From nobody Thu Oct 31 18:43:15 2024 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4XfXtw1cbjz5c9nr for ; Thu, 31 Oct 2024 18:43:20 +0000 (UTC) (envelope-from hausen@punkt.de) Received: from FR5P281CU006.outbound.protection.outlook.com (mail-germanywestcentralazlp170120004.outbound.protection.outlook.com [IPv6:2a01:111:f403:c20c::4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4XfXtv68xSz4BCQ; Thu, 31 Oct 2024 18:43:19 +0000 (UTC) (envelope-from hausen@punkt.de) Authentication-Results: mx1.freebsd.org; none ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=OXJb0rk0Fj+mhLJjvHFD9RB8cFrV6hNIIDEe0yTj7bDAIZ7kpub9WwnZDL2P3GSC61zdFty4wmqXWB9LOB/UUzZyeChd8Morl9RFkOEKPOJpFpfYKgbcBekvB5GD+iHrp/lkoEquSuCfQOlVo9qU0ls5KataMbtAhHLvP+0BXNzD+wgBt5pGsJ6aRy89f1ALFgucoS9iG2MQ3D6GsrjTObcflzNNogbCzsT64pqikF0fhHxtB405StW4SrBHF1ecm3TyXxpToBjqUUQMvWWv7Z7VtX+NeWwvK0hsRkdT13OfI5iI7yr1fDOdlVWVC+JTi6XfX4odM1JqTDIf5h3KSA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=1BdxB3LFsEL/DxsFqydutIUILK+tKeEmYoUh8k6bt+E=; b=XNABJErPmkV4MGNuztYonlLB0iU4nP5QUaXwAbvNYkUmATIIsQMCsg1evlakWCz1pdrbfas0hPNBaivm4EfKWJv8aKOSHAhU0JhzLQbDsusFp0p8Vj6k5tYd7iKu0Z5uOrd1Zh8uilnbaNdY7cPlY5a8G/mmvaG73lxKLk+QzqIaQBLPHv9i1TXqSTM0VlMxJwGYdUoFF2kRJvRR2gu/XcgV7TbQanFGuPnVKsA1tpXq/S6puLAxKXjipZYq4ogQ/1T8OJ/t+F3mi1ytJwyI4/KtmdjuHz5htynjeZ+Ae2x25OwDzQTZdxodOr05SRLuHYrjmFWg1q2CN4+BqcQIrA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=punkt.de; dmarc=pass action=none header.from=punkt.de; dkim=pass header.d=punkt.de; arc=none Received: from BEZP281MB3159.DEUP281.PROD.OUTLOOK.COM (2603:10a6:b10:2d::7) by BE1P281MB1697.DEUP281.PROD.OUTLOOK.COM (2603:10a6:b10:18::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8114.23; Thu, 31 Oct 2024 18:43:15 +0000 Received: from BEZP281MB3159.DEUP281.PROD.OUTLOOK.COM ([fe80::d3b4:7f52:df34:f8e7]) by BEZP281MB3159.DEUP281.PROD.OUTLOOK.COM ([fe80::d3b4:7f52:df34:f8e7%3]) with mapi id 15.20.8114.020; Thu, 31 Oct 2024 18:43:15 +0000 From: "Patrick M. Hausen" To: Girgensohn Palle CC: "freebsd-net@freebsd.org" Subject: Re: pf for netgraph jails? Thread-Topic: pf for netgraph jails? Thread-Index: AQHbH9Z9n7R/C7Uk30akJCyhQrUWW7KJjgiAgBeGhYCAADVDaA== Date: Thu, 31 Oct 2024 18:43:15 +0000 Message-ID: References: <7D5BD9CC-8A08-4C74-B2E6-E0437235F3B1@FreeBSD.org> <16E8EF1D-9CB0-4158-B0A4-FB4F91A03D2C@punkt.de> In-Reply-To: Accept-Language: de-DE, en-US Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: BEZP281MB3159:EE_|BE1P281MB1697:EE_ x-ms-office365-filtering-correlation-id: c76c63e5-8b03-4e16-51ea-08dcf9dbe170 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|376014|366016|10070799003|38070700018; x-microsoft-antispam-message-info: =?us-ascii?Q?y9QoLKEE8AFTpi/B7NmsIl2eGo3Kua9Jh0y580z45VqdZYJ7x6z3ru9/Gk+c?= =?us-ascii?Q?F02C9Y56bniHd7meixP6w7AFEAGUQUmTWRCnYJA55DYaAvPOefqeec8+y18D?= =?us-ascii?Q?gXR8X5CHoIt3AdDpaeQFyJqcV6w00C0Bv1tnohHRPjqpWS5gOjjpUgvCR2ul?= =?us-ascii?Q?6ZX7UtE3Uo/tdr4mYvbGsylvKsIfyo4x2iTanJtDZYM+zGwefFq3ecna6yPk?= =?us-ascii?Q?VmerKwMpG7dPiUvYkmxhnLMMYxa4/AnagwLjOg7WncWtWzHZUfhDNASxJxTF?= =?us-ascii?Q?LS+vJUEt8RT2Efm8ya0jMXwcp+CLV8PVMm91rbkKgO1UIANpPg9XUEQ3OGff?= =?us-ascii?Q?EsV9CZmdjjI9Y7PoMGT5Y+YRBAlXLmnw5+XdEhlDnvaEupvFsDmC7VVQKAtH?= =?us-ascii?Q?yA8JG4xXxmRCyNWIMOFqUKX3mNujS+8Dh2E7MoacqJYnbF3Qic5NgrP1W4qH?= =?us-ascii?Q?jqKZh6Ti/vKXA2Ad5E6KeO01Fxj77YcdonsDRQ2JfRzjKWsZE4hyut9xiZ1y?= =?us-ascii?Q?b79pc55VA/aJofrCMxnWQCKaHvPj1QH+Ua0UY6zbzK0ZJ2hLO+AJw3b8eQnl?= =?us-ascii?Q?sxFTQgpk/LaEcMhD4BIGs4X6ouR9PWiBGkBqcDv1H0guCJVa6bxH1sDeaaUX?= =?us-ascii?Q?T4qmku7jWRoQ2fwWYUq5cZDFna7gggzsBCEcmX6gPwaCFdOMsdxRII6UrQsM?= =?us-ascii?Q?9zLF5NhfRAXs/7jrVhc7MGMMhEga8fXu7+DLroBs+RFVp8EtmomvDTXiDqJy?= =?us-ascii?Q?2WtqgBe9VjPXBWuevddax/8ItDsoKQeafMpgQu6QLMmc+qv5xRMjcWpcfFiR?= =?us-ascii?Q?KZ/u7WTYEsXo8yXXw03k0rTRqz+wXuB2iPMRdfQ10Y2tW/D00PyUo42lZAWz?= =?us-ascii?Q?cjlFJ6Klt3EPFtIVpGAHu5NPiFFVrN8Vpt7bmi6LEVKc5Sre/c6YfbRCwvwc?= =?us-ascii?Q?V1bYGyTEFGErSRuXTzQlLEqc6t1zIA6gLCvQhK0wzV1AvnW8pCSH44tD6sHy?= =?us-ascii?Q?PJNanmhcDi/KKZ8Q87yW8MgBjs/I+ySTDIuCEyTOHzeTe0vc4xyl4gb+dD+W?= =?us-ascii?Q?dCgbk7PKE70JDNa1FlFFB1k/z0ukztbgi9lIlUCJTwnqmX+cDD7Z9LK4UEUQ?= =?us-ascii?Q?Ul7wuKevfoXD5Ns9II1Eh7gZOqd0FJXyfM+I/Dl/VuqFk/QE0tBvSEwvOVKg?= =?us-ascii?Q?kjBJpoeDRz4kKM4Zx0Ft+wrDN5L1xxBViMWsh764LJv/3y3Fk12XeSsFXDhq?= =?us-ascii?Q?eYlMXdYkFLOqMPnYnX9PewFggm87ns7ISEjTG4LYhY9rsxLrLqnzaOtdV6Mt?= =?us-ascii?Q?zz6B+RnI6+hnAik15fzVtTHak0HIk5lYtkxVRNlH0wzmg8OWZp8CuXI0ILuR?= =?us-ascii?Q?lv048cI=3D?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BEZP281MB3159.DEUP281.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(10070799003)(38070700018);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?Ja6Q0DkXncYQ5SLj8d75Y8gIzO5Ti6RLwXp51SgOZP0alQ0cWhv9wC6YY7Ww?= =?us-ascii?Q?KLSSGexnBSscr1dMNVMwEeX0iEh5k4iAF814KDlM0F9SPjKP71pWLr1S8QXZ?= =?us-ascii?Q?shi7trvwCB3uEfciMxgkfOKo6UTOKnxmcTzl0JOQ+hKwSmVO9cDhT2rzzvpv?= =?us-ascii?Q?j6EEnx2vUrskiWF//oiNU/3YvUk5KLRFzFB0uBWLiDhN8PKR8JMXl5zTPJf6?= =?us-ascii?Q?ZIBFvAiIWsqiCOfFADhX6JsusYqWQUcarWddN4+EnVD76P401tHgWvub+a0K?= =?us-ascii?Q?Us3nfurRbVVhtjXEm3EIb96RP801DNXJiO4KtrS9DDH7iEMuooF9qmgSRmOg?= =?us-ascii?Q?fXRn3Lx0tJN8L/9i9/9Qg3DhWxGCUNr+WAamTbeH4XLIAnPurCpBXtjuXHhB?= =?us-ascii?Q?bQtxIXJV3JhSDXXpAlyY4XQkYV5i32lAyINxjWSA+l4tCU4yQO2roByRepLz?= =?us-ascii?Q?CWUIC5ZJsl12cvI2epDvsscM+vq68wUndrykGYNU4XnqNdyiTbn3EKCYOsa9?= =?us-ascii?Q?dr4pIVa8Fxu2T+SBEOCTkM+AP6R3f5QIMD0UAr8XH8puawbM3WrTr4hdLYhk?= =?us-ascii?Q?9pO5HP/8ZjfGhFp1lQcRqYWSOxYBCj0kpkRk8pdSrZm4AcehY9BanYkv5oD0?= =?us-ascii?Q?TlygBUR6Y9cuq2cElQ1fJjnkYRElKaQngnA3U1z2X1t9iJVq2zC7TTJFp9sx?= =?us-ascii?Q?TL5DVwZM4Zmt3HBE4mvN+lWEi1vWg4QZBkJH02VqBgHUFD4r0DTMptxNt24m?= =?us-ascii?Q?f+h/KCP6A1n+/lMGE8kS9wBjXya4zngyDfIHRMueGkbb/eZMjhZSevjigarZ?= =?us-ascii?Q?xTdoM1bUproKMYjxuLXk8f2+Ou+DMkXUt4Nrt64Ef8b+KmfcvmLIkRmLolhT?= =?us-ascii?Q?Lx0nXlqRpV9TZdjHDAUQeZtjOc8SF3HGzW57kzA+881Pdvl8vYuTl+25ktbd?= =?us-ascii?Q?HJbBdhrZvobqnLRnpCTYdpoVJEMr5DZvSBRAVtG0Hc6NnBT7BeyJckLTsBEj?= =?us-ascii?Q?2mkqFMixk9lSMQBpFDPTcVblG2i/ddxeA5CPUR8uI33pFyeoTJ5hfUWvvzzA?= =?us-ascii?Q?V0Vznz1uZVv5pVziX5HQrS/FSn2CiqWYae8emeLT4U5hAWX0LlQ6k957xlrT?= =?us-ascii?Q?3D9WIkNpz4GTa36wNJ0C7svpokAvcGHPwYsujHLS0JwOKq8dQRitl2twfNlc?= =?us-ascii?Q?+pW0AeKgATn2db4AXtxnyLU/bFl4yJP6/+d233jnTI0JseiynB57Us8iZifb?= =?us-ascii?Q?pLPOUswDAmaA+QV2IUrg/RTbMUQWBBGdP+/HWHLvNkEefuPmdFBe1nrnWLSw?= =?us-ascii?Q?FVc2PLV9OXkDXm3hXluoUh3yhPS2fRM4bkEv/R9LbjGUjAGQka0PXn4pfGV1?= =?us-ascii?Q?VA3yOMU6qwHc0/d7EOgFnmuPWD29XGEendxeg+tVROONhZmQeFnMEZ4uYZ7V?= =?us-ascii?Q?SySPIzWl5toF4QBKib1uWlnZCQjehp818Rq+YoJMSx8TNLyMxTgHl6RKwptM?= =?us-ascii?Q?belSIOBCjKeG3ilsAUh4V6bru5QhUFWkG3ukQ1a3focubYu4rvl5sSsSCsqu?= =?us-ascii?Q?zsOY1Py13sBEQ/3Zj+x5Y/SxG5dILYX7q5uhPhkMYkcbeuBq0PRfglUWjor+?= =?us-ascii?Q?Z7/Lk/VEkkDpjxOk/2yyrAU=3D?= Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 X-OriginatorOrg: punkt.de X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BEZP281MB3159.DEUP281.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: c76c63e5-8b03-4e16-51ea-08dcf9dbe170 X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Oct 2024 18:43:15.4532 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: d1aa1808-3734-45fc-a490-f8ba49028756 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: riE2BoJi7PDlHCxqKiYXA546m9XWMiUh0eX7wuvbLflA3RcT8Rbr4WE+HePj69a5 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BE1P281MB1697 X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US] X-Rspamd-Queue-Id: 4XfXtv68xSz4BCQ X-Spamd-Bar: ---- Hi Palle, > Am 31.10.2024 um 16:32 schrieb Palle Girgensohn : > Thanks for the reply. It seems that these MIBs are related to if_bridge, = not ng_bridge? I didn't have them at first, men after kldload if_bridge the= y appeared. They make no difference, though, so perhaps they do not relate = to netgraph bridges? >=20 > Any idea what tuneables would do the job? Nope, that was just a guess, because I know that these tunables are necessa= ry for if_bridge and nobody else answered. I never used netgraph. Kind regards, Patrick=