| 22 Nov 2025 |
 hexa (clat on linux when) | disable rp_filter | 16:35:19 |
 raboof | hmm just set sysctl net.ipv4.conf.default.rp_filter to 0 (and also for the specific interfaces) but don't see a change in behavior yet | 16:41:06 |
| hexa (clat on linux when) | hrm | 16:42:17 |
| hexa (clat on linux when) | so you receive synack but curl doesn't notice | 16:42:50 |
| hexa (clat on linux when) | oops, you said that | 16:43:15 |
| hexa (clat on linux when) | I would still expect this to be related to asymmetry | 16:43:57 |
| hexa (clat on linux when) | maybe check net.ipv4.conf.{all,wlan0}.rp_filter | 16:44:18 |
| hexa (clat on linux when) | * check net.ipv4.conf.{all,wlan0}.rp_filter as well | 16:44:29 |
| hexa (clat on linux when) | * check net.ipv4.conf.{all,wlan0}.rp\_filter as well | 16:44:35 |
| hexa (clat on linux when) | * check net.ipv4.conf.{all,wlan0}.rp_filter as well | 16:44:38 |
| hexa (clat on linux when) | because the packets arrive from a link that the system would not use for outgoing traffic towards that src address | 16:45:13 |
| raboof | yeah sysctl net.ipv4.conf | grep filter is all zero's | 16:45:33 |
| hexa (clat on linux when) | the term here is martian | 16:45:55 |
| hexa (clat on linux when) | I would probably put both links into a distinct vrf | 16:46:12 |
| hexa (clat on linux when) | because when you ping 192.168.1.212 hat happens is that a lookup for the return path might short-circuit and go over the ethernet link | 16:46:50 |
| hexa (clat on linux when) | * because when you ping 192.168.1.212 what happens is that a lookup for the return path might short-circuit and go over the ethernet link | 16:47:00 |
| hexa (clat on linux when) | does the kernel still log martian packets to dmesg? 🤔 | 16:47:15 |
| raboof | not sure, dmesg is pretty quiet on this machine at least | 16:47:55 |
| raboof | ha, disabling networking.firewall.checkReversePath seems to have done the trick :). thanks for pointing in that general direction | 16:56:40 |
| hexa (clat on linux when) | yeah, same shit, different stack | 16:59:12 |
| raboof | 
Download out.png | 17:06:17 |
| raboof | yay | 17:06:20 |
| hexa (clat on linux when) | why aren't you buying into orb instead? https://orb.net/ | 17:37:02 |
| hexa (clat on linux when) | (anyway, I think they're a nice product to take inspiration from) | 17:37:33 |
| raboof | Neat, never seen it before. Yeah I thought "I'll just throw something together real fast". A blackbox-exporter patch, autossh conflicting with nixos-rebuilder-ng and this rp thing later it didn't quite turn out like that, but still enjoying the learning 😊 | 18:40:48 |
 elisaado | the topic mentions "do not rely on networking.*", why is that? networking. options are so comfy :( | 23:02:45 |
 Tom | From my understanding: networking.* (without the networking.useNetworkd Option which is problematic in itself) is a bunch of scripts and systemd services which try to configure networking. It's just not the way to do it and networkd and networkmanager will be more robust. | 23:27:26 |
| hexa (clat on linux when) | nobody really maintains those scripts | 23:28:51 |
| hexa (clat on linux when) | and they don't keep pace with the network management tools out there | 23:29:04 |
| hexa (clat on linux when) | and in fact no other reasonable distro does this | 23:30:26 |
