From owner-freebsd-pf@FreeBSD.ORG Sun Feb 16 00:42:04 2014 Return-Path: Delivered-To: freebsd-pf@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 8A62D526; Sun, 16 Feb 2014 00:42:04 +0000 (UTC) Received: from mail.vx.sk (mail.vx.sk [176.9.45.25]) by mx1.freebsd.org (Postfix) with ESMTP id 3D13018EF; Sun, 16 Feb 2014 00:42:03 +0000 (UTC) Received: from mail.vx.sk (localhost [127.0.0.1]) by mail.vx.sk (Postfix) with ESMTP id EA454D6B0; Sun, 16 Feb 2014 01:41:56 +0100 (CET) X-Virus-Scanned: amavisd-new at mail.vx.sk Received: from mail.vx.sk by mail.vx.sk (amavisd-new, unix socket) with LMTP id YZEypd5Ro1mU; Sun, 16 Feb 2014 01:41:56 +0100 (CET) Received: from [10.9.8.1] (188-167-230-129.dynamic.chello.sk [188.167.230.129]) by mail.vx.sk (Postfix) with ESMTPSA id 6CEF7D6AA; Sun, 16 Feb 2014 01:41:56 +0100 (CET) Message-ID: <53000953.4030802@FreeBSD.org> Date: Sun, 16 Feb 2014 01:41:55 +0100 From: Martin Matuska User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0 MIME-Version: 1.0 To: Palle Girgensohn Subject: Re: VIMAGE + PF crash in mbuf destructor References: <51ED5308.3020008@gmx.com> <201307222338.09833.zec@fer.hr> <1389886004148-5876949.post@n5.nabble.com> <1391536059015-5882971.post@n5.nabble.com> <52F42ECB.4050700@FreeBSD.org> In-Reply-To: X-Enigmail-Version: 1.6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Cc: freebsd-pf@FreeBSD.org X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 16 Feb 2014 00:42:04 -0000 Hi Palle, The four o'clock problem is caused by cron inside jail (/etc/periodic/security/520.pfdenied) if the pf device is exposed to your jails. You need to enforce devfsrules_jail (or another ruleset without /dev/pf) in your jails. Do you have this line in your host's /etc/rc.conf? devfs_load_rulesets="YES" Dňa 16.2.2014 0:39 Palle Girgensohn wrote / napísal(a): > Theremight be different problems here, but my problem, where the system crashes like a clock every nigth at four o'clock, it is still there even with the patch. > > > 7 feb 2014 kl. 01:54 skrev Martin Matuska : > >> I don't have objections - the patch was done with avg's help and does its job, but we may consult someone first. >> >> http://people.freebsd.org/~mm/patches/pf_mtag_taskq.patch >> >> On 2014-02-07 00:37, Craig Rodrigues wrote: >>> On Tue, Feb 4, 2014 at 9:47 AM, mm wrote: >>> Looks like I experience this panic, too. >>> >>> To fix the mbuf and taskq problems, I use the following pach atm.: >>> http://people.freebsd.org/~mm/patches/pf_mtag_taskq.patch >>> >>> >>> Thanks for showing that patch. It looks good to me. Is it good enough for commit? >>> This problem has been around for a while. >>> -- Martin Matuska FreeBSD committer http://blog.vx.sk