[Bug 224231] [ipfw] kernel panic when using ipfw nat

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=224231 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 223820] error when specify portrange (port-port) w/ portnames in ipfw kernel nat config

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=223820 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 Eugene Grosbein changed: What|Removed |Added CC|freebsd-ipfw@FreeBSD.org| -- You are

[Bug 222746] ipfw: tcpdatalen does not exactly match IPv6 packets.

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222746 --- Comment #7 from commit-h...@freebsd.org --- A commit references this bug: Author: ae Date: Tue Oct 31 10:31:47 UTC 2017 New revision: 325229 URL: https://svnweb.freebsd.org/changeset/base/325229 Log: MFC r324947: Add IPv6

[Bug 222746] ipfw: tcpdatalen does not exactly match IPv6 packets.

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222746 --- Comment #8 from commit-h...@freebsd.org --- A commit references this bug: Author: ae Date: Tue Oct 31 11:09:39 UTC 2017 New revision: 325230 URL: https://svnweb.freebsd.org/changeset/base/325230 Log: MFC r324947: Add IPv6

[Bug 222746] ipfw: tcpdatalen does not exactly match IPv6 packets.

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222746 --- Comment #6 from commit-h...@freebsd.org --- A commit references this bug: Author: ae Date: Tue Oct 24 08:39:06 UTC 2017 New revision: 324947 URL: https://svnweb.freebsd.org/changeset/base/324947 Log: Add IPv6 support for

[Bug 222746] ipfw: tcpdatalen does not exactly match IPv6 packets.

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222746 Tatsuki Makino changed: What|Removed |Added Attachment #186915|0 |1

[Bug 222746] ipfw: tcpdatalen does not exactly match IPv6 packets.

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222746 --- Comment #5 from Tatsuki Makino --- (In reply to Andrey V. Elsukov from comment #4) attachment 187283 can be applied to stable/10. I am using it on the following uname -a. FreeBSD T2.test 10.4-STABLE FreeBSD

[Bug 222746] ipfw: tcpdatalen does not exactly match IPv6 packets.

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222746 --- Comment #4 from Andrey V. Elsukov --- Created attachment 187283 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=187283=edit Proposed patch for tcplen Can you test this patch instead? -- You are receiving

[Bug 222705] ipfw "proto udp" parsing problem

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222705 Andrey V. Elsukov changed: What|Removed |Added CC|

[Bug 222768] ipfw can't distinguish an inbound packets forwarded via if_bridge

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222768 Mark Linimon changed: What|Removed |Added Keywords||patch

[Bug 222746] ipfw: tcpdatalen does not exactly match IPv6 packets.

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222746 Tatsuki Makino changed: What|Removed |Added Attachment #186894|0 |1

[Bug 222705] ipfw "proto udp" parsing problem

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222705 --- Comment #2 from Jason Mader --- if the rule is, unreach needfrag log ip from any to me udp dst-port 33434-33449 in where "ip" instead of "ip6" then, IPv4 will receive a need to fragment response, and IPv6 will

[Bug 222746] ipfw: tcpdatalen does not exactly match IPv6 packets.

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222746 Andrey V. Elsukov changed: What|Removed |Added CC|

[Bug 222746] ipfw: tcpdatalen does not exactly match IPv6 packets.

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222746 Tatsuki Makino changed: What|Removed |Added Attachment #186874|0 |1

[Bug 222746] ipfw: tcpdatalen does not exactly match IPv6 packets.

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222746 Mark Linimon changed: What|Removed |Added Keywords||patch

[Bug 222705] ipfw "proto udp" parsing problem

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222705 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 Kubilay Kocak changed: What|Removed |Added Flags||mfc-stable11+

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 --- Comment #20 from commit-h...@freebsd.org --- A commit references this bug: Author: ae Date: Wed Sep 27 01:47:54 UTC 2017 New revision: 324047 URL: https://svnweb.freebsd.org/changeset/base/324047 Log: MFC r323839: Use

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 Eugene Grosbein changed: What|Removed |Added Assignee|freebsd-ipfw@FreeBSD.org

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 --- Comment #18 from commit-h...@freebsd.org --- A commit references this bug: Author: ae Date: Wed Sep 20 22:35:28 UTC 2017 New revision: 323839 URL: https://svnweb.freebsd.org/changeset/base/323839 Log: Use in_localip() function

[Bug 213452] [patch] [ipfw] add support for ipfw ngtee/netgraph actions at layer-2

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=213452 Eugene Grosbein changed: What|Removed |Added CC|

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 Eugene Grosbein changed: What|Removed |Added CC|

[Bug 213452] [patch] [ipfw] add support for ipfw ngtee/netgraph actions at layer-2

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=213452 Eugene Grosbein changed: What|Removed |Added CC|

[Bug 46159] [ipfw] [patch] [request] ipfw dynamic rules lifetime feature

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=46159 Josh Paetzel changed: What|Removed |Added Resolution|--- |Overcome By

[Bug 82724] [ipfw] [patch] [request] Add setnexthop and defaultroute features to ipfw2

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=82724 Josh Paetzel changed: What|Removed |Added CC|

[Bug 103328] [ipfw] [request] sugestions about ipfw table

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=103328 Josh Paetzel changed: What|Removed |Added Status|In Progress |Closed

[Bug 116009] [ipfw] [patch] Ignore errors when loading ruleset from file + rule replacement command

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=116009 Josh Paetzel changed: What|Removed |Added Resolution|--- |Overcome By

[Bug 220824] ipfw lookup tables are not supported in -n mode

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220824 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 104682] [ipfw] [patch] Some minor language consistency fixes and whitespace nits

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=104682 Josh Paetzel changed: What|Removed |Added Status|In Progress |Closed

[Bug 97951] [ipfw] [patch] ipfw does not tie interface details to state

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=97951 Josh Paetzel changed: What|Removed |Added Resolution|--- |Rejected

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 --- Comment #16 from Eugene Grosbein --- (In reply to Andrey V. Elsukov from comment #4) Andrey, there is no problems with your patch for ipfw. Please commit. -- You are receiving this mail because: You are the

[Bug 86957] [ipfw] [patch] ipfw mac logging

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=86957 Josh Paetzel changed: What|Removed |Added Resolution|--- |Overcome By

[Bug 48172] [ipfw] [patch] ipfw does not log size and flags

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=48172 Josh Paetzel changed: What|Removed |Added Resolution|--- |Overcome By

[Bug 60719] [ipfw] Headerless fragments generate cryptic error message

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=60719 Josh Paetzel changed: What|Removed |Added Status|In Progress |Closed

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 --- Comment #15 from Cassiano Peixoto --- (In reply to Eugene Grosbein from comment #14) Ok got it. Patch applied fine. Thanks. -- You are receiving this mail because: You are the assignee for the bug.

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 --- Comment #10 from Cassiano Peixoto --- (In reply to Eugene Grosbein from comment #9) mcast has been reject: # patch < mcast.patch Hmm... Looks like a unified diff to me... The text leading up to this was:

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 --- Comment #9 from Eugene Grosbein --- (In reply to Cassiano Peixoto from comment #8) Kernel only. -- You are receiving this mail because: You are the assignee for the bug.

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 --- Comment #8 from Cassiano Peixoto --- (In reply to Eugene Grosbein from comment #7) Do i need to recompile the world or only the kernel? -- You are receiving this mail because: You are the assignee for the

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 --- Comment #7 from Eugene Grosbein --- (In reply to Cassiano Peixoto from comment #6) This PR presents several patches for several kernel subsystems. Apply patches for ip_mcast.c and ip_input(). The patch for ipfw is

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 Cassiano Peixoto changed: What|Removed |Added CC|

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 --- Comment #5 from Eugene Grosbein --- (In reply to Andrey V. Elsukov from comment #4) I've just rebuilt the kernel with your version of patch instead of old one and restarted my tests. New version does basically same

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 Kubilay Kocak changed: What|Removed |Added See Also|

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 Andrey V. Elsukov changed: What|Removed |Added CC|

[Bug 220078] [patch] [panic] [ipfw] repeatable kernel panic due to unlocked INADDR_TO_IFP usage

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220078 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 217620] ipfw flow specification parsing

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217620 Andrey V. Elsukov changed: What|Removed |Added Resolution|--- |FIXED

[Bug 217620] ipfw flow specification parsing

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217620 --- Comment #2 from commit-h...@freebsd.org --- A commit references this bug: Author: ae Date: Wed May 24 09:01:55 UTC 2017 New revision: 318777 URL: https://svnweb.freebsd.org/changeset/base/318777 Log: MFC r318400: Allow zero port

[Bug 219316] Wildcard matching of ipfw flow tables

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219316 --- Comment #12 from l...@donnerhacke.de --- Ah, I missed the previous comment. >>1) Large Scale NAT violates the happy eyeball requirement, that a given client >> should always use the same external IP while communicating to a given >>

[Bug 219316] Wildcard matching of ipfw flow tables

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219316 --- Comment #11 from l...@donnerhacke.de --- For flows the extend to ip:mask (per entry) does not really help: - ports and protocol numbers are not covered - hashs are not radix trees, they can handle only an uniform mask And there is

[Bug 219316] Wildcard matching of ipfw flow tables

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219316 --- Comment #10 from Julian Elischer --- reply to self: ah ipfw doesn't support addr:mask I remember it working on a version that did at one stage... so maybe the answer is to extend the table add command to support

[Bug 219316] Wildcard matching of ipfw flow tables

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219316 --- Comment #9 from Julian Elischer --- (In reply to lutz from comment #0) >For Carrier Grade NAT environments any simple NAT table selection is not >usable: > >1) Large Scale NAT violates the happy eyeball

[Bug 219316] Wildcard matching of ipfw flow tables

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219316 Julian Elischer changed: What|Removed |Added CC|

[Bug 219316] Wildcard matching of ipfw flow tables

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219316 Mark Linimon changed: What|Removed |Added Keywords||patch

[Bug 219223] ipfw failing to load

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219223 Andrey V. Elsukov changed: What|Removed |Added CC|

[Bug 217620] ipfw flow specification parsing

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217620 --- Comment #1 from commit-h...@freebsd.org --- A commit references this bug: Author: ae Date: Wed May 17 10:56:22 UTC 2017 New revision: 318400 URL: https://svnweb.freebsd.org/changeset/base/318400 Log: Allow zero port specification in

[Bug 217620] ipfw flow specification parsing

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217620 l...@donnerhacke.de changed: What|Removed |Added See Also||https://bugs.freebsd.org/bu

[Bug 219223] ipfw failing to load

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219223 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 212668] ipfw table all ignores set parameter

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=212668 Andrey V. Elsukov changed: What|Removed |Added Resolution|--- |FIXED

[Bug 218993] [patch] [ipfw] ipfw(8) may fail to remove rules

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=218993 Andrey V. Elsukov changed: What|Removed |Added Resolution|--- |FIXED

[Bug 212669] change ipfw to all table all destroy

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=212669 Andrey V. Elsukov changed: What|Removed |Added Assignee|freebsd-ipfw@FreeBSD.org

[Bug 212668] ipfw table all ignores set parameter

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=212668 --- Comment #2 from commit-h...@freebsd.org --- A commit references this bug: Author: ae Date: Wed May 10 05:05:21 UTC 2017 New revision: 318134 URL: https://svnweb.freebsd.org/changeset/base/318134 Log: MFC r317666: Add sets

[Bug 218993] [patch] [ipfw] ipfw(8) may fail to remove rules

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=218993 --- Comment #2 from commit-h...@freebsd.org --- A commit references this bug: Author: ae Date: Wed May 10 05:02:38 UTC 2017 New revision: 318132 URL: https://svnweb.freebsd.org/changeset/base/318132 Log: MFC r317663: Properly

[Bug 212669] change ipfw to all table all destroy

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=212669 --- Comment #4 from commit-h...@freebsd.org --- A commit references this bug: Author: ae Date: Wed May 10 05:01:06 UTC 2017 New revision: 318131 URL: https://svnweb.freebsd.org/changeset/base/318131 Log: MFC r317682: Add `ipfw table

[Bug 218993] [patch] [ipfw] ipfw(8) may fail to remove rules

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=218993 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 215875] [ipfw] ipfw lookup tables do not support mbuf_tags(9) ipfw cookies lookups

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=215875 Andrey V. Elsukov changed: What|Removed |Added CC|

[Bug 212669] change ipfw to all table all destroy

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=212669 --- Comment #3 from commit-h...@freebsd.org --- A commit references this bug: Author: ae Date: Tue May 2 17:16:24 UTC 2017 New revision: 317682 URL: https://svnweb.freebsd.org/changeset/base/317682 Log: Add `ipfw table all destroy`

[Bug 217292] ipfw lookup on fields other than IP source and destination address doesn't work for IPv6

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217292 Andrey V. Elsukov changed: What|Removed |Added Status|New |Closed

[Bug 217738] sbin/ipfw/nat64lsn.c: PVS-Studio: CWE-467: Use of sizeof() on a Pointer Type

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217738 --- Comment #1 from commit-h...@freebsd.org --- A commit references this bug: Author: cem Date: Mon Mar 13 17:53:46 UTC 2017 New revision: 315204 URL: https://svnweb.freebsd.org/changeset/base/315204 Log: nat64lsn: Use memset() with

[Bug 217738] sbin/ipfw/nat64lsn.c: PVS-Studio: CWE-467: Use of sizeof() on a Pointer Type

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217738 Conrad Meyer changed: What|Removed |Added CC||c...@freebsd.org

[Bug 217262] ipfw lookup tables match on index instead of value

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217262 --- Comment #4 from commit-h...@freebsd.org --- A commit references this bug: Author: ae Date: Fri Mar 10 05:44:14 UTC 2017 New revision: 314990 URL: https://svnweb.freebsd.org/changeset/base/314990 Log: MFC r314614: Fix matching

[Bug 217617] Typo in ip_fw_table.c

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217617 Maxim Konovalov changed: What|Removed |Added Status|New |Closed

[Bug 217617] Typo in ip_fw_table.c

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217617 --- Comment #1 from commit-h...@freebsd.org --- A commit references this bug: Author: maxim Date: Thu Mar 9 09:54:23 UTC 2017 New revision: 314955 URL: https://svnweb.freebsd.org/changeset/base/314955 Log: o Typo in the comment fixed.

[Bug 217617] Typo in ip_fw_table.c

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217617 Mark Linimon changed: What|Removed |Added Keywords||patch

[Bug 217620] ipfw flow specification parsing

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217620 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 216867] IPFW workstation rules block DNSSEC resulting in DNS failure on freebsd.org domains

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=216867 Mark Felder changed: What|Removed |Added CC||f...@freebsd.org

[Bug 217391] [ipfw] [panic] erroneous ipfw rule triggers KASSERT

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217391 --- Comment #4 from commit-h...@freebsd.org --- A commit references this bug: Author: ae Date: Sun Mar 5 22:19:43 UTC 2017 New revision: 314715 URL: https://svnweb.freebsd.org/changeset/base/314715 Log: Reject invalid object types that

[Bug 217391] [ipfw] [panic] erroneous ipfw rule triggers KASSERT

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217391 --- Comment #3 from Eugene Grosbein --- Thanks, this patch really helps. Now second command (with error) gets rejected by the kernel: # ipfw add 1 count ip from any to any in recv 'table(10)' ipfw:

[Bug 213452] [patch] [ipfw] add support for ipfw ngtee/netgraph actions at layer-2

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=213452 Eugene Grosbein changed: What|Removed |Added Attachment #175712|0 |1 is

[Bug 217391] [ipfw] [panic] erroneous ipfw rule triggers KASSERT

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217391 Andrey V. Elsukov changed: What|Removed |Added CC|

[Bug 217292] ipfw lookup on fields other than IP source and destination address doesn't work for IPv6

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217292 Andrey V. Elsukov changed: What|Removed |Added CC|

[Bug 217262] ipfw lookup tables match on index instead of value

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217262 Rodney W. Grimes changed: What|Removed |Added Flags|

[Bug 217262] ipfw lookup tables match on index instead of value

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217262 --- Comment #2 from Rodney W. Grimes --- I ran the tests Allan posted here against your patch on an 11.0p1 system and it indeed has fixed the problem. Please note that we need this and r307628 merged back to

[Bug 217262] ipfw lookup tables match on index instead of value

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217262 --- Comment #1 from Andrey V. Elsukov --- Created attachment 180444 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=180444=edit Proposed patch Hi, can you test this patch? I think it should fix the problem. --

[Bug 217391] [ipfw] [panic] erroneous ipfw rule triggers KASSERT

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217391 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 216719] panic: ipfw_check_frame: unknown retval - while trying to ipfw nat incoming packet without translation state (can be L2 firewall related)

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=216719 smi...@nimnet.asn.au changed: What|Removed |Added CC||smi...@nimnet.asn.au ---

[Bug 216719] panic: ipfw_check_frame: unknown retval - while trying to ipfw nat incoming packet without translation state (can be L2 firewall related)

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=216719 --- Comment #1 from b...@kobyla.org --- Adding the "not layer2" to ipfw nat rule helps to avoid this problem -- You are receiving this mail because: You are the assignee for the bug. ___

[Bug 217292] ipfw lookup on fields other than IP source and destination address doesn't work for IPv6

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217292 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 167822] [ipfw] [patch] start script doesn't load firewall_type if set in rc.conf.d/ipfw

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=167822 Jim Pirzyk changed: What|Removed |Added CC|

[Bug 209680] ipfw: when enabled, net connections time out/ssh results in "broken pipe"

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209680 --- Comment #14 from Len White --- Yes thank you very much Fabian, it fixed my issues too. Is there any possible way this can get pushed upstream? I personally feel it's a rather serious bug and there is no doubt many

[Bug 209680] ipfw: when enabled, net connections time out/ssh results in "broken pipe"

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209680 --- Comment #13 from merca...@diablonet.net --- Fabian: Thank you for the patch, attachment 170568 appears to have fixed my issues. I was having similar issues that others were describing here, in my case 11.0-RELEASE on arm: I would

[Bug 217262] ipfw lookup tables match on index instead of value

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217262 Allan Jude changed: What|Removed |Added CC|

[Bug 216867] IPFW workstation rules block DNSSEC resulting in DNS failure on freebsd.org domains

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=216867 Mark Linimon changed: What|Removed |Added CC|freebsd-am...@freebsd.org |

[Bug 216719] panic: ipfw_check_frame: unknown retval - while trying to ipfw nat incoming packet without translation state (can be L2 firewall related)

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=216719 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 216610] TCP connections stuck forever in FIN_WAIT2 using IPFW

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=216610 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 209680] ipfw: when enabled, net connections time out/ssh results in "broken pipe"

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209680 --- Comment #12 from Fabian Keil --- I'm still not using ipfw, but the patch from comment two seems to have fixed the issue for me. The patch from comment three should be safe to test. Running "vmstat -z" while the

[Bug 209680] ipfw: when enabled, net connections time out/ssh results in "broken pipe"

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209680 Len White changed: What|Removed |Added CC||lwh...@nrw.ca ---

[Bug 215875] [ipfw] ipfw lookup tables do not support mbuf_tags(9) ipfw cookies lookups

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=215875 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 214419] ipfw coredump when try to add rule with table of IPv6 addresses

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=214419 --- Comment #6 from commit-h...@freebsd.org --- A commit references this bug: Author: ae Date: Tue Nov 22 10:09:04 UTC 2016 New revision: 308970 URL: https://svnweb.freebsd.org/changeset/base/308970 Log: MFC r308673: Add missing

[Bug 214419] ipfw coredump when try to add rule with table of IPv6 addresses

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=214419 Erokhin Konstantin changed: What|Removed |Added Resolution|---

[Bug 214419] ipfw coredump when try to add rule with table of IPv6 addresses

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=214419 --- Comment #5 from Erokhin Konstantin --- (In reply to commit-hook from comment #4) Tested on head/308673 problem fixed. -- You are receiving this mail because: You are the assignee for the bug.

<    4   5   6   7   8   9   10   >