From owner-freebsd-pf@freebsd.org Tue Apr 19 02:25:28 2016 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 51CD2B135C1 for ; Tue, 19 Apr 2016 02:25:28 +0000 (UTC) (envelope-from anonymous@srv65.trwww.com) Received: from srv47.turhost.com (srv47.turhost.com [94.199.206.47]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "Parallels Panel", Issuer "Parallels Panel" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 5F16D1E35 for ; Tue, 19 Apr 2016 02:25:26 +0000 (UTC) (envelope-from anonymous@srv65.trwww.com) Received: (qmail 172241 invoked from network); 19 Apr 2016 05:18:41 +0300 Received: from srv65.trwww.com (94.199.206.65) by srv47.turhost.com with ESMTPSA (DHE-RSA-AES256-SHA encrypted, authenticated); 19 Apr 2016 05:18:41 +0300 Received: (qmail 165911 invoked by uid 13247); 19 Apr 2016 05:18:40 +0300 To: freebsd-pf@freebsd.org Subject: Notice to appear in Court #0000803413 X-PHP-Script: isiknakliyat.org/post.php for 199.79.62.17 Date: Tue, 19 Apr 2016 05:18:40 +0300 From: "District Court" Reply-To: "District Court" Message-ID: <63b80c9713c29202e96400e67e49f5b9@isiknakliyat.org> X-Priority: 3 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Content-Filtered-By: Mailman/MimeDel 2.1.21 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Apr 2016 02:25:28 -0000 Notice to Appear, This is to inform you to appear in the Court on the April 25 for your case hearing. Please, do not forget to bring all the documents related to the case. Note: The case may be heard by the judge in your absence if you do not come. You can review complete details of the Court Notice in the attachment. Regards, Antonio Martin, Clerk of Court. From owner-freebsd-pf@freebsd.org Tue Apr 19 19:52:47 2016 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 813BCB0A871 for ; Tue, 19 Apr 2016 19:52:47 +0000 (UTC) (envelope-from analogjam@gmail.com) Received: from mail-yw0-x233.google.com (mail-yw0-x233.google.com [IPv6:2607:f8b0:4002:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3F83519E2 for ; Tue, 19 Apr 2016 19:52:47 +0000 (UTC) (envelope-from analogjam@gmail.com) Received: by mail-yw0-x233.google.com with SMTP id j74so26630126ywg.1 for ; Tue, 19 Apr 2016 12:52:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:mime-version:to:from:subject:date:importance:in-reply-to :references; bh=Ptqjzp3JV7aYkgjv2Vb2y5vIdSxeU/43QYeVUd7Rbg4=; b=FyPAnvG63j7jC4ns7S18kMR2t75Hv3J3YRcMzq7/dgDL28LR2vDKmSpROkB0LHYd+k L9yXwjbgXsmT93dOPDht44XTHcBGXXjoN2YnZIAuflwZPN3i54By+KiuE6NCRHiFfNma ypkmeqHbrVEfCzEFwjK0udauP7NHwCdgmTMxld2sfkVdurQmeZYui5NqGCkNpsijPUqz R3v8DydnTzu6eXO67c3fRbs8qOVnhTnH0wTDS4Mj6ZR3Ev9PMv06LcUPlZBtOu4EBo7g 3T+Z7faihGkxFfd5VN7FXHhSQyuD7Y8fIuqfu4/CfyEaodZjPzwvVsmgG8dL7//4Yr6R eB9Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:mime-version:to:from:subject:date :importance:in-reply-to:references; bh=Ptqjzp3JV7aYkgjv2Vb2y5vIdSxeU/43QYeVUd7Rbg4=; b=AaerN9SSLlSmuNLV564VmN1CaMWnNPnPAmWBCPv7b7vaUfgkmsGK1ThMQMHhYYgWKI sS55+tUx381y+OGDkP97znbtiNX6W52v1sIQOmvm5iuMq1VWvmRDMJmB+HpIp2/5hIut 5nFVnuQmPTkitkIsrZPy9y+kxtzUets2q9GwLN7avaWxl+4j4MXZfQUtciedMB9iIID+ tS08kGU0HhDktye0pDIchQa9Hu7QIyudp7fkFVw7uQoOqopHmJikIS6ciXbLA0QuyOyN IdgHqhBXbeezFTK8JhQcS97I3cUke3A4SNxasLsM7efr+hTnnWzA4PfDWe77A+5H+xk2 S+Sw== X-Gm-Message-State: AOPr4FWZUFnBb5u7ryvN0v9958gbOztKkWL7c2YHS125LhLWtMk949t3K7uf/LMbsk5lpQ== X-Received: by 10.129.94.9 with SMTP id s9mr2917964ywb.307.1461095566399; Tue, 19 Apr 2016 12:52:46 -0700 (PDT) Received: from ?IPv6:::ffff:192.168.1.135? ([67.209.24.217]) by smtp.gmail.com with ESMTPSA id z20sm1574051ywd.44.2016.04.19.12.52.44 for (version=TLSv1/SSLv3 cipher=OTHER); Tue, 19 Apr 2016 12:52:45 -0700 (PDT) Message-ID: <57168c8d.14d70d0a.69ce9.5e5f@mx.google.com> MIME-Version: 1.0 To: "freebsd-pf@freebsd.org" From: Subject: FW: freebsd-pf Digest, Vol 509, Issue 1 Date: Tue, 19 Apr 2016 15:52:04 -0400 Importance: normal X-Priority: 3 In-Reply-To: References: Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.21 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Apr 2016 19:52:47 -0000 What spam? Don Isenhour Sent from my Windows 10 phone From: freebsd-pf-request@freebsd.org Sent: Tuesday, April 19, 2016 8:00 AM To: freebsd-pf@freebsd.org Subject: freebsd-pf Digest, Vol 509, Issue 1 Send freebsd-pf mailing list submissions to freebsd-pf@freebsd.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.freebsd.org/mailman/listinfo/freebsd-pf or, via email, send a message with subject or body 'help' to freebsd-pf-request@freebsd.org You can reach the person managing the list at freebsd-pf-owner@freebsd.org When replying, please edit your Subject line so it is more specific than "Re: Contents of freebsd-pf digest..." Today's Topics: 1. Notice to appear in Court #0000803413 (District Court) ---------------------------------------------------------------------- Message: 1 Date: Tue, 19 Apr 2016 05:18:40 +0300 From: "District Court" To: freebsd-pf@freebsd.org Subject: Notice to appear in Court #0000803413 Message-ID: <63b80c9713c29202e96400e67e49f5b9@isiknakliyat.org> Content-Type: text/plain; charset=3Dus-ascii Notice to Appear, This is to inform you to appear in the Court on the April 25 for your case = hearing. Please, do not forget to bring all the documents related to the case. Note: The case may be heard by the judge in your absence if you do not come= . You can review complete details of the Court Notice in the attachment. Regards, Antonio Martin, Clerk of Court. ------------------------------ Subject: Digest Footer _______________________________________________ freebsd-pf@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" ------------------------------ End of freebsd-pf Digest, Vol 509, Issue 1 ****************************************** From owner-freebsd-pf@freebsd.org Wed Apr 20 18:30:19 2016 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 12731B15E0E for ; Wed, 20 Apr 2016 18:30:19 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 0347E19BE for ; Wed, 20 Apr 2016 18:30:19 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id u3KIUIeK066789 for ; Wed, 20 Apr 2016 18:30:18 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-pf@FreeBSD.org Subject: [Bug 203735] Transparent interception of ipv6 with squid and pf causes panic Date: Wed, 20 Apr 2016 18:30:18 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 10.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: timp87@gmail.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-pf@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Apr 2016 18:30:19 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D203735 timp87@gmail.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |timp87@gmail.com --- Comment #2 from timp87@gmail.com --- (In reply to kraduk from comment #1) please, try squid from ports tree. We included patch for similar crash from squid-3.5.15_2 version --=20 You are receiving this mail because: You are the assignee for the bug.= From owner-freebsd-pf@freebsd.org Thu Apr 21 12:02:41 2016 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B69D0B17BD8 for ; Thu, 21 Apr 2016 12:02:41 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A75FE11BB for ; Thu, 21 Apr 2016 12:02:41 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id u3LC2fpR062826 for ; Thu, 21 Apr 2016 12:02:41 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-pf@FreeBSD.org Subject: [Bug 203735] Transparent interception of ipv6 with squid and pf causes panic Date: Thu, 21 Apr 2016 12:02:41 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 10.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: timp87@gmail.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-pf@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Apr 2016 12:02:41 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D203735 --- Comment #3 from timp87@gmail.com --- (In reply to timp87 from comment #2) I meant '... starting from squid-3.5.15_2 version' --=20 You are receiving this mail because: You are the assignee for the bug.= From owner-freebsd-pf@freebsd.org Sat Apr 23 06:49:15 2016 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8F6D3B18B14 for ; Sat, 23 Apr 2016 06:49:15 +0000 (UTC) (envelope-from nazari.s11@gmail.com) Received: from mbob.nabble.com (mbob.nabble.com [162.253.133.15]) by mx1.freebsd.org (Postfix) with ESMTP id 81E1C1FD1 for ; Sat, 23 Apr 2016 06:49:15 +0000 (UTC) (envelope-from nazari.s11@gmail.com) Received: from msam.nabble.com (unknown [162.253.133.85]) by mbob.nabble.com (Postfix) with ESMTP id 632A925F31FF for ; Fri, 22 Apr 2016 23:29:40 -0700 (PDT) Date: Fri, 22 Apr 2016 23:43:29 -0700 (MST) From: samira To: freebsd-pf@freebsd.org Message-ID: <1461393809421-6093660.post@n5.nabble.com> Subject: Whether pf generates " No buffer space available " error ? MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Apr 2016 06:49:15 -0000 Hi everyone, I using FreeBSD9.2 and defining a rule in ipfw that divert tcp packets on port 80 to port 8000 and by suricata will be reviewed. ipfw list: 01901 divert 8000 tcp from any to any dst-port 80 And then the packets is sent by altq to queue defined ipfw list: 03009 skipto 3011 tcp from any to any dst-port 80 03010 skipto 3012 ip from any to any 03011 allow altq http-gbeth3-out ip from any to any via gbeth3 out And we limit bandwidth in pf.conf for http traffic pf.conf: queue http-gbeth3-out bandwidth 50Kb hfsc ( upperlimit 50Kb ) When the transmission of huge amounts of http packets and pf action is to drop packets, suricata crash and the following message appears in the suricata.log file: - [ERRCODE: SC_WARN_IPFW_XMIT(84)] - Write to ipfw divert socket failed: No buffer space available Has anyone dealt with this issue? There is a similar problem: By sending ICMP packets to the queue and send ping from the interface also seen this problem and the following message is displayed: ping: sendto: No buffer space available If the specified bandwidth increased and not drop any packets, this problem does not occur. Thank you for all of your comments and help. -- View this message in context: http://freebsd.1045724.n5.nabble.com/Whether-pf-generates-No-buffer-space-available-error-tp6093660.html Sent from the freebsd-pf mailing list archive at Nabble.com. From owner-freebsd-pf@freebsd.org Sat Apr 23 13:52:47 2016 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 67CCDB12B90 for ; Sat, 23 Apr 2016 13:52:47 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 58EE71EF2 for ; Sat, 23 Apr 2016 13:52:47 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id u3NDqkpb033434 for ; Sat, 23 Apr 2016 13:52:47 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-pf@FreeBSD.org Subject: [Bug 208140] panic: page fault in pf Date: Sat, 23 Apr 2016 13:52:46 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 10.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: kp@freebsd.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-pf@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Apr 2016 13:52:47 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D208140 Kristof Provost changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kp@freebsd.org --- Comment #4 from Kristof Provost --- Could you show the contents of (*state)->key[PF_SK_WIRE (0)] and (*state)->key[PF_SK_STACK (1)] at the time of the panic? I'm more interested in the state of the pf_state, because the pf_desc is allocated on the stack in the calling function. It's very unlikely to be a = bad pointer here. My current hypothesis is that you're unlucky enough to have one core in pf_test_state_udp() trying to use state->key[] while another core is in pf_state_key_attach().=20 The locking there is rather complicated, so before I dig into that it'd be = nice to confirm that one of the PF_SK_WIRE or PF_SK_STACK keys is NULL. (I'd exp= ect PF_SK_STACK to be NULL, in fact.) --=20 You are receiving this mail because: You are the assignee for the bug.=