From owner-freebsd-pf@FreeBSD.ORG Thu Jul 23 13:27:21 2009 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7DC2B10656C8 for ; Thu, 23 Jul 2009 13:27:21 +0000 (UTC) (envelope-from leccine@gmail.com) Received: from ey-out-2122.google.com (ey-out-2122.google.com [74.125.78.27]) by mx1.freebsd.org (Postfix) with ESMTP id F03EE8FC15 for ; Thu, 23 Jul 2009 13:27:20 +0000 (UTC) (envelope-from leccine@gmail.com) Received: by ey-out-2122.google.com with SMTP id 9so242154eyd.7 for ; Thu, 23 Jul 2009 06:27:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=nKi522LD9cZ9fuY6prKHGZiBNQq0ngqe/R6BqLx//LI=; b=oDodzSYcZkcxlLBXGCFqR9Nufz6Eo54cfrTVfMlmgu85BPOWsQDQgkeDztsKNrCbCy hVY/V7i2iG6aSZVnFjSK4+4ntnVWJ00czg7jy2odOkXisbcXyBYIi4FXDlYW3Sh2jMO0 gzm0q1erdWesZS3dDBBOlMR9Jzd5d0EP6oFZw= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=gPAqjZk8CCmFbXbfqG6FPtCOfhLTRflemSkOPGtEe/rsmBXnuUJGEXh/mgiDTTD0gL byx5vhBjDLSql1Fd//pAyTaHV88b9I/1lbN1dMxTbqgsXrEH0UcA1ZMmGsUFwNSAAaAb gYWZNHKG0gZGZMhgjAbi+wvutp13XbSwl/Y48= MIME-Version: 1.0 Received: by 10.210.58.13 with SMTP id g13mr2594679eba.99.1248355639320; Thu, 23 Jul 2009 06:27:19 -0700 (PDT) In-Reply-To: <24625659.post@talk.nabble.com> References: <24625659.post@talk.nabble.com> Date: Thu, 23 Jul 2009 06:27:19 -0700 Message-ID: From: =?ISO-8859-1?B?SXN0duFu?= To: Umar Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-pf@freebsd.org Subject: Re: please Help X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Jul 2009 13:27:21 -0000 check the pf logs if you are logging at all.... http://www.openbsd.org/faq/pf/logging.html regards, Istvan On Thu, Jul 23, 2009 at 6:23 AM, Umar wrote: > > Dear Members! > > I have FreeBSD 7.1 with squid proxy running. PF is configured. > > Last few days i am facing some problems. Browsing is stuck time by time on > clients machine. > > I tried to ping my local network from my FreeBSD server there i found the > issue. > > here is the output of ping. > > [root@proxyServer ~]# ping 10.11.0.3 > PING 10.11.0.3 (10.11.0.3): 56 data bytes > ping: sendto: Operation not permitted > ping: sendto: Operation not permitted > ping: sendto: Operation not permitted > 64 bytes from 10.11.0.3: icmp_seq=3 ttl=64 time=0.111 ms > 64 bytes from 10.11.0.3: icmp_seq=4 ttl=64 time=0.147 ms > 64 bytes from 10.11.0.3: icmp_seq=5 ttl=64 time=0.099 ms > > [root@proxyServer ~]# ping 10.11.0.5 > PING 10.11.0.5 (10.11.0.5): 56 data bytes > ping: sendto: Operation not permitted > ping: sendto: Operation not permitted > ping: sendto: Operation not permitted > 64 bytes from 10.11.0.5: icmp_seq=3 ttl=64 time=0.111 ms > 64 bytes from 10.11.0.5: icmp_seq=4 ttl=64 time=0.147 ms > 64 bytes from 10.11.0.5: icmp_seq=5 ttl=64 time=0.099 ms > > On DNS queury > [root@proxyServer~]# nslookup www.yahoo.com > ;; connection timed out; no servers could be reached > > [root@proxyServer~]# nslookup www.yahoo.com > Server: 10.11.0.9 > Address: 10.11.0.9#53 > > Non-authoritative answer: > www.yahoo.com canonical name = www.wa1.b.yahoo.com. > www.wa1.b.yahoo.com canonical name = www-real.wa1.b.yahoo.com. > Name: www-real.wa1.b.yahoo.com > Address: 87.248.113.14 > > As you can see some time its getting response and some times not. If I stop > (PF) then its working fine. > > Is there any traffic load issue or PF issue? or any kernel tunning required > for heavy traffic. > > Please help > > Regards, > > Umar > -- > View this message in context: > http://www.nabble.com/please-Help-tp24625659p24625659.html > Sent from the freebsd-pf mailing list archive at Nabble.com. > > _______________________________________________ > freebsd-pf@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" > -- the sun shines for all