Skip to content

Instantly share code, notes, and snippets.

@dlangille
Last active July 19, 2021 23:47
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save dlangille/0f94e784ba1eb9523147e817eda0199f to your computer and use it in GitHub Desktop.
Save dlangille/0f94e784ba1eb9523147e817eda0199f to your computer and use it in GitHub Desktop.
getting blocked by firewall - vm-bhyve
[dan@slocum:~] $ grep skip /etc/pf.conf
set skip on lo0
set skip on epair
set skip on bridge0
set skip on tap1
set skip on vm-public
set skip on bridge
set skip on tap
some of ifconfig
$ ifconfig ix2
ix2: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=a538b9<RXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,WOL_UCAST,WOL_MCAST,WOL_MAGIC,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6>
ether 00:1b:21:39:a9:c5
inet 10.0.0.73 netmask 0xffffff00 broadcast 10.55.0.255
...
media: Ethernet autoselect (10Gbase-SR <full-duplex,rxpause,txpause>)
status: active
nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
vm-public: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
ether 3e:18:c0:b5:b1:c5
id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
maxage 20 holdcnt 6 proto stp-rstp maxaddr 2000 timeout 1200
root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
member: tap1 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
ifmaxaddr 0 port 9 priority 128 path cost 2000000
member: ix2 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
ifmaxaddr 0 port 3 priority 128 path cost 2000
groups: bridge vm-switch viid-4c918@
nd6 options=1<PERFORMNUD>
tap1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
description: vmnet-myguest-0-public
options=80000<LINKSTATE>
ether 58:9c:fc:10:07:29
inet6 fe80::5a9c:fcff:fe10:729%tap1 prefixlen 64 scopeid 0x9
groups: tap vm-port
media: Ethernet autoselect
status: active
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
Opened by PID 40880
In the vm:
[dan@slocum:~] $ sudo tcpdump -ni pflog0
23:37:03.522387 IP 10.0.0.123.27138 > 10.0.0.1.53: 39175+ A? http://google.ca. (27)
Oh, sure, now you start working:
# host google.ca
google.ca has address 142.250.72.99
google.ca has IPv6 address 2607:f8b0:4006:809::2003
google.ca mail is handled by 0 smtp.google.com.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment