Project

General

Profile

Actions
Copy link

Bug #4537

closed

Crash and reboot when accessing the web UI from the IPsec mobile client or over the tunnel on 32 bit

Added by Vadim Ginzburg almost 10 years ago. Updated over 9 years ago.

Status:
Resolved
Priority:
High
Assignee:
Jim Thompson
Category:
IPsec
Target version:
2.2.3
Start date:
03/19/2015
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.2.x
Affected Architecture:
i386

Description

Accessing the WebUI while over the IPSec mobile connection will crash the box.
The issue was fist discovered on 2.2.
Forum thread https://forum.pfsense.org/index.php?topic=87946.0

Files

pf-crash (1).txt (153 KB) pf-crash (1).txt Chris Buechler, 04/13/2015 10:13 PM
Actions
Copy link
 #1

Updated by Chris Buechler almost 10 years ago

  • Subject changed from Crash and reboot when accessing the web UI from the IPsec mobile client or over the tunnel. to Crash and reboot when accessing the web UI from the IPsec mobile client or over the tunnel on 32 bit
  • Category set to Operating System
  • Affected Version set to 2.2
  • Affected Architecture i386 added
  • Affected Architecture deleted ()

This is specific to 32 bit versions only, and something beyond that which hasn't been narrowed down yet, as it's not universal to all 32 bit systems. Nor is it hardware-specific.

Actions
Copy link
 #2

Updated by Chris Buechler over 9 years ago

  • Status changed from New to Confirmed
  • Priority changed from Normal to High

Appears setting sysctl net.inet.ipsec.directdispatch to 0 (can be done under System>Advanced, System Tunables) fixes this issue.

Actions
Copy link
 #3

Updated by Chris Buechler over 9 years ago

  • Category changed from Operating System to IPsec
Actions
Copy link
 #4

Updated by Chris Buechler over 9 years ago

crash provided in duplicate #4610 attached.

Actions
Copy link
 #5

Updated by Chris Buechler over 9 years ago

  • Target version set to 2.2.3

For 2.2.3, let's set net.inet.ipsec.directdispatch=0 where IPsec is enabled and running on 32 bit.

Actions
Copy link
 #6

Updated by Ermal Luçi over 9 years ago

  • Status changed from Confirmed to Feedback

Done for non amd64.

Actions
Copy link
 #7

Updated by Ermal Luçi over 9 years ago

  • % Done changed from 0 to 100
Actions
Copy link
 #8

Updated by Ermal Luçi over 9 years ago

Actions
Copy link
 #9

Updated by Chris Buechler over 9 years ago

  • Status changed from Feedback to Resolved
  • Affected Version changed from 2.2 to 2.2.x

that works around the issue. For tracking purposes we'll mark this resolved. I opened #4754 to investigate the root cause.

Actions
Copy link
 #10

Updated by Jim Thompson over 9 years ago

  • Assignee set to Jim Thompson
Actions
Copy link

Also available in: Atom PDF