From owner-freebsd-questions@FreeBSD.ORG Thu Nov 8 22:03:05 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5E23116A481 for ; Thu, 8 Nov 2007 22:03:05 +0000 (UTC) (envelope-from colin@ips.gov.au) Received: from gatekeeper.ips.gov.au (ns.ips.gov.au [138.24.1.34]) by mx1.freebsd.org (Postfix) with SMTP id ECAA013C4B7 for ; Thu, 8 Nov 2007 22:03:04 +0000 (UTC) (envelope-from colin@ips.gov.au) Received: from gpo.dmz.ips.gov.au (gpo.dmz.ips.gov.au [138.24.8.4]) by gatekeeper.ips.gov.au (Postfix) with ESMTP id 43BDB20F02 for ; Fri, 9 Nov 2007 08:41:50 +1100 (EST) Received: from localhost (localhost.dmz.ips.gov.au [127.0.0.1]) by gpo.dmz.ips.gov.au (Postfix) with ESMTP id 38D3E7E848; Fri, 9 Nov 2007 08:41:50 +1100 (EST) X-Virus-Scanned: amavisd-new at ips.gov.au Received: from gpo.dmz.ips.gov.au ([127.0.0.1]) by localhost (gpo.dmz.ips.gov.au [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QxEl1qrO2429; Fri, 9 Nov 2007 08:41:46 +1100 (EST) Date: Fri, 9 Nov 2007 08:42:27 +1100 From: Colin Yuile To: freebsd-questions@freebsd.org Message-Id: <20071109084227.8f19b38e.colin@ips.gov.au> Organization: IPS Radio and Space Services X-Mailer: Sylpheed 2.4.4 (GTK+ 2.10.14; i386-portbld-freebsd6.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: freebsd6.2-stable + ipfilter + policy routing mbuf leak X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Nov 2007 22:03:05 -0000 Hi all, I have a server running 6.2-stable that experiences mbuf leakage if I perform policy routing with ipfilter. This is independent of the hardware as I have moved the disk to a different machine with different MB, NICs etc and had the same result. The server is running quagga, postfix and ipfilter for some basic firewalling. The policy routing was to route outgoing web traffic to a second internet link. I have been running the same setup for several years on a 4.11 machine without any problems. Can anyone confirm this problem? Cheers, Colin