Date: Fri, 8 Jul 2011 14:26:37 +0200 From: =?ISO-8859-1?Q?Ermal_Lu=E7i?= <eri@freebsd.org> To: obrien@freebsd.org Cc: "Bjoern A. Zeeb" <bz@freebsd.org>, freebsd-pf@freebsd.org Subject: Re: svn commit: r223637 - in head: . contrib/pf/authpf contrib/pf/ftp-proxy contrib/pf/man contrib/pf/pfctl contrib/pf/pflogd sbin/pflogd sys/conf sys/contrib/altq/altq sys/contrib/pf/net sys/modules s... Message-ID: <CAPBZQG1ZOBJh0BMPH%2BkKAHfWJoYCubdGunncd5Bhd7y39-_fkA@mail.gmail.com> In-Reply-To: <20110707193539.GA60591@dragon.NUXI.org> References: <201106281157.p5SBvP5g048097@svn.freebsd.org> <EA6E6909-A42B-4CF2-891A-B8A80E2B8476@FreeBSD.org> <20110629192224.2283efc8@fabiankeil.de> <20110707193539.GA60591@dragon.NUXI.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jul 7, 2011 at 9:35 PM, David O'Brien <obrien@freebsd.org> wrote:
> On Wed, Jun 29, 2011 at 07:22:24PM +0200, Fabian Keil wrote:
>> "Bjoern A. Zeeb" <bz@FreeBSD.org> wrote:
>> > In short; please test!
>>
>> I didn't experience any real problems yet, but running
>
> Hi Bjoern,
> Unfortunately I've had MAJOR network problems since the pf upgrade.
>
> Besides getting the "state key linking mismatch!" issue:
>
> pf: state key linking mismatch! dir=3DOUT, if=3Dfxp0, stored af=3D2, a0: =
208.83.139.205:2703, a1: 74.95.12.85:20474, proto=3D6, found af=3D2, a0: 20=
8.83.139.205:2703, a1: 74.95.12.85:20474, proto=3D6.
> pf: state key linking mismatch! dir=3DOUT, if=3Dfxp0, stored af=3D2, a0: =
87.98.164.164:44387, a1: 74.95.12.85:53, proto=3D6, found af=3D2, a0: 87.98=
.164.164:44387, a1: 74.95.12.85:53, proto=3D6.
> pf: state key linking mismatch! dir=3DOUT, if=3Dfxp0, stored af=3D2, a0: =
87.98.164.164:44387, a1: 74.95.12.85:53, proto=3D6, found af=3D2, a0: 87.98=
.164.164:44387, a1: 74.95.12.85:53, proto=3D6.
>
> I found that my kernel (@ r223671) would stop sending packets 3-4 hours
> after reboot. =A0New connections could not be established, I could not pi=
ng
> any of the direct connections on any of my interfaces. =A0Existing
> connections would remain established for quite some time (hours) but
> eventually close also.
>
> No amount of re-running /etc/rc.d/* scripts ('pf restart', 'netif
> restart', 'routing restart', etc...) would bring back working networking.
>
> Since reverting back to r223636, my kernel has had rock solid networking.
>
> I have 'pfctl', 'netstat', 'netstat -rn', and 'sysctl -a' output from one
> of these experiences. =A0Would they be useful to you in looking into this=
?
>
please send those.
Also useful would be a description of your setup.
> --
> -- David =A0 =A0(obrien@FreeBSD.org)
> _______________________________________________
> freebsd-pf@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"
>
--=20
Ermal
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAPBZQG1ZOBJh0BMPH%2BkKAHfWJoYCubdGunncd5Bhd7y39-_fkA>