Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 24 Mar 2008 14:08:02 +0300
From:      "Andrey V. Elsukov" <bu7cher@yandex.ru>
To:        AT Matik <asstec@matik.com.br>
Cc:        freebsd-ipfw@freebsd.org, Alexander Shulikov <shulikov@gmail.com>
Subject:   Re: kern/121955: [ipfw] [panic] freebsd 7.0 panic with mpd
Message-ID:  <47E78B92.4020907@yandex.ru>
In-Reply-To: <200803240727.05809.asstec@matik.com.br>
References:  <18292fe60803240107v1462a87v4222790745844d5d@mail.gmail.com> <18292fe60803240123o66d161d9l188f2e4b7dcd610b@mail.gmail.com> <47E77E43.4020109@yandex.ru> <200803240727.05809.asstec@matik.com.br>

next in thread | previous in thread | raw e-mail | index | archive | help
AT Matik wrote:
> what do you mean? By setting to 0 the packages are not re-injected into the 
> pipe but go through other existing rules after the matching pipe, or not?

When you reset net.inet.ip.fw.one_pass to zero, packets return back
into ipfw to the next rule after dummynet/netgraph. And if you have
similar rules packets will be passed into dummynet/netgraph again.

This is example how to get double fault (from mail archive):

ifconfig em0 192.168.0.2/24
kldload ipfw
kldload dummynet
sysctl net.inet.ip.fw.one_pass=0
ipfw pipe 2 config bw 0
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ipfw add 2 pipe 2 ip from any to any
ping 192.168.0.1

-- 
WBR, Andrey V. Elsukov



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?47E78B92.4020907>