From owner-freebsd-stable@FreeBSD.ORG Tue Oct 28 02:47:19 2008 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 61DE1106566C for ; Tue, 28 Oct 2008 02:47:19 +0000 (UTC) (envelope-from jose.amengual@gmail.com) Received: from yw-out-2324.google.com (yw-out-2324.google.com [74.125.46.30]) by mx1.freebsd.org (Postfix) with ESMTP id 113268FC12 for ; Tue, 28 Oct 2008 02:47:18 +0000 (UTC) (envelope-from jose.amengual@gmail.com) Received: by yw-out-2324.google.com with SMTP id 9so588966ywe.13 for ; Mon, 27 Oct 2008 19:47:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:mime-version:subject:date:references :x-mailer; bh=pZMtCRZPAUTYnam1dntQubur+oCQH8meFO+arRSfyoA=; b=Qcgqgg/yAbK0LGT7x6Nztby8w/vkH52MJkXhKQVr3qas0FPnGT51FBS0QvxdrKAcsg 71ZehAmpqJDXV6XLNBI4sfwDhFXGmu4X5g1sGjH01nc1kJaxQ//kQmpCqmHvgYfkVSSK zoNrIAVUnpgrdROFl330cdyOsVxMiStZBQhv8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type:mime-version:subject :date:references:x-mailer; b=eOGL11DW5xQ0hCto4EM+hmYRapThLFOhGMR7eHZ6B/gQ3AUZgafXcfOxevO+Oo0OhU WAye8Z3uz5mba0M0O48HSP0z2YeMTAuNpHt6fyys4CCla+urpTYwrMW2GMfKo7vGxsrP +Iy+SAY/itP1288vavv0Vp/mfJcG9/mP+9N2w= Received: by 10.65.100.17 with SMTP id c17mr7316538qbm.48.1225162037286; Mon, 27 Oct 2008 19:47:17 -0700 (PDT) Received: from 133-34-50.adsl.terra.cl (133-34-50.adsl.terra.cl [200.50.34.133]) by mx.google.com with ESMTPS id 28sm1531969qbw.11.2008.10.27.19.47.14 (version=TLSv1/SSLv3 cipher=RC4-MD5); Mon, 27 Oct 2008 19:47:16 -0700 (PDT) Message-Id: From: Jose Amengual To: Bjoern A. Zeeb In-Reply-To: <20081027120802.G2978@maildrop.int.zabbadoz.net> Mime-Version: 1.0 (Apple Message framework v929.2) Date: Mon, 27 Oct 2008 23:47:12 -0300 References: <20081027120802.G2978@maildrop.int.zabbadoz.net> X-Mailer: Apple Mail (2.929.2) Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-current@freebsd.org, freebsd-stable@freebsd.org Subject: SOLUTION!!!! Re: tcp_do_segment....again X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Oct 2008 02:47:19 -0000 Hi Guys. I will describe de steps that I did to solve this problem that I still don't understand. Like my first post, I installed FreeBSD with the install cd 7.0- STABLE-200807-i386-disc1.iso , then I update using cvsup and the stable supfile and I got the 7.1-PREREALEASE ( I don't know why I got 7.1 has a stable using the stablesupfile using RELENG_7 ). After make world and stuff, I installed ezjail and I start creating my jails, then I configure my pf script and I give my jails and user nat and etc. Then I start installing packages to my jails and I start seeing the TCP kernel messages that at the first time I ignored. After I had all the jails working , I realize that my postfix jail was leaving almost all the emails in the defer queue with reasons like "Connection time out", then I realize that the tcp_do_segment messages were talking about port 25 connections and not only ftp connections, and that was exactly one message per mail in the queue. After reading some post I decide to Update my machine again to RELENG_7_0 and I got 7.0-p5 and the problem persist, after that I start changing sysctl variables like sack etc. Today I reinstall the same machine with the 7.0-RELEASE-i386-disc1.iso and update to 7.0-p5 and using ezjail I start creating the jails and I realize that I was getting the same TCP messages per ftp connections but seems to be working ok. After some research and reading I decide to REMOVE the SCTP option from the kernel and recompile. After that I didn't receive any message and today the server is up and running with 300 users behind and tons of email with NONE in the defer queue. The configurations of the jails were copy and paste to the new installation of the server, the only thing that I change was the install CD. Is that possible ?, could be the reason ? SCTP is generating this problem ? Thanks to all. On 27-Oct-08, at 9:09 AM, Bjoern A. Zeeb wrote: > On Sun, 26 Oct 2008, Jose Amengual wrote: > > Hi, > >> The problem persist even in stable 7.0, 7.1-PRERELEASE and 7.0-P5 , >> the postfix jail is living all the email in defer queue saying >> "Connection Time Out" >> >> This server give service to 300 clients and the network load os high. >> >> is there any clue how to resolve this ? > > sorry if I am not reading back various links which include mails I had > sent which are entirely unrelated. > > So you are seeing TCP problems. And you are running with a firewall > enabled? > > Have you tried tcpdumping and seeing what exactly goes wrong? > > do you have any offload stuff enabled (as the subject suggests)? If so > what happens if you disable this? > > /bz > > -- > Bjoern A. Zeeb Stop bit received. Insert coin for new > game. > _______________________________________________ > freebsd-current@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org > "