From owner-freebsd-current@freebsd.org  Tue Nov 10 21:28:08 2015
Return-Path: <owner-freebsd-current@freebsd.org>
Delivered-To: freebsd-current@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id CB50DA2C2FC
 for <freebsd-current@mailman.ysv.freebsd.org>;
 Tue, 10 Nov 2015 21:28:08 +0000 (UTC)
 (envelope-from kp@vega.codepro.be)
Received: from venus.codepro.be (venus.codepro.be [IPv6:2a01:4f8:162:1127::2])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256
 bits))
 (Client CN "*.codepro.be", Issuer "Gandi Standard SSL CA 2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 8838E152B
 for <freebsd-current@freebsd.org>; Tue, 10 Nov 2015 21:28:08 +0000 (UTC)
 (envelope-from kp@vega.codepro.be)
Received: from vega.codepro.be (unknown [172.16.1.3])
 by venus.codepro.be (Postfix) with ESMTP id 7408F2051E;
 Tue, 10 Nov 2015 22:28:05 +0100 (CET)
Received: by vega.codepro.be (Postfix, from userid 1001)
 id 6CA0B4ED9F; Tue, 10 Nov 2015 22:28:05 +0100 (CET)
Date: Tue, 10 Nov 2015 22:28:05 +0100
From: Kristof Provost <kp@FreeBSD.org>
To: Shawn Webb <shawn.webb@hardenedbsd.org>
Cc: freebsd-current@freebsd.org
Subject: Re: pf NAT and VNET Jails
Message-ID: <20151110212805.GB13268@vega.codepro.be>
References: <CAExMvs=jVsASLyiqU9nTpir0Hy_s_DfChgf4XKeGWv-8yojNBw@mail.gmail.com>
 <13324720.omGDCH0sVj@hbsd-dev-laptop>
 <D8AAC66A-ED1D-4A6C-9CCF-447CA788073A@FreeBSD.org>
 <5815854.WJiA8b3P58@hbsd-dev-laptop>
 <20151110024701.GA2694@mutt-hardenedbsd>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <20151110024701.GA2694@mutt-hardenedbsd>
X-Checked-By-NSA: Probably
User-Agent: Mutt/1.5.24 (2015-08-30)
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
 <freebsd-current.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-current>, 
 <mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current/>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
 <mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Nov 2015 21:28:08 -0000

On 2015-11-09 21:47:01 (-0500), Shawn Webb <shawn.webb@hardenedbsd.org> wrote:
> I found the problem: it seems that the new Intel Haswell graphics
> support (which I've been running with) is at odds somehow with pf NAT.
> Removing Haswell graphics support means working pf NAT.
> 
That's ... very strange.

I've built the drm-i915-update-38 branch of http:////github.com/freebsd/freebsd-base-graphics.git,
but still haven't managed to reproduce the problem.
It is if course entirely possible that it would only manifest if the
haswell graphics are actually in use. In that case there's little I can
do as I don't have haswell hardware I could test on.

Regards,
Kristof