Cool, thanks for the feedback. I'll try the patch in the host environment.

I never really used pf inside the jails, so I don't have a test case for that 
failing.

5 feb 2014 kl. 10:16 skrev mm [via FreeBSD] 
<[email protected]>:

> Ok, I have found the cause. The patches I use fix the host pf, but pf inside 
> jails is broken. This means if we expose the pf device to the jails, calling 
> pfctl on it causes a panic. 
> 
> To make sure your jails get just the limited ruleset, I suggest you put the 
> following line to your /etc/rc.conf: 
> devfs_load_rulesets="YES" 
> 
> If you reply to this email, your message will be added to the discussion 
> below:
> http://freebsd.1045724.n5.nabble.com/VIMAGE-PF-crash-in-mbuf-destructor-tp5830537p5883192.html
> To unsubscribe from VIMAGE + PF crash in mbuf destructor, click here.
> NAML



signature.asc (506 bytes) 
<http://freebsd.1045724.n5.nabble.com/attachment/5883198/0/signature.asc>




--
View this message in context: 
http://freebsd.1045724.n5.nabble.com/VIMAGE-PF-crash-in-mbuf-destructor-tp5830537p5883198.html
Sent from the freebsd-pf mailing list archive at Nabble.com.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[email protected]"

Reply via email to