From owner-freebsd-stable Fri Mar 9 11:39: 8 2001 Delivered-To: freebsd-stable@freebsd.org Received: from relay1.ntu-kpi.kiev.ua (www.ntu-kpi.kiev.ua [212.111.192.161]) by hub.freebsd.org (Postfix) with ESMTP id 1232937B719 for ; Fri, 9 Mar 2001 11:38:58 -0800 (PST) (envelope-from fm@astral.ntu-kpi.kiev.ua) Received: from astral.ntu-kpi.kiev.ua (if-14-13-10M.astral.ntu-kpi.kiev.ua [10.100.0.14]) by relay1.ntu-kpi.kiev.ua (Postfix) with ESMTP id 26E382FE9A; Fri, 9 Mar 2001 21:38:50 +0200 (EET) Received: (from fm@localhost) by astral.ntu-kpi.kiev.ua (8.11.2/8.11.1) id f29JcCB13727; Fri, 9 Mar 2001 21:38:12 +0200 (EET) (envelope-from fm) Date: Fri, 9 Mar 2001 21:38:12 +0200 From: "Dmitry A. Yanko" To: "Rodney W. Grimes" Cc: freebsd-stable@FreeBSD.ORG Subject: Re: panic, ipfw broken in stable? Message-ID: <20010309213811.A12561@astral.ntu-kpi.kiev.ua> References: <20010307191526.A60472@astral.ntu-kpi.kiev.ua> <200103091822.KAA29463@gndrsh.dnsmgr.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200103091822.KAA29463@gndrsh.dnsmgr.net>; from freebsd@gndrsh.dnsmgr.net on Fri, Mar 09, 2001 at 10:22:06AM -0800 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Fri, Mar 09, 2001 at 10:22:06AM -0800, Rodney W. Grimes wrote: > ... > > Since it looks like you haven't seen the ongoing thread about > your problem, I thought I would follow up to your original email. > > Right now we have a hypothosis that a MFC of the stats counters > to ip_output is causing your panic. I would like to try and > duplicate that on a system here, but I need some configuration > data from your system, particularly the ipfw rule set that > is triggering the problem. (this applies to anyone who has > seen this panic.) sorry, I had some holidays. ${fwcmd} add 65000 pass all from any to any ${fwcmd} add 100 pass all from any to any via lo0 ${fwcmd} add 200 deny all from any to 127.0.0.0/8 ${fwcmd} add 1000 deny udp from any to my_ip 26000,27500,27910,27960 ${fwcmd} add 1010 deny tcp from any to my_ip 6000 ${fwcmd} add 2000 pipe 1 tcp from my_ip 20 to any ${fwcmd} add 2100 pipe 1 tcp from my_ip 139 to any ${fwcmd} add 6000 allow tcp from my_ip to somehost0 3128 uid fm ${fwcmd} add 6001 allow tcp from my_ip to somehost0 3128 uid root ${fwcmd} add 6005 deny tcp from my_ip to somehost0 3128 ${fwcmd} add 7000 allow tcp from my_ip to somehost1 3128 uid fm ${fwcmd} add 7001 allow tcp from my_ip to somehost1 3128 uid root ${fwcmd} add 7005 deny tcp from my_ip to somehost1 3128 ${fwcmd} add 8000 allow tcp from my_ip to somehost2 6666 uid fm ${fwcmd} add 8001 allow tcp from my_ip to somehost2 6666 uid root ${fwcmd} add 8005 deny tcp from my_ip to somehost2 6666 ${fwcmd} pipe 1 config bw 200KBytes/s Do you need anything else? I can try to create crash dump. -- #include , fm. GnuPG fpr = 6101 9519 9A45 3D44 3BCB 0974 C774 5143 8F26 95B5 Mail message with GPG-KEY in subject to get my public key |&| DAY-RIPE To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message