Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 7 May 2004 01:35:11 +0400 (MSD)
From:      Oleg Bulyzhin <oleg@rinet.ru>
To:        hugle <hugle@vkt.lt>
Cc:        freebsd-ipfw@freebsd.org
Subject:   Re[2]: ipfw: ouch!, skip past end of rules, denying packet
Message-ID:  <20040507013009.H1824@lath.rinet.ru>
In-Reply-To: <158403649347.20040506103615@vkt.lt>
References:  <104341060709.20040505171307@vkt.lt> <20040505194451.V9766@lath.rinet.ru> <158403649347.20040506103615@vkt.lt>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.
  Send mail to mime@docserver.cac.washington.edu for more info.

--0-1378115432-1083879311=:1824
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Thu, 6 May 2004, hugle wrote:

> OB> On Wed, 5 May 2004, hugle wrote:
>
> >> Hello all.
> >> I get such messages in dmesg:
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >> ipfw: ouch!, skip past end of rules, denying packet
> >>
> >> what is causing such messages ?
> >> google doesn't say anything..
> >> and one more thing..
> >> i've realised, that pipes doesn't give my banthiwith I should get
> >>
> >> instead of 100kbits i get ~70...
> >> insted of 156 i get ~100
> >> and so on..
> >> anyone have a clue whete to search?
> >>
>
> OB> What is your value of net.inet.ip.fw.one_pass sysctl variable?
>
>
> perl# sysctl net.inet.ip.fw.one_pass
> net.inet.ip.fw.one_pass: 0

i see.
There is a little bug (i'll PR it as soon i'll get enough time), you can
try attached patch(built on RELENG_4).

>
>
> _______________________________________________
> freebsd-ipfw@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org"
>

-- 
Oleg.

================================================================
=== Oleg Bulyzhin -- OBUL-RIPN -- OBUL-RIPE -- oleg@rinet.ru ===
================================================================

--0-1378115432-1083879311=:1824
Content-Type: TEXT/PLAIN; charset=US-ASCII; name="ipfw-skippast.patch"
Content-Transfer-Encoding: BASE64
Content-ID: <20040507013511.S1824@lath.rinet.ru>
Content-Description: ipfw patch
Content-Disposition: attachment; filename="ipfw-skippast.patch"

LS0tIHN5cy9uZXRpbmV0L2lwX2R1bW15bmV0LmN+CVR1ZSBEZWMgMzAgMTU6
Mjg6MDkgMjAwMw0KKysrIHN5cy9uZXRpbmV0L2lwX2R1bW15bmV0LmMJV2Vk
IE1heSAgNSAyMTo0MTowOSAyMDA0DQpAQCAtMTM3OCw3ICsxMzc4LDYgQEAN
CiB9DQogDQogDQotZXh0ZXJuIHN0cnVjdCBpcF9mdyAqaXBfZndfZGVmYXVs
dF9ydWxlIDsNCiBzdGF0aWMgdm9pZA0KIGRuX3J1bGVfZGVsZXRlX2ZzKHN0
cnVjdCBkbl9mbG93X3NldCAqZnMsIHZvaWQgKnIpDQogew0KQEAgLTEzOTAs
NyArMTM4OSw3IEBADQogCWZvciAocSA9IGZzLT5ycVtpXSA7IHEgOyBxID0g
cS0+bmV4dCApDQogCSAgICBmb3IgKHBrdCA9IHEtPmhlYWQgOyBwa3QgOyBw
a3QgPSBETl9ORVhUKHBrdCkgKQ0KIAkJaWYgKHBrdC0+cnVsZSA9PSByKQ0K
LQkJICAgIHBrdC0+cnVsZSA9IGlwX2Z3X2RlZmF1bHRfcnVsZSA7DQorCQkg
ICAgcGt0LT5ydWxlID0gbG9va3VwX25leHRfcnVsZShwa3QtPnJ1bGUpOw0K
IH0NCiAvKg0KICAqIHdoZW4gYSBmaXJld2FsbCBydWxlIGlzIGRlbGV0ZWQs
IHNjYW4gYWxsIHF1ZXVlcyBhbmQgcmVtb3ZlIHRoZSBmbG93LWlkDQpAQCAt
MTQxNSw3ICsxNDE0LDcgQEANCiAJZG5fcnVsZV9kZWxldGVfZnMoZnMsIHIp
Ow0KIAlmb3IgKHBrdCA9IHAtPmhlYWQgOyBwa3QgOyBwa3QgPSBETl9ORVhU
KHBrdCkgKQ0KIAkgICAgaWYgKHBrdC0+cnVsZSA9PSByKQ0KLQkJcGt0LT5y
dWxlID0gaXBfZndfZGVmYXVsdF9ydWxlIDsNCisJCXBrdC0+cnVsZSA9IGxv
b2t1cF9uZXh0X3J1bGUocGt0LT5ydWxlKTsNCiAgICAgfQ0KIH0NCiANCi0t
LSBzeXMvbmV0aW5ldC9pcF9mdy5jfglNb24gSmFuIDIwIDA1OjIzOjA3IDIw
MDMNCisrKyBzeXMvbmV0aW5ldC9pcF9mdy5jCVdlZCBNYXkgIDUgMjE6NTM6
MDYgMjAwNA0KQEAgLTEwMjMsOSArMTAyMyw3IEBADQogICogQmFja3dhcmQg
anVtcHMgYXJlIG5vdCBhbGxvd2VkLCBzbyBzdGFydCBsb29raW5nIGZyb20g
dGhlIG5leHQNCiAgKiBydWxlLi4uDQogICovIA0KLXN0YXRpYyBzdHJ1Y3Qg
aXBfZncgKiBsb29rdXBfbmV4dF9ydWxlKHN0cnVjdCBpcF9mdyAqbWUpOw0K
LQ0KLXN0YXRpYyBzdHJ1Y3QgaXBfZncgKg0KK3N0cnVjdCBpcF9mdyAqDQog
bG9va3VwX25leHRfcnVsZShzdHJ1Y3QgaXBfZncgKm1lKQ0KIHsNCiAgICAg
c3RydWN0IGlwX2Z3ICpydWxlIDsNCkBAIC0yMDY2LDE2ICsyMDY0LDYgQEAN
CiAJcmV0dXJuIChlcnJvcik7DQogfQ0KIA0KLS8qKg0KLSAqIGR1bW15bmV0
IG5lZWRzIGEgcmVmZXJlbmNlIHRvIHRoZSBkZWZhdWx0IHJ1bGUsIGJlY2F1
c2UgcnVsZXMgY2FuDQotICogYmUgZGVsZXRlZCB3aGlsZSBwYWNrZXRzIGhv
bGQgYSByZWZlcmVuY2UgdG8gdGhlbSAoZS5nLiB0byByZXN1bWUNCi0gKiBw
cm9jZXNzaW5nIGF0IHRoZSBuZXh0IHJ1bGUpLiBXaGVuIHRoaXMgaGFwcGVu
cywgZHVtbXluZXQgY2hhbmdlcw0KLSAqIHRoZSByZWZlcmVuY2UgdG8gdGhl
IGRlZmF1bHQgcnVsZSAocHJvYmFibHkgaXQgY291bGQgd2VsbCBiZSBhDQot
ICogTlVMTCBwb2ludGVyLCBidXQgdGhpcyB3YXkgd2UgZG8gbm90IG5lZWQg
dG8gY2hlY2sgZm9yIHRoZSBzcGVjaWFsDQotICogY2FzZSwgcGx1cyBoZXJl
IGhlIGhhdmUgaW5mbyBvbiB0aGUgZGVmYXVsdCBiZWhhdmlvdXIuDQotICov
DQotc3RydWN0IGlwX2Z3ICppcF9md19kZWZhdWx0X3J1bGUgOw0KLQ0KIHZv
aWQNCiBpcF9md19pbml0KHZvaWQpDQogew0KQEAgLTIwOTgsNyArMjA4Niw2
IEBADQogCSAgICBhZGRfZW50cnkoJmlwX2Z3X2NoYWluX2hlYWQsICZkZWZh
dWx0X3J1bGUpKQ0KIAkJcGFuaWMoImlwX2Z3X2luaXQiKTsNCiANCi0JaXBf
ZndfZGVmYXVsdF9ydWxlID0gTElTVF9GSVJTVCgmaXBfZndfY2hhaW5faGVh
ZCkgOw0KIAlwcmludGYoIklQIHBhY2tldCBmaWx0ZXJpbmcgaW5pdGlhbGl6
ZWQsICINCiAjaWZkZWYgSVBESVZFUlQNCiAJCSJkaXZlcnQgZW5hYmxlZCwg
Ig0KLS0tIHN5cy9uZXRpbmV0L2lwX2Z3Lmh+CVR1ZSBKdWwgIDkgMTM6MTE6
NDIgMjAwMg0KKysrIHN5cy9uZXRpbmV0L2lwX2Z3LmgJV2VkIE1heSAgNSAy
MTo0NzoyMSAyMDA0DQpAQCAtMzYwLDYgKzM2MCw3IEBADQogc3RydWN0IHNv
Y2tvcHQ7DQogc3RydWN0IGRuX2Zsb3dfc2V0Ow0KIHZvaWQgZmx1c2hfcGlw
ZV9wdHJzKHN0cnVjdCBkbl9mbG93X3NldCAqbWF0Y2gpOyAvKiB1c2VkIGJ5
IGR1bW15bmV0ICovDQorc3RydWN0IGlwX2Z3ICogbG9va3VwX25leHRfcnVs
ZShzdHJ1Y3QgaXBfZncgKm1lKTsNCiANCiB0eXBlZGVmIGludCBpcF9md19j
aGtfdCAoc3RydWN0IGlwX2Z3X2FyZ3MgKmFyZ3MpOw0KIHR5cGVkZWYgaW50
IGlwX2Z3X2N0bF90IChzdHJ1Y3Qgc29ja29wdCAqKTsNCi0tLSBzeXMvbmV0
aW5ldC9pcF9mdzIuY34JRnJpIEFwciAgMiAyMToxNTo0NCAyMDA0DQorKysg
c3lzL25ldGluZXQvaXBfZncyLmMJV2VkIE1heSAgNSAyMTo0NDo1NSAyMDA0
DQpAQCAtMTIyMSw3ICsxMjIxLDcgQEANCiAgKiBwb2ludGVycyBhcmUgZmx1
c2hlZCBzbyB3ZSBhcmUgYWx3YXlzIGNvcnJlY3QuDQogICovDQogDQotc3Rh
dGljIHN0cnVjdCBpcF9mdyAqDQorc3RydWN0IGlwX2Z3ICoNCiBsb29rdXBf
bmV4dF9ydWxlKHN0cnVjdCBpcF9mdyAqbWUpDQogew0KIAlzdHJ1Y3QgaXBf
ZncgKnJ1bGUgPSBOVUxMOw0KQEAgLTI3MjEsMTUgKzI3MjEsNiBAQA0KIAly
ZXR1cm4gKGVycm9yKTsNCiB9DQogDQotLyoqDQotICogZHVtbXluZXQgbmVl
ZHMgYSByZWZlcmVuY2UgdG8gdGhlIGRlZmF1bHQgcnVsZSwgYmVjYXVzZSBy
dWxlcyBjYW4gYmUNCi0gKiBkZWxldGVkIHdoaWxlIHBhY2tldHMgaG9sZCBh
IHJlZmVyZW5jZSB0byB0aGVtLiBXaGVuIHRoaXMgaGFwcGVucywNCi0gKiBk
dW1teW5ldCBjaGFuZ2VzIHRoZSByZWZlcmVuY2UgdG8gdGhlIGRlZmF1bHQg
cnVsZSAoaXQgY291bGQgd2VsbCBiZSBhDQotICogTlVMTCBwb2ludGVyLCBi
dXQgdGhpcyB3YXkgd2UgZG8gbm90IG5lZWQgdG8gY2hlY2sgZm9yIHRoZSBz
cGVjaWFsDQotICogY2FzZSwgcGx1cyBoZXJlIGhlIGhhdmUgaW5mbyBvbiB0
aGUgZGVmYXVsdCBiZWhhdmlvdXIpLg0KLSAqLw0KLXN0cnVjdCBpcF9mdyAq
aXBfZndfZGVmYXVsdF9ydWxlOw0KLQ0KIC8qDQogICogVGhpcyBwcm9jZWR1
cmUgaXMgb25seSB1c2VkIHRvIGhhbmRsZSBrZWVwYWxpdmVzLiBJdCBpcyBp
bnZva2VkDQogICogZXZlcnkgZHluX2tlZXBhbGl2ZV9wZXJpb2QNCkBAIC0y
NzkzLDcgKzI3ODQsNiBAQA0KIA0KIAlhZGRfcnVsZSgmbGF5ZXIzX2NoYWlu
LCAmZGVmYXVsdF9ydWxlKTsNCiANCi0JaXBfZndfZGVmYXVsdF9ydWxlID0g
bGF5ZXIzX2NoYWluOw0KIAlwcmludGYoImlwZncyIGluaXRpYWxpemVkLCBk
aXZlcnQgJXMsICINCiAJCSJydWxlLWJhc2VkIGZvcndhcmRpbmcgZW5hYmxl
ZCwgZGVmYXVsdCB0byAlcywgbG9nZ2luZyAiLA0KICNpZmRlZiBJUERJVkVS
VA0KLS0tIHN5cy9uZXRpbmV0L2lwX2Z3Mi5ofglUaHUgSnVsIDE3IDEwOjAz
OjM5IDIwMDMNCisrKyBzeXMvbmV0aW5ldC9pcF9mdzIuaAlXZWQgTWF5ICA1
IDIxOjQ0OjEwIDIwMDQNCkBAIC00MTMsNiArNDEzLDcgQEANCiBzdHJ1Y3Qg
ZG5fZmxvd19zZXQ7DQogDQogdm9pZCBmbHVzaF9waXBlX3B0cnMoc3RydWN0
IGRuX2Zsb3dfc2V0ICptYXRjaCk7IC8qIHVzZWQgYnkgZHVtbXluZXQgKi8N
CitzdHJ1Y3QgaXBfZncgKiBsb29rdXBfbmV4dF9ydWxlKHN0cnVjdCBpcF9m
dyAqbWUpOw0KIA0KIHR5cGVkZWYgaW50IGlwX2Z3X2Noa190IChzdHJ1Y3Qg
aXBfZndfYXJncyAqYXJncyk7DQogdHlwZWRlZiBpbnQgaXBfZndfY3RsX3Qg
KHN0cnVjdCBzb2Nrb3B0ICopOw0K

--0-1378115432-1083879311=:1824--



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?20040507013009.H1824>