From owner-freebsd-security  Sun Sep 20 06:22:14 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id GAA22909
          for freebsd-security-outgoing; Sun, 20 Sep 1998 06:22:14 -0700 (PDT)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from cheops.anu.edu.au (cheops.anu.edu.au [150.203.224.24])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id GAA22833
          for <freebsd-security@FreeBSD.ORG>; Sun, 20 Sep 1998 06:22:10 -0700 (PDT)
          (envelope-from avalon@coombs.anu.edu.au)
Message-Id: <199809201322.GAA22833@hub.freebsd.org>
Received: by cheops.anu.edu.au
	(1.37.109.16/16.2) id AA280337689; Sun, 20 Sep 1998 23:21:29 +1000
From: Darren Reed <avalon@coombs.anu.edu.au>
Subject: Re: Show & LIST commands in IPFW
To: madrapour@hotmail.com (N. N.M)
Date: Sun, 20 Sep 1998 23:21:29 +1000 (EST)
Cc: freebsd-security@FreeBSD.ORG
In-Reply-To: <19980920123918.479.qmail@hotmail.com> from "N. N.M" at Sep 20, 98 05:39:18 am
X-Mailer: ELM [version 2.4 PL23]
Content-Type: text
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

In some mail from N. N.M, sie said:
> 
> Hi, 
> 
> I use IPFW with around 9000 rules. These 9000 rules are active in 
> system's databases, but I can't brows them by using the SHOW or LIST 
> commands. Using these commands causes the following message and then 
> auto-rebooting of system:
> 
> Fatal trap 12: page fault while in kernel mode
> fault virtual address = 0xc
> fault code = supervisor fault, page not present
> instruction pointer = 0x8:0xf01540dc
> stack pointer = 0x10:0xefbffebc
> frame pointer = 0x10:0xefbffed4
> code segment = base 0x0, limit 0xfffff, type 0x1b
>              = DPL 0, pres 1, def32 1, gra 1
> processor eflags = interrupt enabled, resume, IOPL = 0
> current process = 9059 (ipfw)
> interrupt mask =
> panic: page fault 
> 
> Syncing disks ..... 13 13 10 4  done
> Automatic reboot ........
> 
> 
> Does anyone have any idea about the probable cause?

Just for experimentation, write a script to add them one at a time
and after each one is added to save them all to a file (different
file for each output) and run syn after that.  How many rules does
it safely insert ?

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message