Recent posts

#1

26.7 Series / Re: Realtek 2.5 Gbit Lan

Last post by Karla - Today at 07:59:50 PM

I have bought a Intel 82576 based dual port Lan card.

#2

26.7 Series / Re: Unbound NXDOMAIN response ...

Last post by db9 - Today at 07:50:44 PM

It's in Services: Unbound DNS: Advanced. The fifth option.

Thank you. Do you know if TLD .internal has the same issue. If not I could rename my TLD from .lan to .internal

#3

26.7 Series / Re: 26.7.1: "state-insert,bloc...

Last post by SonicJoe - Today at 07:01:50 PM

Hi @SonicJoe,


that was my first assumption. I disabled the divert to of the rules that allow the flows. But in my case it did not help. I also checked the corresponding logs for suricata and could not find any blocks. For example "dest_port:123" should trigger a hit in the suricata logs, as this was blocked.

@franco: Help please

I should clarify that I have other rules with divert-to set that work fine. It is only the rules on the WAN interface. I suspect something about the Destination NAT rules is causing confusion when the packet comes back from Suricata and gets re-inserted in the flow. I agree that Suricata is not blocking anything. I did see evidence that Suricata was evaluating the packets though:

Code Select Expand

app_layer.flow.sip_udp                                      | Total                    | 10
app_layer.tx.sip_udp                                          | Total                    | 57

#4

26.7 Series / Re: Realtek 2.5 Gbit Lan

Last post by rdunkle84 - Today at 06:23:34 PM

I have realtek nics on two systems.
I am using arm64.
I compile the ports myself or fetch the package and manually install the driver.

realtek is supported by these ports:

https://www.freshports.org/net/realtek-re-kmod/
https://www.freshports.org/net/realtek-rge-kmod/

This is the one for arm64:
https://www.freshports.org/net/realtek-re-kmod198/

To bootstrap the process you could use a usb nic to get connectivity.

#5

26.7 Series / Re: Realtek 2.5 Gbit Lan

Last post by meyergru - Today at 06:17:55 PM

You probably need the os-realtek-re plugin. Without a network connection, it is a little hard to install it, though.

#6

26.7 Series / Re: slow dhcp on wan -> broken...

Last post by synfinatic - Today at 06:13:56 PM

So looking again at the NAT settings, seems like there are 3 options in the drop down for `ixl0`:

* interface address
* ONTWAN address -- ONTWAN is the name for ixl0
* 192.168.11.10 ONT Management -- the virtual IP

Seems like using the 2nd option should provide the correct results?   Or are the 1st and 2nd effectively the same option with different names?

#7

General Discussion / Re: Checking the zpool status

Last post by Patrick M. Hausen - Today at 05:25:09 PM

About right.

#8

26.7 Series / Re: Realtek 2.5 Gbit Lan

Last post by Patrick M. Hausen - Today at 05:24:54 PM

Probably they are simply not supported by FreeBSD.

Hardware compatibility list:

https://www.freebsd.org/releases/15.1R/hardware/#ethernet
https://man.freebsd.org/cgi/man.cgi?query=re&sektion=4&format=html

I cannot find any 2.5G Realtek adapers in there, only 1G Realtek and 2.5G Intel.

#9

26.7 Series / Re: Unbound NXDOMAIN response ...

Last post by muchacha_grande - Today at 05:24:47 PM

It's in Services: Unbound DNS: Advanced. The fifth option.

#10

General Discussion / Re: Checking the zpool status

Last post by hushcoden - Today at 05:22:57 PM

Ok, autotrim is already on, and scrub once a month, or ?