From owner-freebsd-pf@FreeBSD.ORG Tue Apr 3 15:18:02 2007 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 532A516A407 for ; Tue, 3 Apr 2007 15:18:02 +0000 (UTC) (envelope-from drew@mykitchentable.net) Received: from qsmtp4.mc.surewest.net (qsmtp.mc.surewest.net [66.60.130.145]) by mx1.freebsd.org (Postfix) with SMTP id 38AB013C457 for ; Tue, 3 Apr 2007 15:18:02 +0000 (UTC) (envelope-from drew@mykitchentable.net) Received: (qmail 31569 invoked from network); 3 Apr 2007 08:18:01 -0700 Received: by simscan 1.1.0 ppid: 31471, pid: 31472, t: 11.8414s scanners: regex: 1.1.0 attach: 1.1.0 clamav: 0.84/m:42/d:2665 spam: 3.0.3 Received: from unknown (HELO blacklamb.mykitchentable.net) (66.205.146.210) by qsmtp4 with SMTP; 3 Apr 2007 08:17:49 -0700 Received: from [192.168.25.6] (unknown [192.168.25.6]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by blacklamb.mykitchentable.net (Postfix) with ESMTP id 3AAC8164AE4; Tue, 3 Apr 2007 08:17:48 -0700 (PDT) Message-ID: <46127020.50207@mykitchentable.net> Date: Tue, 03 Apr 2007 08:17:52 -0700 From: Drew Tomlinson User-Agent: Thunderbird 1.5.0.10 (Windows/20070221) MIME-Version: 1.0 To: Dave References: <46117263.3060203@mykitchentable.net> <000701c77581$e13730b0$0200a8c0@satellite> In-Reply-To: <000701c77581$e13730b0$0200a8c0@satellite> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on qsmtp4.surewest.net X-Spam-Level: X-Spam-Status: No, score=-0.2 required=5.0 tests=AWL,BAYES_00, RCVD_IN_SORBS_DUL autolearn=no version=3.0.3 Cc: freebsd-pf@freebsd.org Subject: Re: Bacula and pf X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Apr 2007 15:18:02 -0000 On 4/2/2007 4:51 PM Dave wrote: > Hi Drew, > I can't remember the specific setting, but it's something heartbeat > in the file daemon's configuration file, that'll fix it. I'm currently > in the process of making a new server for my home network, so don't > have access to my configs at the moment or i'd be more specific. If > you don't find it let me know, and i'll dig them out. > Hth > Dave. Thanks for your reply. However I did find that and set the heartbeat to '1', thinking that would ensure that a timed out connection wasn't the problem. I then restarted the fd and tried again. Same problem. To further determine if there was some lag in the data stream, I used tcpdump on the actual interfaces of both machines and watched the output. Packets just whizzed by until the connection was broken. There were no pauses whatsoever. Thanks, Drew > > ----- Original Message ----- From: "Drew Tomlinson" > > To: > Sent: Monday, April 02, 2007 5:15 PM > Subject: Bacula and pf > > >> I run Bacula v1.38 on my home network. Ever since I moved from ipfw2 >> to pf, backups fail intermittently on my router due to "broken >> network pipes" usually after somewhere around 10 MB - 12 MB has been >> transfered. Thus small incremental backups are successful but larger >> full backups are not. I do not have this problem when I disable pf on >> the router, nor do I have problems when completing backups with other >> machines on my internal network. My setup looks like this: >> >> bacula director --------- router (client) >> 192.168.1.4 (fxp0) 192.168.1.2 (dc0) >> >> Communication takes place on ports 9102 and 9103. I captured this >> output from pflog0 after starting a backup: >> >> blacksheep# tcpdump -netttti pflog0 "( host blacksheep or blacklamb ) >> and ( port 9102 or port 9103 )" >> tcpdump: WARNING: pflog0: no IPv4 address assigned >> tcpdump: verbose output suppressed, use -v or -vv for full protocol >> decode >> listening on pflog0, link-type PFLOG (OpenBSD pflog file), capture >> size 96 bytes >> 2007-04-02 13:57:21.021122 rule 7/0(match): pass in on dc0: >> 192.168.1.4.52295 > 192.168.1.2.9102: S 2822997678:2822997678(0) win >> 65535 >> 2007-04-02 13:57:23.532037 rule 13/0(match): pass out on dc0: >> 192.168.1.2.64955 > 192.168.1.4.9103: S 2265048451:2265048451(0) win >> 65535 >> 2007-04-02 13:57:23.532323 rule 7/0(match): pass in on dc0: >> 192.168.1.4.9103 > 192.168.1.2.64955: S 3452777266:3452777266(0) ack >> 2265048452 win 65535 >> >> And the rules are: >> >> @7 pass in log on dc0 inet proto tcp from 192.168.1.0/24 to any >> modulate state queue(std_out, ack_out) >> @13 pass out log on dc0 inet all >> >> Any ideas why Bacula would have such a problem? Other things to check? >> >> Thanks, >> >> Drew -- Be a Great Magician! Visit The Alchemist's Warehouse http://www.alchemistswarehouse.com