Date: Tue, 26 Apr 2005 03:33:45 -0500 From: "Fafa Diliha Romanova" <fteg@london.com> To: "Tomas Quintero" <tomasq@gmail.com> Cc: questions@freebsd.org Subject: Re: It keeps CRrrASHING!! Message-ID: <20050426083345.687E24BEAD@ws1-1.us4.outblaze.com>
next in thread | raw e-mail | index | archive | help
Hello Tomas! It must be PF. Whenever I download, it crashes. Everytime I reboot after crash, I have to type: # pfctl -F a ; pfctl -Nf /etc/pf.conf ; pfctl -sr For my int_if to get Internet access. Anyway, here is my pf.conf: int_if=3D"ep0" ext_if=3D"lnc0" # *** Options # set block-policy drop # *** Scrub incoming packets # scrub in all # *** NAT # nat on $ext_if from $int_if:network to any -> ($ext_if) rdr on $int_if proto tcp from any to any \ port 21 -> 127.0.0.1 port 8021 # *** Default deny policy # block drop log all # *** Pass loopback traffic # pass quick on lo0 all # *** Outgoing # # pass out on $ext_if inet proto tcp \ from any to any flags S/SA keep state pass out on $ext_if inet proto { udp, icmp } \ from ($ext_if) to any keep state # *** Bootstrap # pass out on $ext_if inet proto udp \ from any port 68 to any port 67 keep state # *** DNS and NTP # pass out on $ext_if inet proto udp \ from ($ext_if) to any port { 53, 123 } keep state # *** SSH and HTTP # pass in on $ext_if inet proto tcp \ from any to ($ext_if) port { 22, 80 } flags S/SA keep state # *** Active FTP # pass in on $ext_if inet proto tcp \ from port 20 to ($ext_if) user proxy flags S/SA keep state Thanks, Fafa ----- Original Message ----- From: "Tomas Quintero" <tomasq@gmail.com> To: "Fafa Diliha Romanova" <fteg@london.com> Subject: Re: It keeps CRrrASHING!! Date: Mon, 25 Apr 2005 12:43:35 -0400 >=20 > On 4/25/05, Fafa Diliha Romanova <fteg@london.com> wrote: > > Hey! > > > > I am running FreeBSD 5.4-STABLE on a Pentium 120. > > > > Since three days ago, it has been crashing regularly, leaving me with > > no choice but to shut it off and back on. I have absolutely no idea what > > might be wrong. The server has a lot of free HD space. It ain't > > experiencing no overload that I'm aware of. Everything should be smooth. > > > > Maybe it's the network interface. Or the fact that I just replaced > > IPFW with PF. Because this only seems to happen when I surf the net and > > download stuff from the workstation behind it. >=20 > It may also be your PF.conf or your NIC. I am running a 5.3-RELEASE > box w/ PF routing 3 DSL circuits. Upon early installation, it was > extremely slow on one circuit which was determined to be a NIC. Later > on, the system would hardlock as soon as a user attempted to access > the internet. What was occuring to my knowledge is there is a bug > associated with static-port in the NAT line. You may consider posting > part if not most of your pf.conf to see if any issues could be > underlying in it. >=20 >=20 > -- > -Tomas Quintero --=20 ___________________________________________________________ Sign-up for Ads Free at Mail.com http://promo.mail.com/adsfreejump.htm
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050426083345.687E24BEAD>