From owner-freebsd-bugs@FreeBSD.ORG Sun Feb 7 19:40:03 2010 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 38238106568F for ; Sun, 7 Feb 2010 19:40:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id EF5EB8FC14 for ; Sun, 7 Feb 2010 19:40:02 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id o17Je22l052426 for ; Sun, 7 Feb 2010 19:40:02 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id o17Je24X052425; Sun, 7 Feb 2010 19:40:02 GMT (envelope-from gnats) Resent-Date: Sun, 7 Feb 2010 19:40:02 GMT Resent-Message-Id: <201002071940.o17Je24X052425@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Dmitriy Demidov Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6C160106566B for ; Sun, 7 Feb 2010 19:31:52 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id 5BD138FC08 for ; Sun, 7 Feb 2010 19:31:52 +0000 (UTC) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.3/8.14.3) with ESMTP id o17JVpbl032574 for ; Sun, 7 Feb 2010 19:31:51 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.3/8.14.3/Submit) id o17JVp7R032573; Sun, 7 Feb 2010 19:31:51 GMT (envelope-from nobody) Message-Id: <201002071931.o17JVp7R032573@www.freebsd.org> Date: Sun, 7 Feb 2010 19:31:51 GMT From: Dmitriy Demidov To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: kern/143653: ipfw nat redirect_port "buf is too small" error X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Feb 2010 19:40:03 -0000 >Number: 143653 >Category: kern >Synopsis: ipfw nat redirect_port "buf is too small" error >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Feb 07 19:40:02 UTC 2010 >Closed-Date: >Last-Modified: >Originator: Dmitriy Demidov >Release: 7.2-STABLE >Organization: >Environment: FreeBSD hius.local.home 7.2-STABLE FreeBSD 7.2-STABLE #0: Sat Aug 15 13:49:47 EEST 2009 terminus@hius.local.home:/usr/obj/usr/src/sys/STABLE i386 >Description: There is one bug with ipfw nat - it can not handle redirect_port configuration what consist of big number of redirect_port rules. For example if I make a try to apply this configuration: ipfw nat 1 config if em0 log deny_in same_ports reset redirect_port tcp 127.0.0.1:28011 28011 redirect_port udp 127.0.0.1:4444 4444 redirect_port tcp 127.0.0.1:6881 6881 redirect_port udp 127.0.0.1:14400 14400 redirect_port tcp 127.0.0.1:14400 14400 redirect_port tcp 127.0.0.1:14401 14401 redirect_port tcp 127.0.0.1:14402 14402 redirect_port tcp 127.0.0.1:14403 14403 redirect_port tcp 127.0.0.1:14404 14404 redirect_port tcp 127.0.0.1:14405 14405 redirect_port tcp 127.0.0.1:14406 14406 redirect_port tcp 127.0.0.1:14407 14407 redirect_port tcp 127.0.0.1:14408 14408 redirect_port tcp 127.0.0.1:14410 14410 redirect_port tcp 127.0.0.1:14411 14411 redirect_port tcp 127.0.0.1:14412 14412 redirect_port tcp 127.0.0.1:14413 14413 redirect_port tcp 127.0.0.1:14414 14414 redirect_port tcp 127.0.0.1:14415 14415 redirect_port tcp 127.0.0.1:14416 14416 redirect_port tcp 127.0.0.1:14417 14417 redirect_port tcp 127.0.0.1:14418 14418 redirect_port tcp 127.0.0.1:14419 14419 redirect_port tcp 12 7.0.0.1:14420 14420 I always got error message: ipfw: redirect_port: buf is too small This problem is observed on FreeBSD 8.0-RELEASE as well. >How-To-Repeat: Try to configure an instance of ipfw nat with big amount of redirect_port directives. >Fix: It is not my solution (I found it in the Net). ==== 1) edit /usr/src/sys/netinet/ip_fw.h #define NAT_BUF_LEN 1024 change this string to something bigger #define NAT_BUF_LEN 11264 2) cd /usr/src/include make install 3) cd /usr/src make buildworld && make buildkernel >Release-Note: >Audit-Trail: >Unformatted: