Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 May 2012 15:33:37 +0200
From:      =?ISO-8859-1?Q?Ermal_Lu=E7i?= <eri@freebsd.org>
To:        Joerg Pulz <Joerg.Pulz@frm2.tum.de>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: kern/168190: [pf] panic when using pf and route-to (maybe: bad fragment handling?)
Message-ID:  <CAPBZQG0jdVzmkiKj3eXtR5iRNSWuOCT5e3%2B_f0uy9wff2Jberg@mail.gmail.com>
In-Reply-To: <alpine.BSF.2.00.1205230903530.89783@unqrf.nqzva.sez2>
References:  <201205221200.q4MC0Gtg085514@freefall.freebsd.org> <20120522150603.GF29536@insomnia.benzedrine.cx> <CAPBZQG2zdNygkuX%2ByiUMHs2Tem_me%2BRa5CKXPoGm%2BnCQ9euN%2BA@mail.gmail.com> <alpine.BSF.2.00.1205230903530.89783@unqrf.nqzva.sez2>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, May 23, 2012 at 9:05 AM, Joerg Pulz <Joerg.Pulz@frm2.tum.de> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> On Tue, 22 May 2012, Ermal Lu=E7i wrote:
>
>> iirc this is from fastforwarding being enabled.
>> Just from memory though, cause i remember seeing this panic as well.
>>
>> Again, from memory this is fastforwarding related, try disabling it.
>> If it was pf(4) surely in pfSense would have been seen more frequently
>> and in pfSense fastforwarding is not used but normal path....
>
>
> Ermal,
>
> thanks for your reply to this.
> As i already stated in a previous mail, fastforwarding is not and was nev=
er
> used on this system.
>

Heh i might have misread.

Can you try with this patch
https://github.com/bsdperimeter/pfsense-tools/blob/master/patches/RELENG_8_=
3/pf_route-to_fragemnts.RELENG_8.diff

>From the commit message seems this is realted with your issue:
commit 164f4705fe4474d264d5d561ac3e3d60a512d2f7
Author: Ermal <eri@pfsense.org>
Date:   Sun Mar 21 19:01:34 2010 +0000

    Add patch that fixes sending of fragmented packets with policy-routing.

>
> =A0net.inet.ip.forwarding: 1
> =A0net.inet.ip.fastforwarding: 0
> =A0net.inet6.ip6.forwarding: 0
>
> Kind regards
> Joerg
>
> - -- The beginning is the most important part of the work.
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0-Plato
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.18 (FreeBSD)
>
> iD8DBQFPvIxISPOsGF+KA+MRAmIUAJ4gth6QsTMXmHRCnKhsm4XQ2S0ibQCeOB8h
> W3C84aefIPrpu9O69pIrmEM=3D
> =3D/wga
> -----END PGP SIGNATURE-----



--=20
Ermal



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAPBZQG0jdVzmkiKj3eXtR5iRNSWuOCT5e3%2B_f0uy9wff2Jberg>