From owner-freebsd-ipfw@freebsd.org Sun Sep 22 13:48:08 2019 Return-Path: Delivered-To: freebsd-ipfw@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id E5037122C62 for ; Sun, 22 Sep 2019 13:48:08 +0000 (UTC) (envelope-from ohartmann@walstatt.org) Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.gmx.net", Issuer "TeleSec ServerPass Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 46bpgW49S2z3K2N for ; Sun, 22 Sep 2019 13:48:07 +0000 (UTC) (envelope-from ohartmann@walstatt.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1569160078; bh=zu/YygsYtjPXUxrpBGHd9Ri7yeFez3EL6RryKt7atQw=; h=X-UI-Sender-Class:Date:From:To:Subject; b=drLudrPGs3+69loyrpH6JTh9MpoBO8rpfZeErGdv53HfFfgS4kwNnxIGeqEzH8M57 RX57KyucBCFI4CwZe6Xe/LrQD7JGQO1ioyBsQ3YJ8OXnaXBdyVmuBNBsfjAzBF5zYY 9wb21M/tJPugoa/UXpGLkSND7pFOnIQ9EDd6BDlc= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from hermann.fritz.box ([91.64.229.219]) by mail.gmx.com (mrgmx005 [212.227.17.190]) with ESMTPSA (Nemesis) id 1MIx3I-1iVCbv49DW-00KMq2 for ; Sun, 22 Sep 2019 15:42:38 +0200 Date: Sun, 22 Sep 2019 15:42:26 +0200 From: "Hartmann, O." To: freebsd-ipfw@freebsd.org Subject: FIB: still limited to 16 FIBs (setfib)? Message-ID: <20190922154226.38729ac5@hermann.fritz.box> Organization: walstatt.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; boundary="Sig_/z//OgzndA2lO8S/lDRucoto"; protocol="application/pgp-signature" X-Provags-ID: V03:K1:ak62a7y7F6D04sBYE8W5mYy8rb4oai3mFVLRfG/YughMEEMLvP+ sYBgVBcrWf8G/NAc9QD0qKuKNeeiWHmCmmD4uLjxBWJtjDJC/hivGSfhx/l8d1k1LKPHcc8 r7k7AC8I+sp1vC3KjDHrJ9S4qUCqvBsfN8/BHflLkTujmmFPNeSai2LOOY1ByX5GAw23ZF1 2HzX6VQXDcDQUxq+3MCFw== X-Spam-Flag: NO X-UI-Out-Filterresults: notjunk:1;V03:K0:WEtihZHD5Vc=:QB+ih6B2A9Epo56yWWhGMj G82d4Ctoakc9TRRyR+jJyrYl/avsdh0EaQTcuF8R4gPuyn+RNF3WQ3IpwTvKNjQx5P/9WQKkx hB5mkFixGIgp9QQ+0fL7q3yQ0r9SbmQTDeNT5R2EJADCadIIxFbFNcf1rI54wYSD+40yk01O5 Kr9LZDEVqAgBGK6GyP5rujDUqiAp5pU9mu5qfxZg6dKb/pP2orlbNrwY0uic34KKLLoX2+fec s7h3Z+8dF4TdGouET3ekoBwMzI/nnRMGQ82Q7+rOLt9OqbQLSc1paE+lT1wndz+f424J9rMW7 I81pCffFB4UI0XNxcMUbxdnNhW2rETb9XYUx+YZb6+SvDUag/zeU5J7nKwG42TPsmd17hUVe3 rDjC0PsqBmRVoN7VnMBFTRkMFD88GYwOqhsFO6YgNU2t9s387hrW2Icoi8DnTQ5OvPcwcFVIF NPeg6k7p4R5/5RG+KTLkzDtloWV47JzP19qhwaCDMuQrVxkLOOkjaNrI3/kUBgyyC3FUXp0lU /nqziMYMsNEkd9oF3zW7PwvyDa3zkpYVjf1+BbU/y5MKWYKlQWeRK129pJUfjhFNB5X20Wbkd lqWEbYmFExPm9NN669O4s8wv7k4mCqtRI68Zk1z94KX0TnUSdmc3f1vnOWPQSXWD4LDQPqTlg 4B0awXaYDDIYR0wU7HtZpA7VEty6hJetONXOIX+eHUqWm0KC9R3k6rmHqGip0JcyHxtvoGbuH HRLvTrBlA2zCA6zx9WTnxY945i/l14rVD+wDHQqcmbkX+apfq5pEE3QTSqcB97pk6fwCiF9cQ eAzIfC+l66WZGarrT5scioc1F6TdTNRRstBC7CivealtQP3ZgxJeS6Vnef1piKAwGE97N43Qh Q/cjuvZHg3zJ9PKTdkFVU3aUiGAJznWdQxkxY16alV/zxKkqEb8lDm1wIPU0JFuVvKuBybcvz upXmpUe9RdFYk9Q4NGXKRmHMVU4tdKzjWNPYHrD8saH85jB5vOD1StKTnQiZNShO1vHH1ekZM Sn+s4akei0yjdGE3l3bFnOMwNYhvei86dcO/csodlpFkk20ImM64DU6FMNQ4CLqguNNUcU2pn hySRKeYpQTjVlAASsQzYaIX/K2K4nVOT6U4E02pcnSOYt1ZC2l3gJsATUe+i7wCx8jwO2DWLm 1JgvYITMlfpTyM51oECn631dIEHtSboOSbJGjr54ZmvavFUITOWR1S21hB5OrYVNbHkVHLwDl aKkyH3MBjIQqCQA9qcTsF8gSMR2xez0UZPaCS+UIAwmSd2/Ouy3Krcjeg+BE= X-Rspamd-Queue-Id: 46bpgW49S2z3K2N X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmx.net header.s=badeba3b8450 header.b=drLudrPG; dmarc=none; spf=none (mx1.freebsd.org: domain of ohartmann@walstatt.org has no SPF policy when checking 212.227.15.19) smtp.mailfrom=ohartmann@walstatt.org X-Spamd-Result: default: False [-4.57 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[gmx.net:s=badeba3b8450]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; IP_SCORE(-1.17)[ip: (-6.61), ipnet: 212.227.0.0/16(-1.36), asn: 8560(2.13), country: DE(-0.01)]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-ipfw@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; HAS_ORG_HEADER(0.00)[]; DMARC_NA(0.00)[walstatt.org]; DKIM_TRACE(0.00)[gmx.net:+]; RCVD_IN_DNSWL_NONE(0.00)[19.15.227.212.list.dnswl.org : 127.0.3.0]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_SPF_NA(0.00)[]; SIGNED_PGP(-2.00)[]; RECEIVED_SPAMHAUS_PBL(0.00)[219.229.64.91.khpj7ygk5idzvmvt5x4ziurxhy.zen.dq.spamhaus.net : 127.0.0.11]; SUBJECT_ENDS_QUESTION(1.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; ASN(0.00)[asn:8560, ipnet:212.227.0.0/16, country:DE]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; FROM_EQ_ENVFROM(0.00)[] X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Sep 2019 13:48:09 -0000 --Sig_/z//OgzndA2lO8S/lDRucoto Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable In the recent documentation as of FreeBSD CURRENT (FreeBSD-13), the manpage of ipfw(8) states at section designated "RULE ACTION", paragraph "setfib" that the current implementation of setfib is limited to 0 - 15 FIBs and the manpage of ipfw(8) refers to setfib(2) at that point. Checking setfib(2), the manpage states (N is the max number of predefined FIBs used by the kernel and configured via OID net.fibs=3D"N" and set via /boot/loader.conf[.local] or as a kernel config option): "... where N is an integer. This maximum is capped at 65536 due to the implementation storing the fib number in a 16-bit field in the mbuf(9) packet header, ..." I can not extract the limitation of N <=3D 16 (resulting in 0 - 15 FIBs) by that reference. Either there is a "bug" in the manpage and refering to an outdated FIB implementation, or ipfw is indeed incapable of handling larger amounts of FIBs. Can someone shed some light on this? Thanks. Kind regards, oh --Sig_/z//OgzndA2lO8S/lDRucoto Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQSy8IBxAPDkqVBaTJ44N1ZZPba5RwUCXYd6QwAKCRA4N1ZZPba5 R4XQAP0a8FDDV5w4xUhhvSDZcVWhm9kI7agR7SVAXJJUgtqg4gEA+VLQPVMKEDfZ zKAXECMwtf/WShkxJzDLsGNXM3BOPAE= =plu3 -----END PGP SIGNATURE----- --Sig_/z//OgzndA2lO8S/lDRucoto-- From owner-freebsd-ipfw@freebsd.org Sun Sep 22 21:00:25 2019 Return-Path: Delivered-To: freebsd-ipfw@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 7932712C27C for ; Sun, 22 Sep 2019 21:00:25 +0000 (UTC) (envelope-from bugzilla-noreply@FreeBSD.org) Received: from mailman.nyi.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id 46c0GK1tr2z4Dx3 for ; Sun, 22 Sep 2019 21:00:25 +0000 (UTC) (envelope-from bugzilla-noreply@FreeBSD.org) Received: by mailman.nyi.freebsd.org (Postfix) id 11D3112C26C; Sun, 22 Sep 2019 21:00:25 +0000 (UTC) Delivered-To: ipfw@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 1172312C26B for ; Sun, 22 Sep 2019 21:00:25 +0000 (UTC) (envelope-from bugzilla-noreply@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 46c0GJ5v3mz4Dwq for ; Sun, 22 Sep 2019 21:00:24 +0000 (UTC) (envelope-from bugzilla-noreply@FreeBSD.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id AD83645E0 for ; Sun, 22 Sep 2019 21:00:24 +0000 (UTC) (envelope-from bugzilla-noreply@FreeBSD.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id x8ML0OPM071602 for ; Sun, 22 Sep 2019 21:00:24 GMT (envelope-from bugzilla-noreply@FreeBSD.org) Received: (from bugzilla@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id x8ML0OCB071597 for ipfw@FreeBSD.org; Sun, 22 Sep 2019 21:00:24 GMT (envelope-from bugzilla-noreply@FreeBSD.org) Message-Id: <201909222100.x8ML0OCB071597@kenobi.freebsd.org> X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to bugzilla-noreply@FreeBSD.org using -f From: bugzilla-noreply@FreeBSD.org To: ipfw@FreeBSD.org Subject: Problem reports for ipfw@FreeBSD.org that need special attention Date: Sun, 22 Sep 2019 21:00:24 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Sep 2019 21:00:25 -0000 To view an individual PR, use: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=(Bug Id). The following is a listing of current problems submitted by FreeBSD users, which need special attention. These represent problem reports covering all versions including experimental development code and obsolete releases. Status | Bug Id | Description ------------+-----------+--------------------------------------------------- New | 215875 | [ipfw] ipfw lookup tables do not support mbuf_tag New | 232764 | [ipfw] share/examples/ipfw/change_rules.sh: Suppo 2 problems total for which you should take action. From owner-freebsd-ipfw@freebsd.org Thu Sep 26 22:08:13 2019 Return-Path: Delivered-To: freebsd-ipfw@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 6227D135930 for ; Thu, 26 Sep 2019 22:08:13 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mailman.nyi.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id 46fTZj1xKrz42Zh for ; Thu, 26 Sep 2019 22:08:13 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: by mailman.nyi.freebsd.org (Postfix) id 408E813592F; Thu, 26 Sep 2019 22:08:13 +0000 (UTC) Delivered-To: ipfw@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 3F37313592E for ; Thu, 26 Sep 2019 22:08:13 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 46fTZj0kLTz42Zg for ; Thu, 26 Sep 2019 22:08:13 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id F0AF46FBB for ; Thu, 26 Sep 2019 22:08:12 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id x8QM8CgE093486 for ; Thu, 26 Sep 2019 22:08:12 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id x8QM8CSH093485 for ipfw@FreeBSD.org; Thu, 26 Sep 2019 22:08:12 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: ipfw@FreeBSD.org Subject: [Bug 240650] ipfw(8): Check for IPv4 in add_src() and add_dat, don't assume !IPv6 is IPv4 Date: Thu, 26 Sep 2019 22:08:13 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: bin X-Bugzilla-Version: CURRENT X-Bugzilla-Keywords: patch X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: neel@neelc.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: ipfw@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Sep 2019 22:08:13 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D240650 --- Comment #3 from Neel Chauhan --- https://reviews.freebsd.org/D21812 --=20 You are receiving this mail because: You are the assignee for the bug.=