On 28.01.2019 15:44, O. Hartmann wrote: > Stopping all jails, destroying all epairs and bridge0 doesn't change anything. > The problems occured when IPv6 came into play on the specific host in > question. > > Does anyone have any ideas? I'm out of ideas.
Hi, I think I found the problem, the bug was introduced in r342908. Can you try attached patch? -- WBR, Andrey V. Elsukov
Index: sys/netpfil/ipfw/ip_fw2.c
===================================================================
--- sys/netpfil/ipfw/ip_fw2.c (revision 343395)
+++ sys/netpfil/ipfw/ip_fw2.c (working copy)
@@ -1410,6 +1410,7 @@ ipfw_chk(struct ip_fw_args *args)
dst_ip.s_addr = 0; /* make sure it is initialized */
src_ip.s_addr = 0; /* make sure it is initialized */
+ src_port = dst_port = 0;
pktlen = m->m_pkthdr.len;
DYN_INFO_INIT(&dyn_info);
@@ -1688,7 +1689,6 @@ do { \
args->f_id.dst_ip = ntohl(dst_ip.s_addr);
} else {
proto = 0;
- src_port = dst_port = 0;
dst_ip.s_addr = src_ip.s_addr = 0;
args->f_id.addr_type = 1; /* XXX */
signature.asc
Description: OpenPGP digital signature
