From owner-freebsd-stable@FreeBSD.ORG Sun Jun 11 23:52:41 2006 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2325C16A418 for ; Sun, 11 Jun 2006 23:52:41 +0000 (UTC) (envelope-from freebsd@wcubed.net) Received: from mail.datausa.com (mail.datausa.com [216.150.220.134]) by mx1.FreeBSD.org (Postfix) with SMTP id A63FD43D45 for ; Sun, 11 Jun 2006 23:52:40 +0000 (GMT) (envelope-from freebsd@wcubed.net) Received: (qmail 50298 invoked by uid 89); 11 Jun 2006 23:50:45 -0000 Received: from c-67-176-75-179.hsd1.co.comcast.net (HELO ?10.0.1.1?) (67.176.75.179) by mail.datausa.com with SMTP; 11 Jun 2006 23:50:45 -0000 Message-ID: <448CACC4.9010805@wcubed.net> Date: Sun, 11 Jun 2006 17:52:36 -0600 From: Brad Waite User-Agent: Thunderbird 1.5.0.4 (Windows/20060516) MIME-Version: 1.0 To: Max Laier References: <448C5C41.10302@wcubed.net> <20060611213635.GA35430@xor.obsecurity.org> <448C8F3B.5020806@wcubed.net> <200606120024.59336.max@love2party.net> In-Reply-To: <200606120024.59336.max@love2party.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-stable@freebsd.org, Kris Kennaway Subject: Re: 6.1-stable hangs and LORs X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 11 Jun 2006 23:52:41 -0000 Max Laier wrote: > From pf.conf(5): > BUGS > Due to a lock order reversal (LOR) with the socket layer, the use of the > group and user filter parameter in conjuction with a Giant-free netstack > can result in a deadlock. If you have to use group or user you must set > debug.mpsafenet to ``0'' from the loader(8), for the moment. This work- > around will still produce the LOR, but Giant will protect from the dead- > lock. > Thanks for the heads-up, Max. I didn't think I was using 'user' or 'group' in my pf.conf, but the default ftp proxy entry indeed matches user ftp-proxy. I'll try the mpsafenet=0 and we'll see if that fixes it.