napp-it TLS alerts using a wrong NIC

Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.

Eduard

New Member
Jun 16, 2014
11
0
1
36
Hello,
There is a way to change the NIC used for TLS alerts?
My ZFS server has 5 NICs (1x e1000g, 4x ixgbe).
The four 10G NICs are not connected to the Internet.
If temporary disable all the NICs except the e1000g that is the only adapter connected to the internet, the notifications are working perfectly.
Is there a way to change the priority or something similar? I'm not an expert...
Thank you very much.
Eduard
 

gea

Well-Known Member
Dec 31, 2010
3,175
1,198
113
DE
You cannot set a priority.

You should
- set all nics manually (no dhcp)
- connect e1000 to your router/gateway (example gateway=192.168.1.254 )
- use an ip from the ip range of the gateway for e1000 (ex 192.168.1.1, netmask 255.255.255.0)
- set your gateway (ex 192.168.1.254) and dns (dns can be Google 8.8.8.8)
- use other ip ranges for the other nics

- check netmask
 

Eduard

New Member
Jun 16, 2014
11
0
1
36
You cannot set a priority.

You should
- set all nics manually (no dhcp)
- connect e1000 to your router/gateway (example gateway=192.168.1.254 )
- use an ip from the ip range of the gateway for e1000 (ex 192.168.1.1, netmask 255.255.255.0)
- set your gateway (ex 192.168.1.254) and dns (dns can be Google 8.8.8.8)
- use other ip ranges for the other nics

- check netmask


Thanks for your reply.
My actual network config is exactly as you described except I didn't set any DNS, not sure if it could solve the problem though...I'm going to try right now. :)

UPDATE: DNS was already set to Google 8.8.8.8
 
Last edited:

Eduard

New Member
Jun 16, 2014
11
0
1
36
Not sure why but if I point the DNS just to my Gateway 192.168.2.1 (resolv.conf) seems working fine.
Tried to make some TLS tests and seems not "very" stable though, sometimes I got timeouts

Connect failed :IO::Socket::INET: connect: timeout

If I try again works, but not always

:(
 

Eduard

New Member
Jun 16, 2014
11
0
1
36
Anything else I can try?
Of course I have the same problem if I try to install something. So every time I have to disable all my NICs...

(Timeout)


This is my actual network config:

e1000g0
IP: 192.168.2.145
NETMASK: 255.255.255.0
GATEWAY: 192.168.2.1


ixgbe0
IP: 10.0.1.1
NETMASK: 255.0.0.0

ixgbe1
IP: 10.0.2.1
NETMASK: 255.0.0.0

ixgbe2
IP: 10.0.3.1
NETMASK: 255.0.0.0

ixgbe3
IP: 10.0.4.1
NETMASK: 255.0.0.0


Thanks.
 

gea

Well-Known Member
Dec 31, 2010
3,175
1,198
113
DE
ip config is ok
You may (re)set default route

route -p add default 192.168.2.1

and
try a traceroute to your mailserver to check connectivity