Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ENHANCEMENT] weirdness on nic alias ("no IP address found" and "invalid netmask") #700

Open
aimass opened this issue May 27, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@aimass
Copy link

aimass commented May 27, 2024

Hi there!

Aliases are working a little quirky. Not sure if this is a limitation of the jail subsystem itself, or something you can address in Bastille.

If I use CIDR mask notation on the main address alone it works fine, but if I add an alias I get invalid netmask '/22,"[alias].... And if use full mask as in the example below, I get a no IP address found for [base ip]

Example configs to reproduce this:

interface = igb1;
ip4.addr = 10.77.3.10/22
ip4.addr += "10.77.0.100 netmask 0xffffffff broadcast 10.77.0.100 vhid 10 advbase 1 advskew 0 pass yuca";
interface = igb1;
ip4.addr = "10.77.3.10 netmask 0xfffffc00";
ip4.addr += "10.77.0.100 netmask 0xffffffff broadcast 10.77.0.100 vhid 10 advbase 1 advskew 0 pass yuca";

Maybe this is an edge case because I purposely want to limit the CARP IPs to /32, avoiding outbound traffic through them. Or at least that's what I think I'm doing :-D

Nevertheless, things (CARP in my case) seem to work as expected either way, so not sure if these warnings are harmless or potentially some latent bug, or I'm not applying the alias in jail.conf correctly, or my understanding is all wrong here.

--
Alex

@aimass aimass added the enhancement New feature or request label May 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant