Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 19 Oct 2007 20:53:46 +0700
From:      budsz <budiyt@gmail.com>
To:        freebsd-questions@freebsd.org
Subject:   Strange problem of ipfilter
Message-ID:  <4d4dc3640710190653m7ba7731bo6d494f3f8a6a8c31@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
Hallo,

I got strange problem ipfilter on FreeBSD 6.2-STABLE. After uptime my
machine running 7 days until 10 days, I can't access DNS, sometime
SSH, and etc,  to my box, but this happen randomly. For example I've
rule like this:

# SSH
pass  in           quick on rl0 proto tcp from 192.168.0.0/24 to
192.168.0.100/32 port = 22 keep state

# DNS
pass  in           quick proto udp from 192.168.0.0/24 to
192.168.0.100/32 port = 53 keep state

Whereis:

192.168.0.0/24 my client block ip, 192.168.0.200/32 ip box running ipfilter.

I try to create rule:

pass in all
pass out all

Then reload ipfilter rule. Or I try to restart my machine with my
default rule. So everything gone be alright. FYI, I use:

root:~# ipf -V
ipf: IP Filter: v4.1.13 (416)
Kernel: IP Filter: v4.1.13
Running: yes
Log Flags: 0 = none set
Default: block all, Logging: available
Active list: 0
Feature mask: 0xa

root:~# uname -srm
FreeBSD 6.2-STABLE i386

I do compile ipfilter with default block in kernel configuration. This
night I'll try to make world my FreeBSD box and I hope FreeBSD's
commiter already revision with this bug.

Would you give some clue to fix this problem. Thanks you for your help.


TIA
-- 
budsz



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4d4dc3640710190653m7ba7731bo6d494f3f8a6a8c31>