Date: Thu, 14 Jul 2011 11:26:04 +0300 From: =?iso-8859-9?B?TXVyYXQgU9xS3EPc?= <msurucu@karaelmas.edu.tr> To: =?iso-8859-9?Q?'Ermal_Lu=E7i'?= <eri@freebsd.org> Cc: freebsd-pf@freebsd.org Subject: RE: FreeBSD 8.2 + pf + ipfw (dummynet) Message-ID: <002f01cc41ff$ac02eac0$0408c040$@karaelmas.edu.tr> In-Reply-To: <002601cc4058$36a5b170$a3f11450$@karaelmas.edu.tr> References: <010b01cc3fc2$7763b450$662b1cf0$@karaelmas.edu.tr> <CAPBZQG2wi4RxPdPZ4yLkryf3TuRtQGPCC=Q8AqLD5sJbsGgYpw@mail.gmail.com> <002601cc4058$36a5b170$a3f11450$@karaelmas.edu.tr>
next in thread | previous in thread | raw e-mail | index | archive | help
I think the problem is dummynet corrupts PF state information. What can = i do for prevent it? =20 Murat=20 -----Original Message----- From: owner-freebsd-pf@freebsd.org [mailto:owner-freebsd-pf@freebsd.org] = On Behalf Of Murat S=DCR=DCC=DC Sent: Tuesday, July 12, 2011 8:55 AM To: 'Ermal Lu=E7i' Cc: freebsd-pf@freebsd.org Subject: RE: FreeBSD 8.2 + pf + ipfw (dummynet) Thanks for reply, IPFW is kernel module, PF is loadable module in my config. And this config was normally run when version is 7.2. Murat=20 -----Original Message----- From: ermal.luci@gmail.com [mailto:ermal.luci@gmail.com] On Behalf Of = Ermal Lu=E7i Sent: Tuesday, July 12, 2011 12:59 AM To: Murat S=DCR=DCC=DC Cc: freebsd-pf@freebsd.org Subject: Re: FreeBSD 8.2 + pf + ipfw (dummynet) 2011/7/11 Murat S=DCR=DCC=DC <msurucu@karaelmas.edu.tr>: > Hello, > > I used PF and dummynet together about two years and worked fine. > Recently i have upgraded the system 7.2 to 8.2 and dummynet doesn't=20 > work anymore. > If any packet belong the client IP puts any pipe, it drops and pflog=20 > says it blocked by last pf rule. But it match previous rule. > If i disable (flush) the ipfw rules, packets pass normally. > > Does anybody have same experience? You have to make sure ipfw module is loaded first otherwise you will hit = pf states twice which will drop as you see. > > http://forums.freebsd.org/showthread.php?t=3D24947 > > Thanks. > > Murat > > > _______________________________________________ > freebsd-pf@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" > -- Ermal _______________________________________________ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002f01cc41ff$ac02eac0$0408c040$>