From owner-freebsd-pf@FreeBSD.ORG Wed Aug 24 15:09:46 2005 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 84FAB16A41F for ; Wed, 24 Aug 2005 15:09:46 +0000 (GMT) (envelope-from pjd@garage.freebsd.pl) Received: from mail.garage.freebsd.pl (arm132.internetdsl.tpnet.pl [83.17.198.132]) by mx1.FreeBSD.org (Postfix) with ESMTP id DD21943D45 for ; Wed, 24 Aug 2005 15:09:45 +0000 (GMT) (envelope-from pjd@garage.freebsd.pl) Received: by mail.garage.freebsd.pl (Postfix, from userid 65534) id 7DD7252CA2; Wed, 24 Aug 2005 17:09:44 +0200 (CEST) Received: from localhost (ana50.internetdsl.tpnet.pl [83.17.82.50]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.garage.freebsd.pl (Postfix) with ESMTP id 41BE152BC4 for ; Wed, 24 Aug 2005 17:09:36 +0200 (CEST) Date: Wed, 24 Aug 2005 17:09:14 +0200 From: Pawel Jakub Dawidek To: freebsd-pf@freebsd.org Message-ID: <20050824150914.GA1603@garage.freebsd.pl> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="bp/iNruPH9dso1Pn" Content-Disposition: inline X-PGP-Key-URL: http://people.freebsd.org/~pjd/pjd.asc X-OS: FreeBSD 7.0-CURRENT i386 User-Agent: mutt-ng devel (FreeBSD) X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mail.garage.freebsd.pl X-Spam-Level: X-Spam-Status: No, score=-5.9 required=3.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham version=3.0.4 Subject: PF doesn't work with changed interfaces names. X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Aug 2005 15:09:46 -0000 --bp/iNruPH9dso1Pn Content-Type: text/plain; charset=iso-8859-2 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi. When we change interface name with: # ifconfig fxp0 name net0 and we add a firewall rule, restart pf, remove the rule, restart pf, we got: Fatal trap 12: page fault while in kernel mode fault virtual address =3D 0xdeadc1d7 fault code =3D supervisor read, page not present instruction pointer =3D 0x8:0xc04525e5 stack pointer =3D 0x10:0xcab5d7c4 frame pointer =3D 0x10:0xcab5d7c8 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, def32 1, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 423 (sshd) [thread 100073] Stopped at pf_state_compare_lan_ext+0x11: movzbl 0xf9(%ebx),%eax db> tr pf_state_compare_lan_ext(cab5d838,deadc0de) at pf_state_compare_lan_ext+0x11 pf_state_tree_lan_ext_RB_FIND(c11e9ec0,cab5d838) at pf_state_tree_lan_ext_R= B_FIND+0x1b pf_find_state_recurse(c11e9e00,cab5d838,0,da7a0000,da7a6400) at pf_find_sta= te_recurse+0x39 pf_test_state_tcp(cab5d97c,2,c11e9e00,c11a4400,14) at pf_test_state_tcp+0xcb pf_test(2,c1099000,cab5da70,c12bfa8c,c13325a0) at pf_test+0x37c pf_check_out(0,cab5da70,c1099000,2,c12bfa8c) at pf_check_out+0x4d pfil_run_hooks(c0708a40,cab5daec,c1099000,2,c12bfa8c) at pfil_run_hooks+0xbd ip_output(c11a4400,0,cab5dab8,0,0) at ip_output+0x736 tcp_output(c12c1380,c12bfa8c,0,40,c11a0e00) at tcp_output+0xf4b tcp_usr_send(c13c0144,0,c11a0e00,0,0) at tcp_usr_send+0x14f sosend(c13c0144,0,cab5dc88,c11a0e00,0) at sosend+0x5e7 soo_write(c11ec374,cab5dc88,c1368000,0,c13304b0) at soo_write+0x46 dofilewrite(c13304b0,c11ec374,5,807b000,40) at dofilewrite+0xa8 write(c13304b0,cab5dd14,3,8,206) at write+0x39 syscall(2f,2f,2f,806d0c8,40) at syscall+0x213 Xint0x80_syscall() at Xint0x80_syscall+0x1f --- syscall (4, FreeBSD ELF32, write), eip =3D 0x28246af3, esp =3D 0xbfbfdd= bc, ebp =3D 0xbfbfdde8 --- db>=20 Any ideas? --=20 Pawel Jakub Dawidek http://www.wheel.pl pjd@FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! --bp/iNruPH9dso1Pn Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (FreeBSD) iD8DBQFDDI2aForvXbEpPzQRApGIAJ9H7jjRhxDTaJzb12zUuPTpsyveGQCdGYBZ stJJVmQoA4wf8ydSqN6tUgo= =9Slq -----END PGP SIGNATURE----- --bp/iNruPH9dso1Pn--