pali

@abitrolly: I have not tested iPXE again but at the time when I wrote my last commit it was because iPXE prefered IPv6 connection and if there was none from...

@abitrolly: basically yes. And there was also another issue in iPXE. On statefull DHCPv6-only network (when ISP or other router provides real IPv6 internet) iPXE detected that it is IPv6...

So in both cases, completely disabling IPv6 in iPXE fixed those issues. iPXE in never tried to use IPv6 and so it use IPv4 which worked.

I do not see need to have this script? Really what is the purpose of it?

I'm afraid that CAP_NET_RAW would not be sufficient for some ppp scripts. For example script which modifies /etc/resolv.conf with dns ip address from pppd would needs root file system permission...

This commit does not apply on top of the master branch... it needs to be rebased/reworked first.

@jkroonza I added second commit into this PR which de-duplicate rtnetlink stats code. Could you please at it?

> In principle this looks good and I'm in agreement. I've only looked over the code, and I've not actually tested this right now, happy to assist with that if...

I do not like this pre-up script feature. For me it looks like requirement for some buggy behavior. By default firewall should not have "allow all" behavior. If default behavior...

Could you contact NetworkManager people? I think they use those scripts and hook a lot, so maybe they could have inputs if changing spawn logic could break something or not.