IPfilter
[Top] [All Lists]

Re: IPFilter 4.1.16

To: darrenr@reed.wattle.id.au
Subject: Re: IPFilter 4.1.16
From: "Schuh Andreas" <andy@greenlemon.org>
Date: Sun, 24 Dec 2006 14:28:32 +0100 (CET)
Cc: ipfilter@coombs.anu.edu.au
Delivered-to: sp-com-lists@consult.net
Delivered-to: ipfilter-list@securepoint.com
Importance: Normal
In-reply-to: <458E3A8B.8010007@reed.wattle.id.au>
References: <200612191510.kBJFAnhX015215@firewall.reed.wattle.id.au> <008e01c723b8$3a68f4a0$66fce20a@gp.inet> <e2e114e10612191521n797dececqab16e18df022be31@mail.gmail.com> <e2e114e10612191708u55e268bdoa81f82f2ebfb2065@mail.gmail.com> <458E3A8B.8010007@reed.wattle.id.au>
Sender: owner-ipfilter@coombs.anu.edu.au
User-agent: SquirrelMail/1.4.7
4.1.16 works now on FreeBSD 5.5 without crashing when using "ipnat -sl".

Thanks & merry X-Mas
Andy


On Sun, December 24, 2006 09:30, Darren Reed wrote:
Corey Johnston wrote:
> Update on IPF 4.1.16
>
> - It seems that ipnat -sl crashes the network.
>
> The system lists all the active ipnat rules and then tries to list the
> active sessions and then the network drops-out. All interfaces die,
> and even
> the console locks-up as it appears all network services are unavailable.
> Reboot appears to be the only remedy.
>
> - happens consistently
>
> I ran into this when trying to discover the source of the ipnat slows i
> mentioned earlier.
> I'll try and be more specific, but it looks like there is a fairly
> significant problem, at least on the Solaris build, with NAT.

The attached patch should fix this (it has for me.)

Darren
------
Merry Christmas
===============



<Prev in Thread] Current Thread [Next in Thread>