Can somebody give me an example for a firewall rule defined in GZ but affecting a zone with exclusive IP?

szilard you need to check how the local zone networking is built (dedicated physical port or vnic going through the port in GZ and then you build the rules depending on the network architecture.

My zones are connected via zone-specific vnics, derived from the vnic of the GZ.

Is there a matching function for rctl_enforced_value that instead sets the value, I am reading rctl.h but I do not seem to find something like that.

szilard maybe this could help omnios.org/info/ipfilter

[illumos-gate] 17194 formalize MODMAXNAMELEN expectations -- Patrick Mooney <pmooney⊙pc>

pmooney were you able to replicate the e1000 being broken on OmniOS bloody (and SmartOS, based on the ML) ?

I have not had the time to look into it

sjorge: it's bailing on a NULL pointer because the second iovec for that packet has a NULL iov_base

suggesting that it was passed a GPA which didn't correspond to guest memory

or that some math got screwed up while it was doing header copying if vlan encap is one

*on

I don't believe the MTU changes have anything to do with this

given that this is userspace emulation of e1000g

jbk: bouncing way back to DDI_DEVICE_ATTR versioning, the reason I ask is the code in pci_config_setup (for eg)