From owner-freebsd-pf@FreeBSD.ORG Mon Apr 2 21:15:18 2007 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 20C0316A402 for ; Mon, 2 Apr 2007 21:15:18 +0000 (UTC) (envelope-from drew@mykitchentable.net) Received: from qsmtp1.mc.surewest.net (qsmtp.mc.surewest.net [66.60.130.145]) by mx1.freebsd.org (Postfix) with SMTP id 07F4713C44C for ; Mon, 2 Apr 2007 21:15:17 +0000 (UTC) (envelope-from drew@mykitchentable.net) Received: (qmail 5529 invoked from network); 2 Apr 2007 14:15:17 -0700 Received: by simscan 1.1.0 ppid: 5488, pid: 5489, t: 3.7431s scanners: regex: 1.1.0 attach: 1.1.0 clamav: 0.84/m:42/d:2665 spam: 3.0.3 Received: from unknown (HELO blacklamb.mykitchentable.net) (66.205.146.210) by qsmtp1 with SMTP; 2 Apr 2007 14:15:13 -0700 Received: from [192.168.25.6] (unknown [192.168.25.6]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by blacklamb.mykitchentable.net (Postfix) with ESMTP id DEEA5164AE1 for ; Mon, 2 Apr 2007 14:15:12 -0700 (PDT) Message-ID: <46117263.3060203@mykitchentable.net> Date: Mon, 02 Apr 2007 14:15:15 -0700 From: Drew Tomlinson User-Agent: Thunderbird 1.5.0.10 (Windows/20070221) MIME-Version: 1.0 To: freebsd-pf@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on qsmtp1.surewest.net X-Spam-Level: X-Spam-Status: No, score=-0.2 required=5.0 tests=AWL,BAYES_00, RCVD_IN_SORBS_DUL autolearn=no version=3.0.3 Subject: Bacula and pf X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Apr 2007 21:15:18 -0000 I run Bacula v1.38 on my home network. Ever since I moved from ipfw2 to pf, backups fail intermittently on my router due to "broken network pipes" usually after somewhere around 10 MB - 12 MB has been transfered. Thus small incremental backups are successful but larger full backups are not. I do not have this problem when I disable pf on the router, nor do I have problems when completing backups with other machines on my internal network. My setup looks like this: bacula director --------- router (client) 192.168.1.4 (fxp0) 192.168.1.2 (dc0) Communication takes place on ports 9102 and 9103. I captured this output from pflog0 after starting a backup: blacksheep# tcpdump -netttti pflog0 "( host blacksheep or blacklamb ) and ( port 9102 or port 9103 )" tcpdump: WARNING: pflog0: no IPv4 address assigned tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on pflog0, link-type PFLOG (OpenBSD pflog file), capture size 96 bytes 2007-04-02 13:57:21.021122 rule 7/0(match): pass in on dc0: 192.168.1.4.52295 > 192.168.1.2.9102: S 2822997678:2822997678(0) win 65535 2007-04-02 13:57:23.532037 rule 13/0(match): pass out on dc0: 192.168.1.2.64955 > 192.168.1.4.9103: S 2265048451:2265048451(0) win 65535 2007-04-02 13:57:23.532323 rule 7/0(match): pass in on dc0: 192.168.1.4.9103 > 192.168.1.2.64955: S 3452777266:3452777266(0) ack 2265048452 win 65535 And the rules are: @7 pass in log on dc0 inet proto tcp from 192.168.1.0/24 to any modulate state queue(std_out, ack_out) @13 pass out log on dc0 inet all Any ideas why Bacula would have such a problem? Other things to check? Thanks, Drew -- Be a Great Magician! Visit The Alchemist's Warehouse http://www.alchemistswarehouse.com