Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 9 Mar 2001 21:38:12 +0200
From:      "Dmitry A. Yanko" <fm@astral.ntu-kpi.kiev.ua>
To:        "Rodney W. Grimes" <freebsd@gndrsh.dnsmgr.net>
Cc:        freebsd-stable@FreeBSD.ORG
Subject:   Re: panic, ipfw broken in stable?
Message-ID:  <20010309213811.A12561@astral.ntu-kpi.kiev.ua>
In-Reply-To: <200103091822.KAA29463@gndrsh.dnsmgr.net>; from freebsd@gndrsh.dnsmgr.net on Fri, Mar 09, 2001 at 10:22:06AM -0800
References:  <20010307191526.A60472@astral.ntu-kpi.kiev.ua> <200103091822.KAA29463@gndrsh.dnsmgr.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Mar 09, 2001 at 10:22:06AM -0800, Rodney W. Grimes wrote:
> ...
> 
> Since it looks like you haven't seen the ongoing thread about
> your problem, I thought I would follow up to your original email.
> 
> Right now we have a hypothosis that a MFC of the stats counters
> to ip_output is causing your panic.  I would like to try and
> duplicate that on a system here, but I need some configuration
> data from your system, particularly the ipfw rule set that
> is triggering the problem.  (this applies to anyone who has
> seen this panic.)

sorry, I had some holidays.

${fwcmd} add 65000 pass all from any to any
${fwcmd} add 100 pass all from any to any via lo0
${fwcmd} add 200 deny all from any to 127.0.0.0/8
${fwcmd} add 1000 deny udp from any to my_ip 26000,27500,27910,27960
${fwcmd} add 1010 deny tcp from any to my_ip 6000
${fwcmd} add 2000 pipe 1 tcp from my_ip 20 to any
${fwcmd} add 2100 pipe 1 tcp from my_ip 139 to any
${fwcmd} add 6000 allow tcp from my_ip to somehost0 3128 uid fm
${fwcmd} add 6001 allow tcp from my_ip to somehost0 3128 uid root
${fwcmd} add 6005 deny tcp from my_ip to somehost0 3128
${fwcmd} add 7000 allow tcp from my_ip to somehost1 3128 uid fm
${fwcmd} add 7001 allow tcp from my_ip to somehost1 3128 uid root
${fwcmd} add 7005 deny tcp from my_ip to somehost1 3128
${fwcmd} add 8000 allow tcp from my_ip to somehost2 6666 uid fm
${fwcmd} add 8001 allow tcp from my_ip to somehost2 6666 uid root
${fwcmd} add 8005 deny tcp from my_ip to somehost2 6666
${fwcmd} pipe 1 config bw 200KBytes/s

Do you need anything else?
I can try to create crash dump.

-- 
#include <regards.h>, fm.
GnuPG fpr = 6101 9519 9A45 3D44 3BCB  0974 C774 5143 8F26 95B5
Mail message with GPG-KEY in subject to get my public key |&| DAY-RIPE

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010309213811.A12561>