svn commit: r223637 - in head: . contrib/pf/authpf contrib/pf/ftp-proxy contrib/pf/man contrib/pf/pfctl contrib/pf/pflogd sbin/pflogd sys/conf sys/contrib/altq/altq sys/contrib/pf/net sys/modules s...

[Ermal Luçi]

On Thu, Jul 7, 2011 at 9:35 PM, David O'Brien <obrien at freebsd.org> wrote:
> On Wed, Jun 29, 2011 at 07:22:24PM +0200, Fabian Keil wrote:
>> "Bjoern A. Zeeb" <bz at FreeBSD.org> wrote:
>> > In short; please test!
>>
>> I didn't experience any real problems yet, but running
>
> Hi Bjoern,
> Unfortunately I've had MAJOR network problems since the pf upgrade.
>
> Besides getting the "state key linking mismatch!" issue:
>
> pf: state key linking mismatch! dir=OUT, if=fxp0, stored af=2, a0: 208.83.139.205:2703, a1: 74.95.12.85:20474, proto=6, found af=2, a0: 208.83.139.205:2703, a1: 74.95.12.85:20474, proto=6.
> pf: state key linking mismatch! dir=OUT, if=fxp0, stored af=2, a0: 87.98.164.164:44387, a1: 74.95.12.85:53, proto=6, found af=2, a0: 87.98.164.164:44387, a1: 74.95.12.85:53, proto=6.
> pf: state key linking mismatch! dir=OUT, if=fxp0, stored af=2, a0: 87.98.164.164:44387, a1: 74.95.12.85:53, proto=6, found af=2, a0: 87.98.164.164:44387, a1: 74.95.12.85:53, proto=6.
>
> I found that my kernel (@ r223671) would stop sending packets 3-4 hours
> after reboot.  New connections could not be established, I could not ping
> any of the direct connections on any of my interfaces.  Existing
> connections would remain established for quite some time (hours) but
> eventually close also.
>
> No amount of re-running /etc/rc.d/* scripts ('pf restart', 'netif
> restart', 'routing restart', etc...) would bring back working networking.
>
> Since reverting back to r223636, my kernel has had rock solid networking.
>
> I have 'pfctl', 'netstat', 'netstat -rn', and 'sysctl -a' output from one
> of these experiences.  Would they be useful to you in looking into this?
>

please send those.
Also useful would be a description of your setup.

> --
> -- David    (obrien at FreeBSD.org)
> _______________________________________________
> freebsd-pf at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe at freebsd.org"
>



-- 
Ermal