09:37:04 I am definitely holding ipfw NAT wrong, which is why I can't make it work for me to run the IPv4 for my jails; my only question is, how is it supposed to be held "right"? 09:43:47 * megaTherion is using pf 12:30:01 When I'm doing a scrub with ZFS, what's, in the status, the difference between "122 G / 180G scanned" and "1G / 180G issued". What's issued? I'd expect that a scan already means that all hashes have been checked 13:22:23 please read zpool-scrub(8) 13:22:40 if you then still have questions, ask;) 13:50:58 manpage is not clear about it, and googling found out it's completely backwards? 13:51:18 like i assumed issued is ready to process and scanned is processed 13:51:36 but scanned is before 13:52:11 that explains why issued is lower 13:52:25 that's the real thing 13:56:53 to issue is such a fancy word that no wonder it confused living hell out of people 13:58:04 i mean zfs is full of weirdness, have to be sun engineeri to get why i guess 13:58:45 like how zfs talks in full confusing messages, spanning 2-3 sentences long to say errors 13:59:10 and put mysterious long error number or id there 13:59:36 as if one needs to fish it out of manuals or phone support or so 13:59:42 maybe they actually did 14:00:45 applications unaffected and applications affected is one of that weirdness 14:01:39 seems like lawyers also entered zfs dev back then and so on 14:01:52 it's wtf to everyone else 14:04:50 zfs also has invented new words to existing methods 14:07:08 you never know which ones are patented etc;) 14:07:30 :p 15:30:15 there are almost no issues reported, probably people no longer use FreeBSD and just hang here out of curiosity 15:30:19 am I right ? 15:32:44 not sure that existing methods were really standardized enough that it would make any sense for the ZFS terms to just be changed to match them 15:52:13 are you joking, mzar? 16:07:15 cats here? 16:07:19 curious 16:07:39 ??? 16:17:32 mzars 18:10:23 megaTherion, does that work when one has vnet jails? like, can the jails have their own firewall rules? 18:11:24 mzar: https://bugs.freebsd.org/bugzilla/ would disagree with you. They even have a handy show bugs filed in the last 24hrs link. Feel free to fix some of them! 18:11:32 MelMalik: vnet jails can have their own firewalling, yes 18:11:55 MelMalik: In fact, I recently learned that if the host has ipfw enabled, I need to add rules to jails or they pick up a default deny. 18:13:05 mason, hellofa coincidence, i also recently learned that 18:14:20 but I was asking about pf, not ipfw, as I am (mostly-unseriously) considering converting my setup to pf 18:15:07 Is there an elevator pitch that would recommend such a conversion? ipfw seems fine here. 18:18:26 I can't work out how I'm holding ipfw NAT wrong that makes me unable to set nexthop the host in one of the VMs and have stuff work 18:25:25 MelMalik: Ah, make sure that you don't have TSO enabled. From the bottom of the ipfw man page: "Due to the architecture of libalias(3), ipfw nat is not compatible with the TCP segmentation offloading (TSO). Thus, to reliably nat your network traffic, please disable TSO on your NICs using ifconfig(8)." 18:25:30 This bit me. 18:26:38 I believe I did that already. However, vlanhwtso was up - is that by change the same? 18:27:07 Not sure, but it's a good question. 18:28:31 With that arranged, should it be sufficient to have `ipfw nat 1 config if ix0 log; ipfw add 00500 nat 1 log ip4 from 10.6.0.0/16 to any out via ix0; ipfw add 00502 nat 1 log ip4 from any to me in via ix0"? 18:28:38 [mismatched quotes] 18:47:54 update: later rule was misconfigured 18:48:00 xD 18:48:19 Ah, glad you found it. I don't have enough internalized to debug without going back to the docs. 18:49:41 I had been using allow ip from any to me/me to any; I had forgotten to also use any to 10.6/16 and 10.6/16 to any 20:32:14 looks like my ancient supermicro 1u X8 has a panic on boot on fbsd :/ that sucks. 20:32:34 i thought that thing would be smooth sailing 20:54:17 zie: fixed, but only one ;-) 20:56:48 zie: I don't think this fix will pass further, but problems can be solved in many ways ;-) 20:57:48 does zfs create mirror supports disk labels ? 21:27:57 hernan604: Yeah, you can use GPT labels if that's what you mean. 21:37:52 hernan604: so please follow mason amd don't use glabel(8) 21:39:36 Oddly enough, glabel talks about GPT labels in the glabel(8) man page, but they are indeed distinct.