kern/101400: [ipsec] some packets do not pass through IPSEC
tunnel
Шкурко Александр
read at midland.com.ua
Sat Aug 19 12:30:25 UTC 2006
The following reply was made to PR kern/101400; it has been noted by GNATS.
From: =?koi8-r?B?+8vV0svPIOHMxcvTwc7E0g==?= <read at midland.com.ua>
To: <bug-followup at FreeBSD.org>, <read at midland.com.ua>
Cc:
Subject: Re: kern/101400: [ipsec] some packets do not pass through IPSEC tunnel
Date: Sat, 19 Aug 2006 15:21:54 +0300
This is a multi-part message in MIME format.
------_=_NextPart_001_01C6C38A.0EBE7739
Content-Type: text/plain;
charset="koi8-r"
Content-Transfer-Encoding: quoted-printable
After additional testing it was found out, that packets (not only ESP) =
the certain size are lost all.
If it is ICMP(as example) packet from 1473 to 1479 bytes we have lost =
it.
Examle:
ping -s 1473 any_ip_address
=20
And I found that after 1480*x, where x=3D1,3,4,5,6... bytes we have the =
same problem
1480+1473=9A -=9A=9A 1480+1479=9A=9A=9A=9A=9A=9A=9A=9A=9A first range of =
payload of ICMP packet
1480*2+1473=9A - 1480*2+1479=9A=9A=9A=9A=9A second range of payload of =
ICMP packet
.........
And so on
=20
If packets bigger or smaller=9A of that range - packets pass
When problem exists I have kernel:
diff -u ./GENERIC ./black
--- ./GENERIC=9A=9A Mon May=9A 1 03:15:12 2006
+++ ./black=9A=9A=9A=9A Sat Aug 19 10:51:09 2006
@@ -22,7 +22,7 @@
=9Acpu=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A I486_CPU
=9Acpu=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A I586_CPU
=9Acpu=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A I686_CPU
-ident=9A=9A=9A=9A=9A=9A=9A=9A=9A GENERIC
+ident=9A=9A=9A=9A=9A=9A=9A=9A=9A black
=20
=9A# To statically compile in device wiring instead of =
/boot/device.hints
=9A#hints=9A=9A=9A=9A=9A=9A=9A=9A =
"GENERIC.hints"=9A=9A=9A=9A=9A=9A=9A=9A # Default places to look for =
devices.
@@ -33,7 +33,7 @@
=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
SCHED_4BSD=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # 4BSD scheduler
=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
PREEMPTION=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A =9A# Enable kernel thread =
preemption
=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
INET=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # =
InterNETworking
-options=9A=9A=9A=9A=9A=9A=9A =
INET6=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # IPv6 =
communications protocols
+#options=9A=9A=9A=9A=9A=9A =
INET6=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # IPv6 =
communications protocols
=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
FFS=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # =
Berkeley Fast Filesystem
=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
SOFTUPDATES=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # Enable FFS soft =
updates support
=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
UFS_ACL=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # Support for =
access control lists
@@ -279,3 +279,41 @@
=9Adevice=9A=9A=9A=9A=9A=9A=9A=9A firewire=9A=9A=9A=9A=9A=9A=9A # =
FireWire bus code
=9Adevice=9A=9A=9A=9A=9A=9A=9A=9A =
sbp=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # SCSI over FireWire (Requires =
scbus and da)
=9Adevice=9A=9A=9A=9A=9A=9A=9A=9A =
fwe=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # Ethernet over FireWire =
(non-standard!)
+
+#--------------------------------
+options=9A=9A=9A=9A=9A=9A=9A=9A =
SMP=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A =9A=9A=9A=9A=9A# =
Symmetric MultiProcessor Kernel
+options=9A=9A=9A=9A=9A=9A=9A=9A IPFIREWALL
+options=9A=9A=9A=9A=9A=9A=9A=9A IPFIREWALL_VERBOSE
+options=9A=9A=9A=9A=9A=9A=9A=9A IPFIREWALL_VERBOSE_LIMIT=3D100
+options=9A=9A=9A=9A=9A=9A=9A=9A IPFIREWALL_DEFAULT_TO_ACCEPT
+options=9A=9A=9A=9A=9A=9A=9A=9A IPDIVERT
+options=9A=9A=9A=9A=9A=9A=9A=9A TCP_DROP_SYNFIN
+options=9A=9A=9A=9A=9A=9A=9A=9A IPFILTER
+options=9A=9A=9A=9A=9A=9A=9A=9A IPFILTER_LOG
+options=9A=9A=9A=9A=9A=9A=9A=9A DUMMYNET
+options=9A=9A=9A=9A=9A=9A=9A=9A SC_HISTORY_SIZE=3D1000
+options=9A=9A=9A=9A=9A=9A=9A=9A PANIC_REBOOT_WAIT_TIME=3D120
+options=9A=9A=9A=9A=9A=9A=9A=9A SC_DISABLE_REBOOT
+options=9A=9A=9A=9A=9A=9A=9A=9A IPSEC
+options=9A=9A=9A=9A=9A=9A=9A=9A IPSEC_ESP
+options=9A=9A=9A=9A=9A=9A=9A=9A IPSEC_DEBUG
+options=9A=9A=9A=9A=9A=9A=9A=9A IPFIREWALL_FORWARD
+options=9A=9A=9A=9A=9A=9A=9A=9A IPFIREWALL_FORWARD_EXTENDED
+
+options=9A=9A=9A=9A=9A=9A=9A=9A HZ=3D1000
+
+# pf otions
+device pf
+device pflog
+device pfsync
+
+#ALTQ
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ_CBQ=9A=9A=9A=9A=9A=9A=9A # Class =
Bases Queueing
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ_RED=9A=9A=9A=9A=9A=9A=9A # Random =
Early Detection
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ_RIO=9A=9A=9A=9A=9A=9A=9A # RED =
In/Out
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ_HFSC=9A=9A=9A=9A=9A=9A # =
Hierarchical Packet Scheduler
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ_CDNR=9A=9A=9A=9A =9A=9A# Traffic =
conditioner
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ_PRIQ=9A=9A=9A=9A=9A=9A # Priority =
Queueing
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ_NOPCC=9A=9A=9A=9A=9A # Required =
for SMP build
+
=20
But when I comment some lines from config problem with packets =
disappear!
diff -u ./GENERIC ./black
--- ./GENERIC=9A=9A Mon May=9A 1 03:15:12 2006
+++ ./black=9A=9A=9A=9A Sat Aug 19 10:51:09 2006
@@ -22,7 +22,7 @@
=9Acpu=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A I486_CPU
=9Acpu=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A I586_CPU
=9Acpu=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A I686_CPU
-ident=9A=9A=9A=9A=9A=9A=9A=9A=9A GENERIC
+ident=9A=9A=9A=9A=9A=9A=9A=9A=9A black
=20
=9A# To statically compile in device wiring instead of =
/boot/device.hints
=9A#hints=9A=9A=9A=9A=9A=9A=9A=9A =
"GENERIC.hints"=9A=9A=9A=9A=9A=9A=9A=9A # Default places to look for =
devices.
@@ -33,7 +33,7 @@
=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
SCHED_4BSD=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # 4BSD scheduler
=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
PREEMPTION=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # Enable kernel thread =
preemption
=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
INET=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # =
InterNETworking
-options=9A=9A=9A=9A=9A=9A=9A =
INET6=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # IPv6 =
communications protocols
+#options=9A=9A=9A=9A=9A=9A =
INET6=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A =9A=9A=9A=9A# IPv6 =
communications protocols
=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
FFS=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # =
Berkeley Fast Filesystem
=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
SOFTUPDATES=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # Enable FFS soft =
updates support
=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
UFS_ACL=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # Support for =
access control lists
@@ -279,3 +279,41 @@
=9Adevice=9A=9A=9A=9A=9A=9A=9A=9A firewire=9A=9A=9A=9A=9A=9A=9A # =
FireWire bus code
=9Adevice=9A=9A=9A=9A=9A=9A=9A=9A =
sbp=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # SCSI over FireWire (Requires =
scbus and da)
=9Adevice=9A=9A=9A=9A=9A=9A=9A=9A =
fwe=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # Ethernet over FireWire =
(non-standard!)
+
+#--------------------------------
+options=9A=9A=9A=9A=9A=9A=9A=9A =
SMP=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # =
Symmetric MultiProcessor Kernel
+#options=9A=9A=9A=9A=9A=9A=9A=9A IPFIREWALL
+#options=9A=9A=9A=9A=9A=9A=9A=9A IPFIREWALL_VERBOSE
+#options=9A=9A=9A=9A=9A=9A=9A=9A IPFIREWALL_VERBOSE_LIMIT=3D100
+#options=9A=9A=9A=9A=9A=9A=9A=9A IPFIREWALL_DEFAULT_TO_ACCEPT
+#options=9A=9A=9A=9A=9A=9A=9A=9A IPDIVERT
+#options=9A=9A=9A=9A=9A=9A=9A=9A TCP_DROP_SYNFIN
+#options=9A=9A=9A=9A=9A=9A=9A=9A IPFILTER
+#options=9A=9A=9A=9A=9A=9A=9A=9A IPFILTER_LOG
+#options=9A=9A=9A=9A=9A=9A=9A=9A DUMMYNET
+options=9A=9A=9A=9A=9A=9A=9A=9A SC_HISTORY_SIZE=3D1000
+options=9A=9A=9A=9A=9A=9A=9A=9A PANIC_REBOOT_WAIT_TIME=3D120
+options=9A=9A=9A=9A=9A=9A=9A=9A SC_DISABLE_REBOOT
+options=9A=9A=9A=9A=9A=9A=9A=9A IPSEC
+options=9A=9A=9A=9A=9A=9A=9A=9A IPSEC_ESP
+options=9A=9A=9A=9A=9A=9A=9A=9A IPSEC_DEBUG
+options=9A=9A=9A=9A=9A=9A=9A=9A IPFIREWALL_FORWARD
+options=9A=9A=9A=9A=9A=9A=9A=9A IPFIREWALL_FORWARD_EXTENDED
+
+options=9A=9A=9A=9A=9A=9A=9A=9A HZ=3D1000
+
+# pf otions
+device pf
+device pflog
+device pfsync
+
+#ALTQ
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ_CBQ=9A=9A=9A=9A=9A=9A=9A # Class =
Bases Queueing
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ_RED=9A=9A=9A=9A=9A=9A=9A # Random =
Early Detection
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ_RIO=9A=9A=9A=9A=9A=9A=9A # RED =
In/Out
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ_HFSC=9A=9A=9A=9A=9A=9A # =
Hierarchical Packet Scheduler
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ_CDNR=9A=9A=9A=9A=9A=9A # Traffic =
conditioner
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ_PRIQ=9A=9A=9A=9A=9A=9A # Priority =
Queueing
+options=9A=9A=9A=9A=9A=9A=9A=9A ALTQ_NOPCC=9A=9A=9A=9A=9A # Required =
for SMP build
+
------_=_NextPart_001_01C6C38A.0EBE7739
Content-Type: text/html;
charset="koi8-r"
Content-Transfer-Encoding: quoted-printable
<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3DContent-Type content=3D"text/html; charset=3Dkoi8-r">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:595.3pt 841.9pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=3DRU link=3Dblue vlink=3Dpurple>
<div class=3DSection1>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>After additional testing it was found out, =
that
packets (not only ESP) the certain size are lost =
all.<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>If it is ICMP(as example) packet from 1473 to =
1479
bytes we have lost it.<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>Examle:<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>ping –s 1473 =
any_ip_address<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>And I found that after =
1480*x</span></font><font
size=3D2 face=3DArial><span lang=3DUK =
style=3D'font-size:10.0pt;font-family:Arial'>, </span></font><font
size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:10.0pt;font-family:Arial'>where
x=3D1</span></font><font size=3D2 face=3DArial><span lang=3DUK =
style=3D'font-size:10.0pt;
font-family:Arial'>,3,4,5,6…</span></font><font size=3D2 =
face=3DArial><span
lang=3DEN-US style=3D'font-size:10.0pt;font-family:Arial'> bytes we have =
the same
problem<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>1480+1473=9A -=9A=9A =
1480+1479=9A=9A=9A=9A=9A=9A=9A=9A=9A first range of
payload of ICMP packet<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>1480*2+1473=9A - 1480*2+1479=9A=9A=9A=9A=9A =
second range of
payload of ICMP packet<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>………<o:p></o:p></span></font><=
/p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>And so on<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>If packets bigger or smaller=9A of that range =
- packets
pass<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>When problem exists I have =
kernel:<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>diff -u ./GENERIC =
./black<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>--- ./GENERIC=9A=9A Mon May=9A 1 03:15:12 =
2006<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+++ ./black=9A=9A=9A=9A Sat Aug 19 10:51:09 =
2006<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>@@ -22,7 +22,7 @@<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Acpu=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A =
I486_CPU<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Acpu=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A =
I586_CPU<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Acpu=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A =
I686_CPU<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>-ident=9A=9A=9A=9A=9A=9A=9A=9A=9A =
GENERIC<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+ident=9A=9A=9A=9A=9A=9A=9A=9A=9A =
black<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9A# To statically compile in device wiring =
instead of
/boot/device.hints<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9A#hints=9A=9A=9A=9A=9A=9A=9A=9A =
"GENERIC.hints"=9A=9A=9A=9A=9A=9A=9A=9A #
Default places to look for devices.<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>@@ -33,7 +33,7 @@<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
SCHED_4BSD=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # 4BSD
scheduler<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
PREEMPTION=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A =9A# Enable
kernel thread preemption<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
INET=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A #
InterNETworking<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>-options=9A=9A=9A=9A=9A=9A=9A =
INET6=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # IPv6
communications protocols<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+#options=9A=9A=9A=9A=9A=9A =
INET6=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # IPv6
communications protocols<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
FFS=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # =
Berkeley
Fast Filesystem<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
SOFTUPDATES=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # Enable FFS
soft updates support<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
UFS_ACL=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # Support for
access control lists<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>@@ -279,3 +279,41 =
@@<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Adevice=9A=9A=9A=9A=9A=9A=9A=9A =
firewire=9A=9A=9A=9A=9A=9A=9A # FireWire bus =
code<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Adevice=9A=9A=9A=9A=9A=9A=9A=9A =
sbp=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # SCSI over FireWire
(Requires scbus and da)<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Adevice=9A=9A=9A=9A=9A=9A=9A=9A =
fwe=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # Ethernet over
FireWire (non-standard!)<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+#--------------------------------<o:p></o:p></=
span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
SMP=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A =9A=9A=9A=9A=9A# =
Symmetric
MultiProcessor Kernel<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFIREWALL<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFIREWALL_VERBOSE<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFIREWALL_VERBOSE_LIMIT=3D100<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFIREWALL_DEFAULT_TO_ACCEPT<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPDIVERT<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
TCP_DROP_SYNFIN<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DDE =
style=3D'font-size:10.0pt;
font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFILTER<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DDE =
style=3D'font-size:10.0pt;
font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFILTER_LOG<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DDE =
style=3D'font-size:10.0pt;
font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
DUMMYNET<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
SC_HISTORY_SIZE=3D1000<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
PANIC_REBOOT_WAIT_TIME=3D120<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
SC_DISABLE_REBOOT<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPSEC<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPSEC_ESP<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPSEC_DEBUG<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFIREWALL_FORWARD<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFIREWALL_FORWARD_EXTENDED<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
HZ=3D1000<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+# pf otions<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+device pf<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+device pflog<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+device pfsync<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+#ALTQ<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ_CBQ=9A=9A=9A=9A=9A=9A=9A # Class Bases
Queueing<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ_RED=9A=9A=9A=9A=9A=9A=9A # Random Early
Detection<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ_RIO=9A=9A=9A=9A=9A=9A=9A # RED In/Out<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ_HFSC=9A=9A=9A=9A=9A=9A # Hierarchical
Packet Scheduler<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ_CDNR=9A=9A=9A=9A =9A=9A# Traffic
conditioner<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ_PRIQ=9A=9A=9A=9A=9A=9A # Priority =
Queueing<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ_NOPCC=9A=9A=9A=9A=9A # Required for SMP
build<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>But when I comment some lines from config =
problem
with packets disappear!<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>diff -u ./GENERIC =
./black<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>--- ./GENERIC=9A=9A Mon May=9A 1 03:15:12 =
2006<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+++ ./black=9A=9A=9A=9A Sat Aug 19 10:51:09 =
2006<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>@@ -22,7 +22,7 @@<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Acpu=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A =
I486_CPU<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Acpu=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A =
I586_CPU<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Acpu=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A =
I686_CPU<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>-ident=9A=9A=9A=9A=9A=9A=9A=9A=9A =
GENERIC<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+ident=9A=9A=9A=9A=9A=9A=9A=9A=9A =
black<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9A# To statically compile in device wiring =
instead of
/boot/device.hints<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9A#hints=9A=9A=9A=9A=9A=9A=9A=9A =
"GENERIC.hints"=9A=9A=9A=9A=9A=9A=9A=9A #
Default places to look for devices.<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>@@ -33,7 +33,7 @@<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
SCHED_4BSD=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # 4BSD
scheduler<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
PREEMPTION=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # Enable
kernel thread preemption<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
INET=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A #
InterNETworking<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>-options=9A=9A=9A=9A=9A=9A=9A =
INET6=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # IPv6
communications protocols<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+#options=9A=9A=9A=9A=9A=9A =
INET6=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A =9A=9A=9A=9A# IPv6
communications protocols<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
FFS=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # =
Berkeley
Fast Filesystem<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
SOFTUPDATES=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # Enable FFS
soft updates support<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Aoptions=9A=9A=9A=9A=9A=9A=9A =
UFS_ACL=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # Support for
access control lists<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>@@ -279,3 +279,41 =
@@<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Adevice=9A=9A=9A=9A=9A=9A=9A=9A =
firewire=9A=9A=9A=9A=9A=9A=9A # FireWire bus =
code<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Adevice=9A=9A=9A=9A=9A=9A=9A=9A =
sbp=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # SCSI over FireWire
(Requires scbus and da)<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>=9Adevice=9A=9A=9A=9A=9A=9A=9A=9A =
fwe=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # Ethernet over
FireWire (non-standard!)<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+#--------------------------------<o:p></o:p></=
span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
SMP=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A=9A # =
Symmetric
MultiProcessor Kernel<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+#options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFIREWALL<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+#options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFIREWALL_VERBOSE<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+#options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFIREWALL_VERBOSE_LIMIT=3D100<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+#options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFIREWALL_DEFAULT_TO_ACCEPT<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+#options=9A=9A=9A=9A=9A=9A=9A=9A =
IPDIVERT<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+#options=9A=9A=9A=9A=9A=9A=9A=9A =
TCP_DROP_SYNFIN<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DDE =
style=3D'font-size:10.0pt;
font-family:Arial'>+#options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFILTER<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DDE =
style=3D'font-size:10.0pt;
font-family:Arial'>+#options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFILTER_LOG<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DDE =
style=3D'font-size:10.0pt;
font-family:Arial'>+#options=9A=9A=9A=9A=9A=9A=9A=9A =
DUMMYNET<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
SC_HISTORY_SIZE=3D1000<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
PANIC_REBOOT_WAIT_TIME=3D120<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
SC_DISABLE_REBOOT<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPSEC<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPSEC_ESP<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPSEC_DEBUG<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFIREWALL_FORWARD<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
IPFIREWALL_FORWARD_EXTENDED<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
HZ=3D1000<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+# pf otions<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+device pf<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+device pflog<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+device pfsync<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+#ALTQ<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ_CBQ=9A=9A=9A=9A=9A=9A=9A # Class Bases
Queueing<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ_RED=9A=9A=9A=9A=9A=9A=9A # Random Early
Detection<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ_RIO=9A=9A=9A=9A=9A=9A=9A # RED In/Out<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ_HFSC=9A=9A=9A=9A=9A=9A # Hierarchical
Packet Scheduler<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ_CDNR=9A=9A=9A=9A=9A=9A # Traffic
conditioner<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ_PRIQ=9A=9A=9A=9A=9A=9A # Priority =
Queueing<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+options=9A=9A=9A=9A=9A=9A=9A=9A =
ALTQ_NOPCC=9A=9A=9A=9A=9A # Required for SMP
build<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DEN-US =
style=3D'font-size:
10.0pt;font-family:Arial'>+<o:p></o:p></span></font></p>
</div>
</body>
</html>
------_=_NextPart_001_01C6C38A.0EBE7739--
More information about the freebsd-bugs
mailing list