It keeps CRrrASHING!!

[Fafa Diliha Romanova]

Hello Tomas!

It must be PF.
Whenever I download, it crashes.

Everytime I reboot after crash, I have to type:

# pfctl -F a ; pfctl -Nf /etc/pf.conf ; pfctl -sr

For my int_if to get Internet access.
Anyway, here is my pf.conf:

int_if="ep0"
ext_if="lnc0"

# *** Options
#
set     block-policy drop

# *** Scrub incoming packets
#
scrub   in all

# *** NAT
#
nat     on $ext_if from $int_if:network to any -> ($ext_if)
rdr     on $int_if proto tcp from any to any \
        port 21 -> 127.0.0.1 port 8021

# *** Default deny policy
#
block   drop log all

# *** Pass loopback traffic
#
pass    quick on lo0 all

# *** Outgoing
#
#
pass    out on $ext_if inet proto tcp \
        from any to any flags S/SA keep state
pass    out on $ext_if inet proto { udp, icmp } \
        from ($ext_if) to any keep state

# *** Bootstrap
#
pass    out on $ext_if inet proto udp \
        from any port 68 to any port 67 keep state

# *** DNS and NTP
#
pass    out on $ext_if inet proto udp \
        from ($ext_if) to any port { 53, 123 } keep state

# *** SSH and HTTP
#
pass    in on $ext_if inet proto tcp \
        from any to ($ext_if) port { 22, 80 } flags S/SA keep state

# *** Active FTP
#
pass    in on $ext_if inet proto tcp \
        from port 20 to ($ext_if) user proxy flags S/SA keep state

Thanks,
Fafa

----- Original Message -----
From: "Tomas Quintero" <tomasq at gmail.com>
To: "Fafa Diliha Romanova" <fteg at london.com>
Subject: Re: It keeps CRrrASHING!!
Date: Mon, 25 Apr 2005 12:43:35 -0400

> 
> On 4/25/05, Fafa Diliha Romanova <fteg at london.com> wrote:
> > Hey!
> >
> > I am running FreeBSD 5.4-STABLE on a Pentium 120.
> >
> > Since three days ago, it has been crashing regularly, leaving me with
> > no choice but to shut it off and back on. I have absolutely no idea what
> > might be wrong. The server has a lot of free HD space. It ain't
> > experiencing no overload that I'm aware of. Everything should be smooth.
> >
> > Maybe it's the network interface. Or the fact that I just replaced
> > IPFW with PF. Because this only seems to happen when I surf the net and
> > download stuff from the workstation behind it.
> 
> It may also be your PF.conf or your NIC. I am running a 5.3-RELEASE
> box w/ PF routing 3 DSL circuits. Upon early installation, it was
> extremely slow on one circuit which was determined to be a NIC. Later
> on, the system would hardlock as soon as a user attempted to access
> the internet. What was occuring to my knowledge is there is a bug
> associated with static-port in the NAT line. You may consider posting
> part if not most of your pf.conf to see if any issues could be
> underlying in it.
> 
> 
> --
> -Tomas Quintero

-- 
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm