[Bug 175267] [pf] [tap] pf + tap keep state problem

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=175267 Mark Linimon changed: What|Removed |Added Assignee|freebsd-...@freebsd.org |freebsd-pf@FreeBSD.org -- You are

[Bug 192426] [bpf] [panic] [patch]: Kernel panic when using BPF

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192426 Mark Linimon changed: What|Removed |Added Keywords||patch Assignee|freebsd-..

[Bug 16644] [bpf] [patch] Bad comparison expression in bpf_filter.c

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=16644 Mark Linimon changed: What|Removed |Added Keywords||patch Assignee|freebsd-b..

[Bug 145727] [pf.conf] pf rules not applied on boot if using inet6 :network modifier

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=145727 Mark Linimon changed: What|Removed |Added CC||freebsd-pf@FreeBSD.org As

[Bug 186251] authpf(8) always fails with "error removing stale rulesets" on 10.0-RELEASE

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=186251 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org|freebsd-pf@FreeBSD.org -- You are

[Bug 192677] pfctl iotcl buffer to small for bigger spamd blacklists

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192677 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org|freebsd-pf@FreeBSD.org -- You are

[Bug 192774] PF_KEY ACQUIRE missing port and protocol info

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192774 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org|freebsd-pf@FreeBSD.org Ke

[Bug 197511] BPF --> Interactions with Dhclient, Tcpdump, and Network Connections (Ping)

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=197511 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org|freebsd-pf@FreeBSD.org -- You are

[Bug 196314] pf nested inline anchors does not work

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196314 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org|freebsd-pf@FreeBSD.org Ke

[Bug 197566] Wrong comparsion in pflogd

2015-03-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=197566 Mark Linimon changed: What|Removed |Added Keywords||patch Assignee|freebsd-b.

Re: [PATCH] Fix panic with pf fastroute

2015-03-11 Thread Kristof Provost
On 2015-03-11 13:50:50 (+0100), Kristof Provost wrote: > On 2015-03-11 12:50:23 (+0300), Andrey V. Elsukov wrote: > > It looks like there are some code paths that do a copy of original mbuf. > > Are you sure this doesn't introduce mbuf leak? > > > I'll check again in the morning when I'm less dr

Re: [PATCH] Fix panic with pf fastroute

2015-03-11 Thread Kristof Provost
On 2015-03-11 12:50:23 (+0300), Andrey V. Elsukov wrote: > It looks like there are some code paths that do a copy of original mbuf. > Are you sure this doesn't introduce mbuf leak? > I'll check again in the morning when I'm less drunk and jet lagged, but I'm pretty confident this is correct. Ther

Re: [PATCH] Fix panic with pf fastroute

2015-03-11 Thread Andrey V. Elsukov
On 11.03.2015 11:39, Kristof Provost wrote: > The pf code in pf_route6() neglected to set the mbuf pointer to NULL > after the call to ip6_output(). As a result we end up trying to continue > processing on an mbuf which has already been freed. > --- > sys/netpfil/pf/pf.c | 1 + > 1 file changed, 1

Re: [PATCH] Fix panic with pf fastroute

2015-03-11 Thread Kristof Provost
Set up a pf ruleset with at least the following rule > pass out fastroute inet6 proto icmp6 all icmp6-type echoreq Send out an icmp6 echo request (i.e. ping6 2001:db8::1). This causes a panic in ip6_output() when comparing the old and new destination addresses (IN6_ARE_ADDR_EQUAL()) just after the