From owner-freebsd-pf@FreeBSD.ORG Mon Apr 30 11:07:38 2012 Return-Path: Delivered-To: freebsd-pf@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 610771065674 for ; Mon, 30 Apr 2012 11:07:38 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 4ACAC8FC0C for ; Mon, 30 Apr 2012 11:07:38 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id q3UB7cLh053975 for ; Mon, 30 Apr 2012 11:07:38 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.5/8.14.5/Submit) id q3UB7bjC053973 for freebsd-pf@FreeBSD.org; Mon, 30 Apr 2012 11:07:37 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 30 Apr 2012 11:07:37 GMT Message-Id: <201204301107.q3UB7bjC053973@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: freebsd-pf@FreeBSD.org Cc: Subject: Current problem reports assigned to freebsd-pf@FreeBSD.org X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Apr 2012 11:07:38 -0000 Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker Resp. Description -------------------------------------------------------------------------------- s kern/167057 pf [pf] PF firewall version 4.5 in FreeBSD 9.0 & 8.2 nolo o kern/166336 pf [pf] kern.securelevel 3 +pf reload o kern/165315 pf [pf] States never cleared in PF with DEVICE_POLLING o kern/164402 pf [pf] pf crashes with a particular set of rules when fi o kern/164271 pf [pf] not working pf nat on FreeBSD 9.0 [regression] o kern/163208 pf [pf] PF state key linking mismatch o kern/160370 pf [pf] Incorrect pfctl check of pf.conf o kern/155736 pf [pf] [altq] borrow from parent queue does not work wit o kern/153307 pf [pf] Bug with PF firewall o kern/148290 pf [pf] "sticky-address" option of Packet Filter (PF) blo o kern/148260 pf [pf] [patch] pf rdr incompatible with dummynet o kern/147789 pf [pf] Firewall PF no longer drops connections by sendin o kern/143543 pf [pf] [panic] PF route-to causes kernel panic o bin/143504 pf [patch] outgoing states are not killed by authpf(8) o conf/142961 pf [pf] No way to adjust pidfile in pflogd o conf/142817 pf [patch] etc/rc.d/pf: silence pfctl o kern/141905 pf [pf] [panic] pf kernel panic on 7.2-RELEASE with empty o kern/140697 pf [pf] pf behaviour changes - must be documented o kern/137982 pf [pf] when pf can hit state limits, random IP failures o kern/136781 pf [pf] Packets appear to drop with pf scrub and if_bridg o kern/135948 pf [pf] [gre] pf not natting gre protocol o kern/135162 pf [pfsync] pfsync(4) not usable with GENERIC kernel o kern/134996 pf [pf] Anchor tables not included when pfctl(8) is run w o kern/133732 pf [pf] max-src-conn issue o kern/132769 pf [pf] [lor] 2 LOR's with pf task mtx / ifnet and rtent f kern/132176 pf [pf] pf stalls connection when using route-to [regress o conf/130381 pf [rc.d] [pf] [ip6] ipv6 not fully configured when pf st o kern/129861 pf [pf] [patch] Argument names reversed in pf_table.c:_co o kern/127920 pf [pf] ipv6 and synproxy don't play well together o conf/127814 pf [pf] The flush in pf_reload in /etc/rc.d/pf does not w o kern/127439 pf [pf] deadlock in pf o kern/127121 pf [pf] [patch] pf incorrect log priority o kern/127042 pf [pf] [patch] pf recursion panic if interface group is o kern/125467 pf [pf] pf keep state bug while handling sessions between s kern/124933 pf [pf] [ip6] pf does not support (drops) IPv6 fragmented o kern/124364 pf [pf] [panic] Kernel panic with pf + bridge o kern/122773 pf [pf] pf doesn't log uid or pid when configured to o kern/122014 pf [pf] [panic] FreeBSD 6.2 panic in pf o kern/120281 pf [pf] [request] lost returning packets to PF for a rdr o kern/120057 pf [pf] [patch] Allow proper settings of ALTQ_HFSC. The c o bin/118355 pf [pf] [patch] pfctl(8) help message options order false o kern/114567 pf [pf] [lor] pf_ioctl.c + if.c s conf/110838 pf [pf] tagged parameter on nat not working on FreeBSD 5. o kern/103283 pf pfsync fails to sucessfully transfer some sessions o kern/103281 pf pfsync reports bulk update failures o kern/93825 pf [pf] pf reply-to doesn't work o sparc/93530 pf [pf] Incorrect checksums when using pf's route-to on s o kern/92949 pf [pf] PF + ALTQ problems with latency o bin/86635 pf [patch] pfctl(8): allow new page character (^L) in pf. o kern/82271 pf [pf] cbq scheduler cause bad latency 50 problems total. From owner-freebsd-pf@FreeBSD.ORG Wed May 2 13:30:16 2012 Return-Path: Delivered-To: freebsd-pf@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5B934106564A for ; Wed, 2 May 2012 13:30:16 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 44A108FC08 for ; Wed, 2 May 2012 13:30:16 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id q42DUGTh048608 for ; Wed, 2 May 2012 13:30:16 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.5/8.14.5/Submit) id q42DUGZ5048605; Wed, 2 May 2012 13:30:16 GMT (envelope-from gnats) Date: Wed, 2 May 2012 13:30:16 GMT Message-Id: <201205021330.q42DUGZ5048605@freefall.freebsd.org> To: freebsd-pf@FreeBSD.org From: Antoine =?utf-8?Q?Beaupr=C3=A9?= Cc: Subject: Re: kern/124933: OpenBSD 5.1 fixes some pf fragmentation issues X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Antoine =?utf-8?Q?Beaupr=C3=A9?= List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 May 2012 13:30:16 -0000 The following reply was made to PR kern/124933; it has been noted by GNATS. From: Antoine =?utf-8?Q?Beaupr=C3=A9?= To: bug-followup@FreeBSD.org Cc: Subject: Re: kern/124933: OpenBSD 5.1 fixes some pf fragmentation issues Date: Wed, 02 May 2012 09:22:12 -0400 --=-=-= Content-Transfer-Encoding: quoted-printable Reading the release notes of OpenBSD 5.1, it seems there are several fixes regarding fragmentation issues, especially ones concerning IPv6. I feel pf should be updated to 5.1 in FreeBSD, see also kern/167057 a. =2D-=20 Wherever they's a fight so hungry people can eat, I'll be there. Wherever they's a cop beatin' up a guy, I'll be there. If Casy knowed, why, I'll be in the way guys yell when they're mad an' I'll be in the way kids laugh when they're hungry an' they know supper's ready. An' when our folks eat the stuff they raise an' live in the house they build, why I'll be there. - John Steinbeck, The Grapes of Wrath --=-=-= Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJPoTUEAAoJEHkhUlJ7dZIepoMP/jDWs4TuougSU/3WTh3yYsT1 o+MZzETnNOxOM41KeSj8dEFJWQfIykzBOUeWiE9LlR+DFZMpDwVQgZziRMSfriLE FxFnurYL+pslP3eIPPYLSI2Joy/dNy+ALBpSBi3WD4FtI3JhxEAVuO4l8LPBCi/0 fAdaEnho+92lIapgu7f5yW7ICcygTBzsNqLHYimVqi5r5diR7InxXyKRYRWPv6oT kn1xVx5ND7UidOpw8dxJLgFQ98MElt5EwqOxaahDgXJeogvj1NIhYEmqF5tJ8UG/ 14PbOaMR+420MYWDlrw9FFW2mh+txdZfFjMNcY5hMbtuCamC0UGQaysR9QHQrnyz C4gGXN3e9zmVfWtr+fymj2EZGuwImWBOyj8lQgUrZiYpBo/7QMa8lP7P6ql/nP/l TcxIhC5FNZAKuoKSNhMG/42i8EpKILjGHYKMTAVUel9DTqU/uYNklpwBEdmRJE7C U9VykmhXVVGnfxQUTrSZ33N1Ku9BSkbt4g5hhA6eYalaqld/jqRkKveCha/luBAT 02g+H2nhoGza3JW2b8FnRFSZqlcX8ZbJcgi5FC5QRdFWhJDQL/2MrwWZGXELC441 J1U27ft5GvUioVk9cVidIpX6SNBd6ELLJEB7y7aU1DVfmxCc2i3Dw9yYNcMUI+Qe 6y/UXq+WKOoxXwYRdxPt =H5L0 -----END PGP SIGNATURE----- --=-=-=--