Date: Fri, 30 May 2008 05:46:17 -0400 From: Robert Blayzor <rblayzor.bulk@inoc.net> To: freebsd-stable@freebsd.org Subject: Re: Sockets stuck in FIN_WAIT_1 Message-ID: <9DBF00BA-5FD1-402A-8448-0D33B694EE1F@inoc.net> In-Reply-To: <Pine.BSF.3.96.1080530181243.25862A-100000@gaia.nimnet.asn.au> References: <Pine.BSF.3.96.1080530181243.25862A-100000@gaia.nimnet.asn.au>
next in thread | previous in thread | raw e-mail | index | archive | help
On May 30, 2008, at 4:41 AM, Ian Smith wrote: > Without debating your stateful alternative - either should work fine > for > TCP applications - this allowed inbound icmp packets for types > 0,3,8,11 > but no outbound icmp at all (assuming your firewall defaults to deny). Switching the ipfw rules over to be stateful did not help, the server just wasn't busy enough. Overnight the FIN_WAIT_1's continued to pile up to over 600... and I'm sure they'll just keep going up until I have to reboot the box again. However Tod's suggestion to use a small sh script and tcpdrop seems to at least put a band-aid on things, so I don't have to reboot now. -- Robert Blayzor, BOFH INOC, LLC rblayzor@inoc.net http://www.inoc.net/~rblayzor/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9DBF00BA-5FD1-402A-8448-0D33B694EE1F>