From nobody Tue Jan 28 18:05:03 2025 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YjCrK62sXz5lslb for ; Tue, 28 Jan 2025 18:05:37 +0000 (UTC) (envelope-from Alexander@Leidinger.net) Received: from mailgate.Leidinger.net (bastille.leidinger.net [89.238.82.207]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature ECDSA (prime256v1) client-digest SHA256) (Client CN "mailgate.leidinger.net", Issuer "E5" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4YjCrJ3sWvz3Pj1; Tue, 28 Jan 2025 18:05:36 +0000 (UTC) (envelope-from Alexander@Leidinger.net) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=leidinger.net header.s=outgoing-alex header.b=HVxdl66O; spf=pass (mx1.freebsd.org: domain of Alexander@Leidinger.net designates 89.238.82.207 as permitted sender) smtp.mailfrom=Alexander@Leidinger.net; dmarc=pass (policy=quarantine) header.from=leidinger.net List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=leidinger.net; s=outgoing-alex; t=1738087533; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=MokIPqGOQD128IM5w70rxMyXgjrEnOtFm8AW/9H5Dl0=; b=HVxdl66OiVivQ8oad7zUH3zUieg4xl47GY4YnTDvFgXVOtlNyQ9yOLJRM4tfOTqzG+/Jxu OLjnHY6ac+01/Y0fpfvVpeHx1BXZUlDvCm9jYuCxVYko7E5A7Jsvp7olWmFa/6xFL0eyXJ SWLSgayPkMt69yZi35OBqY89bDPNaGDmx0KXaDo1QZD43pldNplEaHHpFjnxOXD2vTJkHb OTdFfJlXLVEylvpg6ZCuEKDr5REOJNY24L3dzqQxOWRKWGjSM/qY/5pxnjkW+zAK2XmFbE IYhqz2eaoZsG39j2rgMGOkDv1QsbBgXnNhUk1iqMwgUgn6R51VHCB37AGloOCg== Date: Tue, 28 Jan 2025 19:05:03 +0100 From: Alexander Leidinger To: Maxim Sobolev Cc: Gleb Smirnoff , Allan Jude , Current FreeBSD Subject: Re: Difference in "netstat -rn" output in the last 2 months In-Reply-To: References: Message-ID: <382bafe6ff9c04ab72d9e0c6f7fb39c3@Leidinger.net> Organization: No organization, this is a private message. Content-Type: multipart/signed; protocol="application/pgp-signature"; boundary="=_d1d3067cbd48107adf43127468117635"; micalg=pgp-sha256 X-Spamd-Result: default: False [-4.69 / 15.00]; SIGNED_PGP(-2.00)[]; HTTP_TO_IP(1.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.69)[-0.692]; DMARC_POLICY_ALLOW(-0.50)[leidinger.net,quarantine]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; R_DKIM_ALLOW(-0.20)[leidinger.net:s=outgoing-alex]; ONCE_RECEIVED(0.10)[]; MISSING_XM_UA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~]; ARC_NA(0.00)[]; HAS_ORG_HEADER(0.00)[]; ASN(0.00)[asn:34240, ipnet:89.238.64.0/18, country:DE]; DKIM_TRACE(0.00)[leidinger.net:+]; RCPT_COUNT_THREE(0.00)[4]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; RCVD_COUNT_ZERO(0.00)[0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MLMMJ_DEST(0.00)[freebsd-current@freebsd.org]; TO_DN_ALL(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; HAS_ATTACHMENT(0.00)[] X-Spamd-Bar: ---- X-Rspamd-Queue-Id: 4YjCrJ3sWvz3Pj1 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --=_d1d3067cbd48107adf43127468117635 Content-Type: multipart/alternative; boundary="=_d34c0128669efe86a6a3541dfe510c34" --=_d34c0128669efe86a6a3541dfe510c34 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset=UTF-8; format=flowed Am 2025-01-28 18:32, schrieb Maxim Sobolev: > I also think this should be reverted back to default. "-n" refers to IP > to name functionality, "default" is clearly a special case. If someone > wants it, some other option can be added to emit 0.0.0.0/0 [1] (not > sure why but ok). This was discussed in the review referenced in the commit. The -nn proposal was there too. Personally I agree with the rationales in favor of "-nn". Bye, Alexander. > -Max > > On Tue, Jan 28, 2025, 5:46 PM Gleb Smirnoff > wrote: > >> On Sun, Jan 26, 2025 at 04:58:57PM +0100, Alexander Leidinger wrote: >> A> something has changed in the output of "netstat -rn" between >> A> 2024-11-23-195545 and 2025-01-22-151306. The default route is not >> listed as >> A> "default" anymore, but with "0.0.0.0" resp. "::/0". This breaks >> some tools >> A> (e.g. iocage). Iocage uses python, I'm not sure if it uses netstat >> or some >> A> other interface, so it may not be directly related to netstat >> itself but >> A> could be related to some other stuff (netlink maybe?). >> A> >> A> Does this ring a bell for someone? >> >> This is very likely changed by >> 9206c79961986c2114a9a2cfccf009ac010ad259. >> >> Allan, may be make exclusion for the "default" to keep POLA? >> Otherwise, >> indeed at time of 15.0-RELEASE we will receive some negative feedback >> :) >> >> Maybe double -nn should introduce new behavior? >> >> -- >> Gleb Smirnoff -- http://www.Leidinger.net Alexander@Leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.org netchild@FreeBSD.org : PGP 0x8F31830F9F2772BF Links: ------ [1] http://0.0.0.0/0 --=_d34c0128669efe86a6a3541dfe510c34 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=UTF-8

Am 2025-01-28 18:32, schrieb Maxim Sobolev:

I also think this should be reverted back to default. "-n= " refers to IP to name functionality, "default" is clearly a special case. = If someone wants it, some other option can be added to emit 0.0.0.0/0 (= not sure why but ok).
 
This was discussed in the review referenced in the commit= =2E The -nn proposal was there too. Personally I agree with the rationales = in favor of "-nn".
 
Bye,
Alexander.
 
-Max

On Tue, Jan 28, 2025, 5:46=E2=80=AF= PM Gleb Smirnoff <glebius@freebsd.org> wrote:
On Sun, Jan 26, 2025 at 04:58:57PM += 0100, Alexander Leidinger wrote:
A> something has changed in the ou= tput of "netstat -rn" between
A> 2024-11-23-195545 and 2025-01-22-1= 51306. The default route is not listed as
A> "default" anymore, but= with "0.0.0.0" resp. "::/0". This breaks some tools
A> (e.g. iocag= e). Iocage uses python, I'm not sure if it uses netstat or some
A> = other interface, so it may not be directly related to netstat itself butA> could be related to some other stuff (netlink maybe?).
A> =
A> Does this ring a bell for someone?

This is very like= ly changed by 9206c79961986c2114a9a2cfccf009ac010ad259.

Allan, m= ay be make exclusion for the "default" to keep POLA? Otherwise,
indeed= at time of 15.0-RELEASE we will receive some negative feedback :)
Maybe double -nn should introduce new behavior?

--
Gleb= Smirnoff


--
--=_d34c0128669efe86a6a3541dfe510c34-- --=_d1d3067cbd48107adf43127468117635 Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc; size=833 Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEER9UlYXp1PSd08nWXEg2wmwP42IYFAmeZHGEACgkQEg2wmwP4 2Ib70w//XBeEj3JBN0ofGWpsM9omHXGGhKlumr3FtlVtdWvHyIy2hlBt+2JXDXbU v4TN3O7SNnXah1hHd15F/4jScVTQWmMJQShTdASM+29kGOR/bveNG63HyS6Q7xb9 Y1HdMXQ6hysehbDNBmmiQyZlcab5hvOIY7nqtUOSQ7Eh3M6SPv1ZcZJrkLrerEVB 7JAI4kvK7WgvUkYqhCypfFfFpII+bOyT2zdcHp3OMd8MfkkEwyB3Dd6xNIDy/thr /L9ospHngMy8rOiPVQ5LrkuC0Mg8YX6FlGLhOLIK3CmOmt/iCJLMJCihdz1k5YqF 0F805VQ/y0tfXFGZauFRvLfUVVUxwfhff5BeeoXG78NtcnRulmNyFGTliZK/nsE6 CSa/3htrflKfSZv9WyH7Dhf9cO2dWE8WWW1PElBjZMOuiBZ4b39KdBsiqQk5/DE9 7RQ+LmI47qFqfm62gF3mFSLTJFMqvYTV1LSHNSkrD1j9pgsCnF7AIjrmxNQL/wOc f6lSoU6hwwTGTxRvSOOjJIe6aSr7dDjW4qk1/c3c3moOvOTxPqxQZeSrmeoeN7Va 6PYfTFiFOjJpzA2hy+3z0QkxWWGp8bl1uo6P4FQNMBIXCYYXA9+8QVgs9iDOf4OJ Jo7xiyaH/+c/Z+O/AtpXNKq8vIzRNbaR6QRvZKvfYWhWj5NMNc8= =r/jQ -----END PGP SIGNATURE----- --=_d1d3067cbd48107adf43127468117635--