Re: Performance issues with vnet jails + epair + bridge

2024-09-12 Thread Miroslav Lachman
t; to enable Use your NIC name instead of em0. If some part disabled fixes you problem, put it into your rc.conf ifconfig line. Or you can try netgraph buddy https://github.com/bellhyve/ngbuddy Kind regards Miroslav Lachman

Re: Performance issues with vnet jails + epair + bridge

2024-09-16 Thread Miroslav Lachman
mask 255.255.255.0" Then run: service netif cloneup Kind regards Miroslav Lachman

Re: FreeBSD 9.1-RELEASE + bge0 == watchdog timeout

2013-02-27 Thread Miroslav Lachman
with hw.bge.allow_asf="1" in loader.conf. I didn't test newer releases on these old machines. Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: FreeBSD 9.1-RELEASE + bge0 == watchdog timeout

2013-02-28 Thread Miroslav Lachman
YongHyeon PYUN wrote: On Wed, Feb 27, 2013 at 12:09:28PM +0100, Miroslav Lachman wrote: [...] I can provide you full access to this machine (if you want) or let me know, what version I should check. Older versions (6.x - 8.3) are working fine with hw.bge.allow_asf="1" in load

Re: ipfilter(4) needs maintainer

2013-04-14 Thread Miroslav Lachman
les, so you can use it on the right side to: block in on le0 proto tcp from 10.1.1.1/32 to any pass in proto tcp from 10.1.0.0/16 port = 23 to 10.2.0.0/16 flags A/A Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.

Best practices with network settings for virtualization

2014-05-12 Thread Miroslav Lachman
lware in guest OS tried to change MAC od IP, I would like to disallow that or do not allow any offending traffic to reach outside network or any other guest running on the same machine. Guests can be VirtualBox, Bhyve or anything else. I really appreciate any help or ideas. -- Miroslav La

Re: Best practices with network settings for virtualization

2014-05-13 Thread Miroslav Lachman
Julian Elischer wrote: On 5/13/14, 6:54 AM, Miroslav Lachman wrote: I originaly posted this to virtualization@ list week ago. I didn't recieved any answer, so maybe this list is better for questions like the following. I would like to ask some really experienced person - what is the bes

Re: [CFT] multiple FIB support in route(8)

2012-02-05 Thread Miroslav Lachman
Andrey Zonov wrote: Hi, What do you think about adding fib support for rc.subr like we got one for nice? There are PRs with patches for rc.subr for a long time without attention. Same as with PR's adding suport for cpuset. I don't understand why we are having some really useful tools in base

Re: Multiple gateways support

2011-04-06 Thread Miroslav Lachman
some attempts to add setfib support to rc.subr, but it was not committed: http://www.freebsd.org/cgi/query-pr.cgi?pr=conf/132483 I don't know the reason. Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listin

Re: bge(4) + asf

2011-04-15 Thread Miroslav Lachman
There were some reports about freezes with bge_allow_asf=1. I am using hw.bge.allow_asf=1 in loader.conf for a few years on our Sun Fire X2100 M2 machines without any problems. Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lis

Re: bce(4) with IPMI

2011-09-29 Thread Miroslav Lachman
ystems. Disabled by default. Is it possible that something similar is needed for bce too? Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-11-11 Thread Miroslav Lachman
to help with solving this issue? Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-11-12 Thread Miroslav Lachman
uot; messages on shutdown or bootup. So problem seems solved by 7-STABLE. Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: kern/140684: [bce] Broadcom NetXtreme II BCM5709 1000Base-T - fail after soft reboot

2009-12-01 Thread Miroslav Lachman
The following reply was made to PR kern/140684; it has been noted by GNATS. From: Miroslav Lachman <000.f...@quip.cz> To: bug-follo...@freebsd.org, mksm...@adhost.com Cc: Subject: Re: kern/140684: [bce] Broadcom NetXtreme II BCM5709 1000Base-T - fail after soft reboot Date: Tue, 01 Dec 2

Re: kern/140970: [bce] The two NetXtreme II BCM5709S NICs on our HP Bl460c G1 Blade can't be accessed on FreeBSD 7.2 and 8 [regression]

2009-12-21 Thread Miroslav Lachman
The following reply was made to PR kern/140970; it has been noted by GNATS. From: Miroslav Lachman <000.f...@quip.cz> To: bug-follo...@freebsd.org, korm...@itm.tum.de Cc: Subject: Re: kern/140970: [bce] The two NetXtreme II BCM5709S NICs on our HP Bl460c G1 Blade can't be accessed

Re: Sudden mbuf demand increase and shortage under the load

2010-02-16 Thread Miroslav Lachman
740.html It was tested on FreeBSD 8 and high UDP traffic on igb interfaces emits messages "GET BUF: dmamap load failure - 12" and later results in kernel panic. We have not received any response to this report. Miroslav Lachman ___ freebs

Re: Permission denied error

2010-03-10 Thread Miroslav Lachman
(be default) unless you change the permissions: # ls -al /dev/bpf0 crw--- 1 root wheel0, 170 Aug 25 2009 /dev/bpf0 Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscri

Re: netstat byte/bit confusion

2008-09-26 Thread Miroslav Lachman
it counters and MRTG can be configured to use these. netstat is in bytes AFAIK. Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: sms gprs gsm edge

2009-02-17 Thread Miroslav Lachman
Siemens MC35i GSM modem over COM1 with smstools few years ago (with FreeBSD 4.x). No special drivers needed. It was used to send and receive SMS with our custom PHP web application. I don't know what is your definition of "sms gateway". M

Re: Can't start mysql in jail

2009-05-25 Thread Miroslav Lachman
(0x28589000) libc.so.6 => /lib/libc.so.6 (0x2859b000) As you can see, there is different libc.so version, different threading library, etc. So you can't run MySQL daemon build on different major version OS. Miroslav Lachman ___ free

Re: how to remove jid?

2009-05-26 Thread Miroslav Lachman
hole host machine in other case. Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: NTP - default /etc/ntp.conf

2009-06-05 Thread Miroslav Lachman
pid -f /var/db/ntpd.drift" Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: tap(4): will it be more reasonable if it preserved UP/DOWN state, when closed?

2015-04-01 Thread Miroslav Lachman
eaving it 'up' after use as well? Doesn't sysctl net.link.tap.up_on_open=1 fix your problem? Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: tap(4) and host-only networking between host and guest

2015-11-05 Thread Miroslav Lachman
reebsd.org/bugzilla/show_bug.cgi?id=165174 I don't understand why such useful patches are left uncommited and without any comments in PR for years. Thank you for the link! Miroslav Lachman ___ freebsd-net@freebsd.org mailing list https://lists.free

7.0 - ifconfig create is not working as expected?

2008-03-29 Thread Miroslav Lachman
create # ifconfig lo1 inet 172.16.16.2 netmask 255.255.255.0 Is this expected behavior or should I file a PR? Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to

Re: Jailed Samba not getting broadcasts

2008-04-24 Thread Miroslav Lachman
ail_samba_devfs_ruleset="devfsrules_samba_jail" #=--=# Try not to use jail_samba_interface="rl0" for "auto aliasing" and add ifconfig_rl0_alias0="inet 192.168.15.201 netmask 25

Re: FreeBSD 7.0 jail and Samba 3

2008-04-24 Thread Miroslav Lachman
Nejc Škoberne wrote: Hey, ifconfig_rl0_alias0="192.168.15.201 netmask 255.255.255.0" the mask of an alias ipadres needs to be 32 bits. I do not now if this solves your problem but it needs to be 32 bits. ifconfig_rl0_alias0="192.168.15.201 netmask 255.255.255.255" Can you explain why it nee

Re: domain name not resolution too slow or timeouts

2005-10-31 Thread Miroslav Lachman
; > Sirode Do you have firewall (IPFW, IPF, PF) on freebsd machine? Ain't you blocking DNS replies? Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: chroot implementation of bind and kea

2017-11-13 Thread Miroslav Lachman
trust-anchor keys need to persist across restarts and not be reset to their initial state. I think keys can be updated by updating the port or by some dedicated periodic script. It seems safer to me. Miroslav Lachman ___ freebsd-net@freebsd.org mailing

Re: OpenVPN vs IPSec

2017-11-19 Thread Miroslav Lachman
tting and debugging was a pain because we don't have access to the other end. On the other hand customers with OpenVPN works in a minute. Just send or receive openvpn.conf, set some variables in rc.conf and VPN is up and running. So I prefer OpenVPN whenever pos

IPSec StrongSwan error sending to PF_KEY socket: Invalid argument

2018-07-30 Thread Miroslav Lachman
I am trying to setup IPSec tunnel between VirtualBox gues (FreeBSD 10.4) on one side and AWS EC3 AMI (FreeBSD 10.4) on other side. Both sides have kernel with IPSEC and IPSEC_NAT_T but I am not able to make it work. It works if I make similar setup with two VirtualBox instances (no NAT), but whe

Re: HZ kernel configuration still needed nowadays?

2016-04-20 Thread Miroslav Lachman
rn.hz: 1000 And you can change it in /boot/loader.conf if you need. echo 'kern.hz="999"' >> /boot/loader.conf shutdown -r now Miroslav Lachman ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/f

Re: How to configure another loopback device?

2016-12-23 Thread Miroslav Lachman
and the second one with the wrong settings you have from rc.conf? Miroslav Lachman ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: IPv6 in jails

2020-03-18 Thread Miroslav Lachman
rt AddressFamily ListenAddress Miroslav Lachman ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: pf and hnX interfaces

2020-10-13 Thread Miroslav Lachman
gards Miroslav Lachman ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: Tee packets

2006-08-30 Thread Miroslav Lachman
t and routes it like route-to. The original packet gets routed as it normally would." Miroslav Lachman ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: reset netstat statistics

2006-10-15 Thread Miroslav Lachman
and I have run ipfw zero a few times, but have not run netstat -z at all. Let me know if you have any ideas about this. Counter resets itself after 4GB (it is not a bug, it is feature of 32bit counter as mentioned by Max Laier) Miroslav Lachman ___ fr