From owner-freebsd-questions@FreeBSD.ORG Mon Jan 17 03:10:30 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 943F216A4CE for ; Mon, 17 Jan 2005 03:10:30 +0000 (GMT) Received: from obsecurity.dyndns.org (CPE0050040655c8-CM00111ae02aac.cpe.net.cable.rogers.com [69.199.47.57]) by mx1.FreeBSD.org (Postfix) with ESMTP id 45C8D43D1D for ; Mon, 17 Jan 2005 03:10:30 +0000 (GMT) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id F1607513CE; Sun, 16 Jan 2005 19:10:28 -0800 (PST) Date: Sun, 16 Jan 2005 19:10:28 -0800 From: Kris Kennaway To: "Lin, Tsung Ching" Message-ID: <20050117031028.GA16978@xor.obsecurity.org> References: <1105930887.22726.18.camel@tclin> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="mYCpIKhGyMATD0i+" Content-Disposition: inline In-Reply-To: <1105930887.22726.18.camel@tclin> User-Agent: Mutt/1.4.2.1i cc: freebsd-questions@freebsd.org Subject: Re: System Freeze with freebsd-5.3-Release-p5 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jan 2005 03:10:30 -0000 --mYCpIKhGyMATD0i+ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Jan 17, 2005 at 11:01:27AM +0800, Lin, Tsung Ching wrote: > #########################################################################= ######## > # KERNCONF > include SMP >=20 > ident IBM-XSERIES-335 >=20 > options IPFIREWALL #firewall > options IPFIREWALL_VERBOSE #enable logging to syslogd(8) > #options IPFIREWALL_VERBOSE_LIMIT=3D100 #limit verbosity > #options IPFIREWALL_DEFAULT_TO_ACCEPT #allow everything by > default > options IPFIREWALL_FORWARD #packet destination changes > options IPV6FIREWALL #firewall for IPv6 > options IPV6FIREWALL_VERBOSE > #options IPV6FIREWALL_VERBOSE_LIMIT=3D100 > #options IPV6FIREWALL_DEFAULT_TO_ACCEPT > options IPDIVERT #divert sockets > options IPSTEALTH #support for stealth forwarding > options TCP_DROP_SYNFIN #drop TCP packets with SYN+FIN > #options TCP_SIGNATURE #include support for RFC 2385 > options DUMMYNET > options BRIDGE > options ZERO_COPY_SOCKETS Some of these are suspicious: > options MBUF_STRESS_TEST This is designed to induce failures in buggy code. You might be provoking a problem you wouldn't otherwise see in normal operation. > options TCPDEBUG "This is undocumented" i.e. you probably don't want it. > options MROUTING # Multicast routing > options PIM # Protocol Independent Multicast These two are not widely used, so it's conceivable that they may be buggy. Take them all out (if you need the last 2, still try without them to see if the problem is there). Kris --mYCpIKhGyMATD0i+ Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) iD8DBQFB6yykWry0BWjoQKURAgtQAJoCCeKRLOH3WIFHYerljViz1ZOjOwCgoEb8 SrKd+RCxCg2Vzl7QJhOFkMk= =X8QD -----END PGP SIGNATURE----- --mYCpIKhGyMATD0i+--