From nobody Sun Nov 7 06:22:27 2021 X-Original-To: bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 6D967184CC61 for ; Sun, 7 Nov 2021 06:22:27 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Hn40g2bmsz3lgD for ; Sun, 7 Nov 2021 06:22:27 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 3AB8B19A0B for ; Sun, 7 Nov 2021 06:22:27 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 1A76MRnC094704 for ; Sun, 7 Nov 2021 06:22:27 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 1A76MRO8094703 for bugs@FreeBSD.org; Sun, 7 Nov 2021 06:22:27 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 259689] pfctl -vs rule: invalid table record counters Date: Sun, 07 Nov 2021 06:22:27 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: bin X-Bugzilla-Version: 13.0-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: nospam@mgedv.net X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-bugs@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D259689 Bug ID: 259689 Summary: pfctl -vs rule: invalid table record counters Product: Base System Version: 13.0-STABLE Hardware: Any OS: Any Status: New Severity: Affects Many People Priority: --- Component: bin Assignee: bugs@FreeBSD.org Reporter: nospam@mgedv.net problem: "pfctl -vvs rule/nat" shows invalid number of records in IP tables, even if= 0. IPv4 number of records in "from" tables always is "1076383888". IPv4 number of records in "to" tables alwass is "12". all this was tested on FreeBSD-13.0-STABLE-amd64-20211104-70cb6c34bb5 reproduce: execute "pfctl -Pvvs rule" or "pfctl -Pvvs nat" with rules having IP tables= in from/to. assumption: some code change to sbin/pfctl between 2021/05 and 2021/09 causes this. pfctl binary works on: 13.0-STABLE-amd64-20210527-024a9aa7010-245691. pfctl binary buggy on: 13.0-STABLE-amd64-20210930-94ad8d7c7a3-247474. pfctl binary buggy om: 13.0-STABLE-amd64-20211104-70cb6c34bb5-247975. workaround: copy /sbin/pfctl binary from e.g. FreeBSD-13.0-STABLE-amd64-20210527-024a9aa7010-245691 (ELF 1300505). this copy works as expected and the pfctl table record counters are shown properly. side info: this was first observed with custom kernel, loader.conf and sysctl.conf bei= ng tuned. but when booting 20211104 with GENERIC and loader.conf/sysctl.conf wiped, i= t's the same issue. so i would believe, its neither related to the ruleset, the kernel or the b= ase OS libraries. example output (table names and ports pseudonymized): @1518 pass in quick on foo inet proto tcp from = port =3D 6666 to port =3D 6666 flags S/SA modulate state tag T= AGFOO [ Evaluations: 55 Packets: 0 Bytes: 0 States: 0= =20=20=20=20 ] [ Inserted: uid 0 pid 9903 State Creations: 0 ] --=20 You are receiving this mail because: You are the assignee for the bug.=