From nobody Mon Dec 29 18:47:29 2025 X-Original-To: freebsd-ipfw@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dg4wK0fmcz6MBN4 for ; Mon, 29 Dec 2025 18:47:45 +0000 (UTC) (envelope-from mm@dorfdsl.de) Received: from srv1.dorfdsl.de (srv1.dorfdsl.de [IPv6:2a01:170:118f:3::22]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature ECDSA (prime256v1) client-digest SHA256) (Client CN "srv1.dorfdsl.de", Issuer "E7" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dg4wH6xslz3SLX for ; Mon, 29 Dec 2025 18:47:43 +0000 (UTC) (envelope-from mm@dorfdsl.de) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=dorfdsl.de header.s=default header.b=pXFi3xuW; dmarc=pass (policy=none) header.from=dorfdsl.de; spf=pass (mx1.freebsd.org: domain of mm@dorfdsl.de designates 2a01:170:118f:3::22 as permitted sender) smtp.mailfrom=mm@dorfdsl.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=dorfdsl.de; s=default; t=1767034054; bh=4mxEUBJOmF4ju7YQLED5ULbuvnLcE4Mi3F4w7VF3ySQ=; h=Date:From:To:Subject:From; b=pXFi3xuWIIFHaNOolvlJGTO2wdbmbZJq6yruT6kkhmgPBBYRQJMumrW15R7Yo+cFP n+zHsBvvrhqYIhI6/S8hZAopcTC20xjvAOgpAPdPTv24Jbo54swkxw2Go67qeBw9ZL kHp0j2yp7SY/QLHjdWaX4TS033cDM6+tY14ULoBR9EiuZ9ms9cWhmx/gqs4cx3m98c L6Tqd7nlI76JLORtvRDwPtWVus099QYQl2SNphHTaISKnln9k22xrmcFL3Zvja/MUN cs1/Y0FDBjEWw9SHGvEcI/CkVFlAZPiBU+BeKs9fwxpglHkilYtuixtaKdFNN4fYJK hZ2YbWbeU36ig== Received: from ryz.dorfdsl.de ([IPv6:2a01:170:118f:2:c665:2cd1:a21d:e153]) (authenticated bits=0) by srv1.dorfdsl.de (8.18.1/8.18.1/Debian-6) with ESMTPSA id 5BTIlYxc374616 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for ; Mon, 29 Dec 2025 19:47:34 +0100 Date: Mon, 29 Dec 2025 19:47:29 +0100 From: Marco Moock To: freebsd-ipfw@freebsd.org Subject: log TCP flags Message-ID: <20251229194729.0205d0f8@ryz.dorfdsl.de> X-Mailer: Claws Mail 4.3.1 (GTK 3.24.51; x86_64-pc-linux-gnu) List-Id: IPFW Technical Discussions List-Archive: https://lists.freebsd.org/archives/freebsd-ipfw List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ipfw@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/R2ThPIsViOqBkfgFGB8kbx9"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Spamd-Bar: ----- X-Spamd-Result: default: False [-5.90 / 15.00]; SIGNED_PGP(-2.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-0.999]; NEURAL_HAM_MEDIUM(-1.00)[-0.998]; DMARC_POLICY_ALLOW(-0.50)[dorfdsl.de,none]; R_DKIM_ALLOW(-0.20)[dorfdsl.de:s=default]; ONCE_RECEIVED(0.20)[]; R_SPF_ALLOW(-0.20)[+ip6:2a01:170:118f:3::22]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; DKIM_TRACE(0.00)[dorfdsl.de:+]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_ALL(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_ONE(0.00)[1]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; TO_DN_NONE(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; FREEFALL_USER(0.00)[mm]; PREVIOUSLY_DELIVERED(0.00)[freebsd-ipfw@freebsd.org]; MLMMJ_DEST(0.00)[freebsd-ipfw@freebsd.org]; MID_RHS_MATCH_FROMTLD(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~] X-Rspamd-Queue-Id: 4dg4wH6xslz3SLX --Sig_/R2ThPIsViOqBkfgFGB8kbx9 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hello! Is there a way to log the TCP flags in ipfw to the log file? I've checked the manpage and cannot find such an option. --=20 kind regards Marco --Sig_/R2ThPIsViOqBkfgFGB8kbx9 Content-Type: application/pgp-signature Content-Description: Digitale Signatur von OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEpXefSZn9R6zNZtTQE76RLz2tRfAFAmlSzMEACgkQE76RLz2t RfBtRBAAubZDU7LtBojLN4BUlzgck/Q+6fNe9KSxbPMlqUMo11fjttj/CG5jBkDe 7hBToXy7zM+8MVkJyBsQkTTm9SvkW2OE3pmqa8k+UvrZ0E3LnlnK0DVGENOx6kix YYeQPT4wSq2UACckvJCzdUpR4R63na11JebuNEfDUxeymHdKdSHOtV/kqNVsMvgh XZC67ZTwd1pG3JzdA/DWdVoPxBNYfHp3+/0DMd3fcIqdd/Xo3YlhwpGCVw8IiVBY xk9fUzRZJ6fKEF/7zNAOL2/z/SOCKaHVe3yhArBpNfmYkzZ0jM/ZJUoLEWpEaPj+ 76NcQydtl+NzDOy3T1cXQxU5zXr99QNYvbTx1OdOllUK/AlpC1rWUifU+b5ngcCA XUXEdFzZGJkFE8rgFHVpiHgcZO731Vz2oZlCHsUZxWHJvnT2S+wFUJowOtVZ/Lj5 6JpTO5uUFuh5ovDbUiz9be2/aHL0+d+LPwzsTgM7Qiw22jNIA/HL9CQeSIBgQeMc 5WkLJUsHMBXFK/vBR+/oPFIBLkoCPZ8asfsSq64DHH1ZzyJQMk6HX28TL6pOrFPR a84fZ7nSvPaWgoPYMb02idKoxDyq6Wus4e0pLAEuDSLELuh+z5WsQS2Ho2mh8iWz ehMApY/VDNoC3aR0KbmfM1JAjvySTThHUwZnEN2CopG2lMqC9tQ= =0f2K -----END PGP SIGNATURE----- --Sig_/R2ThPIsViOqBkfgFGB8kbx9-- From nobody Tue Dec 30 03:27:00 2025 X-Original-To: ipfw@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dgJRS0pD3z6Mknk for ; Tue, 30 Dec 2025 03:27:00 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dgJRS08wpz3X5X for ; Tue, 30 Dec 2025 03:27:00 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1767065220; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=bTzwguuR//s6Sr3K6BY7AsNhzdvQrlD67j2A4cP1FVw=; b=xK+d1dXutSC8kwp37in3GmgVUZuV8i5nARwd91UKC3U2MP73ckqGsFY81A6kCwDAFyqIZ9 fDIH8ifmuqtLyl1sk+P4spvwpj7MFDa7macJTgH8960lEX9Vkb+LyRC3eYyy4TPJlHcjOs k1L/l+zT+Dlm/aP62ArJM+M8Fp4Td1UkJYU934sjdaJ+h1mEIP+AxggqAvCNwEtDicf/wG v9Tmr5JatYJMmQXp7/24JKHDTbV0CPRlB1fEIvMx1BDjdml1XkyFci9iRjli89B+uTVnUS y+YhrsqxHBoH7VhQj+5CEhkcV31VT6IC22cbyCZNnfFU/PQZr9WGHfuVOaQ9Sg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1767065220; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=bTzwguuR//s6Sr3K6BY7AsNhzdvQrlD67j2A4cP1FVw=; b=j/O93H0d4xGCpfoHw16gX/O0yBCzfQhBeOCC06ei6WqghITRKYP1qaEw44LuxcaL5MIwvA QWWDCeMQJ3v8qz3lzpiXhKcT1eY3i1shQdTMRHdJpEMhxww2ZIuEoni3GpXpmwRra6lwah pebmi6eXArStAgBHArfKbnOuU9GWkh5ozxJVn+RUQEu8VSHbAgur/snh+D3iutIuDh7cI+ Jnq194SQZlT3HcUW1MGPaYHS/6WhoVVbHgfTe6VnJJLo9NbBSAQkNMhQKenTgIa05iPQKW Ru1cz9p/rQl66cy4TeDLNtxW6nV2z//0UuMUqduVkkrjtFTmI32nKC8EQSWwOQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1767065220; a=rsa-sha256; cv=none; b=yzU8obZe8rlReON2Dp2VAYnUwQdrc8Muz7SvfXoRGt/ngtIK5e1BiCOagWD11J1I1avrxh OrIgGiWKYJQdA7tGCx0zNyLjH/6yKBqXM1Fu7ZsUx5h4RJKG1FHE2639Fs2gQJuK/GZE5M gyb+CiTzelBl0/NsGFVvVO7vk09xCk0AtSmK51AVABPr9fZY6B7LGnvqNQWiOduFv0yYw3 l5aUazxxHE7pxj+I48gVqlYhWRDriVo8ZCZV+eTiTGngjZ1cTiIpm/Z7oy4AjBAbVL4ob9 timHqcp8H4A0+doAsb9r3kbPiUKvheqAvWrX/NfTe4bY/4PqLlGi/f6rMNwcJA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4dgJRR6mpMzk8f for ; Tue, 30 Dec 2025 03:26:59 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 5BU3QxMi009968 for ; Tue, 30 Dec 2025 03:26:59 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 5BU3Qx1A009967 for ipfw@FreeBSD.org; Tue, 30 Dec 2025 03:26:59 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" From: bugzilla-noreply@freebsd.org To: ipfw@FreeBSD.org Subject: maintainer-feedback requested: [Bug 292023] ipfw_nat64: kernel panic when combining nat64lsn + nat64clat over a bridge Date: Tue, 30 Dec 2025 03:27:00 +0000 X-Bugzilla-Type: request X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 16.0-CURRENT X-Bugzilla-Keywords: crash X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: ipfw@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? Message-ID: In-Reply-To: References: X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: IPFW Technical Discussions List-Archive: https://lists.freebsd.org/archives/freebsd-ipfw List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ipfw@FreeBSD.org MIME-Version: 1.0 Mark Linimon has asked freebsd-ipfw (Nobody) for maintainer-feedback: Bug 292023: ipfw_nat64: kernel panic when combining nat64lsn + nat64clat ov= er a bridge https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D292023 From nobody Tue Dec 30 03:27:00 2025 X-Original-To: ipfw@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dgJRS4T8Gz6Ml05 for ; Tue, 30 Dec 2025 03:27:00 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dgJRS1mT9z3X5Z for ; Tue, 30 Dec 2025 03:27:00 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1767065220; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=TWPjDWux89hOWGixCSwizMtP80pL+smJr7/rWxG/0M0=; b=a0c86d2HPiO1htXtK9uR1fKwv6o7oBGd9oYTN7itfbFcnAS9eDkKdQVe/+C+ZlyYRSTtQD 05xO8NyxQ7ibPppDAU49kKGF3Ks/vjS8gkS0BjXCA54S9Sd/uyHrHAYfrCwNAworTIOmAz CsS9NfMpgBzBfSHfTlmYvJpiAT7pDvg14hCxYnOpUPjkO5gUehbBiAV5fLm+XlMP4ptTmX AFXEEnDWP3ADsMhmo87xiUVF8ARVIaRCatGPxC0U5b0Fy/E9NijDEh6//omjxSaoRRnyAs FAXRYSB4J8vrPgorJj8sG564nJl/59uNoeT6LquN+fGh2e1dncbqXi3Ppt5q2g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1767065220; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=TWPjDWux89hOWGixCSwizMtP80pL+smJr7/rWxG/0M0=; b=lIABRhsJJN5+D5YTnLDpP+PAda09hczGsb+W1YDAmG1+VqNY86cSuYF0gGDeCpDUQv/g6G M1xTMXLef10+XznviY6EUEPbphFCStGmFaNkS+gMbalDWso3ThTOAR/rX31gwvh3M3122y CvbGXhwc4DU+5ALvh0PgXs8+LdDVBVuzpTwlY7/X0agh7Tb2uKjrx37VbwILF/8jp/Vlk5 zrRj3IsXmtHqpo2qQhwe4QbAbAyq12IGAxZweefRFtnG3DfpGT1LDfFEDfPxajpS+x5cJ1 sQQZR+MxEGTtEEgIsIzTG4uB8hHFfTMyh/ItjaLj0dI8RlgDjqIdyBE+YokjIg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1767065220; a=rsa-sha256; cv=none; b=O7kcQojAZAl5S7zbgnoBvdZ0PIf4WBouXu1qXF2EOG1RB9hy370NFLl7M1oBSWGugHiqXY 0eBestfRs/MUoV9kXGyKF0lNtH9dzhkEglB/Q2UVHmtHt6fVxdnlNmCA9b/H/6oNFkEfdy +q/H8DJvPGwF4fe/vMk8Uz5ayt3NcUa3TKmwLx9gZ4OGHVb8ZeJXvodtuf9+LY+rKRRv6i XiMutb9/7C2I6qcPk5hyJzFxxRU6p3zv+22luficd667AjJPoVV58NgdGnQaOuKWASxWfK 6++0ZdE/3qehqxjIh6HI2DFfUOIuXc8o6kKKnot6Pn9KU6chPPsMYytgH9dv/w== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4dgJRS1NYbzkFC for ; Tue, 30 Dec 2025 03:27:00 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 5BU3R0Zn010030 for ; Tue, 30 Dec 2025 03:27:00 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 5BU3R0lL010022 for ipfw@FreeBSD.org; Tue, 30 Dec 2025 03:27:00 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: ipfw@FreeBSD.org Subject: [Bug 292023] ipfw_nat64: kernel panic when combining nat64lsn + nat64clat over a bridge Date: Tue, 30 Dec 2025 03:27:00 +0000 X-Bugzilla-Reason: CC AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 16.0-CURRENT X-Bugzilla-Keywords: crash X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: linimon@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: ipfw@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: keywords cc flagtypes.name assigned_to Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: IPFW Technical Discussions List-Archive: https://lists.freebsd.org/archives/freebsd-ipfw List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ipfw@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D292023 Mark Linimon changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |crash CC| |ipfw@FreeBSD.org Flags| |maintainer-feedback?(ipfw@F | |reeBSD.org) Assignee|bugs@FreeBSD.org |ipfw@FreeBSD.org --=20 You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug.= From nobody Tue Dec 30 12:04:33 2025 X-Original-To: ipfw@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dgWwd6cTQz6LppN for ; Tue, 30 Dec 2025 12:04:33 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dgWwd63mgz3JBG for ; Tue, 30 Dec 2025 12:04:33 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1767096273; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=t08lsPdrVV8nHY4xQ1altb/wk1Nd93nQzU6+5tn6L1Q=; b=Eh24Hj6Dj5FKHO8b3BfGX9bAp6PhSSav5f2s//i2BSYgOeaCSIIrm9A8lYibTrMRdJfXRl mqPu1l3Jmde0MNR7/rkAQgfickcNEOSf9dq92ysGRy4S9eJBiPuqRS4cSONh2RL13l0Q35 6rPNsJRLPLfQ7brgQza9PkCRyMWyItY11cUrZuS7YTiJ8i48lycxbGSiKSF7IWQUxvPuJy Q0bq/5uzVHTuk+qjWJjdIGWCDC1svaagtRptWTo8c/N7mFDLqhkTxDW0Sl8mwkgFIjfy5u r9F2C7alZs7AlbxCWFYfpmej470KA5O7gmZCf8A4yg5/vpWhT+1VfJmvEUTp4w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1767096273; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=t08lsPdrVV8nHY4xQ1altb/wk1Nd93nQzU6+5tn6L1Q=; b=K9h8q3oExSFYg1Jaw53hd4EqEHwn6g5NMtF7r4D4YrFNeSo9755z6asdFMNj4ZaUEmxRd4 gz5srBi8Y2HGbkoJ/DmqdxxL/ydzI8lyrPRun/G6J4n0QjGr+gkspYzGtZoP/KyQI9m0UY Am3PqqJirmqmVt2OYklL7ddne6eQZCBAcOLFY0BPfgz71cvJrL473aEZYErkifrHUG610b vg+ZlHhdij61X54Llu/gJwewwjHkIKR1IgY/nKkU3bTymIRIlE9T7gORFEtZNEmL5rR5CK hy4l4DMT2rg6Vy2TnvfaOj6DrwwMC3HgA2Xif6KcJs2Q4xlANZe/yzyFDX/txA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1767096273; a=rsa-sha256; cv=none; b=EFOUazLfGu78OhrxDFSll3U8ycSQKITlrOWT3Nt1JOkZfDuIYJFDgvzeWBuoft+pk13s8u hPzoU8sP/uFgEZGATaFTXAvFVUpvgq7VX2SILnga5N1q9QGaqXtP1VdkTRj/MWZRt9NOj6 0v34QplUPo3CkfL10enlysDNW8gWCM6WKx9m9Z+cM9OSZviXCxM4pW6DbCK6YUNxNAbIvN g+0NmYOFKddqh1UIPxzpk5Tj1PLY6NCVE4bdiuf0Tjpi1GRPxzEu/znwwLSVURpEzT7gOj dxWePxRFpG3fCQOCtoCDHQI8bsftD609BP+3HLwMc87sy2x4kjCtAl8A8Sanrw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4dgWwd5gL0z10Xj for ; Tue, 30 Dec 2025 12:04:33 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 5BUC4XsN074481 for ; Tue, 30 Dec 2025 12:04:33 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 5BUC4X6V074480 for ipfw@FreeBSD.org; Tue, 30 Dec 2025 12:04:33 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: ipfw@FreeBSD.org Subject: [Bug 292023] ipfw_nat64: kernel panic when combining nat64lsn + nat64clat over a bridge Date: Tue, 30 Dec 2025 12:04:33 +0000 X-Bugzilla-Reason: AssignedTo CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 16.0-CURRENT X-Bugzilla-Keywords: crash X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: ae@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: ipfw@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: IPFW Technical Discussions List-Archive: https://lists.freebsd.org/archives/freebsd-ipfw List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ipfw@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D292023 Andrey V. Elsukov changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ae@FreeBSD.org --- Comment #1 from Andrey V. Elsukov --- # CLAT Rules $cmd 00350 nat64lsn CLAT tag 464 ipv6 from $plat_prefix to $clat_prefix in = recv bridge0 in $cmd 00351 nat64lsn CLAT tag 464 ipv4 from 100.64.1.0/24 to not me in recv bridge0 in Shouldn't they use `nat64clat CLAT` opcode? --=20 You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug.= From nobody Tue Dec 30 21:02:29 2025 X-Original-To: ipfw@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dglsL09V8z6MTj4 for ; Tue, 30 Dec 2025 21:02:30 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dglsK5MwRz3by0 for ; Tue, 30 Dec 2025 21:02:29 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1767128549; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=2zweiU09rbQUqjMQEc/W6xZg96QtwhonoDdVE0vhjsA=; b=h22WOleoRfV9yVWU3nZnNo6K6ZNfsFXPPPJ+3SwvuZmmWC33wUAMrTsxeyxWptlVaAaDTX JpUPogIfMjGN20QlPS/LIZaL7PN70CoDYXGpLfk9E+7D713Zi4L8pfy6CIs2D4KYlat+wN Jkx8lno4jSLhn5yOGgOwPlG6ZLtNDPAhfQfzrwkWpVj8sH2RZEvHW/6sOlBi/Gv3dNNIPI ijWM2SPRANjmXyKkI+ZntbtUd2l9O9CeLJWalVNJEQuORvFIzbe+tlOedskyyaPmD9yYZM MTxLQJ6fmg7nFm1gYSH8+ii2czFeVYi3SsI7wBPk7PV9fsHgoId+Inar8ECwDw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1767128549; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=2zweiU09rbQUqjMQEc/W6xZg96QtwhonoDdVE0vhjsA=; b=joKHysq4T5UV5US/x7s0MEDoWFvUYSnRdGKR1s7au5SsEcBPFD6rWvm9j6NlurF+0xmf99 SEsnZPEaahWd00di7z2/5oWEp1dEW+2dAQfxxBO4ny2S7/YY3jFXkoI2R8bsqkYrkZV0Nr 81UCKPvJrnT50j7fj08EsSF+iIPb2muswQOVZ5zErkX9HxzJBQpdYXQp4ChWOWwYq1pZr9 W3poa4WxUH4glLeL73BRZ1lwkpckRtFyApr7sqIi4Ip7HFR6X1qpcQSYn5cMbnGidP1oxc kwvPtBxoKMVCvVc9SA7FKJN9pmFv+ehypyvArCJL7M2TfnrxKZXuBDd6JLOKhA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1767128549; a=rsa-sha256; cv=none; b=DAGsMOKtg4rracQKIYzzc5Q2E5Lgc2tkUcUPHdaQ4Dv/lAqbap7UUW7ejiTwRkVAbZ99zU c/gc3LLIJc1akZ/mLVZ2s1q2inN1zCQyT0HzUTaHc/2remMgStzRAUSVwZ3OQ6hGtdDbBQ x6LzZMSjmTpr9z+P/42Dasp7DFUjp+eg64zebpoosxuyVzP8nImmgCrVYbnsQz1xetC7Xg OBYADyNRxgkWKsCjjcO7dseYhnSzYKg/lhudwuNqL0s0Rid5yd8TAb7Bde3p0I2qr/wTLy Jf1GMar1iGi/cJIrj8c0W4mD4ADlw3vF/QAhAJ4EeDZ1by+5nqqKrLpqz+q7aQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4dglsK4wjPz1kj for ; Tue, 30 Dec 2025 21:02:29 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 5BUL2TnX058072 for ; Tue, 30 Dec 2025 21:02:29 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 5BUL2TCa058071 for ipfw@FreeBSD.org; Tue, 30 Dec 2025 21:02:29 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: ipfw@FreeBSD.org Subject: [Bug 292023] ipfw_nat64: kernel panic when combining nat64lsn + nat64clat over a bridge Date: Tue, 30 Dec 2025 21:02:29 +0000 X-Bugzilla-Reason: AssignedTo CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 16.0-CURRENT X-Bugzilla-Keywords: crash X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: p.mousavizadeh@protonmail.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: ipfw@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: IPFW Technical Discussions List-Archive: https://lists.freebsd.org/archives/freebsd-ipfw List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ipfw@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D292023 --- Comment #2 from Seyed Pouria Mousavizadeh Tehrani --- @ae Exactly! The instruction is simply a recipe for a kernel panic that was discovered by accident. The point is no configuration should cause a kernel panic. --=20 You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug.= From nobody Thu Jan 1 22:16:45 2026 X-Original-To: ipfw@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dj1Q56vrDz6Mnhy for ; Thu, 01 Jan 2026 22:16:45 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dj1Q56BR1z496T for ; Thu, 01 Jan 2026 22:16:45 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1767305805; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=B8Y3xUNsowSgy3lXsx4wEbNe8rzg6s6pLCnbVkPVO9c=; b=JDrOVWfFgHLzvSXZlda2TfAt8KfG5kwJw/XFuJiZAbqKjaUtojTifOEVH7zyLdd3A5SRNg ottB9vrjSPcNvmlTNV2AIZLtOjoEBr9gOj/mBOK7Bd4Wgp0YVrO23IYAcIDnK1q01RTbMp e8V3Zlr9g1pSYCUzQIdws5z+aYnXJ16WWUCP+7eF0VCVpm4EinP7VWaGLM0+lAp1Po11Ay GPTi6mdcWiEFTDnNrBP2+qZ/wdxK/PWgX+q5SnCzyhvhGTxtaYP3XLm6W+Ppxhv1cYZhIM /sCc2AzD5AxM+30/ZAEWS9Dc89JIaTUdb9Wf1FTCMEJhynPcjf1yuaaYKXFV2A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1767305805; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=B8Y3xUNsowSgy3lXsx4wEbNe8rzg6s6pLCnbVkPVO9c=; b=ak3Yt46VLIkuGtxbwQI3DwoCT4k+i4hmunOCoQKkwzPEnEcHNtiWhq11eX1cwfHZb2Y6iD ipGi3zbDbuXsOy2TWqRJLZG3RT+XdauHPjZbNzYtRKzs77F49QVn7nJWFcEtTK6sF6YFVd pepa3nlZl412EwuBOXRsDQbHszQx2wCKIeW4m0oxI9vxnZsabiV+idsu0MAomN2caY9thV wCzIt0QCZC9B2SX4UCKzQRqFn5b/BUYXb88XpdJFEtTP0FI9NuLD4lWRQxt980f9T+Hck2 VHr08YsUfeaz2urvenlb35yQlnGQWjE7ig1Z887wpDM7o6nv0Oi7Knt4XMq9eQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1767305805; a=rsa-sha256; cv=none; b=xbh889BEj9Nzw80ZbEAisIkWN35scIZ9mvnatlFVbq/mqHx5r8acbstv8odoghb5AuxzxB vrGZBK3AsHPJDME3vgo7IIdwXwM6EAjXbLe+cHc5z9JeFtkdw9PmWcyw85C7F+RC2H2IJ+ cu9mSMqKkNX/ie6QBThlM7zsSrJJQk4q+xP6JwlSbO8rNlWX0KrIsOTNlpFAmCJB13Y5wC iv6KMg0rnoGkCloY04aL1CORJOvO9yCl5LiZEcQoizOaNzEzcvPDaX8GtLANL29kaiXi5a Zvvs99xfwV7Ey/WXe2fx2Zwr5SJF3/f4nl2N8KQesPuEST3Hbt7/4k/haGZKtA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4dj1Q55TNxzrKn for ; Thu, 01 Jan 2026 22:16:45 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 601MGjIZ006657 for ; Thu, 1 Jan 2026 22:16:45 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 601MGjxN006656 for ipfw@FreeBSD.org; Thu, 1 Jan 2026 22:16:45 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: ipfw@FreeBSD.org Subject: [Bug 292118] Cannot log packets denied by fw_deny_unknown_exthdrs? Date: Thu, 01 Jan 2026 22:16:45 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: CURRENT X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: bz@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: ipfw@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter Message-ID: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: IPFW Technical Discussions List-Archive: https://lists.freebsd.org/archives/freebsd-ipfw List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ipfw@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D292118 Bug ID: 292118 Summary: Cannot log packets denied by fw_deny_unknown_exthdrs? Product: Base System Version: CURRENT Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: kern Assignee: ipfw@FreeBSD.org Reporter: bz@FreeBSD.org While the fw_deny_unknown_exthdrs sysctl is very helpful to stop unknonwn nonsense from possible malicious intend, there seems to be no way to log th= ese packets, which makes the log entry only little useful as, e.g., no src/dst addresses are available or other flags etc. from the packet header. It wo= uld be nice if ipfwlog for example could get a copy of these packets for further analysis. --=20 You are receiving this mail because: You are the assignee for the bug.=