From owner-freebsd-pf@FreeBSD.ORG Mon Dec 24 11:07:03 2007 Return-Path: Delivered-To: freebsd-pf@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5303E16A4A1 for ; Mon, 24 Dec 2007 11:07:03 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 3740413C4D9 for ; Mon, 24 Dec 2007 11:07:03 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id lBOB732o032019 for ; Mon, 24 Dec 2007 11:07:03 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id lBOB723X032015 for freebsd-pf@FreeBSD.org; Mon, 24 Dec 2007 11:07:02 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 24 Dec 2007 11:07:02 GMT Message-Id: <200712241107.lBOB723X032015@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: freebsd-pf@FreeBSD.org Cc: Subject: Current problem reports assigned to freebsd-pf@FreeBSD.org X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Dec 2007 11:07:03 -0000 Current FreeBSD problem reports Critical problems S Tracker Resp. Description -------------------------------------------------------------------------------- o kern/111220 pf [pf] repeatable hangs while manipulating pf tables 1 problem total. Serious problems S Tracker Resp. Description -------------------------------------------------------------------------------- o kern/82271 pf [pf] cbq scheduler cause bad latency o kern/92949 pf [pf] PF + ALTQ problems with latency o kern/110698 pf [pf] nat rule of pf without "on" clause causes invalid o bin/116610 pf [patch] teach tcpdump(1) to cope with the new-style pf o kern/117827 pf [pf] kernel panic with pf and ng 5 problems total. Non-critical problems S Tracker Resp. Description -------------------------------------------------------------------------------- o sparc/93530 pf [pf] Incorrect checksums when using pf's route-to on s o kern/93825 pf [pf] pf reply-to doesn't work o kern/106400 pf [pf] fatal trap 12 at restart of PF with ALTQ if ng0 d s conf/110838 pf tagged parameter on nat not working on FreeBSD 5.2 o kern/114095 pf [carp] carp+pf delay with high state limit o kern/114567 pf [pf] LOR pf_ioctl.c + if.c f kern/116645 pf [RFE] pfctl -k does not work in securelevel 3 o kern/118355 pf [pf] [patch] pfctl help message options order false -t 8 problems total. From owner-freebsd-pf@FreeBSD.ORG Tue Dec 25 13:56:29 2007 Return-Path: Delivered-To: freebsd-pf@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B670216A419; Tue, 25 Dec 2007 13:56:29 +0000 (UTC) (envelope-from kris@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id A1F9F13C465; Tue, 25 Dec 2007 13:56:29 +0000 (UTC) (envelope-from kris@FreeBSD.org) Received: from freefall.freebsd.org (kris@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id lBPDuTg2091062; Tue, 25 Dec 2007 13:56:29 GMT (envelope-from kris@freefall.freebsd.org) Received: (from kris@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id lBPDuTo8091058; Tue, 25 Dec 2007 13:56:29 GMT (envelope-from kris) Date: Tue, 25 Dec 2007 13:56:29 GMT Message-Id: <200712251356.lBPDuTo8091058@freefall.freebsd.org> To: dimanenator@gmail.com, kris@FreeBSD.org, freebsd-pf@FreeBSD.org From: kris@FreeBSD.org Cc: Subject: Re: kern/117827: [pf] kernel panic with pf and ng X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Dec 2007 13:56:29 -0000 Synopsis: [pf] kernel panic with pf and ng State-Changed-From-To: open->feedback State-Changed-By: kris State-Changed-When: Tue Dec 25 13:55:43 UTC 2007 State-Changed-Why: Awaiting user response with necessary debugging information http://www.freebsd.org/cgi/query-pr.cgi?pr=117827 From owner-freebsd-pf@FreeBSD.ORG Thu Dec 27 22:46:17 2007 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D0D8316A468 for ; Thu, 27 Dec 2007 22:46:17 +0000 (UTC) (envelope-from lumiwa@gmail.com) Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.183]) by mx1.freebsd.org (Postfix) with ESMTP id 3CB0113C46B for ; Thu, 27 Dec 2007 22:46:17 +0000 (UTC) (envelope-from lumiwa@gmail.com) Received: by py-out-1112.google.com with SMTP id u77so5870788pyb.3 for ; Thu, 27 Dec 2007 14:46:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:from:to:subject:date:user-agent:mime-version:content-type:message-id; bh=J+VCvcNQyaIhqsCyyBgEhhNEG569N6VgIIXU7G9EWGw=; b=K152hk4PlXQ9aa3l4M6xIRFrJCIAEk8KUGV+rkCvFvlIW/6F+eAbfhsSZp+D0FpnPe41Ebpo9qq3nr2jPIS8t4fiUIm5V7U9OjuphQ7REiqZ8GuQhOpHICqGnNe00fB/AhM/1CSC42iYse5ZTOZJWmNBUmmUVuwOAHYDHzSmE/A= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:to:subject:date:user-agent:mime-version:content-type:message-id; b=F6++WzmWNI0MQa+6/6gAjgJxDZJkOiPU5qTKUo2ozI+UPEAYjmJLPgx6r/RZszfhytkPfzaZjqbJ7o5vJywKbA7vIMGWjZ1lV3TbIUs53gGNuWXE72SSMsQ1qN/9tFy2DznYrGtvYMpVpnZ9oN2kiI0S869dqXxIbV12W3+ikow= Received: by 10.64.53.20 with SMTP id b20mr16330192qba.40.1198793976963; Thu, 27 Dec 2007 14:19:36 -0800 (PST) Received: from ?192.168.0.100? ( [65.30.212.174]) by mx.google.com with ESMTPS id i5sm7448357nzi.21.2007.12.27.14.19.34 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 27 Dec 2007 14:19:35 -0800 (PST) From: aJTiM To: freebsd-pf@freebsd.org Date: Thu, 27 Dec 2007 16:19:24 -0600 User-Agent: KMail/1.9.7 MIME-Version: 1.0 Content-Type: Multipart/Mixed; boundary="Boundary-00=_sTCdHJLaIUyRkRs" Message-Id: <200712271619.24487.lumiwa@gmail.com> X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: log.xml X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Dec 2007 22:46:17 -0000 --Boundary-00=_sTCdHJLaIUyRkRs Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Content-Disposition: inline I have FreeBSD 7.0 beta 4 on the standalone computer connected to the Internet with cable modem. I setup a pf.conf and it looks that works okay but in my pflog (I am running pfxlog) I have all the time less or more the same (please look at attached file). pf.conf looks like: # Macros ext_if="sk0" # Optimization set optimization normal set block-policy drop set loginterface $ext_if set skip on lo0 # NOrmalization scrub in all # Filtering antispoof quick for $ext_if # Closed from outside block in log quick on $ext_if all label "inblock" # Open to out pass out on $ext_if inet proto tcp all flags S/SA modulate state pass out on $ext_if inet proto udp all keep state # ping out pass out on $ext_if inet proto icmp all icmp-type 8 code 0 keep state Mitja -- Chemist who falls in acid is absorbed in work. --Boundary-00=_sTCdHJLaIUyRkRs--