!tCyGickeVqkHsYjWnh:nixos.org

NixOS Networking

903 Members
on your Router! Declaratively manage your switching, routing, wireless, tunneling and more.262 Servers

Load older messages


SenderMessageTime
6 Jun 2025
@emilazy:matrix.orgemilywhich I'm sure is a failure of my own searching, but you seem to know more about this than me, so… :)13:27:47
@twicetubular:matrix.orgtwiceTubular joined the room.19:13:37
@uep:matrix.orguep Err, I was responding about mikrotik when I said "they", sorry that wasn't clear. 23:41:33
7 Jun 2025
@hexa:lossy.networkhexanetdev 0x19 videos are up https://netdevconf.info/0x19/pages/sessions.html00:20:52
@deeok:matrix.org@deeok:matrix.org changed their display name from deeok to matrixrooms.info mod bot (does NOT read/send messages and/or invites; used for checking reported rooms).22:30:12
8 Jun 2025
@deeok:matrix.org@deeok:matrix.org left the room.00:03:48
@sacrificial-anode:catgirl.cloudsacrificial-anode joined the room.02:17:17
@abrasaxtes:matrix.orgMichael joined the room.15:04:21
@k900:0upti.meK900 @emily did your 320mhz change get merged 17:45:59
@emilazy:matrix.orgemilyno response yet18:59:08
@emilazy:matrix.orgemily it was only for GB though 18:59:14
@emilazy:matrix.orgemilynot sure about kernel list etiquette re: how long to wait before bumping it18:59:26
@k900:0upti.meK900Yeah I was thinking maybe I should send in the RU one but decided I don't actually care enough19:00:04
9 Jun 2025
@ortolanbunting3002:tchncs.deortolanbunting3002

I have the following routes:

default via 192.168.1.1 dev wlan0 proto dhcp src 192.168.1.147 metric 3003
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.100 dead linkdown
192.168.1.0/24 dev wlan0 proto dhcp scope link src 192.168.1.147 metric 3003

I have the following sysctl settings:

"net.ipv4.conf.all.ignore_routes_with_linkdown" = 1;
"net.ipv4.conf.default.ignore_routes_with_linkdown" = 1;

From the kernel docs: Ignore routes whose link is down when performing a FIB lookup.

% ip r g 192.168.1.1
192.168.1.1 dev wlan0 src 192.168.1.147 uid 1000
    cache
%

eth0 is unplugged. Ping packets to 192.168.1.1 leave and arrive on wlan0 correctly. Despite that, the nixos-fw rpfilter chain drops those packets (checkReversePath = "strict", logReversePathDrops = true).
The relevant reverse path filter rule is fib saddr . mark . iif oif exists accept.

If I remove the routes on eth0, the pings are no longer dropped.

Why does routing work correctly, but the reverse path lookup fails?

12:20:02
@sigmasquadron:matrix.orgSigmaSquadron joined the room.13:06:38
@spaenny:tchncs.deSpaenny changed their display name from Spaenny to Philipp.20:46:47
10 Jun 2025
@rvdp:infosec.exchangeRamses 🇵🇸 I have the stable-privacy addressing method configured for all my networks with networkd, and I recently noticed that for one particular interface, this setting is not being honoured, and the interface still uses eui64. I checked that the right values are actually set in /proc/sys/net/ipv6/conf/<iface>/addr_gen_mode so it seems that networkd is doing what it's supposed to be doing, but the kernel isn't. One characteristic of this particular interface, is that it has a bunch of tagged vlan interfaces stacked on top of it, which is kind of the only thing that makes it stand out from the other interfaces. I was just wondering if anyone has by any change already stumbled upon this behaviour and looked into it? And if others are observing the same behaviour? 11:23:18
@rvdp:infosec.exchangeRamses 🇵🇸Ah, I am talking about the LL addresses specifically here11:26:12
@hexa:lossy.networkhexamodule for /etc/gai.conf https://github.com/NixOS/nixpkgs/pull/41398612:29:35
@weriomat:matrix.orgweriomat joined the room.17:39:25
@samemrecebi:matrix.redalder.orgsamemrecebi joined the room.20:20:26
11 Jun 2025
@samemrecebi:matrix.redalder.orgsamemrecebi changed their profile picture.10:33:41
@astodialo:matrix.orgelamon joined the room.15:14:20
@saiko:knifepoint.net@saiko:knifepoint.net changed their profile picture.16:12:16
@saiko:knifepoint.net@saiko:knifepoint.net changed their display name from Katalin 🔪 to Katalin ⚧︎.16:13:38
@donjoe:nanashi0x74.dev@donjoe:nanashi0x74.dev changed their display name from Rian to Rian (moved to @nanashi0x74:tchncs.de).18:01:05
@wriver4:matrix.orgwriver4My NixOS installation is stuck in the download buffer is full; consider increase download-buffers-size setting loop. Any advice on how to get out?19:11:27
@hexa:lossy.networkhexa #nix-dev:nixos.org 19:12:33
12 Jun 2025
@zenware:matrix.orgzenware joined the room.00:53:06
@emilazy:matrix.orgemily what networkd configuration do you have on enp1s0 for this? 14:11:59

Show newer messages


Back to Room ListRoom Version: 6