Date: Tue, 17 Apr 2012 18:02:05 +0400 From: Gleb Smirnoff <glebius@FreeBSD.org> To: Ermal Lu?i <eri@FreeBSD.org> Cc: freebsd-pf@FreeBSD.org Subject: Re: kern/164402: [pf] pf crashes with a particular set of rules when first matching packet arrives Message-ID: <20120417140205.GA2140@glebius.int.ru> In-Reply-To: <20120417084608.GA99119@glebius.int.ru> References: <201204151200.q3FC0LT5085161@freefall.freebsd.org> <20120416185949.GC92286@FreeBSD.org> <CAPBZQG2Tjg36GNCBetRZ20FhQnL1sK9i_-oQDDb97bcb4N=sLA@mail.gmail.com> <20120417081406.GA93887@glebius.int.ru> <CAPBZQG2gF8GSx6eE4jkFuOf29c-jB09Gz6=%2BkbpXprN8XiEE4w@mail.gmail.com> <20120417084608.GA99119@glebius.int.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Apr 17, 2012 at 12:46:08PM +0400, Gleb Smirnoff wrote: T> We can make the assignment like: T> T> if (ifp->if_flags & IFF_LOOPBACK) T> m->m_flags |= M_SKIP_FIREWALL; I've tested this plus MTAG_PERSISTENT on pf tags, and it looks like this works. At least for the "fastroute" case, which was defnitely not working before. -- Totus tuus, Glebius.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120417140205.GA2140>