- Bird-users - Mailing Lists

Little bug in documentation
by Roberto Moreda 11 Jul '05

11 Jul '05

Hi. I think there's a little bug in the documentation of the import_control function. In the nest/proto-hooks.c file, source of the published documentation, the "Result" is: "-1 if the route has to be accepted, 1 if rejected and 0 if it should be passed to the filters." Looking at the code this is not true: 1 means accepted and -1 not accepted. Regards and keep up the good work :-) Roberto PS: I found that investigating some problem related with rip protocol "forced" routes... probably more on this in a little while :-) -- Roberto Moreda Allenta Consulting UNIX, Linux & Security Services

2 3

OSPF problem
by Eric Leblond 08 Jul '05

08 Jul '05

Hi bird people, A client of mine has some problem with OSPF protocol. The setup is as follow : GW --- VPN1 \ \___VPN2 VPN1 and VPN2 are cisco running OSPF and GW is a linux GW. OSPF is here to have dynamic route to VPN clients which can connect to VPN1 or VPN2 (load balancing) OSPF is working fine but after some times, it seems that some route are not added correctly. For exemple, VPN1 announces a new route but GW still has a route to VPN2. A bird reload is enough to have the correct route imported. The configuration of OSPF is as follow : protocol ospf VPN { import filter vpn_net; export filter my_exports; export where source = RTS_STATIC; area 0.0.0.0 { interface "eth2" { cost 10; hello 10; priority 0; retransmit 4; neighbors { 192.126.9.4 eligible; 192.126.9.5; }; authentication cryptographic; password "Password"; type broadcast; }; }; } Is this a configuration problem ? BR, -- Éric Leblond, eleblond(a)inl.fr Téléphone : 01 44 89 46 40, Fax : 01 44 89 45 01 INL, http://www.inl.fr

1 0

Exporting only one network via RIP
by Roberto Suarez Soto 04 Jul '05

04 Jul '05

Hi, I'm testing bird, using RIP, and I've stumbled on a problem. It seems that it wants to export every route that comes via RIP, while I only want to export one. I'll explain. We've got two boxes: box A is a firewall, and gives Internet access to a LAN behind it (directly attached to a box's ethernet) that we'll call network 1; bird is installed here. Box B is also a firewall, but gives Internet access to several networks; let's call them networks 2, 3 and 4; we're using Quagga in this one. They are connected via IPSec in transport mode, and the real communication goes through a GRE tunnel. Bird is set to use this tunnel to propagate routes between the two points. The aim of this is to have a failsafe link: both extremes have a static route with lower priority defined in bird's configuration, so if Internet connectivity is lost they rely on a point-to-point link (more expensive). But when there is normal connectivity, box A will transmit the route to network 1 via RIP, and box B will transmit the routes to networks 2, 3 and 4 via RIP too. This is also done to ease maintenance: when there is another network behind box B, we just have to add it to RIP and it propagates to box A, connecting all networks. There are other circumstances that motivate this use of RIP, but they don't matter right now :-) So, the ideal situation would be that bird on box A transmitted the route to network 1 via RIP, and that it imported the routes to network 2, 3 and 4 via RIP too. But what happens is that it exports the route to network 1 ... and to whatever route it receives via RIP. This means that box A is exporting via RIP the routes to networks 1, 2, 3 and 4, while only network 1 is its "own" route (because it has a IP in that network). This is the configuration that I have in RIP: protocol rip { preference 200; interface "tun00rg" { mode multicast; }; authentication none; import where source = RTS_RIP; export filter { if net ~ 172.16.10.0/24 then accept; else reject; }; period 10; garbage time 45; timeout time 15; } Network 1 is 172.16.10.0/24. I think that maybe I'm missing something in how filters work, or what's the behaviour of "import" and "export", but I've tried all combinations and I'm a bit lost :-) Am I doing something wrong? Is this some bug/feature of bird that I'm not aware of? Am I just not using the right filters? I've put just the configuration of RIP, but I can put the rest of the configuration file, and even tcpdump captures of the RIP transmissions. Ask freely. Thanks in advance :-) -- Roberto Suarez Soto Allenta Consulting robe(a)allenta.com www.allenta.com

1 0

New desing of web pages
by Ondrej Filip 09 Jun '05

09 Jun '05

Hello! The web pages http://bird.network.cz have a new look. :-) Ondrej

2 1

Multiple kernel protocols not working?
by Jakub Wartak 14 May '05

14 May '05

Hello group, First many thanks for developers for clean & working piece of good software :) But I'm struggling with getting multiple kernel tables to work. root@xenomorph:/usr/local/etc# bird 14-05-2005 19:58:22 <TRACE> kernel1: Initializing 14-05-2005 19:58:22 <TRACE> kernel2: Initializing 14-05-2005 19:58:22 <TRACE> kernel1: Starting 14-05-2005 19:58:22 <TRACE> kernel1: State changed to feed 14-05-2005 19:58:22 <TRACE> kernel2: Starting Segmentation fault (core dumped) I don't know is this is a bug or some misconfiguration. Here it is bird.conf, It is mainly taken from docs as you can see: log stderr all; table auxtable; debug protocols all; protocol kernel { # Primary routing table debug all; learn; # Learn alien routes from the kernel persist; # Don't remove routes on bird shutdown import all; export all; } protocol kernel { # Secondary routing table debug all; table auxtable; kernel table 1; export all; } The system is a basic Slackware 10.1. root@xenomorph:/usr/local/etc# uname -a Linux xenomorph 2.4.29 #6 Thu Jan 20 16:30:37 PST 2005 i686 unknown unknown GNU/Linux And here are the routing tables: root@xenomorph:/usr/local/etc# ip ro ls table 1 80.51.8.128/26 dev eth0 proto kernel scope link src 80.51.8.166 127.0.0.0/8 dev lo scope link default via 80.51.8.129 dev eth0 metric 1 root@xenomorph:/usr/local/etc# ip ro ls table main 80.51.8.128/26 dev eth0 proto kernel scope link src 80.51.8.166 127.0.0.0/8 dev lo scope link default via 80.51.8.129 dev eth0 metric 1 I manually compiled bird from sources ( version 1.0.11 ) with: CFLAGS="-g -ggdb -O0" ./configure --enable-debug && make && make install Next i recopied the "bird" binary from sources again, because "make install" strips /usr/local/sbin/bird. root@xenomorph:/usr/local/etc# file /usr/local/sbin/bird /usr/local/sbin/bird: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), not stripped root@xenomorph:/usr/local/etc# ldd /usr/local/sbin/bird libc.so.6 => /lib/libc.so.6 (0x4002d000) /lib/ld-linux.so.2 (0x40000000) And here is a backtrace from gdb: root@xenomorph:/usr/local/etc# gdb bird core GNU gdb 6.3 Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i486-slackware-linux"...Using host libthread_db library "/lib/libthread_db.so.1". Core was generated by `bird'. Program terminated with signal 11, Segmentation fault. Reading symbols from /lib/libc.so.6...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 #0 0x080710af in tm_start (t=0x0, after=0) at io.c:186 186 if (t->randomize) (gdb) bt #0 0x080710af in tm_start (t=0x0, after=0) at io.c:186 #1 0x0807443c in krt_start (P=0x8091928) at krt.c:773 #2 0x0804da94 in proto_rethink_goal (p=0x8091928) at ../../nest/proto.c:402 #3 0x0804d92e in protos_commit (new=0x808a0b8, old=0x0, force_reconfig=0) at ../../nest/proto.c:359 #4 0x080706c6 in config_do_commit (c=0x808a0b8) at conf.c:202 #5 0x080707ab in config_commit (c=0x808a0b8) at conf.c:264 #6 0x08074d96 in read_config () at main.c:115 #7 0x08075570 in main (argc=1, argv=0xbffff704) at main.c:428 -- Jakub Wartak vnull FreeBSD/OpenBSD/Linux/Network Administrator

1 0

Bird Preference and OSPF
by Matthew V. Weigl 06 May '05

06 May '05

I'm running bird on a Linksys WRT54G running Sveasoft Talisman 1.0.1 firmware. Bird version is 1.0.11, and it is part of that firmware, so I am not sure how it was built. I want my WRT to advertise 0.0.0.0/0 as long as the WAN port is up. I have another system (Linux w/Quagga) running which provides another default route. I've got a Cisco router on the same net which peers, but does not send a default. I've made the Linux system's default a higher metric. o---------------------------------o 172.16.1.0/24 | | | WRT54G Cisco 2610 Linux Bird 12.2(28a) Quagga OSPFd | ||| | Internet Other Nets Internet (NATed) (NATed) Default routes come from redistributing kernel on quagga (E2 w/cost 20000), and export all on bird (E2 w/cost 10000). I ran into trouble where the higher metric default (from Quagga) would overwrite the local default on the WRT, which I determined was based on preference of protocols within bird (kernel < ospf). I adjusted the preferences to the order that I wanted, and I am now unable to peer with quagga or Cisco routers. Debug on Cisco shows continual resending of DBD packets, stuck in EXSTART. Cisco docs show that it's likely an MTU size mismatch, however ifconfig on my WRT and sh int on my Cisco match MTU's. The quagga ospfd comes up with some similar error, however I'm not as familiar with it's debug output. The great part is that if I remove my protocol preferences in bird, the peering works (but stomps my default route). I am looking for any insight that anyone may have on this issue. Any responses are appreciated. Here's my bird.conf... router id 172.16.1.12; protocol kernel { preference 50; learn; persist; scan time 10; import all; export all; } protocol device { scan time 10; } protocol direct { interface "*"; } protocol ospf WRT54G_ospf { preference 100; export all; area 0 { interface "br0" { cost 10; }; interface "vlan1" { cost 10; stub yes; }; }; } -- Matt Weigl

2 2

RIPng
by Ladislav Lhotka 20 Apr '05

20 Apr '05

Hi all, I've been testing BIRD's RIPng and found a number of problems: Two of them are trivial: RIPng port is 521 and not 520, and the only version defined so far is 1. The patch below solves these two. Now the following two problems are more serious and affect also the IPv4 RIP implementation: 1. RIP should automatically advertise all connected networks to its neighbours (modulo split horizon). BIRD's RIP advertises only the routes found in the main BIRD routing table - and the "connected" routes are not there even though the kernel protocol is configured to "import all". 2. The updates should be sent every 30 seconds, and indeed this is what seems to be set in rip.c. Without changing this default, I see the updates coming in irregular intervals around 50 seconds (see below). No. Time Source Destination Protocol Info 1 0.000000 2001:718:1a02:7::1 ff02::9 RIPng version 1 Response 2 50.991634 2001:718:1a02:7::1 ff02::9 RIPng version 1 Response 3 101.983225 2001:718:1a02:7::1 ff02::9 RIPng version 1 Response 4 153.974728 2001:718:1a02:7::1 ff02::9 RIPng version 1 Response 5 198.967385 2001:718:1a02:7::1 ff02::9 RIPng version 1 Response Cheers, Lada ===============================PATCH==================================== diff -uNr bird-1.0.11.orig/proto/rip/rip.c bird-1.0.11/proto/rip/rip.c --- bird-1.0.11.orig/proto/rip/rip.c 2004-07-15 19:28:13.000000000 +0200 +++ bird-1.0.11/proto/rip/rip.c 2005-04-20 09:56:54.484233854 +0200 @@ -146,7 +146,11 @@ DBG( "Preparing packet to send: " ); packet->heading.command = RIPCMD_RESPONSE; +#ifndef IPV6 packet->heading.version = RIP_V2; +#else + packet->heading.version = RIP_V1; +#endif packet->heading.unused = 0; i = !!P_CF->authtype; @@ -963,7 +967,11 @@ init_list(&c->iface_list); c->c.preference = DEF_PREF_RIP; c->infinity = 16; +#ifndef IPV6 c->port = 520; +#else + c->port = 521; +#endif c->period = 30; c->garbage_time = 120+180; c->timeout_time = 120; -- Ladislav Lhotka, CESNET

2 2

Bird - Release 1.0.10
by Ondrej Filip 17 Mar '05

17 Mar '05

Hi All! I would like to announce, the new release of BIRD Internet Routing Daemon. I realize that I promised multicast functionality in next release of BIRD. Unfortunatelly I found so many important bugs in OSPF stuff, that I decided to release another unicast-only version. So this release should be even more compatible with rfc2328. :-) I'll be happy hearing your feed-back. You can download it at ftp://bird.network.cz/pub/bird/bird-1.0.10.tar.gz Enjoy! Ondrej Filip

2 6

netlink patch / null interface crash
by Mathias DEFIVES 14 Mar '05

14 Mar '05

Hi to the list. I wrote this ugly patch this morning in order to avoid segfault on 'show routes' when some routes were already in the kernel. It resolves also crashes on startup when running 'debug all' on ospf The problem in that case was the 'iface' part of the route was null and crashed the daemon. --- unpatched/bird-1.0.11/sysdep/linux/netlink/netlink.c Sat Jun 5 11:58:23 2004 +++ bird-1.0.11/sysdep/linux/netlink/netlink.c Tue Mar 1 14:36:06 2005 @@ -680,8 +680,11 @@ if (ng && ng->scope) ra.iface = ng->iface; else - /* FIXME: Remove this warning? Handle it somehow... */ - log(L_WARN "Kernel told us to use non-neighbor %I for %I/%d", ra.gw, net->n.prefix, net->n.pxlen); + { + /* FIXME: Remove this warning? Handle it somehow... */ + log(L_WARN "in netlink.c Kernel told us to use non-neighbor %I for %I/%d", ra.gw, net->n.prefix, net->n.pxlen); + ra.iface = krt_temp_iface(p, oif); + } } else { regards, -- Mathias DEFIVES

2 1

[Fwd: bird and unnumbered interfaces]
by Sörös Jozsef 01 Mar '05

01 Mar '05

Hi! Once upon a time I suggested and sent a patch to correct the behavior of bird in case of using unnumbered routing. Up till now it has not been added to the release, so I always have to make a special release for myself. Please add this the release! Joseph -------- Original Message -------- Subject: bird and unnumbered interfaces Date: Tue, 10 Feb 2004 17:14:48 +0100 From: Sörös Jozsef <soros(a)multip.hu> To: Bird <bird-users(a)bird.network.cz> I suggest this correction in nest/iface.c to get bird handle interfaces with unnumbered and addresses correctly. Best regards: Joseph --- iface.c 2004-02-10 09:41:09.000000000 +0100 +++ nest/iface.c 2004-02-10 02:58:51.000000000 +0100 @@ -407,9 +407,13 @@ WALK_LIST(a, i->addrs) { - if (!(a->flags & IA_SECONDARY) && (!b || a->scope > b->scope)) - b = a; - a->flags &= ~IA_PRIMARY; + if (!(a->flags & IA_SECONDARY) + && !(a->flags & IA_UNNUMBERED) + && (!b || a->scope > b->scope)) + { + b = a; + a->flags &= ~IA_PRIMARY; + } } res = (b != i->addr); i->addr = b; -- Üdvözlettel: Sörös József Multip Kft. JS84-RIPE

1 0