pf causes freeze of amd64 machine on heavy network load

Björn König bkoenig at
Sat Aug 6 18:31:00 GMT 2005

Max Laier wrote:

> From pf.conf(5):
>      Due to a lock order reversal (LOR) with the socket layer, the use of the
>      group and user filter parameter in conjuction with a Giant-free netstack
>      can result in a deadlock.  If you have to use group or user you must set
>      debug.mpsafenet to ``0'' from the loader(8), for the moment.  This work-
>      around will still produce the LOR, but Giant will protect from the dead-
>      lock.
> I am afraid this is what bites you.

Many thanks for this hint. The impact on performance with 
debug.mpsafenet=0 is not very important to me.


Björn König (bkoenig at
student at the Technische Universität Berlin

More information about the freebsd-pf mailing list