Jail source address selection in 8.1-RELEASE

2010-11-24 Thread Steve Polyack
Hi, There appears to be a loosely documented sysctl 'security.jail.param.ip4.saddrsel' which should limit source IP selection of jails to their primary jail interface/IP. The sysctl does not appear to do anything, however: # sysctl security.jail.param.ip4.saddrsel=0 -> # echo $? 0 # sysctl

MAC address / per-proto ARP caching in 8.1-RELEASE

2011-03-15 Thread Steve Polyack
Is anyone aware of some sort of facility in either FreeBSD 8.1-RELEASE or the em(4) driver which would cause it to cache MAC addresses / ARP entries for hosts on a per-protocol basis? We've been doing some testing with new routers, and almost every time we switch them in or out our FreeBSD mac

Re: MAC address / per-proto ARP caching in 8.1-RELEASE

2011-03-15 Thread Steve Polyack
On 03/15/11 14:26, Jeremy Chadwick wrote: On Tue, Mar 15, 2011 at 09:30:39AM -0400, Steve Polyack wrote: Is anyone aware of some sort of facility in either FreeBSD 8.1-RELEASE or the em(4) driver which would cause it to cache MAC addresses / ARP entries for hosts on a per-protocol basis

Re: MAC address / per-proto ARP caching in 8.1-RELEASE

2011-03-16 Thread Steve Polyack
On 03/15/11 14:26, Jeremy Chadwick wrote: On Tue, Mar 15, 2011 at 09:30:39AM -0400, Steve Polyack wrote: Is anyone aware of some sort of facility in either FreeBSD 8.1-RELEASE or the em(4) driver which would cause it to cache MAC addresses / ARP entries for hosts on a per-protocol basis

Re: Network stack unstable after arp flapping

2011-04-01 Thread Steve Polyack
On 04/01/11 10:16, Frederique Rijsdijk wrote: Hi, We (hosting provider) are in the process of implementing ipv6 in our network (yay). Yesterday one of the final steps in configuring and updating our core routers were taken, which did not go entirely as planned. As a result, the default gatewa

Re: Network stack unstable after arp flapping

2011-04-04 Thread Steve Polyack
On 4/3/2011 9:50 AM, Frederique Rijsdijk wrote: Steve, On 01-04-11 16:50, Steve Polyack wrote: On 04/01/11 10:16, Frederique Rijsdijk wrote: [ .. ] Mar 31 18:36:12 srv01 kernel: arp: x.x.x.1 moved from 00:00:0c:9f:f0:3d to 00:00:0c:07:ac:3d on bge0 [ .. ] The result of that, is that loads

Re: Production use of carp?

2011-06-02 Thread Steve Polyack
On 6/2/2011 8:14 PM, John De Boskey wrote: - Patrick Lamaiziere's Original Message - Le Thu, 2 Jun 2011 16:39:40 -0400, John a ?crit : Instead of running carp on the external interfaces as below: ifconfig_cxgb0="inet 10.24.99.11 netmask 255.255.0.0" # System 1 physical ip ifconf

Question about NIC link state initialization

2011-06-29 Thread Steve Polyack
I have a handful of systems running FreeBSD 8.1-RELEASE. An occaisional fat-finger in /etc/fstab may cause one to end up in single-user mode from time to time. This would normally not be a problem, but some of these systems have a LOM (lights-out management) controller which shares the system

Re: Question about NIC link state initialization

2011-06-30 Thread Steve Polyack
On 6/30/2011 1:10 AM, per...@pluto.rain.com wrote: Steve Polyack wrote: ... An occaisional fat-finger in /etc/fstab may cause one to end up in single-user mode ... some of these systems have a LOM (lights-out management) controller which shares the system's on-board NICs ... when the s

Re: Question about NIC link state initialization

2011-06-30 Thread Steve Polyack
On 6/30/2011 6:49 AM, Daniel Feenberg wrote: On Wed, 29 Jun 2011, per...@pluto.rain.com wrote: Steve Polyack wrote: ... An occaisional fat-finger in /etc/fstab may cause one to end up in single-user mode ... some of these systems have a LOM (lights-out management) controller which shares

Re: kern/155604: [flowtable] Flowtable excessively caches dest MAC addresses for outgoing traffic

2011-10-17 Thread Steve Polyack
The following reply was made to PR kern/155604; it has been noted by GNATS. From: Steve Polyack To: Gleb Smirnoff Cc: bug-follo...@freebsd.org Subject: Re: kern/155604: [flowtable] Flowtable excessively caches dest MAC addresses for outgoing traffic Date: Mon, 17 Oct 2011 12:04:35 -0400 On

Re: Kernel (7.3) crash due to mbuf leak?

2010-07-30 Thread Steve Polyack
On 07/30/10 14:10, David DeSimone wrote: After upgrading a couple of our systems from 7.2-RELEASE to 7.3-RELEASE, we have started to see them running out of mbuf's and crashing every month or so. The panic string is: ... The services on these systems are extremely simple: SSH (thoug

Re: MPD5 + DUMMYNET + PF HIGH CPU USAGE

2010-09-08 Thread Steve Polyack
On 09/08/10 13:38, Marcos Vinícius Buzo wrote: Hi all. I just started working in a small WISP in a place of a friend that unfortunatelly is not between us anymore :( _ We're running FreeBSD 8.1 64bits with MPD5 for pppoe, IPFW+Dummynet for Traffic Shaping and PF for NAT and firewall. _ Our hard