[Bug 201879] panic: boot time panic with a scrub rule on exclusive sleep mutex pf fragments...

2015-07-25 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=201879 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 201695] [PATCH] pf.conf syntax (interface:0) incorrectly results in IPv6 link-local address

2015-07-20 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=201695 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 124933] [pf] [ip6] pf does not support (drops) IPv6 fragmented packets

2015-07-16 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=124933 Kristof Provost k...@freebsd.org changed: What|Removed |Added Resolution|--- |FIXED

[Bug 124933] [pf] [ip6] pf does not support (drops) IPv6 fragmented packets

2015-07-15 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=124933 Allan Jude allanj...@freebsd.org changed: What|Removed |Added CC|

[Bug 201519] pf NAT translates ICMP type 3 packects incorrectly

2015-07-13 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=201519 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 201520] Wrong Error Line Number Given by PF syntax checker

2015-07-13 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=201520 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 193620] Problem with igb multiqueue together with pf

2015-06-29 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193620 Sean Bruno sbr...@freebsd.org changed: What|Removed |Added Status|New |In Progress ---

[Bug 193620] Problem with igb multiqueue together with pf

2015-06-25 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193620 Sean Bruno sbr...@freebsd.org changed: What|Removed |Added CC||sbr...@freebsd.org

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-06-18 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #19 from commit-h...@freebsd.org --- A commit references this bug: Author: kp Date: Thu Jun 18 21:23:42 UTC 2015 New revision: 284580 URL: https://svnweb.freebsd.org/changeset/base/284580 Log: Merge r284222, r284260 pf:

[Bug 196314] pf nested inline anchors does not work

2015-06-18 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196314 --- Comment #1 from kri...@cflinux.hu --- Any updates on this bug report? -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-pf@freebsd.org mailing list

[Bug 183198] [pf] pf tables not loaded if only used inside anchor

2015-06-18 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=183198 --- Comment #7 from kri...@cflinux.hu --- Is there any updates regarding this report? OpenBSD has already accepted the patch. -- You are receiving this mail because: You are the assignee for the bug.

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-06-12 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 Kristof Provost kris...@freebsd.org changed: What|Removed |Added Status|New |Closed

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-06-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #13 from Kristof Provost kris...@freebsd.org --- I've not yet been able to reproduce your second panic. As of r284260 things appear to be working for me. Is this something you can easily reproduce? Can you also explain your use

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-06-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #14 from Danilo Egea Gondolfo dan...@freebsd.org --- I was using this option in a low traffic network. The last panic happened after some hours of uptime. Nothing special. My use case for drop-ovl is just testing, I don't need

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-06-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #15 from Kristof Provost kris...@freebsd.org --- The problem I have with 'drop-ovl' (and the same applies to 'crop') is that it's a bit misleading. They don't actually reassemble the fragmented packet. That means a far lower

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-06-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #16 from Danilo Egea Gondolfo dan...@freebsd.org --- Yes, I was expecting that drop-ovl just drops packets with fragments that has the field fragment offset overlapping other fragments. My question is: Can (or should) fragment

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-06-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #17 from Kristof Provost kris...@freebsd.org --- 'reassemble' does the right thing, in that it will fully reassemble the packet. It handles overlaps, by discarding the (parts of) packets it's already seen. Processing continues

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-06-10 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #12 from commit-h...@freebsd.org --- A commit references this bug: Author: kp Date: Wed Jun 10 13:44:04 UTC 2015 New revision: 284222 URL: https://svnweb.freebsd.org/changeset/base/284222 Log: pf: address family must be set

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-06-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #9 from Danilo Egea Gondolfo dan...@freebsd.org --- Panic again, but due a page fault now. -- You are receiving this mail because: You are on the CC list for the bug. ___

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-06-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #10 from Danilo Egea Gondolfo dan...@freebsd.org --- Created attachment 157587 -- https://bugs.freebsd.org/bugzilla/attachment.cgi?id=157587action=edit new core dump -- You are receiving this mail because: You are on the CC

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-06-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #11 from Kristof Provost kris...@freebsd.org --- Thanks for testing. I'll already commit the first fix, because it clearly fixes part of the problem you're seeing. I'll also see if I can reproduce the problem and/or figure out

[Bug 198868] pf brakes tcp checksum if enabled for ue adapter

2015-06-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=198868 --- Comment #2 from Dmitry Samersoff d...@samersoff.net --- Any updates? -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-pf@freebsd.org mailing list

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-06-07 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #8 from Danilo Egea Gondolfo dan...@freebsd.org --- I'm testing. Thanks! -- You are receiving this mail because: You are on the CC list for the bug. ___ freebsd-pf@freebsd.org

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-06-06 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #7 from Kristof Provost kris...@freebsd.org --- Created attachment 157492 -- https://bugs.freebsd.org/bugzilla/attachment.cgi?id=157492action=edit Possible patch I've had a look, and I think I know why you're seeing this

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-05-22 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #4 from Danilo Egea Gondolfo dan...@freebsd.org --- After 7 hours using the system, with an ethernet cable this time, I've got the panic again. -- You are receiving this mail because: You are on the CC list for the bug.

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-05-22 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #6 from Danilo Egea Gondolfo dan...@freebsd.org --- I've isolated the mbuf data. Parsing the IP header we have: Version: 4 Hlen: 5 ToS: 0 Len: 173 Id: 54533 Off: 185 TTL: 52 P: 17 Sum: f4ad Src: 8.8.8.8 Dst: 172.16.255.179

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-05-22 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #5 from Danilo Egea Gondolfo dan...@freebsd.org --- Created attachment 157060 -- https://bugs.freebsd.org/bugzilla/attachment.cgi?id=157060action=edit core2.txt -- You are receiving this mail because: You are on the CC list

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-05-21 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 Kristof Provost kris...@freebsd.org changed: What|Removed |Added CC|

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-05-21 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 --- Comment #3 from Danilo Egea Gondolfo dan...@freebsd.org --- Created attachment 157012 -- https://bugs.freebsd.org/bugzilla/attachment.cgi?id=157012action=edit kernel conf -- You are receiving this mail because: You are on the CC

[Bug 200320] pfSync causes crashes

2015-05-20 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200320 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-05-20 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 200321] [ip] [pf] pfSync generates demotion events to carp when not needed

2015-05-20 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200321 Mark Linimon lini...@freebsd.org changed: What|Removed |Added CC|

[Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used

2015-05-19 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330 Bug ID: 200330 Summary: panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used Product: Base System Version: 11.0-CURRENT Hardware: Any

[Bug 192774] PF_KEY ACQUIRE missing port and protocol info

2015-05-19 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192774 Andrey V. Elsukov a...@freebsd.org changed: What|Removed |Added CC|

[Bug 200222] [patch][pf] fix possible kernel panic on missing mtag

2015-05-18 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200222 Gleb Smirnoff gleb...@freebsd.org changed: What|Removed |Added Assignee|freebsd-pf@FreeBSD.org

[Bug 200222] [patch][pf] fix possible kernel panic on missing mtag

2015-05-15 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200222 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 127814] [pf] The flush in pf_reload in /etc/rc.d/pf does not work as intended

2015-04-13 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=127814 longw...@incore.de changed: What|Removed |Added CC||longw...@incore.de ---

[Bug 193568] PF rdr rule with ipv6 does not work

2015-03-25 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193568 j.david.li...@gmail.com changed: What|Removed |Added CC||j.david.li...@gmail.com

[Bug 198868] pf brakes tcp checksum if enabled for ue adapter

2015-03-24 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=198868 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 198674] [pf] [tftp-proxy] tftp-proxy cannot write rdr rules

2015-03-19 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=198674 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 198674] [pf] [tftp-proxy] tftp-proxy cannot write rdr rules

2015-03-19 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=198674 jja...@gmail.com changed: What|Removed |Added Resolution|--- |FIXED Status|New

[Bug 185617] pfctl(8): armv6: pfctl -s state crashes on BeagleBone Black due to unaligned access

2015-03-17 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=185617 guy...@gmail.com changed: What|Removed |Added Summary|pfctl(8): 10.0-RC1, armv6: |pfctl(8): armv6: pfctl -s

[Bug 192426] [bpf] [panic] [patch]: Kernel panic when using BPF

2015-03-12 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192426 Andrey V. Elsukov a...@freebsd.org changed: What|Removed |Added Assignee|freebsd-pf@FreeBSD.org

[Bug 197511] BPF -- Interactions with Dhclient, Tcpdump, and Network Connections (Ping)

2015-03-12 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=197511 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-pf@FreeBSD.org

[Bug 145727] [pf.conf] pf rules not applied on boot if using inet6 :network modifier

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=145727 Mark Linimon lini...@freebsd.org changed: What|Removed |Added CC|

[Bug 186251] authpf(8) always fails with error removing stale rulesets on 10.0-RELEASE

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=186251 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 175267] [pf] [tap] pf + tap keep state problem

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=175267 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-...@freebsd.org

[Bug 192774] PF_KEY ACQUIRE missing port and protocol info

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192774 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 197566] Wrong comparsion in pflogd

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=197566 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Keywords||patch

[Bug 196314] pf nested inline anchors does not work

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196314 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 192677] pfctl iotcl buffer to small for bigger spamd blacklists

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192677 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 16644] [bpf] [patch] Bad comparison expression in bpf_filter.c

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=16644 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Keywords||patch

[Bug 196699] pf starts blocking traffic from jails (with VIMAGE) needs to be stooped and reloaded

2015-03-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196699 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 197484] fix pf 3whs ACK handling

2015-03-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=197484 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 193568] PF rdr rule with ipv6 does not work

2015-03-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193568 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 185633] [pf] scrubbing bug in transparent mode bug with bigger than MTU UDP packet

2015-03-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=185633 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 196087] pf loses states during rdr

2015-03-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196087 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 182401] [pf] pf state for some IPs reaches 4294967295 suspicously

2015-01-21 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=182401 Gleb Smirnoff gleb...@freebsd.org changed: What|Removed |Added Assignee|freebsd-pf@FreeBSD.org

[Bug 183198] [pf] pf tables not loaded if only used inside anchor

2015-01-21 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=183198 --- Comment #6 from kri...@cflinux.hu --- The OpenBSD team has just approved this patch. -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-pf@freebsd.org

[Bug 183198] [pf] pf tables not loaded if only used inside anchor

2014-12-29 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=183198 --- Comment #4 from kri...@cflinux.hu --- Created attachment 151074 -- https://bugs.freebsd.org/bugzilla/attachment.cgi?id=151074action=edit pf table reference count increment for root tables This places a rule reference count on root

[Bug 183198] [pf] pf tables not loaded if only used inside anchor

2014-12-29 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=183198 kri...@cflinux.hu changed: What|Removed |Added Attachment #151030|0 |1 is obsolete|

[Bug 183198] [pf] pf tables not loaded if only used inside anchor

2014-12-27 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=183198 kri...@cflinux.hu changed: What|Removed |Added CC||kri...@cflinux.hu --- Comment

[Bug 163208] [pf] PF state key linking mismatch

2014-12-24 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=163208 Alexey Pereklad my...@at-hacker.in changed: What|Removed |Added CC|

[FreeBSD Bugzilla] Commit Needs MFC

2014-11-24 Thread bugzilla-noreply
Hi, You have a bug in the Needs MFC state which has not been touched in 7 or more days. This email serves as a reminder that you may want to MFC this bug or marked it as completed. In the event you have a longer MFC timeout you may update this bug with a comment and I won't remind you again

[Bug 182401] [pf] pf state for some IPs reaches 4294967295 suspicously

2014-11-20 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=182401 --- Comment #7 from johans jo...@300.nl --- Created attachment 149638 -- https://bugs.freebsd.org/bugzilla/attachment.cgi?id=149638action=edit patch-races-pf-state-tracking.patch glebius@ was kind enough to send us his work in progress

[Bug 182401] [pf] pf state for some IPs reaches 4294967295 suspicously

2014-11-18 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=182401 Johan Schuijt jo...@300.nl changed: What|Removed |Added CC||jo...@300.nl ---

[Bug 182401] [pf] pf state for some IPs reaches 4294967295 suspicously

2014-11-18 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=182401 --- Comment #6 from johans jo...@300.nl --- The possible commit mentioned earlier in this thread only fixes counters for rules. When I take a look at 'sys/net/pfvar.h' in releng/10.1 the struct 'pf_src_node' is still a u_int32_t for states

[Bug 179392] [pf] [ip6] Incorrect TCP checksums in rdr return packets

2014-11-14 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=179392 Gleb Smirnoff gleb...@freebsd.org changed: What|Removed |Added CC|

[Bug 172648] [pf] [ip6]: 'scrub reassemble tcp' breaks IPv6 packet checksum on SYN ACK

2014-11-14 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=172648 Gleb Smirnoff gleb...@freebsd.org changed: What|Removed |Added CC|

[Bug 179392] [pf] [ip6] Incorrect TCP checksums in rdr return packets

2014-11-13 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=179392 Kurt Jaeger p...@freebsd.org changed: What|Removed |Added CC||p...@freebsd.org

[Bug 172648] [pf] [ip6]: 'scrub reassemble tcp' breaks IPv6 packet checksum on SYN ACK

2014-11-10 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=172648 --- Comment #4 from Kurt Jaeger p...@freebsd.org --- (In reply to Kurt Jaeger from comment #3) See https://lists.freebsd.org/pipermail/freebsd-net/2014-November/040319.html Patch from Ermal Luçi inline in:

[Bug 172648] [pf] [ip6]: 'scrub reassemble tcp' breaks IPv6 packet checksum on SYN ACK

2014-11-05 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=172648 Kurt Jaeger p...@freebsd.org changed: What|Removed |Added CC||p...@freebsd.org

[Bug 182401] [pf] pf state for some IPs reaches 4294967295 suspicously

2014-10-31 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=182401 o...@labristeknoloji.com changed: What|Removed |Added Version|10.0-RELEASE|10.1-RC2 -- You are

[Bug 182401] [pf] pf state for some IPs reaches 4294967295 suspicously

2014-10-31 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=182401 --- Comment #4 from o...@labristeknoloji.com --- We have tried with 10.1 rc3 . The problem exist also in this version. 172.16.2.2 - 0.0.0.0 ( states 4294967295, connections 0, rate 0.0/3s ) -- You are receiving this mail because: You

[Bug 182401] [pf] pf state for some IPs reaches 4294967295 suspicously

2014-10-30 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=182401 jason.unovi...@gmail.com changed: What|Removed |Added CC||jason.unovi...@gmail.com

[Bug 182401] [pf] pf state for some IPs reaches 4294967295 suspicously

2014-10-29 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=182401 o...@labristeknoloji.com changed: What|Removed |Added Version|unspecified |10.0-RELEASE -- You

[Bug 182401] [pf] pf state for some IPs reaches 4294967295 suspicously

2014-10-29 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=182401 --- Comment #2 from o...@labristeknoloji.com --- This bug continues on 10 release. Sample rule creating such entries: @60 pass in log (all) quick on ix0 proto tcp from any to protectzone_table:4 port = https flags S/SA keep state

[Bug 124933] [pf] [ip6] pf does not support (drops) IPv6 fragmented packets

2014-10-21 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=124933 doktorno...@mailinator.com changed: What|Removed |Added CC|

[Bug 179392] [pf] [ip6] Incorrect TCP checksums in rdr return packets

2014-10-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=179392 vava...@gmail.com changed: What|Removed |Added CC||vava...@gmail.com --- Comment

[Bug 168190] [pf] panic when using pf and route-to (maybe: bad fragment handling?)

2014-09-18 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=168190 Tomasz w...@op.pl changed: What|Removed |Added CC||w...@op.pl --- Comment #24

[Bug 177808] [pf] [patch] route-to rule forwarding traffic inspite of state limit

2014-09-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=177808 --- Comment #3 from commit-h...@freebsd.org --- A commit references this bug: Author: glebius Date: Mon Sep 1 13:00:46 UTC 2014 New revision: 270928 URL: http://svnweb.freebsd.org/changeset/base/270928 Log: Explicitly free packet on

[Bug 177808] [pf] [patch] route-to rule forwarding traffic inspite of state limit

2014-09-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=177808 Gleb Smirnoff gleb...@freebsd.org changed: What|Removed |Added Status|In Discussion |Needs MFC

[Bug 127920] [pf] ipv6 and synproxy don't play well together

2014-08-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=127920 --- Comment #6 from veg...@tuxpowered.net --- pf_test6() is missing a check for M_SKIP_FIREWALL flags on mbuf, this flag is present on packets sent via pf_send_tcp(), like SYN+ACK reply to client. Following patch fixes the issue (line

[Bug 176268] [pf] [patch] synproxy not working with route-to

2014-08-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=176268 veg...@tuxpowered.net changed: What|Removed |Added CC||veg...@tuxpowered.net ---

[Bug 191916] pflogd(8) eats cpu and hangs with net.bpf.zerocopy_enable=0

2014-07-20 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=191916 Mark Linimon lini...@freebsd.org changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org

[Bug 188063] [pf] [hang] deadlock between syncache(4) and pf(4)

2014-07-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=188063 Bryan Drewery bdrew...@freebsd.org changed: What|Removed |Added CC|

[Bug 124933] [pf] [ip6] pf does not support (drops) IPv6 fragmented packets

2014-06-16 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=124933 xiste...@0x58.com changed: What|Removed |Added CC||xiste...@0x58.com --- Comment

<    4   5   6   7   8   9