From owner-freebsd-hackers@FreeBSD.ORG  Wed Dec 15 13:42:44 2004
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 225A716A4CE
	for <freebsd-hackers@FreeBSD.org>;
	Wed, 15 Dec 2004 13:42:44 +0000 (GMT)
Received: from mp2.macomnet.net (mp2.macomnet.net [195.128.64.6])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 606F643D46
	for <freebsd-hackers@FreeBSD.org>;
	Wed, 15 Dec 2004 13:42:43 +0000 (GMT)
	(envelope-from maxim@FreeBSD.org)
Received-SPF: pass (mp2.macomnet.net: domain of maxim@FreeBSD.org designates
	127.0.0.1 as permitted sender) receiver=mp2.macomnet.net; client_ip=127.0.0.1;
	envelope-from=maxim@FreeBSD.org;
Received: from localhost (localhost [127.0.0.1])
	by mp2.macomnet.net (8.12.11/8.12.11) with ESMTP id iBFDge7q021939;
	Wed, 15 Dec 2004 16:42:41 +0300 (MSK)
	(envelope-from maxim@FreeBSD.org)
Date: Wed, 15 Dec 2004 16:42:40 +0300 (MSK)
From: Maxim Konovalov <maxim@FreeBSD.org>
To: "Dmitry A. Bondareff" <freebsd@mmk.ru>
In-Reply-To: <003701c4e29d$f1fe3c50$02010101@dimasic>
Message-ID: <20041215163834.F18977@mp2.macomnet.net>
References: <003701c4e29d$f1fe3c50$02010101@dimasic>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-SpamTest-Info: Profile: Formal (174/041214)
X-SpamTest-Info: Profile: Detect Hard (4/030526)
X-SpamTest-Info: Profile: SysLog
X-SpamTest-Info: Profile: Marking - Keywords (2/030321)
X-SpamTest-Status: Not detected
X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], SpamtestISP/Release
cc: freebsd-hackers@FreeBSD.org
Subject: Re: 5.3 IPFW bug
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Dec 2004 13:42:44 -0000

On Wed, 15 Dec 2004, 17:00+0500, Dmitry A. Bondareff wrote:

> Hello hackers!
>
> Today I upgraded my 5.2.1-p11 box up to 5.3-p2.
> My firewall rules includes like this:
> ...
> /sbin/ipfw add tee 10000 ip from 1.2.3.4 to 4.3.2.1
> ...
> On 5.2.1-FreeBSD it's works fine.
> But FreeBSD 5.3 halted each time!!!

It's not clear what do you mean by "halted" here?  Does the server
freeze of what?  If it continues the rule processing this is not a
bug, see Andre's explanation.  If the server freezes - this is a bug
and we need a kernel backtrace and/or the kernel core dump.  Or clear
how-to-repeat receipt.

> After changed "tee 10000" to "allow"  now works all fine.
>
> Is this bug ??

-- 
Maxim Konovalov