From owner-freebsd-ipfw@FreeBSD.ORG Mon Mar 29 11:06:58 2010 Return-Path: Delivered-To: freebsd-ipfw@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5F9121065700 for ; Mon, 29 Mar 2010 11:06:58 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 443FF8FC14 for ; Mon, 29 Mar 2010 11:06:58 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id o2TB6wMf058024 for ; Mon, 29 Mar 2010 11:06:58 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id o2TB6vQW058022 for freebsd-ipfw@FreeBSD.org; Mon, 29 Mar 2010 11:06:57 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 29 Mar 2010 11:06:57 GMT Message-Id: <201003291106.o2TB6vQW058022@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: freebsd-ipfw@FreeBSD.org Cc: Subject: Current problem reports assigned to freebsd-ipfw@FreeBSD.org X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Mar 2010 11:06:58 -0000 Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker Resp. Description -------------------------------------------------------------------------------- o kern/144869 ipfw [ipfw] [panic] Instant kernel panic when adding NAT ru o kern/144269 ipfw [ipfw] problem with ipfw tables o kern/144187 ipfw [ipfw] deadlock using multiple ipfw nat and multiple l o kern/143973 ipfw [ipfw] [panic] ipfw forward option causes kernel reboo o kern/143653 ipfw [ipfw] [patch] ipfw nat redirect_port "buf is too smal o kern/143621 ipfw [ipfw] [dummynet] [patch] dummynet and vnet use result o kern/143474 ipfw [ipfw] ipfw table contains the same address o kern/139581 ipfw [ipfw] "ipfw pipe" not limiting bandwidth o kern/139226 ipfw [ipfw] install_state: entry already present, done o kern/137346 ipfw [ipfw] ipfw nat redirect_proto is broken o kern/137232 ipfw [ipfw] parser troubles o kern/136695 ipfw [ipfw] [patch] fwd reached after skipto in dynamic rul o kern/135476 ipfw [ipfw] IPFW table breaks after adding a large number o o bin/134975 ipfw [patch] ipfw(8) can't work with set in rule file. o kern/132553 ipfw [ipfw] ipfw doesn't understand ftp-data port o kern/131817 ipfw [ipfw] blocks layer2 packets that should not be blocke o kern/131601 ipfw [ipfw] [panic] 7-STABLE panic in nat_finalise (tcp=0) o kern/131558 ipfw [ipfw] Inconsistent "via" ipfw behavior o bin/130132 ipfw [patch] ipfw(8): no way to get mask from ipfw pipe sho o kern/129103 ipfw [ipfw] IPFW check state does not work =( o kern/129093 ipfw [ipfw] ipfw nat must not drop packets o kern/129036 ipfw [ipfw] 'ipfw fwd' does not change outgoing interface n o kern/128260 ipfw [ipfw] [patch] ipfw_divert damages IPv6 packets o kern/127230 ipfw [ipfw] [patch] Feature request to add UID and/or GID l o kern/127209 ipfw [ipfw] IPFW table become corrupted after many changes o bin/125370 ipfw [ipfw] [patch] increase a line buffer limit o conf/123119 ipfw [patch] rc script for ipfw does not handle IPv6 o kern/122963 ipfw [ipfw] tcpdump does not show packets redirected by 'ip s kern/121807 ipfw [request] TCP and UDP port_table in ipfw o kern/121382 ipfw [dummynet]: 6.3-RELEASE-p1 page fault in dummynet (cor o kern/121122 ipfw [ipfw] [patch] add support to ToS IP PRECEDENCE fields o kern/118993 ipfw [ipfw] page fault - probably it's a locking problem o bin/117214 ipfw ipfw(8) fwd with IPv6 treats input as IPv4 o kern/116009 ipfw [ipfw] [patch] Ignore errors when loading ruleset from o docs/113803 ipfw [patch] ipfw(8) - don't get bitten by the fwd rule p kern/113388 ipfw [ipfw] [patch] Addition actions with rules within spec o kern/112561 ipfw [ipfw] ipfw fwd does not work with some TCP packets o kern/105330 ipfw [ipfw] [patch] ipfw (dummynet) does not allow to set q o bin/104921 ipfw [patch] ipfw(8) sometimes treats ipv6 input as ipv4 (a o kern/104682 ipfw [ipfw] [patch] Some minor language consistency fixes a o kern/103454 ipfw [ipfw] [patch] [request] add a facility to modify DF b o kern/103328 ipfw [ipfw] [request] sugestions about ipfw table o kern/102471 ipfw [ipfw] [patch] add tos and dscp support o kern/98831 ipfw [ipfw] ipfw has UDP hickups o kern/97951 ipfw [ipfw] [patch] ipfw does not tie interface details to o kern/97504 ipfw [ipfw] IPFW Rules bug o kern/95084 ipfw [ipfw] [regression] [patch] IPFW2 ignores "recv/xmit/v o kern/93300 ipfw [ipfw] ipfw pipe lost packets o kern/91847 ipfw [ipfw] ipfw with vlanX as the device o kern/88659 ipfw [modules] ipfw and ip6fw do not work properly as modul o kern/87032 ipfw [ipfw] [patch] ipfw ioctl interface implementation o kern/86957 ipfw [ipfw] [patch] ipfw mac logging o bin/83046 ipfw [ipfw] ipfw2 error: "setup" is allowed for icmp, but s o kern/82724 ipfw [ipfw] [patch] [request] Add setnexthop and defaultrou s kern/80642 ipfw [ipfw] [patch] ipfw small patch - new RULE OPTION o bin/78785 ipfw [patch] ipfw(8) verbosity locks machine if /etc/rc.fir o kern/74104 ipfw [ipfw] ipfw2/1 conflict not detected or reported, manp o kern/73910 ipfw [ipfw] serious bug on forwarding of packets after NAT o kern/72987 ipfw [ipfw] ipfw/dummynet pipe/queue 'queue [BYTES]KBytes ( o kern/71366 ipfw [ipfw] "ipfw fwd" sometimes rewrites destination mac a o kern/69963 ipfw [ipfw] install_state warning about already existing en o kern/60719 ipfw [ipfw] Headerless fragments generate cryptic error mes o kern/55984 ipfw [ipfw] [patch] time based firewalling support for ipfw o kern/51274 ipfw [ipfw] [patch] ipfw2 create dynamic rules with parent o kern/48172 ipfw [ipfw] [patch] ipfw does not log size and flags o kern/46159 ipfw [ipfw] [patch] [request] ipfw dynamic rules lifetime f a kern/26534 ipfw [ipfw] Add an option to ipfw to log gid/uid of who cau 67 problems total. From owner-freebsd-ipfw@FreeBSD.ORG Mon Mar 29 19:58:11 2010 Return-Path: Delivered-To: freebsd-ipfw@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A87D8106566B; Mon, 29 Mar 2010 19:58:11 +0000 (UTC) (envelope-from linimon@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 7F58A8FC18; Mon, 29 Mar 2010 19:58:11 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id o2TJwBX9015279; Mon, 29 Mar 2010 19:58:11 GMT (envelope-from linimon@freefall.freebsd.org) Received: (from linimon@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id o2TJwBpB015275; Mon, 29 Mar 2010 19:58:11 GMT (envelope-from linimon) Date: Mon, 29 Mar 2010 19:58:11 GMT Message-Id: <201003291958.o2TJwBpB015275@freefall.freebsd.org> To: linimon@FreeBSD.org, freebsd-bugs@FreeBSD.org, freebsd-ipfw@FreeBSD.org From: linimon@FreeBSD.org Cc: Subject: Re: kern/145167: [ipfw] ipfw nat does not follow its documentation X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Mar 2010 19:58:11 -0000 Old Synopsis: ipfw nat does not follow its documentation New Synopsis: [ipfw] ipfw nat does not follow its documentation Responsible-Changed-From-To: freebsd-bugs->freebsd-ipfw Responsible-Changed-By: linimon Responsible-Changed-When: Mon Mar 29 19:57:57 UTC 2010 Responsible-Changed-Why: Over to maintainer(s). http://www.freebsd.org/cgi/query-pr.cgi?pr=145167 From owner-freebsd-ipfw@FreeBSD.ORG Tue Mar 30 19:10:01 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DD7641065675 for ; Tue, 30 Mar 2010 19:10:01 +0000 (UTC) (envelope-from milhorini@hardonline.com.br) Received: from roma.hardonline.com.br (roma.hardonline.com.br [189.126.224.4]) by mx1.freebsd.org (Postfix) with ESMTP id 0D9218FC19 for ; Tue, 30 Mar 2010 19:10:00 +0000 (UTC) Received: (qmail 55403 invoked by uid 98); 30 Mar 2010 16:10:03 -0300 Received: from 189.126.225.194 by roma.hardonline.com.br (envelope-from , uid 82) with qmail-scanner-1.25 (clamdscan: 0.88.4/1726. spamassassin: 3.1.4. Clear:RC:1(189.126.225.194):. Processed in 0.06645 secs); 30 Mar 2010 19:10:03 -0000 X-Qmail-Scanner-Mail-From: milhorini@hardonline.com.br via roma.hardonline.com.br X-Qmail-Scanner: 1.25 (Clear:RC:1(189.126.225.194):. Processed in 0.06645 secs) Received: from unknown (HELO ?192.168.0.3?) (adailton@hardonline.com.br@189.126.225.194) by roma.hardonline.com.br with ESMTPA; 30 Mar 2010 16:10:03 -0300 Message-ID: <4BB24C86.3030709@hardonline.com.br> Date: Tue, 30 Mar 2010 16:09:58 -0300 From: Adailton Milhorini User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; pt-BR; rv:1.9.1.8) Gecko/20100227 Thunderbird/3.0.3 MIME-Version: 1.0 To: freebsd-ipfw@freebsd.org, Luigi Rizzo Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Subject: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Mar 2010 19:10:01 -0000 Hi, I upgrade my server with last freebsd 8 stable, and before this my server is denied all packets with ipfw... searching in log/messages i found this lines... Mar 30 15:14:40 saturno kernel: ipfw: ouch!, skip past end of rules, denying packet Mar 30 15:15:11 saturno last message repeated 444 times Mar 30 15:15:45 saturno last message repeated 670 times Mar 30 15:15:45 saturno login: ROOT LOGIN (root) ON ttyv6 Mar 30 15:15:45 saturno kernel: ipfw: ouch!, skip past end of rules, denying packet Mar 30 15:16:10 saturno last message repeated 528 times Mar 30 15:16:10 saturno kernel: ipfw: ouch!, skip past end of rules, denying packetipfw: ouch!, skip past end of rules, denying packet Mar 30 15:16:10 saturno kernel: Mar 30 15:16:10 saturno kernel: ipfw: ouch!, skip past end of rules, denying packet Mar 30 15:16:19 saturno last message repeated 181 times any problem with ipfw???? this server is running ok with freebsd 7... Adailton Milhorini From owner-freebsd-ipfw@FreeBSD.ORG Wed Mar 31 01:43:59 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3AB70106566C for ; Wed, 31 Mar 2010 01:43:59 +0000 (UTC) (envelope-from milhorini@hardonline.com.br) Received: from roma.hardonline.com.br (roma.hardonline.com.br [189.126.224.4]) by mx1.freebsd.org (Postfix) with ESMTP id 612138FC12 for ; Wed, 31 Mar 2010 01:43:57 +0000 (UTC) Received: (qmail 18358 invoked by uid 98); 30 Mar 2010 22:44:01 -0300 Received: from 189.126.225.194 by roma.hardonline.com.br (envelope-from , uid 82) with qmail-scanner-1.25 (clamdscan: 0.88.4/1726. spamassassin: 3.1.4. Clear:RC:1(189.126.225.194):. Processed in 0.064944 secs); 31 Mar 2010 01:44:01 -0000 X-Qmail-Scanner-Mail-From: milhorini@hardonline.com.br via roma.hardonline.com.br X-Qmail-Scanner: 1.25 (Clear:RC:1(189.126.225.194):. Processed in 0.064944 secs) Received: from unknown (HELO ?192.168.0.3?) (adailton@hardonline.com.br@189.126.225.194) by roma.hardonline.com.br with ESMTPA; 30 Mar 2010 22:44:00 -0300 Message-ID: <4BB2A8DB.307@hardonline.com.br> Date: Tue, 30 Mar 2010 22:43:55 -0300 From: Adailton Milhorini User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; pt-BR; rv:1.9.1.9) Gecko/20100317 Thunderbird/3.0.4 MIME-Version: 1.0 To: freebsd-ipfw@freebsd.org, Luigi Rizzo References: <4BB24C86.3030709@hardonline.com.br> In-Reply-To: <4BB24C86.3030709@hardonline.com.br> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Mar 2010 01:43:59 -0000 Em 30/03/2010 16:09, Adailton Milhorini escreveu: > Hi, > > I upgrade my server with last freebsd 8 stable, and before this my > server is denied all packets with ipfw... > > searching in log/messages i found this lines... > > Mar 30 15:14:40 saturno kernel: ipfw: ouch!, skip past end of rules, > denying packet > Mar 30 15:15:11 saturno last message repeated 444 times > Mar 30 15:15:45 saturno last message repeated 670 times > Mar 30 15:15:45 saturno login: ROOT LOGIN (root) ON ttyv6 > Mar 30 15:15:45 saturno kernel: ipfw: ouch!, skip past end of rules, > denying packet > Mar 30 15:16:10 saturno last message repeated 528 times > Mar 30 15:16:10 saturno kernel: ipfw: ouch!, skip past end of rules, > denying packetipfw: ouch!, skip past end of rules, denying packet > Mar 30 15:16:10 saturno kernel: > Mar 30 15:16:10 saturno kernel: ipfw: ouch!, skip past end of rules, > denying packet > Mar 30 15:16:19 saturno last message repeated 181 times > > any problem with ipfw???? this server is running ok with freebsd 7... > > Adailton Milhorini > > > > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" > > sorry, not before, after update my freebsd 8 to stable ... Adailton Milhorini From owner-freebsd-ipfw@FreeBSD.ORG Wed Mar 31 01:59:39 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B44D51065672 for ; Wed, 31 Mar 2010 01:59:39 +0000 (UTC) (envelope-from luigi@onelab2.iet.unipi.it) Received: from onelab2.iet.unipi.it (onelab2.iet.unipi.it [131.114.59.238]) by mx1.freebsd.org (Postfix) with ESMTP id 7A6F18FC1E for ; Wed, 31 Mar 2010 01:59:39 +0000 (UTC) Received: by onelab2.iet.unipi.it (Postfix, from userid 275) id C15FA730A1; Wed, 31 Mar 2010 04:09:43 +0200 (CEST) Date: Wed, 31 Mar 2010 04:09:43 +0200 From: Luigi Rizzo To: Adailton Milhorini Message-ID: <20100331020943.GA47928@onelab2.iet.unipi.it> References: <4BB24C86.3030709@hardonline.com.br> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4BB24C86.3030709@hardonline.com.br> User-Agent: Mutt/1.4.2.3i Cc: freebsd-ipfw@freebsd.org Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Mar 2010 01:59:39 -0000 On Tue, Mar 30, 2010 at 04:09:58PM -0300, Adailton Milhorini wrote: > Hi, > > I upgrade my server with last freebsd 8 stable, and before this my > server is denied all packets with ipfw... > > searching in log/messages i found this lines... > > Mar 30 15:14:40 saturno kernel: ipfw: ouch!, skip past end of rules, > denying packet ... > any problem with ipfw???? this server is running ok with freebsd 7... just fixed, sorry. From owner-freebsd-ipfw@FreeBSD.ORG Wed Mar 31 16:43:08 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AF4A01065672 for ; Wed, 31 Mar 2010 16:43:08 +0000 (UTC) (envelope-from dado@cnt.korolev-net.ru) Received: from cnt.korolev-net.ru (mail.web-korolev.ru [89.222.188.140]) by mx1.freebsd.org (Postfix) with ESMTP id 6AF128FC08 for ; Wed, 31 Mar 2010 16:43:07 +0000 (UTC) Received: by cnt.korolev-net.ru (Postfix, from userid 100) id 6490C2AC576; Wed, 31 Mar 2010 20:43:02 +0400 (MSD) Date: Wed, 31 Mar 2010 20:43:02 +0400 From: Evgenii Davidov To: freebsd-ipfw@freebsd.org Message-ID: <20100331164302.GA55699@korolev-net.ru> References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> Mime-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Disposition: inline In-Reply-To: <20100331020943.GA47928@onelab2.iet.unipi.it> User-Agent: Mutt/1.4.2.1i Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Mar 2010 16:43:08 -0000 Dear Luigi, what is the meaning of this messages: Mar 31 00:33:04 i1 kernel: ip_dn_ctl dummynet: compat option 60 Mar 31 00:33:04 i1 kernel: ip_dummynet_compat setting compatibility with FreeBSD 8 thank you -- Evgenii V Davidov From owner-freebsd-ipfw@FreeBSD.ORG Wed Mar 31 16:52:16 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 35BFD1065673 for ; Wed, 31 Mar 2010 16:52:16 +0000 (UTC) (envelope-from luigi@onelab2.iet.unipi.it) Received: from onelab2.iet.unipi.it (onelab2.iet.unipi.it [131.114.59.238]) by mx1.freebsd.org (Postfix) with ESMTP id EB16E8FC0C for ; Wed, 31 Mar 2010 16:52:15 +0000 (UTC) Received: by onelab2.iet.unipi.it (Postfix, from userid 275) id 73DC77310A; Wed, 31 Mar 2010 19:02:21 +0200 (CEST) Date: Wed, 31 Mar 2010 19:02:21 +0200 From: Luigi Rizzo To: Evgenii Davidov Message-ID: <20100331170221.GB55010@onelab2.iet.unipi.it> References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20100331164302.GA55699@korolev-net.ru> User-Agent: Mutt/1.4.2.3i Cc: freebsd-ipfw@freebsd.org Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Mar 2010 16:52:16 -0000 On Wed, Mar 31, 2010 at 08:43:02PM +0400, Evgenii Davidov wrote: > > > Dear Luigi, what is the meaning of this messages: > > Mar 31 00:33:04 i1 kernel: ip_dn_ctl dummynet: compat option 60 > Mar 31 00:33:04 i1 kernel: ip_dummynet_compat setting compatibility with FreeBSD 8 it means that you are probably using a new kernel and an old /sbin/ipfw. The new ipfw/dummynet has a different kernel/userland API to accommodate some new features, and the kernel has a compatibility layer to translate requests back and forth between the two APIs. cheers luigi > thank you > > -- > Evgenii V Davidov > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" From owner-freebsd-ipfw@FreeBSD.ORG Wed Mar 31 18:38:52 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7DC1A106564A for ; Wed, 31 Mar 2010 18:38:52 +0000 (UTC) (envelope-from asstec@matik.com.br) Received: from msrv.matik.com.br (msrv.matik.com.br [200.153.48.3]) by mx1.freebsd.org (Postfix) with ESMTP id C76F18FC0C for ; Wed, 31 Mar 2010 18:38:49 +0000 (UTC) Received: from msrv.matik.com.br (localhost.matik.com.br [127.0.0.1]) by msrv.matik.com.br (8.14.3/8.14.2) with ESMTP id o2VHclJ0051191; Wed, 31 Mar 2010 14:38:47 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.95.3 at msrv.matik.com.br DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=matik.com.br; s=racoon; t=1270057127; bh=0+OjM/OzhkyXMh0J+SSrYker9TpkbPdqM/cetLAp04s=; h=Message-ID:In-Reply-To:References:Date:Subject:From:To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding; b=riFKcttsvtk5sY3lfH0LkGBGGF71xF79o4MxQvfHQadTLQIrR1q9nsZ1QGBrQNyYd f6UfloHXTAFsfo4Gy7MFgUAhtWeXm4VyXOeFZrQZhpl9ek5R8fTAKEArntCSWcyP5h wxUqynYFiH/103QidzAYzrpjnoSsvJ2mPvw+sUh4= DomainKey-Signature: a=rsa-sha1; s=default; d=matik.com.br; c=nofws; q=dns; h=received:x-authentication-warning:received:message-id: in-reply-to:references:date:subject:from:to:cc:user-agent:mime-version: content-type:content-transfer-encoding:x-priority:importance; b=ZUe1lrt/L+a2LWHjJCQUbYNA+hLEl37SevINYJubWo5Y8WFUWzJ06owGRW7z1CeQQ Q26bidaS2QO8YMsI2gdjVtjFwToKuaZ7CfesuWOnxppUdaFHQxlSMoyH7DKi66QOauv VZBTD9qJWxOXj7H1WZWKOONpASx1LgFvHdxDCF4= Received: (from www@localhost) by msrv.matik.com.br (8.14.3/8.14.3/Submit) id o2VHcfWD051186; Wed, 31 Mar 2010 14:38:41 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Authentication-Warning: msrv.matik.com.br: www set sender to asstec@matik.com.br using -f Received: from 187.77.93.68 (SquirrelMail authenticated user asstec) by wm.matik.com.br with HTTP; Wed, 31 Mar 2010 14:38:41 -0300 Message-ID: <2bfaa9bf09c09060152fe7fe88474404.squirrel@wm.matik.com.br> In-Reply-To: <20100331170221.GB55010@onelab2.iet.unipi.it> References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> <20100331170221.GB55010@onelab2.iet.unipi.it> Date: Wed, 31 Mar 2010 14:38:41 -0300 From: "Ass.Tec. Matik" To: "Luigi Rizzo" User-Agent: SquirrelMail/1.4.20 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: freebsd-ipfw@freebsd.org, Evgenii Davidov Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Mar 2010 18:38:52 -0000 > On Wed, Mar 31, 2010 at 08:43:02PM +0400, Evgenii Davidov wrote: >> >> >> Dear Luigi, what is the meaning of this messages: >> >> Mar 31 00:33:04 i1 kernel: ip_dn_ctl dummynet: compat option 60 >> Mar 31 00:33:04 i1 kernel: ip_dummynet_compat setting compatibility with >> FreeBSD 8 > > it means that you are probably using a new kernel and an old /sbin/ipfw. > The new ipfw/dummynet has a different kernel/userland API to accommodate > some new features, and the kernel has a compatibility layer to translate > requests back and forth between the two APIs. > so probably ... and what are the other probabilities ? and this after today's cvsup? unrecognized action 0 len 0 ** unrecognized action 0 len 0 ** unrecognized action 0 0 ** unrecognized action 0 len 0 ** unrecognized action 0 len 0 ** unrecognized action 0 le ** unrecognized action 0 len 0 ** unrecognized action 0 len 0 ** unrecognized action 0 len unrecognized action 0 len 0 ** unrecognized action 0 len 0 ** unrecognized action 0 len 0 nrecognized action 0 len 0 ** unrecognized action 0 len 0 ** unrecognized action 0 len 0 ** ecognized action 0 len 0 ** with same ruleset from yesterday which works just fine ... Joćo Martins Eng.Resp.Helpdesk e Suporte Matik https://suporte.matik.com.br From owner-freebsd-ipfw@FreeBSD.ORG Wed Mar 31 18:47:57 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 08C421065674 for ; Wed, 31 Mar 2010 18:47:57 +0000 (UTC) (envelope-from asstec@matik.com.br) Received: from msrv.matik.com.br (msrv.matik.com.br [200.153.48.3]) by mx1.freebsd.org (Postfix) with ESMTP id 742A48FC12 for ; Wed, 31 Mar 2010 18:47:56 +0000 (UTC) Received: from msrv.matik.com.br (localhost.matik.com.br [127.0.0.1]) by msrv.matik.com.br (8.14.3/8.14.2) with ESMTP id o2VIlsuv058194; Wed, 31 Mar 2010 15:47:54 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.95.3 at msrv.matik.com.br DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=matik.com.br; s=racoon; t=1270061275; bh=hLH4foJDwxqzBYgJxGkKZytqhlU0nSso+ENjgrmveos=; h=Message-ID:In-Reply-To:References:Date:Subject:From:To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding; b=GOZnXHPznfaRZwmKCrCOwF0wGaE1W3ANodDfiMjoTYLL0OSRf2/Dy5hrUopSFEKdB h+O51H5iroM7bMqCUbD8uefY0YaHSzF2mKkA9EOXQNL12Jphiw7IkKE0HS0DRmC730 1w1da9Nk+h9IUsz8HwIF8zW7Jqq4+zJZFuKNVyVI= DomainKey-Signature: a=rsa-sha1; s=default; d=matik.com.br; c=nofws; q=dns; h=received:x-authentication-warning:received:message-id: in-reply-to:references:date:subject:from:to:cc:user-agent:mime-version: content-type:content-transfer-encoding:x-priority:importance; b=ePQgFow8XSgNianAqkmdGwDghjJIMlVnm8t9gY4URoe6OhCP8kCbsv4TQSqwc17yR dt92rgvTtHbkej3QyvqRmE9pBqQM1fBZ4KpXjtSrFTNeXr/rGeAAdKYTmu1QPjI2bDW 4ajkqG33rmX5IaOmrLxxJIAf61e4FlYWc0DtpRQ= Received: (from www@localhost) by msrv.matik.com.br (8.14.3/8.14.3/Submit) id o2VIlnas058193; Wed, 31 Mar 2010 15:47:49 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Authentication-Warning: msrv.matik.com.br: www set sender to asstec@matik.com.br using -f Received: from 187.77.123.34 (SquirrelMail authenticated user asstec) by wm.matik.com.br with HTTP; Wed, 31 Mar 2010 15:47:49 -0300 Message-ID: In-Reply-To: <20100331170221.GB55010@onelab2.iet.unipi.it> References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> <20100331170221.GB55010@onelab2.iet.unipi.it> Date: Wed, 31 Mar 2010 15:47:49 -0300 From: "Ass.Tec. Matik" To: "Luigi Rizzo" User-Agent: SquirrelMail/1.4.20 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: freebsd-ipfw@freebsd.org Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Mar 2010 18:47:57 -0000 > it means that you are probably using a new kernel and an old /sbin/ipfw. > The new ipfw/dummynet has a different kernel/userland API to accommodate > some new features, and the kernel has a compatibility layer to translate > requests back and forth between the two APIs. > where this is coming from: ipfw0: flags=8801 metric 0 mtu 65536 Joćo Martins Eng.Resp.Helpdesk e Suporte Matik https://suporte.matik.com.br From owner-freebsd-ipfw@FreeBSD.ORG Wed Mar 31 22:23:07 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BF6111065670 for ; Wed, 31 Mar 2010 22:23:07 +0000 (UTC) (envelope-from asstec@matik.com.br) Received: from msrv.matik.com.br (msrv.matik.com.br [200.153.48.3]) by mx1.freebsd.org (Postfix) with ESMTP id 349358FC15 for ; Wed, 31 Mar 2010 22:23:06 +0000 (UTC) Received: from msrv.matik.com.br (localhost.matik.com.br [127.0.0.1]) by msrv.matik.com.br (8.14.3/8.14.2) with ESMTP id o2VMN4Ao076943; Wed, 31 Mar 2010 19:23:04 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.95.3 at msrv.matik.com.br DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=matik.com.br; s=racoon; t=1270074184; bh=88NqGpAQ6JcE4Dkp/V2u7SeoBdEXH6uXM5ATeYe07DM=; h=Message-ID:In-Reply-To:References:Date:Subject:From:To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding; b=GzCd9f3Lx2Kxlu+Wdy7V/BxXiisBEvrdGSozAJUVGKcWbKoe+Sa506QTkEw/Iyne0 9IYBCGDZv6kK00/1So4t3IFuKiQdNxi7ZP/GD9bpUsky76bq2j8F88FmSHVctQT6fP Nx/ViRNfCoECLJRpeeCf9Vs8cPuEAB8xr0rRReWI= DomainKey-Signature: a=rsa-sha1; s=default; d=matik.com.br; c=nofws; q=dns; h=received:x-authentication-warning:received:message-id: in-reply-to:references:date:subject:from:to:cc:user-agent:mime-version: content-type:content-transfer-encoding:x-priority:importance; b=lO+TwQBThf1OLHdIjhTmr2+Lhq8uhq9vviRQ90xYGibb7S1pyotTXEySpGsEzLfvH JhG47SeHUIUKYA/nV6K5PcgmjFquyHIn/B/s8sMFt1ndY/ebAKmk0IGoTh2vZ+rvDyP c88+h06fliJl/Ujrcv2e5qJJm0KIlhMoaXk+vOs= Received: (from www@localhost) by msrv.matik.com.br (8.14.3/8.14.3/Submit) id o2VMMvdi076938; Wed, 31 Mar 2010 19:22:57 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Authentication-Warning: msrv.matik.com.br: www set sender to asstec@matik.com.br using -f Received: from 187.77.22.62 (SquirrelMail authenticated user asstec) by wm.matik.com.br with HTTP; Wed, 31 Mar 2010 19:22:57 -0300 Message-ID: <7954ee2f74cfef07381b0745ff272c90.squirrel@wm.matik.com.br> In-Reply-To: <20100331170221.GB55010@onelab2.iet.unipi.it> References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> <20100331170221.GB55010@onelab2.iet.unipi.it> Date: Wed, 31 Mar 2010 19:22:57 -0300 From: "Ass.Tec. Matik" To: "Luigi Rizzo" User-Agent: SquirrelMail/1.4.20 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: freebsd-ipfw@freebsd.org Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Mar 2010 22:23:07 -0000 well guys 00002 rule 00003 rule ... 01215 rule ... 19000 rule ... and so on and then the closing one (my wild guess) shouldn't that be 65000 instead of 00000 and also missing action right, molto chianti Luigi? :) 00000 ip from any to any Joćo Martins Eng.Resp.Helpdesk e Suporte Matik https://suporte.matik.com.br From owner-freebsd-ipfw@FreeBSD.ORG Wed Mar 31 22:55:40 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 87BA7106566C for ; Wed, 31 Mar 2010 22:55:40 +0000 (UTC) (envelope-from kerbzo@gmail.com) Received: from mail-bw0-f216.google.com (mail-bw0-f216.google.com [209.85.218.216]) by mx1.freebsd.org (Postfix) with ESMTP id 10C3D8FC0A for ; Wed, 31 Mar 2010 22:55:39 +0000 (UTC) Received: by bwz8 with SMTP id 8so478750bwz.3 for ; Wed, 31 Mar 2010 15:55:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:received:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=jInQxbpm2xlRfG+IffPz9guPQejFx7XgMWI/17knoq0=; b=slzPQaQ8BdtEKUUCwhxHpXMao5tVskYIIb59o/TWw+2yPzZw1ioVRDPS/M4ZKFaWL+ J+GV5cxBpCxZFLfVXOb46reEqIofjVIKyejZcXk6EXRsHeIajWDeA/Hvpxq2k7QVNPqc eqOBBBaXeFsO4PZGrvf7KedZQNqSRaH0Nk2u0= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=aco680WxCic0DgU3F8d2gN67UzL6x+1cgjUPXdXoof8xYFD1NzCYC4WGRxCYnq9g8q P7E1UNOtWGu7SHo0BSHsfBTbW7SOL2dYx49PQwsaLYtZOaO9B9D3ykafbKJuZ8ZmQW+a nVpVWzDQUxdjPlfoJXBSV6PSWjshs4QMvdcmU= MIME-Version: 1.0 Received: by 10.204.10.4 with HTTP; Wed, 31 Mar 2010 15:55:37 -0700 (PDT) In-Reply-To: <7954ee2f74cfef07381b0745ff272c90.squirrel@wm.matik.com.br> References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> <20100331170221.GB55010@onelab2.iet.unipi.it> <7954ee2f74cfef07381b0745ff272c90.squirrel@wm.matik.com.br> Date: Thu, 1 Apr 2010 00:55:37 +0200 Received: by 10.204.80.36 with SMTP id r36mr306039bkk.75.1270076137546; Wed, 31 Mar 2010 15:55:37 -0700 (PDT) Message-ID: From: kerbzo To: "Ass.Tec. Matik" Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-ipfw@freebsd.org, Luigi Rizzo Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Mar 2010 22:55:40 -0000 On Thu, Apr 1, 2010 at 12:22 AM, Ass.Tec. Matik wrote= : > > well guys > > > 00002 rule > 00003 rule > ... > 01215 rule > ... > 19000 rule > ... > and so on > and then the closing one (my wild guess) shouldn't that be 65000 instead = of > 00000 and also missing action right, molto chianti Luigi? :) > > 00000 =A0ip from any to any > > > > > Jo=E3o Martins > Eng.Resp.Helpdesk e Suporte Matik > https://suporte.matik.com.br Recently I noticed a sort of sarcasm towards Luigi and I am really astonish= ed. I think that we all should admire and thank him and all freebsd developers and collaborate with them: we must not forget that most of them spend their own spare time to bring us this wonderful o.s.. Bug reporting is positive; arid criticism, imho, is, yes, really disgusting= . regards, - k From owner-freebsd-ipfw@FreeBSD.ORG Thu Apr 1 00:10:08 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9C962106566B for ; Thu, 1 Apr 2010 00:10:08 +0000 (UTC) (envelope-from luigi@onelab2.iet.unipi.it) Received: from onelab2.iet.unipi.it (onelab2.iet.unipi.it [131.114.59.238]) by mx1.freebsd.org (Postfix) with ESMTP id 5FC228FC08 for ; Thu, 1 Apr 2010 00:10:07 +0000 (UTC) Received: by onelab2.iet.unipi.it (Postfix, from userid 275) id 63B1373106; Thu, 1 Apr 2010 02:20:14 +0200 (CEST) Date: Thu, 1 Apr 2010 02:20:14 +0200 From: Luigi Rizzo To: "Ass.Tec. Matik" Message-ID: <20100401002014.GA57424@onelab2.iet.unipi.it> References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> <20100331170221.GB55010@onelab2.iet.unipi.it> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i Cc: freebsd-ipfw@freebsd.org Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Apr 2010 00:10:08 -0000 On Wed, Mar 31, 2010 at 03:47:49PM -0300, Ass.Tec. Matik wrote: > > > > it means that you are probably using a new kernel and an old /sbin/ipfw. > > The new ipfw/dummynet has a different kernel/userland API to accommodate > > some new features, and the kernel has a compatibility layer to translate > > requests back and forth between the two APIs. > > > > > where this is coming from: > > ipfw0: flags=8801 metric 0 mtu 65536 sys/netinet/ipfw/ip_fw_log.c Revision 200654 - (view) (annotate) - [select for diffs] Modified Thu Dec 17 23:11:16 2009 UTC (3 months, 1 week ago) by luigi Add some experimental code to log traffic with tcpdump, similar to pflog(4). To use the feature, just put the 'log' options on rules you are interested in, e.g. ipfw add 5000 count log .... and run tcpdump -ni ipfw0 ... net.inet.ip.fw.verbose=0 enables logging to ipfw0, net.inet.ip.fw.verbose=1 sends logging to syslog as before. cheers luigi From owner-freebsd-ipfw@FreeBSD.ORG Thu Apr 1 06:31:29 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EDF561065670 for ; Thu, 1 Apr 2010 06:31:29 +0000 (UTC) (envelope-from asstec@matik.com.br) Received: from msrv.matik.com.br (msrv.matik.com.br [200.153.48.3]) by mx1.freebsd.org (Postfix) with ESMTP id 48ABE8FC21 for ; Thu, 1 Apr 2010 06:31:29 +0000 (UTC) Received: from msrv.matik.com.br (localhost.matik.com.br [127.0.0.1]) by msrv.matik.com.br (8.14.3/8.14.2) with ESMTP id o316VPJm017005; Thu, 1 Apr 2010 03:31:26 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.95.3 at msrv.matik.com.br DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=matik.com.br; s=racoon; t=1270103486; bh=wLBsqBjgY2z/Lbh/5LP9rH/rcHI85ofGAa6Z+BmV7PY=; h=Message-ID:In-Reply-To:References:Date:Subject:From:To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding; b=q3S49udnrubk8EzkziFqntUqVakV+LwZzFWRVmkCYqSuKVxy7pRqKNGC6No/6NWTH 3zToZ+jNXhn02Unuh4VZaqhDXCHhOP7chzIdCX7g1xX+qw2XeMDHWTR4ABl5d7CZO9 UooYkjBV5nkH+6wVnp59gg0E2XFVgvrSiNgThdsY= DomainKey-Signature: a=rsa-sha1; s=default; d=matik.com.br; c=nofws; q=dns; h=received:x-authentication-warning:received:message-id: in-reply-to:references:date:subject:from:to:cc:user-agent:mime-version: content-type:content-transfer-encoding:x-priority:importance; b=YV7KkPcYPpMJmnbDzO2zzJXv6LE5ywgX5XKi93rZ2WfAep+OOY72bvoiHR/ZgbSsp 3nq87Nas51bG2Y2RvlxoysHqWlH8eXhXaHliHIf1lvQ64VHH/M6METhtRc3At64mzC1 9Yrx5jZ/hI9GqD4D7ImqStt7Ga6ysIr4LjZ5Qnc= Received: (from www@localhost) by msrv.matik.com.br (8.14.3/8.14.3/Submit) id o316VHbh017004; Thu, 1 Apr 2010 03:31:17 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Authentication-Warning: msrv.matik.com.br: www set sender to asstec@matik.com.br using -f Received: from 187.42.226.192 (SquirrelMail authenticated user asstec) by wm.matik.com.br with HTTP; Thu, 1 Apr 2010 03:31:17 -0300 Message-ID: In-Reply-To: References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> <20100331170221.GB55010@onelab2.iet.unipi.it> <7954ee2f74cfef07381b0745ff272c90.squirrel@wm.matik.com.br> Date: Thu, 1 Apr 2010 03:31:17 -0300 From: "Ass.Tec. Matik" To: "kerbzo" User-Agent: SquirrelMail/1.4.20 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: freebsd-ipfw@freebsd.org, "Ass.Tec. Matik" , Luigi Rizzo Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Apr 2010 06:31:30 -0000 > Recently I noticed a sort of sarcasm towards Luigi and I am really astonished. > I think that we all should admire and thank him and all freebsd > developers and collaborate with them: we must not forget that most of > them spend their own spare time to bring us this wonderful o.s.. > Bug reporting is positive; arid criticism, imho, is, yes, really disgusting. > certainly you got something wrong or wanted to send this to someone else, I do not even know who you are Joćo Martins Eng.Resp.Helpdesk e Suporte Matik https://suporte.matik.com.br From owner-freebsd-ipfw@FreeBSD.ORG Thu Apr 1 06:45:47 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4A66D1065676 for ; Thu, 1 Apr 2010 06:45:47 +0000 (UTC) (envelope-from asstec@matik.com.br) Received: from msrv.matik.com.br (msrv.matik.com.br [200.153.48.3]) by mx1.freebsd.org (Postfix) with ESMTP id C58F28FC31 for ; Thu, 1 Apr 2010 06:45:46 +0000 (UTC) Received: from msrv.matik.com.br (localhost.matik.com.br [127.0.0.1]) by msrv.matik.com.br (8.14.3/8.14.2) with ESMTP id o316jjMY018220; Thu, 1 Apr 2010 03:45:45 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.95.3 at msrv.matik.com.br DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=matik.com.br; s=racoon; t=1270104345; bh=dQb5tgIThngq4X6AKRA94XPGJOztyawHkXpizF7/n5M=; h=Message-ID:In-Reply-To:References:Date:Subject:From:To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding; b=TQciNnzZEHtSHTeY70CAWUiRJC8txYmKhsZc4YRcOVFnps3iET70Xf1DAqpZVTCpe dn+YtAQO+wkQ43hQA6v9X7xvV9azdnzFg/6DyRhiVpdimjxrAlhEXF0l3/kC73AHbZ DukEPt5TVGQLMctO0TgtRPMNtahMcOLLBdRMtyDs= DomainKey-Signature: a=rsa-sha1; s=default; d=matik.com.br; c=nofws; q=dns; h=received:x-authentication-warning:received:message-id: in-reply-to:references:date:subject:from:to:cc:user-agent:mime-version: content-type:content-transfer-encoding:x-priority:importance; b=ADK87x5qZhMONRr8xoNXUm1JTe8jdEjVGz/E7Flv6vxP6q8g54j1l5+DBC8CmwjhR TYmJKUnYFrMurSiOAAGVvwbguHHyODQwxT+tTYMJ/YQeTiJIBYzA90m67u0xXLyZLGq DU/M40HatxGQdhrw6KqWcKW9dd1KGeNnlRlEwvg= Received: (from www@localhost) by msrv.matik.com.br (8.14.3/8.14.3/Submit) id o316jdms018217; Thu, 1 Apr 2010 03:45:39 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Authentication-Warning: msrv.matik.com.br: www set sender to asstec@matik.com.br using -f Received: from 187.42.226.192 (SquirrelMail authenticated user asstec) by wm.matik.com.br with HTTP; Thu, 1 Apr 2010 03:45:40 -0300 Message-ID: <8d0898da57267f85caef76cb7bc9ee6c.squirrel@wm.matik.com.br> In-Reply-To: <20100401002014.GA57424@onelab2.iet.unipi.it> References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> <20100331170221.GB55010@onelab2.iet.unipi.it> <20100401002014.GA57424@onelab2.iet.unipi.it> Date: Thu, 1 Apr 2010 03:45:40 -0300 From: "Ass.Tec. Matik" To: "Luigi Rizzo" User-Agent: SquirrelMail/1.4.20 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: freebsd-ipfw@freebsd.org Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Apr 2010 06:45:47 -0000 > On Wed, Mar 31, 2010 at 03:47:49PM -0300, Ass.Tec. Matik wrote: >> >> >> > it means that you are probably using a new kernel and an old /sbin/ipfw. >> > The new ipfw/dummynet has a different kernel/userland API to accommodate >> > some new features, and the kernel has a compatibility layer to translate >> > requests back and forth between the two APIs. >> > >> >> >> where this is coming from: >> >> ipfw0: flags=8801 metric 0 mtu 65536 > > sys/netinet/ipfw/ip_fw_log.c > thank's for clarification a note in UPDATING at least would be usefull since most people don't read the source right ;) the new interface brought trouble into my snmp monitoring since it changed the IF/NIC numbers ... > Revision 200654 - (view) (annotate) - [select for diffs] > Modified Thu Dec 17 23:11:16 2009 UTC (3 months, 1 week ago) by luigi > > Add some experimental code to log traffic with tcpdump, > similar to pflog(4). > To use the feature, just put the 'log' options on rules > you are interested in, e.g. > > ipfw add 5000 count log .... > > and run > tcpdump -ni ipfw0 ... > > net.inet.ip.fw.verbose=0 enables logging to ipfw0, > net.inet.ip.fw.verbose=1 sends logging to syslog as before. > > cheers > luigi > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" > Joćo Martins Eng.Resp.Helpdesk e Suporte Matik https://suporte.matik.com.br From owner-freebsd-ipfw@FreeBSD.ORG Thu Apr 1 07:25:28 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 239C81065676 for ; Thu, 1 Apr 2010 07:25:28 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159]) by mx1.freebsd.org (Postfix) with ESMTP id 8F5088FC1B for ; Thu, 1 Apr 2010 07:25:26 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id o317PNUj038524; Thu, 1 Apr 2010 18:25:24 +1100 (EST) (envelope-from smithi@nimnet.asn.au) Date: Thu, 1 Apr 2010 18:25:23 +1100 (EST) From: Ian Smith To: Luigi Rizzo In-Reply-To: <20100401002014.GA57424@onelab2.iet.unipi.it> Message-ID: <20100401180631.K37370@sola.nimnet.asn.au> References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> <20100331170221.GB55010@onelab2.iet.unipi.it> <20100401002014.GA57424@onelab2.iet.unipi.it> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Cc: freebsd-ipfw@freebsd.org, "Ass.Tec. Matik" Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Apr 2010 07:25:28 -0000 On Thu, 1 Apr 2010, Luigi Rizzo wrote: > On Wed, Mar 31, 2010 at 03:47:49PM -0300, Ass.Tec. Matik wrote: > > > > > > > it means that you are probably using a new kernel and an old /sbin/ipfw. > > > The new ipfw/dummynet has a different kernel/userland API to accommodate > > > some new features, and the kernel has a compatibility layer to translate > > > requests back and forth between the two APIs. > > > > > > > > > where this is coming from: > > > > ipfw0: flags=8801 metric 0 mtu 65536 > > sys/netinet/ipfw/ip_fw_log.c > > Revision 200654 - (view) (annotate) - [select for diffs] > Modified Thu Dec 17 23:11:16 2009 UTC (3 months, 1 week ago) by luigi > > Add some experimental code to log traffic with tcpdump, > similar to pflog(4). > To use the feature, just put the 'log' options on rules > you are interested in, e.g. > > ipfw add 5000 count log .... > > and run > tcpdump -ni ipfw0 ... > > net.inet.ip.fw.verbose=0 enables logging to ipfw0, > net.inet.ip.fw.verbose=1 sends logging to syslog as before. Which is now default? Previously net.inet.ip.fw.verbose was conditioned by IPFIREWALL_VERBOSE in kernel options - has this changed? I gather it's either ipfw0 or syslog, both (or neither?) not being possible? Does 'ipfw {en,dis}able verbose' now toggle between these two? Thanks for this heads up, I'm soon to update my 8.0 to -stable and use log a lot, tailing /var/log/security for keeping an eye on some things. While I'm at it :) have you given any more thought to disambiguating the overloading of net.inet.ip.fw.one_pass for both dummynet and ipfw nat? cheers, Ian From owner-freebsd-ipfw@FreeBSD.ORG Thu Apr 1 07:44:13 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 43D45106564A for ; Thu, 1 Apr 2010 07:44:13 +0000 (UTC) (envelope-from asstec@matik.com.br) Received: from msrv.matik.com.br (msrv.matik.com.br [200.153.48.3]) by mx1.freebsd.org (Postfix) with ESMTP id AD60F8FC1A for ; Thu, 1 Apr 2010 07:44:12 +0000 (UTC) Received: from msrv.matik.com.br (localhost.matik.com.br [127.0.0.1]) by msrv.matik.com.br (8.14.3/8.14.2) with ESMTP id o317iA2b022964; Thu, 1 Apr 2010 04:44:11 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.95.3 at msrv.matik.com.br DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=matik.com.br; s=racoon; t=1270107851; bh=8H3YhWyobHg/5011NcOOzLh+Bt6CbHxdcnoy5u0WnaE=; h=Message-ID:In-Reply-To:References:Date:Subject:From:To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding; b=QMstSOu4BlcwbKPzld3VK65joFPSJLouQ/nqRmSvui/Li50KPnj0yB1esjFjutebT 1g7OE2bXNiVNSyNboLxEIjSdsDgjaH4t6bWgUa1QpNhUUAfrp3EbCNgd2O4h+uZTf3 tnqPGsH+UX9U7MItfksz0GGIBVlaw3M4eebg9Odg= DomainKey-Signature: a=rsa-sha1; s=default; d=matik.com.br; c=nofws; q=dns; h=received:x-authentication-warning:received:message-id: in-reply-to:references:date:subject:from:to:cc:user-agent:mime-version: content-type:content-transfer-encoding:x-priority:importance; b=GDP1d7E0cZgtWirO4iczKff3wjcn4Qt3SEcBA70aFLHAIMSSlMQi+dkHujEE6iliY iynKUvwH6KfO/4LcXijStX+SPyMv5VfQfyBL+poyYD0tbu52bmJgZNc6y284DW57/IK e2AzoOKchEhecCpANv0mf2Ib7FyRnSdLFl0YaA0= Received: (from www@localhost) by msrv.matik.com.br (8.14.3/8.14.3/Submit) id o317i5MX022958; Thu, 1 Apr 2010 04:44:05 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Authentication-Warning: msrv.matik.com.br: www set sender to asstec@matik.com.br using -f Received: from 187.42.226.192 (SquirrelMail authenticated user asstec) by wm.matik.com.br with HTTP; Thu, 1 Apr 2010 04:44:05 -0300 Message-ID: <13167466ab0c041eb32cac973fe43f88.squirrel@wm.matik.com.br> In-Reply-To: <20100401180631.K37370@sola.nimnet.asn.au> References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> <20100331170221.GB55010@onelab2.iet.unipi.it> <20100401002014.GA57424@onelab2.iet.unipi.it> <20100401180631.K37370@sola.nimnet.asn.au> Date: Thu, 1 Apr 2010 04:44:05 -0300 From: "Ass.Tec. Matik" To: "Ian Smith" User-Agent: SquirrelMail/1.4.20 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: freebsd-ipfw@freebsd.org, Luigi Rizzo Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Apr 2010 07:44:13 -0000 > > net.inet.ip.fw.verbose=0 enables logging to ipfw0, > > net.inet.ip.fw.verbose=1 sends logging to syslog as before. > > Which is now default? Previously net.inet.ip.fw.verbose was conditioned look again "as before" is the default Joćo Martins Eng.Resp.Helpdesk e Suporte Matik https://suporte.matik.com.br From owner-freebsd-ipfw@FreeBSD.ORG Thu Apr 1 07:50:53 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2CDD8106566C for ; Thu, 1 Apr 2010 07:50:53 +0000 (UTC) (envelope-from asstec@matik.com.br) Received: from msrv.matik.com.br (msrv.matik.com.br [200.153.48.3]) by mx1.freebsd.org (Postfix) with ESMTP id 966388FC15 for ; Thu, 1 Apr 2010 07:50:52 +0000 (UTC) Received: from msrv.matik.com.br (localhost.matik.com.br [127.0.0.1]) by msrv.matik.com.br (8.14.3/8.14.2) with ESMTP id o317op3l023819; Thu, 1 Apr 2010 04:50:51 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.95.3 at msrv.matik.com.br DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=matik.com.br; s=racoon; t=1270108251; bh=67d56OtZJDd5DYfjkxt6s5L4P0IwtZo/BDw14V4Ip3I=; h=Message-ID:In-Reply-To:References:Date:Subject:From:To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding; b=boc0CEwYZKVntBcU9siPbSvuFB6iEJFXBN8asdNqyOcB1SGMWS4Ul//rheJlMBzAx MR3zGl2rDGXiLg+IUw3982gVSeJfrCLDdc8tcKcyp+2JOH+BakYZWdRTsGBAMzHey6 oCCCvlzzqi9jjxiaS0l8xGfCpNmuajKcKJApLXvw= DomainKey-Signature: a=rsa-sha1; s=default; d=matik.com.br; c=nofws; q=dns; h=received:x-authentication-warning:received:message-id: in-reply-to:references:date:subject:from:to:cc:user-agent:mime-version: content-type:content-transfer-encoding:x-priority:importance; b=Etqf539Rl9x0GRSim9OUMRd6vwckwO5CY94a4xipoP+X6k1cY2Ox0u5bq+xPonPNM e/w6Duy6djrupWHmsY8SNx1fuRwcXjefjhhLliazGwZI8uDtT+hqBrc7RoubzS3D7Sg KSQY5Cy5cKF25oRIEolg0XtwQEI3fySgVQijF4c= Received: (from www@localhost) by msrv.matik.com.br (8.14.3/8.14.3/Submit) id o317ojBG023812; Thu, 1 Apr 2010 04:50:45 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Authentication-Warning: msrv.matik.com.br: www set sender to asstec@matik.com.br using -f Received: from 187.42.226.192 (SquirrelMail authenticated user asstec) by wm.matik.com.br with HTTP; Thu, 1 Apr 2010 04:50:45 -0300 Message-ID: In-Reply-To: <20100401002014.GA57424@onelab2.iet.unipi.it> References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> <20100331170221.GB55010@onelab2.iet.unipi.it> <20100401002014.GA57424@onelab2.iet.unipi.it> Date: Thu, 1 Apr 2010 04:50:45 -0300 From: "Ass.Tec. Matik" To: "Luigi Rizzo" User-Agent: SquirrelMail/1.4.20 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: freebsd-ipfw@freebsd.org Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Apr 2010 07:50:53 -0000 seems to be some more confusion 00002 rule ..... other rules 01000 rule ..... other rules 00100 allow ip from any to any via lo0 00000 ip from any to any the last as I said in my former msg but the #00100 is listed at the end, not at it's correct sorted position, seems sticks to _when_ added Joćo Martins Eng.Resp.Helpdesk e Suporte Matik https://suporte.matik.com.br From owner-freebsd-ipfw@FreeBSD.ORG Thu Apr 1 12:49:22 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BE3CD1065670 for ; Thu, 1 Apr 2010 12:49:22 +0000 (UTC) (envelope-from luigi@onelab2.iet.unipi.it) Received: from onelab2.iet.unipi.it (onelab2.iet.unipi.it [131.114.59.238]) by mx1.freebsd.org (Postfix) with ESMTP id 7FBDA8FC25 for ; Thu, 1 Apr 2010 12:49:22 +0000 (UTC) Received: by onelab2.iet.unipi.it (Postfix, from userid 275) id 4CBC0730A1; Thu, 1 Apr 2010 14:59:29 +0200 (CEST) Date: Thu, 1 Apr 2010 14:59:29 +0200 From: Luigi Rizzo To: "Ass.Tec. Matik" Message-ID: <20100401125929.GA66321@onelab2.iet.unipi.it> References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> <20100331170221.GB55010@onelab2.iet.unipi.it> <20100401002014.GA57424@onelab2.iet.unipi.it> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i Cc: freebsd-ipfw@freebsd.org Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Apr 2010 12:49:22 -0000 On Thu, Apr 01, 2010 at 04:50:45AM -0300, Ass.Tec. Matik wrote: > > seems to be some more confusion > > > 00002 rule > ..... other rules > 01000 rule > ..... other rules > 00100 allow ip from any to any via lo0 > 00000 ip from any to any > > > the last as I said in my former msg but the #00100 is listed at the end, not > at it's correct sorted position, seems sticks to _when_ added i fixed this problem (which is related to all the reports you are posting) tuesday night in svn 205953. By chance are you still running an older kernel ? cheers luigi From owner-freebsd-ipfw@FreeBSD.ORG Thu Apr 1 13:35:30 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A08E1106567C for ; Thu, 1 Apr 2010 13:35:30 +0000 (UTC) (envelope-from asstec@matik.com.br) Received: from msrv.matik.com.br (msrv.matik.com.br [200.153.48.3]) by mx1.freebsd.org (Postfix) with ESMTP id EE65E8FC15 for ; Thu, 1 Apr 2010 13:35:29 +0000 (UTC) Received: from msrv.matik.com.br (localhost.matik.com.br [127.0.0.1]) by msrv.matik.com.br (8.14.3/8.14.2) with ESMTP id o31DZQsH056807; Thu, 1 Apr 2010 10:35:27 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.95.3 at msrv.matik.com.br DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=matik.com.br; s=racoon; t=1270128927; bh=VyGHZWwCiZFAeWswkQ07hZM/6NhRhuP33cXCxQXrvWg=; h=Message-ID:In-Reply-To:References:Date:Subject:From:To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding; b=Mhp5x2RvwDyq5C+we/gHWUKfBOeBWpICMDkrWLg1VFdHd8dLR/f1M3uZ5dld7zIu4 UqSS3LkJzMeWC9FhnEIXaf8m04AIdnED16hQih7BeIuC9bTCIPM5aNPQm6IhQhDxqH nraQAPESimJ7uxqHR8yOG4K0z+kbnaJHrs3Ry7v0= DomainKey-Signature: a=rsa-sha1; s=default; d=matik.com.br; c=nofws; q=dns; h=received:x-authentication-warning:received:message-id: in-reply-to:references:date:subject:from:to:cc:user-agent:mime-version: content-type:content-transfer-encoding:x-priority:importance; b=aD4CxebD6L961gVb4o8KRL5eJ+gpZd7850qz9VoWc502473jJ4p2D9a+wvw6XDwUm QeJJWyKtvxbSulcvi9SgdwavCnOB+Bl9suD0pXBAGQswIP5gJkYmN51P8sLQd/7hCwL patIDdN0y77ck0XihWSt9vF9keWGBPoGSaKHI+s= Received: (from www@localhost) by msrv.matik.com.br (8.14.3/8.14.3/Submit) id o31DZL4a056802; Thu, 1 Apr 2010 10:35:21 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Authentication-Warning: msrv.matik.com.br: www set sender to asstec@matik.com.br using -f Received: from 187.42.223.24 (SquirrelMail authenticated user asstec) by wm.matik.com.br with HTTP; Thu, 1 Apr 2010 10:35:21 -0300 Message-ID: <0f5adead3d79b18f822d224fd08785d0.squirrel@wm.matik.com.br> In-Reply-To: <20100401125929.GA66321@onelab2.iet.unipi.it> References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> <20100331170221.GB55010@onelab2.iet.unipi.it> <20100401002014.GA57424@onelab2.iet.unipi.it> <20100401125929.GA66321@onelab2.iet.unipi.it> Date: Thu, 1 Apr 2010 10:35:21 -0300 From: "Ass.Tec. Matik" To: "Luigi Rizzo" User-Agent: SquirrelMail/1.4.20 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: freebsd-ipfw@freebsd.org, "Ass.Tec. Matik" Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Apr 2010 13:35:30 -0000 > On Thu, Apr 01, 2010 at 04:50:45AM -0300, Ass.Tec. Matik wrote: >> >> seems to be some more confusion >> >> >> 00002 rule >> ..... other rules >> 01000 rule >> ..... other rules >> 00100 allow ip from any to any via lo0 >> 00000 ip from any to any >> >> >> the last as I said in my former msg but the #00100 is listed at the end, not >> at it's correct sorted position, seems sticks to _when_ added > > i fixed this problem (which is related to all the reports > you are posting) tuesday night in svn 205953. great! > By chance are you still running an older kernel ? > no, buildworld and make kernel by the book :) Joćo Martins Eng.Resp.Helpdesk e Suporte Matik https://suporte.matik.com.br From owner-freebsd-ipfw@FreeBSD.ORG Thu Apr 1 13:42:54 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 382D4106564A for ; Thu, 1 Apr 2010 13:42:54 +0000 (UTC) (envelope-from asstec@matik.com.br) Received: from msrv.matik.com.br (msrv.matik.com.br [200.153.48.3]) by mx1.freebsd.org (Postfix) with ESMTP id 84BCD8FC14 for ; Thu, 1 Apr 2010 13:42:52 +0000 (UTC) Received: from msrv.matik.com.br (localhost.matik.com.br [127.0.0.1]) by msrv.matik.com.br (8.14.3/8.14.2) with ESMTP id o31Dgpjs057349; Thu, 1 Apr 2010 10:42:51 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.95.3 at msrv.matik.com.br DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=matik.com.br; s=racoon; t=1270129371; bh=lqRjOC1tZDW38DlGqXN9X3WdYDN6y3BgG3TuU1u70MM=; h=Message-ID:In-Reply-To:References:Date:Subject:From:To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding; b=Qg1mRuHttNGHSCBeWaugMuFw0eE4ekysWhpjtufkXakNbhEftANfn2yHtYOriMz7S wTMxLD8v3ZBHHBu4jBZixoD4VdgJo9btmLTIcuS4tTPy5O2B1RXluFqDQjXAkZm916 FNn6BJWDLwGh/cNyiT9x82LBmnfikOPX8xmiNJXI= DomainKey-Signature: a=rsa-sha1; s=default; d=matik.com.br; c=nofws; q=dns; h=received:x-authentication-warning:received:message-id: in-reply-to:references:date:subject:from:to:cc:user-agent:mime-version: content-type:content-transfer-encoding:x-priority:importance; b=pOIGTzI8f3ufbMYF2TT7tvJmtguMboPBzmh0f5yrf/JGH3C4b3WDvPhzxLyH1wSMy 6duZLVC8UenX75PTBBFtbL/6OC19SUetodJH17zvHmrI8lBGQRETC6gXZMDMidD7Pvw I/+K5IRCXzOk6khXgMqZ8CmAx3MufdtX2jc8RYg= Received: (from www@localhost) by msrv.matik.com.br (8.14.3/8.14.3/Submit) id o31Dgk2D057344; Thu, 1 Apr 2010 10:42:46 -0300 (BRT) (envelope-from asstec@matik.com.br) X-Authentication-Warning: msrv.matik.com.br: www set sender to asstec@matik.com.br using -f Received: from 187.42.223.24 (SquirrelMail authenticated user asstec) by wm.matik.com.br with HTTP; Thu, 1 Apr 2010 10:42:46 -0300 Message-ID: In-Reply-To: <20100401125929.GA66321@onelab2.iet.unipi.it> References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> <20100331170221.GB55010@onelab2.iet.unipi.it> <20100401002014.GA57424@onelab2.iet.unipi.it> <20100401125929.GA66321@onelab2.iet.unipi.it> Date: Thu, 1 Apr 2010 10:42:46 -0300 From: "Ass.Tec. Matik" To: "Luigi Rizzo" User-Agent: SquirrelMail/1.4.20 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: freebsd-ipfw@freebsd.org Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Apr 2010 13:42:54 -0000 > On Thu, Apr 01, 2010 at 04:50:45AM -0300, Ass.Tec. Matik wrote: >> >> seems to be some more confusion >> >> >> 00002 rule >> ..... other rules >> 01000 rule >> ..... other rules >> 00100 allow ip from any to any via lo0 >> 00000 ip from any to any >> >> >> the last as I said in my former msg but the #00100 is listed at the end, not >> at it's correct sorted position, seems sticks to _when_ added > > i fixed this problem (which is related to all the reports > you are posting) tuesday night in svn 205953. > By chance are you still running an older kernel ? > like I said in the former msg but wait a second, tuesday? ... I cvsupped mar 31 9000GMZ and got all three ipfw related patches I think and the following build caused the problem, before I was running src/world&kernel build from fev 21st, this night i cvsup again and build ipfw and kernel, no change this is BRT (GMZ-300) 8.0-STABLE amd64 (Kernel 800504) last Kernel build : 1-Abr 03:56 date World/BINs : 31-Mar 10:19 last cvsup: 1-Abr 03:11 Joćo Martins Eng.Resp.Helpdesk e Suporte Matik https://suporte.matik.com.br From owner-freebsd-ipfw@FreeBSD.ORG Thu Apr 1 17:41:06 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BE139106566C for ; Thu, 1 Apr 2010 17:41:06 +0000 (UTC) (envelope-from raffaele.delorenzo@libero.it) Received: from cp-out10.libero.it (cp-out10.libero.it [212.52.84.110]) by mx1.freebsd.org (Postfix) with ESMTP id 53C8A8FC12 for ; Thu, 1 Apr 2010 17:41:05 +0000 (UTC) Received: from [10.0.0.2] (151.49.6.138) by cp-out10.libero.it (8.5.119) (authenticated as raffaele.delorenzo@libero.it) id 4BB3222A003AC750; Thu, 1 Apr 2010 19:39:45 +0200 Mime-Version: 1.0 (Apple Message framework v1078) Content-Type: text/plain; charset=iso-8859-1 From: Raffaele De Lorenzo X-Priority: 3 (Normal) In-Reply-To: <7954ee2f74cfef07381b0745ff272c90.squirrel@wm.matik.com.br> Date: Thu, 1 Apr 2010 19:39:30 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: <4BB24C86.3030709@hardonline.com.br> <20100331020943.GA47928@onelab2.iet.unipi.it> <20100331164302.GA55699@korolev-net.ru> <20100331170221.GB55010@onelab2.iet.unipi.it> <7954ee2f74cfef07381b0745ff272c90.squirrel@wm.matik.com.br> To: Ass.Tec. Matik X-Mailer: Apple Mail (2.1078) Cc: freebsd-ipfw@freebsd.org, Luigi Rizzo Subject: Re: ipfw error in last stable version freebsd 8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Apr 2010 17:41:06 -0000 All critics and suggestions are good to talk in mailing lists, but = excessive sarcasm is not good, especially if you are talking to Luigi. Luigi developed a very large part of the FreeBSD kernel, his contribute = is essential for a lot of FreeBSD projects. Programming without bugs is impossible, but programming in a very good = style and criteria is a must for Luigi. FreeBSD is a wonderful world... without FreeBSD MacOS X won't exist! Raffaele=20 On 01/apr/2010, at 00.22, Ass.Tec. Matik wrote: >=20 > well guys >=20 >=20 > 00002 rule > 00003 rule > ... > 01215 rule > ... > 19000 rule > ... > and so on > and then the closing one (my wild guess) shouldn't that be 65000 = instead of > 00000 and also missing action right, molto chianti Luigi? :) >=20 > 00000 ip from any to any >=20 >=20 >=20 >=20 > Jo=E3o Martins > Eng.Resp.Helpdesk e Suporte Matik > https://suporte.matik.com.br > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to = "freebsd-ipfw-unsubscribe@freebsd.org" From owner-freebsd-ipfw@FreeBSD.ORG Sat Apr 3 07:57:21 2010 Return-Path: Delivered-To: freebsd-ipfw@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CB9BD106566B; Sat, 3 Apr 2010 07:57:21 +0000 (UTC) (envelope-from remko@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id A28FE8FC1A; Sat, 3 Apr 2010 07:57:21 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id o337vL9C006802; Sat, 3 Apr 2010 07:57:21 GMT (envelope-from remko@freefall.freebsd.org) Received: (from remko@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id o337vLRv006798; Sat, 3 Apr 2010 07:57:21 GMT (envelope-from remko) Date: Sat, 3 Apr 2010 07:57:21 GMT Message-Id: <201004030757.o337vLRv006798@freefall.freebsd.org> To: remko@FreeBSD.org, freebsd-bugs@FreeBSD.org, freebsd-ipfw@FreeBSD.org From: remko@FreeBSD.org Cc: Subject: Re: kern/145305: ipfw problems, panics, data corruption, ipv6 socket weirdness X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Apr 2010 07:57:21 -0000 Synopsis: ipfw problems, panics, data corruption, ipv6 socket weirdness Responsible-Changed-From-To: freebsd-bugs->freebsd-ipfw Responsible-Changed-By: remko Responsible-Changed-When: Sat Apr 3 07:57:03 UTC 2010 Responsible-Changed-Why: reassign to ipfw team http://www.freebsd.org/cgi/query-pr.cgi?pr=145305