From owner-freebsd-questions Wed Jun 12 16:14: 5 2002 Delivered-To: freebsd-questions@freebsd.org Received: from smtp03.wxs.nl (smtp03.wxs.nl [195.121.6.37]) by hub.freebsd.org (Postfix) with ESMTP id 3891137B406 for ; Wed, 12 Jun 2002 16:13:57 -0700 (PDT) Received: from cybertron.kruijff ([213.10.151.186]) by smtp03.wxs.nl (Netscape Messaging Server 4.15) with ESMTP id GXM8AP01.WJJ; Thu, 13 Jun 2002 01:08:49 +0200 Date: Thu, 13 Jun 2002 01:09:24 +0200 From: Alex X-Mailer: The Bat! (v1.53d) Reply-To: freebsd-reply@akruijff.dds.nl X-Priority: 3 (Normal) Message-ID: <16650415744.20020613010924@dds.nl> To: "FreeBSD-List" Cc: freebsd-questions@FreeBSD.ORG Subject: Re: IPFW Problem In-Reply-To: <003701c20e89$88689960$64afa8c0@expnet.net> References: <003701c20e89$88689960$64afa8c0@expnet.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Dear FreeBSD-List, Saturday, June 08, 2002, 3:12:17 AM, you wrote: FL> Can anyone tell me what this means ? The box is acting as a router and everytime this happens the box just hangs. FL> Jun 6 23:32:37 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 838:1220@1480) FL> Jun 6 23:32:37 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 1606:1220@1480) FL> Jun 6 23:32:38 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 2630:1220@1480) FL> Jun 6 23:32:38 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 3398:1220@1480) FL> Jun 6 23:32:39 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 4422:1220@1480) FL> Jun 6 23:32:39 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 5190:1220@1480) FL> Jun 6 23:32:40 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 6214:1220@1480) FL> Jun 6 23:32:40 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 7238:1220@1480) FL> Jun 6 23:32:41 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 8262:1220@1480) FL> Jun 6 23:32:41 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 9030:1220@1480) FL> Jun 6 23:32:42 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 10054:1220@1480) FL> Jun 6 23:32:42 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 10822:1220@1480) FL> Jun 6 23:32:43 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 11846:1220@1480) FL> Jun 6 23:32:43 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 12614:1220@1480) FL> Jun 6 23:32:44 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 13382:1220@1480) FL> Jun 6 23:32:44 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 14150:1220@1480) It seems your firewall is dropping a UDP packets. My guess is that you are under a DOS attack. You could built a couple thing in a kernel to help cope with there. Check out the handbook for this. FL> edge-gw# uname -a FL> FreeBSD edge-gw 4.6-PRERELEASE FreeBSD 4.6-PRERELEASE #3: FL> thanks FL> -Brian -- Best regards, Alex The FreeBSD handbook www.freebsd.org/handbook How to get best results from the FreeBSD- questions mailing list http://www.freebsd.org/doc/en_US.ISO8859-1/articles/freebsd-questions/index.html Alternative: http://www.lemis.com/questions.html To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message