From owner-freebsd-bugs@FreeBSD.ORG Wed Jul 15 10:00:08 2009 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C864B106566B for ; Wed, 15 Jul 2009 10:00:08 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 9E8638FC1B for ; Wed, 15 Jul 2009 10:00:08 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n6FA08pj097219 for ; Wed, 15 Jul 2009 10:00:08 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n6FA08Um097218; Wed, 15 Jul 2009 10:00:08 GMT (envelope-from gnats) Resent-Date: Wed, 15 Jul 2009 10:00:08 GMT Resent-Message-Id: <200907151000.n6FA08Um097218@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Kristian Shaw Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 99BA8106566B for ; Wed, 15 Jul 2009 09:52:44 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id 885A18FC3E for ; Wed, 15 Jul 2009 09:52:44 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.3/8.14.3) with ESMTP id n6F9qiin081787 for ; Wed, 15 Jul 2009 09:52:44 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.3/8.14.3/Submit) id n6F9qimp081785; Wed, 15 Jul 2009 09:52:44 GMT (envelope-from nobody) Message-Id: <200907150952.n6F9qimp081785@www.freebsd.org> Date: Wed, 15 Jul 2009 09:52:44 GMT From: Kristian Shaw To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: kern/136781: Packets appear to drop with pf scrub and if_bridge X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Jul 2009 10:00:09 -0000 >Number: 136781 >Category: kern >Synopsis: Packets appear to drop with pf scrub and if_bridge >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Wed Jul 15 10:00:08 UTC 2009 >Closed-Date: >Last-Modified: >Originator: Kristian Shaw >Release: 7.2-RELEASE #0 >Organization: >Environment: 7.2-RELEASE FreeBSD 7.2-RELEASE #0: Sat Jul 11 06:33:55 BST 2009 root@freebsd72.gb010.itgr.net:/usr/obj/usr/src/sys/TINYBSD i386 >Description: FreeBSD is configured as a firewall/traffic shaping bridge. Fragmented packets are intermittantly dropped when using pf with if_bridge. If pf's scrub function is used then fragments appear to be silently dropped. Testing with the Windows XP ping -l function to a machine on the other side of the bridge: ping -l <1472 = works ping -l 1473<->1497 = dropped packets ping -l >1498 = works Below is the loud output when ping x.x.1.4 -l 1473 is executed. kernel: pf_normalize_ip: reass frag 17581 @ 0-1480 trafficshaper kernel: pf_normalize_ip: reass frag 17581 @ 1480-1481 trafficshaper kernel: pf_reassemble: 1481 < 1481? trafficshaper kernel: pf_reassemble: complete: 0xc15ba700(1501) >How-To-Repeat: rc.conf ******* cloned_interfaces="bridge0" autobridge_interfaces="bridge0" autobridge_bridge0="vr0 vr1" ipv4_addrs_bridge0="x.x.8.11/24" defaultrouter="x.x.8.1" ifconfig_vr0="up" ifconfig_vr1="up" sysctl ****** net.link.bridge.ipfw: 0 net.link.bridge.log_stp: 0 net.link.bridge.pfil_local_phys: 1 net.link.bridge.pfil_member: 1 net.link.bridge.pfil_bridge: 0 net.link.bridge.ipfw_arp: 0 net.link.bridge.pfil_onlyip: 1 pf.conf ******* scrub in all fragment reassemble >Fix: If scrub fragment reassemble is not used then packets are passed OK. If fragment drop-ovl is used the packets are passed OK. >Release-Note: >Audit-Trail: >Unformatted: