Hi, we have two firewalls running pfsense, theay are running version 1.2-rc2
embedded, they have ben running like this for 6 month.
The problem started one day ago, no changes has bean made to the network.. But
there was a peak in traffic about the same time as the backup firewall went
down..
The firewalls are set up as bridges, the plan as to have failover but could not
get that to work and dident have time to find the prolem so one (the backup)
has the bridge function turnd off, but the master syncs the rules to it..
The backup firewall was inaccessable from the internet and from the lan side..
But there was no problem connecting a serial cable and getting the menu i could
ping to the outside.. After i rebooted it it went down again after two hours.
Now i have upgraded the software to 1.2 embedded...
Any thoughts ?
Some loggs:
System.log
pr 18 12:15:30 probe043 last message repeated 133 times
Apr 18 12:15:30 probe043 kernel: arp: xx.xx.3.74 is on em6 but got reply from 02
:bf:52:63:xx:xx on em0
Apr 18 12:15:31 probe043 kernel: arp: xx.xx.3.65 is on em6 but got reply from 00
:0c:db:fd:yy:yy on em0
Apr 18 12:16:04 probe043 last message repeated 18 times
Apr 18 12:18:14 probe043 last message repeated 313 times
Apr 18 12:28:17 probe043 last message repeated 918 times
Apr 18 14:28:14 probe043 last message repeated 212 times
Apr 18 14:38:13 probe043 last message repeated 864 times
Apr 18 14:48:24 probe043 last message repeated 581 times
Apr 18 14:58:14 probe043 last message repeated 857 times
Apr 18 15:08:24 probe043 last message repeated 661 times
Apr 18 15:18:18 probe043 last message repeated 897 times
Apr 18 15:28:16 probe043 last message repeated 839 times
Apr 18 15:38:23 probe043 last message repeated 945 times
Apr 18 15:48:21 probe043 last message repeated 426 times
Apr 18 15:57:40 probe043 login: login on console as root
Apr 18 15:58:25 probe043 last message repeated 470 times
[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]
[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]
[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]
[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]
[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]
[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]
[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]
[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]
[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]
[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]
[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@[EMAIL PROTECTED]@^@
.....
Apr 18 16:07:42 probe043 kernel: [EMAIL PROTECTED]@^
Apr 18 16:07:43 probe043 kernel: @[EMAIL PROTECTED]@
Apr 18 16:07:46 probe043 kernel: [EMAIL PROTECTED]@^
Apr 18 16:07:46 probe043 kernel: @[EMAIL PROTECTED]@
Apr 18 16:07:49 probe043 kernel: [EMAIL PROTECTED]@^
Apr 18 16:07:49 probe043 kernel: @[EMAIL PROTECTED]@
Apr 18 16:07:52 probe043 kernel: arp: xx.xx.3.65 is on em6 but got reply from 00
:0c:db:fd:xx:xx on em0
Apr 18 16:07:52 probe043 kernel: [EMAIL PROTECTED]@^
Apr 18 16:07:52 probe043 kernel: arp: xx.xx.3.65 is on em6 but got reply from 00
:0c:db:fd:xx:xx on em0
Apr 18 16:08:09 probe043 last message repeated 10 times
Apr 18 16:08:10 probe043 kernel: [EMAIL PROTECTED]@^
Apr 18 16:08:10 probe043 kernel: arp: xx.xx.3.65 is on em6 but got reply from 00
:0c:db:fd:xx:xx on em0
Apr 18 16:08:10 probe043 kernel: @[EMAIL PROTECTED]@
Apr 18 16:08:26 probe043 kernel: arp: xx.xx.3.65 is on em6 but got reply from 00
:0c:db:fd:xx:xx on em0
^C
Dmesg.boot
Copyright (c) 1992-2007 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 6.2-RELEASE-p11 #0: Sun Feb 24 17:36:53 EST 2008
[EMAIL PROTECTED]:/usr/obj.pfSense/usr/src/sys/pfSense_wrap.6
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Pentium(R) 4 CPU 2.80GHz (2800.11-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0xf41 Stepping = 1
Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,C
MOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
Features2=0x641d<SSE3,RSVD2,MON,DS_CPL,CNTX-ID,CX16,<b14>>
AMD Features=0x20100000<NX,LM>
real memory = 535756800 (510 MB)
avail memory = 514973696 (491 MB)
wlan: mac acl policy registered
ath_hal: 0.9.17.2 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
cpu0 on motherboard
pcib0: <Host to PCI bridge> pcibus 0 on motherboard
pir0: <PCI Interrupt Routing Table: 20 Entries> on motherboard
pci0: <PCI bus> on pcib0
pcib1: <PCI-PCI bridge> irq 5 at device 1.0 on pci0
pci1: <PCI bus> on pcib1
em0: Ethernet address: 00:60:e0:42:xx:xx
pci0: <display, VGA> at device 2.0 (no driver attached)
pcib2: <PCIBIOS PCI-PCI bridge> irq 5 at device 28.0 on pci0
pci2: <PCI bus> on pcib2
em1: <Intel(R) PRO/1000 Network Connection Version - 6.2.9> port 0x8000-0x801f m
em 0xd0100000-0xd011ffff irq 5 at device 0.0 on pci2
em1: Ethernet address: 00:60:e0:42:xx:xx
pcib3: <PCIBIOS PCI-PCI bridge> irq 10 at device 28.1 on pci0
pci3: <PCI bus> on pcib3
em2: <Intel(R) PRO/1000 Network Connection Version - 6.2.9> port 0x9000-0x901f m
em 0xd0200000-0xd021ffff irq 10 at device 0.0 on pci3
em2: Ethernet address: 00:60:e0:42:xx:xx
pcib4: <PCIBIOS PCI-PCI bridge> irq 11 at device 28.2 on pci0
pci4: <PCI bus> on pcib4
em3: <Intel(R) PRO/1000 Network Connection Version - 6.2.9> port 0xa000-0xa01f m
em 0xd0300000-0xd031ffff irq 11 at device 0.0 on pci4
em3: Ethernet address: 00:60:e0:42:xx:xx
pcib5: <PCIBIOS PCI-PCI bridge> irq 7 at device 28.3 on pci0
pci5: <PCI bus> on pcib5
em4: <Intel(R) PRO/1000 Network Connection Version - 6.2.9> port 0xb000-0xb01f m
em 0xd0400000-0xd041ffff irq 7 at device 0.0 on pci5
em4: Ethernet address: 00:60:e0:42:xx:xx
pcib6: <PCIBIOS PCI-PCI bridge> irq 5 at device 28.4 on pci0
pci6: <PCI bus> on pcib6
em5: <Intel(R) PRO/1000 Network Connection Version - 6.2.9> port 0xc000-0xc01f m
em 0xd0500000-0xd051ffff irq 5 at device 0.0 on pci6
em5: Ethernet address: 00:60:e0:42:xx:xx
pcib7: <PCIBIOS PCI-PCI bridge> irq 10 at device 28.5 on pci0
pci7: <PCI bus> on pcib7
em6: <Intel(R) PRO/1000 Network Connection Version - 6.2.9> port 0xd000-0xd01f m
em 0xd0600000-0xd061ffff irq 10 at device 0.0 on pci7
em6: Ethernet address: 00:60:e0:42:b1:60
uhci0: <UHCI (generic) USB controller> port 0xed00-0xed1f irq 11 at device 29.0
on pci0
uhci0: [GIANT-LOCKED]
usb0: <UHCI (generic) USB controller> on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1: <UHCI (generic) USB controller> port 0xe800-0xe81f irq 7 at device 29.1 o
n pci0
uhci1: [GIANT-LOCKED]
usb1: <UHCI (generic) USB controller> on uhci1
usb1: USB revision 1.0
uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2: [GIANT-LOCKED]
usb2: <UHCI (generic) USB controller> on uhci2
usb2: USB revision 1.0
uhub2: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
uhci3: <UHCI (generic) USB controller> port 0xea00-0xea1f irq 5 at device 29.3 o
n pci0
uhci3: [GIANT-LOCKED]
usb3: <UHCI (generic) USB controller> on uhci3
usb3: USB revision 1.0
uhub3: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, self powered
ehci0: <Intel 82801GB/R (ICH7) USB 2.0 controller> mem 0xd07c0000-0xd07c03ff irq
11 at device 29.7 on pci0
ehci0: [GIANT-LOCKED]
usb4: EHCI version 1.0
usb4: companion controllers, 2 ports each: usb0 usb1 usb2 usb3
usb4: <Intel 82801GB/R (ICH7) USB 2.0 controller> on ehci0
usb4: USB revision 2.0
uhub4: Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub4: 8 ports with 8 removable, self powered
pcib8: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
pci8: <PCI bus> on pcib8
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel ICH7 UDMA100 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x37
6,0xf000-0xf00f at device 31.1 on pci0
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
pci0: <serial bus, SMBus> at device 31.3 (no driver attached)
ppc0: parallel port not found.
sio0 at port 0x3f8-0x3ff irq 4 flags 0x30 on isa0
sio0: type 16550A, console
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
speaker0: <PC speaker> at port 0x61 on isa0
unknown: <PNP0c01> can't assign resources (memory)
unknown: <PNP0501> can't assign resources (port)
unknown: <PNP0501> can't assign resources (port)
Timecounter "TSC" frequency 2800113148 Hz quality 800
Timecounters tick every 10.000 msec
Fast IPsec: Initialized Security Association Processing.
ad0: 977MB <SanDisk SDCFX3-1024 HDX 4.08> at ata0-master PIO4
GEOM_LABEL: Label for provider ad0a is ufs/pfSense.
GEOM_LABEL: Label for provider ad0d is ufs/pfSenseCfg.
Trying to mount root from ufs:/dev/ufs/pfSense
Any help would be appreciated..
Mvh
Daniel
