From owner-freebsd-security Tue Sep 15 06:16:02 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id GAA03133 for freebsd-security-outgoing; Tue, 15 Sep 1998 06:16:02 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from hotmail.com (f172.hotmail.com [207.82.251.58]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id GAA03125 for ; Tue, 15 Sep 1998 06:16:01 -0700 (PDT) (envelope-from madrapour@hotmail.com) Received: (qmail 10860 invoked by uid 0); 15 Sep 1998 13:15:43 -0000 Message-ID: <19980915131543.10859.qmail@hotmail.com> Received: from 208.218.169.84 by www.hotmail.com with HTTP; Tue, 15 Sep 1998 06:15:43 PDT X-Originating-IP: [208.218.169.84] From: "N. N.M" To: netadmin@fastnet.co.uk Cc: freebsd-security@FreeBSD.ORG Subject: Re: A question probably relevant to IPFW Content-Type: text/plain Date: Tue, 15 Sep 1998 06:15:43 PDT Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >Just read through your e-mail again and what your experiencing >is *EXACTLY* the same as what I am. > >The home server was rebooting every so often, tended to be >early in the morning (about 2am) or in the event 6-7pm. > >There was no exact pattern to reboots (which led me >to believe it was either a DoS or a hardware failure) >and so I rebuilt the machine from completely different >components, upgraded BSD to the latest version (went >from 2.2.1 -> 2.2.6) and thought it was all working >fine. A few days later it started doing the same thing >and still does it although not as often. > >If I get chance, I'll put a packet sniffer on the network >(it's not that simple to do as everything is going through a >switch). > > > >Regards, > >Jay Tribick Hi, Did you have IPFW active on that machine? It seems to be relevant directly to IPFW and packet filtering, because as I said before, the other FreeBSD with the same configuration hasn't been rebooted after it hadn't to filter the packets. Another point: it is rebooted just at 2 am and it follows from a semi-routine timing. Being rebooted once in almost 2-3 days: Friday, Monday, Wednesday and the other week: Friday, Sunday, Tuesday! I have a line in /var/cron/log file as follow: .....[the time of reboot, 2.05 am] ... cron [8923] : (CRON) STARTUP (fork ok) Does anybody think that it might lead me to something? Thanks everyone who replied (and will reply!) me! (-: ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message