From owner-freebsd-pf@FreeBSD.ORG Wed Mar 17 17:39:27 2010 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CA072106564A; Wed, 17 Mar 2010 17:39:27 +0000 (UTC) (envelope-from Greg.Hennessy@nviz.net) Received: from mail1.jellyfishnet.co.uk (mail1.jellyfishnet.co.uk [93.91.20.9]) by mx1.freebsd.org (Postfix) with ESMTP id 5EECD8FC19; Wed, 17 Mar 2010 17:39:27 +0000 (UTC) Received: from pemexhub01.jellyfishnet.co.uk.local (93.91.20.2) by mail1.jellyfishnet.co.uk (93.91.20.9) with Microsoft SMTP Server (TLS) id 8.1.393.1; Wed, 17 Mar 2010 17:39:34 +0000 Received: from PEMEXMBXVS02.jellyfishnet.co.uk.local ([192.168.65.37]) by pemexhub01.jellyfishnet.co.uk.local ([192.168.65.7]) with mapi; Wed, 17 Mar 2010 17:39:26 +0000 From: Greg Hennessy To: Giulio Ferro Date: Wed, 17 Mar 2010 17:38:50 +0000 Thread-Topic: PF + BRIDGE + PFSYNC causes system freezing Thread-Index: AcrF+Mk3M5n8IHJfQT6K0OEUciN90w== Message-ID: <1893309981.58859.1268847562863.JavaMail.rim@bda094.bisx.produk.on.blackberry> References: <4B8E4850.1060104@zirakzigil.org><4B9EA5A2.4010900@zirakzigil.org> <00bc01cac53d$a92f0b70$fb8d2250$@com><20100317081256.GA21633@insomnia.benzedrine.cx><4BA0B344.3010708@zirakzigil.org>, <4BA0F947.9070506@zirakzigil.org><9E8D76EC267C9444AC737F649CBBAD902767E3BEA5@PEMEXMBXVS02.jellyfishnet.co.uk.local><4BA1054B.304@zirakzigil.org> In-Reply-To: <4BA1054B.304@zirakzigil.org> Accept-Language: en-US, en-GB Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-rim-org-msg-ref-id: 1695615789 acceptlanguage: en-US, en-GB Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "freebsd-net@freebsd.org" , "freebsd-pf@freebsd.org" Subject: Re: PF + BRIDGE + PFSYNC causes system freezing X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Greg Hennessy List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Mar 2010 17:39:28 -0000 My bad, that'll teach me to reply in haste :-) Sent using BlackBerry=AE from Orange -----Original Message----- From: Giulio Ferro Date: Wed, 17 Mar 2010 16:37:31=20 To: Greg Hennessy Cc: Daniel Hartmeier; freebsd-net@freebsd.org; freebsd-pf@freebsd.org Subject: Re: PF + BRIDGE + PFSYNC causes system freezing On 17.03.2010 16:50, Greg Hennessy wrote: > A possible corner case with the virtual hosting platform ? > > Try changing the NICS from EM to something else supported RL on vmware II= RC. > > > =20 Nope, I'm not using virtualization, that's the other guy. I'm using a physical machine... > Greg > >________________________________________ > From: owner-freebsd-pf@freebsd.org [owner-freebsd-pf@freebsd.org] On Beha= lf Of Giulio Ferro [auryn@zirakzigil.org] > Sent: 17 March 2010 15:46 > To: Daniel Hartmeier > Cc: freebsd-net@freebsd.org; freebsd-pf@freebsd.org > Subject: Re: PF + BRIDGE + PFSYNC causes system freezing > > On 17.03.2010 11:47, Giulio Ferro wrote: > =20 >> On 17.03.2010 09:12, Daniel Hartmeier wrote: >> =20 >>> On Tue, Mar 16, 2010 at 03:19:51PM -0400, kevin wrote: >>> >>> =20 >>>> I would like to assist in diagnosing this issue so if anyone wants >>>> me to >>>> check anything or test, please let me know. I would really like to >>>> understand this problem. >>>> =20 >>> What are your settings for >>> >>> $ sysctl -a | grep bridge.pfil >>> =20 >> net.link.bridge.pfil_local_phys: 0 >> net.link.bridge.pfil_member: 1 >> net.link.bridge.pfil_bridge: 1 >> net.link.bridge.pfil_onlyip: 1 >> >> >> =20 >>> Have you tried filtering only on one of the physical bridge interfaces, >>> with net.link.bridge.pfil_bridge=3D0 and set skip on { lo0, bridge0, >>> em1 }? >>> >>> Daniel >>> =20 >> Ok, I'm trying "set skip on {lo0, bridge0}". >> I'll let you know if there is any improvement. >> =20 > > No, no improvement. > > The system froze anyway after about 3-4 hours this time. > > Please advise! >_______________________________________________ > freebsd-pf@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"