System Freeze with freebsd-5.3-Release-p5

Kris Kennaway kris at obsecurity.org
Sun Jan 16 19:10:30 PST 2005


On Mon, Jan 17, 2005 at 11:01:27AM +0800, Lin, Tsung Ching wrote:

> #################################################################################
> # KERNCONF
> include         SMP
> 
> ident           IBM-XSERIES-335
> 
> options         IPFIREWALL              #firewall
> options         IPFIREWALL_VERBOSE      #enable logging to syslogd(8)
> #options         IPFIREWALL_VERBOSE_LIMIT=100    #limit verbosity
> #options         IPFIREWALL_DEFAULT_TO_ACCEPT    #allow everything by
> default
> options         IPFIREWALL_FORWARD      #packet destination changes
> options         IPV6FIREWALL            #firewall for IPv6
> options         IPV6FIREWALL_VERBOSE
> #options         IPV6FIREWALL_VERBOSE_LIMIT=100
> #options         IPV6FIREWALL_DEFAULT_TO_ACCEPT
> options         IPDIVERT                #divert sockets
> options         IPSTEALTH               #support for stealth forwarding
> options         TCP_DROP_SYNFIN         #drop TCP packets with SYN+FIN
> #options        TCP_SIGNATURE           #include support for RFC 2385
> options         DUMMYNET
> options         BRIDGE
> options         ZERO_COPY_SOCKETS

Some of these are suspicious:

> options         MBUF_STRESS_TEST

This is designed to induce failures in buggy code.  You might be
provoking a problem you wouldn't otherwise see in normal operation.

> options         TCPDEBUG

"This is undocumented"

i.e. you probably don't want it.

> options         MROUTING                # Multicast routing
> options         PIM                     # Protocol Independent Multicast

These two are not widely used, so it's conceivable that they may be
buggy.

Take them all out (if you need the last 2, still try without them to
see if the problem is there).

Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20050116/5d82c0f9/attachment.bin


More information about the freebsd-questions mailing list