ftp-proxy problem

Roman Gorohov. roma.a.g at gmail.com
Thu Dec 7 05:32:31 PST 2006


Hello, all.
We got a heavy load server with pf mostly doing nat and redirection.
[root at fw]#uname -r
6.1-RELEASE
[root at fw]#pfctl -sr | wc -l
     546
[root at fw]#pfctl -ss | wc -l
    9452
Traffic is about 8 Mb/s.
/etc/inetd.conf: ftp-proxy       stream  tcp     nowait  root    /usr/libexec/ftp-proxy  ftp-proxy -u proxy -m 55000 -M 57000 -t 180
/etc/pf.conf: rdr on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021 
Traffic is about 8 megabit/s.
All working ok until we turn on ftp-proxy. 
After that(and some time) server suddenly hang. 
Just hang, no kernel trap and clear console, didn't responding for any
key(I don't know how might that be, never expect it from BSD).
Meanwhile I can see one event relating to that - ftp-proxy.
And its not hardware issue, we got two identical server(hp dl 380, afair) working in carp, and both hanging. 
Last messages:
Dec  7 15:14:42 fw inetd[640]: ftp-proxy from 10.10.1.70 exceeded counts/min (limit 60/min)
Dec  7 15:14:44 fw inetd[640]: ftp-proxy from 10.10.1.70 exceeded counts/min (limit 60/min)
Dec  7 15:14:45 fw ftp-proxy[64195]: xfer_data (server to client): failed (Connection reset by peer) with flags 00
Dec  7 15:14:55 fw ftp-proxy[64196]: xfer_data (server to client): failed (Connection reset by peer) with flags 00
Dec  7 15:32:31 fw syslogd: kernel boot file is /boot/kernel/kernel

Are there any known issue with ftp-proxy+pf?
What should we do? 




More information about the freebsd-pf mailing list