[Bug 254596] if_bridge wants LRO turned off, if_vlan insists it remain on

2024-06-13 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=254596 Mark Linimon changed: What|Removed |Added Status|In Progress |Closed Resolution|---

Re: Overflow or div by 0 in systat -ifstat?

2024-06-13 Thread freebsd-net
A followup on my earlier message. It appears that the systat program (in ifstat.c) is subtracting the previous time of day from the current time of day when calculating data rates, which works fine... except at the stroke of midnight. Not sure who maintains the utility, but this should be fixed

Re: Discarding inbound ICMP REDIRECT by default

2024-06-13 Thread Chris
On 2024-06-13 06:34, Rodney W. Grimes wrote: On 2024-06-12 15:05, Chris wrote: > On 2024-06-12 14:47, Rodney W. Grimes wrote: >>> I propose that we start dropping inbound ICMP REDIRECTs by default, by >>> setting the net.inet.icmp.drop_redirect sysctl to 1 by default (and >>> changing the associa

Re: Discarding inbound ICMP REDIRECT by default

2024-06-13 Thread Chris
On 2024-06-13 06:34, Rodney W. Grimes wrote: On 2024-06-12 15:05, Chris wrote: > On 2024-06-12 14:47, Rodney W. Grimes wrote: >>> I propose that we start dropping inbound ICMP REDIRECTs by default, by >>> setting the net.inet.icmp.drop_redirect sysctl to 1 by default (and >>> changing the associa

Re: Discarding inbound ICMP REDIRECT by default

2024-06-13 Thread Bakul Shah
On Jun 13, 2024, at 6:39 AM, Rodney W. Grimes wrote: > >> I propose that we start dropping inbound ICMP REDIRECTs by default, by >> setting the net.inet.icmp.drop_redirect sysctl to 1 by default (and >> changing the associated rc.conf machinery). I've opened a Phabricator >> review at https://re

Overflow or div by 0 in systat -ifstat?

2024-06-13 Thread freebsd-net
Hello! Left systat -ifstat running to watch the bandwidth on a few Netgraph VPN tunnels overnight, and woke up to this today: /0 /1 /2 /3 /4 /5 /6 /7 /8 /9 /10 Load Average | Interface Traffic PeakTotal

Re: Discarding inbound ICMP REDIRECT by default

2024-06-13 Thread Chris
On 2024-06-13 06:34, Rodney W. Grimes wrote: On 2024-06-12 15:05, Chris wrote: > On 2024-06-12 14:47, Rodney W. Grimes wrote: >>> I propose that we start dropping inbound ICMP REDIRECTs by default, by >>> setting the net.inet.icmp.drop_redirect sysctl to 1 by default (and >>> changing the associa

Re: Discarding inbound ICMP REDIRECT by default

2024-06-13 Thread Rodney W. Grimes
[ Charset UTF-8 unsupported, converting... ] > On Thu, 13 Jun 2024 at 09:39, Rodney W. Grimes > wrote: > > > > Discarding ICMP redirects on a internet host is non-conformant with > > STD-3 via rfc-1122. Processing of ICMP rediects is a MUST for hosts. > > In that case our default of "auto" is no

Re: Discarding inbound ICMP REDIRECT by default

2024-06-13 Thread Chris
On 2024-06-13 06:34, Rodney W. Grimes wrote: On 2024-06-12 15:05, Chris wrote: > On 2024-06-12 14:47, Rodney W. Grimes wrote: >>> I propose that we start dropping inbound ICMP REDIRECTs by default, by >>> setting the net.inet.icmp.drop_redirect sysctl to 1 by default (and >>> changing the associa

Re: Discarding inbound ICMP REDIRECT by default

2024-06-13 Thread Chris
On 2024-06-13 06:34, Rodney W. Grimes wrote: On 2024-06-12 15:05, Chris wrote: > On 2024-06-12 14:47, Rodney W. Grimes wrote: >>> I propose that we start dropping inbound ICMP REDIRECTs by default, by >>> setting the net.inet.icmp.drop_redirect sysctl to 1 by default (and >>> changing the associa

Re: Discarding inbound ICMP REDIRECT by default

2024-06-13 Thread Ed Maste
On Thu, 13 Jun 2024 at 09:39, Rodney W. Grimes wrote: > > Discarding ICMP redirects on a internet host is non-conformant with > STD-3 via rfc-1122. Processing of ICMP rediects is a MUST for hosts. In that case our default of "auto" is non-conformant if you have a routing daemon.

Re: Discarding inbound ICMP REDIRECT by default

2024-06-13 Thread Rodney W. Grimes
> I propose that we start dropping inbound ICMP REDIRECTs by default, by > setting the net.inet.icmp.drop_redirect sysctl to 1 by default (and > changing the associated rc.conf machinery). I've opened a Phabricator > review at https://reviews.freebsd.org/D45102. > > ICMP REDIRECTs served a useful

Re: Discarding inbound ICMP REDIRECT by default

2024-06-13 Thread Rodney W. Grimes
> On 2024-06-12 15:05, Chris wrote: > > On 2024-06-12 14:47, Rodney W. Grimes wrote: > >>> I propose that we start dropping inbound ICMP REDIRECTs by default, by > >>> setting the net.inet.icmp.drop_redirect sysctl to 1 by default (and > >>> changing the associated rc.conf machinery). I've opened a