From owner-freebsd-stable Wed May 31 22:33:38 2000 Delivered-To: freebsd-stable@freebsd.org Received: from info.iet.unipi.it (info.iet.unipi.it [131.114.9.184]) by hub.freebsd.org (Postfix) with ESMTP id 8A99C37B93A for ; Wed, 31 May 2000 22:33:33 -0700 (PDT) (envelope-from luigi@info.iet.unipi.it) Received: (from luigi@localhost) by info.iet.unipi.it (8.9.3/8.9.3) id HAA64286; Thu, 1 Jun 2000 07:33:20 +0200 (CEST) (envelope-from luigi) From: Luigi Rizzo Message-Id: <200006010533.HAA64286@info.iet.unipi.it> Subject: Re: 'stalls' from ipfw-stateful box on network connects In-Reply-To: <200006010110.LAA04298@asuncion.dstc.edu.au> from George Michaelson at "Jun 1, 2000 11:10:16 am" To: George Michaelson Date: Thu, 1 Jun 2000 07:33:20 +0200 (CEST) Cc: freebsd-stable@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL61 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > I am testing a FreeBSD-4.0 stable machine as a firewall, and > have a reasonably complex ipfw ruleset that probably does > invoke some stateful rules. "probably" ??? > ssh and telnet sessions to this box appear to go into a stalled > state, where there is a 30sec pause before they re-awake and > respond to user input. > > pinging the interface can wake them up again, which is why I > suspect its something in the ipfw engine. actually i'd rather suspect the interface! more details maybe would help ? cheers luigi > now clearly, for a box which is shuffling bits frequently this > wouldn't be a problem because there'd be enough through-traffic > to keep things ticking over. > > am I mis-diagnosing things? is this also visible as a side-effect > of apm or other stuff? > > what else apart from ipfw/state can make connects to a box hang > if idle for more than a few minutes? > > cheers > -George > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message