From owner-freebsd-net@freebsd.org Wed Jan 8 15:14:55 2020 Return-Path: Delivered-To: freebsd-net@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 976871F1E86 for ; Wed, 8 Jan 2020 15:14:55 +0000 (UTC) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from mx1.sbone.de (mx1.sbone.de [IPv6:2a01:4f8:13b:39f::9f:25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mx1.sbone.de", Issuer "SBone.DE" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 47tCTp5Ld9z3CMP for ; Wed, 8 Jan 2020 15:14:54 +0000 (UTC) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from mail.sbone.de (mail.sbone.de [IPv6:fde9:577b:c1a9:31::2013:587]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mx1.sbone.de (Postfix) with ESMTPS id 1AD0A8D4A15E; Wed, 8 Jan 2020 15:14:45 +0000 (UTC) Received: from content-filter.sbone.de (content-filter.sbone.de [IPv6:fde9:577b:c1a9:31::2013:2742]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.sbone.de (Postfix) with ESMTPS id A98B3E707D5; Wed, 8 Jan 2020 15:14:44 +0000 (UTC) X-Virus-Scanned: amavisd-new at sbone.de Received: from mail.sbone.de ([IPv6:fde9:577b:c1a9:31::2013:587]) by content-filter.sbone.de (content-filter.sbone.de [fde9:577b:c1a9:31::2013:2742]) (amavisd-new, port 10024) with ESMTP id zZE3k02-Up02; Wed, 8 Jan 2020 15:14:43 +0000 (UTC) Received: from [127.0.0.1] (unknown [IPv6:fde9:577b:c1a9:4902:24cd:46d2:da19:ab7b]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by mail.sbone.de (Postfix) with ESMTPSA id 5944AE707B0; Wed, 8 Jan 2020 15:14:43 +0000 (UTC) From: "Bjoern A. Zeeb" To: "Patrick M. Hausen" Cc: freebsd-net@freebsd.org Subject: Re: IPv6, SLAAC, routing in iocage jail Date: Wed, 08 Jan 2020 15:14:42 +0000 X-Mailer: MailMate (2.0BETAr6146) Message-ID: <35CC426C-EA93-4A2A-B8EF-1430074D1BE0@lists.zabbadoz.net> In-Reply-To: <30C1820F-6528-4942-89D9-3F3756F146D3@punkt.de> References: <3420DC22-D319-44EE-8DD7-4D48985F961B@punkt.de> <30C1820F-6528-4942-89D9-3F3756F146D3@punkt.de> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8"; format=flowed Content-Transfer-Encoding: quoted-printable X-Rspamd-Queue-Id: 47tCTp5Ld9z3CMP X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of bzeeb-lists@lists.zabbadoz.net designates 2a01:4f8:13b:39f::9f:25 as permitted sender) smtp.mailfrom=bzeeb-lists@lists.zabbadoz.net X-Spamd-Result: default: False [-0.88 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_COUNT_FIVE(0.00)[5]; NEURAL_HAM_MEDIUM(-1.00)[-0.998,0]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(0.00)[+ip6:2a01:4f8:13b:39f::9f:25]; NEURAL_HAM_LONG(-1.00)[-0.995,0]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[zabbadoz.net]; URIBL_RED(3.50)[ixsystems.com.multi.uribl.com]; BAD_REP_POLICIES(0.10)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCPT_COUNT_TWO(0.00)[2]; HAS_ANON_DOMAIN(0.10)[]; IP_SCORE(-2.48)[ip: (-8.45), ipnet: 2a01:4f8::/29(-2.44), asn: 24940(-1.50), country: DE(-0.02)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:24940, ipnet:2a01:4f8::/29, country:DE]; MID_RHS_MATCH_FROM(0.00)[] X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jan 2020 15:14:55 -0000 On 8 Jan 2020, at 14:08, Patrick M. Hausen wrote: > Hi, > >> Am 08.01.2020 um 14:50 schrieb Bjoern A. Zeeb = >> : >>> https://www.ixsystems.com/community/threads/ipv6_cpe_wanif-not-quite-= working-in-iocage-jail.81341/ >> >> Try replacing the >> >> # KEYWORD: nojail >> >> with >> >> # KEYWORD: nojailvnet >> >> in /etc/rc.d/netoptions. > > Found and understood - I will give it a try later today and report = > back. > > May I remark that the semantics of "nojail" vs. "nojailvnet" are a = > *bit* confusing? > > Determine if booting in a jail, and add "nojail" (no jails allowed) = > or "nojailvnet" > (only allow vnet-enabled jails) to the list of KEYWORDS to skip in = > rcorder(8). > > Shouldn't the latter be named "onlyjailvnet" or some such? Naming = > things ... ;-) I have to say I had to look things up myself as I was confused. I=E2=80=99= ve = not been involved in these things before. /bz