Date: Tue, 16 Mar 2004 15:34:24 +0300 From: Gleb Smirnoff <glebius@cell.sick.ru> To: Zherdev Anatoly <tolyar@mx.ru> Cc: freebsd-net@freebsd.org Subject: Re: Problem with closing tcp session between cisco and freebsd Message-ID: <20040316123424.GA17010@cell.sick.ru> In-Reply-To: <20040316151832.3f8b9012@dwarf.demos.su> References: <20040316125335.5f64cac5@dwarf.demos.su> <20040316131256.015a082d@dwarf.demos.su> <4056D84C.514EC45C@freebsd.org> <Pine.BSF.4.53.0403161129010.51220@e0-0.zab2.int.zabbadoz.net> <20040316151832.3f8b9012@dwarf.demos.su>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Mar 16, 2004 at 03:18:32PM +0300, Zherdev Anatoly wrote: Z> > > So no obvious suspect. Before digging deep into the code its better Z> > > to have some more surrounding information. Z> > Z> > Another question: any packet filters in between ? Z> Z> Yes i have IPFW1 on this servers (it was the same problem on two servers at one time and one cisco) Z> But in IPFW i have ACCEPT by default and only this deny rules: Z> Z> 00200 deny ip from any to 127.0.0.0/8 Z> 00300 deny ip from 127.0.0.0/8 to any Z> 00400 deny log logamount 100 tcp from any to any 135-139,445,593 Z> 00500 deny log logamount 100 udp from any to any 135-139,445 Z> 01100 deny tcp from any to any 22 in recv fxp1 Z> 01600 reset tcp from any to any 113 Z> Z> I make ipfw flush when i see this situation and keep only Z> 65535 allow ip from any to any Z> but problem was not resolved and tcp session not ended. Another snap question: what is value of net.inet.tcp.blackhole sysctl? -- Totus tuus, Glebius. GLEBIUS-RIPN GLEB-RIPE
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040316123424.GA17010>