kern/168190: [pf] panic when using pf and route-to (maybe: bad
fragment handling?)
Joerg Pulz
Joerg.Pulz at frm2.tum.de
Tue Jun 5 06:50:13 UTC 2012
The following reply was made to PR kern/168190; it has been noted by GNATS.
From: Joerg Pulz <Joerg.Pulz at frm2.tum.de>
To: Daniel Hartmeier <daniel at benzedrine.cx>
Cc: bug-followup at freebsd.org, freebsd-pf at freebsd.org
Subject: Re: kern/168190: [pf] panic when using pf and route-to (maybe: bad
fragment handling?)
Date: Tue, 5 Jun 2012 08:48:48 +0200 (CEST)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Mon, 4 Jun 2012, Daniel Hartmeier wrote:
> Here's a patch that directly tests this theory.
>
> If correct, it will replace the panics with simple log messages that
> show when ipfilter left an m_len==0 mbuf.
Daniel,
seems that your patch fixed it.
I've seen the following log entry:
Jun 5 02:15:33 charon kernel: fr_check_wrapper: m_len 0 fixed
No panic and everything is running smooth.
I will go and recompile the kernel with all the IPFIREWALL options
reenabled to make sure that the byte ordering problem does not appear.
I will report back.
Thanks for your help.
Joerg
- --
The beginning is the most important part of the work.
-Plato
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (FreeBSD)
iD8DBQFPzavTSPOsGF+KA+MRArY+AJ43yqTeJ6hb+uCM7xZ8FWTztCz69ACgg1Wx
yVCCuNUO0ipvlbPwa0jzZjM=
=MGzr
-----END PGP SIGNATURE-----
More information about the freebsd-pf
mailing list