Re: Some net.link.bridge entries in sysctl.conf appear ignored after upgrade to 13.0-RELEASE

2021-04-15 Thread Darryn Nicol
>>* I have the following entries in /etc/sysctl.conf to facilitate the use of
*>>* IPFW within VNET jails:
*>> >>* # Only pass IP packets when pfil is enabled
*>>* net.link.bridge.pfil_onlyip=0
*>>* # Packet filter on the bridge interface
*>>* net.link.bridge.pfil_bridge=0
*>>* # Packet filter on the member interface
*>>* net.link.bridge.pfil_member=0
*>> >>* These worked fine in 12.2-RELEASE but since the upgrade after
every reboot
*>>* these are all set to 1. If I set them manually they work, but are reset *to
>>* 1 after another reboot. I have other entries in sysctl.conf that work, did
*>>* these sysctls change in 13?
*>> >Please try loading if_bridge from /boot/loader.conf to make it >working.
>According to rcorder(8) it looks like /etc/rc.d/sysctl is executed >prior
>to /etc/rc.d/kld.

Thank you, it's working now.
___
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[email protected]"


Re: Some net.link.bridge entries in sysctl.conf appear ignored after upgrade to 13.0-RELEASE

2021-04-14 Thread Marek Zarychta
W dniu 14.04.2021 o 16:22, Darryn Nicol pisze:
> I have the following entries in /etc/sysctl.conf to facilitate the use of
> IPFW within VNET jails:
> 
> # Only pass IP packets when pfil is enabled
> net.link.bridge.pfil_onlyip=0
> # Packet filter on the bridge interface
> net.link.bridge.pfil_bridge=0
> # Packet filter on the member interface
> net.link.bridge.pfil_member=0
> 
> These worked fine in 12.2-RELEASE but since the upgrade after every reboot
> these are all set to 1. If I set them manually they work, but are reset 

to
> 1 after another reboot. I have other entries in sysctl.conf that work, did
> these sysctls change in 13?
> 
Please try loading if_bridge from /boot/loader.conf to make it working.
According to rcorder(8) it looks like /etc/rc.d/sysctl is executed prior
to /etc/rc.d/kld.

-- 
Marek Zarychta





OpenPGP_signature
Description: OpenPGP digital signature