Bug 192677

Summary:	pfctl iotcl buffer to small for bigger spamd blacklists
Product:	Base System	Reporter:	Simon Krenz <simon.krenz+freebsd-bugzilla>
Component:	bin	Assignee:	freebsd-pf (Nobody) <pf>
Status:	Closed FIXED
Severity:	Affects Some People	CC:	kp
Priority:	---
Version:	10.0-RELEASE
Hardware:	amd64
OS:	Any

Description Simon Krenz 2014-08-15 11:08:32 UTC

I installed spamd-4.9.1_2 and wanted to use its blacklist und tarpitting capabilities which I were used to in OpenBSD. If you are using the 'nixspam' and 'uatraps' lists for blacklisting mode nearly 100.000 entries need to be inserted to a pf table.

The debug output looks likes this:

    foo@bar#: spamd-setup -d -b
    Getting http://www.openbsd.org/spamd/nixspam.gz
    blacklist nixspam 40000 entries
    Getting http://www.openbsd.org/spamd/traplist.gz
    blacklist uatraps 65946 entries
    foo@bar#: pfctl: Bad address.

It seems that the pfctl ioctl buffer is to small to load that much entries. If I remembered correct this problem wasn't there in FreeBSD 9 and I didn't see it in OpenBSD.

There is also a FreeBSD Forum post from another guy regarding the same problem: https://forums.freebsd.org/viewtopic.php?t=45879

Comment 1 Kristof Provost freebsd_committer

2016-02-25 07:35:51 UTC

This was first tackled in r286862, and fully fixed in r296025 (see bug #207463).