Re: 5.3 IPFW bug

2004-12-16 Thread Andre Oppermann
Dmitry A. Bondareff wrote:
Yes! Rights! The server freezes! No core dumped!!
And I connected by console, not by network.
Please send me your full ruleset without any changes in private email.
--
Andre

Dmitry.
- Original Message - 
From: Maxim Konovalov [EMAIL PROTECTED]
To: Dmitry A. Bondareff [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Wednesday, December 15, 2004 6:42 PM
Subject: Re: 5.3 IPFW bug


On Wed, 15 Dec 2004, 17:00+0500, Dmitry A. Bondareff wrote:

Hello hackers!
Today I upgraded my 5.2.1-p11 box up to 5.3-p2.
My firewall rules includes like this:
...
/sbin/ipfw add tee 1 ip from 1.2.3.4 to 4.3.2.1
...
On 5.2.1-FreeBSD it's works fine.
But FreeBSD 5.3 halted each time!!!
It's not clear what do you mean by halted here?  Does the server
freeze of what?  If it continues the rule processing this is not a
bug, see Andre's explanation.  If the server freezes - this is a bug
and we need a kernel backtrace and/or the kernel core dump.  Or clear
how-to-repeat receipt.

After changed tee 1 to allow  now works all fine.
Is this bug ??
--
Maxim Konovalov

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


5.3 IPFW bug

2004-12-15 Thread Dmitry A. Bondareff
Hello hackers!

Today I upgraded my 5.2.1-p11 box up to 5.3-p2.
My firewall rules includes like this:
...
/sbin/ipfw add tee 1 ip from 1.2.3.4 to 4.3.2.1
...
On 5.2.1-FreeBSD it's works fine.
But FreeBSD 5.3 halted each time!!!

After changed tee 1 to allow  now works all fine.

Is this bug ??

Regards,
Dmitry.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 5.3 IPFW bug

2004-12-15 Thread Andre Oppermann
Dmitry A. Bondareff wrote:
Hello hackers!
Today I upgraded my 5.2.1-p11 box up to 5.3-p2.
My firewall rules includes like this:
...
/sbin/ipfw add tee 1 ip from 1.2.3.4 to 4.3.2.1
...
On 5.2.1-FreeBSD it's works fine.
But FreeBSD 5.3 halted each time!!!
After changed tee 1 to allow  now works all fine.
Is this bug ??
No.  It was a bug before.  'tee' now behaves as it should and
your packet gets copied and delivered to the divert socket and
it continues with the next rule.  Prior to 5.3 it was terminating
the rule processing and accepting the packet the moment the 'tee'
action was hit.
--
Andre
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 5.3 IPFW bug

2004-12-15 Thread Maxim Konovalov
On Wed, 15 Dec 2004, 17:00+0500, Dmitry A. Bondareff wrote:

 Hello hackers!

 Today I upgraded my 5.2.1-p11 box up to 5.3-p2.
 My firewall rules includes like this:
 ...
 /sbin/ipfw add tee 1 ip from 1.2.3.4 to 4.3.2.1
 ...
 On 5.2.1-FreeBSD it's works fine.
 But FreeBSD 5.3 halted each time!!!

It's not clear what do you mean by halted here?  Does the server
freeze of what?  If it continues the rule processing this is not a
bug, see Andre's explanation.  If the server freezes - this is a bug
and we need a kernel backtrace and/or the kernel core dump.  Or clear
how-to-repeat receipt.

 After changed tee 1 to allow  now works all fine.

 Is this bug ??

-- 
Maxim Konovalov
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 5.3 IPFW bug

2004-12-15 Thread Dmitry A. Bondareff
Yes! Rights! The server freezes! No core dumped!!
And I connected by console, not by network.

Dmitry.

- Original Message - 
From: Maxim Konovalov [EMAIL PROTECTED]
To: Dmitry A. Bondareff [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Wednesday, December 15, 2004 6:42 PM
Subject: Re: 5.3 IPFW bug


 On Wed, 15 Dec 2004, 17:00+0500, Dmitry A. Bondareff wrote:
 
  Hello hackers!
 
  Today I upgraded my 5.2.1-p11 box up to 5.3-p2.
  My firewall rules includes like this:
  ...
  /sbin/ipfw add tee 1 ip from 1.2.3.4 to 4.3.2.1
  ...
  On 5.2.1-FreeBSD it's works fine.
  But FreeBSD 5.3 halted each time!!!
 
 It's not clear what do you mean by halted here?  Does the server
 freeze of what?  If it continues the rule processing this is not a
 bug, see Andre's explanation.  If the server freezes - this is a bug
 and we need a kernel backtrace and/or the kernel core dump.  Or clear
 how-to-repeat receipt.
 
  After changed tee 1 to allow  now works all fine.
 
  Is this bug ??
 
 -- 
 Maxim Konovalov
 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]