Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 26 Aug 2000 13:20:18 -0400 (EDT)
From:      jason <jason@welsh.dynip.com>
To:        freebsd-ipfw@freebsd.org
Subject:   telnet sessions getting stuck?
Message-ID:  <Pine.BSF.4.10.10008261316000.62453-100000@welsh.dynip.com>

next in thread | raw e-mail | index | archive | help
Im running  4.0-RELEASE FreeBSD 4.0-RELEASE #0
and its been running ipfw for over a hundred days without issue. I decided
to try to get the stateful inspection stuff working with ipfw and I have
gotten it to work, but now my telnet sessions to my freebsd server seem to
just hang after a few (less than 5) minutes of inactivity. I keep looking
in my logs, and the only thing suspicious I see is
Aug 26 13:11:41 welsh /kernel: invalid state: 0x3
Aug 26 13:11:44 welsh last message repeated 4 times

the telnet source and destination machine are both on the 10.1.1.0
network.

here is the stateful part of my firewall rules.
do they look ok?

00100 divert 8668 ip from any to any via xl0
00200 allow ip from any to any via lo0
00300 check-state
00400 deny tcp from any to any established
00500 allow tcp from 10.1.1.0/24 to any keep-state setup
00600 allow tcp from 24.162.231.59 to any keep-state setup
00700 allow tcp from any to 24.162.231.59 keep-state setup
00800 deny log logamount 50 ip from 10.1.1.0/24 to any in recv xl0



regards,
Jason


--
=======================================================================
|  Jason Welsh   jason@welsh.dynip.com   |   If you think there's     |
|                                        |   good in everybody, you   |
|      http://welsh.dynip.com/           |   haven't met everybody.   |
=======================================================================




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.10008261316000.62453-100000>