Date: Wed, 30 Jun 2004 13:38:51 -0700 From: Jaeho Shin <netj@ropas.snu.ac.kr> To: current@freebsd.org Subject: Re: ipf 3.4.35 woes Message-ID: <20040630203851.GA4864@sab.mazic.org> In-Reply-To: <20040623020801.GA156@afflictions.org> References: <20040623020801.GA156@afflictions.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--wac7ysb48OaltWcw Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, 2004-06-22 22:08:01 -0400, Damian Gerow wrote: > The upgrade to ipf 3.4.35 is causing me grief. And yes, my kernel and > userland are in sync: =2E.. > I get a panic right after bringing up lo0 on regular boot. If I boot into > single user mode, bring up lo0, bring up my main interface, and then load > the rules, I don't panic. My rules are simple -- a pass in quick/pass out > quick pair for every interface on the machine, and a general pass in > quick/pass out quick for all IPv6. >=20 > There are four interfaces on this machine: lo0, rl0, fxp0, and a > freshly-added ath0. The only ones that come up during boot are lo0 and > fxp0. >=20 > Since the panic passed through pen and paper, whitespace may be off. But > here's the boot log/panic: >=20 > Enabling ipfilter. > lo0: <standard lo0 information> >=20 > kernel trap 12 with interrupts disabled >=20 My box has a similar hardware configuration to yours. I had a very same problem with yesterday's source, but by applying the patch below, which was posted to current@ many times, fixed the problem. It looks like it was commited recently so either by applying it or cvsup'ing again will give you the right source. %% Index: sys/contrib/ipfilter/netinet/fil.c =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D RCS file: /home/ncvs/src/sys/contrib/ipfilter/netinet/fil.c,v retrieving revision 1.38 diff -u -r1.38 fil.c --- sys/contrib/ipfilter/netinet/fil.c 21 Jun 2004 22:46:35 -0000 1.38 +++ sys/contrib/ipfilter/netinet/fil.c 24 Jun 2004 19:17:33 -0000 @@ -2155,9 +2155,6 @@ ip_natsync(ifp); ip_statesync(ifp); } -# if defined(__FreeBSD_version) && (__FreeBSD_version >=3D 500043) - IFNET_RUNLOCK(); -# endif ip_natsync((struct ifnet *)-1); # if defined(__FreeBSD_version) && (__FreeBSD_version >=3D 500043) IFNET_RUNLOCK(); %% --=20 =EC=8B=A0=EC=9E=AC=ED=98=B8 | Jaeho Shin <netj@ropas.snu.ac.kr> | http://ne= tj.org/ Research On Program Analysis System, Seoul National University --wac7ysb48OaltWcw Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Cygwin) iD8DBQFA4yTbeGASkZ411HcRAnmXAJ942YcPKjz0tDT8Iyr6thv1xvVLJgCffLvE LxczAK6rkBnujHHo44BTX4E= =6QOE -----END PGP SIGNATURE----- --wac7ysb48OaltWcw--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040630203851.GA4864>