Re: PF routing broken

["Simon 'corecode' Schubert" <corecode@xxxxxxxxxxxx>]

Matthew Dillon wrote:
> :I don't have time to fix this at the moment, but using e.g. dup-to in a
> :PF ruleset is hitting the serialiser assertion directly.
>     Post a kernel backtrace.  It should be easy to fix (but it may not make
>     it into the release since I am rolling the ISO tonight).

I had the pleasure to experience this with ipf+if_bridge today.  Of 
course the ruleset wasn't what i had intended, but yet this works with 
oldbridge...

cheers
  simon


#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:527
#1  0xc01970f2 in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:360
#2  0xc01975b6 in panic (fmt=0xc02d14bc "assertion: s->last_td != 
curthread in %s")
    at /usr/src/sys/kern/kern_shutdown.c:673
#3  0xc019ecdb in lwkt_serialize_enter (s=0xc507b95c) at 
/usr/src/sys/kern/lwkt_serialize.c:77
#4  0xc01f08ef in bridge_output_serialized (ifp=0xc507b540, 
m=0xc5754b00, sa=0x0, rt=0x0)
    at /usr/src/sys/net/bridge/if_bridge.c:1226
#5  0xc01f6bf0 in ether_output (ifp=0xc507b540, m=0xc5754b00, 
dst=0xc0a0a450, rt=0xc5063190)
    at /usr/src/sys/net/if_ethersubr.c:316
#6  0xc013d7f8 in ipfr_fastroute (m0=0xc5754b00, mpp=0xc50a5b84, 
fin=0xc50a5ae4, fdp=0xc50034a4)
    at /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:1847
#7  0xc0139f43 in fr_check (ip=0xc5779820, hlen=20, ifp=0xc507b2c0, 
out=0, mp=0xc50a5b84)
    at /usr/src/sys/contrib/ipfilter/netinet/fil.c:1379
#8  0xc013b718 in fr_check_wrapper (arg=0x0, mp=0x0, ifp=0x0, dir=1)
    at /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:321
#9  0xc01f7dc1 in pfil_run_hooks (ph=0xc0323180, mp=0xc50a5c30, 
ifp=0xc507b2c0, dir=1)
    at /usr/src/sys/net/pfil.c:67
#10 0xc01f1e48 in bridge_pfil (mp=0xc50a5c30, bifp=0xc507b7c0, 
ifp=0xc507b2c0, dir=1)
    at /usr/src/sys/net/bridge/if_bridge.c:2213
#11 0xc01f0e81 in bridge_forward (sc=0xc507b7c0, m=0xc5754b00)
    at /usr/src/sys/net/bridge/if_bridge.c:1443
#12 0xc01f1367 in bridge_input (ifp=0xc507b2c0, m=0xc5754b00)
    at /usr/src/sys/net/bridge/if_bridge.c:1647
#13 0xc01f7435 in ether_input (ifp=0xc507b2c0, eh=0xc5779812, m=0xc5754b00)
    at /usr/src/sys/net/if_ethersubr.c:618
#14 0xc01f7340 in ether_input_internal (ifp=0x0, m=0x0) at 
/usr/src/sys/net/if_ethersubr.c:552
#15 0xc01651da in fxp_intr_body (sc=0xc507b2c0, statack=64 '@', count=-1)
    at /usr/src/sys/dev/netif/fxp/if_fxp.c:1359
#16 0xc0165058 in fxp_intr (xsc=0xc507b2c0) at 
/usr/src/sys/dev/netif/fxp/if_fxp.c:1231
#17 0xc019ee51 in lwkt_serialize_handler_call (s=0xc507b45c, 
func=0xc0165002 <fxp_intr>, arg=0x0,
    frame=0x0) at /usr/src/sys/kern/lwkt_serialize.c:145
#18 0xc017c044 in ithread_handler (arg=0xc) at 
/usr/src/sys/kern/kern_intr.c:755
#19 0xc019d90b in lwkt_create (func=0, arg=0x0, tdp=0xc0310764, 
template=0x0, tdflags=---Can't read
userspace from dump, or kernel process---



--
Serve - BSD     +++  RENT this banner advert  +++    ASCII Ribbon   /"\
Work - Mac      +++  space for low €€€ NOW!1  +++      Campaign     \ /
Party Enjoy Relax   |   http://dragonflybsd.org      Against  HTML   \
Dude 2c 2 the max   !   http://golden-apple.biz       Mail + News   / \