From owner-freebsd-bugs@FreeBSD.ORG Thu Feb 7 08:40:01 2013 Return-Path: Delivered-To: freebsd-bugs@smarthost.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 2ADA0FF9 for ; Thu, 7 Feb 2013 08:40:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) by mx1.freebsd.org (Postfix) with ESMTP id 1B831DC4 for ; Thu, 7 Feb 2013 08:40:01 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.6/8.14.6) with ESMTP id r178e0S7052882 for ; Thu, 7 Feb 2013 08:40:00 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.6/8.14.6/Submit) id r178e0kV052877; Thu, 7 Feb 2013 08:40:00 GMT (envelope-from gnats) Date: Thu, 7 Feb 2013 08:40:00 GMT Message-Id: <201302070840.r178e0kV052877@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org Cc: From: Gleb Smirnoff Subject: Re: kern/175909: FreeBSD 9.1 ipfw lookup dst-port regression X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: Gleb Smirnoff List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2013 08:40:01 -0000 The following reply was made to PR kern/175909; it has been noted by GNATS. From: Gleb Smirnoff To: Daniel Hagerty Cc: FreeBSD-gnats-submit@freebsd.org, melifaro@FreeBSD.org Subject: Re: kern/175909: FreeBSD 9.1 ipfw lookup dst-port regression Date: Thu, 7 Feb 2013 12:38:32 +0400 Daniel, On Wed, Feb 06, 2013 at 08:38:24PM -0500, Daniel Hagerty wrote: D> >Description: D> D> ipfw lookup dst-port rules don't seem to work. Didn't test D> similar cases, like src-port. D> D> >How-To-Repeat: D> Load these ipfw rules: D> D> table 1 add 22 D> add 00001 permit log ip4 from any to any proto tcp lookup dst-port 1 D> add 00010 permit log ip from any to any proto tcp dst-port 22 D> D> Observe how on freebsd 9.1, rule 1 will never match port 22 D> traffic it should, whereas the same rules on 8.3 will hit rule 1, as D> expected. D> D> >Fix: D> I worked around it for the moment by writing the rule without a D> lookup table; don't have time to kernel spelunk. Can you please try whether the problem can be reproduced on stable/9 branch prior to revision r234597? To accomplish this you need: # svn co -r r234596 http://svn.freebsd.org/base/stable/9 # cd 9 # make buildworld buildkernel # make installkernel installworld reboot -- Totus tuus, Glebius.