From owner-freebsd-jail@freebsd.org Mon Jan 28 21:19:45 2019 Return-Path: Delivered-To: freebsd-jail@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 56FCE14BFEF2 for ; Mon, 28 Jan 2019 21:19:45 +0000 (UTC) (envelope-from bu7cher@yandex.ru) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id BC7EE80594 for ; Mon, 28 Jan 2019 21:19:44 +0000 (UTC) (envelope-from bu7cher@yandex.ru) Received: by mailman.ysv.freebsd.org (Postfix) id 7F92314BFEEC; Mon, 28 Jan 2019 21:19:44 +0000 (UTC) Delivered-To: jail@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5A19314BFEEB; Mon, 28 Jan 2019 21:19:44 +0000 (UTC) (envelope-from bu7cher@yandex.ru) Received: from forward102j.mail.yandex.net (forward102j.mail.yandex.net [IPv6:2a02:6b8:0:801:2::102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C763280593; Mon, 28 Jan 2019 21:19:43 +0000 (UTC) (envelope-from bu7cher@yandex.ru) Received: from mxback20g.mail.yandex.net (mxback20g.mail.yandex.net [IPv6:2a02:6b8:0:1472:2741:0:8b7:320]) by forward102j.mail.yandex.net (Yandex) with ESMTP id 6F98BF224AD; Tue, 29 Jan 2019 00:19:40 +0300 (MSK) Received: from smtp3p.mail.yandex.net (smtp3p.mail.yandex.net [2a02:6b8:0:1472:2741:0:8b6:8]) by mxback20g.mail.yandex.net (nwsmtp/Yandex) with ESMTP id 2sVRmK3cxO-JeIiEKMi; Tue, 29 Jan 2019 00:19:40 +0300 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1548710380; bh=N/Y4xud4/v4zMDOnvN4mUjpDUsXp5RcR2PG6KCw0jkE=; h=Subject:To:References:From:Message-ID:Date:In-Reply-To; b=DBZFvnOYjiI8Rrl01A5eOIHHo1TNibWK2nfctYWNZHg/HpaIOjiNn6lCWH8eynvMO mDUkq01kkt8Rqty57bLNlmsuhaRezi+znSFsTwWEl5zePXVbV6npiBLP9Vs+wZVbED NrTjY13n6TUNKPWNO2fPa0zjYTleH+otmkWUnwOA= Received: by smtp3p.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id hoR1R7Sa54-JdSCuAb5; Tue, 29 Jan 2019 00:19:39 +0300 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client certificate not present) Subject: Re: icmp (IPv4) issues with VIMAGE JAILs and IPv6 To: "O. Hartmann" , freebsd-current , jail@freebsd.org References: <20190128134356.23a41e81@freyja> From: "Andrey V. Elsukov" Openpgp: id=E6591E1B41DA1516F0C9BC0001C5EA0410C8A17A Autocrypt: addr=bu7cher@yandex.ru; prefer-encrypt=mutual; keydata= mQENBEwBF1kBCADB9sXFhBEUy8qQ4X63Y8eBatYMHGEFWN9ypS5lI3RE6qQW2EYbxNk7qUC5 21YIIS1mMFVBEfvR7J9uc7yaYgFCEb6Sce1RSO4ULN2mRKGHP3/Sl0ijZEjWHV91hY1YTHEF ZW/0GYinDf56sYpDDehaBF5wkWIo1+QK5nmj3vl0DIDCMNd7QEiWpyLVwECgLX2eOAXByT8B bCqVhJGcG6iFP7/B9Ll6uX5gb8thM9LM+ibwErDBVDGiOgvfxqidab7fdkh893IBCXa82H9N CNwnEtcgzh+BSKK5BgvPohFMgRwjti37TSxwLu63QejRGbZWSz3OK3jMOoF63tCgn7FvABEB AAG0JUFuZHJleSBWLiBFbHN1a292IDxidTdjaGVyQHlhbmRleC5ydT6JATgEEwECACIFAkwB F1kCGwMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEAHF6gQQyKF6qmYIAI6ekfm1VA4T vqankI1ISE6ku4jV7UlpIQlEbE7/8n3Zd6teJ+pGOQhN5qk8QE7utdPdbktAzi+x7LIJVzUw 4TywZLXGrkP7VKYkfg6oyCGyzITghefQeJtr2TN4hYCkzPWpylkue8MtmqfZv/6royqwTbN+ +E09FQNvTgRUYJYTeQ1qOsxNRycwvw3dr2rOfuxShbzaHBB1pBIjGrMg8fC5pd65ACH5zuFV A0CoTNGMDrEZSfBkTW604UUHFFXeCoC3dwDZRKOWJ3GmMXns65Ai5YkA63BSHEE1Qle3VBhd cG1w0CB5FBV3pB27UVnf0jEbysrDqW4qN7XMRFSWNAy5AQ0ETAEXWQEIAJ2p6l9LBoqdH/0J PEFDY2t2gTvAuzz+8zs3R03dFuHcNbOwjvWCG0aOmVpAzkRa8egn5JB4sZaFUtKPYJEQ1Iu+ LUBwgvtXf4vWpzC67zs2dDuiW4LamH5p6xkTD61aHR7mCB3bg2TUjrDWn2Jt44cvoYxj3dz4 S49U1rc9ZPgD5axCNv45j72tggWlZvpefThP7xT1OlNTUqye2gAwQravXpZkl5JG4eOqJVIU X316iE3qso0iXRUtO7OseBf0PiVmk+wCahdreHOeOxK5jMhYkPKVn7z1sZiB7W2H2TojbmcK HZC22sz7Z/H36Lhg1+/RCnGzdEcjGc8oFHXHCxUAEQEAAYkBHwQYAQIACQUCTAEXWQIbDAAK CRABxeoEEMihegkYCAC3ivGYNe2taNm/4Nx5GPdzuaAJGKWksV+w9mo7dQvU+NmI2az5w8vw 98OmX7G0OV9snxMW+6cyNqBrVFTu33VVNzz9pnqNCHxGvj5dL5ltP160JV2zw2bUwJBYsgYQ WfyJJIM7l3gv5ZS3DGqaGIm9gOK1ANxfrR5PgPzvI9VxDhlr2juEVMZYAqPLEJe+SSxbwLoz BcFCNdDAyXcaAzXsx/E02YWm1hIWNRxanAe7Vlg7OL+gvLpdtrYCMg28PNqKNyrQ87LQ49O9 50IIZDOtNFeR0FGucjcLPdS9PiEqCoH7/waJxWp6ydJ+g4OYRBYNM0EmMgy1N85JJrV1mi5i Message-ID: Date: Tue, 29 Jan 2019 00:16:28 +0300 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:60.0) Gecko/20100101 Thunderbird/60.4.0 MIME-Version: 1.0 In-Reply-To: <20190128134356.23a41e81@freyja> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="S2MF41pEtJo1HXWUnJjI3V6NrYuBrxMFO" X-Rspamd-Queue-Id: C763280593 X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-6.99 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; NEURAL_HAM_SHORT(-0.99)[-0.993,0]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; REPLY(-4.00)[] X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Jan 2019 21:19:45 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --S2MF41pEtJo1HXWUnJjI3V6NrYuBrxMFO Content-Type: multipart/mixed; boundary="sfuZbHl49U2Z3feYWLZAwPPu1vdtN1eRc"; protected-headers="v1" From: "Andrey V. Elsukov" To: "O. Hartmann" , freebsd-current , jail@freebsd.org Message-ID: Subject: Re: icmp (IPv4) issues with VIMAGE JAILs and IPv6 References: <20190128134356.23a41e81@freyja> In-Reply-To: <20190128134356.23a41e81@freyja> --sfuZbHl49U2Z3feYWLZAwPPu1vdtN1eRc Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 28.01.2019 15:44, O. Hartmann wrote: > Stopping all jails, destroying all epairs and bridge0 doesn't change an= ything. >=20 > The problems occured when IPv6 came into play on the specific host in q= uestion. >=20 > Does anyone have any ideas? I'm out of ideas. Since your ruleset is relatively simple, first of try to use "log" opcode for "deny" rules and look what happens in the /var/log/security. --=20 WBR, Andrey V. Elsukov --sfuZbHl49U2Z3feYWLZAwPPu1vdtN1eRc-- --S2MF41pEtJo1HXWUnJjI3V6NrYuBrxMFO Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQEzBAEBCAAdFiEE5lkeG0HaFRbwybwAAcXqBBDIoXoFAlxPcSwACgkQAcXqBBDI oXp+xAf+P4D5s8efauDZHi1J2Rw/DKy7sQ+wmXc99V6nxULtMVLeEkIvgbfJfxlL jaHMoC+P981n2ZhAk3vc/jY/f2tJO2ig3yo3pUXSdASBgpOMYRhb6KWWZymLoMFH tI1DVlk2Yc8k64l6mTfqv6Z+ZTbeR0hmQ6Yqu19svwlPZ0rlUR+Di1DrlBl9yaCs EgOEUYqVZP8NkPH2vpuhSPig+lYmLWzT9Ckg3RWLVCrvLSkROlBg2ziomonI6FY9 H/fW7rxiIN+W4JAyJZ1pD/7hURyS7pB9nokNBQFx40l/QW72U0goMcH/pW1Ch1tG 4DcMYMI58HSpP3FJsYK9/9Z8IQfLJQ== =zSjM -----END PGP SIGNATURE----- --S2MF41pEtJo1HXWUnJjI3V6NrYuBrxMFO--