Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 16 Apr 2010 13:32:57 +0100
From:      Greg Hennessy <Greg.Hennessy@nviz.net>
To:        Gaurav Ghimire <gaurav@subisu.net.np>, "freebsd-pf@freebsd.org" <freebsd-pf@freebsd.org>
Subject:   RE: ping sendto: operation not permitted.
Message-ID:  <9E8D76EC267C9444AC737F649CBBAD902767E3BEDD@PEMEXMBXVS02.jellyfishnet.co.uk.local>
In-Reply-To: <4BC84F00.1060700@subisu.net.np>
References:  <4BC84F00.1060700@subisu.net.np>

next in thread | previous in thread | raw e-mail | index | archive | help

Running out of state table entries ? 

________________________________________
From: owner-freebsd-pf@freebsd.org [owner-freebsd-pf@freebsd.org] On Behalf Of Gaurav Ghimire [gaurav@subisu.net.np]
Sent: 16 April 2010 12:50
To: freebsd-pf@freebsd.org
Subject: ping sendto: operation not permitted.

Dear all,

I am lately having problems with my firewall. There had not been any
changes to the configuration and it had been working very fine. Out of
nowhere I believe that pf is now acting abnormal and is blocking
outgoing packets at random. It doesn't occur regular but I am getting
the ping sendto: operation not permitted error and also its delaying udp
queries to by dns servers that it generally protects. If I disable pf
using 'pfctl -d' things go to normal and there isn't any issue. I also
see connection  breaks when the pf itself tries to contact my ldap
server for information. Disabling pf makes everything go back to normal.
Any hint as where I should be looking would be highly appreciated. I
have been pulling my hairs literally lately.

Regards,

--
Gaurav

_______________________________________________
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9E8D76EC267C9444AC737F649CBBAD902767E3BEDD>