From owner-freebsd-pf@FreeBSD.ORG Thu Sep 16 03:53:58 2004 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 674) id 0444716A4CF; Thu, 16 Sep 2004 03:53:58 +0000 (GMT) Delivered-To: mlaier@vampire.homelinux.org Received: (qmail 28139 invoked by uid 1005); 6 Oct 2003 02:26:22 -0000 Delivered-To: max@vampire.homelinux.org Received: (qmail 28136 invoked from network); 6 Oct 2003 02:26:22 -0000 Received: from moutng.kundenserver.de (212.227.126.188) by p50839970.dip.t-dialin.net with SMTP; 6 Oct 2003 02:26:22 -0000 Received: from [212.227.126.211] (helo=mxng15.kundenserver.de) by moutng.kundenserver.de with esmtp (Exim 3.35 #1) id 1A6L2F-0003KS-00 for max@vampire.homelinux.org; Mon, 06 Oct 2003 04:23:43 +0200 Received: from [206.53.239.180] (helo=turing.freelists.org) by mxng15.kundenserver.de with esmtp (Exim 3.35 #1) id 1A6L2C-0006td-00 for max@love2party.net; Mon, 06 Oct 2003 04:23:41 +0200 Received: from turing (localhost [127.0.0.1])ESMTP id C8D4C390A2E; Sun, 5 Oct 2003 21:18:18 -0500 (EST) Received: with ECARTIS (v1.0.0; list pf4freebsd); Sun, 05 Oct 2003 21:18:12 -0500 (EST) X-Original-To: pf4freebsd@freelists.org Delivered-To: pf4freebsd@freelists.org Received: from ns.kt-is.co.kr (ns.kt-is.co.kr [211.218.149.125]) ESMTP id 9924B3909EF for ; Sun, 5 Oct 2003 21:18:11 -0500 (EST) Received: from michelle.kt-is.co.kr (ns2.kt-is.co.kr [220.76.118.193]) (authenticated bits=128) by ns.kt-is.co.kr (8.12.10/8.12.10) with ESMTP id h962N55G098417 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Mon, 6 Oct 2003 11:23:06 +0900 (KST) Received: from michelle.kt-is.co.kr (localhost.kt-is.co.kr [127.0.0.1]) by michelle.kt-is.co.kr (8.12.9/8.12.9) with ESMTP id h962NSX0000859 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Mon, 6 Oct 2003 11:23:28 +0900 (KST) (envelope-from yongari@kt-is.co.kr) Received: (from yongari@localhost) by michelle.kt-is.co.kr (8.12.9/8.12.9/Submit) id h962NSQ9000858 for pf4freebsd@freelists.org; Mon, 6 Oct 2003 11:23:28 +0900 (KST) (envelope-from yongari@kt-is.co.kr) From: Pyun YongHyeon To: pf4freebsd@freelists.org Message-ID: <20031006022328.GB735@kt-is.co.kr> References: <1065107810.3f7c4162b252a@mrna.ist.utl.pt> <19920876018.20031002175427@love2party.net> <3F7CB204.9030506@dequim.ist.utl.pt> <20031003075152.GA16760@kt-is.co.kr> <3F803A15.9060405@dequim.ist.utl.pt> Mime-Version: 1.0 Content-type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <3F803A15.9060405@dequim.ist.utl.pt> User-Agent: Mutt/1.4.1i X-Filter-Version: 1.11a (ns.kt-is.co.kr) X-archive-position: 187 X-ecartis-version: Ecartis v1.0.0 Sender: pf4freebsd-bounce@freelists.org Errors-To: pf4freebsd-bounce@freelists.org X-original-sender: yongari@kt-is.co.kr Precedence: normal X-list: pf4freebsd Content-Transfer-Encoding: quoted-printable X-UID: 302 X-Length: 5643 X-Mailman-Approved-At: Thu, 16 Sep 2004 03:55:51 +0000 Subject: [pf4freebsd] Re: pf errors meaning X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.1 Reply-To: pf4freebsd@freelists.org List-Id: Technical discussion and general questions about packet filter (pf) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Date: Thu, 16 Sep 2004 03:53:58 -0000 X-Original-Date: Mon, 6 Oct 2003 11:23:28 +0900 X-List-Received-Date: Thu, 16 Sep 2004 03:53:58 -0000 On Sun, Oct 05, 2003 at 04:34:45PM +0100, Bruno Afonso wrote: > Pyun YongHyeon wrote: >=20 > > You can see the offending function _fget() in /sys/kern/kern_descrip= .c. > > I believe this error is not related with FreeBSD pf. > > However, you don't have traces so I can't sure that. >=20 > yes :-( >=20 > > Did you have two kernel modules in your system?(/boot/kernel and > > /usr/local/modules) Did you patch your kernel after installing > > FreeBSD pf? Can you tell me the exact procure you used while loading > > and unloading pf? Can you post your rule file and comment on your > > network setup? Did your rule file have table rules? >=20 > Only have one model. > I used stock kernel from releng_5_1 with only some options added. :-) > I'm using a port based rc.d script... I only changed the file paths. > I use tables... I have a 10.10.0.0/20 table, and some other tables=20 > collecting a lot of /24 and /22 networks. > I have also removed one synproxy rule I had for http... Since I had=20 > problems with it in the past, I removed it once again. (re-introduced = it=20 > when installing 1.66) >=20 > > No. It does not necessarily mean FreeBSD pf is error free. There > > might be bugs creeping through pf module. >=20 > I have had no more panics since I removed the synproxy rule and disabl= ed=20 > dnscache. But this is irrelevant as we can't really know what caused t= he=20 > panics. :-( > I never heard anyone having dnscache panics, so I found that *odd*. >=20 Interesting. Then I'll check synproxy code. However, as I didn't see any related problems up to date, it may take a long time to scrutinize. >=20 > > > the break into ddb as I can't afford the box down for a couple ho= urs :-( > > > Unfortunately, someone pressed the restart button before I could = get to=20 > > > ddb via serial console... > > >=20 > > You dont't have to let the box down for a while. At least, we need a > > trace report to identify the problem. At DDB propmt you can invoke > > 'trace' command and write down the output. If you have enabled kerne= l > > debugging options, you may get valuable crash dump file. This is the > > most perferrable one. >=20 > I'm not working full time, this is a college and I'm a poor student=20 > being explored. :-) > I am going to look into crash dumps. >=20 Regards, Pyun YongHyeon --=20 Pyun YongHyeon