Date: Mon, 6 Jun 2005 13:16:28 -0600 From: Nathan Kinkade <nkinkade@ub.edu.bz> To: ben@stonehenge-net.com Cc: freebsd-questions@freebsd.org Subject: Re: strange network behaviour Message-ID: <20050606191628.GA21690@gentoo-npk.bmp.ub> In-Reply-To: <21064.66.201.44.146.1118079993.squirrel@mailhenge.com> References: <21064.66.201.44.146.1118079993.squirrel@mailhenge.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--C7zPtVaVf+AK4Oqc Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Jun 06, 2005 at 10:46:33AM -0700, ben@stonehenge-net.com wrote: > on Friday i set up 4 old celeron boxes as DNS servers for a client. after > about 5 minutes, their ability to reach the network vanishes... they can't > ping their router, and inbound network traffic vanishes. rebooting fixes > the problem... for another ~ 5 min. >=20 > the only things running are chrooted bind, postfix, and webmin. ipfw is > on, with firewall_type=3D"open". i've also tried it with ipfw disabled. >=20 > The same thing happens with my laptop, which is also running 5-STABLE as > of about noon on friday. >=20 > I know this sounds like a network issue, but is there anything in the > system that might cause thist type of behavior? it doesn't seem to be the > hardware - my laptop is a pentium M centrino system with a bg nic, and > they're old Celeron 500 machines with fxp nics. >=20 > the kernel config is attached, in case i've done something really stupid > in there >=20 > thanks, >=20 > ben What is your default rule for IPFW? I once had a similar problem in a setup that included an IPFW machine in bridge mode. I would turn on the firewall and everything worked fine for about 5 or 10 minutes, after which everything broke down. The setup looked like this: [gateway (cisco)] <--> [ipfw (bridge mode)] <--> [internal net] It turns out what was happening was that the ipfw machine running in bridge mode with a default rule of deny was not allowing ARP requests to pass between the gateway and the internal net. As soon as the ARP entries expired on the internal net, access to the external network broke down because ARP lookups for the gateways IP address were failing because of the IPFW machine. In the end we had to set the default IPFW rule to accept and add two rules before that denying any TCP or UDP packets. I'm not sure if this has anything to do with your situation, but I though I'd throw it out there as one possiblity that involves IPFW. Nathan --C7zPtVaVf+AK4Oqc Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFCpKEMO0ZIEthSfkkRAlGvAJ4uhj7pAsRFkJOZwTKVle7pEJofQgCdFSHu lQouxGS0TewvcjKC8JFHiRI= =Hxh8 -----END PGP SIGNATURE----- --C7zPtVaVf+AK4Oqc--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050606191628.GA21690>