freebsd stable - Apr 2013 - Possible DoS in mpd 5.6 pppoe server

Hi all,

I'm doing tests with mpdas pppoeserver. Tried to simulate an attack of 
1000 connections using an incorrect login and after a certain time can 
cause a kernel panic in the system. Below the panicgenerated:

http://pastebin.com/nUXGVR3y

Other equipment I do:

# for (( i=0; i < 1000; i++ )); do ppp -ddial intnet ; done

My System:

Intel Motherboard Server S5500BC with Dual Processor Xeon(R) CPU E5606  
@ 2.13GHz
8Gb ram

I do not understand programming in Cor Assembly. But could someone tell 
me if what happened was a system problem or hardware?

Best regards,

Gondim

Can you provide more information about the configuration of mpd and ppp?

the panic is in the dummynet code; can you provide information about
your ipfw/dummynet setup?

Thanks,



adrian


On 20 April 2013 06:21, Marcelo Gondim <gondim at bsdinfo.com.br>
wrote:
> Hi all,
>
> I'm doing tests with mpdas pppoeserver. Tried to simulate an attack of
1000
> connections using an incorrect login and after a certain time can cause a
> kernel panic in the system. Below the panicgenerated:
>
> http://pastebin.com/nUXGVR3y
>
> Other equipment I do:
>
> # for (( i=0; i < 1000; i++ )); do ppp -ddial intnet ; done
>
> My System:
>
> Intel Motherboard Server S5500BC with Dual Processor Xeon(R) CPU E5606  @
> 2.13GHz
> 8Gb ram
>
> I do not understand programming in Cor Assembly. But could someone tell me
> if what happened was a system problem or hardware?
>
> Best regards,
>
> Gondim
>
> _______________________________________________
> freebsd-stable at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "freebsd-stable-unsubscribe at
freebsd.org"

On 20.04.2013 20:21, Marcelo Gondim wrote:
> Hi all,
> 
> I'm doing tests with mpdas pppoeserver. Tried to simulate an attack of 
> 1000 connections using an incorrect login and after a certain time can 
> cause a kernel panic in the system. Below the panicgenerated:
> 
> http://pastebin.com/nUXGVR3y
You seem to use dummynet and the problem is not in mpd/pppoe code,
it's it the dummynet code. Look at
http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/162558
for workarounds.