From nobody Mon Mar 17 13:07:02 2025 X-Original-To: current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4ZGZyJ4F4xz5qZPs for ; Mon, 17 Mar 2025 13:07:36 +0000 (UTC) (envelope-from freebsd@walstatt-de.de) Received: from smtp052.goneo.de (smtp5.goneo.de [IPv6:2001:1640:5::8:30]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4ZGZyH6DYsz3SFR; Mon, 17 Mar 2025 13:07:35 +0000 (UTC) (envelope-from freebsd@walstatt-de.de) Authentication-Results: mx1.freebsd.org; none Received: from hub2.goneo.de (hub2.goneo.de [IPv6:2001:1640:5::8:53]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by smtp5.goneo.de (Postfix) with ESMTPS id C5A6D240E27; Mon, 17 Mar 2025 14:07:32 +0100 (CET) Received: from hub2.goneo.de (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by hub2.goneo.de (Postfix) with ESMTPS id EFD81240641; Mon, 17 Mar 2025 14:07:30 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=walstatt-de.de; s=DKIM001; t=1742216851; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=+zgmAb39NiDk+FN7OjeWjoS0akw68ibom3s1N/nA17M=; b=Id1a4FMtc13nRclpNjCFn/DUdUZZwx0d6tlkYS0mlK5+/A4nwJyhFhuWSeAzUGugr9/20V nyla/RkjIp6QidWe/P7SuDrW86TqTxxxeYsHBD3ga5jZMnPfHj8pVts9woLYlnz007Toyx WB1EmlrW0Ew4jTtcH62Y1rXEEcIj9Njfk+KmMiKldnckPhwCC9IQmBvxXzdwCTc170F3nW VF4oIa9A8Eg8VbS0bX04cpGPKk5lET8njp5jjQlA6g6VgcXlDe3DzfrrukT8k1YlAdiLi+ vymTHj736Cj/qxC7nAt0e4D+2Lsm/xTteBe1o23JGHzEhjh/Vwb3e7PAar96sQ== Received: from thor.sb211.local (dynamic-2a02-3100-2551-1202-e920-d517-7499-530c.310.pool.telefonica.de [IPv6:2a02:3100:2551:1202:e920:d517:7499:530c]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (prime256v1) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by hub2.goneo.de (Postfix) with ESMTPSA id B7CB22404CD; Mon, 17 Mar 2025 14:07:30 +0100 (CET) Date: Mon, 17 Mar 2025 14:07:02 +0100 From: A FreeBSD User To: Ronald Klop Cc: "Andrey V. Elsukov" , current@freebsd.org Subject: Re: ipfw changes and jails Message-ID: <20250317140426.5272841c@thor.sb211.local> In-Reply-To: <35785817.6251.1742215060908@localhost> References: <35785817.6251.1742215060908@localhost> List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/4PD3bDRkkJ1lvXCZOoSlc2_"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Rspamd-UID: 81b616 X-Rspamd-UID: 2e1318 X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:25394, ipnet:2001:1640::/32, country:DE] X-Rspamd-Queue-Id: 4ZGZyH6DYsz3SFR X-Spamd-Bar: ---- --Sig_/4PD3bDRkkJ1lvXCZOoSlc2_ Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Am Mon, 17 Mar 2025 13:37:40 +0100 (CET) Ronald Klop schrieb: > Hi, >=20 > When running 14.2-RELEASE VNET jails on 15-CURRENT ipfw does not work any= more in the jail. >=20 > Can this commit be involved? > https://cgit.freebsd.org/src/commit/?id=3D4a77657cbc01 >=20 > Copying the /sbin/ipfw binary from 15-CURRENT to /sbin in the 14.2 jail r= esolves the issue > for me. >=20 > Example errors: > add net ::0.0.0.0: gateway ::1 > ipfw: setsockopt(IP_FW_XDEL): Invalid argument > ipfw: getsockopt(IP_FW_XADD): Invalid argument >=20 > # ipfw show > ipfw: retrieving config failed: Invalid argument >=20 >=20 > Regards, > Ronald. > =20 Had the same problem here a couple of days ago. Host's kernel and jail's/client's binaries are out of sync. I had to synchr= onise the jail's binaries. Kind regards, oh=20 --=20 A FreeBSD user --Sig_/4PD3bDRkkJ1lvXCZOoSlc2_ Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRQheDybVktG5eW/1Kxzvs8OqokrwUCZ9gekQAKCRCxzvs8Oqok r79OAP9Yak4APIWkL/HLYIkdab0Rwj/LZ4moreWmJFvx1PglxQD6AvyTj+q9Lpie R0G3G8gxgilD89ckONmQyQSKQPPJgwA= =qMs5 -----END PGP SIGNATURE----- --Sig_/4PD3bDRkkJ1lvXCZOoSlc2_--