Panic in 5.3, related to network traffic

[Arjan Van Leeuwen]

On Wed, 10 Nov 2004 17:53:28 +0100, Arjan Van Leeuwen
<avleeuwen at gmail.com> wrote:
> On Wed, 10 Nov 2004 16:42:01 +0000 (GMT), Robert Watson
> 
> 
> <rwatson at freebsd.org> wrote:
> >
> > On Wed, 10 Nov 2004, Arjan Van Leeuwen wrote:
> >
> > > > Could you send a copy of your dmesg?  Could you also use gdb on a kernel
> > > > with debug symbols or addr2line to convert the function+offsets in the
> > > > trace to file and line number in the source?  This is a NULL pointer
> > > > dereference, so presumably somewhere there is a poor assumption about
> > > > memory allocation or the like.
> > >
> > > dmesg is attached.
> >
> > Could you say a little about how ipfilter is being used on the box; would
> > it be possible to test with it disabled?
> 
> Sure. It's a very standard setup; I block all traffic by default. I
> allow all traffic on the internal network (fxp0), I allow outgoing
> traffic on the external network (rl0), and I allow only selected ports
> as incoming traffic on rl0 (ssh, http, https, some other things I
> need). I can send you the ruleset privately if you want me to.
> 
> What might be interesting is that I also have ipfw enabled (with
> default to accept), because I use dummynet for traffic shaping.
> 
> I'll compile a new kernel without ipfilter tonight, and I'll mail you
> the results as soon as possible.

I forgot that I have a small problem then... emule won't work
correctly, because I can't redirect the incoming requests to the right
ip address without ipnat. I probably can't invoke the panic at all
without ipnat. Do you have any suggestions on how to test this?

Arjan

> >
> >
> >
> > Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
> > robert at fledge.watson.org      Principal Research Scientist, McAfee Research
> >
> >
>