Kernel panic with pf

[Max Laier]

On Sunday 24 October 2004 16:47, Gilbert Cao wrote:
>   Hi everyone,
>
> I just experienced a kernel panic when I have execute
> a small program I just grab from apache2 configure script.
> I guess this program just check the TCP_NODELAY behaviour ...

<snipp>

> ---------------------------------
> ** IMPORTANT NOTE :
> When I remove the following line from my pf.conf :
> block log quick proto { tcp, udp } all user $restricted_users
>
> The kernel does not panic !

Are you running with debug.mpsafenet=0? In order to use user/group rule 
modificators you have to run with debug.mpsafenet=0 as there is a problem 
with locks. This is mentioned in the BUGS section of pf.conf(5). Please tell 
me if the problem is persistent with debug.mpsafenet turned off.

Thanks.

-- 
/"\  Best regards,                      | mlaier at freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier at EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-net/attachments/20041024/1d47f496/attachment.bin