From owner-freebsd-pf@FreeBSD.ORG Sun Oct 23 08:11:56 2011 Return-Path: Delivered-To: freebsd-pf@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D366F106566B for ; Sun, 23 Oct 2011 08:11:56 +0000 (UTC) (envelope-from jmg@h2.funkthat.com) Received: from h2.funkthat.com (gate.funkthat.com [70.36.235.232]) by mx1.freebsd.org (Postfix) with ESMTP id 97A678FC08 for ; Sun, 23 Oct 2011 08:11:56 +0000 (UTC) Received: from h2.funkthat.com (localhost [127.0.0.1]) by h2.funkthat.com (8.14.3/8.14.3) with ESMTP id p9N8BtBb082005 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 23 Oct 2011 01:11:55 -0700 (PDT) (envelope-from jmg@h2.funkthat.com) Received: (from jmg@localhost) by h2.funkthat.com (8.14.3/8.14.3/Submit) id p9N8BrAP082004; Sun, 23 Oct 2011 01:11:53 -0700 (PDT) (envelope-from jmg) Date: Sun, 23 Oct 2011 01:11:52 -0700 From: John-Mark Gurney To: "Bjoern A. Zeeb" Message-ID: <20111023081152.GF25601@funkthat.com> References: <20111022220654.GD25601@funkthat.com> <4EA349BB.1030303@FreeBSD.org> <20111023012638.GE25601@funkthat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i X-Operating-System: FreeBSD 7.2-RELEASE i386 X-Files: The truth is out there X-URL: http://resnet.uoregon.edu/~gurney_j/ X-Resume: http://resnet.uoregon.edu/~gurney_j/resume.html X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.2.2 (h2.funkthat.com [127.0.0.1]); Sun, 23 Oct 2011 01:11:55 -0700 (PDT) Cc: freebsd-pf@FreeBSD.org Subject: Re: panic loading/enabling pf on ARM RELENG_9 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 23 Oct 2011 08:11:56 -0000 Bjoern A. Zeeb wrote this message on Sun, Oct 23, 2011 at 01:29 +0000: > On Sat, 22 Oct 2011, John-Mark Gurney wrote: > > >Florian Smeets wrote this message on Sun, Oct 23, 2011 at 00:54 +0200: > >>On 23.10.11 00:06, John-Mark Gurney wrote: > >>>I'm trying to bring up an old Gateworks GW2348 board and get a > >>>panic when I have enabled pf and try to load rules at boot... > >>> > >>>The only modifications between the AVILA config file and mine is > >>>adding the pf, pflog and pfsync devices since AVILA doesn't have > >>>them enabled by default, nor does it build the modules... So I am > >>>trying to staticly build in pf... > >>> > >>>W/o pf, it boots fine. > >>> > >> > >>>Oct 22 15:01:00 pflogd[678]: [priv]: msg PRIV_OPEN_LOG received > >>>Enabling pfpanic: mutex pf task mtx owned at > >>>/usr/src/sys/contrib/pf/net/if_pfsync.c:3163 > >>>KDB: enter: panic > >> > >>Please try the patches mentioned in this message > >>http://docs.freebsd.org/cgi/mid.cgi?96FFF919-F33F-46FA-9249-92F2E6003ECF > > > >This url does not seem to work... > > you probably want these two: > http://lists.freebsd.org/pipermail/freebsd-pf/2011-October/006360.html > http://lists.freebsd.org/pipermail/freebsd-pf/2011-October/006364.html > > >>there are additional fixes from glebius in head r226609 and r226623. > > > >I will try these. I am able to use pf successfully with all four patches applied. Thanks for your help. I didn't do a huge amount of testing, but was able to pass tens of megabytes of traffic through it w/o issues... I didn't try which of them made the panic go away, but I hope they get committed before 9.0-R. Thanks again. -- John-Mark Gurney Voice: +1 415 225 5579 "All that I will do, has been done, All that I have, has not."