Hi all,
I am running Freebsd 6.2 as Transparent proxy Server. My hardware is
Intel(R) Pentium(R) 4 CPU 3.00GHz, 1GB DDR2 Memory and 2 SATA hardisk. While
checking dmesg it shows link state change to up and Down and sometimes the
server crashes.
ipfw: pullup failed
ipfw: pullup failed
ipfw: pullup failed
ipfw: pullup failed
ipfw: pullup failed
ipfw: pullup failed
fxp0: link state changed to DOWN
fxp0: link state changed to UP
fxp0: link state changed to DOWN
fxp0: link state changed to UP
fxp0: link state changed to DOWN
fxp0: link state changed to UP
fxp0: link state changed to DOWN
fxp0: link state changed to UP
fxp0: link state changed to DOWN
fxp0: link state changed to UP
fxp0: link state changed to DOWN
Is this due to misconfigured firewall rules or some special tuning
need in kernel variables; Below is my IPFW rules:
00100 allow ip from any to any via lo0
00101 check-state
00102 deny icmp from any to any in icmptypes 5,9,13,14,15,16,17
00200 allow icmp from 202.xx.xx.0/24 to me in
00201 allow icmp from 202.xx.xx.0/24 to me in
00300 allow tcp from me to any out keep-state
00301 allow udp from me to any dst-port 53 keep-state
00302 allow ip from me to any out keep-state
00303 allow tcp from any 80,443 to me in keep-state
00304 allow tcp from any 80,443 to any out keep-state
00400 allow tcp from 202.79.xx.0/24 to me dst-port 2001 keep-state
00500 allow udp from 202.79.xx.xx 3130 to me dst-port 3130 keep-state
00501 allow tcp from 202.79.xx.xx 3128 to me in
00600 allow udp from 202.79.xx.xx to me dst-port 161 keep-state
00601 allow udp from 202.79.xx.xx to me dst-port 3401 keep-state
03000 allow tcp from 202.79.xx.0/24 to me dst-port 3128
03001 allow tcp from 202.79.xx.0/24 to me dst-port 3128
03002 fwd 127.0.0.1,3128 tcp from 202.79.xx.0/24 to any dst-port 80 keep-state
03003 fwd 127.0.0.1,3128 tcp from 202.79.xx.0/24 to any dst-port 80 keep-state
65534 deny log logamount 200 ip from any to any
_________________________________________________________________
Invite your mail contacts to join your friends list with Windows Live Spaces.
It's easy!
http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
