[pf4freebsd] Re: nfsd send error 1 probably caused by pf ?

[Florian C. Smeets]

Florian C. Smeets wrote:
> Daniel Hartmeier wrote:
> 
> 
>>If that doesn't solve it, add 'log' to all block rules and watch pflog
>>for blocked packets. Enable debug logging (pfctl -xm) and watch
>>/var/log/messages for pf related messages. Do you see fragment
>>reassembly there?
> 

I get a lot of these BAD state messages with debug leve misc:

Nov 12 23:32:25 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 
172.30.1.1:2049 172.30.1.2:1021 [lo=2879006265 high=2879023465 
win=16588 modulator=0] [lo=1139973024 high=1139974122 win=17200 
modulator=0] 4:4 A
  seq=1139974472 ack=2879006265 len=1448 ackskew=0 pkts=406886:392362 
dir=in,rev
Nov 12 23:32:25 bender kernel: pf: State failure on: 1       |
Nov 12 23:32:25 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 
172.30.1.1:2049 172.30.1.2:1021 [lo=2879006265 high=2879023465 
win=16588 modulator=0] [lo=1139974472 high=1139974846 win=17200 
modulator=0] 4:4 A
  seq=1139974472 ack=2879006265 len=1448 ackskew=0 pkts=406889:392365 
dir=in,rev
Nov 12 23:32:25 bender kernel: pf: State failure on: 1       |
Nov 12 23:32:27 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 
172.30.1.1:2049 172.30.1.2:1021 [lo=2879074169 high=2879091369 
win=16588 modulator=0] [lo=1140040480 high=1140041578 win=17200 
modulator=0] 4:4 A
  seq=1140040480 ack=2879074169 len=1448 ackskew=0 pkts=406979:392451 
dir=in,rev
Nov 12 23:32:27 bender kernel: pf: State failure on: 1       |
Nov 12 23:32:27 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 
172.30.1.1:2049 172.30.1.2:1021 [lo=2879074169 high=2879091369 
win=16588 modulator=0] [lo=1140040480 high=1140041578 win=17200 
modulator=0] 4:4 A
  seq=1140041928 ack=2879074169 len=1448 ackskew=0 pkts=406979:392451 
dir=in,rev
Nov 12 23:32:27 bender kernel: pf: State failure on: 1       |
Nov 12 23:32:27 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 
172.30.1.1:2049 172.30.1.2:1021 [lo=2879074169 high=2879091369 
win=16588 modulator=0] [lo=1140041928 high=1140042302 win=17200 
modulator=0] 4:4 A
  seq=1140041928 ack=2879074169 len=1448 ackskew=0 pkts=406982:392454 
dir=in,rev
Nov 12 23:32:27 bender kernel: pf: State failure on: 1       |
Nov 12 23:32:30 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 
172.30.1.1:2049 172.30.1.2:1021 [lo=2879142073 high=2879159273 
win=16588 modulator=0] [lo=1140107936 high=1140109034 win=17200 
modulator=0] 4:4 A
  seq=1140107936 ack=2879142073 len=1448 ackskew=0 pkts=407072:392539 
dir=in,rev
Nov 12 23:32:30 bender kernel: pf: State failure on: 1       |
Nov 12 23:32:30 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 
172.30.1.1:2049 172.30.1.2:1021 [lo=2879142073 high=2879159273 
win=16588 modulator=0] [lo=1140107936 high=1140109034 win=17200 
modulator=0] 4:4 A
  seq=1140109384 ack=2879142073 len=1448 ackskew=0 pkts=407072:392539 
dir=in,rev
Nov 12 23:32:30 bender kernel: pf: State failure on: 1       |
Nov 12 23:32:30 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 
172.30.1.1:2049 172.30.1.2:1021 [lo=2879142073 high=2879159273 
win=16588 modulator=0] [lo=1140109384 high=1140109758 win=17200 
modulator=0] 4:4 A
  seq=1140109384 ack=2879142073 len=1448 ackskew=0 pkts=407075:392542 
dir=in,rev
Nov 12 23:32:30 bender kernel: pf: State failure on: 1       |

Regards,
flo