From owner-freebsd-pf@FreeBSD.ORG Sat Aug 6 18:31:00 2005 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A91D416A41F for ; Sat, 6 Aug 2005 18:31:00 +0000 (GMT) (envelope-from bkoenig@cs.tu-berlin.de) Received: from smtp.efacilitas.de (smtp.efacilitas.de [85.10.196.108]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3472143D55 for ; Sat, 6 Aug 2005 18:30:59 +0000 (GMT) (envelope-from bkoenig@cs.tu-berlin.de) Received: from eurystheus.local (port-212-202-37-29.dynamic.qsc.de [212.202.37.29]) by smtp.efacilitas.de (Postfix) with ESMTP id 286D95F9BF9; Sat, 6 Aug 2005 20:36:38 +0000 (UTC) Received: from localhost (eurystheus.local [192.168.1.67]) by eurystheus.local (Postfix) with ESMTP id 5125E12B16A; Sat, 6 Aug 2005 20:21:33 +0200 (CEST) Received: from eurystheus.local ([192.168.1.67]) by localhost (eurystheus.locaL [192.168.1.67]) (amavisd-new, port 10024) with ESMTP id 51275-01; Sat, 6 Aug 2005 20:21:27 +0200 (CEST) Received: from [192.168.1.67] (eurystheus.local [192.168.1.67]) by eurystheus.local (Postfix) with ESMTP id 1E42212B0FF; Sat, 6 Aug 2005 20:21:26 +0200 (CEST) Message-ID: <42F4FFA6.8090203@cs.tu-berlin.de> Date: Sat, 06 Aug 2005 20:21:26 +0200 From: =?ISO-8859-1?Q?Bj=F6rn_K=F6nig?= User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.8) Gecko/20050517 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Max Laier References: <42F4F0CB.8050306@cs.tu-berlin.de> <200508061924.10927.max@love2party.net> In-Reply-To: <200508061924.10927.max@love2party.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Virus-Scanned: amavisd-new at example.com Cc: freebsd-pf@freebsd.org Subject: Re: pf causes freeze of amd64 machine on heavy network load X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Aug 2005 18:31:00 -0000 Max Laier wrote: > From pf.conf(5): > BUGS > Due to a lock order reversal (LOR) with the socket layer, the use of the > group and user filter parameter in conjuction with a Giant-free netstack > can result in a deadlock. If you have to use group or user you must set > debug.mpsafenet to ``0'' from the loader(8), for the moment. This work- > around will still produce the LOR, but Giant will protect from the dead- > lock. > > I am afraid this is what bites you. Many thanks for this hint. The impact on performance with debug.mpsafenet=0 is not very important to me. Björn -- Björn König (bkoenig@cs.tu-berlin.de) student at the Technische Universität Berlin http://bkoenig.alpha-tierchen.de/