Date: Sun, 16 Feb 2014 01:41:55 +0100 From: Martin Matuska <mm@FreeBSD.org> To: Palle Girgensohn <girgen@FreeBSD.org> Cc: freebsd-pf@FreeBSD.org Subject: Re: VIMAGE + PF crash in mbuf destructor Message-ID: <53000953.4030802@FreeBSD.org> In-Reply-To: <CB12A821-9472-4B2B-8B14-0EEC2086B505@FreeBSD.org> References: <CAG=rPVfxFiOVOeSyDP=wBubNQCHK5dqcgBBaJjeS6XXtSZSZqg@mail.gmail.com> <51ED5308.3020008@gmx.com> <CAJ-VmomAC573hrQivfT9Gn_tJn5SkMhM_MK8hUCbtr-7D-NGDw@mail.gmail.com> <CAG=rPVd3F2sfwizJuEngxexo0Rby2qwzqpAB4_K-fZXXb8-Rmw@mail.gmail.com> <CAJ-Vmo=jDPrJHXRz8xY9aA-soBx54DjvqkpzdSUvr%2B4hZ9ExkQ@mail.gmail.com> <201307222338.09833.zec@fer.hr> <1389886004148-5876949.post@n5.nabble.com> <1391536059015-5882971.post@n5.nabble.com> <CAG=rPVe=QFGWH2f80foCr3yJvsuhZZ5PLvX9D34Rth3JJbEtDg@mail.gmail.com> <52F42ECB.4050700@FreeBSD.org> <CB12A821-9472-4B2B-8B14-0EEC2086B505@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi Palle, The four o'clock problem is caused by cron inside jail (/etc/periodic/security/520.pfdenied) if the pf device is exposed to your jails. You need to enforce devfsrules_jail (or another ruleset without /dev/pf) in your jails. Do you have this line in your host's /etc/rc.conf? devfs_load_rulesets="YES" Dňa 16.2.2014 0:39 Palle Girgensohn wrote / napísal(a): > Theremight be different problems here, but my problem, where the system crashes like a clock every nigth at four o'clock, it is still there even with the patch. > > > 7 feb 2014 kl. 01:54 skrev Martin Matuska <mm@FreeBSD.org>: > >> I don't have objections - the patch was done with avg's help and does its job, but we may consult someone first. >> >> http://people.freebsd.org/~mm/patches/pf_mtag_taskq.patch >> >> On 2014-02-07 00:37, Craig Rodrigues wrote: >>> On Tue, Feb 4, 2014 at 9:47 AM, mm <mm@freebsd.org> wrote: >>> Looks like I experience this panic, too. >>> >>> To fix the mbuf and taskq problems, I use the following pach atm.: >>> http://people.freebsd.org/~mm/patches/pf_mtag_taskq.patch >>> >>> >>> Thanks for showing that patch. It looks good to me. Is it good enough for commit? >>> This problem has been around for a while. >>> -- Martin Matuska FreeBSD committer http://blog.vx.sk
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?53000953.4030802>