How to use pf with vimage jails?

2016-05-03 Thread Alan Somers
Is there any documentation on how to run pf on a host, using it to control access to vimage jails? I see that only ipfw can be run from _inside_ of the jail, but I'm interested in running pf _outside_ of the jail. One example application would be to use a jail as a honeypot. In that case, you wo

Re: LACP LAGG device problems

2016-05-03 Thread Greg Skafte
in the world of VSS/IRF switches or VCP switches, we used 2x10G active-active across switches for redundancy + availability + capacity usually with mode IP-HASH -- Email: ska...@trollkarl.net Contact me for ICQ,MSN,AIM,Yahoo,GTalk,Skype --

setsourcefilter/getsourcefilter missing const qualifier?

2016-05-03 Thread Victor Toni
When trying to compile some linux-originated code on FreeBSD I get the following errors: /usr/include/netinet/in.h:585:5: note: candidate function not viable: 3rd argument ('const sockaddr *') would lose const qualifier int setsourcefilter(int, uint32_t, struct sockaddr *, socklen_t, ^

undeclared identifier 'NBBY'

2016-05-03 Thread Victor Toni
I'm trying to port the linux-based mcproxy ( https://github.com/mcproxy/mcproxy) to FreeBSD. While trying to use instead of I encountered the following error: /usr/include/netinet6/ip6_mroute.h:90:39: error: use of undeclared i

[Differential] D6137: tcp/lro: Refactor the free/active list operation.

2016-05-03 Thread Phabricator
This revision was automatically updated to reflect the committed changes. Closed by commit rS298974: tcp/lro: Refactor the active list operation. (authored by sephe). CHANGED PRIOR TO COMMIT https://reviews.freebsd.org/D6137?vs=15725&id=15841#toc REPOSITORY rS FreeBSD src repository CHANGES