Networks

When my home DHCP address changes, I want stuff done

I recently moved from an appliance to a FreeBSD 14.2 gateway. In this post: FreeBSD 14.2 gw01 gw01 photos These are the main things I need done when my IP address changes: restart OpenVPN restart my Hurricane Electric IPv6 tunnel with the new IP address – written Tell HE.net about my IP address change – written Notify OpenDNS.com about my IP address change Update a dynamic DNS entry so my VPN clients can […]

When my home DHCP address changes, I want stuff done Read More »

Creating a wireguard connection between my home and colo

For years I’ve run the dev, test, and stage nodes for FreshPorts off servers in my basement. This meant that those hostnames have always pointed at my home IP address. I’d like to change that. I first started this using interactive commands (e.g. wg set) but found that approach unsatisfactory. I think directly editing the configuration file to be more intuitive and easily followed. I left my first approach up because it had

Creating a wireguard connection between my home and colo Read More »

Creating a wireguard connection between my home and colo – failed attempt

NOTE: I wrote this, got stuck, then went a slightly different direction: I stopped using wg set Instead, I updated the configuration files directly I was not satisfied with the wg approach Although it is great for modifying things on the file, I don’t think it helps novices learn Wireguard I’m leaving it here anyway. Please use Creating a wireguard connection between my home and colo instead. None of these keys/IP addresses are

Creating a wireguard connection between my home and colo – failed attempt Read More »

Converting an iocage vnet jail to a vnet jail

In this post I will be creating a ‘new’ jail which uses vnet. I say ‘new’ because I am actually Converting an iocage jail to a vanilla jail which happens to use vnet. NOTE: I originally failed to get this to work. You can read about it. I’m going to repost this article soon with a working solution. I won’t describe the process of creating the jail. Sorry. For the record: FreeBSD 12.2

Converting an iocage vnet jail to a vnet jail Read More »

Creating a vnet jail

In this post I will be creating a ‘new’ jail which uses vnet. I say ‘new’ because I am actually Converting an iocage jail to a vanilla jail which happens to use vnet. NOTE: HEADS UP: I failed to get this to work. I’m still going to post it though. What I did wrong: I should not have used ix1 – that’s the wrong NIC to use. This needs to use an active

Creating a vnet jail Read More »

Listen queue overflow

The R720 is showing a message like this from time to time: Jan 1 07:42:20 r720-01 kernel: sonewconn: pcb 0xfffff835e785d5b8: Listen queue overflow: 8 already in queue awaiting acceptance (1 occurrences) Jan 1 08:02:21 r720-01 syslogd: last message repeated 1 times Jan 1 08:27:22 r720-01 kernel: sonewconn: pcb 0xfffff835e785d5b8: Listen queue overflow: 8 already in queue awaiting acceptance (2 occurrences) Jan 1 16:07:04 r720-01 kernel: sonewconn: pcb 0xfffff835e785d5b8: Listen queue overflow: 8 already

Listen queue overflow Read More »

Adding IPv6 to an existing server

I am adding IPv6 addresses to each of my servers. This post assumes the server is up and running FreeBSD 11.1 and you already have an IPv6 address block. This does not cover the creation of an IPv6 tunnel, such as that provided by HE.net. This assumes native IPv6. In this post, I am using the IPv6 addresses from the IPv6 Address Prefix Reserved for Documentation (i.e. 2001:DB8::/32). You should use your own

Adding IPv6 to an existing server Read More »

kernel: arp: 10.55.0.62 moved from 78:ca:39:fe:d6:b3 to 14:99:e2:27:0f:48 on em0

I started seeing this recently. It appears in the logs on my firewall: It does not seem to be disturbing anything, other than my nerves. The classical situation is: two PCs are arguing over the same IP address. Each NIC has a unique MAC address, used at the physical network segment. We often refer to IP addresses in a computer network that uses the Internet Protocol (IP) for communication. Let’s look closely at

kernel: arp: 10.55.0.62 moved from 78:ca:39:fe:d6:b3 to 14:99:e2:27:0f:48 on em0 Read More »

Routing with jails

Tonight I asked a question in the OpenVPN IRC channel on FreeNode. me: I’m getting ready to set up a new server, running an OpenVPN client. It will be running several virtual machines (FreeBSD Jails). Each VM will have both a public IP address and a non-routable IP address. I’m hoping to access all those VMs from within the VPN. Am I making sense with my objective here? reply: “clientlan” is (#1) for

Routing with jails Read More »

bad ifconfig leads to no pings

I had a Bacula job fail today: Is bacula-sd running on crey? Yes it is. Can I telnet to port 9103 on crey? Yes, I can: $ telnet 10.5.0.20 9103 Trying 10.5.0.20… Connected to crey.example.org. Escape character is ‘^]’. What about from the nyi-fd server? Can I telnet from there? $ telnet 10.5.0.20 9103 Trying 10.5.0.20… telnet: connect to address 10.5.0.20: Operation timed out telnet: Unable to connect to remote host I started

bad ifconfig leads to no pings Read More »

Scroll to Top