IPfilter
[Top] [All Lists]

Re: iPFilter 4.1.17

To: darrenr@reed.wattle.id.au
Subject: Re: iPFilter 4.1.17
From: "Schuh Andreas" <ipf@s3h.at>
Date: Sun, 21 Jan 2007 20:27:17 +0100 (CET)
Cc: ipfilter@coombs.anu.edu.au
Delivered-to: sp-com-lists@consult.net
Delivered-to: ipfilter-list@securepoint.com
Importance: Normal
In-reply-to: <45B3B47D.3060707@reed.wattle.id.au>
References: <45B20F87.4030008@reed.wattle.id.au> <55055.85.125.253.83.1169375999.squirrel@www.s3h.at> <45B3B47D.3060707@reed.wattle.id.au>
Sender: owner-ipfilter@coombs.anu.edu.au
User-agent: SquirrelMail/1.4.9a
Yes, when running ipfstat -nhio manually, i get the output posted below.

I've noticed that there's something wrong because /tmp was full and /var also
- ipfstat was running for hours from periodic daily and filled /var/log/messages
with
------
Jan 20 22:00:00 gw kernel: pid 1580 (grep), uid 0 inumber 12 on /tmp:
filesystem full
------

Andy


On Sun, January 21, 2007 19:44, Darren Reed wrote:
If you do this by hand, you see the same?

Darren

Schuh Andreas wrote:
> Hi,
>
> i've upgraded my FreeBSD 5.5-Box to 4.1.17; after that, ipfstat -nhio runs
> in an
> endless loop and displays only the first rule:
> -------
> 0 @1 block out quick on xl0 from any to 172.16.0.0/12
> 0 @2 block out quick on xl0 from any to 172.16.0.0/12
> 0 @3 block out quick on xl0 from any to 172.16.0.0/12
> 0 @4 block out quick on xl0 from any to 172.16.0.0/12
> 0 @5 block out quick on xl0 from any to 172.16.0.0/12
> 0 @6 block out quick on xl0 from any to 172.16.0.0/12
> 0 @7 block out quick on xl0 from any to 172.16.0.0/12
> 0 @8 block out quick on xl0 from any to 172.16.0.0/12
> 0 @9 block out quick on xl0 from any to 172.16.0.0/12
> 0 @10 block out quick on xl0 from any to 172.16.0.0/12
> -------
> and so on...
>
> This is a problem, 'cause periodic daily runs ipfstat -nhio, and this fills
> up
> /tmp and generates 100% cpu usage...
>
> regards
> Andy
>



<Prev in Thread] Current Thread [Next in Thread>