Потеря пакетов

Wic · Непрочитанное сообщение **Wic** » 2010-11-12 21:12:38

На домашнем сервере образовалась такая проблема, стало выкидывать из сетевых игр. К примеру в вов при использование аукциона или даже на ровном месте.
Момент потери конекта когда пошли сообщения sack 1. При подключение на прямую (без сервера) таких проблем нету.
Tcpdump :

Код: Выделить всё

23:34:14.771444 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1376, win 5840, length 33
23:34:14.782425 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 75575, win 64207, length 42
23:34:14.869138 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 75575, win 64207, length 42
23:34:14.911016 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1418, win 5840, length 0
23:34:14.957098 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1460, win 5840, length 0
23:34:14.957116 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1460, win 5840, length 26
23:34:15.149515 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 75601, win 64181, length 0
23:34:15.230983 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 75601, win 64181, length 58
23:34:15.238285 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1460, win 5840, length 1125
23:34:15.357940 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 76726, win 63056, length 58
23:34:15.360274 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1518, win 5840, length 0
23:34:15.444527 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1518, win 5840, length 1460
23:34:15.445979 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1576, win 5840, length 199
23:34:15.446576 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 78385, win 64240, length 0
23:34:15.468115 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 78385, win 64240, length 14
23:34:15.534715 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1576, win 5840, length 74
23:34:15.596650 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1590, win 5840, length 0
23:34:15.723155 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 78459, win 64166, length 58
23:34:15.811425 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1648, win 5840, length 71
23:34:16.009666 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 78530, win 64095, length 0
23:34:16.075080 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 78530, win 64095, length 42
23:34:16.098049 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1648, win 5840, length 645
23:34:16.202594 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1690, win 5840, length 0
23:34:16.289709 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 79175, win 63450, length 0
23:34:16.378184 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1690, win 5840, length 1350
23:34:16.569765 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 80525, win 64240, length 0
23:34:16.576481 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 80525, win 64240, length 42
23:34:16.658329 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1690, win 5840, length 1272
23:34:16.664355 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1732, win 5840, length 0
23:34:16.849804 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 81797, win 62968, length 0
23:34:16.937727 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1732, win 5840, length 40
23:34:17.076778 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 81837, win 62928, length 42
23:34:17.104438 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1732, win 5840, length 1460
23:34:17.165253 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1774, win 5840, length 31
23:34:17.165936 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 83328, win 64240, length 0
23:34:17.253944 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1774, win 5840, length 216
23:34:17.449902 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 83544, win 64024, length 0
23:34:17.535545 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 83544, win 64024, length 42
23:34:17.538340 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1774, win 5840, length 1178
23:34:17.663498 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1816, win 5840, length 0
23:34:17.729963 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 84722, win 62846, length 0
23:34:17.818533 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1816, win 5840, length 74
23:34:18.010003 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 84796, win 64240, length 0
23:34:18.098562 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1816, win 5840, length 1353
23:34:18.300058 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 86149, win 62887, length 0
23:34:18.388669 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1816, win 5840, length 1456
23:34:18.580106 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 87605, win 64240, length 0
23:34:18.660994 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1816, win 5840, length 1460
23:34:18.668106 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1816, win 5840, length 160
23:34:18.669232 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 89225, win 64240, length 0
23:34:18.840554 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 89225, win 64240, length 14
23:34:18.843229 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 89225, win 64240, length 14
23:34:18.928840 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1830, win 5840, length 0
23:34:18.931082 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1844, win 5840, length 0
23:34:18.971327 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1844, win 5840, length 40
23:34:19.006928 IP 195.12.246.224.6112 > 192.168.255.3.51358: Flags [P.], ack 125, win 5840, length 17
23:34:19.059322 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1844, win 5840, length 1460
23:34:19.060245 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 90725, win 64240, length 0
23:34:19.061020 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1844, win 5840, length 1460
23:34:19.072505 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 92185, win 64240, length 22
23:34:19.072547 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 92185, win 64240, length 18
23:34:19.072568 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 92185, win 64240, length 14
23:34:19.149058 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1844, win 5840, length 1460
23:34:19.149491 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1844, win 5840, length 598
23:34:19.150248 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 94243, win 64240, length 0
23:34:19.160345 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1866, win 5840, length 0
23:34:19.160473 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1884, win 5840, length 0
23:34:19.160493 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1898, win 5840, length 0
23:34:19.189710 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 94243, win 64240, length 6
23:34:19.200210 IP 192.168.255.3.51358 > 195.12.246.224.6112: Flags [.], ack 1372, win 62869, length 0
23:34:19.238734 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1898, win 5840, length 1208
23:34:19.277661 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1904, win 5840, length 0
23:34:19.430297 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 95451, win 63032, length 0
23:34:19.518713 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1904, win 5840, length 1021
23:34:19.584765 IP 195.12.246.224.6112 > 192.168.255.3.51358: Flags [P.], ack 125, win 5840, length 304
23:34:19.720333 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 96472, win 64240, length 0
23:34:19.780315 IP 192.168.255.3.51358 > 195.12.246.224.6112: Flags [.], ack 1676, win 64240, length 0
23:34:19.808657 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1904, win 5840, length 40
23:34:20.000353 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 96512, win 64200, length 0
23:34:20.089043 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1904, win 5840, length 1117
23:34:20.290416 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 97629, win 63083, length 0
23:34:20.315278 IP 192.168.255.3.51358 > 195.12.246.224.6112: Flags [P.], ack 1676, win 64240, length 35
23:34:20.378762 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1904, win 5840, length 814
23:34:20.444451 IP 195.12.246.224.6112 > 192.168.255.3.51358: Flags [.], ack 160, win 5840, length 0
23:34:20.570500 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 98443, win 64240, length 0
23:34:20.639348 IP 192.168.255.3.51358 > 195.12.246.224.6112: Flags [P.], ack 1676, win 64240, length 6
23:34:20.658599 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1904, win 5840, length 270
23:34:20.728551 IP 195.12.246.224.6112 > 192.168.255.3.51358: Flags [.], ack 166, win 5840, length 0
23:34:20.733802 IP 195.12.246.224.6112 > 192.168.255.3.51358: Flags [P.], ack 166, win 5840, length 8
23:34:20.850499 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 98713, win 63970, length 0
23:34:20.930548 IP 192.168.255.3.51358 > 195.12.246.224.6112: Flags [.], ack 1684, win 64232, length 0
23:34:20.938999 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1904, win 5840, length 1288
23:34:20.958454 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 100001, win 64240, length 14
23:34:21.046519 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, length 103
23:34:21.240630 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 100104, win 64137, length 0
23:34:21.329539 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, length 1042
23:34:21.530654 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 101146, win 63095, length 0
23:34:21.725099 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, length 1304
23:34:21.920696 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 102450, win 64240, length 0
23:34:22.009448 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, length 970
23:34:22.210746 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 103420, win 63270, length 0
23:34:22.299058 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1918, win 5840, length 1460
23:34:22.299458 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, length 394
23:34:22.300827 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 105274, win 64240, length 0
23:34:22.405327 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, length 33
23:34:22.600813 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 105307, win 64207, length 0
23:34:22.689223 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, length 978
23:34:22.785361 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 106285, win 63229, length 54
23:34:23.080914 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 106285, win 63229, length 54
23:34:23.219203 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, length 978
23:34:23.219950 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 106285, win 63229, options [nop,nop,sack 1 {105307:106285}], length 0
23:34:23.308289 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, length 1051
23:34:23.500975 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 107336, win 64240, length 0
23:34:23.589391 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, length 969
23:34:23.681027 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 108305, win 63271, length 54
23:34:24.108134 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, length 969
23:34:24.109082 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 108305, win 63271, options [nop,nop,sack 1 {107336:108305}], length 0
23:34:24.197720 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, length 1442
23:34:24.291677 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1918, win 5840, length 1460
23:34:24.293188 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 111207, win 64240, length 0
23:34:24.295733 IP 192.168.255.3.51358 > 195.12.246.224.6112: Flags [P.], ack 1684, win 64232, length 14
23:34:24.296075 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 111207, win 64240, length 6
23:34:24.381468 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, length 480
23:34:24.384327 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1918, win 5840, options [nop,nop,sack 1 {1972:1978}], length 0
23:34:24.424804 IP 195.12.246.224.6112 > 192.168.255.3.51358: Flags [.], ack 180, win 5840, length 0
23:34:24.434673 IP 195.12.246.224.6112 > 192.168.255.3.51358: Flags [P.], ack 180, win 5840, length 130
23:34:24.581165 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 111687, win 63760, length 0
23:34:24.631175 IP 192.168.255.3.51358 > 195.12.246.224.6112: Flags [.], ack 1814, win 64102, length 0
23:34:24.669308 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, options [nop,nop,sack 1 {1972:1978}], length 176
23:34:24.761563 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1918, win 5840, options [nop,nop,sack 1 {1972:1978}], length 1448
23:34:24.763267 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 113311, win 64240, length 0
23:34:24.780891 IP 192.168.255.3.51358 > 195.12.246.224.6112: Flags [P.], ack 1814, win 64102, length 14
23:34:24.781288 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 113311, win 64240, length 6
23:34:24.851477 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, options [nop,nop,sack 1 {1972:1978}], length 311
23:34:24.869336 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1918, win 5840, options [nop,nop,sack 1 {1972:1984}], length 0
23:34:24.870323 IP 195.12.246.224.6112 > 192.168.255.3.51358: Flags [.], ack 194, win 5840, length 0
23:34:24.870827 IP 195.12.246.224.6112 > 192.168.255.3.51358: Flags [P.], ack 194, win 5840, length 130
23:34:24.881248 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 113622, win 63929, length 66
23:34:25.071247 IP 192.168.255.3.51358 > 195.12.246.224.6112: Flags [.], ack 1944, win 63972, length 0
23:34:25.250708 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [.], ack 1918, win 5840, options [nop,nop,sack 1 {1972:1984}], length 1448
23:34:25.327992 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, options [nop,nop,sack 1 {1972:1984}], length 311
23:34:25.329315 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 115070, win 64240, options [nop,nop,sack 1 {113311:113622}], length 0
23:34:25.417967 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, options [nop,nop,sack 1 {1972:1984}], length 397
23:34:25.611354 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 115467, win 63843, length 0
^C
389 packets captured
758 packets received by filter
0 packets dropped by kernel

о системе

Код: Выделить всё

//>uname -a
FreeBSD server 8.1-RELEASE-p1 FreeBSD 8.1-RELEASE-p1 #0: Mon Oct 25 14:43:54 UTC 2010     root@428.pptp.n-sk.ru:/usr/obj/mnt/usr/src/sys/MYKERN  amd64

Код: Выделить всё

//>ifconfig
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=8<VLAN_MTU>
        ether 00:e0:50:e0:04:cc
        inet 192.168.255.1 netmask 0xfffffff0 broadcast 192.168.255.15
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
ral0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 2290
        ether 00:1b:11:1f:b5:88
        media: IEEE 802.11 Wireless Ethernet autoselect mode 11g <hostap>
        status: running
re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=389b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_UCAST,WOL_MCAST,WOL_MAGIC>
        ether 00:99:77:99:87:88
        inet external IP netmask 0xffffff80 broadcast 195.62.4.127
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
ipfw0: flags=8801<UP,SIMPLEX,MULTICAST> metric 0 mtu 65536
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        options=3<RXCSUM,TXCSUM>
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
        inet6 ::1 prefixlen 128
        inet 127.0.0.1 netmask 0xff000000
        nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
wlan0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ether 00:1b:11:1f:b5:88
        inet 192.168.255.17 netmask 0xfffffff0 broadcast 192.168.255.31
        media: IEEE 802.11 Wireless Ethernet autoselect mode 11g <hostap>
        status: running
        ssid wifi channel 11 (2462 MHz 11g) bssid 00:1b:11:1f:b5:88
        regdomain NONE country RU authmode WPA1+WPA2/802.11i privacy MIXED
        deftxkey 3 TKIP 2:128-bit TKIP 3:128-bit txpower 30 scanvalid 60
        protmode CTS dtimperiod 1 -dfs

Код: Выделить всё

cat /etc/rc.firewall

fwcmd="/sbin/ipfw "
${fwcmd} -f flush
${fwcmd} -f pipe flush
${fwcmd} -f queue flush
${fwcmd} -f nat flush

setup_loopback

#Deny
${fwcmd} add deny icmp from any to 255.255.255.255 via ${Iif}
${fwcmd} add deny ip from any to 224.0.0.0/4 in via ${Iif}
${fwcmd} add deny ip from any to 240.0.0.0/4 in via ${Iif}
${fwcmd} add deny ip from any to 169.254.0.0/16 in  via ${Iif}
${fwcmd} add deny ip from any to 0.0.0.0/8 in via ${Iif}
${fwcmd} add deny ip from any to any 137-139,445 via ${Iif}
${fwcmd} add deny ip from any 137-139,445 to any via ${Iif}
#check dynamic rules and already setuped
${fwcmd} add check-state

# Allow DHCP.
${fwcmd} add allow udp  from 0.0.0.0 68 to 255.255.255.255 67   not via ${Iif}
${fwcmd} add allow udp  from any 67     to me                   not via ${Iif}
${fwcmd} add allow udp  from any 67     to 255.255.255.255 68   not via ${Iif}
#allow ssh from all
${fwcmd} add allow tcp from any to me 1122 keep-state
${fwcmd} add allow tcp from any to me 21 keep-state
#DNS
${fwcmd} add allow udp from any to me 53 not via ${Iif} keep-state #local
${fwcmd} add allow udp from me to any 53 keep-state #global
${fwcmd} add allow udp from any 53 to me
#VPN
${fwcmd} add allow tcp from me 1723 to any keep-state
${fwcmd} add allow gre from any to any
#tunel
#${fwcmd} add allow ipencap from any to any

#PgSQL
${fwcmd} add allow tcp from 192.168.255.1/27 to me dst-port 5432 keep-state

#radio+FTP
${fwcmd} add allow tcp from ${Inet},${Lnet} to me dst-port 21,80,411,49152-65535 keep-state
#${fwcmd} add deny tcp from not ${Inet} to me dst-port 21,80 via ${Iif}

#NAT
${fwcmd} nat 8008 config ip ${Iip} log same_ports unreg_only ${redirectports}
${fwcmd} add nat 8008 all from ${Lnet} to any
${fwcmd} add nat 8008 all from any to ${Iip} via ${Iif}

#Deny
${fwcmd} add deny ip from 224.0.0.0/4 to any out via ${Iif}
${fwcmd} add deny ip from 169.254.0.0/16 to any out via ${Iif}
${fwcmd} add deny ip from 0.0.0.0/8 to any out via ${Iif}
${fwcmd} add deny ip from 240.0.0.0/4 to any out via ${Iif}

#shape
spd="4950Kb/s"
${fwcmd} add pipe 1 ip from not ${Inet} to 192.168.255.0/27
${fwcmd} pipe 1 config mask all
${fwcmd} add pipe 2 ip from 192.168.255.0/27 to any
${fwcmd} pipe 2 config mask all

#ICMP filter
#${fwcmd} add deny icmp from any to any frag
${fwcmd} add allow icmp from any to any icmptype 0,8,5,11
#feedback
${fwcmd} add allow ip from any to ${Lnet}
${fwcmd} add allow ip from ${Lnet} to any

${fwcmd} add allow ip from me to any

#test
${fwcmd} add allow icmp from any to me icmptype 0,8,5,11
${fwcmd} add allow all from me to ${Lnet} #not via ${Iif}
${fwcmd} add allow all from ${Lnet} to me #not via ${Iif}
${fwcmd} add allow all from ${Lnet} to ${Lnet} #not via ${Iif}
${fwcmd} add deny log logamount 3000 all from any to any

В фаерволе ничего вроде не теряется.

Хостинг HostFood.ru · **Хостинг HostFood.ru**

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2000 рублей (HP Proliant G5, Intel Xeon E5430 (2.66GHz, Quad-Core, 12Mb), 8Gb RAM, 2x300Gb SAS HDD, P400i, 512Mb, BBU):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

hizel · Непрочитанное сообщение **hizel** » 2010-11-13 10:00:37

а со стороны аплинка как дела?

Wic · Непрочитанное сообщение **Wic** » 2010-11-13 10:52:11

с внешки всё так же.

hizel · Непрочитанное сообщение **hizel** » 2010-11-13 10:55:51

ну значит с прова спросить

Код: Выделить всё

23:34:23.080914 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [P.], ack 106285, win 63229, length 54
23:34:23.219203 IP 195.12.246.223.6112 > 192.168.255.3.51359: Flags [P.], ack 1918, win 5840, length 978
23:34:23.219950 IP 192.168.255.3.51359 > 195.12.246.223.6112: Flags [.], ack 106285, win 63229, options [nop,nop,sack 1 {105307:106285}], length 0

ACK потерямбос

Wic · Непрочитанное сообщение **Wic** » 2010-11-13 23:35:32

ну вот я тоже догадался, что потерялся, только где его искать и как лечить?)

forum.lissyara.su

Потеря пакетов

Потеря пакетов

Услуги хостинговой компании Host-Food.ru

Re: Потеря пакетов

Re: Потеря пакетов

Re: Потеря пакетов

Re: Потеря пакетов