From owner-freebsd-pf@FreeBSD.ORG Thu Aug 25 19:28:43 2005 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2E94616A41F for ; Thu, 25 Aug 2005 19:28:43 +0000 (GMT) (envelope-from mike@uniserve.com) Received: from mx6.uniserve.ca (mx6.uniserve.ca [216.113.192.90]) by mx1.FreeBSD.org (Postfix) with ESMTP id E091A43D46 for ; Thu, 25 Aug 2005 19:28:42 +0000 (GMT) (envelope-from mike@uniserve.com) Received: from mike.office.uniserve.ca ([204.244.161.213] helo=uniservedev) by mx6.uniserve.ca with smtp (Exim 4.22) id 1E8NP0-000EjA-1W for freebsd-pf@freebsd.org; Thu, 25 Aug 2005 12:28:42 -0700 Message-ID: <006c01c5a9aa$9e2b9d00$d5a1f4cc@uniservedev> From: "Mike Pultz" To: Date: Thu, 25 Aug 2005 12:24:31 -0700 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2180 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 X-Scanner: OK. Scanned. Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: pf + pfsync + carp - FreeBSD 5.4 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Aug 2005 19:28:43 -0000 Hello, I have two firewalls setup as failover using pf + pfsync and carp, and = I've been expierencing kenel panics from pfsync. It seems that every few days the machines = reboot. I noticed that the latest version of pfsync.c under the RELENG_5 branch = is 1.11.2.3, which uses the OpenBSD verison 1.26 (which I've cvs'd up to). I did some reading, and found some people having similar problems (under = OpenBSD and=20 FreeBSD RELENG_6), and it looks like some of the fixes happened under = OpenBSD version 1.46, which doesn't exist yet under the RELENG_5 branch. Is there any chance that a newer verison of pfsync.c can be promoted to = the RELENG_5 branch? Please correct me if I'm off on any of this information? Cheers, Mike