Date: Tue, 17 Apr 2012 21:21:27 +0200 From: =?ISO-8859-1?Q?Ermal_Lu=E7i?= <eri@freebsd.org> To: Gleb Smirnoff <glebius@freebsd.org> Cc: freebsd-pf@freebsd.org Subject: Re: kern/164402: [pf] pf crashes with a particular set of rules when first matching packet arrives Message-ID: <CAPBZQG3i6i-nxS2%2BZEr=WbO%2BwHHLYqHjC2EtrFz8vM6qZmH95g@mail.gmail.com> In-Reply-To: <20120417140205.GA2140@glebius.int.ru> References: <201204151200.q3FC0LT5085161@freefall.freebsd.org> <20120416185949.GC92286@FreeBSD.org> <CAPBZQG2Tjg36GNCBetRZ20FhQnL1sK9i_-oQDDb97bcb4N=sLA@mail.gmail.com> <20120417081406.GA93887@glebius.int.ru> <CAPBZQG2gF8GSx6eE4jkFuOf29c-jB09Gz6=%2BkbpXprN8XiEE4w@mail.gmail.com> <20120417084608.GA99119@glebius.int.ru> <20120417140205.GA2140@glebius.int.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
2012/4/17 Gleb Smirnoff <glebius@freebsd.org>: > On Tue, Apr 17, 2012 at 12:46:08PM +0400, Gleb Smirnoff wrote: > T> We can make the assignment like: > T> > T> if (ifp->if_flags & IFF_LOOPBACK) > T> =A0 =A0 =A0m->m_flags |=3D M_SKIP_FIREWALL; > > I've tested this plus MTAG_PERSISTENT on pf tags, and it looks like this > works. > > At least for the "fastroute" case, which was defnitely not working before= . > fastroute has been never of any good use if you asked me. Though you can test reply-to quite easily the same you do with fastroute. This fix should fix another tickets which reported massive storms of icmp on lo0 as well. I have to find out the PR# though to merge it with this. > -- > Totus tuus, Glebius. --=20 Ermal
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAPBZQG3i6i-nxS2%2BZEr=WbO%2BwHHLYqHjC2EtrFz8vM6qZmH95g>