From owner-freebsd-questions@FreeBSD.ORG Tue Apr 26 08:31:38 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8821116A4CE for ; Tue, 26 Apr 2005 08:31:38 +0000 (GMT) Received: from webmail-outgoing.us4.outblaze.com (webmail-outgoing.us4.outblaze.com [205.158.62.67]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4ECAE43D31 for ; Tue, 26 Apr 2005 08:31:38 +0000 (GMT) (envelope-from fteg@london.com) Received: from unknown (unknown [192.168.9.180])15B0018001B6 for ; Tue, 26 Apr 2005 08:31:53 +0000 (GMT) X-OB-Received: from unknown (205.158.62.49) by wfilter.us4.outblaze.com; 26 Apr 2005 08:32:27 -0000 Received: by ws1-1.us4.outblaze.com (Postfix, from userid 1001) id 687E24BEAD; Tue, 26 Apr 2005 08:33:45 +0000 (GMT) Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Received: from [213.187.181.70] by ws1-1.us4.outblaze.com with http for fteg@london.com; Tue, 26 Apr 2005 03:33:45 -0500 From: "Fafa Diliha Romanova" To: "Tomas Quintero" Date: Tue, 26 Apr 2005 03:33:45 -0500 X-Originating-Ip: 213.187.181.70 X-Originating-Server: ws1-1.us4.outblaze.com Message-Id: <20050426083345.687E24BEAD@ws1-1.us4.outblaze.com> cc: questions@freebsd.org Subject: Re: It keeps CRrrASHING!! X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Apr 2005 08:31:38 -0000 Hello Tomas! It must be PF. Whenever I download, it crashes. Everytime I reboot after crash, I have to type: # pfctl -F a ; pfctl -Nf /etc/pf.conf ; pfctl -sr For my int_if to get Internet access. Anyway, here is my pf.conf: int_if=3D"ep0" ext_if=3D"lnc0" # *** Options # set block-policy drop # *** Scrub incoming packets # scrub in all # *** NAT # nat on $ext_if from $int_if:network to any -> ($ext_if) rdr on $int_if proto tcp from any to any \ port 21 -> 127.0.0.1 port 8021 # *** Default deny policy # block drop log all # *** Pass loopback traffic # pass quick on lo0 all # *** Outgoing # # pass out on $ext_if inet proto tcp \ from any to any flags S/SA keep state pass out on $ext_if inet proto { udp, icmp } \ from ($ext_if) to any keep state # *** Bootstrap # pass out on $ext_if inet proto udp \ from any port 68 to any port 67 keep state # *** DNS and NTP # pass out on $ext_if inet proto udp \ from ($ext_if) to any port { 53, 123 } keep state # *** SSH and HTTP # pass in on $ext_if inet proto tcp \ from any to ($ext_if) port { 22, 80 } flags S/SA keep state # *** Active FTP # pass in on $ext_if inet proto tcp \ from port 20 to ($ext_if) user proxy flags S/SA keep state Thanks, Fafa ----- Original Message ----- From: "Tomas Quintero" To: "Fafa Diliha Romanova" Subject: Re: It keeps CRrrASHING!! Date: Mon, 25 Apr 2005 12:43:35 -0400 >=20 > On 4/25/05, Fafa Diliha Romanova wrote: > > Hey! > > > > I am running FreeBSD 5.4-STABLE on a Pentium 120. > > > > Since three days ago, it has been crashing regularly, leaving me with > > no choice but to shut it off and back on. I have absolutely no idea what > > might be wrong. The server has a lot of free HD space. It ain't > > experiencing no overload that I'm aware of. Everything should be smooth. > > > > Maybe it's the network interface. Or the fact that I just replaced > > IPFW with PF. Because this only seems to happen when I surf the net and > > download stuff from the workstation behind it. >=20 > It may also be your PF.conf or your NIC. I am running a 5.3-RELEASE > box w/ PF routing 3 DSL circuits. Upon early installation, it was > extremely slow on one circuit which was determined to be a NIC. Later > on, the system would hardlock as soon as a user attempted to access > the internet. What was occuring to my knowledge is there is a bug > associated with static-port in the NAT line. You may consider posting > part if not most of your pf.conf to see if any issues could be > underlying in it. >=20 >=20 > -- > -Tomas Quintero --=20 ___________________________________________________________ Sign-up for Ads Free at Mail.com http://promo.mail.com/adsfreejump.htm