Re: routing ipv6 over wireguard

2020-08-26 Thread Alarig Le Lay
Hi, On Tue 25 Aug 2020 15:27:27 GMT, Aisha Tammy wrote: > (peer A)$ tcpdump -inet6 -i vio0 icmp6 > 15:23:04.918459 fe80::fc00:2ff:feee:5248 > ff02::1:ff42:6: icmp6: > neighbor sol: who has 2001:19f0:5:5cd5::6942:6 > > (a lot of such lines) It seems that you have been provided a *connected* /64,

Re: More fun with IPv6 route(8) output

2019-11-08 Thread Alarig Le Lay
Since the matching route is ::/0, it does make sense to me to print this error message. The /128 route doesn’t exist. However, I’m getting an error about ::/0 guinch# route -n get 2a00:5884:102:1::/64 route to: 2a00:5884:102:1:: destination: 2a00:5884:102:1:: mask:

Re: CARP with /30 ?

2019-10-24 Thread Alarig Le Lay
On 24/10/2019 10:41, Axel Rau wrote: > Hi all, > > does a CARP setup with 2 firewll boxes with an upstream /30 transfer net i > feasible? > E.g. > > 5.6.7.232/30 > > 5.6.7.232 if box1 > 5.6.7.233 upstream router > 5.6.7.234 if box2 > 5.6.7.235 if CARP > > Quick answer would be very helpfull.

Re: Munin node over IPv6

2018-11-08 Thread Alarig Le Lay
On jeu. 8 nov. 12:32:31 2018, Florian Obser wrote: > > can you try the following: > > > > host ::1 (or even host :::1 it seems that a bug requires to add an extra > > colon) With explicit IPv6 addresses and without the INET6 pkg installed, munin crashes > I believe one needs

Munin node over IPv6

2018-11-08 Thread Alarig Le Lay
Hi, I would like to pull my munin node over IPv6, but the process is only listening on IPv4. guinch# grep '^host' /etc/munin/munin-node.conf host * guinch# netstat -af inet | grep 4949 tcp 0 0 *.4949 *.*LISTEN guinch# netstat -af inet6 | grep

Re: Coming from FreeBSD, lower networking performance

2018-07-14 Thread Alarig Le Lay
Hi, On ven. 13 juil. 21:46:24 2018, bit shifter wrote: > You could try running iperf to eliminate disk IO from the equation and > narrow down the potential sources of the performance deficit you're > seeing. By curiosity, I ran a test here, on a already production running infra. FreeBSD 11.1 is

Re: Trouble with CARP and MSS/MTU

2017-11-24 Thread Alarig Le Lay
Hi, Did you try to add the mtu value argument to your ifconfig line? -- alarig signature.asc Description: PGP signature

Re: DNSSEC solution

2017-08-15 Thread Alarig Le Lay
On mar. 15 août 09:03:26 2017, Thuban wrote: > Hi > since we have nsd and unbound included in base, I was wondering what > tool you use to deal with DNSSEC and sign your zone ? > I use zkt, but your advices would be nice. > > Regards > -- > thuban Hi, You clould use OpenDNSSEC. It’s written by

Re: OT: protonmail mail body

2017-07-12 Thread Alarig Le Lay
On mer. 12 juil. 10:37:59 2017, Mihai Popescu wrote: > Hello, > > I preffer to keep it calm, but some people on the list are using > protonmail and their mails are impossible to read directly on the > list. I think they are destroying the list, maybe they should turn > that feature off. Here is

Re: Firewall won't forward IPv6 traffic

2017-06-30 Thread Alarig Le Lay
Hi, Have you tested your configuration without any firewall? -- alarig signature.asc Description: PGP signature

Question about p2p OpenVPN interfaces

2017-06-03 Thread Alarig Le Lay
Hi, I’m currently experimenting to run OpenBGPD over OpenVPN p2p links (not the common /30 or /31 interconnection network we can see on Internet). It works great for the BGP part, but the exported routes to the kernel does not correspond to the BGP ones. For exemple, if I look for the route to