From tyme@pc47668.res.cmu.edu  Wed Mar  1 12:30:41 2000
Return-Path: <tyme@pc47668.res.cmu.edu>
Received: from pc47668.res.cmu.edu (PC47668.RES.CMU.EDU [128.2.149.57])
	by hub.freebsd.org (Postfix) with ESMTP id AB32437C77F
	for <FreeBSD-gnats-submit@freebsd.org>; Wed,  1 Mar 2000 12:30:38 -0800 (PST)
	(envelope-from tyme@pc47668.res.cmu.edu)
Received: (from tyme@localhost)
	by pc47668.res.cmu.edu (8.9.3/8.9.3) id PAA00350;
	Wed, 1 Mar 2000 15:30:33 -0500 (EST)
	(envelope-from tyme)
Message-Id: <200003012030.PAA00350@pc47668.res.cmu.edu>
Date: Wed, 1 Mar 2000 15:30:33 -0500 (EST)
From: jguyett@andrew.cmu.edu
Sender: tyme@pc47668.res.cmu.edu
Reply-To: jguyett@andrew.cmu.edu
To: FreeBSD-gnats-submit@freebsd.org
Subject: ipfilter
X-Send-Pr-Version: 3.2

>Number:         17109
>Category:       kern
>Synopsis:       [ipfilter] fastroute crashes for lo0 udp
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    cy
>State:          suspended
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Mar  1 12:40:00 PST 2000
>Closed-Date:    
>Last-Modified:  Wed Jul 03 05:08:17 UTC 2013
>Originator:     tyme
>Release:        FreeBSD 4.0-CURRENT i386
>Organization:
>Environment:

	FreeBSD-current cvsupped on 2/28

>Description:

IPFilter rule crashed a machine with a specific lo0 fastroute rule
In syslog:
 Mar  1 14:32:32 pc47668 /kernel: vr0: can't handle af139


>How-To-Repeat:

Insert the rule somewhere where it will be hit by a traceroute to localhost.
block in log quick on lo0 fastroute proto udp from any port != 53 to any

>Fix:

Unknown


>Release-Note:
>Audit-Trail:

From: jguyett@andrew.cmu.edu
To: FreeBSD-gnats-submit@freebsd.org
Cc:  
Subject: kern/17109: ipfilter
Date: Wed, 1 Mar 2000 15:30:33 -0500 (EST)

 >Number:         17109
 >Category:       kern
 >Synopsis:       fastroute crashes for lo0 udp
 >Confidential:   yes
 >Severity:       non-critical
 >Priority:       medium
 >Responsible:    freebsd-bugs
 >State:          open
 >Quarter:        
 >Keywords:       
 >Date-Required:
 >Class:          sw-bug
 >Submitter-Id:   current-users
 >Arrival-Date:   Wed Mar  1 12:40:00 PST 2000
 >Closed-Date:
 >Last-Modified:
 >Originator:     tyme
 >Release:        FreeBSD 4.0-CURRENT i386
 >Organization:
 >Environment:
 
 	FreeBSD-current cvsupped on 2/28
 
 >Description:
 
 IPFilter rule crashed a machine with a specific lo0 fastroute rule
 In syslog:
  Mar  1 14:32:32 pc47668 /kernel: vr0: can't handle af139
 
 
 >How-To-Repeat:
 
 Insert the rule somewhere where it will be hit by a traceroute to localhost.
 block in log quick on lo0 fastroute proto udp from any port != 53 to any
 
 >Fix:
 
 Unknown
 
 
 >Release-Note:
 >Audit-Trail:
 >Unformatted:
 
 
 To Unsubscribe: send mail to majordomo@FreeBSD.org
 with "unsubscribe freebsd-bugs" in the body of the message
 
 

From: jguyett@andrew.cmu.edu
To: FreeBSD-gnats-submit@freebsd.org
Cc:  
Subject: kern/17109: ipfilter
Date: Wed, 1 Mar 2000 15:30:33 -0500 (EST)

 >Number:         17109
 >Category:       kern
 >Synopsis:       fastroute crashes for lo0 udp
 >Confidential:   yes
 >Severity:       non-critical
 >Priority:       medium
 >Responsible:    freebsd-bugs
 >State:          open
 >Quarter:        
 >Keywords:       
 >Date-Required:
 >Class:          sw-bug
 >Submitter-Id:   current-users
 >Arrival-Date:   Wed Mar  1 12:40:00 PST 2000
 >Closed-Date:
 >Last-Modified:
 >Originator:     tyme
 >Release:        FreeBSD 4.0-CURRENT i386
 >Organization:
 >Environment:
 
 	FreeBSD-current cvsupped on 2/28
 
 >Description:
 
 IPFilter rule crashed a machine with a specific lo0 fastroute rule
 In syslog:
  Mar  1 14:32:32 pc47668 /kernel: vr0: can't handle af139
 
 
 >How-To-Repeat:
 
 Insert the rule somewhere where it will be hit by a traceroute to localhost.
 block in log quick on lo0 fastroute proto udp from any port != 53 to any
 
 >Fix:
 
 Unknown
 
 
 >Release-Note:
 >Audit-Trail:
 >Unformatted:
 
 
 To Unsubscribe: send mail to majordomo@FreeBSD.org
 with "unsubscribe freebsd-bugs" in the body of the message
 
 
Responsible-Changed-From-To: freebsd-bugs->darrenr 
Responsible-Changed-By: darrenr 
Responsible-Changed-When: Sun Sep 17 01:42:20 PDT 2000 
Responsible-Changed-Why:  
darrenr is responsible for ipfilter 

http://www.freebsd.org/cgi/query-pr.cgi?pr=17109 
State-Changed-From-To: open->suspended 
State-Changed-By: darrenr 
State-Changed-When: Thu May 9 07:57:45 PDT 2002 
State-Changed-Why:  
it's not clear what the solution to this should be...packet goes around in 
circles, forever, because the TTL isn't dropping (fastroute) and always comes 
back to match the same rule...punt on it for now. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=17109 

From: Darren Reed <darrenr@reed.wattle.id.au>
To: FreeBSD-gnats-submit@freebsd.org, jguyett@andrew.cmu.edu
Cc:  
Subject: kern/17109: ipfilter fastroute on lo0 hangs machine
Date: Fri, 10 May 2002 00:55:56 +1000

 The problem rule is:
 block in log quick on lo0 fastroute proto udp from any port != 53 to any
 
 The problem action is:
 traceroute localhost
 
 This no longer causes a crash but causes an infinite loop.  Why ?
 
 "fastroute" re-routes the packet back onto lo0.
 
 When fr_check returns, ipintr() sees another packet on the lo0 queue and
 calls ip_input() for it.  So we process the same packet *again* (it gets
 fastroute'd to lo0...)
 
 Darren
State-Changed-From-To: suspended->suspended 
State-Changed-By: linimon 
State-Changed-When: Wed Jul 3 00:50:32 UTC 2013 
State-Changed-Why:  
commit bit has been taken in for safekeeping. 


Responsible-Changed-From-To: darrenr->freebsd-net 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Wed Jul 3 00:50:32 UTC 2013 
Responsible-Changed-Why:  

http://www.freebsd.org/cgi/query-pr.cgi?pr=17109 
Responsible-Changed-From-To: freebsd-net->cy 
Responsible-Changed-By: cy 
Responsible-Changed-When: Wed Jul 3 05:07:39 UTC 2013 
Responsible-Changed-Why:  
Mine. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=17109 
>Unformatted:
