Date: Thu, 26 Jul 2018 10:15:18 +0200 From: Patrick Lamaiziere <patrick@davenulle.org> To: Patrick Lamaiziere <patfbsd@davenulle.org> Cc: Lars Schotte <lars@gustik.eu>, freebsd-net@freebsd.org, freebsd-stable@freebsd.org Subject: Re: PF problems with 11-stable Message-ID: <20180726101518.1e8fd966@mr185083> In-Reply-To: <20180726095805.28f86c64@mr185083> References: <20180722155341.065c3d4d@romy.j20.helspy.pw> <20180726095805.28f86c64@mr185083>
next in thread | previous in thread | raw e-mail | index | archive | help
Le Thu, 26 Jul 2018 09:58:05 +0200, Patrick Lamaiziere <patfbsd@davenulle.org> a =C3=A9crit : Hello, > > Hey, > > I am on=20 > > 11.2-STABLE FreeBSD 11.2-STABLE #9 r336597 > > Sun Jul 22 14:08:38 CEST 2018=20 > >=20 > > and I see 2 problems with PF that are still there: > > 1.) set skip on lo=20 > > does not work even though ifconfig lo matches. > > SOLVED TEMPORARILY BY: set skip on lo0 =20 >=20 > I've seen this while upgrading from 10.3 to 11.2-RELEASE. I've added > lo0 to set skip too. >=20 > When the problem occurs, lo is marked '(skip)' (pfctl -vs > Interfaces) but not lo0. >=20 > But I can't reproduce this, this happened only one time. I don't know if this is related but there were some kernel logs about 'loop= back' : Feb 15 17:11:48 fucop1 kernel: ifa_del_loopback_route: deletion failed: 47 Feb 15 17:11:48 fucop1 kernel: ifa_add_loopback_route: insertion failed: 47 Jul 16 13:50:36 fucop1 kernel: ifa_maintain_loopback_route: deletion failed= for interface ix2: 3 Jul 16 14:07:31 fucop1 kernel: ifa_maintain_loopback_route: deletion failed= for interface ix2: 3 Jul 16 14:07:31 fucop1 kernel: ifa_maintain_loopback_route: deletion failed= for interface igb1: 3 Jul 16 14:10:43 fucop1 kernel: ifa_maintain_loopback_route: insertion faile= d for interface igb0: 17 I've got two firewalls with carp and bird 2 (BGP).
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20180726101518.1e8fd966>