-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 4 Jun 2012, Daniel Hartmeier wrote:

Here's a patch that directly tests this theory.

If correct, it will replace the panics with simple log messages that
show when ipfilter left an m_len==0 mbuf.

Daniel,

seems that your patch fixed it.
I've seen the following log entry:

Jun  5 02:15:33 charon kernel: fr_check_wrapper: m_len 0 fixed

No panic and everything is running smooth.
I will go and recompile the kernel with all the IPFIREWALL options reenabled to make sure that the byte ordering problem does not appear.

I will report back.

Thanks for your help.
Joerg

- -- The beginning is the most important part of the work.
                                -Plato
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (FreeBSD)

iD8DBQFPzavTSPOsGF+KA+MRArY+AJ43yqTeJ6hb+uCM7xZ8FWTztCz69ACgg1Wx
yVCCuNUO0ipvlbPwa0jzZjM=
=MGzr
-----END PGP SIGNATURE-----
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[email protected]"

Reply via email to