From owner-freebsd-hackers@FreeBSD.ORG  Tue May  3 14:51:24 2005
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EEF0D16A4CE
	for <freebsd-hackers@freebsd.org>;
	Tue,  3 May 2005 14:51:24 +0000 (GMT)
Received: from mp2.macomnet.net (mp2.macomnet.net [195.128.64.6])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2CE1C43D77
	for <freebsd-hackers@freebsd.org>;
	Tue,  3 May 2005 14:51:24 +0000 (GMT)
	(envelope-from maxim@macomnet.ru)
Received-SPF: pass (mp2.macomnet.net: domain of maxim@macomnet.ru designates
	127.0.0.1 as permitted sender) receiver=mp2.macomnet.net; client_ip=127.0.0.1;
	envelope-from=maxim@macomnet.ru;
Received: from localhost (localhost [127.0.0.1])
	by mp2.macomnet.net (8.12.11/8.12.11) with ESMTP id j43EpGir027423;
	Tue, 3 May 2005 18:51:16 +0400 (MSD)
	(envelope-from maxim@macomnet.ru)
Date: Tue, 3 May 2005 18:51:16 +0400 (MSD)
From: Maxim Konovalov <maxim@macomnet.ru>
To: Imri Zvik <imriz@co.zahav.net.il>
In-Reply-To: <A6E1736261841F40B12286B0D04B194501C380F4@IGMAIL.InetGold>
Message-ID: <20050503185034.I27403@mp2.macomnet.net>
References: <A6E1736261841F40B12286B0D04B194501C380F4@IGMAIL.InetGold>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: freebsd-hackers@freebsd.org
Subject: RE: ipfw causing panic 4.11-RELEASE-p4
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 03 May 2005 14:51:25 -0000

On Tue, 3 May 2005, 17:49+0300, Imri Zvik wrote:

> I forgot to mention I was using ipfw1.
>
> When I upgraded to ipfw2 it didn't happen again.

[...]
> Mine doesn't:
>
> shy# uname -a
> FreeBSD shy.macomnet.ru 4.11-STABLE FreeBSD 4.11-STABLE #0: Thu Apr 21
> 05:48:09 MSD 2005     maxim@shy.macomnet.ru:/usr/obj/usr/src/sys/GENERIC
> i386
> shy# /sbin/ipfw disable firewall
> shy# /sbin/ipfw flush && sysctl net.inet.ip.fw.dyn_buckets=600
> Are you sure? [yn] y
>
> Flushed all rules.
> net.inet.ip.fw.dyn_buckets: 256 -> 600
> shy# ipfw add 1 allow all from any to any
> 00001 allow ip from any to any
> shy# /sbin/ipfw enable firewall
>
> Could you show your rules?

That's ipfw1.

-- 
Maxim Konovalov