Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 13 Jun 2002 01:14:42 +0200
From:      Alex <freebsd@akruijff.dds.nl>
To:        "FreeBSD-List" <freebsd-expnet@expnet.net>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: IPFW Problem
Message-ID:  <17750733731.20020613011442@dds.nl>
In-Reply-To: <003701c20e89$88689960$64afa8c0@expnet.net>
References:  <003701c20e89$88689960$64afa8c0@expnet.net>

next in thread | previous in thread | raw e-mail | index | archive | help


Dear FreeBSD-List,

Saturday, June 08, 2002, 3:12:17 AM, you wrote:

FL> Can anyone tell me what this means ? The box is acting as a router and everytime this happens the box just hangs.

FL> Jun  6 23:32:37 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 838:1220@1480)
FL> Jun  6 23:32:37 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 1606:1220@1480)
FL> Jun  6 23:32:38 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 2630:1220@1480)
FL> Jun  6 23:32:38 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 3398:1220@1480)
FL> Jun  6 23:32:39 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 4422:1220@1480)
FL> Jun  6 23:32:39 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 5190:1220@1480)
FL> Jun  6 23:32:40 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 6214:1220@1480)
FL> Jun  6 23:32:40 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 7238:1220@1480)
FL> Jun  6 23:32:41 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 8262:1220@1480)
FL> Jun  6 23:32:41 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 9030:1220@1480)
FL> Jun  6 23:32:42 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 10054:1220@1480)
FL> Jun  6 23:32:42 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 10822:1220@1480)
FL> Jun  6 23:32:43 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 11846:1220@1480)
FL> Jun  6 23:32:43 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 12614:1220@1480)
FL> Jun  6 23:32:44 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 13382:1220@1480)
FL> Jun  6 23:32:44 edge-gw /kernel: ipfw: 14803 Deny UDP 68.7.76.31 xx.xx.xx.xx in via fxp0 (frag 14150:1220@1480)

It seems your firewall is dropping a UDP packets. My guess is that you
are under a DOS attack. You could built a couple thing in a kernel to
help cope with there. Check out the handbook for this.

FL> edge-gw# uname -a
FL> FreeBSD edge-gw 4.6-PRERELEASE FreeBSD 4.6-PRERELEASE #3:

FL> thanks
FL> -Brian

Could you set your mailer to send plain text? These are a lot smaller
resulting a faster connection times for those using a phone. Tanks


-- 
Best regards,
Alex

The FreeBSD handbook
www.freebsd.org/handbook

How to get best results from the FreeBSD- questions mailing list
http://www.freebsd.org/doc/en_US.ISO8859-1/articles/freebsd-questions/index.html

Alternative:
http://www.lemis.com/questions.html


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?17750733731.20020613011442>