system/6564: pf not nating(does not see) icmp4 port unreachable packets from machine behind pf

classic Classic list List threaded Threaded
4 messages Options
3
Reply | Threaded
Open this post in threaded view
|

system/6564: pf not nating(does not see) icmp4 port unreachable packets from machine behind pf

3
>Number:         6564
>Category:       system
>Synopsis:       nating icmp4 port unreachable
>Confidential:   yes
>Severity:       serious
>Priority:       medium
>Responsible:    bugs
>State:          open
>Quarter:        
>Keywords:      
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   unknown
>Arrival-Date:   Thu Feb 17 02:50:01 GMT 2011
>Closed-Date:
>Last-Modified:
>Originator:    
>Release:        
>Organization:
>Environment:
        System      : OpenBSD 4.9
        Details     : OpenBSD 4.9 (GENERIC) #0: Thu Feb 17 09:10:06 MAGT 2011
                         root@gw:/usr/src/sys/arch/i386/compile/GENERIC

        Architecture: OpenBSD.i386
        Machine     : i386
>Description:
pf rules:
match in on $int inet from $int_network_machine to any tag PASS
match out on $ext inet from $int_network_machine to any tag PASS nat-to $ext static-port
match in on $ext inet from any to $ext tag PASS rdr-to $int_network_machine
pass all flags S/SA keep state tagged PASS
tcpdump on $ext:
$int_network_machine > $some_external_machine: icmp: $ext udp port $any_unresponsive_port unreachable
pf does not see this packet as icmp
>How-To-Repeat:
send any udp packet to $ext in $any_unresponsive_port on $int_network_machine
tested on 47,48,49
>Fix:


dmesg:
OpenBSD 4.9 (GENERIC) #0: Thu Feb 17 09:10:06 MAGT 2011
    root@gw:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium III ("GenuineIntel" 686-class) 1.59 GHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PSE36,MMX,FXSR,SSE
real mem  = 534278144 (509MB)
avail mem = 515407872 (491MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 09/09/02, BIOS32 rev. 0 @ 0xfb190, SMBIOS rev. 2.2 @ 0xf0800 (40 entries)
bios0: vendor Award Software International, Inc. version "6.00 PG" date 09/09/2002
apm0 at bios0: Power Management spec V1.2 (slowidle)
apm0: AC on, battery charge unknown
acpi at bios0 function 0x0 not configured
pcibios0 at bios0: rev 2.1 @ 0xf0000/0xb610
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfde90/240 (13 entries)
pcibios0: PCI Exclusive IRQs: 5 9 11
pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371SB ISA" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc0000/0xa000 0xcc000/0x4000! 0xd0000/0x1a00!
cpu0 at mainbus0: (uniprocessor)
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "Intel 82815 Host" rev 0x04
vga1 at pci0 dev 2 function 0 "Intel 82815 Video" rev 0x04
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
intagp0 at vga1
agp0 at intagp0: aperture at 0xd0000000, size 0x4000000
ppb0 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0x05
pci1 at ppb0 bus 1
pciide0 at pci1 dev 0 function 0 "ITExpress IT8212F" rev 0x13: DMA, channel 0 wired to native-PCI, channel 1 wired to native-PCI
pciide0: using irq 11 for native-PCI interrupt
wd0 at pciide0 channel 0 drive 0: <ST3200822A>
wd0: 16-sector PIO, LBA48, 190782MB, 390721968 sectors
wd1 at pciide0 channel 0 drive 1: <ST3200822A>
wd1: 16-sector PIO, LBA48, 190782MB, 390721968 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
wd1(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 5
vr0 at pci1 dev 1 function 0 "VIA VT6105 RhineIII" rev 0x8b: irq 11, address 00:21:91:8b:63:2f
ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 9: OUI 0x004063, model 0x0034
rl0 at pci1 dev 2 function 0 "Realtek 8139" rev 0x10: irq 11, address 00:e0:4c:df:1f:3d
rlphy0 at rl0 phy 0: RTL internal PHY
rl1 at pci1 dev 3 function 0 "Realtek 8139" rev 0x10: irq 9, address 00:e0:4c:af:1b:bd
rlphy1 at rl1 phy 0: RTL internal PHY
ath0 at pci1 dev 4 function 0 "Atheros AR5212" rev 0x01: irq 5
ath0: AR5213 5.6 phy 4.1 rf2112a 4.6, FCC2A*, address 00:02:6f:22:da:a3
uhci0 at pci1 dev 5 function 0 "VIA VT83C572 USB" rev 0x61: irq 11
uhci1 at pci1 dev 5 function 1 "VIA VT83C572 USB" rev 0x61: irq 11
ehci0 at pci1 dev 5 function 2 "VIA VT6202 USB" rev 0x63: irq 11
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "VIA EHCI root hub" rev 2.00/1.00 addr 1
"VIA VT6306 FireWire" rev 0x46 at pci1 dev 5 function 3 not configured
usb1 at uhci0: USB revision 1.0
uhub1 at usb1 "VIA UHCI root hub" rev 1.00/1.00 addr 1
usb2 at uhci1: USB revision 1.0
uhub2 at usb2 "VIA UHCI root hub" rev 1.00/1.00 addr 1
ichpcib0 at pci0 dev 31 function 0 "Intel 82801BA LPC" rev 0x05: 24-bit timer at 3579545Hz
pciide1 at pci0 dev 31 function 1 "Intel 82801BA IDE" rev 0x05: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility
wd2 at pciide1 channel 0 drive 0: <ST3120022A>
wd2: 16-sector PIO, LBA48, 114472MB, 234439535 sectors
wd2(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide1 channel 1 drive 1
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <_NEC, DVD_RW ND-2500A, 1.08> ATAPI 5/cdrom removable
cd0(pciide1:1:1): using PIO mode 4, Ultra-DMA mode 2
uhci2 at pci0 dev 31 function 2 "Intel 82801BA USB" rev 0x05: irq 11
auich0 at pci0 dev 31 function 5 "Intel 82801BA AC97" rev 0x05: irq 11, ICH2 AC97
ac97: codec id 0x41445348 (Analog Devices AD1881A)
ac97: codec features headphone, Analog Devices Phat Stereo
audio0 at auich0
isa0 at ichpcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
it0 at isa0 port 0x2e/2: IT8712F rev 4, EC port 0x290
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
usb3 at uhci2: USB revision 1.0
uhub3 at usb3 "Intel UHCI root hub" rev 1.00/1.00 addr 1
biomask ed45 netmask ef65 ttymask ffff
mtrr: Pentium Pro MTRR support
ubt0 at uhub2 port 2 "Broadcom CCBT2035BDGP23-2" rev 1.10/0.01 addr 2
ugen0 at uhub3 port 2 "APC Back-UPS ES 700 FW:829.D2.I USB FW:D2" rev 1.10/1.06 addr 2
vscsi0 at root
scsibus1 at vscsi0: 256 targets
softraid0 at root
root on wd2a swap on wd2b dump on wd2b

usbdevs:
Controller /dev/usb0:
addr 1: high speed, self powered, config 1, EHCI root hub(0x0000), VIA(0x1106), rev 1.00
 port 1 powered
 port 2 powered
 port 3 powered
 port 4 powered
Controller /dev/usb1:
addr 1: full speed, self powered, config 1, UHCI root hub(0x0000), VIA(0x1106), rev 1.00
 port 1 powered
 port 2 powered
Controller /dev/usb2:
addr 1: full speed, self powered, config 1, UHCI root hub(0x0000), VIA(0x1106), rev 1.00
 port 1 powered
 port 2 addr 2: full speed, power 100 mA, config 1, CCBT2035BDGP23-2(0x200a), Broadcom(0x0a5c), rev 0.01, iSerialNumber 000272C60D7A
Controller /dev/usb3:
addr 1: full speed, self powered, config 1, UHCI root hub(0x0000), Intel(0x8086), rev 1.00
 port 1 powered
 port 2 addr 2: low speed, self powered, config 1, Back-UPS ES 700 FW:829.D2.I USB FW:D2(0x0002), APC(0x051d), rev 1.06, iSerialNumber 5B0712U17025  

pcidump:
Domain /dev/pci0:
 0:0:0: Intel 82815 Host
        0x0000: Vendor ID: 8086 Product ID: 1130
        0x0004: Command: 0006 Status ID: 2090
        0x0008: Class: 06 Subclass: 00 Interface: 00 Revision: 04
        0x000c: BIST: 00 Header Type: 00 Latency Timer: 00 Cache Line Size: 00
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 180b Product ID: 0000
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 00 Line: 00 Min Gnt: 00 Max Lat: 00
        0x0088: Capability 0x09: Vendor Specific
        0x0000: 11308086 20900006 06000004 00000000
        0x0010: 00000000 00000000 00000000 00000000
        0x0020: 00000000 00000000 00000000 0000180b
        0x0030: 00000000 00000088 00000000 00000000
        0x0040: 00000000 00000000 00000000 00000000
        0x0050: 38c0034c 0000000c 31111000 00000001
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: a80800cc 00000000 00000000 00000000
        0x0080: 07cea0de 00000000 f1040009 00000000
        0x0090: fc2c0000 0000ffc3 80648064 00c48746
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 10a00000 00000000
        0x00f0: 00000000 00000000 00000000 00000308
 0:2:0: Intel 82815 Video
        0x0000: Vendor ID: 8086 Product ID: 1132
        0x0004: Command: 0007 Status ID: 02b0
        0x0008: Class: 03 Subclass: 00 Interface: 00 Revision: 04
        0x000c: BIST: 00 Header Type: 00 Latency Timer: 00 Cache Line Size: 00
        0x0010: BAR mem prefetchable 32bit addr: 0xd0000000/0x04000000
        0x0014: BAR mem 32bit addr: 0xd6000000/0x00080000
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 8086 Product ID: 1132
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 01 Line: 0b Min Gnt: 00 Max Lat: 00
        0x00dc: Capability 0x01: Power Management
        0x0000: 11328086 02b00007 03000004 00000000
        0x0010: d0000008 d6000000 00000000 00000000
        0x0020: 00000000 00000000 00000000 11328086
        0x0030: 00000000 000000dc 00000000 0000010b
        0x0040: 00000000 00000000 00000000 00000000
        0x0050: 00000000 00000000 00000000 00000000
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00220001
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 0:30:0: Intel 82801BA Hub-to-PCI
        0x0000: Vendor ID: 8086 Product ID: 244e
        0x0004: Command: 0107 Status ID: 2080
        0x0008: Class: 06 Subclass: 04 Interface: 00 Revision: 05
        0x000c: BIST: 00 Header Type: 01 Latency Timer: 00 Cache Line Size: 00
        0x0010: 00000000
        0x0014: 00000000
        0x0018: Primary Bus: 0 Secondary Bus: 1 Subordinate Bus: 1
                Secondary Latency Timer: 20
        0x001c: I/O Base: a0 I/O Limit: c0 Secondary Status: 2280
        0x0020: Memory Base: d400 Memory Limit: d5f0
        0x0024: Prefetch Memory Base: fff0 Prefetch Memory Limit: 0000
        0x0028: Prefetch Memory Base Upper 32 Bits: 00000000
        0x002c: Prefetch Memory Limit Upper 32 Bits: 00000000
        0x0030: I/O Base Upper 16 Bits: 0000 I/O Limit Upper 16 Bits: 0000
        0x0038: Expansion ROM Base Address: 00000000
        0x003c: Interrupt Pin: 00 Line: 00 Bridge Control: 0006
        0x0000: 244e8086 20800107 06040005 00010000
        0x0010: 00000000 00000000 20010100 2280c0a0
        0x0020: d5f0d400 0000fff0 00000000 00000000
        0x0030: 00000000 00000000 00000000 00060000
        0x0040: 20202800 00000000 00000000 00000000
        0x0050: 00000002 00000000 00000000 00000000
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: 00000020 00000000 00000000 00000000
        0x0080: 003f0000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00080010 00000000 00000000 00000000
        0x00b0: 00020001 00c00000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000f47 00000000
 0:31:0: Intel 82801BA LPC
        0x0000: Vendor ID: 8086 Product ID: 2440
        0x0004: Command: 000f Status ID: 0280
        0x0008: Class: 06 Subclass: 01 Interface: 00 Revision: 05
        0x000c: BIST: 00 Header Type: 80 Latency Timer: 00 Cache Line Size: 00
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 0000 Product ID: 0000
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 00 Line: 00 Min Gnt: 00 Max Lat: 00
        0x0000: 24408086 0280000f 06010005 00800000
        0x0010: 00000000 00000000 00000000 00000000
        0x0020: 00000000 00000000 00000000 00000000
        0x0030: 00000000 00000000 00000000 00000000
        0x0040: 00004001 00000010 00000000 00000000
        0x0050: 00000000 00000008 00004081 00000010
        0x0060: 0b090b0b 000000d0 0b0b0b05 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 000054f5 00000000 00000000 00000000
        0x00a0: 00000220 00000000 00000000 00000000
        0x00b0: 00000000 00000000 05415555 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00002002 00000a00 00000004 00000000
        0x00e0: c0000010 352f0000 00112233 45670000
        0x00f0: 0158000f 00000000 00000f47 00000000
 0:31:1: Intel 82801BA IDE
        0x0000: Vendor ID: 8086 Product ID: 244b
        0x0004: Command: 0005 Status ID: 0280
        0x0008: Class: 01 Subclass: 01 Interface: 80 Revision: 05
        0x000c: BIST: 00 Header Type: 00 Latency Timer: 00 Cache Line Size: 00
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR io addr: 0x0000f000/0x0010
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 0000 Product ID: 0000
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 00 Line: 00 Min Gnt: 00 Max Lat: 00
        0x0000: 244b8086 02800005 01018005 00000000
        0x0010: 00000000 00000000 00000000 00000000
        0x0020: 0000f001 00000000 00000000 00000000
        0x0030: 00000000 00000000 00000000 00000000
        0x0040: c070a307 000000b0 20010009 00000000
        0x0050: 00000000 001014f0 00000000 00000000
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000f47 00000000
 0:31:2: Intel 82801BA USB
        0x0000: Vendor ID: 8086 Product ID: 2442
        0x0004: Command: 0005 Status ID: 0280
        0x0008: Class: 0c Subclass: 03 Interface: 00 Revision: 05
        0x000c: BIST: 00 Header Type: 00 Latency Timer: 00 Cache Line Size: 00
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR io addr: 0x0000d000/0x0020
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 0000 Product ID: 0000
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 04 Line: 0b Min Gnt: 00 Max Lat: 00
        0x0000: 24428086 02800005 0c030005 00000000
        0x0010: 00000000 00000000 00000000 00000000
        0x0020: 0000d001 00000000 00000000 00000000
        0x0030: 00000000 00000000 00000000 0000040b
        0x0040: 00000000 00000000 00000000 00000000
        0x0050: 00000000 00000000 00000000 00000000
        0x0060: 00000010 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00002f00 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000f47 00000000
 0:31:5: Intel 82801BA AC97
        0x0000: Vendor ID: 8086 Product ID: 2445
        0x0004: Command: 0005 Status ID: 0280
        0x0008: Class: 04 Subclass: 01 Interface: 00 Revision: 05
        0x000c: BIST: 00 Header Type: 00 Latency Timer: 00 Cache Line Size: 00
        0x0010: BAR io addr: 0x0000d800/0x0100
        0x0014: BAR io addr: 0x0000dc00/0x0040
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 11d4 Product ID: 0048
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 02 Line: 0b Min Gnt: 00 Max Lat: 00
        0x0000: 24458086 02800005 04010005 00000000
        0x0010: 0000d801 0000dc01 00000000 00000000
        0x0020: 00000000 00000000 00000000 004811d4
        0x0030: 00000000 00000000 00000000 0000020b
        0x0040: 00000000 00000000 00000000 00000000
        0x0050: 00000000 00000000 00000000 00000000
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000f47 00000000
 1:0:0: ITExpress IT8212F
        0x0000: Vendor ID: 1283 Product ID: 8212
        0x0004: Command: 0007 Status ID: 0230
        0x0008: Class: 01 Subclass: 80 Interface: 00 Revision: 13
        0x000c: BIST: 00 Header Type: 00 Latency Timer: 00 Cache Line Size: 00
        0x0010: BAR io addr: 0x0000a000/0x0008
        0x0014: BAR io addr: 0x0000a400/0x0004
        0x0018: BAR io addr: 0x0000a800/0x0008
        0x001c: BAR io addr: 0x0000ac00/0x0004
        0x0020: BAR io addr: 0x0000b000/0x0010
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 0000 Product ID: 0000
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 01 Line: 0b Min Gnt: 08 Max Lat: 08
        0x0080: Capability 0x01: Power Management
        0x0000: 82121283 02300007 01800013 00000000
        0x0010: 0000a001 0000a401 0000a801 0000ac01
        0x0020: 0000b001 00000000 00000000 00000000
        0x0030: 00000000 00000080 00000000 0808010b
        0x0040: 0336a001 00080008 00000202 02040204
        0x0050: 00000000 b1b100a3 313100a3 00021a00
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00020001 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 1:1:0: VIA VT6105 RhineIII
        0x0000: Vendor ID: 1106 Product ID: 3106
        0x0004: Command: 0007 Status ID: 0210
        0x0008: Class: 02 Subclass: 00 Interface: 00 Revision: 8b
        0x000c: BIST: 00 Header Type: 00 Latency Timer: 20 Cache Line Size: 08
        0x0010: BAR io addr: 0x0000b400/0x0100
        0x0014: BAR mem 32bit addr: 0xd5012000/0x00000100
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 1186 Product ID: 1405
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 01 Line: 0b Min Gnt: 03 Max Lat: 08
        0x0044: Capability 0x01: Power Management
        0x0000: 31061106 02100007 0200008b 00002008
        0x0010: 0000b401 d5012000 00000000 00000000
        0x0020: 00000000 00000000 00000000 14051186
        0x0030: 00000000 00000044 00000000 0803010b
        0x0040: 00000000 fe020001 00000000 00000000
        0x0050: 04000000 00000000 00000000 00000000
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 1:2:0: Realtek 8139
        0x0000: Vendor ID: 10ec Product ID: 8139
        0x0004: Command: 0007 Status ID: 0290
        0x0008: Class: 02 Subclass: 00 Interface: 00 Revision: 10
        0x000c: BIST: 00 Header Type: 00 Latency Timer: 20 Cache Line Size: 00
        0x0010: BAR io addr: 0x0000b800/0x0100
        0x0014: BAR mem 32bit addr: 0xd5010000/0x00000100
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 1799 Product ID: 5000
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 01 Line: 0b Min Gnt: 20 Max Lat: 40
        0x0050: Capability 0x01: Power Management
        0x0000: 813910ec 02900007 02000010 00002000
        0x0010: 0000b801 d5010000 00000000 00000000
        0x0020: 00000000 00000000 00000000 50001799
        0x0030: 00000000 00000050 00000000 4020010b
        0x0040: 00000000 00000000 00000000 00000000
        0x0050: 76020001 00000000 00000000 00000000
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 1:3:0: Realtek 8139
        0x0000: Vendor ID: 10ec Product ID: 8139
        0x0004: Command: 0007 Status ID: 0290
        0x0008: Class: 02 Subclass: 00 Interface: 00 Revision: 10
        0x000c: BIST: 00 Header Type: 00 Latency Timer: 20 Cache Line Size: 00
        0x0010: BAR io addr: 0x0000bc00/0x0100
        0x0014: BAR mem 32bit addr: 0xd5011000/0x00000100
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 10ec Product ID: 8139
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 01 Line: 09 Min Gnt: 20 Max Lat: 40
        0x0050: Capability 0x01: Power Management
        0x0000: 813910ec 02900007 02000010 00002000
        0x0010: 0000bc01 d5011000 00000000 00000000
        0x0020: 00000000 00000000 00000000 813910ec
        0x0030: 00000000 00000050 00000000 40200109
        0x0040: 00000000 00000000 00000000 00000000
        0x0050: 76020001 00000000 00000000 00000000
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 1:4:0: Atheros AR5212
        0x0000: Vendor ID: 168c Product ID: 0013
        0x0004: Command: 0006 Status ID: 0290
        0x0008: Class: 02 Subclass: 00 Interface: 00 Revision: 01
        0x000c: BIST: 00 Header Type: 00 Latency Timer: 20 Cache Line Size: 08
        0x0010: BAR mem 32bit addr: 0xd5000000/0x00010000
        0x0014: BAR empty (00000000)
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00005001
        0x002c: Subsystem Vendor ID: 168c Product ID: 2030
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 01 Line: 05 Min Gnt: 0a Max Lat: 1c
        0x0044: Capability 0x01: Power Management
        0x0000: 0013168c 02900006 02000001 00002008
        0x0010: d5000000 00000000 00000000 00000000
        0x0020: 00000000 00000000 00005001 2030168c
        0x0030: 00000000 00000044 00000000 1c0a0105
        0x0040: 00000000 01c20001 c6004000 00000000
        0x0050: 00000000 00000000 00000000 00000000
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 1:5:0: VIA VT83C572 USB
        0x0000: Vendor ID: 1106 Product ID: 3038
        0x0004: Command: 0007 Status ID: 0210
        0x0008: Class: 0c Subclass: 03 Interface: 00 Revision: 61
        0x000c: BIST: 00 Header Type: 80 Latency Timer: 20 Cache Line Size: 08
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR io addr: 0x0000c000/0x0020
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 1106 Product ID: 3038
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 01 Line: 0b Min Gnt: 00 Max Lat: 00
        0x0080: Capability 0x01: Power Management
        0x0000: 30381106 02100007 0c030061 00802008
        0x0010: 00000000 00000000 00000000 00000000
        0x0020: 0000c001 00000000 00000000 30381106
        0x0030: 00000000 00000080 00000000 0000010b
        0x0040: 00031040 00000000 00000b00 00000000
        0x0050: 00000000 00000000 00000000 00000000
        0x0060: 00000010 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: ffc20001 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00002000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 03000000 00000000 00000000
 1:5:1: VIA VT83C572 USB
        0x0000: Vendor ID: 1106 Product ID: 3038
        0x0004: Command: 0007 Status ID: 0210
        0x0008: Class: 0c Subclass: 03 Interface: 00 Revision: 61
        0x000c: BIST: 00 Header Type: 80 Latency Timer: 20 Cache Line Size: 08
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR io addr: 0x0000c400/0x0020
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 1106 Product ID: 3038
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 02 Line: 0b Min Gnt: 00 Max Lat: 00
        0x0080: Capability 0x01: Power Management
        0x0000: 30381106 02100007 0c030061 00802008
        0x0010: 00000000 00000000 00000000 00000000
        0x0020: 0000c401 00000000 00000000 30381106
        0x0030: 00000000 00000080 00000000 0000020b
        0x0040: 00031040 00000000 00000b00 00000000
        0x0050: 00000000 00000000 00000000 00000000
        0x0060: 00000010 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: ffc20001 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00002000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 03000000 00000000 00000000
 1:5:2: VIA VT6202 USB
        0x0000: Vendor ID: 1106 Product ID: 3104
        0x0004: Command: 0007 Status ID: 0210
        0x0008: Class: 0c Subclass: 03 Interface: 20 Revision: 63
        0x000c: BIST: 00 Header Type: 80 Latency Timer: 20 Cache Line Size: 08
        0x0010: BAR mem 32bit addr: 0xd5013000/0x00000100
        0x0014: BAR empty (00000000)
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 1106 Product ID: 3104
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 03 Line: 0b Min Gnt: 00 Max Lat: 00
        0x0080: Capability 0x01: Power Management
        0x0000: 31041106 02100007 0c032063 00802008
        0x0010: d5013000 00000000 00000000 00000000
        0x0020: 00000000 00000000 00000000 31041106
        0x0030: 00000000 00000080 00000000 0000030b
        0x0040: 000b0000 00000000 290020a0 ffff0000
        0x0050: 80005a00 00000000 88880b04 00000033
        0x0060: 00012020 00000000 00000001 c0080000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: ffc20001 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 03000000 00000000 00000000
 1:5:3: VIA VT6306 FireWire
        0x0000: Vendor ID: 1106 Product ID: 3044
        0x0004: Command: 0007 Status ID: 0210
        0x0008: Class: 0c Subclass: 00 Interface: 10 Revision: 46
        0x000c: BIST: 00 Header Type: 00 Latency Timer: 20 Cache Line Size: 08
        0x0010: BAR mem 32bit addr: 0xd5014000/0x00000800
        0x0014: BAR io addr: 0x0000c800/0x0080
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 17f2 Product ID: 3044
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 01 Line: 0b Min Gnt: 00 Max Lat: 20
        0x0050: Capability 0x01: Power Management
        0x0000: 30441106 02100007 0c001046 00002008
        0x0010: d5014000 0000c801 00000000 00000000
        0x0020: 00000000 00000000 00000000 304417f2
        0x0030: 00000000 00000050 00000000 2000010b
        0x0040: 00000000 00000000 00000000 00000000
        0x0050: e4020001 00000000 00000000 00000000
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000

acpidump:
begin-base64 644 gw.DSDT.2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====
begin-base64 644 gw.FACP.1
RkFDUHQAAAABFkludGVsUkFXUkRBQ1BJMS4wQkFXUkQAAAAAAADfH8Aw3x8AAAkAsgAAAKGgAAAA
QAAAAAAAAARAAAAAAAAAAAAAAAhAAAAsQAAAKEAAAAQCAAQEBBAAWgCEAwAAAAABAQ0AAAAAACUE
AAA=
====
begin-base64 644 gw.RSDT.0
UlNEVCgAAAABlEludGVsUkFXUkRBQ1BJMS4wQkFXUkQAAAAAQDDfHw==
====
begin-base64 644 gw.headers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====


>Release-Note:
>Audit-Trail:
>Unformatted:

Reply | Threaded
Open this post in threaded view
|

Re: system/6564: pf not nating(does not see) icmp4 port unreachable packets from machine behind pf

Mike Belopuhov
The following reply was made to PR system/6564; it has been noted by GNATS.

From: Mike Belopuhov <[hidden email]>
To: [hidden email]
Cc: [hidden email]
Subject: Re: system/6564: pf not nating(does not see) icmp4 port unreachable packets from machine behind pf
Date: Thu, 17 Feb 2011 11:50:10 +0100

 On Thu, Feb 17, 2011 at 12:51 +1100, [hidden email] wrote:
 > >Number:         6564
 > >Category:       system
 > >Synopsis:       nating icmp4 port unreachable
 > >Confidential:   yes
 > >Severity:       serious
 > >Priority:       medium
 > >Responsible:    bugs
 > >State:          open
 > >Quarter:        
 > >Keywords:      
 > >Date-Required:
 > >Class:          sw-bug
 > >Submitter-Id:   unknown
 > >Arrival-Date:   Thu Feb 17 02:50:01 GMT 2011
 > >Closed-Date:
 > >Last-Modified:
 > >Originator:    
 > >Release:        
 > >Organization:
 > >Environment:
 > System      : OpenBSD 4.9
 > Details     : OpenBSD 4.9 (GENERIC) #0: Thu Feb 17 09:10:06 MAGT 2011
 > root@gw:/usr/src/sys/arch/i386/compile/GENERIC
 >
 > Architecture: OpenBSD.i386
 > Machine     : i386
 > >Description:
 > pf rules:
 > match in on $int inet from $int_network_machine to any tag PASS
 > match out on $ext inet from $int_network_machine to any tag PASS nat-to $ext static-port
 > match in on $ext inet from any to $ext tag PASS rdr-to $int_network_machine
 > pass all flags S/SA keep state tagged PASS
 > tcpdump on $ext:
 > $int_network_machine > $some_external_machine: icmp: $ext udp port $any_unresponsive_port unreachable
 > pf does not see this packet as icmp
 > >How-To-Repeat:
 > send any udp packet to $ext in $any_unresponsive_port on $int_network_machine
 > tested on 47,48,49
 > >Fix:
 
 it should work just fine starting with 4.8.  at least, in -current i get
 icmp port unreachable correctly translated with your pf.conf.  so check your
 configs.

Reply | Threaded
Open this post in threaded view
|

Re: system/6564: pf not nating(does not see) icmp4 port unreachable packets from machine behind pf

Mike Belopuhov
In reply to this post by 3
The following reply was made to PR system/6564; it has been noted by GNATS.

From: Mike Belopuhov <[hidden email]>
To: [hidden email]
Cc: [hidden email]
Subject: Re: system/6564: pf not nating(does not see) icmp4 port unreachable packets from machine behind pf
Date: Thu, 17 Feb 2011 12:57:43 +0100

 On Thu, Feb 17, 2011 at 12:51 +1100, [hidden email] wrote:
 > pf rules:
 > match in on $int inet from $int_network_machine to any tag PASS
 > match out on $ext inet from $int_network_machine to any tag PASS nat-to $ext static-port
 > match in on $ext inet from any to $ext tag PASS rdr-to $int_network_machine
 > pass all flags S/SA keep state tagged PASS
 > tcpdump on $ext:
 > $int_network_machine > $some_external_machine: icmp: $ext udp port $any_unresponsive_port unreachable
 > pf does not see this packet as icmp
 > >How-To-Repeat:
 > send any udp packet to $ext in $any_unresponsive_port on $int_network_machine
 > tested on 47,48,49
 > >Fix:
 >
 
 the problem here turnes out to be in the rdr part.  apparently
 icmp errors don't get it's source address properly rewritten.
 
 this fixes an issue for me.
 
 Index: pf.c
 ===================================================================
 RCS file: /home/cvs/src/sys/net/pf.c,v
 retrieving revision 1.726
 diff -u -p -r1.726 pf.c
 --- pf.c 14 Feb 2011 11:01:36 -0000 1.726
 +++ pf.c 17 Feb 2011 11:54:53 -0000
 @@ -4498,8 +4498,7 @@ pf_test_state_icmp(struct pf_state **sta
     &nk->addr[pd2.didx], pd2.af) ||
     nk->port[pd2.didx] != th.th_dport)
  pf_change_icmp(pd2.dst, &th.th_dport,
 -    NULL, /* XXX Inbound NAT? */
 -    &nk->addr[pd2.didx],
 +    saddr, &nk->addr[pd2.didx],
     nk->port[pd2.didx], NULL,
     pd2.ip_sum, icmpsum,
     pd->ip_sum, 0, pd2.af);
 @@ -4576,8 +4575,7 @@ pf_test_state_icmp(struct pf_state **sta
     &nk->addr[pd2.didx], pd2.af) ||
     nk->port[pd2.didx] != uh.uh_dport)
  pf_change_icmp(pd2.dst, &uh.uh_dport,
 -    NULL, /* XXX Inbound NAT? */
 -    &nk->addr[pd2.didx],
 +    saddr, &nk->addr[pd2.didx],
     nk->port[pd2.didx], &uh.uh_sum,
     pd2.ip_sum, icmpsum,
     pd->ip_sum, 1, pd2.af);
 @@ -4653,7 +4651,7 @@ pf_test_state_icmp(struct pf_state **sta
 
  if (PF_ANEQ(pd2.dst,
     &nk->addr[pd2.didx], pd2.af))
 -                                       pf_change_icmp(pd2.dst, NULL, NULL,
 +                                       pf_change_icmp(pd2.dst, NULL, saddr,
     &nk->addr[pd2.didx], 0, NULL,
     pd2.ip_sum, icmpsum,
     pd->ip_sum, 0, AF_INET);
 @@ -4728,7 +4726,7 @@ pf_test_state_icmp(struct pf_state **sta
 
  if (PF_ANEQ(pd2.dst,
     &nk->addr[pd2.didx], pd2.af))
 - pf_change_icmp(pd2.dst, NULL, NULL,
 + pf_change_icmp(pd2.dst, NULL, saddr,
     &nk->addr[pd2.didx], 0, NULL,
     pd2.ip_sum, icmpsum,
     pd->ip_sum, 0, AF_INET6);
 @@ -4774,8 +4772,7 @@ pf_test_state_icmp(struct pf_state **sta
 
  if (PF_ANEQ(pd2.dst,
     &nk->addr[pd2.didx], pd2.af))
 - pf_change_icmp(pd2.src, NULL,
 -    NULL, /* XXX Inbound NAT? */
 + pf_change_icmp(pd2.dst, NULL, saddr,
     &nk->addr[pd2.didx], 0, NULL,
     pd2.ip_sum, icmpsum,
     pd->ip_sum, 0, pd2.af);

3
Reply | Threaded
Open this post in threaded view
|

Re: system/6564: pf not nating(does not see) icmp4 port unreachable packets from machine behind pf

3
In reply to this post by 3
The following reply was made to PR system/6564; it has been noted by GNATS.

From: [hidden email]
To: Mike Belopuhov <[hidden email]>
Cc: [hidden email]
Subject: Re: system/6564: pf not nating(does not see) icmp4 port unreachable packets from machine behind pf
Date: Fri, 18 Feb 2011 00:53:21 +1100

 Thursday, February 17, 2011, 10:57:43 PM, you wrote:
 > the problem here turnes out to be in the rdr part.  apparently
 > icmp errors don't get it's source address properly rewritten.
 
 > this fixes an issue for me.
 
 > Index: pf.c
 > ===================================================================
 > RCS file: /home/cvs/src/sys/net/pf.c,v
 > retrieving revision 1.726
 > diff -u -p -r1.726 pf.c
 [..skiped..]
 nj. fixed