From owner-freebsd-current@FreeBSD.ORG Thu Sep 16 21:15:25 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 81D7216A4CE for ; Thu, 16 Sep 2004 21:15:25 +0000 (GMT) Received: from c00l3r.networx.ch (c00l3r.networx.ch [62.48.2.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id C197E43D54 for ; Thu, 16 Sep 2004 21:15:24 +0000 (GMT) (envelope-from andre@freebsd.org) Received: (qmail 11591 invoked from network); 16 Sep 2004 21:10:26 -0000 Received: from dotat.atdotat.at (HELO [62.48.0.47]) ([62.48.0.47]) (envelope-sender ) by c00l3r.networx.ch (qmail-ldap-1.03) with SMTP for ; 16 Sep 2004 21:10:26 -0000 Message-ID: <414A026A.4000802@freebsd.org> Date: Thu, 16 Sep 2004 23:15:22 +0200 From: Andre Oppermann User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a1) Gecko/20040520 X-Accept-Language: en-us, en MIME-Version: 1.0 To: itetcu@people.tecnik93.com References: <1095368255.4149fe3f1b8f1@webmail.people.tecnik93.com> In-Reply-To: <1095368255.4149fe3f1b8f1@webmail.people.tecnik93.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: current@freebsd.org Subject: Re: BETA4 + IPFIREWALL_FORWARD => panic X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Sep 2004 21:15:25 -0000 itetcu@people.tecnik93.com wrote: > Hi, > > [Please excuse formating, I'm writeing from webmail] > > A 5.3-BETA4 cvsupped around 16.00 today (16 sept) panics when ipfw fwd rule is > used. It seems to be stable with the same kernel without fwd rules. If the fwd > rule is present at boot it will panic each time, it it is added later it seems > that sometimes (one of 5 untill now) it does not panic. The panic seems to > happen on the first / first few fwd packets. > > The machine is a remote firewall+natd, k6-II with 2 rl nics; I have no serail > console on it; since it's in production I've disabled the fwd rule (fwd iip,8110 > from iinet:imask to any pop3); I will be able (and try) to play with it tommorow > morning for about an hour and in the evening (GMT+2); bellow is the panic > transcribed by hand; if neccessary I'll setup a serial console. I have MFC'd the fix a couple of hours ago. You should cvsup again and check if you have got rev. 1.1.2.5 of netinet/ip_fw_pfil.c. -- Andre