From owner-freebsd-ipfw@FreeBSD.ORG Mon Apr 19 11:07:01 2010 Return-Path: Delivered-To: freebsd-ipfw@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CEC6E106564A for ; Mon, 19 Apr 2010 11:07:01 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id BD0CA8FC2C for ; Mon, 19 Apr 2010 11:07:01 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id o3JB71dX034132 for ; Mon, 19 Apr 2010 11:07:01 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id o3JB71FU034130 for freebsd-ipfw@FreeBSD.org; Mon, 19 Apr 2010 11:07:01 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 19 Apr 2010 11:07:01 GMT Message-Id: <201004191107.o3JB71FU034130@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: freebsd-ipfw@FreeBSD.org Cc: Subject: Current problem reports assigned to freebsd-ipfw@FreeBSD.org X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Apr 2010 11:07:01 -0000 Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker Resp. Description -------------------------------------------------------------------------------- o kern/145733 ipfw [ipfw] [patch] ipfw flaws with ipv6 fragments o kern/145305 ipfw [ipfw] ipfw problems, panics, data corruption, ipv6 so o kern/145167 ipfw [ipfw] ipfw nat does not follow its documentation o kern/144869 ipfw [ipfw] [panic] Instant kernel panic when adding NAT ru o kern/144269 ipfw [ipfw] problem with ipfw tables o kern/144187 ipfw [ipfw] deadlock using multiple ipfw nat and multiple l o kern/143973 ipfw [ipfw] [panic] ipfw forward option causes kernel reboo o kern/143653 ipfw [ipfw] [patch] ipfw nat redirect_port "buf is too smal o kern/143621 ipfw [ipfw] [dummynet] [patch] dummynet and vnet use result o kern/143474 ipfw [ipfw] ipfw table contains the same address o kern/139581 ipfw [ipfw] "ipfw pipe" not limiting bandwidth o kern/139226 ipfw [ipfw] install_state: entry already present, done o kern/137346 ipfw [ipfw] ipfw nat redirect_proto is broken o kern/137232 ipfw [ipfw] parser troubles o kern/136695 ipfw [ipfw] [patch] fwd reached after skipto in dynamic rul o kern/135476 ipfw [ipfw] IPFW table breaks after adding a large number o o bin/134975 ipfw [patch] ipfw(8) can't work with set in rule file. o kern/132553 ipfw [ipfw] ipfw doesn't understand ftp-data port o kern/131817 ipfw [ipfw] blocks layer2 packets that should not be blocke o kern/131601 ipfw [ipfw] [panic] 7-STABLE panic in nat_finalise (tcp=0) o kern/131558 ipfw [ipfw] Inconsistent "via" ipfw behavior o bin/130132 ipfw [patch] ipfw(8): no way to get mask from ipfw pipe sho o kern/129103 ipfw [ipfw] IPFW check state does not work =( o kern/129093 ipfw [ipfw] ipfw nat must not drop packets o kern/129036 ipfw [ipfw] 'ipfw fwd' does not change outgoing interface n o kern/128260 ipfw [ipfw] [patch] ipfw_divert damages IPv6 packets o kern/127230 ipfw [ipfw] [patch] Feature request to add UID and/or GID l o kern/127209 ipfw [ipfw] IPFW table become corrupted after many changes o bin/125370 ipfw [ipfw] [patch] increase a line buffer limit o conf/123119 ipfw [patch] rc script for ipfw does not handle IPv6 o kern/122963 ipfw [ipfw] tcpdump does not show packets redirected by 'ip s kern/121807 ipfw [request] TCP and UDP port_table in ipfw o kern/121382 ipfw [dummynet]: 6.3-RELEASE-p1 page fault in dummynet (cor o kern/121122 ipfw [ipfw] [patch] add support to ToS IP PRECEDENCE fields o kern/118993 ipfw [ipfw] page fault - probably it's a locking problem o bin/117214 ipfw ipfw(8) fwd with IPv6 treats input as IPv4 o kern/116009 ipfw [ipfw] [patch] Ignore errors when loading ruleset from o docs/113803 ipfw [patch] ipfw(8) - don't get bitten by the fwd rule p kern/113388 ipfw [ipfw] [patch] Addition actions with rules within spec o kern/112561 ipfw [ipfw] ipfw fwd does not work with some TCP packets o kern/105330 ipfw [ipfw] [patch] ipfw (dummynet) does not allow to set q o bin/104921 ipfw [patch] ipfw(8) sometimes treats ipv6 input as ipv4 (a o kern/104682 ipfw [ipfw] [patch] Some minor language consistency fixes a o kern/103454 ipfw [ipfw] [patch] [request] add a facility to modify DF b o kern/103328 ipfw [ipfw] [request] sugestions about ipfw table o kern/102471 ipfw [ipfw] [patch] add tos and dscp support o kern/98831 ipfw [ipfw] ipfw has UDP hickups o kern/97951 ipfw [ipfw] [patch] ipfw does not tie interface details to o kern/97504 ipfw [ipfw] IPFW Rules bug o kern/95084 ipfw [ipfw] [regression] [patch] IPFW2 ignores "recv/xmit/v o kern/93300 ipfw [ipfw] ipfw pipe lost packets o kern/91847 ipfw [ipfw] ipfw with vlanX as the device o kern/88659 ipfw [modules] ipfw and ip6fw do not work properly as modul o kern/87032 ipfw [ipfw] [patch] ipfw ioctl interface implementation o kern/86957 ipfw [ipfw] [patch] ipfw mac logging o bin/83046 ipfw [ipfw] ipfw2 error: "setup" is allowed for icmp, but s o kern/82724 ipfw [ipfw] [patch] [request] Add setnexthop and defaultrou s kern/80642 ipfw [ipfw] [patch] ipfw small patch - new RULE OPTION o bin/78785 ipfw [patch] ipfw(8) verbosity locks machine if /etc/rc.fir o kern/74104 ipfw [ipfw] ipfw2/1 conflict not detected or reported, manp o kern/73910 ipfw [ipfw] serious bug on forwarding of packets after NAT o kern/72987 ipfw [ipfw] ipfw/dummynet pipe/queue 'queue [BYTES]KBytes ( o kern/71366 ipfw [ipfw] "ipfw fwd" sometimes rewrites destination mac a o kern/69963 ipfw [ipfw] install_state warning about already existing en o kern/60719 ipfw [ipfw] Headerless fragments generate cryptic error mes o kern/55984 ipfw [ipfw] [patch] time based firewalling support for ipfw o kern/51274 ipfw [ipfw] [patch] ipfw2 create dynamic rules with parent o kern/48172 ipfw [ipfw] [patch] ipfw does not log size and flags o kern/46159 ipfw [ipfw] [patch] [request] ipfw dynamic rules lifetime f a kern/26534 ipfw [ipfw] Add an option to ipfw to log gid/uid of who cau 70 problems total. From owner-freebsd-ipfw@FreeBSD.ORG Thu Apr 22 08:25:00 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 134FC106566C for ; Thu, 22 Apr 2010 08:25:00 +0000 (UTC) (envelope-from ose11rose@gmail.com) Received: from avas4.indosat.net.id (avas4.indosat.net.id [202.155.90.5]) by mx1.freebsd.org (Postfix) with ESMTP id 254088FC1F for ; Thu, 22 Apr 2010 08:24:58 +0000 (UTC) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AtUGAAekz0tyOjSk/2dsb2JhbACBP4tYA4MHgQ+KcWMOrBoKiCUuiFKCeoIUBIMyiRI X-IronPort-AV: E=Sophos;i="4.52,255,1270400400"; d="scan'208,217";a="35617963" Received: from unknown (HELO BION11) ([114.58.52.164]) by avas3.indosat.net.id with ESMTP; 22 Apr 2010 15:13:06 +0700 MIME-Version: 1.0 From: "Absensi terbaik di Indonesia hanya 1,3 jt" To: freebsd-ipfw@freebsd.org X-Mailer: SendBlaster.1.6.0 Date: Thu, 22 Apr 2010 15:24:59 +0700 Message-ID: <3464696052802538624760@BION-11> Content-Type: text/plain Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: LUAR BIASA!!! ABSENSI SIDIK JARI HANYA 1, 3 JUTA => LIFETIME WARANTY X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: ose11rose@yahoo.com List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Apr 2010 08:25:00 -0000 =B7 ABSENSI SIDIK JARI TERBAIK DI INDONESIA =B7 Penyedia Solusi Pengamanan Sistem, Aplikasi dan Data Perusahaan Me= nggunakan Teknologi Sidik Jari Pertama di Indonesia (lebih aman daripada me= nggunakan password,unique ID,encryption,dll) Hanya 1,3JT GARANSI SPARE PART 3 TAHUN GARANSI SERVICE LIFETIME TINGGALKAN ABSENSI MANUAL ANDA BERALIHLAH MENGGUNAKAN ABSENSI SIDIK JARI Hub : Rosnita Fingerspot (021) 93229090/ (021) 62202861 Please visit us @ www.fingerspot .com PT BiomeTrik Citra Solusi From owner-freebsd-ipfw@FreeBSD.ORG Fri Apr 23 16:47:34 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 632CC1065670 for ; Fri, 23 Apr 2010 16:47:34 +0000 (UTC) (envelope-from dan@dan.emsphone.com) Received: from email1.allantgroup.com (email1.emsphone.com [199.67.51.115]) by mx1.freebsd.org (Postfix) with ESMTP id 2B4B68FC18 for ; Fri, 23 Apr 2010 16:47:33 +0000 (UTC) Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101]) by email1.allantgroup.com (8.14.0/8.14.0) with ESMTP id o3NGdRE5048960 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Fri, 23 Apr 2010 11:39:27 -0500 (CDT) (envelope-from dan@dan.emsphone.com) Received: from dan.emsphone.com (smmsp@localhost [127.0.0.1]) by dan.emsphone.com (8.14.4/8.14.3) with ESMTP id o3NGdQk5056368 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Fri, 23 Apr 2010 11:39:27 -0500 (CDT) (envelope-from dan@dan.emsphone.com) Received: (from dan@localhost) by dan.emsphone.com (8.14.4/8.14.3/Submit) id o3NGdQg9056367 for freebsd-ipfw@freebsd.org; Fri, 23 Apr 2010 11:39:26 -0500 (CDT) (envelope-from dan) Date: Fri, 23 Apr 2010 11:39:26 -0500 From: Dan Nelson To: freebsd-ipfw@freebsd.org Message-ID: <20100423163926.GD14572@dan.emsphone.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-OS: FreeBSD 8.0-STABLE User-Agent: Mutt/1.5.20 (2009-06-14) X-Virus-Scanned: clamav-milter 0.96 at email1.allantgroup.com X-Virus-Status: Clean X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.0.2 (email1.allantgroup.com [199.67.51.78]); Fri, 23 Apr 2010 11:39:27 -0500 (CDT) X-Scanned-By: MIMEDefang 2.45 Subject: cdpd/ladvd panic after r205511 MFC X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Apr 2010 16:47:34 -0000 I recently upgraded my 8-stable i386 kernel, and ladvd caused a panic during bootup. ladvd is a deamon that sends out switch discovery frames via /dev/bpf . Switching to cdpd (another program like ladvd) results in the same panic. I traced it down to the ipfw MFC on 2010-03-23 (rev r205511). Unfortunately, all my crash dumps give garbage stack traces so the only info I have is the trap log and a DDB backtrace. I can generate more crashdumps if they are needed for debugging. It's reproducable on a GENERIC kernel by loading ipfw, ensuring that all traffic is allowed, and starting up either ladvd or cdpd from ports. Fatal trap 12: page fault while in kernel mode cpuid = 2; apic id = 02 fault virtual address = 0x0 fault code = supervisor read, page not present instruction pointer = 0x20:0x808a17f4 stack pointer = 0x28:0xe1526b58 frame pointer = 0x28:0xe1526bb8 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 2967 (ladvd) db:0:kdb.enter.default> show pcpu cpuid = 3 dynamic pcpu = 0x5f60600 curthread = 0x8c71b4a0: pid 2967 "ladvd" curpcb = 0xe1526d90 fpcurthread = none idlethread = 0x86d5e940: pid 11 "idle: cpu3" APIC ID = 3 currentldt = 0x50 spin locks held: db:0:kdb.enter.default> bt Tracing pid 2967 tid 100264 td 0x8c71b4a0 bcmp(86ea5d00,e1526c58,0,0,0,...) at bcmp+0x14 devfs_write_f(8eb588c0,e1526c58,86d5a100,0,8c71b4a0,...) at devfs_write_f+0xc1 dofilewrite(e1526c58,ffffffff,ffffffff,0,8eb588c0,...) at dofilewrite+0x95 kern_writev(8c71b4a0,a,e1526c58,e1526c78,1,...) at kern_writev+0x58 write(8c71b4a0,e1526cf8,80954c4b,8093722a,8eb0a550,...) at write+0x4f syscall(e1526d38) at syscall+0x260 Xint0x80_syscall() at Xint0x80_syscall+0x20 --- syscall (4, FreeBSD ELF32, write), eip = 0x281a7543, esp = 0x7fbfe42c, ebp = 0x7fbfe478 --- -- Dan Nelson dnelson@allantgroup.com