Limiting open port RST response from 247 to 200 packets per second

[István Szukács]

Hi!


lix at test:~$sysctl -a | grep net.inet.icmp.icmplim
net.inet.icmp.icmplim: 200
net.inet.icmp.icmplim_output: 1


Regards,
Istvan

On Fri, Feb 6, 2009 at 2:44 PM, Alex Dehaini <alexdehaini at gmail.com> wrote:

> Hi Guys,
>
> I have some issues with Squid on Freebsd. I am running FreeBSD release 4.9
> and Squid version 2.5.
>
> I have setup FreeBSD as a bridge so that all traffic from my network can
> transparently pass through the FreeBSD server. I am running Squid on the
> same server and I created an ipfw rule to redirect port 80 to port 3128.
>
> Normally, when Squid is not started - we see traffic close to 30MB flowing
> through the server. Immediately I start squid, the traffic drops to half
> and
> sometimes lower and stays there. When this happens, I have a lot of clients
> that will call and complain they can't access the Internet. At the same
> time, I get these log messages
>
> *Feb  5 20:39:44 myserver /kernel: Limiting open port RST response from 247
> to 200 packets per second
> Feb  5 20:39:44 myserver /kernel: Limiting open port RST response from 247
> to 200 packets per second
> Feb  5 20:39:45 myserver /kernel: Limiting open port RST response from 239
> to 200 packets per second
> Feb  5 20:39:45 myserver /kernel: Limiting open port RST response from 239
> to 200 packets per second
> Feb  5 20:39:46 myserver /kernel: Limiting open port RST response from 273
> to 200 packets per second
> Feb  5 20:39:46 myserver /kernel: Limiting open port RST response from 273
> to 200 packets per second
> Feb  5 20:39:47 myserver /kernel: Limiting open port RST response from 228
> to 200 packets per second
> Feb  5 20:39:47 myserver /kernel: Limiting open port RST response from 228
> to 200 packets per second
> Feb  5 20:39:48 myserver /kernel: Limiting open port RST response from 225
> to 200 packets per second
> Feb  5 20:39:48 myserver /kernel: Limiting open port RST response from 225
> to 200 packets per second
> Feb  5 20:39:49 myserver /kernel: Limiting open port RST response from 244
> to 200 packets per second
> Feb  5 20:39:49 myserver /kernel: Limiting open port RST response from 244
> to 200 packets per second
> Feb  5 20:39:50 myserver /kernel: Limiting open port RST response from 259
> to 200 packets per second
> Feb  5 20:39:50 myserver /kernel: Limiting open port RST response from 259
> to 200 packets per second
> Feb  5 20:39:51 myserver /kernel: Limiting open port RST response from 234
> to 200 packets per second
> Feb  5 20:39:51 myserver /kernel: Limiting open port RST response from 234
> to 200 packets per second
> Feb  5 20:39:52 myserver /kernel: Limiting open port RST response from 243
> to 200 packets per second
> Feb  5 20:39:52 myserver /kernel: Limiting open port RST response from 243
> to 200 packets per second
> Feb  5 20:39:53 myserver /kernel: Limiting open port RST response from 218
> to 200 packets per second
> Feb  5 20:39:53 myserver /kernel: Limiting open port RST response from 218
> to 200 packets per second
> Feb  5 20:39:55 myserver /kernel: Limiting open port RST response from 233
> to 200 packets per second
> Feb  5 20:39:55 myserver /kernel: Limiting open port RST response from 233
> to 200 packets per second
> Feb  5 20:39:56 myserver /kernel: Limiting open port RST response from 241
> to 200 packets per second
> Feb  5 20:39:56 myserver /kernel: Limiting open port RST response from 241
> to 200 packets per second
> Feb  5 20:39:57 myserver /kernel: Limiting open port RST response from 220
> to 200 packets per second
> Feb  5 20:39:57 myserver /kernel: Limiting open port RST response from 220
> to 200 packets per second
> Feb  5 20:39:58 myserver /kernel: Limiting open port RST response from 206
> to 200 packets per second
> Feb  5 20:39:58 myserver /kernel: Limiting open port RST response from 206
> to 200 packets per second
> Feb  5 20:40:01 myserver /kernel: Limiting open port RST response from 223
> to 200 packets per second
> Feb  5 20:40:01 myserver /kernel: Limiting open port RST response from 223
> to 200 packets per second*
>
> When I stop Squid, everything returns to normal. Any idea what is causing
> this. I will appreciate any help.
>
> Thanks
>
> --
> Alex Dehaini
> Developer
> Site - www.alexdehaini.com
> Email - alexdehaini at gmail.com
> _______________________________________________
> freebsd-performance at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-performance
> To unsubscribe, send any mail to "
> freebsd-performance-unsubscribe at freebsd.org"
>



-- 
the sun shines for all