Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 17 Nov 2016 21:21:19 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 214613] Reloading pf rules breaks connections on lo0
Message-ID:  <bug-214613-8@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D214613

            Bug ID: 214613
           Summary: Reloading pf rules breaks connections on lo0
           Product: Base System
           Version: 10.3-STABLE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: bin
          Assignee: freebsd-bugs@FreeBSD.org
          Reporter: longwitz@incore.de

Created attachment 177126
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D177126&action=
=3Dedit
patch against FreeBSD 10 Stable r308323

With the line "set skip on lo0" in /etc/pf.conf reloading the pf rules with
"pfctl -f /etc/pf.conf" breaks any active running connections on lo0.

Example:
scp bigfile 127.0.0.1:/var/tmp/bigfile
bigfile                                34%  345MB  86.4MB/s   00:07 ETAF
ssh_packet_write_poll: Connection to 127.0.0.1 port 22: Permission denied
lost connection

This problem is long standing and discussed in
lists.freebsd.org/pipermail/freebsd-pf/2013-March/006961.html,
the attached patch is adapted from=20
lists.freebsd.org/pipermail/freebsd-pf/2013-April/006994.html.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-214613-8>