From owner-freebsd-ipfw@freebsd.org Fri Aug 14 21:49:04 2015 Return-Path: Delivered-To: freebsd-ipfw@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 432789B9892 for ; Fri, 14 Aug 2015 21:49:04 +0000 (UTC) (envelope-from melifaro@ipfw.ru) Received: from forward13j.cmail.yandex.net (forward13j.cmail.yandex.net [IPv6:2a02:6b8:0:1630::b3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "forwards.mail.yandex.net", Issuer "Certum Level IV CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id C4E8E17A1; Fri, 14 Aug 2015 21:49:03 +0000 (UTC) (envelope-from melifaro@ipfw.ru) Received: from web12j.yandex.ru (web12j.yandex.ru [5.45.198.53]) by forward13j.cmail.yandex.net (Yandex) with ESMTP id 09C9D218F9; Sat, 15 Aug 2015 00:48:49 +0300 (MSK) Received: from 127.0.0.1 (localhost [127.0.0.1]) by web12j.yandex.ru (Yandex) with ESMTP id 0565DBC081C; Sat, 15 Aug 2015 00:48:48 +0300 (MSK) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfw.ru; s=mail; t=1439588929; bh=P79KJVw1uw0Zwk6YLyeXsvT8Q8F2rGvzW/qgCeuo5ZQ=; h=From:To:Cc:In-Reply-To:References:Subject:Date; b=gi7z6uf7pUeiuU7wAe0D0Cl7ltaxHdQXoLQaXlRs43246FzH0m7pFiBg0ULqUIPIX AojL2XFdLACyx1+8Bc//YrRZ2Tmy5dyQCA8PTzgr3QfqSpqsx0LQa5z3HWZcnoFLq9 Js5dF7z0dojve6vYhayoLLJMBs/0R2hKHpp9MtXk= Received: by web12j.yandex.ru with HTTP; Sat, 15 Aug 2015 00:48:48 +0300 From: Alexander V. Chernikov To: Luigi Rizzo , Julian Elischer Cc: Ian Smith , "freebsd-ipfw@freebsd.org" In-Reply-To: <932331439479373@web29h.yandex.ru> References: <55BF368A.60004@elischer.org> <20150803234952.O17327@sola.nimnet.asn.au> <925201438613458@web7h.yandex.ru> <55BFC7A7.2000907@freebsd.org> <252361438673995@web5h.yandex.ru> <55CC1BFF.5090800@freebsd.org> <20150813233624.P8515@sola.nimnet.asn.au> <20150814003533.I8515@sola.nimnet.asn.au> <55CCB543.20504@freebsd.org> <932331439479373@web29h.yandex.ru> Subject: Re: ipfw delete 100-300 MIME-Version: 1.0 Message-Id: <120111439588928@web12j.yandex.ru> X-Mailer: Yamail [ http://yandex.ru ] 5.0 Date: Sat, 15 Aug 2015 00:48:48 +0300 Content-Type: multipart/mixed; boundary="----==--bound.12012.web12j.yandex.ru" X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Aug 2015 21:49:04 -0000 ------==--bound.12012.web12j.yandex.ru Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset=koi8-r 13.08.2015, 18:22, "Alexander V. Chernikov" : > 13.08.2015, 18:21, "Luigi Rizzo" : >> šOn Thu, Aug 13, 2015 at 5:18 PM, Julian Elischer wrote: >>> ššOn 8/13/15 10:41 PM, Ian Smith wrote: >>>> ššOn Thu, 13 Aug 2015 16:30:15 +0200, Luigi Rizzo wrote: >>>> šššš> On Thu, Aug 13, 2015 at 4:00 PM, Ian Smith >>>> ššwrote: >>>> šššš> > On Thu, 13 Aug 2015 12:24:31 +0800, Julian Elischer wrote: >>>> šššš> > > BTW, any ideas as to what causes this? >>>> šššš> > > # ipfw show >>>> šššš> > > [...] >>>> šššš> > > 00400 0 0 deny ip from 10.12.1.0/24 to >>>> ššany in recv >>>> šššš> > > xn0 >>>> šššš> > > 00500 0 16045693110842147038 deny ip from 204.109.63.0/25 to >>>> ššany in recv >>>> šššš> > > xn1 >>>> šššš> > > 00600 0 0 allow ip from any to any in >>>> ššrecv xn1 >>>> šššš> > > [...] >>>> šššš> > > 65535 8251 16045693110842147290 deny ip from any to any >>>> šššš> > > >>>> šššš> > > >>>> šššš> > > -current as of the 5th of august >>>> šššš> > > FreeBSD vps1.elischer.org 11.0-CURRENT FreeBSD 11.0-CURRENT #1 >>>> ššr286304: Wed >>>> šššš> > > Aug 5 14:31:10 PDT 2015 >>>> šššš> > > root@vps1.elischer.org:/usr/obj/usr/src-current/sys/VPS1 i386 >>>> šššš> > > >>>> šššš> > > note i386, not amd64. >>>> šššš> > >>>> šššš> > Assuming all digits were shown, on a wild hunch: >>>> šššš> > >>>> šššš> > t23% echo 'scale=20; 2^64 - 16045693110842147038' | bc >>>> šššš> > 2401050962867404578 >>>> šššš> > t23% echo 'scale=20; 2^63 - 16045693110842147038' | bc >>>> šššš> > -6822321073987371230 >>>> šššš> > >>>> šššš> >>>> šššš> bc >>>> šššš> obase=16 >>>> šššš> 16045693110842147038 >>>> šššš> DEADC0DEDEADC0DE >>>> šššš> >>>> šššš> so... somehow pointing in a bad place. >>>> >>>> ššAh, quite so .. and rule 65535 looks like a slightly worse place. >>>> >>>> ššt23% echo 'obase=16; 16045693110842147290' | bc >>>> ššDEADC0DEDEADC1DA >>> >>> ššthat's deadcode when it's had some packets added to it :-) >>> >>> ššI think our friend Mr Chernikov may have tripped up over something.. >> >> šlooks more like the "counter" API. The old counters were inline in the rules. > > In that case we would probably have garbage in pkts counter, too. > Anyway, I'm setting up the VM to see if this is kernel or userland problem.. This is actually counters-related problem. The attached diff should fix it. (But it looks like I'd better get a bit more counter(9) support for that case). >> šcheers >> šluigi >> >>>> ššthanks, Ian >>> >>> šš_______________________________________________ >>> ššfreebsd-ipfw@freebsd.org mailing list >>> ššhttps://lists.freebsd.org/mailman/listinfo/freebsd-ipfw >>> ššTo unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" >> >> š-- >> š-----------------------------------------+------------------------------- >> ššProf. Luigi RIZZO, rizzo@iet.unipi.it . Dip. di Ing. dell'Informazione >> ššhttp://www.iet.unipi.it/~luigi/ . Universita` di Pisa >> ššTEL +39-050-2217533 . via Diotisalvi 2 >> ššMobile +39-338-6809875 . 56122 PISA (Italy) >> š-----------------------------------------+------------------------------- ------==--bound.12012.web12j.yandex.ru Content-Disposition: attachment; filename="ipfw_cntr.diff" Content-Transfer-Encoding: base64 Content-Type: text/x-diff; name="ipfw_cntr.diff" SW5kZXg6IHN5cy9uZXRwZmlsL2lwZncvaXBfZndfcHJpdmF0ZS5oCj09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIHN5 cy9uZXRwZmlsL2lwZncvaXBfZndfcHJpdmF0ZS5oCShyZXZpc2lvbiAyODY3NzApCisrKyBzeXMv bmV0cGZpbC9pcGZ3L2lwX2Z3X3ByaXZhdGUuaAkod29ya2luZyBjb3B5KQpAQCAtMjU2LDcgKzI1 Niw3IEBAIHN0cnVjdCBpcF9mdyB7CiAJaXBmd19pbnNuCWNtZFsxXTsJCS8qIHN0b3JhZ2UgZm9y IGNvbW1hbmRzCQkqLwogfTsKIAotI2RlZmluZQlJUEZXX1JVTEVfQ05UUl9TSVpFCSgyICogc2l6 ZW9mKGNvdW50ZXJfdTY0X3QpKQorI2RlZmluZQlJUEZXX1JVTEVfQ05UUl9TSVpFCSgyICogc2l6 ZW9mKHVpbnQ2NF90KSkKIAogI2VuZGlmCiAK ------==--bound.12012.web12j.yandex.ru--