From owner-freebsd-pf@FreeBSD.ORG  Wed Mar 17 11:03:43 2010
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id AF379106566C
	for <freebsd-pf@freebsd.org>; Wed, 17 Mar 2010 11:03:43 +0000 (UTC)
	(envelope-from auryn@zirakzigil.org)
Received: from mail.zirakzigil.org (mail.zirakzigil.org [82.63.178.63])
	by mx1.freebsd.org (Postfix) with ESMTP id 55D8A8FC17
	for <freebsd-pf@freebsd.org>; Wed, 17 Mar 2010 11:03:43 +0000 (UTC)
Received: from localhost (unknown [192.168.1.2])
	by mail.zirakzigil.org (Postfix) with ESMTP id 6808A949DF;
	Wed, 17 Mar 2010 11:47:38 +0100 (CET)
X-Virus-Scanned: amavisd-new at zirakzigil.org
Received: from mail.zirakzigil.org ([192.168.1.2])
	by localhost (ext.zirakzigil.org [192.168.1.2]) (amavisd-new,
	port 10024)
	with ESMTP id A6rXxPIVlijh; Wed, 17 Mar 2010 11:47:35 +0100 (CET)
Received: from aurynmob2.giulioferro.it (unknown [192.168.1.2])
	(Authenticated sender: auryn@zirakzigil.org)
	by mail.zirakzigil.org (Postfix) with ESMTPA id 72882949D1;
	Wed, 17 Mar 2010 11:47:35 +0100 (CET)
Message-ID: <4BA0B344.3010708@zirakzigil.org>
Date: Wed, 17 Mar 2010 11:47:32 +0100
From: Giulio Ferro <auryn@zirakzigil.org>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; en-US;
	rv:1.9.1.7) Gecko/20100223 Thunderbird/3.0.1
MIME-Version: 1.0
To: Daniel Hartmeier <daniel@benzedrine.cx>
References: <4B8E4850.1060104@zirakzigil.org>	<4B9EA5A2.4010900@zirakzigil.org>	<00bc01cac53d$a92f0b70$fb8d2250$@com>
	<20100317081256.GA21633@insomnia.benzedrine.cx>
In-Reply-To: <20100317081256.GA21633@insomnia.benzedrine.cx>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-net@freebsd.org, freebsd-pf@freebsd.org
Subject: Re: PF + BRIDGE + PFSYNC causes system freezing
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Mar 2010 11:03:43 -0000

On 17.03.2010 09:12, Daniel Hartmeier wrote:
> On Tue, Mar 16, 2010 at 03:19:51PM -0400, kevin wrote:
>
>    
>> I would like to assist in diagnosing this issue so if anyone wants me to
>> check anything or test, please let me know. I would really like to
>> understand this problem.
>>      
> What are your settings for
>
>    $ sysctl -a | grep bridge.pfil
>    

net.link.bridge.pfil_local_phys: 0
net.link.bridge.pfil_member: 1
net.link.bridge.pfil_bridge: 1
net.link.bridge.pfil_onlyip: 1


> Have you tried filtering only on one of the physical bridge interfaces,
> with net.link.bridge.pfil_bridge=0 and set skip on { lo0, bridge0, em1 }?
>
> Daniel
>    

Ok, I'm trying "set skip on {lo0, bridge0}".
I'll let you know if  there is any improvement.

Thanks.