[Bug 192677] New: pfctl iotcl buffer to small for bigger spamd blacklists

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192677

            Bug ID: 192677
           Summary: pfctl iotcl buffer to small for bigger spamd
                    blacklists
           Product: Base System
           Version: 10.0-RELEASE
          Hardware: amd64
                OS: Any
            Status: Needs Triage
          Severity: Affects Some People
          Priority: ---
         Component: bin
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: simon.krenz+freebsd-bugzilla at mailbox.org

I installed spamd-4.9.1_2 and wanted to use its blacklist und tarpitting
capabilities which I were used to in OpenBSD. If you are using the 'nixspam'
and 'uatraps' lists for blacklisting mode nearly 100.000 entries need to be
inserted to a pf table.

The debug output looks likes this:

    foo at bar#: spamd-setup -d -b
    Getting http://www.openbsd.org/spamd/nixspam.gz
    blacklist nixspam 40000 entries
    Getting http://www.openbsd.org/spamd/traplist.gz
    blacklist uatraps 65946 entries
    foo at bar#: pfctl: Bad address.

It seems that the pfctl ioctl buffer is to small to load that much entries. If
I remembered correct this problem wasn't there in FreeBSD 9 and I didn't see it
in OpenBSD.

There is also a FreeBSD Forum post from another guy regarding the same problem:
https://forums.freebsd.org/viewtopic.php?t=45879

-- 
You are receiving this mail because:
You are the assignee for the bug.