Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Nov 2014 16:51:14 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-pf@FreeBSD.org
Subject:   [Bug 182401] [pf] pf state for some IPs reaches 4294967295 suspicously
Message-ID:  <bug-182401-17777-P7OvWTbO9s@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-182401-17777@https.bugs.freebsd.org/bugzilla/>
References:  <bug-182401-17777@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=182401

Johan Schuijt <johan@300.nl> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |johan@300.nl

--- Comment #5 from Johan Schuijt <johan@300.nl> ---
I can confirm that we are seeing the same issues on both 10.0 and 10.1 on a DNS
cluster. We've had to disable source-tracking to prevent random ip's from being
blocked.

When we clear the state tracking via pfcsl -FS a blocked IP immediately starts
working again.

-- 
You are receiving this mail because:
You are the assignee for the bug.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-182401-17777-P7OvWTbO9s>