org@usabee.bzam.com>
URGENT: MESSAGE
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

<HTML>

<HEAD>

<TITLE>Work From Home With E-Commerce</TITLE>

</HEAD>

<BODY BGCOLOR=3D#FFFFFF>

<center>

<!-- ImageReady Slices (ad-2b.psd) -->

<!-- End ImageReady Slices -->

</center>


<P align=3Dleft>STOP!<br>
<br>
URGENT MESSAGE!<br>
<br>
PLEASE READ COMPLETELY<br>
<br>
It is important that you read this message as soon as possible. Again, I u=
rge
<br>
you to read this message to its fullest! Last year 72% of all bankruptcies=
 <br>
filed could have been avoided by adding just an extra $200 a month to the =
<br>
household income. We are an International E-Commerce and Mail Order <br>
Company. We are looking for people with a Good Work Ethic and the <br>
Desire to Earn $500 - $1,500 per Month Part Time or $2,000 - $7,500+ <br>
per Month Full Time Working from Home or Office! <br>
<br>
The demand for our product line (over 150 different products) is so great =
we <br>
need to train more people to process the orders and service our growing <b=
r>
customer base. Right now, our industry is practically still in its infancy=
, but
<br>
by the year 2010, will be a $1 Trillion Dollar Industry!!!<br>
<br>
To better assist you in understanding E-Commerce and what the world is <br=
>
raving about with E-Commerce and the Internet, I URGE you to read this <br=
>
message for your own benefit in understanding what it can do for you. <br>
<br>
We are helping people start both local and foreign business. This opportun=
ity
<br>
is the fastest growing industry in India, Panama, Cypress, Korea, China, a=
nd <br>
Japan and, of course, the United States. <br>
<br>
This U.S. Based Company is growing by leaps and bounds, at home and <br>
around the world. We are currently doing business in over 53 countries wit=
h <br>
80% growth expected in the next three years. And the best part is, new <br=
>
countries are opening every day. If you can imagine, the Internet and <br>
E-Commerce is currently expanding by 200% each quarter. <br>
<br>
Our company is expected to reach the world in the next 4 years and with <b=
r>
that, there will be a 2000% increase in our E-Commerce Business and <br>
revenues on the Internet in the next 18 Months. No special skills or <br>
experience are required. We will give you all the training and personal <b=
r>
support that you need to assure your success. You will be trained via <br>
Internet in the comfort of your own home and you will determine your <br>
work hours. A minimum commitment of 7-10 hours a week is required. <br>
<br>
The income you generate from your efforts can put you back in control of <=
br>
your Time, Your Finances and Your Life! You may have tried other <br>
opportunities in the past that failed to live up to their promises; this i=
s <br>
different than anything else you are aware of! This is not a get rich <br>
scheme. You must work to earn income! Your financial past does not<br>
have to be your financial future.<br>
<br>
&quot;There is no security on this earth. There is only opportunity.&quot;=
 <br>
Douglas McArthur<br>
<br>
Do you feel like you are too busy earning a living to make any real money?=
 <br>
Are you tired of living &quot;paycheck to paycheck&quot; like I was? Do yo=
u dream <br>
of a better lifestyle for yourself and your family? If so, then I urge you=
 to
<br>
read on to better understand why I sent you this message. We provide the <=
br>
system, experience and hands on training. The only thing that we can not <=
br>
give you, but is required is that you, have the desire and that you are <b=
r>
teachable. We know that you have some level of desire because you are <br>
reading this letter. Ask yourself if you are teachable? <br>
<br>
This business fell into my lap in September of 1997. I got started as a <b=
r>
customer or consumer and woke up when my wife made an extra $500 <br>
in the first week. At the time I was an Active Duty Marine living paycheck=
 <br>
to paycheck making less that $19,000 a year. I was attending college at <b=
r>
a local University and had two children. An extra $500/month would have <b=
r>
been a dream come true. We got started and in our first month earned <br>
$2700 profit. In the first four months my wife and I made $19,000 profit. =
In <br>
just 4 months time, that=FFFFFF92s more than I made in an entire year as a=
n active <br>
duty Marine just part time working 10 - 12 hrs a week. <br>
<br>
Everyone involved in our business had three things in common when they <br=
>
got started:<br>
<br>
1. They saw an opportunity; <br>
2. They were teachable; and <br>
3. They applied what they learned. <br>
<br>
It's THAT simple. And it's THAT POWERFUL.<br>
<br>
*************************************<br>
<br>
Imagine just for a moment that you have a home-based business that <br>
provides more time with your family, Unlimited income based on YOUR effort=
s, <br>
Freedom from commuting, Not having your kids in day care, Affordable healt=
h <br>
care for your family, Significantly helping others with their lives, Lovin=
g what
<br>
you do and doing what you love, Having your own business/being your own <b=
r>
boss Sounds too good to be true? That's what we thought, but today our <br=
>
dreams are coming true and now we want to help you, as others have <br>
helped us!<br>
<br>
**********************************************<br>
<br>
We like to get right to the point...so here is what we have to offer you: =
<br>
<br>
=FFFFFF95 A well established, financially stable company, 2 Billion <br>
dollar + sales/publicly traded;<br>
=FFFFFF95 Patented, exclusive, high demand consumable products;<br>
=FFFFFF95 Comprehensive, high-tech in home training;<br>
=FFFFFF95 Phenomenal support system;<br>
=FFFFFF95 Worldwide income opportunities (especially through E-Commerce); =
<br>
=FFFFFF95 Exotic paid vacations; and<br>
=FFFFFF95 Minimal start up investment<br>
<br>
ARE YOU GETTING A BIT CURIOUS?<br>
<br>
GREAT! That's fine... as long as you're serious! <br>
<br>
The average person can start earning from $25.00 - $75.00 an hour from <br=
>
their home or office computers without dedicating a lot of time and effort=
 <br>
Most of us have been thinking it's about time that we took advantage of <b=
r>
this Internet Craze. Throughout the Holidays and especially the last year,=
 <br>
everything that we have seen on Television and heard on the radio has <br>
either started or ended with www.com and the reason why is because <br>
the Internet has truly simplified shopping, which frees up more time for a=
ll <br>
of us to turn into quality time. Security and convenience has been <br>
technologically advanced to give us all peace of mind. E-Commerce is <br>
so rampant right now that in most states in the U.S. you can buy groceries=
 <br>
over the Internet. <br>
<br>
This is your chance to take advantage of the E-commerce that is literally =
<br>
changing the way the world does business. Our marketing group will show <b=
r>
you how you can work at home using your very own E-Commerce Storefront. <b=
r>
You can work at home and use the Internet to run your business. You can <b=
r>
market our high demand consumable products that are geared and driven by <=
br>
the needs of over 80% of the world's population. Our products sell themsel=
ves;
<br>
there is no selling or need for out right sales techniques. Also, because =
they
<br>
are high demand consumable products, return business, ongoing business, an=
d <br>
referral business is generated. By working at home, you reduce overhead, s=
et <br>
your own schedule, are your own boss, and achieve your own goals. Be an <b=
r>
entrepreneur, WORK AT HOME!<br>
<br>
Our company has been reviewed and published Wall Street Journal, Business =
<br>
Week, Home PC, Forbes, Success, and Money, just to name a few. The <br>
Market Opportunity is colossal. Over 2/3 of American homes have a computer=
, <br>
and E-Commerce sales are increasing month after month. <br>
<br>
The top industries in the world are <br>
<br>
=FFFFFF95 Medical<br>
=FFFFFF95 Health <br>
=FFFFFF95 Nutrition<br>
=FFFFFF95 Computer Industry<br>
=FFFFFF95 Personal Care <br>
=FFFFFF95 Communication and <br>
=FFFFFF95 the Burial Business<br>
<br>
Due to the aging population of Baby Boomers, these industries are increasi=
ng <br>
daily, and will continue at this rate for the next several years. With the=
 <br>
exception of the Burial Business, The Work at Home Network puts them all i=
nto
<br>
one package. <br>
<br>
One of the strongest aspects of our business is the ongoing training that =
is <br>
offered. We have International Training on an ongoing basis in most major =
<br>
cities. Weekly conference calls are also available, as well as satellite <=
br>
television training programs, online training, monthly magazines and quart=
erly
<br>
journals. <br>
<br>
Our company does over 2.1 billion (USD) in business annually and you can b=
e <br>
a part of this growth. You will find success because we give you the bluep=
rint
<br>
to follow and support your need to develop your own profitable home-based =
<br>
business. <br>
<br>
All we ask of you is to be willing and able to be coached and to learn. We=
 have
<br>
no need for tire-kickers or window shoppers. Please do not request our <br=
>
&quot;decision package&quot; if you are not serious about changing the cou=
rse of your <br>
life. By ordering your &quot;decision package&quot;, you will receive all =
you need to get
<br>
yourself moving towards financial independence. <br>
<br>
If you are tired of worrying about money and tired of choosing what you ca=
n live
<br>
without, come join the thousands of us working from home, setting our own =
<br>
schedules, making a fortune and living out our dreams. We invite you to ex=
plore
<br>
how the &quot;Work From Home&quot; Internet Program capitalizes on today's=
 <br>
advancements in technology to help you build a successful home-based <br>
business. Have you noticed the surge of people looking to start home-based=
 <br>
businesses? Did you know that 32 million households now have home-based <b=
r>
businesses and that number grows every day? Have you asked yourself, &quot=
;Why?&quot; <br>
Why are so many people, including yourself, interested in working from hom=
e? <br>
<br>
Our parents did not search for a business to operate from home nor did the=
ir <br>
friends. So, why now is it suddenly so popular? <br>
<br>
Americans are &quot;cocooning&quot;. We want to spend less time on the bus=
y freeways <br>
and in over-crowded shopping malls and replace that by spending more time =
at <br>
home with our families where it is safe and warm. This is the wave of the =
<br>
future and we are beginning to realize with the advancement of technology,=
 <br>
that we do not need to be in an office environment in order to access the =
<br>
marketplace and make money. In today's world, the quickest way to build a =
<br>
home-based business is to take advantage of the Internet craze that has hi=
t <br>
the United States and is quickly spreading around the world. <br>
<br>
While a conventional business can cost thousands to hundreds of thousands =
of <br>
dollars to set up and run successfully, an Internet business costs dramati=
cally
<br>
less and has the potential to attract international business for just a fr=
action
<br>
of what the traditional company would spend. On average, 30% of all U.S. <=
br>
web traffic is already international and 5% to 20% of all web sales origin=
ate
<br>
from outside the United States. Everyday, these percentages are radically =
<br>
increasing. Consumers worldwide are spending 6.6 billion U.S. dollars a ye=
ar <br>
in transactions over the Internet. <br>
<br>
The awareness level and need for users, buyers, advertisers and merchants =
to <br>
get onto the Web, and to set-up shop, has dramatically changed even from o=
ne <br>
year ago. This medium of doing business is skyrocketing, and we are reapin=
g <br>
the benefits daily. <br>
<br>
If you combine the Internet craze with people's desire to work from home a=
nd <br>
set their own schedule, you have a powerful team, and here is why. Many <b=
r>
people have heard of SOHO, and no, we don't mean that hip section of New <=
br>
York City, rather the S.O.H.O. which refers to &quot;Small Office/Home Off=
ice.&quot; One
<br>
of today's the biggest explosions in the economy. The home-based business =
<br>
has been born out of necessity. In an era where large corporations can onl=
y <br>
think of downsizing, what are your options? There is no security in Corpor=
ate
<br>
America any more! Not only are tens of thousands of workers and managers <=
br>
being downsized out of their companies, but also thousands of men and <br>
women are tired of the corporate &quot;rat race&quot; and want to retreat =
to a <br>
home-based business. <br>
<br>
If you decide to &quot;stick it out&quot; in Corporate America your choice=
s could boil <br>
down to finding a lucrative niche in the small business world, standing in=
 line
<br>
at the unemployment office, or accepting a cut in pay and benefits. We wer=
e <br>
all raised to give 9 hours work for 8 hours pay, and we are not backing aw=
ay <br>
from that. <br>
<br>
Today's large companies have no loyalty to their employees. Their only loy=
alty
<br>
is to the bottom line. And the bottom line is exactly where most of us are=
 when
<br>
it's time to cut back. Your life is suddenly turned upside down because yo=
u <br>
have no control over your future. Someone who has no idea of the quality o=
f <br>
your work or the extra time you gave the company without requesting overti=
me <br>
makes these decisions behind closed doors. They don't know about your <br>
family's life: they don't understand that you just put braces on your chil=
d's
<br>
teeth and now have to pay for them. The job of these &quot;decision makers=
&quot; is to <br>
be impersonal and unbiased in all areas except for the company's &quot;bes=
t <br>
interests.&quot; <br>
<br>
In other words: TO THEM, YOU REALLY DON'T MATTER.<br>
<br>
The Great American Dream is gone. Official U.S. Government reports indicat=
e <br>
that more than 3.5 million jobs have been eliminated in the past 10 years =
- <br>
including over 2000 jobs per day last year alone - and an estimated 55% of=
 all
<br>
jobs created in the next 10 years will be near minimum wage in stores, <br=
>
restaurants, and bars. 90% of all the people in North America earn less th=
an <br>
$40,000 year and today=FFFFFF92s two-income families are not living as wel=
l as their <br>
parents did on a single income. <br>
<br>
So what is the alternative to the to the Great American Job? <br>
<br>
Richard Poe, former Senior Editor - &quot;Success Magazine,&quot; describe=
s in his <br>
recent book that a shift in thinking has resulted in over 14 million peopl=
e <br>
working from home full-time, and another 13 million part-time. This number=
 is
<br>
increasing by almost 600,000 per year. And the average work from home inco=
me <br>
is $50,250 per year, about twice the average income of wage earners workin=
g <br>
for someone else. By the end of the decade over 44% of us will be working =
<br>
from home. <br>
<br>
Home based business wage earner's success rate exceeds 85% compared <br>
with small businesses such as retail shops and restaurants, that average 9=
5% <br>
failure rate within 5 years. Couple that with the flexibility we have to c=
hange
<br>
our schedules and set our hours. Those of us who are parents are now <br>
available when our children need us, plus we no longer have the need for t=
he <br>
&quot;foster homes&quot; we call day care centers, where the care-givers g=
et to see all
<br>
the &quot;firsts&quot; your child performs. <br>
<br>
There's no wonder the number of people looking to work from home has <br>
skyrocketed. <br>
<br>
Imagine what it would be like to run an international operation if you so =
chose,
<br>
right from the comfort of your own home. This is exactly what we offer! We=
 <br>
offer &quot;freedom&quot; that is available through a constant flow of inc=
ome that does
<br>
not depend on the whims of a boss, bonuses or the economy. <br>
<br>
Take a look at some of these statistics: At age 50, 75% of the population =
<br>
has less than $5,000 in the bank for retirement. At age 65, 45% of <br>
Americans depend on relatives, 30% depend on charities, 23% are still <br>
working (most can't afford to quit and end up working until they are no lo=
nger
<br>
physically capable) and Only 2% are self-sustaining. <br>
<br>
At the present time, it is impossible to support a family of two working <=
br>
full-time at minimum wage! For the first time in history, the current gene=
ration
<br>
is averaging a lower standard of living than their parents! Automation is =
<br>
taking layoffs to record highs! According to some recent government figure=
s, <br>
out of 100 people in the United States at age 65...<br>
<br>
=FFFFFF95 28 are dead<br>
=FFFFFF95 62 are broke or dependent on the system making less than $4000 p=
er <br>
year.<br>
=FFFFFF95 5 are still working<br>
=FFFFFF95 4 are financially independent<br>
=FFFFFF95 1 can be considered RICH <br>
<br>
Not taking into account those who are dead at 65, this means that 93% of <=
br>
Americans retire broke or must keep working beyond retirement! <br>
<br>
Will Social In-Security be there for you? Will you be dead? Do you intend =
to <br>
keep on working? <br>
<br>
Why not be financially independent or rich!?<br>
<br>
Over the past decade, Fortune 500 companies have laid off 4.4 million work=
ers
<br>
while smaller companies steadily continue to reduce their work forces. As =
<br>
companies continue to downsize and re-organize, many professionals will se=
ek <br>
out new ways to take control of their careers. Many of these individuals h=
ave
<br>
forsworn traditional &quot;nine to five&quot; office jobs and are making t=
heir homes pay
<br>
off in more ways than one. For the entrepreneur, home-based businesses <br=
>
have become the bridge between work- crazed big cities and easy- paced <br=
>
family-oriented small towns. Thanks to the Internet, it is no longer neces=
sary
<br>
to live in close proximity to &quot;Big Business&quot;. You can now operat=
e that &quot;Big <br>
Business&quot; right from your home office. <br>
<br>
Check out these Statistics: 11% of the US market is now on the Internet <b=
r>
1,092,000 new people get Internet access each week, while approximately <b=
r>
38% of the US adult population, or 68 million US citizens' currently use t=
he <br>
Internet, according to the fall 1999 Cyber Status reports from Mediamark <=
br>
Research Inc. This is an increase of 49% from the prior quarter, and this =
<br>
study only counts people who have used the Internet in the last 30 days. <=
br>
<br>
Ziff-Davis' Technology User Profile reported that there are 60 million PC'=
s <br>
connected to the Internet in the US, but home PC's still represent the lio=
n's
<br>
share of the market, with 68 million consumers hooked up to the Internet. =
<br>
They predict that up to $54 billion US dollars will change hands from busi=
ness
<br>
transactions online this year. <br>
<br>
Most people are ready to do some sort of business online, they just don't =
know
<br>
where to start. This is why we are so successful. We link-up our marketing=
 <br>
techniques with something people need, and most of all, something people w=
ant.
<br>
<br>
If you add strong work ethics, a powerful support system, along with perso=
nal
<br>
business coaching, you can't help but be successful. We provide not only t=
he <br>
vehicle that puts you on the road to success, but we also provide the map.=
 <br>
All you have to do is be teachable, have the desire for a better life and =
be <br>
willing to change what you're doing now. 94% of home-based business owners=
 <br>
are happier running their own business versus working for someone else. 92=
% <br>
recommend working from home to others. 94% plan to still be running their =
own
<br>
business in five years. 20% of home entrepreneurs reported that their busi=
nesses
<br>
grossed between $100,000 and $500,000 last year. 23% paid themselves annua=
l <br>
salaries of $65,000 to $350,000. 41% work at home with other family member=
s. <br>
71% think their businesses are doing as well or better than they expected.=
 79%
<br>
expect their home-based business revenues to grow this year. Your search <=
br>
for the ideal work environment and for the ideal vehicle to wealth is over=
 <br>
You will be able to work more flexible hours while increasing your product=
ivity,
<br>
not to mention drastically cutting or eliminating your commute time, and <=
br>
increasing your most precious commodity-quality of life. <br>
<br>
We have developed one of the most exciting, technologically advanced <br>
home-based businesses that will take you through the new millennium. We <b=
r>
don't expect you to come to us with tremendous business knowledge or a <br=
>
successful track record. We have already figured out how to make this work=
; <br>
all you need to do is copy what we're already doing. <br>
<br>
Since you've gotten this far, we know you are serious about working from h=
ome.
<br>
Your next step will help you make some changes and learn some new skills. =
<br>
So, let's go! <br>
<br>
As you know, this is not a lay-on-the-couch, get-rich-quick scheme. This i=
s a
<br>
REAL business and a real opportunity- one that has drawn so much interest =
<br>
from people that we had to put this screening process in place to help us =
<br>
determine who to work with. Our company has been in business for more <br>
than 20 years, is publicly held and traded on the NASDAQ. It is important =
<br>
that you realize that we can help you build a powerful and profitable busi=
ness.
<br>
<br>
We have an explosive, start to finish, proven Internet Marketing system. A=
nd <br>
we are offering you this simple easy method where you can make money <br>
working for yourself, over the Internet, from the comfort of your home or =
<br>
office. You can earn $1,000 to $7,000 per month working around your <br>
current job and your family's schedule. Our system works regardless of you=
r <br>
background or computer knowledge. We provide the system, experience <br>
and hands on training. <br>
<br>
Our business is bursting at the seams, so we ONLY have time to work with <=
br>
serious, motivated people who are ready to make changes in their life NOW!=
 <br>
And because of the time we spend with each of you as we help you get your =
<br>
business off the ground, we have a limited number of openings available. H=
ere
<br>
is what you need to do... <br>
<br>
STEP 1. You must call our toll free &quot;International Internet Business =
hotline and
<br>
listen to some of the members of our team talk about the success of their =
new
<br>
home based businesses. EVEN IF YOU ARE CALLING THIS NUMBER <br>
INTERNATIONALLY, I URGE YOU TO CALL RIGHT NOW. This is part of <br>
our job-to introduce you to many others who took a step of faith (like you=
're
<br>
ready to), and whose lives have changed because of it.<br>
<br>
This call is for everyone. i.e. former Military Service Members, Executive=
 <br>
Professionals and Laborers, Doctors and Nurses 1-800-708-RICH and enter <b=
r>
Access Code 4400; then to learn about our industry and company <br>
dial 1-800-555-1795 and enter Access Code 4400.<br>
<br>
This 10-minute call is a 24-hour toll free for all that is in the United S=
tates;
<br>
however if you are International I urge you to dial this number now and li=
sten
<br>
to this short message and take some notes. <br>
<br>
**********************************************<br>
CAUTION! This Access Code expires on Jan 5th 2002 <br>
(So call right now!)<br>
<br>
**********************************************<br>
<br>
IMPORTANT! DO NOT PROCEED TO STEP 2 UNTIL YOU HAVE LISTENED <br>
TO THE CALL MENTIONED IN STEP 1<br>
<br>
**********************************************<br>
<br>
If you are unsure and need more information, we have put together a &quot;=
How to <br>
do business over the Internet&quot; decision package that will help you de=
termine <br>
whether our business is for you or not. This step is only for individuals =
who
<br>
have the desire to control their own future and who want to work from thei=
r <br>
homes and earn the kind of income that will give you the life you deserve.=
 <br>
This decision package contains approximately three hours of information <b=
r>
about our explosive Internet business and it also begins your training. Yo=
u <br>
will receive a manual that explains how, why and what we are doing, a <br>
video where you'll meet us and see exactly how our business works and <br>
an audiotape to further help you with your decision. Your package also <br=
>
contains the name and telephone number of your personal coach who will <br=
>
be working with you on a daily basis, helping you make money in your first=
 <br>
week. In other words, you will receive all of the information you will nee=
d to
<br>
make a decision to determine if this is for you. <br>
<br>
After you request your &quot;International Decision Package&quot;, and go =
through all <br>
the materials, we will call you and your personal training program will be=
gin.
<br>
At that point, we will also be happy to locate the nearest training to you=
, <br>
which are available in numerous translations. We have training being <br>
conducted in over 39 different languages worldwide! <br>
<br>
This package acts only as a way for you to review information about our <b=
r>
business and begins your training without risk. This step eliminates the p=
eople
<br>
who are not serious and allows us to work with those of you who are. Pleas=
e <br>
recognize the importance of this step. We simply do not have the time to s=
pend
<br>
with people who are merely curious, which is why we designed this package =
to <br>
provide you with all of the information you will need to make a decision a=
nd <br>
determine if this is for you. If we spent our time answering e-mail reques=
ts for
<br>
additional information, we'd not only be duplicating the effort we put int=
o <br>
developing the decision package, but we'd also be taking valuable time awa=
y <br>
from running our business and training new people. Once you start working =
<br>
with us, we're sure you will appreciate our spending time training you ins=
tead
<br>
of responding to curious e-mails all day long. <br>
<br>
Since we don't spend countless hours answering the tireless questions of t=
he <br>
curiosity-seekers, you benefit, because it frees us up in order to dedicat=
e <br>
ourselves to your success. When we spend time with you, we know we are <br=
>
working with someone who, like us, is committed to a better lifestyle. Wha=
t is
<br>
Your Future Worth? Decide for yourself and for your family what it is you =
want
<br>
and by when you want to achieve it. Only you can determine how dedicated <=
br>
you are to achieving your dreams. <br>
<br>
Hopefully, you won't find yourself relying on your friends and family for =
<br>
direction and salvation. They cannot provide that for you - only you can d=
o <br>
that. You need to make a decision to either give this a shot or to continu=
e <br>
down the path you're on. Most likely, if you have read this far, you have =
<br>
already made the decision to make some healthy changes in your life. When =
<br>
we were looking at this &quot;Work From Home&quot; Opportunity for the fir=
st time, just
<br>
like you, we were nervous and thought that maybe this wouldn't work. Like =
<br>
you, we doubted we could really achieve our dreams. We went for it any way=
 <br>
and now we are making an incredible income, working from home, and for <br=
>
most of us- it's a dream come true. We don't have a boss to answer to or a=
 <br>
clock to punch.<br>
<br>
All you need to do now is take action. Take action by ordering your &quot;=
Decision
<br>
Package&quot; and we'll be there to help you through your questions and th=
en to <br>
work with you to build your own &quot;Work From Home&quot; Internet Busine=
ss. But <br>
please don't request more information unless you are committed to improvin=
g <br>
your life. If you are ready to learn and you are serious about achieving a=
 <br>
brighter future and a better life, then we are committed to you. We are re=
ady
<br>
to give you the same step-by-step plan we used to build our fortune. There=
 will
<br>
be no surprises. We know exactly what to do and how to coach others to be =
<br>
successful within the same system. Our Program works. It's already happeni=
ng <br>
for hundreds of people. Why not you? Right now, take the next step, and ge=
t <br>
started on your way to a brighter lifestyle. <br>
<br>
STEP 2: To get started request your decision package only after you have <=
br>
completed STEP 1 please call our international 24 hour order hotline at <b=
r>
1-206-222-2826. International callers and for United States, Canada, and <=
br>
Mexico callers please also dial 1-206-222-2826. <br>
<br>
We are willing to train you and work with you, as others have done with us=
, to
<br>
help secure your financial future. But remember we only work with those th=
at <br>
truly have the desire and ambitions to work-we don't have time to work wit=
h <br>
couch potatoes! Successful people do what unsuccessful people won't. <br>
<br>
So develop a sense of urgency and give your desires value! <br>
Procrastination is the biggest killer of success and you can now break tha=
t 
cycle! <br>
<br>
REMEMBER, for things to change, you have to change and for things to get b=
etter,
<br>
you have to get better. <br>
<br>
Order your materials today, and when they arrive, review everything thorou=
ghly
<br>
BEFORE calling your personal coach.<br>
<br>
Remember the importance of following directions- we are looking for people=
 <br>
who are teachable and willing to work. We're very excited about our future=
 and
<br>
we know you will be, too!! Until we speak personally, thank you and have a=
 <br>
great day! <br>
<br>
Again please follow STEP 2: To get started or request your decision packag=
e <br>
only after you have completed STEP 1 please call our international 24 hour=
 <br>
order hotline at 1-206-222-2826. International callers and for United Stat=
es,
<br>
Canada, and Mexico callers please also dial 1-206-222-2826.<br>
<br>
=FFFFFFA9 2001 all rights reserved. This message is an advertisement sent =
to you by <br>
an independent marketing company.<br>
<br>
You are receiving this Offer as a participant of our opt-in subscription. =
<Br>
If you do not wish to receive any Offers from us in the future, please <Br=
>
follow the unsubscribe link bellow or reply to this email with the <Br>
word "REMOVE" in the subject line to unsubscribe.  Any other <Br>
replies will result in you receiving additional multiple messages.
</BODY>
</HTML>

<br><br>&nbsp;</P>
<DIV align=3Dcenter>
<hr noshade width=3D"600" color=3D"darkgreen">
</DIV><font face=3DArial size=3D2>
<CENTER><b>Go Opt! Unsubscribe Information</b>
<br>This email was sent to the owner of the following Account/Username: <b=
>

maxuser

</b><br>To unsubscribe from future mailings of this type, visit
<a href=3D"http://www.debt.mojo.net.co.fr&#20;&#2;&#20;&#5;&#20;|https.3de=
t.goOpt.com:80/debt/mojo/remove.html">
This Page</a></font> </CENTER>
<CENTER>

<hr color=3D"orange" noshade width=3D"600" size=3D"1">
</CENTER>
<DIV align=3Dcenter>
<table cellpadding=3D0 cellspacing=3D0 border=3D0 width=3D600>
	<tr>
		<td width=3D"135" height=3D"50" bgcolor=3Dblack border=3D"0">
			<table cellpadding=3D0 cellspacing=3D0 border=3D"2" width=3D134>
			<tr>
				<td border=3D"0" width=3D130 bgcolor=3Dwhite height=3D50>
				<font color=3D"orange"><b><i>
            Stealth</font><font color=3D"black">Launch</font><br><font col=
or=3D"black">
            Pop<font color=3D"orange">Launch<br><hr color=3Dblack size=3D1=
></font><font color=3D"black"><center>1-800-804-4352</I></center></font></=
font></B>
				</td>
			</tr>
			</table>
		</td>
		<td width=3D"5" bgcolor=3D"white"></td>
		<td width=3D460 bgcolor=3D"white">
		<font face=3D"arial,helvetica" color=3D"#93a1ab" size=3D"1">
		<i>The FIRST secure email friendly Hosting by StealthLaunch/Poplaunch. A=
ttempting to infringe upon the copyrights of PopLaunch or attempting to ha=
rm the natural course of business of
		PopLaunch users will be subject to SEVERE civil and/or criminal penaltie=
s (including but not limited to attempting to hack, Denial of Service Atta=
cks and/or broadcast the location of client sites). ALL clients not honori=
ng remove requests will be terminated
		(Call 1-800-804-4352 alternatively or for assistance with the PopLaunch =
browser).</i>
		</font>
		</td>
	</tr>
</table></DIV>
<DIV align=3Dcenter>
<table cellpadding=3D0 cellspacing=3D0 border=3D0 width=3D600>
	<tr>
		<td height=3D7></td>
	</tr>
	<tr>
   		<TD bgcolor=3D"orange" class=3Dfooterblack height=3D"20" width=3D"600=
" colspan=3D"2">
      			<FONT face=3D"verdana,arial,helvetica" size=3D1 color=3D"#000000"=
>
                <CENTER>
                Copyright =FFFFFFA9 1997-2002 StealthLaunch PopLaunch. All=
 rights reserved.
                <A class=3Dfooterblack href=3D"http://www.debt.mojo.net.co=
fr&#20;&#2;&#20;&#5;&#20;|https.3det.goOpt.com:80/debt/mojo/info.html">Ho=
sting Info</A> |
                <A class=3Dfooterblack href=3D"http://www.debt.mojo.net.co=
fr&#20;&#2;&#20;&#5;&#20;|https.3det.goOpt.com:80/debt/mojo/privacy.html"=
>Privacy Policy</A>.
                </CENTER>
                </FONT>
		</TD>
		</tr>

</table></DIV>



</BODY>

</HTML>




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sat Dec 22 17:26:45 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from mserver1.corp2net.com (ip208148.igreatlink.com [202.122.208.148])
	by hub.freebsd.org (Postfix) with ESMTP id 0EBFD37B419
	for <isp@freebsd.org>; Sat, 22 Dec 2001 17:26:04 -0800 (PST)
Received: from inbound-mail.netzero.net [4.4.85.54] by mserver1.corp2net.com with ESMTP
  (SMTPD32-6.06) id A64D2C01D6; Sun, 23 Dec 2001 05:08:29 +0800
Message-ID: <0000508b2fe2$00006eae$00000ba5@mta.excite.com>
To: <Undisclosed Recipients@FreeBSD.ORG>
From: "workathome@mail.com" <workathome@mail.com>
Subject: URGENT MESSAGE!  PLEASE READ IMMEDIATLY!!
Date: Sat, 22 Dec 2001 16:11:09 -2000
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Reply-To: ebusinesses.org <ebusinesses.org@usabee.bzam.com>
URGENT: MESSAGE
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

<HTML>

<HEAD>

<TITLE>Work From Home With E-Commerce</TITLE>

</HEAD>

<BODY BGCOLOR=3D#FFFFFF>

<center>

<!-- ImageReady Slices (ad-2b.psd) -->

<!-- End ImageReady Slices -->

</center>


<P align=3Dleft>STOP!<br>
<br>
URGENT MESSAGE!<br>
<br>
PLEASE READ COMPLETELY<br>
<br>
It is important that you read this message as soon as possible. Again, I u=
rge
<br>
you to read this message to its fullest! Last year 72% of all bankruptcies=
 <br>
filed could have been avoided by adding just an extra $200 a month to the =
<br>
household income. We are an International E-Commerce and Mail Order <br>
Company. We are looking for people with a Good Work Ethic and the <br>
Desire to Earn $500 - $1,500 per Month Part Time or $2,000 - $7,500+ <br>
per Month Full Time Working from Home or Office! <br>
<br>
The demand for our product line (over 150 different products) is so great =
we <br>
need to train more people to process the orders and service our growing <b=
r>
customer base. Right now, our industry is practically still in its infancy=
, but
<br>
by the year 2010, will be a $1 Trillion Dollar Industry!!!<br>
<br>
To better assist you in understanding E-Commerce and what the world is <br=
>
raving about with E-Commerce and the Internet, I URGE you to read this <br=
>
message for your own benefit in understanding what it can do for you. <br>
<br>
We are helping people start both local and foreign business. This opportun=
ity
<br>
is the fastest growing industry in India, Panama, Cypress, Korea, China, a=
nd <br>
Japan and, of course, the United States. <br>
<br>
This U.S. Based Company is growing by leaps and bounds, at home and <br>
around the world. We are currently doing business in over 53 countries wit=
h <br>
80% growth expected in the next three years. And the best part is, new <br=
>
countries are opening every day. If you can imagine, the Internet and <br>
E-Commerce is currently expanding by 200% each quarter. <br>
<br>
Our company is expected to reach the world in the next 4 years and with <b=
r>
that, there will be a 2000% increase in our E-Commerce Business and <br>
revenues on the Internet in the next 18 Months. No special skills or <br>
experience are required. We will give you all the training and personal <b=
r>
support that you need to assure your success. You will be trained via <br>
Internet in the comfort of your own home and you will determine your <br>
work hours. A minimum commitment of 7-10 hours a week is required. <br>
<br>
The income you generate from your efforts can put you back in control of <=
br>
your Time, Your Finances and Your Life! You may have tried other <br>
opportunities in the past that failed to live up to their promises; this i=
s <br>
different than anything else you are aware of! This is not a get rich <br>
scheme. You must work to earn income! Your financial past does not<br>
have to be your financial future.<br>
<br>
&quot;There is no security on this earth. There is only opportunity.&quot;=
 <br>
Douglas McArthur<br>
<br>
Do you feel like you are too busy earning a living to make any real money?=
 <br>
Are you tired of living &quot;paycheck to paycheck&quot; like I was? Do yo=
u dream <br>
of a better lifestyle for yourself and your family? If so, then I urge you=
 to
<br>
read on to better understand why I sent you this message. We provide the <=
br>
system, experience and hands on training. The only thing that we can not <=
br>
give you, but is required is that you, have the desire and that you are <b=
r>
teachable. We know that you have some level of desire because you are <br>
reading this letter. Ask yourself if you are teachable? <br>
<br>
This business fell into my lap in September of 1997. I got started as a <b=
r>
customer or consumer and woke up when my wife made an extra $500 <br>
in the first week. At the time I was an Active Duty Marine living paycheck=
 <br>
to paycheck making less that $19,000 a year. I was attending college at <b=
r>
a local University and had two children. An extra $500/month would have <b=
r>
been a dream come true. We got started and in our first month earned <br>
$2700 profit. In the first four months my wife and I made $19,000 profit. =
In <br>
just 4 months time, that=FFFFFF92s more than I made in an entire year as a=
n active <br>
duty Marine just part time working 10 - 12 hrs a week. <br>
<br>
Everyone involved in our business had three things in common when they <br=
>
got started:<br>
<br>
1. They saw an opportunity; <br>
2. They were teachable; and <br>
3. They applied what they learned. <br>
<br>
It's THAT simple. And it's THAT POWERFUL.<br>
<br>
*************************************<br>
<br>
Imagine just for a moment that you have a home-based business that <br>
provides more time with your family, Unlimited income based on YOUR effort=
s, <br>
Freedom from commuting, Not having your kids in day care, Affordable healt=
h <br>
care for your family, Significantly helping others with their lives, Lovin=
g what
<br>
you do and doing what you love, Having your own business/being your own <b=
r>
boss Sounds too good to be true? That's what we thought, but today our <br=
>
dreams are coming true and now we want to help you, as others have <br>
helped us!<br>
<br>
**********************************************<br>
<br>
We like to get right to the point...so here is what we have to offer you: =
<br>
<br>
=FFFFFF95 A well established, financially stable company, 2 Billion <br>
dollar + sales/publicly traded;<br>
=FFFFFF95 Patented, exclusive, high demand consumable products;<br>
=FFFFFF95 Comprehensive, high-tech in home training;<br>
=FFFFFF95 Phenomenal support system;<br>
=FFFFFF95 Worldwide income opportunities (especially through E-Commerce); =
<br>
=FFFFFF95 Exotic paid vacations; and<br>
=FFFFFF95 Minimal start up investment<br>
<br>
ARE YOU GETTING A BIT CURIOUS?<br>
<br>
GREAT! That's fine... as long as you're serious! <br>
<br>
The average person can start earning from $25.00 - $75.00 an hour from <br=
>
their home or office computers without dedicating a lot of time and effort=
 <br>
Most of us have been thinking it's about time that we took advantage of <b=
r>
this Internet Craze. Throughout the Holidays and especially the last year,=
 <br>
everything that we have seen on Television and heard on the radio has <br>
either started or ended with www.com and the reason why is because <br>
the Internet has truly simplified shopping, which frees up more time for a=
ll <br>
of us to turn into quality time. Security and convenience has been <br>
technologically advanced to give us all peace of mind. E-Commerce is <br>
so rampant right now that in most states in the U.S. you can buy groceries=
 <br>
over the Internet. <br>
<br>
This is your chance to take advantage of the E-commerce that is literally =
<br>
changing the way the world does business. Our marketing group will show <b=
r>
you how you can work at home using your very own E-Commerce Storefront. <b=
r>
You can work at home and use the Internet to run your business. You can <b=
r>
market our high demand consumable products that are geared and driven by <=
br>
the needs of over 80% of the world's population. Our products sell themsel=
ves;
<br>
there is no selling or need for out right sales techniques. Also, because =
they
<br>
are high demand consumable products, return business, ongoing business, an=
d <br>
referral business is generated. By working at home, you reduce overhead, s=
et <br>
your own schedule, are your own boss, and achieve your own goals. Be an <b=
r>
entrepreneur, WORK AT HOME!<br>
<br>
Our company has been reviewed and published Wall Street Journal, Business =
<br>
Week, Home PC, Forbes, Success, and Money, just to name a few. The <br>
Market Opportunity is colossal. Over 2/3 of American homes have a computer=
, <br>
and E-Commerce sales are increasing month after month. <br>
<br>
The top industries in the world are <br>
<br>
=FFFFFF95 Medical<br>
=FFFFFF95 Health <br>
=FFFFFF95 Nutrition<br>
=FFFFFF95 Computer Industry<br>
=FFFFFF95 Personal Care <br>
=FFFFFF95 Communication and <br>
=FFFFFF95 the Burial Business<br>
<br>
Due to the aging population of Baby Boomers, these industries are increasi=
ng <br>
daily, and will continue at this rate for the next several years. With the=
 <br>
exception of the Burial Business, The Work at Home Network puts them all i=
nto
<br>
one package. <br>
<br>
One of the strongest aspects of our business is the ongoing training that =
is <br>
offered. We have International Training on an ongoing basis in most major =
<br>
cities. Weekly conference calls are also available, as well as satellite <=
br>
television training programs, online training, monthly magazines and quart=
erly
<br>
journals. <br>
<br>
Our company does over 2.1 billion (USD) in business annually and you can b=
e <br>
a part of this growth. You will find success because we give you the bluep=
rint
<br>
to follow and support your need to develop your own profitable home-based =
<br>
business. <br>
<br>
All we ask of you is to be willing and able to be coached and to learn. We=
 have
<br>
no need for tire-kickers or window shoppers. Please do not request our <br=
>
&quot;decision package&quot; if you are not serious about changing the cou=
rse of your <br>
life. By ordering your &quot;decision package&quot;, you will receive all =
you need to get
<br>
yourself moving towards financial independence. <br>
<br>
If you are tired of worrying about money and tired of choosing what you ca=
n live
<br>
without, come join the thousands of us working from home, setting our own =
<br>
schedules, making a fortune and living out our dreams. We invite you to ex=
plore
<br>
how the &quot;Work From Home&quot; Internet Program capitalizes on today's=
 <br>
advancements in technology to help you build a successful home-based <br>
business. Have you noticed the surge of people looking to start home-based=
 <br>
businesses? Did you know that 32 million households now have home-based <b=
r>
businesses and that number grows every day? Have you asked yourself, &quot=
;Why?&quot; <br>
Why are so many people, including yourself, interested in working from hom=
e? <br>
<br>
Our parents did not search for a business to operate from home nor did the=
ir <br>
friends. So, why now is it suddenly so popular? <br>
<br>
Americans are &quot;cocooning&quot;. We want to spend less time on the bus=
y freeways <br>
and in over-crowded shopping malls and replace that by spending more time =
at <br>
home with our families where it is safe and warm. This is the wave of the =
<br>
future and we are beginning to realize with the advancement of technology,=
 <br>
that we do not need to be in an office environment in order to access the =
<br>
marketplace and make money. In today's world, the quickest way to build a =
<br>
home-based business is to take advantage of the Internet craze that has hi=
t <br>
the United States and is quickly spreading around the world. <br>
<br>
While a conventional business can cost thousands to hundreds of thousands =
of <br>
dollars to set up and run successfully, an Internet business costs dramati=
cally
<br>
less and has the potential to attract international business for just a fr=
action
<br>
of what the traditional company would spend. On average, 30% of all U.S. <=
br>
web traffic is already international and 5% to 20% of all web sales origin=
ate
<br>
from outside the United States. Everyday, these percentages are radically =
<br>
increasing. Consumers worldwide are spending 6.6 billion U.S. dollars a ye=
ar <br>
in transactions over the Internet. <br>
<br>
The awareness level and need for users, buyers, advertisers and merchants =
to <br>
get onto the Web, and to set-up shop, has dramatically changed even from o=
ne <br>
year ago. This medium of doing business is skyrocketing, and we are reapin=
g <br>
the benefits daily. <br>
<br>
If you combine the Internet craze with people's desire to work from home a=
nd <br>
set their own schedule, you have a powerful team, and here is why. Many <b=
r>
people have heard of SOHO, and no, we don't mean that hip section of New <=
br>
York City, rather the S.O.H.O. which refers to &quot;Small Office/Home Off=
ice.&quot; One
<br>
of today's the biggest explosions in the economy. The home-based business =
<br>
has been born out of necessity. In an era where large corporations can onl=
y <br>
think of downsizing, what are your options? There is no security in Corpor=
ate
<br>
America any more! Not only are tens of thousands of workers and managers <=
br>
being downsized out of their companies, but also thousands of men and <br>
women are tired of the corporate &quot;rat race&quot; and want to retreat =
to a <br>
home-based business. <br>
<br>
If you decide to &quot;stick it out&quot; in Corporate America your choice=
s could boil <br>
down to finding a lucrative niche in the small business world, standing in=
 line
<br>
at the unemployment office, or accepting a cut in pay and benefits. We wer=
e <br>
all raised to give 9 hours work for 8 hours pay, and we are not backing aw=
ay <br>
from that. <br>
<br>
Today's large companies have no loyalty to their employees. Their only loy=
alty
<br>
is to the bottom line. And the bottom line is exactly where most of us are=
 when
<br>
it's time to cut back. Your life is suddenly turned upside down because yo=
u <br>
have no control over your future. Someone who has no idea of the quality o=
f <br>
your work or the extra time you gave the company without requesting overti=
me <br>
makes these decisions behind closed doors. They don't know about your <br>
family's life: they don't understand that you just put braces on your chil=
d's
<br>
teeth and now have to pay for them. The job of these &quot;decision makers=
&quot; is to <br>
be impersonal and unbiased in all areas except for the company's &quot;bes=
t <br>
interests.&quot; <br>
<br>
In other words: TO THEM, YOU REALLY DON'T MATTER.<br>
<br>
The Great American Dream is gone. Official U.S. Government reports indicat=
e <br>
that more than 3.5 million jobs have been eliminated in the past 10 years =
- <br>
including over 2000 jobs per day last year alone - and an estimated 55% of=
 all
<br>
jobs created in the next 10 years will be near minimum wage in stores, <br=
>
restaurants, and bars. 90% of all the people in North America earn less th=
an <br>
$40,000 year and today=FFFFFF92s two-income families are not living as wel=
l as their <br>
parents did on a single income. <br>
<br>
So what is the alternative to the to the Great American Job? <br>
<br>
Richard Poe, former Senior Editor - &quot;Success Magazine,&quot; describe=
s in his <br>
recent book that a shift in thinking has resulted in over 14 million peopl=
e <br>
working from home full-time, and another 13 million part-time. This number=
 is
<br>
increasing by almost 600,000 per year. And the average work from home inco=
me <br>
is $50,250 per year, about twice the average income of wage earners workin=
g <br>
for someone else. By the end of the decade over 44% of us will be working =
<br>
from home. <br>
<br>
Home based business wage earner's success rate exceeds 85% compared <br>
with small businesses such as retail shops and restaurants, that average 9=
5% <br>
failure rate within 5 years. Couple that with the flexibility we have to c=
hange
<br>
our schedules and set our hours. Those of us who are parents are now <br>
available when our children need us, plus we no longer have the need for t=
he <br>
&quot;foster homes&quot; we call day care centers, where the care-givers g=
et to see all
<br>
the &quot;firsts&quot; your child performs. <br>
<br>
There's no wonder the number of people looking to work from home has <br>
skyrocketed. <br>
<br>
Imagine what it would be like to run an international operation if you so =
chose,
<br>
right from the comfort of your own home. This is exactly what we offer! We=
 <br>
offer &quot;freedom&quot; that is available through a constant flow of inc=
ome that does
<br>
not depend on the whims of a boss, bonuses or the economy. <br>
<br>
Take a look at some of these statistics: At age 50, 75% of the population =
<br>
has less than $5,000 in the bank for retirement. At age 65, 45% of <br>
Americans depend on relatives, 30% depend on charities, 23% are still <br>
working (most can't afford to quit and end up working until they are no lo=
nger
<br>
physically capable) and Only 2% are self-sustaining. <br>
<br>
At the present time, it is impossible to support a family of two working <=
br>
full-time at minimum wage! For the first time in history, the current gene=
ration
<br>
is averaging a lower standard of living than their parents! Automation is =
<br>
taking layoffs to record highs! According to some recent government figure=
s, <br>
out of 100 people in the United States at age 65...<br>
<br>
=FFFFFF95 28 are dead<br>
=FFFFFF95 62 are broke or dependent on the system making less than $4000 p=
er <br>
year.<br>
=FFFFFF95 5 are still working<br>
=FFFFFF95 4 are financially independent<br>
=FFFFFF95 1 can be considered RICH <br>
<br>
Not taking into account those who are dead at 65, this means that 93% of <=
br>
Americans retire broke or must keep working beyond retirement! <br>
<br>
Will Social In-Security be there for you? Will you be dead? Do you intend =
to <br>
keep on working? <br>
<br>
Why not be financially independent or rich!?<br>
<br>
Over the past decade, Fortune 500 companies have laid off 4.4 million work=
ers
<br>
while smaller companies steadily continue to reduce their work forces. As =
<br>
companies continue to downsize and re-organize, many professionals will se=
ek <br>
out new ways to take control of their careers. Many of these individuals h=
ave
<br>
forsworn traditional &quot;nine to five&quot; office jobs and are making t=
heir homes pay
<br>
off in more ways than one. For the entrepreneur, home-based businesses <br=
>
have become the bridge between work- crazed big cities and easy- paced <br=
>
family-oriented small towns. Thanks to the Internet, it is no longer neces=
sary
<br>
to live in close proximity to &quot;Big Business&quot;. You can now operat=
e that &quot;Big <br>
Business&quot; right from your home office. <br>
<br>
Check out these Statistics: 11% of the US market is now on the Internet <b=
r>
1,092,000 new people get Internet access each week, while approximately <b=
r>
38% of the US adult population, or 68 million US citizens' currently use t=
he <br>
Internet, according to the fall 1999 Cyber Status reports from Mediamark <=
br>
Research Inc. This is an increase of 49% from the prior quarter, and this =
<br>
study only counts people who have used the Internet in the last 30 days. <=
br>
<br>
Ziff-Davis' Technology User Profile reported that there are 60 million PC'=
s <br>
connected to the Internet in the US, but home PC's still represent the lio=
n's
<br>
share of the market, with 68 million consumers hooked up to the Internet. =
<br>
They predict that up to $54 billion US dollars will change hands from busi=
ness
<br>
transactions online this year. <br>
<br>
Most people are ready to do some sort of business online, they just don't =
know
<br>
where to start. This is why we are so successful. We link-up our marketing=
 <br>
techniques with something people need, and most of all, something people w=
ant.
<br>
<br>
If you add strong work ethics, a powerful support system, along with perso=
nal
<br>
business coaching, you can't help but be successful. We provide not only t=
he <br>
vehicle that puts you on the road to success, but we also provide the map.=
 <br>
All you have to do is be teachable, have the desire for a better life and =
be <br>
willing to change what you're doing now. 94% of home-based business owners=
 <br>
are happier running their own business versus working for someone else. 92=
% <br>
recommend working from home to others. 94% plan to still be running their =
own
<br>
business in five years. 20% of home entrepreneurs reported that their busi=
nesses
<br>
grossed between $100,000 and $500,000 last year. 23% paid themselves annua=
l <br>
salaries of $65,000 to $350,000. 41% work at home with other family member=
s. <br>
71% think their businesses are doing as well or better than they expected.=
 79%
<br>
expect their home-based business revenues to grow this year. Your search <=
br>
for the ideal work environment and for the ideal vehicle to wealth is over=
 <br>
You will be able to work more flexible hours while increasing your product=
ivity,
<br>
not to mention drastically cutting or eliminating your commute time, and <=
br>
increasing your most precious commodity-quality of life. <br>
<br>
We have developed one of the most exciting, technologically advanced <br>
home-based businesses that will take you through the new millennium. We <b=
r>
don't expect you to come to us with tremendous business knowledge or a <br=
>
successful track record. We have already figured out how to make this work=
; <br>
all you need to do is copy what we're already doing. <br>
<br>
Since you've gotten this far, we know you are serious about working from h=
ome.
<br>
Your next step will help you make some changes and learn some new skills. =
<br>
So, let's go! <br>
<br>
As you know, this is not a lay-on-the-couch, get-rich-quick scheme. This i=
s a
<br>
REAL business and a real opportunity- one that has drawn so much interest =
<br>
from people that we had to put this screening process in place to help us =
<br>
determine who to work with. Our company has been in business for more <br>
than 20 years, is publicly held and traded on the NASDAQ. It is important =
<br>
that you realize that we can help you build a powerful and profitable busi=
ness.
<br>
<br>
We have an explosive, start to finish, proven Internet Marketing system. A=
nd <br>
we are offering you this simple easy method where you can make money <br>
working for yourself, over the Internet, from the comfort of your home or =
<br>
office. You can earn $1,000 to $7,000 per month working around your <br>
current job and your family's schedule. Our system works regardless of you=
r <br>
background or computer knowledge. We provide the system, experience <br>
and hands on training. <br>
<br>
Our business is bursting at the seams, so we ONLY have time to work with <=
br>
serious, motivated people who are ready to make changes in their life NOW!=
 <br>
And because of the time we spend with each of you as we help you get your =
<br>
business off the ground, we have a limited number of openings available. H=
ere
<br>
is what you need to do... <br>
<br>
STEP 1. You must call our toll free &quot;International Internet Business =
hotline and
<br>
listen to some of the members of our team talk about the success of their =
new
<br>
home based businesses. EVEN IF YOU ARE CALLING THIS NUMBER <br>
INTERNATIONALLY, I URGE YOU TO CALL RIGHT NOW. This is part of <br>
our job-to introduce you to many others who took a step of faith (like you=
're
<br>
ready to), and whose lives have changed because of it.<br>
<br>
This call is for everyone. i.e. former Military Service Members, Executive=
 <br>
Professionals and Laborers, Doctors and Nurses 1-800-708-RICH and enter <b=
r>
Access Code 4400; then to learn about our industry and company <br>
dial 1-800-555-1795 and enter Access Code 4400.<br>
<br>
This 10-minute call is a 24-hour toll free for all that is in the United S=
tates;
<br>
however if you are International I urge you to dial this number now and li=
sten
<br>
to this short message and take some notes. <br>
<br>
**********************************************<br>
CAUTION! This Access Code expires on Jan 5th 2002 <br>
(So call right now!)<br>
<br>
**********************************************<br>
<br>
IMPORTANT! DO NOT PROCEED TO STEP 2 UNTIL YOU HAVE LISTENED <br>
TO THE CALL MENTIONED IN STEP 1<br>
<br>
**********************************************<br>
<br>
If you are unsure and need more information, we have put together a &quot;=
How to <br>
do business over the Internet&quot; decision package that will help you de=
termine <br>
whether our business is for you or not. This step is only for individuals =
who
<br>
have the desire to control their own future and who want to work from thei=
r <br>
homes and earn the kind of income that will give you the life you deserve.=
 <br>
This decision package contains approximately three hours of information <b=
r>
about our explosive Internet business and it also begins your training. Yo=
u <br>
will receive a manual that explains how, why and what we are doing, a <br>
video where you'll meet us and see exactly how our business works and <br>
an audiotape to further help you with your decision. Your package also <br=
>
contains the name and telephone number of your personal coach who will <br=
>
be working with you on a daily basis, helping you make money in your first=
 <br>
week. In other words, you will receive all of the information you will nee=
d to
<br>
make a decision to determine if this is for you. <br>
<br>
After you request your &quot;International Decision Package&quot;, and go =
through all <br>
the materials, we will call you and your personal training program will be=
gin.
<br>
At that point, we will also be happy to locate the nearest training to you=
, <br>
which are available in numerous translations. We have training being <br>
conducted in over 39 different languages worldwide! <br>
<br>
This package acts only as a way for you to review information about our <b=
r>
business and begins your training without risk. This step eliminates the p=
eople
<br>
who are not serious and allows us to work with those of you who are. Pleas=
e <br>
recognize the importance of this step. We simply do not have the time to s=
pend
<br>
with people who are merely curious, which is why we designed this package =
to <br>
provide you with all of the information you will need to make a decision a=
nd <br>
determine if this is for you. If we spent our time answering e-mail reques=
ts for
<br>
additional information, we'd not only be duplicating the effort we put int=
o <br>
developing the decision package, but we'd also be taking valuable time awa=
y <br>
from running our business and training new people. Once you start working =
<br>
with us, we're sure you will appreciate our spending time training you ins=
tead
<br>
of responding to curious e-mails all day long. <br>
<br>
Since we don't spend countless hours answering the tireless questions of t=
he <br>
curiosity-seekers, you benefit, because it frees us up in order to dedicat=
e <br>
ourselves to your success. When we spend time with you, we know we are <br=
>
working with someone who, like us, is committed to a better lifestyle. Wha=
t is
<br>
Your Future Worth? Decide for yourself and for your family what it is you =
want
<br>
and by when you want to achieve it. Only you can determine how dedicated <=
br>
you are to achieving your dreams. <br>
<br>
Hopefully, you won't find yourself relying on your friends and family for =
<br>
direction and salvation. They cannot provide that for you - only you can d=
o <br>
that. You need to make a decision to either give this a shot or to continu=
e <br>
down the path you're on. Most likely, if you have read this far, you have =
<br>
already made the decision to make some healthy changes in your life. When =
<br>
we were looking at this &quot;Work From Home&quot; Opportunity for the fir=
st time, just
<br>
like you, we were nervous and thought that maybe this wouldn't work. Like =
<br>
you, we doubted we could really achieve our dreams. We went for it any way=
 <br>
and now we are making an incredible income, working from home, and for <br=
>
most of us- it's a dream come true. We don't have a boss to answer to or a=
 <br>
clock to punch.<br>
<br>
All you need to do now is take action. Take action by ordering your &quot;=
Decision
<br>
Package&quot; and we'll be there to help you through your questions and th=
en to <br>
work with you to build your own &quot;Work From Home&quot; Internet Busine=
ss. But <br>
please don't request more information unless you are committed to improvin=
g <br>
your life. If you are ready to learn and you are serious about achieving a=
 <br>
brighter future and a better life, then we are committed to you. We are re=
ady
<br>
to give you the same step-by-step plan we used to build our fortune. There=
 will
<br>
be no surprises. We know exactly what to do and how to coach others to be =
<br>
successful within the same system. Our Program works. It's already happeni=
ng <br>
for hundreds of people. Why not you? Right now, take the next step, and ge=
t <br>
started on your way to a brighter lifestyle. <br>
<br>
STEP 2: To get started request your decision package only after you have <=
br>
completed STEP 1 please call our international 24 hour order hotline at <b=
r>
1-206-222-2829. International callers and for United States, Canada, and <=
br>
Mexico callers please also dial 1-206-222-2829. <br>
<br>
We are willing to train you and work with you, as others have done with us=
, to
<br>
help secure your financial future. But remember we only work with those th=
at <br>
truly have the desire and ambitions to work-we don't have time to work wit=
h <br>
couch potatoes! Successful people do what unsuccessful people won't. <br>
<br>
So develop a sense of urgency and give your desires value! <br>
Procrastination is the biggest killer of success and you can now break tha=
t 
cycle! <br>
<br>
REMEMBER, for things to change, you have to change and for things to get b=
etter,
<br>
you have to get better. <br>
<br>
Order your materials today, and when they arrive, review everything thorou=
ghly
<br>
BEFORE calling your personal coach.<br>
<br>
Remember the importance of following directions- we are looking for people=
 <br>
who are teachable and willing to work. We're very excited about our future=
 and
<br>
we know you will be, too!! Until we speak personally, thank you and have a=
 <br>
great day! <br>
<br>
Again please follow STEP 2: To get started or request your decision packag=
e <br>
only after you have completed STEP 1 please call our international 24 hour=
 <br>
order hotline at 1-206-222-2829. International callers and for United Stat=
es,
<br>
Canada, and Mexico callers please also dial 1-206-222-2829.<br>
<br>
=FFFFFFA9 2001 all rights reserved. This message is an advertisement sent =
to you by <br>
an independent marketing company.<br>
<br>
You are receiving this Offer as a participant of our opt-in subscription. =
<Br>
If you do not wish to receive any Offers from us in the future, please <Br=
>
follow the unsubscribe link bellow or reply to this email with the <Br>
word "REMOVE" in the subject line to unsubscribe.  Any other <Br>
replies will result in you receiving additional multiple messages.
</BODY>
</HTML>

<br><br>&nbsp;<P align=3Dcenter><br><br><br><br><br></P><br>



<DIV align=3Dcenter>

<hr noshade width=3D"600" color=3D"darkgreen">

</DIV><font face=3DArial size=3D2>

<CENTER><b>Go Opt! Unsubscribe Information</b>

<br>This email was sent to the owner of the following Account/Username: <b=
>



maxuser



</b><br>To unsubscribe from future mailings of this type, visit

<a href=3D"http://64.4.14.250/cgi-bin/linkrd?_lang=3DEN&lah=3Dd2d06634beeb=
67685d6605a59db31ed5&lat=3D1008445018&hm___action=3Dhttp%3a%2f%2fwww%2edeb=
t%2emojo%2enet%2eco%2efr%14%02%14%05%14%7chttps%2e3det%2egoOpt%2ecom%2fdeb=
t%2fmojo%2fremove%2ehtml" target=3D"_blank">

This Page</a></font> </CENTER>

<CENTER>



<hr color=3D"lightgreen" noshade width=3D"600" size=3D"1">

</CENTER>

<DIV align=3Dcenter>

<table cellpadding=3D0 cellspacing=3D0 border=3D0 width=3D600>

	<tr>

		<td width=3D"135" height=3D"50" bgcolor=3Dblack border=3D"0">

			<table cellpadding=3D0 cellspacing=3D0 border=3D"2" width=3D134>

			<tr>

				<td border=3D"0" width=3D130 bgcolor=3Dwhite height=3D50>

				<font color=3D"lightgreen"><b><i>

            Stealth</font><font color=3D"black">Launch</font><br><font col=
or=3D"black">

            Pop<font color=3D"lightgreen">Launch<br><hr color=3Dblack size=
=3D1></font><font color=3D"black"><center>1-800-804-4352</I></center></fon=
t></font></B>

				</td>

			</tr>

			</table>

		</td>

		<td width=3D"5" bgcolor=3D"white"></td>

		<td width=3D460 bgcolor=3D"white">

		<font face=3D"arial,helvetica" color=3D"#93a1ab" size=3D"1">

		<i>The FIRST secure email friendly Hosting by StealthLaunch/Poplaunch. A=
ttempting to infringe upon the copyrights of PopLaunch or attempting to ha=
rm the natural course of business of

		PopLaunch users will be subject to SEVERE civil and/or criminal penaltie=
s (including but not limited to attempting to hack, Denial of Service Atta=
cks and/or broadcast the location of client sites). ALL clients not honori=
ng remove requests will be terminated

		(Call 1-800-804-4352 alternatively or for assistance with the PopLaunch =
browser).</i>

		</font>

		</td>

	</tr>

</table></DIV>

<DIV align=3Dcenter>

<table cellpadding=3D0 cellspacing=3D0 border=3D0 width=3D600>

	<tr>

		<td height=3D7></td>

	</tr>

	<tr>

   		<TD bgcolor=3D"lightgreen" class=3Dfooterblack height=3D"20" width=3D=
"600" colspan=3D"2">

      			<FONT face=3D"verdana,arial,helvetica" size=3D1 color=3D"#000000"=
>

                <CENTER>

                Copyright =FFFFFFA9 1997-2002 StealthLaunch PopLaunch. All=
 rights reserved.

                <A class=3Dfooterblack href=3D"http://64.4.14.250/cgi-bin/=
linkrd?_lang=3DEN&lah=3D5c7f4aa4d372502a775345d2ec35c7e7&lat=3D1008445018&=
hm___action=3Dhttp%3a%2f%2fwww%2edebt%2emojo%2enet%2eco%2efr%14%02%14%05%1=
4%7chttps%2e3det%2egoOpt%2ecom%3a80%2fdebt%2fmojo%2finfo%2ehtml" target=3D=
"_blank">Hosting Info</A> |

                <A class=3Dfooterblack href=3D"http://64.4.14.250/cgi-bin/=
linkrd?_lang=3DEN&lah=3D0abe6fb380bf528e5faa2a07fef6dff1&lat=3D1008445018&=
hm___action=3Dhttp%3a%2f%2fwww%2edebt%2emojo%2enet%2eco%2efr%14%02%14%05%1=
4%7chttps%2e3det%2egoOpt%2ecom%3a80%2fdebt%2fmojo%2fprivacy%2ehtml" target=
=3D"_blank">Privacy Policy</A>.

                </CENTER>

                </FONT>

		</TD>

		</tr>



</table></DIV>
		</tr>

</table></DIV>



</BODY>

</HTML>




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message