From owner-freebsd-net@FreeBSD.ORG Wed Mar 17 10:47:41 2010 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AFC161065670 for ; Wed, 17 Mar 2010 10:47:41 +0000 (UTC) (envelope-from auryn@zirakzigil.org) Received: from mail.zirakzigil.org (mail.zirakzigil.org [82.63.178.63]) by mx1.freebsd.org (Postfix) with ESMTP id 49E498FC0C for ; Wed, 17 Mar 2010 10:47:41 +0000 (UTC) Received: from localhost (unknown [192.168.1.2]) by mail.zirakzigil.org (Postfix) with ESMTP id 6808A949DF; Wed, 17 Mar 2010 11:47:38 +0100 (CET) X-Virus-Scanned: amavisd-new at zirakzigil.org Received: from mail.zirakzigil.org ([192.168.1.2]) by localhost (ext.zirakzigil.org [192.168.1.2]) (amavisd-new, port 10024) with ESMTP id A6rXxPIVlijh; Wed, 17 Mar 2010 11:47:35 +0100 (CET) Received: from aurynmob2.giulioferro.it (unknown [192.168.1.2]) (Authenticated sender: auryn@zirakzigil.org) by mail.zirakzigil.org (Postfix) with ESMTPA id 72882949D1; Wed, 17 Mar 2010 11:47:35 +0100 (CET) Message-ID: <4BA0B344.3010708@zirakzigil.org> Date: Wed, 17 Mar 2010 11:47:32 +0100 From: Giulio Ferro User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; en-US; rv:1.9.1.7) Gecko/20100223 Thunderbird/3.0.1 MIME-Version: 1.0 To: Daniel Hartmeier References: <4B8E4850.1060104@zirakzigil.org> <4B9EA5A2.4010900@zirakzigil.org> <00bc01cac53d$a92f0b70$fb8d2250$@com> <20100317081256.GA21633@insomnia.benzedrine.cx> In-Reply-To: <20100317081256.GA21633@insomnia.benzedrine.cx> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org, kevin , freebsd-pf@freebsd.org Subject: Re: PF + BRIDGE + PFSYNC causes system freezing X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Mar 2010 10:47:41 -0000 On 17.03.2010 09:12, Daniel Hartmeier wrote: > On Tue, Mar 16, 2010 at 03:19:51PM -0400, kevin wrote: > > >> I would like to assist in diagnosing this issue so if anyone wants me to >> check anything or test, please let me know. I would really like to >> understand this problem. >> > What are your settings for > > $ sysctl -a | grep bridge.pfil > net.link.bridge.pfil_local_phys: 0 net.link.bridge.pfil_member: 1 net.link.bridge.pfil_bridge: 1 net.link.bridge.pfil_onlyip: 1 > Have you tried filtering only on one of the physical bridge interfaces, > with net.link.bridge.pfil_bridge=0 and set skip on { lo0, bridge0, em1 }? > > Daniel > Ok, I'm trying "set skip on {lo0, bridge0}". I'll let you know if there is any improvement. Thanks.