From owner-freebsd-stable@FreeBSD.ORG Thu Jun 30 21:37:08 2005 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3B50516A41C for ; Thu, 30 Jun 2005 21:37:08 +0000 (GMT) (envelope-from kris@obsecurity.org) Received: from obsecurity.dyndns.org (CPE0050040655c8-CM00111ae02aac.cpe.net.cable.rogers.com [69.194.102.232]) by mx1.FreeBSD.org (Postfix) with ESMTP id 01FF943D49 for ; Thu, 30 Jun 2005 21:37:08 +0000 (GMT) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id ACB7451215; Thu, 30 Jun 2005 17:37:06 -0400 (EDT) Date: Thu, 30 Jun 2005 17:37:06 -0400 From: Kris Kennaway To: Matt Juszczak Message-ID: <20050630213706.GA44734@xor.obsecurity.org> References: <20050630164529.D65760@neptune.atopia.net> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="45Z9DzgjV8m4Oswq" Content-Disposition: inline In-Reply-To: <20050630164529.D65760@neptune.atopia.net> User-Agent: Mutt/1.4.2.1i Cc: freebsd-stable@freebsd.org Subject: Re: Two Options: which to choose? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jun 2005 21:37:08 -0000 --45Z9DzgjV8m4Oswq Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Jun 30, 2005 at 05:07:59PM -0400, Matt Juszczak wrote: > Hi all, >=20 > Removing IPF for 5.4-STABLE seems to have made the boxes stable. I=20 > switched all the firewalls to PF and they haven't crashed since, its been= =20 > about 3 days now... (before they were crashing every 12 hours). Of course, the best thing would be to try and identify the cause of the problem and get it fixed. To do this, you need to proceed with the advice and patches previously given. If you really can't stay with 5.4 and try to work this to conclusion, I'd recommend going for something you know will work instead of diving in to a whole new untested environment with its own new set of potential problems to overcome. Kris --45Z9DzgjV8m4Oswq Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (FreeBSD) iD8DBQFCxGYCWry0BWjoQKURApdpAJ0WaIRK+NLxGJbr1IhFn7u8OkRxTQCgku8T YzTm2Poz7zCni+rYTG992a8= =QzAZ -----END PGP SIGNATURE----- --45Z9DzgjV8m4Oswq--