Current problem reports assigned to freebsd-ipfw@FreeBSD.org

2011-06-20 Thread FreeBSD bugmaster
Note: to view an individual PR, use:
  http://www.freebsd.org/cgi/query-pr.cgi?pr=(number).

The following is a listing of current problems submitted by FreeBSD users.
These represent problem reports covering all versions including
experimental development code and obsolete releases.


S Tracker  Resp.  Description

o kern/157957  ipfw   [libalias][patch] alias_ftp does not alias data sessio
p kern/157867  ipfw   [patch][ipfw] natd globalport support for ipfw nat
o kern/157796  ipfw   [ipfw] IPFW in-kernel NAT nat loopback / Default Route
o kern/157689  ipfw   [ipfw] ipfw nat config does not accept nonexistent int
p kern/157379  ipfw   [ipfw] mtr does not work if I use ipfw nat
o kern/157239  ipfw   [ipfw] [dummynet] ipfw + dummynet corrupts ipv6 packet
o kern/156770  ipfw   [ipfw] [dummynet] [patch]: performance improvement and
o bin/156653   ipfw   ipfw(8) reports missing file as parameter problem
o kern/155927  ipfw   [ipfw] ipfw stops to check packets for compliance with
o bin/153252   ipfw   [ipfw][patch] ipfw lockdown system in subsequent call 
o kern/153161  ipfw   IPFIREWALL does not allow specify rules with ICMP code
o kern/152113  ipfw   [ipfw] page fault on 8.1-RELEASE caused by certain amo
p kern/150798  ipfw   [ipfw] ipfw2 fwd rule matches packets but does not do 
o kern/148827  ipfw   [ipfw] divert broken with in-kernel ipfw
o kern/148689  ipfw   [ipfw] antispoof wrongly triggers on link local IPv6 a
o kern/148430  ipfw   [ipfw] IPFW schedule delete broken.
f kern/148157  ipfw   [ipfw] IPFW in kernel nat BUG found in FreeBSD 8.1-PRE
o kern/148091  ipfw   [ipfw] ipfw ipv6 handling broken.
o kern/147720  ipfw   [ipfw] ipfw dynamic rules and fwd
o kern/145305  ipfw   [ipfw] ipfw problems, panics, data corruption, ipv6 so
o kern/144269  ipfw   [ipfw] problem with ipfw tables
o kern/144187  ipfw   [ipfw] deadlock using multiple ipfw nat and multiple l
o kern/143973  ipfw   [ipfw] [panic] ipfw forward option causes kernel reboo
o kern/143621  ipfw   [ipfw] [dummynet] [patch] dummynet and vnet use result
o kern/143474  ipfw   [ipfw] ipfw table contains the same address
o kern/137346  ipfw   [ipfw] ipfw nat redirect_proto is broken
o kern/137232  ipfw   [ipfw] parser troubles
p kern/136695  ipfw   [ipfw] [patch] fwd reached after skipto in dynamic rul
o kern/135476  ipfw   [ipfw] IPFW table breaks after adding a large number o
p bin/134975   ipfw   [patch] ipfw(8) can't work with set in rule file.
o kern/131817  ipfw   [ipfw] blocks layer2 packets that should not be blocke
o kern/131558  ipfw   [ipfw] Inconsistent "via" ipfw behavior
f bin/130132   ipfw   [patch] ipfw(8): no way to get mask from ipfw pipe sho
o kern/129103  ipfw   [ipfw] IPFW check state does not work =(
p kern/129093  ipfw   [ipfw] ipfw nat must not drop packets
f kern/129036  ipfw   [ipfw] 'ipfw fwd' does not change outgoing interface n
o kern/128260  ipfw   [ipfw] [patch] ipfw_divert damages IPv6 packets
o kern/127230  ipfw   [ipfw] [patch] Feature request to add UID and/or GID l
o kern/127209  ipfw   [ipfw] IPFW table become corrupted after many changes
p bin/125370   ipfw   [ipfw] [patch] increase a line buffer limit
o conf/123119  ipfw   [patch] rc script for ipfw does not handle IPv6
o kern/122963  ipfw   [ipfw] tcpdump does not show packets redirected by 'ip
p kern/122109  ipfw   [ipfw] ipfw nat traceroute problem
s kern/121807  ipfw   [request] TCP and UDP port_table in ipfw
o kern/121382  ipfw   [dummynet] 6.3-RELEASE-p1 page fault in dummynet (corr
o kern/121122  ipfw   [ipfw] [patch] add support to ToS IP PRECEDENCE fields
o kern/118993  ipfw   [ipfw] page fault - probably it's a locking problem
o bin/117214   ipfw   ipfw(8) fwd with IPv6 treats input as IPv4
o kern/116009  ipfw   [ipfw] [patch] Ignore errors when loading ruleset from
o docs/113803  ipfw   [patch] ipfw(8) - don't get bitten by the fwd rule
f kern/112561  ipfw   [ipfw] ipfw fwd does not work with some TCP packets
o bin/104921   ipfw   [patch] ipfw(8) sometimes treats ipv6 input as ipv4 (a
o kern/104682  ipfw   [ipfw] [patch] Some minor language consistency fixes a
o kern/103454  ipfw   [ipfw] [patch] [request] add a facility to modify DF b
o kern/103328  ipfw   [ipfw] [request] sugestions about ipfw table
o kern/102471  ipfw   [ipfw] [patch] add tos and dscp support
f kern/98831   ipfw   [ipfw] ipfw has UDP hickups
o kern/97951   ipfw   [ipfw] [patch] ipfw does not tie interface details to 
o kern/95084   ipfw   [ipfw] [regression] [patch] IPFW2 ignores "recv/xmit/v
f kern/93300   ipfw   [ipfw] ipfw pipe lost packets
o kern/91847   ipfw   [ipfw] ipfw with vlanX as the device
o kern/86957   ipfw   [ipfw] [patch] ipfw mac loggin

Re: bin/125370: commit references a PR

2011-06-20 Thread dfilter service
The following reply was made to PR bin/125370; it has been noted by GNATS.

From: dfil...@freebsd.org (dfilter service)
To: bug-follo...@freebsd.org
Cc:  
Subject: Re: bin/125370: commit references a PR
Date: Mon, 20 Jun 2011 13:46:58 + (UTC)

 Author: ae
 Date: Mon Jun 20 13:46:38 2011
 New Revision: 223336
 URL: http://svn.freebsd.org/changeset/base/223336
 
 Log:
   MFC r222744:
 Increase buffer size for the command line.
   
 PR:bin/125370
 
 Modified:
   stable/8/sbin/ipfw/main.c
 Directory Properties:
   stable/8/sbin/ipfw/   (props changed)
 
 Modified: stable/8/sbin/ipfw/main.c
 ==
 --- stable/8/sbin/ipfw/main.c  Mon Jun 20 12:40:21 2011(r223335)
 +++ stable/8/sbin/ipfw/main.c  Mon Jun 20 13:46:38 2011(r223336)
 @@ -444,7 +444,7 @@ static void
  ipfw_readfile(int ac, char *av[])
  {
  #define MAX_ARGS  32
 -  charbuf[BUFSIZ];
 +  char buf[4096];
char *progname = av[0]; /* original program name */
const char *cmd = NULL; /* preprocessor name, if any */
const char *filename = av[ac-1]; /* file to read */
 @@ -552,7 +552,7 @@ ipfw_readfile(int ac, char *av[])
}
}
  
 -  while (fgets(buf, BUFSIZ, f)) { /* read commands */
 +  while (fgets(buf, sizeof(buf), f)) {/* read commands */
char linename[20];
char *args[2];
  
 ___
 svn-src-...@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/svn-src-all
 To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"
 
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"


Re: bin/125370: commit references a PR

2011-06-20 Thread dfilter service
The following reply was made to PR bin/125370; it has been noted by GNATS.

From: dfil...@freebsd.org (dfilter service)
To: bug-follo...@freebsd.org
Cc:  
Subject: Re: bin/125370: commit references a PR
Date: Mon, 20 Jun 2011 13:47:18 + (UTC)

 Author: ae
 Date: Mon Jun 20 13:46:57 2011
 New Revision: 223337
 URL: http://svn.freebsd.org/changeset/base/223337
 
 Log:
   MFC r222744:
 Increase buffer size for the command line.
   
 PR:bin/125370
 
 Modified:
   stable/7/sbin/ipfw/main.c
 Directory Properties:
   stable/7/sbin/ipfw/   (props changed)
 
 Modified: stable/7/sbin/ipfw/main.c
 ==
 --- stable/7/sbin/ipfw/main.c  Mon Jun 20 13:46:38 2011(r223336)
 +++ stable/7/sbin/ipfw/main.c  Mon Jun 20 13:46:57 2011(r223337)
 @@ -382,7 +382,7 @@ static void
  ipfw_readfile(int ac, char *av[])
  {
  #define MAX_ARGS  32
 -  charbuf[BUFSIZ];
 +  char buf[4096];
char *progname = av[0]; /* original program name */
const char *cmd = NULL; /* preprocessor name, if any */
const char *filename = av[ac-1]; /* file to read */
 @@ -490,7 +490,7 @@ ipfw_readfile(int ac, char *av[])
}
}
  
 -  while (fgets(buf, BUFSIZ, f)) { /* read commands */
 +  while (fgets(buf, sizeof(buf), f)) {/* read commands */
char linename[20];
char *args[2];
  
 ___
 svn-src-...@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/svn-src-all
 To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"
 
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"


Re: bin/125370: [ipfw] [patch] increase a line buffer limit

2011-06-20 Thread ae
Synopsis: [ipfw] [patch] increase a line buffer limit

State-Changed-From-To: patched->closed
State-Changed-By: ae
State-Changed-When: Mon Jun 20 13:54:23 UTC 2011
State-Changed-Why: 
Merged to stable/8 and stable/7. Thanks!

http://www.freebsd.org/cgi/query-pr.cgi?pr=125370
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"


Re: bin/134975: [patch] ipfw(8) can't work with set in rule file.

2011-06-20 Thread ae
Synopsis: [patch] ipfw(8) can't work with set in rule file.

State-Changed-From-To: patched->closed
State-Changed-By: ae
State-Changed-When: Mon Jun 20 13:55:21 UTC 2011
State-Changed-Why: 
Merged to stable/8 and stable/7. Thanks!

http://www.freebsd.org/cgi/query-pr.cgi?pr=134975
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"


Re: bin/134975: commit references a PR

2011-06-20 Thread dfilter service
The following reply was made to PR bin/134975; it has been noted by GNATS.

From: dfil...@freebsd.org (dfilter service)
To: bug-follo...@freebsd.org
Cc:  
Subject: Re: bin/134975: commit references a PR
Date: Mon, 20 Jun 2011 13:52:14 + (UTC)

 Author: ae
 Date: Mon Jun 20 13:51:53 2011
 New Revision: 223338
 URL: http://svn.freebsd.org/changeset/base/223338
 
 Log:
   MFC r222745:
 Initialize co.use_set variable before parsing each new rule.
   
 PR:bin/134975
 
 Modified:
   stable/8/sbin/ipfw/main.c
 Directory Properties:
   stable/8/sbin/ipfw/   (props changed)
 
 Modified: stable/8/sbin/ipfw/main.c
 ==
 --- stable/8/sbin/ipfw/main.c  Mon Jun 20 13:46:57 2011(r223337)
 +++ stable/8/sbin/ipfw/main.c  Mon Jun 20 13:51:53 2011(r223338)
 @@ -356,6 +356,7 @@ ipfw_main(int oldac, char **oldav)
 */
co.do_nat = 0;
co.do_pipe = 0;
 +  co.use_set = 0;
if (!strncmp(*av, "nat", strlen(*av)))
co.do_nat = 1;
else if (!strncmp(*av, "pipe", strlen(*av)))
 ___
 svn-src-...@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/svn-src-all
 To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"
 
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"


Re: bin/134975: commit references a PR

2011-06-20 Thread dfilter service
The following reply was made to PR bin/134975; it has been noted by GNATS.

From: dfil...@freebsd.org (dfilter service)
To: bug-follo...@freebsd.org
Cc:  
Subject: Re: bin/134975: commit references a PR
Date: Mon, 20 Jun 2011 13:52:35 + (UTC)

 Author: ae
 Date: Mon Jun 20 13:52:14 2011
 New Revision: 223339
 URL: http://svn.freebsd.org/changeset/base/223339
 
 Log:
   MFC r222745:
 Initialize co.use_set variable before parsing each new rule.
   
 PR:bin/134975
 
 Modified:
   stable/7/sbin/ipfw/main.c
 Directory Properties:
   stable/7/sbin/ipfw/   (props changed)
 
 Modified: stable/7/sbin/ipfw/main.c
 ==
 --- stable/7/sbin/ipfw/main.c  Mon Jun 20 13:51:53 2011(r223338)
 +++ stable/7/sbin/ipfw/main.c  Mon Jun 20 13:52:14 2011(r223339)
 @@ -298,6 +298,7 @@ ipfw_main(int oldac, char **oldav)
 */
co.do_nat = 0;
co.do_pipe = 0;
 +  co.use_set = 0;
if (!strncmp(*av, "nat", strlen(*av)))
co.do_nat = 1;
else if (!strncmp(*av, "pipe", strlen(*av)))
 ___
 svn-src-...@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/svn-src-all
 To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"
 
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"


Re: kern/157239: commit references a PR

2011-06-20 Thread dfilter service
The following reply was made to PR kern/157239; it has been noted by GNATS.

From: dfil...@freebsd.org (dfilter service)
To: bug-follo...@freebsd.org
Cc:  
Subject: Re: kern/157239: commit references a PR
Date: Tue, 21 Jun 2011 06:06:56 + (UTC)

 Author: ae
 Date: Tue Jun 21 06:06:47 2011
 New Revision: 223358
 URL: http://svn.freebsd.org/changeset/base/223358
 
 Log:
   Do not use SET_HOST_IPLEN() macro for IPv6 packets.
   
   PR:  kern/157239
   MFC after:   2 weeks
 
 Modified:
   head/sys/netinet/ipfw/ip_dn_io.c
   head/sys/netinet/ipfw/ip_fw_pfil.c
 
 Modified: head/sys/netinet/ipfw/ip_dn_io.c
 ==
 --- head/sys/netinet/ipfw/ip_dn_io.c   Tue Jun 21 05:27:49 2011
(r223357)
 +++ head/sys/netinet/ipfw/ip_dn_io.c   Tue Jun 21 06:06:47 2011
(r223358)
 @@ -668,7 +668,6 @@ dummynet_send(struct mbuf *m)
break;
  
case DIR_OUT | PROTO_IPV6:
 -  SET_HOST_IPLEN(mtod(m, struct ip *));
ip6_output(m, NULL, NULL, IPV6_FORWARDING, NULL, NULL, 
NULL);
break;
  #endif
 
 Modified: head/sys/netinet/ipfw/ip_fw_pfil.c
 ==
 --- head/sys/netinet/ipfw/ip_fw_pfil.c Tue Jun 21 05:27:49 2011
(r223357)
 +++ head/sys/netinet/ipfw/ip_fw_pfil.c Tue Jun 21 06:06:47 2011
(r223358)
 @@ -127,8 +127,9 @@ again:
args.rule = *((struct ipfw_rule_ref *)(tag+1));
m_tag_delete(*m0, tag);
if (args.rule.info & IPFW_ONEPASS) {
 -  SET_HOST_IPLEN(mtod(*m0, struct ip *));
 -  return 0;
 +  if (mtod(*m0, struct ip *)->ip_v == 4)
 +  SET_HOST_IPLEN(mtod(*m0, struct ip *));
 +  return (0);
}
}
  
 ___
 svn-src-...@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/svn-src-all
 To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"
 
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"


Re: kern/157239: [ipfw] [dummynet] ipfw + dummynet corrupts ipv6 packets

2011-06-20 Thread ae
Synopsis: [ipfw] [dummynet] ipfw + dummynet corrupts ipv6 packets

State-Changed-From-To: open->patched
State-Changed-By: ae
State-Changed-When: Tue Jun 21 06:16:26 UTC 2011
State-Changed-Why: 
Commited to head/. Thanks!

http://www.freebsd.org/cgi/query-pr.cgi?pr=157239
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"