It keeps CRrrASHING!!
Fafa Diliha Romanova
fteg at london.com
Tue Apr 26 01:31:38 PDT 2005
Hello Tomas!
It must be PF.
Whenever I download, it crashes.
Everytime I reboot after crash, I have to type:
# pfctl -F a ; pfctl -Nf /etc/pf.conf ; pfctl -sr
For my int_if to get Internet access.
Anyway, here is my pf.conf:
int_if="ep0"
ext_if="lnc0"
# *** Options
#
set block-policy drop
# *** Scrub incoming packets
#
scrub in all
# *** NAT
#
nat on $ext_if from $int_if:network to any -> ($ext_if)
rdr on $int_if proto tcp from any to any \
port 21 -> 127.0.0.1 port 8021
# *** Default deny policy
#
block drop log all
# *** Pass loopback traffic
#
pass quick on lo0 all
# *** Outgoing
#
#
pass out on $ext_if inet proto tcp \
from any to any flags S/SA keep state
pass out on $ext_if inet proto { udp, icmp } \
from ($ext_if) to any keep state
# *** Bootstrap
#
pass out on $ext_if inet proto udp \
from any port 68 to any port 67 keep state
# *** DNS and NTP
#
pass out on $ext_if inet proto udp \
from ($ext_if) to any port { 53, 123 } keep state
# *** SSH and HTTP
#
pass in on $ext_if inet proto tcp \
from any to ($ext_if) port { 22, 80 } flags S/SA keep state
# *** Active FTP
#
pass in on $ext_if inet proto tcp \
from port 20 to ($ext_if) user proxy flags S/SA keep state
Thanks,
Fafa
----- Original Message -----
From: "Tomas Quintero" <tomasq at gmail.com>
To: "Fafa Diliha Romanova" <fteg at london.com>
Subject: Re: It keeps CRrrASHING!!
Date: Mon, 25 Apr 2005 12:43:35 -0400
>
> On 4/25/05, Fafa Diliha Romanova <fteg at london.com> wrote:
> > Hey!
> >
> > I am running FreeBSD 5.4-STABLE on a Pentium 120.
> >
> > Since three days ago, it has been crashing regularly, leaving me with
> > no choice but to shut it off and back on. I have absolutely no idea what
> > might be wrong. The server has a lot of free HD space. It ain't
> > experiencing no overload that I'm aware of. Everything should be smooth.
> >
> > Maybe it's the network interface. Or the fact that I just replaced
> > IPFW with PF. Because this only seems to happen when I surf the net and
> > download stuff from the workstation behind it.
>
> It may also be your PF.conf or your NIC. I am running a 5.3-RELEASE
> box w/ PF routing 3 DSL circuits. Upon early installation, it was
> extremely slow on one circuit which was determined to be a NIC. Later
> on, the system would hardlock as soon as a user attempted to access
> the internet. What was occuring to my knowledge is there is a bug
> associated with static-port in the NAT line. You may consider posting
> part if not most of your pf.conf to see if any issues could be
> underlying in it.
>
>
> --
> -Tomas Quintero
--
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm
More information about the freebsd-questions
mailing list