[pve-devel] Quorum problems with NICs Intel of 10 Gb/s and VMsturns off

[Michael Rasmussen]

On Sat, 3 Jan 2015 21:32:54 -0300
"Cesar Peschiera" <brain at click.com.py> wrote:

> 
> Now in the switch i have igmp snooping disabled, but i want to avoid
> flooding the entire VLAN and the VMs
> 
Following rule on your pve nodes should prevent igmp packages flooding
your bridge:
iptables -t filter -A FORWARD -i vmbr0 -p igmp -j DROP

If something happens you can remove the rule this way:
iptables -t filter -D FORWARD -i vmbr0 -p igmp -j DROP

PS. Your SPF for click.com.py is configured wrong:
Received-SPF: softfail (click.com.py ... _spf.copaco.com.py: Sender is
not authorized by default to use 'brain at click.com.py' in 'mfrom'
identity, however domain is not currently prepared for false failures
(mechanism '~all' matched)) receiver=mail1.copaco.com.py;
identity=mailfrom; envelope-from="brain at click.com.py"; helo=gerencia;
client-ip=190.23.61.163 
Received-SPF: softfail (click.com.py ... _spf.copaco.com.py: Sender is
not authorized by default to use 'brain at click.com.py' in 'mfrom'
identity, however domain is not currently prepared for false failures
(mechanism '~all' matched)) receiver=mail1.copaco.com.py;
identity=mailfrom; envelope-from="brain at click.com.py"; helo=gerencia;
client-ip=190.23.61.163 
Received-SPF: softfail (click.com.py ... _spf.copaco.com.py: Sender is
not authorized by default to use 'brain at click.com.py' in 'mfrom'
identity, however domain is not currently prepared for false failures
(mechanism '~all' matched)) receiver=mail1.copaco.com.py;
identity=mailfrom; envelope-from="brain at click.com.py"; helo=gerencia;
client-ip=190.23.61.163
-- 
Hilsen/Regards
Michael Rasmussen

Get my public GnuPG keys:
michael <at> rasmussen <dot> cc
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E
mir <at> datanom <dot> net
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C
mir <at> miras <dot> org
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917
--------------------------------------------------------------
/usr/games/fortune -es says:
Why does a hearse horse snicker, hauling a lawyer away?
		-- Carl Sandburg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.proxmox.com/pipermail/pve-devel/attachments/20150104/6be4d7ad/attachment.sig>