Nicholas von Waltsleben wrote: > i have read a number of posts in the lists regarding IPFilter dropping > OOW packets and I am having the same issue on FreeBSD 6.1 running > IPFilter v4.1.8. I was wondering whether this issue had been > resolved > in 4.1.13 and if so whether there was a patch I could apply to > get it to compile on my version of FreeBSD?
Just to confirm the problem : I have 2 pop3/imap front ends serving 30k mailboxes and I get 2 or 3 SYNs dropped every minute since I upgraded them to FreeBSD 6.0-STABLE (ipf 4.1.8). Temporary workaround was to remove keep state for those services but it would be nice to know if this problem is fixed in newer versions. I can provide tcpdumps if necessary. Jun 8 12:03:04 arthas ipmon[356]: 12:03:03.844718 bge0 @50:6 b x.x.242.32,18 -> 62.4.16.78,110 PR tcp len 20 44 -S IN OOW Jun 8 12:03:05 arthas ipmon[356]: 12:03:05.069569 bge0 @50:6 b x.x.242.32,18 -> 62.4.16.78,110 PR tcp len 20 44 -S IN OOW Jun 8 12:03:06 arthas ipmon[356]: 12:03:05.578373 2x bge0 @50:6 b x.x.242.32,18 -> 62.4.16.78,110 PR tcp len 20 44 -S IN OOW Jun 8 12:03:07 arthas ipmon[356]: 12:03:06.579266 bge0 @50:6 b x.x.242.32,18 -> 62.4.16.78,110 PR tcp len 20 44 -S IN OOW Jun 8 12:03:08 arthas ipmon[356]: 12:03:07.816784 bge0 @50:6 b x.x.242.32,18 -> 62.4.16.78,110 PR tcp len 20 44 -S IN OOW Jun 8 12:03:09 arthas ipmon[356]: 12:03:08.279991 2x bge0 @50:6 b x.x.242.32,18 -> 62.4.16.78,110 PR tcp len 20 44 -S IN OOW Jun 8 12:03:10 arthas ipmon[356]: 12:03:09.282672 bge0 @50:6 b x.x.242.32,18 -> 62.4.16.78,110 PR tcp len 20 44 -S IN OOW Jun 8 12:03:20 arthas ipmon[356]: 12:03:19.307813 bge0 @50:6 b x.x.32.62,50109 -> 62.4.16.78,110 PR tcp len 20 60 -S IN OOW Jun 8 12:03:40 arthas ipmon[356]: 12:03:39.231620 bge0 @50:6 b x.x.32.62,50139 -> 62.4.16.78,110 PR tcp len 20 60 -S IN OOW Jun 8 12:03:46 arthas ipmon[356]: 12:03:45.219452 bge0 @50:6 b x.x.32.62,50109 -> 62.4.16.78,110 PR tcp len 20 60 -S IN OOW Jun 8 12:06:04 arthas ipmon[356]: 12:06:03.934503 bge0 @50:6 b x.x.32.62,50123 -> 62.4.16.78,110 PR tcp len 20 60 -S IN OOW Jun 8 12:06:39 arthas ipmon[356]: 12:06:38.906662 bge0 @50:6 b x.x.32.62,50123 -> 62.4.16.78,110 PR tcp len 20 60 -S IN OOW Jun 8 12:07:39 arthas ipmon[356]: 12:07:38.509371 2x bge0 @50:6 b x.x.19.214,1980 -> 62.4.16.78,110 PR tcp len 20 48 -S IN OOW Jun 8 12:07:40 arthas ipmon[356]: 12:07:39.466100 bge0 @50:6 b x.x.19.214,1980 -> 62.4.16.78,110 PR tcp len 20 48 -S IN OOW Jun 8 12:08:24 arthas ipmon[356]: 12:08:24.372396 bge0 @50:6 b x.x.16.97,53271 -> 62.4.16.78,143 PR tcp len 20 64 -S IN OOW Jun 8 12:08:27 arthas ipmon[356]: 12:08:27.371702 bge0 @50:6 b x.x.16.97,53271 -> 62.4.16.78,143 PR tcp len 20 64 -S IN OOW Jun 8 12:08:31 arthas ipmon[356]: 12:08:30.571351 bge0 @50:6 b x.x.16.97,53271 -> 62.4.16.78,143 PR tcp len 20 64 -S IN OOW Jun 8 12:08:39 arthas ipmon[356]: 12:08:38.767322 bge0 @50:6 b x.x.32.170,50016 -> 62.4.16.78,110 PR tcp len 20 48 -S IN OOW Jun 8 12:08:42 arthas ipmon[356]: 12:08:41.734210 2x bge0 @50:6 b x.x.32.170,50078 -> 62.4.16.78,110 PR tcp len 20 48 -S IN OOW Jun 8 12:08:43 arthas ipmon[356]: 12:08:42.646597 bge0 @50:6 b x.x.32.170,50078 -> 62.4.16.78,110 PR tcp len 20 48 -S IN OOW Jun 8 12:10:22 arthas ipmon[356]: 12:10:21.621221 3x bge0 @50:6 b x.x.32.170,50098 -> 62.4.16.78,110 PR tcp len 20 48 -S IN OOW Jun 8 12:11:38 arthas ipmon[356]: 12:11:38.545686 bge0 @50:6 b x.x.32.62,50004 -> 62.4.16.78,110 PR tcp len 20 60 -S IN OOW -- Herve Boulouis
