From owner-freebsd-questions@FreeBSD.ORG Sat May 7 12:51:40 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2F56C16A4DA for ; Sat, 7 May 2005 12:51:40 +0000 (GMT) Received: from top.daemonsecurity.com (FW-182-254.go.retevision.es [62.174.254.182]) by mx1.FreeBSD.org (Postfix) with ESMTP id AC51C43D75 for ; Sat, 7 May 2005 12:51:39 +0000 (GMT) (envelope-from norgaard@locolomo.org) Received: from [192.168.0.32] (charm.daemonsecurity.com [192.168.0.32]) by top.daemonsecurity.com (Postfix) with ESMTP id 873DCFD067 for ; Sat, 7 May 2005 14:51:38 +0200 (CEST) Message-ID: <427CB9D4.8040802@locolomo.org> Date: Sat, 07 May 2005 14:51:32 +0200 From: =?ISO-8859-1?Q?Erik_N=F8rgaard?= Organization: Locolomo.ORG User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.5) Gecko/20050314 X-Accept-Language: en, en-us, en-gb, da, fr, de, it, es MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <200505070145.50210.danny@ricin.com> In-Reply-To: <200505070145.50210.danny@ricin.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: Spontaneous reboots X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 May 2005 12:51:40 -0000 Thank you for your replies. I got a hint off-list that this could be ipfilter: http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/79988 Looking at my first kernel trap error, I see I also had the (swi1: net) and on -CURRENT, I can't compile kernel with IPFILTER enabled, nor does it compile as a module. Shifting to packet filter seems to have solved the problem, system up > 24h and I have my mail again :-) Regarding the illicit mail deliveries I mentioned, this persists, so I am exited to see that(if?) my system sustains it (I have just set the MX record back). It's a trivial mail-bombing of non-existing random addresses on my server. I have a perl script well underway for analysing the maillog, counting number of rejections and looking up abuse adresses with whois - all nicely stored in an xml file for later use (no - I refuse to implement automatic mail notification to the abuse addresses). If anyone is interested, let me know. Cheers, Erik -- Ph: +34.666334818 web: http://www.locolomo.org S/MIME Certificate: http://www.locolomo.org/crt/2004071206.crt Subject ID: A9:76:7A:ED:06:95:2B:8D:48:97:CE:F2:3F:42:C8:F2:22:DE:4C:B9 Fingerprint: 4A:E8:63:38:46:F6:9A:5D:B4:DC:29:41:3F:62:D3:0A:73:25:67:C2