Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 19 May 2015 08:29:36 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 200320] pfSync causes crashes
Message-ID:  <bug-200320-8@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200320

            Bug ID: 200320
           Summary: pfSync causes crashes
           Product: Base System
           Version: 10.1-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs@FreeBSD.org
          Reporter: eri@pfsense.org

Pfsync in FreeBSD 10.0++ causes crashes when trying to synchronize states
between two firewalls.
The panic here is reached
http://fxr.watson.org/fxr/source/netpfil/pf/if_pfsync.c?v=FREEBSD10#L1779 due
to not found defer state after pf(4) itself defered a state.

Reference: https://redmine.pfsense.org/issues/4310

Primary root cause of the crashes seems to be the defer option of pfsync which
defers states on pf(4) to be treated by pfsync after.
This is on as default on FreeBSD which should not be since active-active is not
supported.

-- 
You are receiving this mail because:
You are the assignee for the bug.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-200320-8>