https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=208140
Bug ID: 208140
Summary: panic: page fault in pf
Product: Base System
Version: 10.2-RELEASE
Hardware: amd64
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: kern
Assignee: freebsd-bugs@FreeBSD.org
Reporter: rkonda...@ya.ru
CC: freebsd-am...@freebsd.org
CC: freebsd-am...@freebsd.org
Created attachment 168388
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=168388&action=edit
Core.txt
May be like bug #203976 but I use "scrub in all fragment reassemble"
I use kgdb
(kgdb) whatis pd
type = struct pf_pdesc
(kgdb) p pd
$3 = {lookup = {done = 0, uid = 0, gid = 0}, tot_len = 70, hdr = {
tcp = 0xfffffe00003e8638, udp = 0xfffffe00003e8638,
icmp = 0xfffffe00003e8638, icmp6 = 0xfffffe00003e8638,
any = 0xfffffe00003e8638}, nat_rule = 0x0, src = 0xfffff8024ac3c01c,
dst = 0xfffff8024ac3c020, sport = 0x0, dport = 0x0, pf_mtag = 0x0,
p_len = 0, ip_sum = 0xfffff8024ac3c01a, proto_sum = 0x0, flags = 2,
af = 2 '\002', proto = 17 '\021', tos = 0 '\0', dir = 1 '\001',
sidx = 0 '\0', didx = 1 '\001'}
(kgdb) p pd->hdr
$4 = {tcp = 0xfffffe00003e8638, udp = 0xfffffe00003e8638,
icmp = 0xfffffe00003e8638, icmp6 = 0xfffffe00003e8638,
any = 0xfffffe00003e8638}
(kgdb) p pd->hdr->udp
$5 = (struct udphdr *) 0xfffffe00003e8638
(kgdb) p *(pd->hdr->udp)
$6 = {uh_sport = 20480, uh_dport = 13568, uh_ulen = 12800, uh_sum = 0}
dst = 371862716 (188.44.42.22)
src = 1832175963 (91.201.52.109)
uh_sport = 20480 = 80
uh_dport = 13568 = 53
pf-nat for this ip:
binat on ng0 inet from 10.3.128.3 to any -> 188.44.42.22
pf-rules:
scrub in all fragment reassemble
pass in on vlan2 route-to (ng0 192.168.1.1) inet from <local> to ! <local> no
state
pass out on ng0 fastroute all flags S/SA keep state
block drop out log on ng0 from <private> to any
block drop in on ng0 all
pass in on ng0 from any to <local> flags S/SA keep state
ng0-ng1:
+ show ng0:
Name: ng0 Type: iface ID: 00000002 Num hooks: 1
Local hook Peer name Peer type Peer ID Peer hook
---------- --------- --------- ------- ---------
inet ng1 iface 00000004 inet
+ show ng1:
Name: ng1 Type: iface ID: 00000004 Num hooks: 1
Local hook Peer name Peer type Peer ID Peer hook
---------- --------- --------- ------- ---------
inet ng0 iface 00000002 inet
it is 'pipe' for do NAT for two providers
netstat -rn | grep 188.44.42.22:
188.44.42.22 ng1 UHS ng1
Local <-> ng0 <->NAT <-> ng1 <-> prov1/prov2
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"
