Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 21 Apr 2021 07:58:07 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 255295] firewallcrashing kernel (reboot) after update from 12.1 (looks like ipfw causes the crash)
Message-ID:  <bug-255295-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D255295

            Bug ID: 255295
           Summary: firewallcrashing kernel (reboot) after update from
                    12.1 (looks like ipfw causes the crash)
           Product: Base System
           Version: 13.0-STABLE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: michael@meiszl.de

first of all, this system is up and running since fbsd 7 or so, the hardware
changed a bit over the years, but is really solid as a rock (so far).
Currently its an Ryzen 3400G with some Intel IX? (double 10Gbit/s card) and=
 one
or more Realtec 1Gb card.=20
Main usage is ROUTER (but also conatains Apache / Mysql / Wordpress and so =
on).

My first naive approach to update last week ended very shortly in the 2nd r=
un
of "freebsd-update install" with a last message "ipfw: pullup failed" and a
lost connection. Redoing the same stuff from the console also gave that err=
or
and locked me out completely. The Reset Key was no help either, the filesys=
tem
was crashed, no login possible anymore besides single User Mode.
So I reinstalled 12.1 from USB Drive, fetched the Backup via LAN and revert=
ed
to the state before the update (and was quite annoyed, this really was the =
1st
time FBSD did not love me anymore)

I was angry for a week but this mornig I decided to give it a 2nd chance,
beeing more prepared for troubles.

So I disabled all rc services, rebooted, installed directly from the consol=
e.
Yeah! all passes went through! I was delighted! Although there was an error
message about a missing "srand0FBSD_1_6" in a shared lib, I made it savely
through all stages, including updates to the apps.
Then I became bold and reactived all rc.services and rebooted...

looked good, but not for long :-(
After some seconds in multiuser there was an instant reboot again! -(
And yeah, each time the system only managed to keep up for some seconds, th=
en
it rebooted.
I went into single user (this worked) and began to disable the services one=
 by
one, starting with ipfw
And guess what? this did the trick!
The crashes begin with the first incoming packet that the firewall has to
filter!
(Disabling the firewall is NO OPTION here, this is the main router, it runs=
 VPN
and V6 Tunnels!)

So what can I do now? (I have saved the crash dumps, but dont know what to =
do
with them)
If you need some files from the crash dir, drop me a note.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-255295-227>