Date: Fri, 7 May 2004 01:35:11 +0400 (MSD) From: Oleg Bulyzhin <oleg@rinet.ru> To: hugle <hugle@vkt.lt> Cc: freebsd-ipfw@freebsd.org Subject: Re[2]: ipfw: ouch!, skip past end of rules, denying packet Message-ID: <20040507013009.H1824@lath.rinet.ru> In-Reply-To: <158403649347.20040506103615@vkt.lt> References: <104341060709.20040505171307@vkt.lt> <20040505194451.V9766@lath.rinet.ru> <158403649347.20040506103615@vkt.lt>
next in thread | previous in thread | raw e-mail | index | archive | help
This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. --0-1378115432-1083879311=:1824 Content-Type: TEXT/PLAIN; charset=US-ASCII On Thu, 6 May 2004, hugle wrote: > OB> On Wed, 5 May 2004, hugle wrote: > > >> Hello all. > >> I get such messages in dmesg: > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> ipfw: ouch!, skip past end of rules, denying packet > >> > >> what is causing such messages ? > >> google doesn't say anything.. > >> and one more thing.. > >> i've realised, that pipes doesn't give my banthiwith I should get > >> > >> instead of 100kbits i get ~70... > >> insted of 156 i get ~100 > >> and so on.. > >> anyone have a clue whete to search? > >> > > OB> What is your value of net.inet.ip.fw.one_pass sysctl variable? > > > perl# sysctl net.inet.ip.fw.one_pass > net.inet.ip.fw.one_pass: 0 i see. There is a little bug (i'll PR it as soon i'll get enough time), you can try attached patch(built on RELENG_4). > > > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" > -- Oleg. ================================================================ === Oleg Bulyzhin -- OBUL-RIPN -- OBUL-RIPE -- oleg@rinet.ru === ================================================================ --0-1378115432-1083879311=:1824 Content-Type: TEXT/PLAIN; charset=US-ASCII; name="ipfw-skippast.patch" Content-Transfer-Encoding: BASE64 Content-ID: <20040507013511.S1824@lath.rinet.ru> Content-Description: ipfw patch Content-Disposition: attachment; filename="ipfw-skippast.patch" LS0tIHN5cy9uZXRpbmV0L2lwX2R1bW15bmV0LmN+CVR1ZSBEZWMgMzAgMTU6 Mjg6MDkgMjAwMw0KKysrIHN5cy9uZXRpbmV0L2lwX2R1bW15bmV0LmMJV2Vk IE1heSAgNSAyMTo0MTowOSAyMDA0DQpAQCAtMTM3OCw3ICsxMzc4LDYgQEAN CiB9DQogDQogDQotZXh0ZXJuIHN0cnVjdCBpcF9mdyAqaXBfZndfZGVmYXVs dF9ydWxlIDsNCiBzdGF0aWMgdm9pZA0KIGRuX3J1bGVfZGVsZXRlX2ZzKHN0 cnVjdCBkbl9mbG93X3NldCAqZnMsIHZvaWQgKnIpDQogew0KQEAgLTEzOTAs NyArMTM4OSw3IEBADQogCWZvciAocSA9IGZzLT5ycVtpXSA7IHEgOyBxID0g cS0+bmV4dCApDQogCSAgICBmb3IgKHBrdCA9IHEtPmhlYWQgOyBwa3QgOyBw a3QgPSBETl9ORVhUKHBrdCkgKQ0KIAkJaWYgKHBrdC0+cnVsZSA9PSByKQ0K LQkJICAgIHBrdC0+cnVsZSA9IGlwX2Z3X2RlZmF1bHRfcnVsZSA7DQorCQkg ICAgcGt0LT5ydWxlID0gbG9va3VwX25leHRfcnVsZShwa3QtPnJ1bGUpOw0K IH0NCiAvKg0KICAqIHdoZW4gYSBmaXJld2FsbCBydWxlIGlzIGRlbGV0ZWQs IHNjYW4gYWxsIHF1ZXVlcyBhbmQgcmVtb3ZlIHRoZSBmbG93LWlkDQpAQCAt MTQxNSw3ICsxNDE0LDcgQEANCiAJZG5fcnVsZV9kZWxldGVfZnMoZnMsIHIp Ow0KIAlmb3IgKHBrdCA9IHAtPmhlYWQgOyBwa3QgOyBwa3QgPSBETl9ORVhU KHBrdCkgKQ0KIAkgICAgaWYgKHBrdC0+cnVsZSA9PSByKQ0KLQkJcGt0LT5y dWxlID0gaXBfZndfZGVmYXVsdF9ydWxlIDsNCisJCXBrdC0+cnVsZSA9IGxv b2t1cF9uZXh0X3J1bGUocGt0LT5ydWxlKTsNCiAgICAgfQ0KIH0NCiANCi0t LSBzeXMvbmV0aW5ldC9pcF9mdy5jfglNb24gSmFuIDIwIDA1OjIzOjA3IDIw MDMNCisrKyBzeXMvbmV0aW5ldC9pcF9mdy5jCVdlZCBNYXkgIDUgMjE6NTM6 MDYgMjAwNA0KQEAgLTEwMjMsOSArMTAyMyw3IEBADQogICogQmFja3dhcmQg anVtcHMgYXJlIG5vdCBhbGxvd2VkLCBzbyBzdGFydCBsb29raW5nIGZyb20g dGhlIG5leHQNCiAgKiBydWxlLi4uDQogICovIA0KLXN0YXRpYyBzdHJ1Y3Qg aXBfZncgKiBsb29rdXBfbmV4dF9ydWxlKHN0cnVjdCBpcF9mdyAqbWUpOw0K LQ0KLXN0YXRpYyBzdHJ1Y3QgaXBfZncgKg0KK3N0cnVjdCBpcF9mdyAqDQog bG9va3VwX25leHRfcnVsZShzdHJ1Y3QgaXBfZncgKm1lKQ0KIHsNCiAgICAg c3RydWN0IGlwX2Z3ICpydWxlIDsNCkBAIC0yMDY2LDE2ICsyMDY0LDYgQEAN CiAJcmV0dXJuIChlcnJvcik7DQogfQ0KIA0KLS8qKg0KLSAqIGR1bW15bmV0 IG5lZWRzIGEgcmVmZXJlbmNlIHRvIHRoZSBkZWZhdWx0IHJ1bGUsIGJlY2F1 c2UgcnVsZXMgY2FuDQotICogYmUgZGVsZXRlZCB3aGlsZSBwYWNrZXRzIGhv bGQgYSByZWZlcmVuY2UgdG8gdGhlbSAoZS5nLiB0byByZXN1bWUNCi0gKiBw cm9jZXNzaW5nIGF0IHRoZSBuZXh0IHJ1bGUpLiBXaGVuIHRoaXMgaGFwcGVu cywgZHVtbXluZXQgY2hhbmdlcw0KLSAqIHRoZSByZWZlcmVuY2UgdG8gdGhl IGRlZmF1bHQgcnVsZSAocHJvYmFibHkgaXQgY291bGQgd2VsbCBiZSBhDQot ICogTlVMTCBwb2ludGVyLCBidXQgdGhpcyB3YXkgd2UgZG8gbm90IG5lZWQg dG8gY2hlY2sgZm9yIHRoZSBzcGVjaWFsDQotICogY2FzZSwgcGx1cyBoZXJl IGhlIGhhdmUgaW5mbyBvbiB0aGUgZGVmYXVsdCBiZWhhdmlvdXIuDQotICov DQotc3RydWN0IGlwX2Z3ICppcF9md19kZWZhdWx0X3J1bGUgOw0KLQ0KIHZv aWQNCiBpcF9md19pbml0KHZvaWQpDQogew0KQEAgLTIwOTgsNyArMjA4Niw2 IEBADQogCSAgICBhZGRfZW50cnkoJmlwX2Z3X2NoYWluX2hlYWQsICZkZWZh dWx0X3J1bGUpKQ0KIAkJcGFuaWMoImlwX2Z3X2luaXQiKTsNCiANCi0JaXBf ZndfZGVmYXVsdF9ydWxlID0gTElTVF9GSVJTVCgmaXBfZndfY2hhaW5faGVh ZCkgOw0KIAlwcmludGYoIklQIHBhY2tldCBmaWx0ZXJpbmcgaW5pdGlhbGl6 ZWQsICINCiAjaWZkZWYgSVBESVZFUlQNCiAJCSJkaXZlcnQgZW5hYmxlZCwg Ig0KLS0tIHN5cy9uZXRpbmV0L2lwX2Z3Lmh+CVR1ZSBKdWwgIDkgMTM6MTE6 NDIgMjAwMg0KKysrIHN5cy9uZXRpbmV0L2lwX2Z3LmgJV2VkIE1heSAgNSAy MTo0NzoyMSAyMDA0DQpAQCAtMzYwLDYgKzM2MCw3IEBADQogc3RydWN0IHNv Y2tvcHQ7DQogc3RydWN0IGRuX2Zsb3dfc2V0Ow0KIHZvaWQgZmx1c2hfcGlw ZV9wdHJzKHN0cnVjdCBkbl9mbG93X3NldCAqbWF0Y2gpOyAvKiB1c2VkIGJ5 IGR1bW15bmV0ICovDQorc3RydWN0IGlwX2Z3ICogbG9va3VwX25leHRfcnVs ZShzdHJ1Y3QgaXBfZncgKm1lKTsNCiANCiB0eXBlZGVmIGludCBpcF9md19j aGtfdCAoc3RydWN0IGlwX2Z3X2FyZ3MgKmFyZ3MpOw0KIHR5cGVkZWYgaW50 IGlwX2Z3X2N0bF90IChzdHJ1Y3Qgc29ja29wdCAqKTsNCi0tLSBzeXMvbmV0 aW5ldC9pcF9mdzIuY34JRnJpIEFwciAgMiAyMToxNTo0NCAyMDA0DQorKysg c3lzL25ldGluZXQvaXBfZncyLmMJV2VkIE1heSAgNSAyMTo0NDo1NSAyMDA0 DQpAQCAtMTIyMSw3ICsxMjIxLDcgQEANCiAgKiBwb2ludGVycyBhcmUgZmx1 c2hlZCBzbyB3ZSBhcmUgYWx3YXlzIGNvcnJlY3QuDQogICovDQogDQotc3Rh dGljIHN0cnVjdCBpcF9mdyAqDQorc3RydWN0IGlwX2Z3ICoNCiBsb29rdXBf bmV4dF9ydWxlKHN0cnVjdCBpcF9mdyAqbWUpDQogew0KIAlzdHJ1Y3QgaXBf ZncgKnJ1bGUgPSBOVUxMOw0KQEAgLTI3MjEsMTUgKzI3MjEsNiBAQA0KIAly ZXR1cm4gKGVycm9yKTsNCiB9DQogDQotLyoqDQotICogZHVtbXluZXQgbmVl ZHMgYSByZWZlcmVuY2UgdG8gdGhlIGRlZmF1bHQgcnVsZSwgYmVjYXVzZSBy dWxlcyBjYW4gYmUNCi0gKiBkZWxldGVkIHdoaWxlIHBhY2tldHMgaG9sZCBh IHJlZmVyZW5jZSB0byB0aGVtLiBXaGVuIHRoaXMgaGFwcGVucywNCi0gKiBk dW1teW5ldCBjaGFuZ2VzIHRoZSByZWZlcmVuY2UgdG8gdGhlIGRlZmF1bHQg cnVsZSAoaXQgY291bGQgd2VsbCBiZSBhDQotICogTlVMTCBwb2ludGVyLCBi dXQgdGhpcyB3YXkgd2UgZG8gbm90IG5lZWQgdG8gY2hlY2sgZm9yIHRoZSBz cGVjaWFsDQotICogY2FzZSwgcGx1cyBoZXJlIGhlIGhhdmUgaW5mbyBvbiB0 aGUgZGVmYXVsdCBiZWhhdmlvdXIpLg0KLSAqLw0KLXN0cnVjdCBpcF9mdyAq aXBfZndfZGVmYXVsdF9ydWxlOw0KLQ0KIC8qDQogICogVGhpcyBwcm9jZWR1 cmUgaXMgb25seSB1c2VkIHRvIGhhbmRsZSBrZWVwYWxpdmVzLiBJdCBpcyBp bnZva2VkDQogICogZXZlcnkgZHluX2tlZXBhbGl2ZV9wZXJpb2QNCkBAIC0y NzkzLDcgKzI3ODQsNiBAQA0KIA0KIAlhZGRfcnVsZSgmbGF5ZXIzX2NoYWlu LCAmZGVmYXVsdF9ydWxlKTsNCiANCi0JaXBfZndfZGVmYXVsdF9ydWxlID0g bGF5ZXIzX2NoYWluOw0KIAlwcmludGYoImlwZncyIGluaXRpYWxpemVkLCBk aXZlcnQgJXMsICINCiAJCSJydWxlLWJhc2VkIGZvcndhcmRpbmcgZW5hYmxl ZCwgZGVmYXVsdCB0byAlcywgbG9nZ2luZyAiLA0KICNpZmRlZiBJUERJVkVS VA0KLS0tIHN5cy9uZXRpbmV0L2lwX2Z3Mi5ofglUaHUgSnVsIDE3IDEwOjAz OjM5IDIwMDMNCisrKyBzeXMvbmV0aW5ldC9pcF9mdzIuaAlXZWQgTWF5ICA1 IDIxOjQ0OjEwIDIwMDQNCkBAIC00MTMsNiArNDEzLDcgQEANCiBzdHJ1Y3Qg ZG5fZmxvd19zZXQ7DQogDQogdm9pZCBmbHVzaF9waXBlX3B0cnMoc3RydWN0 IGRuX2Zsb3dfc2V0ICptYXRjaCk7IC8qIHVzZWQgYnkgZHVtbXluZXQgKi8N CitzdHJ1Y3QgaXBfZncgKiBsb29rdXBfbmV4dF9ydWxlKHN0cnVjdCBpcF9m dyAqbWUpOw0KIA0KIHR5cGVkZWYgaW50IGlwX2Z3X2Noa190IChzdHJ1Y3Qg aXBfZndfYXJncyAqYXJncyk7DQogdHlwZWRlZiBpbnQgaXBfZndfY3RsX3Qg KHN0cnVjdCBzb2Nrb3B0ICopOw0K --0-1378115432-1083879311=:1824--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040507013009.H1824>