From owner-freebsd-net@freebsd.org Sat Jun 25 23:21:49 2016 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5FF80B817C3 for ; Sat, 25 Jun 2016 23:21:49 +0000 (UTC) (envelope-from org.freebsd.security@io7m.com) Received: from khaki.cherry.relay.mailchannels.net (khaki.cherry.relay.mailchannels.net [23.83.223.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 518F02638 for ; Sat, 25 Jun 2016 23:21:45 +0000 (UTC) (envelope-from org.freebsd.security@io7m.com) X-Sender-Id: _forwarded-from|212.69.61.187 Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 19361100954; Sat, 25 Jun 2016 22:05:55 +0000 (UTC) Received: from bs3-dallas.accountservergroup.com (ip-10-35-137-113.us-west-2.compute.internal [10.35.137.113]) by relay.mailchannels.net (Postfix) with ESMTPA id 3B2FB100946; Sat, 25 Jun 2016 22:05:54 +0000 (UTC) X-Sender-Id: _forwarded-from|212.69.61.187 Received: from bs3-dallas.accountservergroup.com (bs3-dallas.accountservergroup.com [10.91.5.35]) (using TLSv1 with cipher DHE-RSA-AES256-SHA) by 0.0.0.0:2500 (trex/5.6.15); Sat, 25 Jun 2016 22:05:55 +0000 X-MC-Relay: Forwarding X-MailChannels-SenderId: _forwarded-from|212.69.61.187 X-MailChannels-Auth-Id: wwwh X-MC-Loop-Signature: 1466892386134:1352427866 X-MC-Ingress-Time: 1466892386134 Received: from cust187-dsl61.idnet.net ([212.69.61.187]:59860 helo=copperhead.int.arc7.info) by bs3-dallas.accountservergroup.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.87) (envelope-from ) id 1bGvi5-000FUG-5z; Sat, 25 Jun 2016 17:05:53 -0500 Date: Sat, 25 Jun 2016 22:05:51 +0000 From: To: Marko Zec Cc: Subject: Re: ifconfig: BRDGADD lo1: invalid argument Message-ID: <20160625220551.646eccb6@copperhead.int.arc7.info> In-Reply-To: <20160625234636.2f086908@x23> References: <20160625164240.7cea7587@copperhead.int.arc7.info> <20160625234636.2f086908@x23> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-PopBeforeSMTPSenders: com.rockstargames@io7m.com, com.myfitnesspal@io7m.com, com.git-scm@io7m.com, org.codehaus@io7m.com, io.github.lmax-exchange@io7m.com, com.meetup@io7m.com, org.readium@io7m.com, org.khanacademy@io7m.com, com.nexusmods@io7m.com, io.github.apitrace@io7m.com, com.apple@io7m.com, org.apache.commons@io7m.com, org.apache.maven.user@io7m.com, org.freebsd.security@io7m.com, com.stronglifts@io7m.com, org.junit@io7m.com, com.carpediemkravmaga@io7m.com, legalandgeneral@io7m.com, uk.co.discountsupplements@io7m.com, com.the-blueprints@io7m.com, org.codehaus.mojo@io7m.com, com.skype@io7m.com, contact@io7m.com, com.goodhempnutrition@io7m.com, net.java@io7m.com, com.dropbox@io7m.com, com.io7m.lists@io7m.com, org.openjdk@io7m.com, org.jgrapht@io7m.com, com.google@io7m.com, android-developers@io7m.com, org.opengl@io7m.com, org.dyn4j@io7m.com, org.mapdb@io7m.com, com.jetbrains@io7m.com, org.eclipse@io7m.com, mark@io7m.com, com.slack@io7m.com, code@io7m.com, net.openvpn@io7m.com, nu.xom@io7m.com, github@io7m.com, de.jflex .users@io7m.com, com.blendswap@io7m.com, com.creative.opensource.openal@io7m.com, org.archlinux@io7m.com, org.jogamp@io7m.com, com.steampowered@io7m.com, mark-ext@io7m.com, org.mesa3d.mesa-users@io7m.com, org.sonatype@io7m.com, org.freesound@io7m.com, org.blender@io7m.com, org.freedesktop@io7m.com, com.bugsnag@io7m.com, org.fossil-scm.fossil-users@io7m.com X-AuthUser: X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Jun 2016 23:21:49 -0000 Hello! On 2016-06-25T23:46:36 +0200 Marko Zec wrote: > > if_bridge(4) works only with ethernet interfaces, and lo(4) isn't such a > thing. Has this always been the case? I'm almost certain that I set up jails with extra loopback devices that communicated over bridges back in the FreeBSD 6 days. > Assuming you are using vnet jails, take a look at if_epair(4): assign > one endpoint to the bridge, and the another one to the jail. I'm not using vnet jails. I'm actually just trying to get filtering of outbound traffic (see the other mail I sent to this list a few seconds before you responded). > If you're not using vnet jails, you should simply add an alias address > to em0. Could you explain a little more here? M