From nobody Sat Aug 16 09:16:19 2025 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4c3tdf6TGMz646C4; Sat, 16 Aug 2025 09:16:38 +0000 (UTC) (envelope-from kp@freebsd.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4c3tdd5Ypcz47Ms; Sat, 16 Aug 2025 09:16:37 +0000 (UTC) (envelope-from kp@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1755335798; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=szmoZft5vgECOzF1LNjuvUFxLGxiT1XdLvWg9u6dLzM=; b=pqtRJX81F1ySln2sDtIJCnst0at31JQiUYu7KqBjcZmlVsfQYorWPdlYmsVIYtOWGd2E3i pW3CECA4SoSIznTt5SNb9XT7QXlFBSAk0uqVCg7VvNtPRVfLofLTiTl5fZEUnC2kWpG8vB t1lkFo48xtap/cKA2aaEyX1jEWZqOTAfVtmEJ3880dhM32czEkxUEC+4RJ6hGaZGeaYuvS aZZSP0ve/2yGLFQ2Dn93MUdT+rvqQFgthZVxpQJ+AkkAaifKXqkiRiliOHgkHVTwn8l0sJ oFtrpT1RdUlBPAUGB1ZQ43g7/9iSeODe/wA/SayiPMQfd/4yXeLqbW7QWwpuZA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1755335797; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=szmoZft5vgECOzF1LNjuvUFxLGxiT1XdLvWg9u6dLzM=; b=uFhf1kV3umaHwLoU2IG5/eoZyopdgtEva0jcN9/F5z9q/00STA60ZichCtWwfrphYl+/mB a8192Ai/t1p2AG4FZwq8nxegp/X2SHegt4YxR/5P0QGoHtZAI1jqSzQnFfQDohmG1wRDh6 Iit8NVj5xgPXQdcStFiZmgn0RnYK1t5dQgx0kHn15FqftLKZDQz59ro9Ny7htC8a59Ga4c NbkBeb2KHo1uCduXAq6Yq6EkHAcCwEbDAVBmUi+cAMlLEAibS7xljE+mNhQCnzjGnKoeV3 N7kHueHPAAFl0YqAdLZezGRxMMf/ckCXcnuqslgj7RE1+jmIAOlzZPczJv3aaQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1755335797; a=rsa-sha256; cv=none; b=Hjhcjie68AdELvG0tIb9rwhQx7DiikPVJSNs3MGVdYrEIqGN1ePiWeKnp8mMIQObglE5FZ NrGDTQNmlPYO0uQwMK+SXBZ3tV6s2AkUR9WY7ZTz1VFie3xczARre6SNnHNX/6q0WPgjKH 1hI0beYPqfNtOkCMntqm4+qqGLSGWwqV5vmqGBTXhXyQFbr5Dv4MtoQu3rja8Xst9/u6Cc z+jrNN8CurmykiPDLuCWpGd0jzk3Q3E9jtRtW3A1pMIY+rz38n2XtZv/iiKejfkaQOmWIP xt7sRBv5XOuHwEbwsZ2kxzlgDAcNfh+w98PD4/SfztVBLpPhW16e2usBf6z3kQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from venus.codepro.be (venus.codepro.be [5.9.86.228]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mx1.codepro.be", Issuer "R11" (verified OK)) (Authenticated sender: kp) by smtp.freebsd.org (Postfix) with ESMTPSA id 4c3tdd4GQ4zCZt; Sat, 16 Aug 2025 09:16:37 +0000 (UTC) (envelope-from kp@freebsd.org) Received: by venus.codepro.be (Postfix, authenticated sender kp) id E26DC4A80D; Sat, 16 Aug 2025 11:16:34 +0200 (CEST) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: Kristof Provost List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org Mime-Version: 1.0 (1.0) Subject: Re: git: bad279e12deb - main - pf: convert DIOCRDELADDRS to netlink Date: Sat, 16 Aug 2025 11:16:19 +0200 Message-Id: <36A8F5DC-AEA6-483F-A082-417E8C89EC9F@freebsd.org> References: <06c00743-d1a6-4e94-8ccb-6adaeea0e2a9@smeets.xyz> Cc: src-committers@freebsd.org, dev-commits-src-all@freebsd.org, dev-commits-src-main@freebsd.org In-Reply-To: <06c00743-d1a6-4e94-8ccb-6adaeea0e2a9@smeets.xyz> To: Florian Smeets X-Mailer: iPhone Mail (22G86) > On 16 Aug 2025, at 10:34, Florian Smeets wrote: >=20 > =EF=BB=BFOn 06.08.25 00:28, Kristof Provost wrote: >> The branch main has been updated by kp: >> URL: https://cgit.FreeBSD.org/src/commit/?id=3Dbad279e12deb3e4e4528dbc6b0= 6f56aefb165b15 >> commit bad279e12deb3e4e4528dbc6b06f56aefb165b15 >> Author: Kristof Provost >> AuthorDate: 2025-08-01 14:18:52 +0000 >> Commit: Kristof Provost >> CommitDate: 2025-08-05 22:27:14 +0000 >> pf: convert DIOCRDELADDRS to netlink >> =20 > Hi Kristof, >=20 > this is causing issues with crowdsec. The pfctl process is using up all me= mory and gets killed by the OOM killer. >=20 > The issue appears to be trying to delete IPs that are not part of a table,= which can apparently happen with crowdsec. >=20 > root@fw:~ # /sbin/pfctl -t crowdsec-blacklists -T show|tail -1 > 223.247.218.112 > root@fw:~ # /sbin/pfctl -t crowdsec-blacklists -T delete 223.247.218.112 > 1/1 addresses deleted. > root@fw:~ # /sbin/pfctl -t crowdsec-blacklists -T show|grep 223.247.218.11= 3 > root@fw:~ # /sbin/pfctl -t crowdsec-blacklists -T delete 223.247.218.113 > load: 0.65 cmd: pfctl 26515 [runnable] 10.19r 0.75u 4.86s 32% 802128k > load: 0.78 cmd: pfctl 26515 [runnable] 17.67r 1.41u 8.19s 40% 1452576k > load: 0.89 cmd: pfctl 26515 [running] 29.14r 2.44u 13.16s 46% 2506284k >=20 Yeah, I=E2=80=99ve had other reports. Both add and delete have issues. I kno= w what the problem is. I just need to finish the test case before I can comm= it.=20 Expect it early next week.=20 =E2=80=94=20 Kristof