Re: Possible DoS in mpd 5.6 pppoe server

2013-05-05 Thread Marcelo Gondim
Em 05/05/13 04:21, Eugene Grosbein escreveu: On 05.05.2013 07:51, Marcelo Gondim wrote: I changed hardware for motherboard Supermicro X9SCM-F and Xeon processor 3.2Ghz E31230 with 8Gb ram ECC. The problem stopped and the server was very stable. The problem could be with the Intel motherboard S5

Re: Possible DoS in mpd 5.6 pppoe server

2013-05-05 Thread Eugene Grosbein
On 05.05.2013 07:51, Marcelo Gondim wrote: > I changed hardware for motherboard Supermicro X9SCM-F and Xeon processor > 3.2Ghz E31230 with 8Gb ram ECC. The problem stopped and the server was > very stable. > The problem could be with the Intel motherboard S5500BC? Because this > was installed w

Re: Possible DoS in mpd 5.6 pppoe server

2013-05-04 Thread Marcelo Gondim
Em 21/04/13 10:59, Eugene Grosbein escreveu: On 21.04.2013 06:08, Marcelo Gondim wrote: Em 20/04/13 14:33, Eugene Grosbein escreveu: On 21.04.2013 00:26, Marcelo Gondim wrote: You seem to use dummynet and the problem is not in mpd/pppoe code, it's it the dummynet code. Look at http://www.fre

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-22 Thread Gleb Smirnoff
Marcelo, On Sat, Apr 20, 2013 at 02:26:10PM -0300, Marcelo Gondim wrote: M> >> I'm doing tests with mpdas pppoeserver. Tried to simulate an attack of M> >> 1000 connections using an incorrect login and after a certain time can M> >> cause a kernel panic in the system. Below the panicgenerated: M

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-21 Thread Eugene Grosbein
On 21.04.2013 06:08, Marcelo Gondim wrote: > Em 20/04/13 14:33, Eugene Grosbein escreveu: >> On 21.04.2013 00:26, Marcelo Gondim wrote: >> You seem to use dummynet and the problem is not in mpd/pppoe code, it's it the dummynet code. Look at http://www.freebsd.org/cgi/query-pr.cgi?pr

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Marcelo Gondim
Em 20/04/13 14:33, Eugene Grosbein escreveu: On 21.04.2013 00:26, Marcelo Gondim wrote: You seem to use dummynet and the problem is not in mpd/pppoe code, it's it the dummynet code. Look at http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/162558 for workarounds. Ok :) I will try this: - net

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Marcelo Gondim
Hi, My ipfw rules, pf rules and dummynet: fw="/sbin/ipfw" ext_if="igb0" $fw disable one_pass $fw -f flush $fw zero $fw table all flush $fw -f pipe flush ssh_port="4321" $fw add allow all from any to any via lo0 $fw add deny all from 127.0.0.0/8 to any $fw add deny all from any to 127.0.0.0/8 $fw

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Eugene Grosbein
On 21.04.2013 00:26, Marcelo Gondim wrote: >> You seem to use dummynet and the problem is not in mpd/pppoe code, >> it's it the dummynet code. Look at >> http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/162558 >> for workarounds. > Ok :) I will try this: > > - net.isr.bindthreads=1 in /boot/loa

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Marcelo Gondim
Em 20/04/13 13:10, Eugene Grosbein escreveu: On 20.04.2013 20:21, Marcelo Gondim wrote: Hi all, I'm doing tests with mpdas pppoeserver. Tried to simulate an attack of 1000 connections using an incorrect login and after a certain time can cause a kernel panic in the system. Below the panicgenera

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Marcelo Gondim
Hi Adrian, Thanks for your help. :) My mpd.conf: startup: # configure mpd users #set user foo bar admin set user suporte papatango set user admin tutumineiro admin # configure the console set console self 192.168.8.34 5005 set

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Eugene Grosbein
On 20.04.2013 20:21, Marcelo Gondim wrote: > Hi all, > > I'm doing tests with mpdas pppoeserver. Tried to simulate an attack of > 1000 connections using an incorrect login and after a certain time can > cause a kernel panic in the system. Below the panicgenerated: > > http://pastebin.com/nUXGVR

Re: Possible DoS in mpd 5.6 pppoe server

2013-04-20 Thread Adrian Chadd
Can you provide more information about the configuration of mpd and ppp? the panic is in the dummynet code; can you provide information about your ipfw/dummynet setup? Thanks, adrian On 20 April 2013 06:21, Marcelo Gondim wrote: > Hi all, > > I'm doing tests with mpdas pppoeserver. Tried to