System Freeze with freebsd-5.3-Release-p5
Kris Kennaway
kris at obsecurity.org
Sun Jan 16 19:10:30 PST 2005
On Mon, Jan 17, 2005 at 11:01:27AM +0800, Lin, Tsung Ching wrote:
> #################################################################################
> # KERNCONF
> include SMP
>
> ident IBM-XSERIES-335
>
> options IPFIREWALL #firewall
> options IPFIREWALL_VERBOSE #enable logging to syslogd(8)
> #options IPFIREWALL_VERBOSE_LIMIT=100 #limit verbosity
> #options IPFIREWALL_DEFAULT_TO_ACCEPT #allow everything by
> default
> options IPFIREWALL_FORWARD #packet destination changes
> options IPV6FIREWALL #firewall for IPv6
> options IPV6FIREWALL_VERBOSE
> #options IPV6FIREWALL_VERBOSE_LIMIT=100
> #options IPV6FIREWALL_DEFAULT_TO_ACCEPT
> options IPDIVERT #divert sockets
> options IPSTEALTH #support for stealth forwarding
> options TCP_DROP_SYNFIN #drop TCP packets with SYN+FIN
> #options TCP_SIGNATURE #include support for RFC 2385
> options DUMMYNET
> options BRIDGE
> options ZERO_COPY_SOCKETS
Some of these are suspicious:
> options MBUF_STRESS_TEST
This is designed to induce failures in buggy code. You might be
provoking a problem you wouldn't otherwise see in normal operation.
> options TCPDEBUG
"This is undocumented"
i.e. you probably don't want it.
> options MROUTING # Multicast routing
> options PIM # Protocol Independent Multicast
These two are not widely used, so it's conceivable that they may be
buggy.
Take them all out (if you need the last 2, still try without them to
see if the problem is there).
Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20050116/5d82c0f9/attachment.bin
More information about the freebsd-questions
mailing list