From owner-freebsd-net@FreeBSD.ORG Fri Feb 27 00:20:01 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1C7681065670 for ; Fri, 27 Feb 2009 00:20:01 +0000 (UTC) (envelope-from ady@ady.ro) Received: from mail-ew0-f166.google.com (mail-ew0-f166.google.com [209.85.219.166]) by mx1.freebsd.org (Postfix) with ESMTP id 896008FC13 for ; Fri, 27 Feb 2009 00:19:59 +0000 (UTC) (envelope-from ady@ady.ro) Received: by ewy10 with SMTP id 10so976489ewy.43 for ; Thu, 26 Feb 2009 16:19:59 -0800 (PST) MIME-Version: 1.0 Received: by 10.210.112.1 with SMTP id k1mr157400ebc.47.1235693998973; Thu, 26 Feb 2009 16:19:58 -0800 (PST) In-Reply-To: <3853.206.108.16.89.1235693214.squirrel@alder.hosix.com> References: <3650.206.108.16.89.1235691792.squirrel@alder.hosix.com> <3853.206.108.16.89.1235693214.squirrel@alder.hosix.com> Date: Fri, 27 Feb 2009 01:19:58 +0100 Message-ID: <78cb3d3f0902261619t71a054fet43779c37e2981603@mail.gmail.com> From: Adrian Penisoara To: Shawn Everett Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-net@freebsd.org Subject: Re: FreeBSD Router Problem X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Feb 2009 00:20:01 -0000 Hi, On Fri, Feb 27, 2009 at 1:06 AM, Shawn Everett wrote: > Sorry I meant to say FreeBSD 7.0 :) > > > Hi Guys, > > > > Here's a weird one... I set up FreeBSD 5.2 to act as a router. I used > > the pf.conf script shown at: > > http://www.openbsd.org/faq/pf/pools.html#outgoing > > > > Everything works just fine. Traffic is appropriately load balanced and > > things work as expected. > > > > Strangely after a few hours something just stops routing traffic. I > can't > > ping the remote gateways either. Both external interfaces still show the > > correct IP addresses. Rebooting the BSD box solves the problem. Nothing > > else gets rebooted. Any error messages in dmesg output ? Significant changes in "netstat -m" output before and after ? The same for "pfctl -s all" output... > > > > > Any suggestions would be appreciated. Try tcpdump'ing on the router's interfaces an on the source machine and compare the packet flows -- do the packets reach the router ? Do they attempt to pass to the outside ? Regards, Adrian.