Регулярная перезагрузка FreeBSD 7.2 -STABLE

Все вопросы по установке, обновлению и эксплуатации FreeBSD: конфигурация и сопровождение.

Модератор: terminus

Правила форума
Убедительная просьба юзать теги [cоde] при оформлении листингов.
Сообщения не оформленные должным образом имеют все шансы быть незамеченными.
Аватара пользователя
Storoge
рядовой
Сообщения: 44
Зарегистрирован: 2007-09-19 12:04:14
Откуда: Брянск
Контактная информация:

Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Storoge » 2010-01-24 15:03:32

На сервере установлена FreeBSD 7.2 -STABLE

Код: Выделить всё

/var/log > uname -a
FreeBSD cs.bgita2.ru 7.2-STABLE FreeBSD 7.2-STABLE #1: Wed Jan 20 20:33:26 MSK 2010     yprozorov@cs.bgita2.ru:/usr/obj/usr/src/sys/MYKERNEL  i386
Время от времени система перезагружается , в логах когда вообще ничего, когда пишет про fatal trap 12, причем current process каждый раз меняется.

Код: Выделить всё

Jan 24 00:13:56 cs syslogd: kernel boot file is /boot/kernel/kernel
Jan 24 00:13:56 cs kernel:
Jan 24 00:13:56 cs kernel:
Jan 24 00:13:56 cs kernel: Fatal trap 12: page fault while in kernel mode
Jan 24 00:13:56 cs kernel: cpuid = 0; apic id = 00
Jan 24 00:13:56 cs kernel: fault virtual address        = 0x10
Jan 24 00:13:56 cs kernel: fault code           = supervisor read, page not present
Jan 24 00:13:56 cs kernel: instruction pointer  = 0x20:0x807d716d
Jan 24 00:13:56 cs kernel: stack pointer                = 0x28:0xde252b1c
Jan 24 00:13:56 cs kernel: frame pointer                = 0x28:0xde252b28
Jan 24 00:13:56 cs kernel: code segment         = base 0x0, limit 0xfffff, type 0x1b
Jan 24 00:13:56 cs kernel: = DPL 0, pres 1, def32 1, gran 1
Jan 24 00:13:56 cs kernel: processor eflags     = interrupt enabled, resume, IOPL = 0
Jan 24 00:13:56 cs kernel: current process              = 34 (irq18: em1 mykc1+*)
Jan 24 00:13:56 cs kernel: trap number          = 12
Jan 24 00:13:56 cs kernel: panic: page fault
Jan 24 00:13:56 cs kernel: cpuid = 0
Jan 24 00:13:56 cs kernel: Uptime: 21h57m14s
Jan 24 00:13:56 cs kernel: Physical memory: 3318 MB
Jan 24 00:13:56 cs kernel: Dumping 364 MB: 348 332 316 300 284 268 252 236 220 204 188 172 156 140 124 108 92 76 60 44 28 12
Jan 24 00:13:56 cs kernel: Dump complete
Jan 24 00:13:56 cs kernel: Automatic reboot in 16 seconds - press a key on the console to abort
Разбор /var/crash

Код: Выделить всё

Jan 24 00:13:56 cs syslogd: kernel boot file is /boot/kernel/kernel
Jan 24 00:13:56 cs kernel:
Jan 24 00:13:56 cs kernel:
Jan 24 00:13:56 cs kernel: Fatal trap 12: page fault while in kernel mode
Jan 24 00:13:56 cs kernel: cpuid = 0; apic id = 00
Jan 24 00:13:56 cs kernel: fault virtual address        = 0x10
Jan 24 00:13:56 cs kernel: fault code           = supervisor read, page not present
Jan 24 00:13:56 cs kernel: instruction pointer  = 0x20:0x807d716d
Jan 24 00:13:56 cs kernel: stack pointer                = 0x28:0xde252b1c
Jan 24 00:13:56 cs kernel: frame pointer                = 0x28:0xde252b28
Jan 24 00:13:56 cs kernel: code segment         = base 0x0, limit 0xfffff, type 0x1b
Jan 24 00:13:56 cs kernel: = DPL 0, pres 1, def32 1, gran 1
Jan 24 00:13:56 cs kernel: processor eflags     = interrupt enabled, resume, IOPL = 0
Jan 24 00:13:56 cs kernel: current process              = 34 (irq18: em1 mykc1+*)
Jan 24 00:13:56 cs kernel: trap number          = 12
Jan 24 00:13:56 cs kernel: panic: page fault
Jan 24 00:13:56 cs kernel: cpuid = 0
Jan 24 00:13:56 cs kernel: Uptime: 21h57m14s
Jan 24 00:13:56 cs kernel: Physical memory: 3318 MB
Jan 24 00:13:56 cs kernel: Dumping 364 MB: 348 332 316 300 284 268 252 236 220 204 188 172 156 140 124 108 92 76 60 44 28 12
Jan 24 00:13:56 cs kernel: Dump complete
Jan 24 00:13:56 cs kernel: Automatic reboot in 16 seconds - press a key on the console to abort

Код: Выделить всё

/var/log > kgdb -c /var/crash/vmcore.1 /boot/kernel/kernel
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address	= 0x10
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0x807d716d
stack pointer	        = 0x28:0xe1cbaaa4
frame pointer	        = 0x28:0xe1cbaab0
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 12962 (udpxy)
trap number		= 12
panic: page fault
cpuid = 1
Uptime: 1h8m32s
Physical memory: 3318 MB
Dumping 247 MB: 232 216 200 184 168 152 136 120 104 88 72 56 40 24 8

Reading symbols from /boot/kernel/ipmi.ko...Reading symbols from /boot/kernel/ipmi.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ipmi.ko
Reading symbols from /boot/modules/if_myk.ko...done.
Loaded symbols for /boot/modules/if_myk.ko
Reading symbols from /boot/kernel/libmbpool.ko...Reading symbols from /boot/kernel/libmbpool.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/libmbpool.ko
#0  doadump () at pcpu.h:196
196	pcpu.h: No such file or directory.
	in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:196
#1  0x8064e6ad in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0x8064eafd in panic (fmt=0x104 <Address 0x104 out of bounds>) at /usr/src/sys/kern/kern_shutdown.c:574
#3  0x8084e89d in trap_fatal (frame=0xe1cbaa64, eva=16) at /usr/src/sys/i386/i386/trap.c:950
#4  0x8084ec0a in trap_pfault (frame=0xe1cbaa64, usermode=0, eva=16) at /usr/src/sys/i386/i386/trap.c:863
#5  0x8084f5e1 in trap (frame=0xe1cbaa64) at /usr/src/sys/i386/i386/trap.c:541
#6  0x808329fb in calltrap () at /usr/src/sys/i386/i386/exception.s:166
#7  0x807d716d in uma_find_refcnt (zone=0x810623c0, item=0x931eb000) at uma_int.h:383
#8  0x8063c6c8 in mb_ctor_clust (mem=0x931eb000, size=4096, arg=0x92ac5a00, how=2) at /usr/src/sys/kern/kern_mbuf.c:520
#9  0x807d6bc2 in uma_zalloc_arg (zone=0x810623c0, udata=0x92ac5a00, flags=2) at /usr/src/sys/vm/uma_core.c:1834
#10 0x806aafca in sosend_copyin (uio=0xe1cbac54, retmp=0xe1cbabbc, atomic=0, space=0xe1cbab98, flags=0) at mbuf.h:528
#11 0x806adf7b in sosend_generic (so=0x950c74e0, addr=0x0, uio=0xe1cbac54, top=0x0, control=0x0, flags=0, td=0x94ded000) at /usr/src/sys/kern/uipc_socket.c:1210
#12 0x8069232b in soo_write (fp=0x94d11afc, uio=0xe1cbac54, active_cred=0x91c69700, flags=0, td=0x94ded000) at /usr/src/sys/kern/sys_socket.c:103
#13 0x8068b794 in dofilewrite (td=0x94ded000, fd=6, fp=0x94d11afc, auio=0xe1cbac54, offset=-1, flags=0) at file.h:257
#14 0x8068baa8 in kern_writev (td=0x94ded000, fd=6, auio=0xe1cbac54) at /usr/src/sys/kern/sys_generic.c:402
#15 0x8068bb20 in write (td=0x94ded000, uap=0xe1cbacf8) at /usr/src/sys/kern/sys_generic.c:318
#16 0x8084ee47 in syscall (frame=0xe1cbad38) at /usr/src/sys/i386/i386/trap.c:1101
#17 0x80832a60 in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:262
#18 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)

Код: Выделить всё

/var/log > kgdb -c /var/crash/vmcore.2 /boot/kernel/kernel
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:


Reading symbols from /boot/kernel/ipmi.ko...Reading symbols from /boot/kernel/ipmi.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ipmi.ko
Reading symbols from /boot/modules/if_myk.ko...done.
Loaded symbols for /boot/modules/if_myk.ko
Reading symbols from /boot/kernel/libmbpool.ko...Reading symbols from /boot/kernel/libmbpool.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/libmbpool.ko
#0  doadump () at pcpu.h:196
196	pcpu.h: No such file or directory.
	in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:196
#1  0x8064e6ad in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0x8064eafd in panic (fmt=0x104 <Address 0x104 out of bounds>) at /usr/src/sys/kern/kern_shutdown.c:574
#3  0x8084e89d in trap_fatal (frame=0x80c27fa8, eva=535532) at /usr/src/sys/i386/i386/trap.c:950
#4  0x8084f509 in trap (frame=0x80c27fa8) at /usr/src/sys/i386/i386/trap.c:329
#5  0x808329fb in calltrap () at /usr/src/sys/i386/i386/exception.s:166
#6  0x0000587c in ?? ()
(kgdb) 

Код: Выделить всё

/var/log > kgdb -c /var/crash/vmcore.3 /boot/kernel/kernel
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:
panic: vm_fault: fault on nofault entry, addr: 8108f000
cpuid = 1
Uptime: 9h31m16s
Physical memory: 3318 MB
Dumping 309 MB: 294 278 262 246 230 214 198 182 166 150 134 118 102 86 70RLMT internal error
 54 38 22 6

Reading symbols from /boot/kernel/ipmi.ko...Reading symbols from /boot/kernel/ipmi.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ipmi.ko
Reading symbols from /boot/modules/if_myk.ko...done.
Loaded symbols for /boot/modules/if_myk.ko
Reading symbols from /boot/kernel/libmbpool.ko...Reading symbols from /boot/kernel/libmbpool.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/libmbpool.ko
#0  doadump () at pcpu.h:196
196	pcpu.h: No such file or directory.
	in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:196
#1  0x8064e6ad in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0x8064eafd in panic (fmt=0x104 <Address 0x104 out of bounds>) at /usr/src/sys/kern/kern_shutdown.c:574
#3  0x807dadaa in vm_fault (map=0x81071000, vaddr=2164846592, fault_type=1 '\001', fault_flags=0) at /usr/src/sys/vm/vm_fault.c:277
#4  0x8084ec33 in trap_pfault (frame=0xe067b69c, usermode=0, eva=2164850671) at /usr/src/sys/i386/i386/trap.c:852
#5  0x8084f5e1 in trap (frame=0xe067b69c) at /usr/src/sys/i386/i386/trap.c:541
#6  0x808329fb in calltrap () at /usr/src/sys/i386/i386/exception.s:166
#7  0x8063b323 in free (addr=0x941e58c0, mtp=0x809bc9c0) at vm_page.h:266
#8  0x806a7b49 in m_tag_free_default (t=0x941e58c0) at /usr/src/sys/kern/uipc_mbuf2.c:314
#9  0x80738c77 in ipfw_chk (args=0xe067b994) at /usr/src/sys/netinet/ip_fw2.c:2512
#10 0x8073c81c in ipfw_check_out (arg=0x0, m0=0xe067ba98, ifp=0x91e77400, dir=2, inp=0x0) at /usr/src/sys/netinet/ip_fw_pfil.c:248
#11 0x8070070f in pfil_run_hooks (ph=0x80a1c520, mp=0xe067bb38, ifp=0x91e77400, dir=2, inp=0x0) at /usr/src/sys/net/pfil.c:78
#12 0x807475ca in ip_output (m=0x92ad0400, opt=0x0, ro=0xe067bafc, flags=34, imo=0x0, inp=0x0) at /usr/src/sys/netinet/ip_output.c:443
#13 0x8072ffa6 in div_send (so=0x9275f340, flags=0, m=0x92ad0400, nam=0x92ad9350, control=0x0, td=0x9261eb40) at /usr/src/sys/netinet/ip_divert.c:414
#14 0x806ae039 in sosend_generic (so=0x9275f340, addr=0x92ad9350, uio=0xe067bbe4, top=0x92ad0400, control=0x0, flags=0, td=0x9261eb40) at /usr/src/sys/kern/uipc_socket.c:1247
#15 0x806b13e3 in kern_sendit (td=0x9261eb40, s=3, mp=0xe067bc58, flags=0, control=0x0, segflg=UIO_USERSPACE) at /usr/src/sys/kern/uipc_syscalls.c:805
#16 0x806b3c2a in sendit (td=0x9261eb40, s=3, mp=0xe067bc58, flags=0) at /usr/src/sys/kern/uipc_syscalls.c:742
#17 0x806b3d28 in sendto (td=0x9261eb40, uap=0xe067bcf8) at /usr/src/sys/kern/uipc_syscalls.c:857
#18 0x8084ee47 in syscall (frame=0xe067bd38) at /usr/src/sys/i386/i386/trap.c:1101
#19 0x80832a60 in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:262
#20 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) 
Что делать?
Проблема не может быть аппаратной, может быть память проверить?

Хостинговая компания Host-Food.ru
Хостинг HostFood.ru
 

Услуги хостинговой компании Host-Food.ru

Хостинг HostFood.ru

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2000 рублей (HP Proliant G5, Intel Xeon E5430 (2.66GHz, Quad-Core, 12Mb), 8Gb RAM, 2x300Gb SAS HDD, P400i, 512Mb, BBU):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

Аватара пользователя
Alex Keda
стреляли...
Сообщения: 35504
Зарегистрирован: 2004-10-18 14:25:19
Откуда: Made in USSR
Контактная информация:

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Alex Keda » 2010-01-24 15:07:24

я бы с рамы и начал
Убей их всех! Бог потом рассортирует...

Гость
проходил мимо

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Гость » 2010-01-24 15:12:26

две возможные проблемы
1 сетевка mykc
2 фаервол

память на последнем месте
и о системе бы чтото подкинули dmesg -a

Gerk
сержант
Сообщения: 194
Зарегистрирован: 2009-09-23 23:01:37
Откуда: Симферополь, UA

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Gerk » 2010-01-24 15:17:22

Многократный тест памяти показан, затем нужно остальное железо (проц, мать) тестировать.

Аватара пользователя
Alex Keda
стреляли...
Сообщения: 35504
Зарегистрирован: 2004-10-18 14:25:19
Откуда: Made in USSR
Контактная информация:

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Alex Keda » 2010-01-24 16:03:59

Гость писал(а):2 фаервол
аж до паники зафейрволлился? =))
Убей их всех! Бог потом рассортирует...

Гость
проходил мимо

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Гость » 2010-01-24 16:23:32

#6 0x808329fb in calltrap () at /usr/src/sys/i386/i386/exception.s:166
#7 0x8063b323 in free (addr=0x941e58c0, mtp=0x809bc9c0) at vm_page.h:266
#8 0x806a7b49 in m_tag_free_default (t=0x941e58c0) at /usr/src/sys/kern/uipc_mbuf2.c:314
#9 0x80738c77 in ipfw_chk (args=0xe067b994) at /usr/src/sys/netinet/ip_fw2.c:2512
#10 0x8073c81c in ipfw_check_out (arg=0x0, m0=0xe067ba98, ifp=0x91e77400, dir=2, inp=0x0) at /usr/src/sys/netinet/ip_fw_pfil.c:248
#11 0x8070070f in pfil_run_hooks (ph=0x80a1c520, mp=0xe067bb38, ifp=0x91e77400, dir=2, inp=0x0) at /usr/src/sys/net/pfil.c:78
#12 0x807475ca in ip_output (m=0x92ad0400, opt=0x0, ro=0xe067bafc, flags=34, imo=0x0, inp=0x0) at /usr/src/sys/netinet/ip_output.c:443
смотрим внимательно и медитируем

Аватара пользователя
Storoge
рядовой
Сообщения: 44
Зарегистрирован: 2007-09-19 12:04:14
Откуда: Брянск
Контактная информация:

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Storoge » 2010-01-24 16:43:42

Код: Выделить всё

Copyright (c) 1992-2010 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.2-STABLE #1: Wed Jan 20 20:33:26 MSK 2010
    yprozorov@cs.bgita2.ru:/usr/obj/usr/src/sys/MYKERNEL i386
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Core(TM)2 Duo CPU     E7500  @ 2.93GHz (2933.45-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0x1067a  Stepping = 10
  Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
  Features2=0x408e39d<SSE3,DTES64,MON,DS_CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,XSAVE>
  AMD Features=0x20100000<NX,LM>
  AMD Features2=0x1<LAHF>
  Cores per package: 2
real memory  = 3489071104 (3327 MB)
avail memory = 3413999616 (3255 MB)
ACPI APIC Table: <A_M_I_ OEMAPIC >
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
ioapic0 <Version 2.0> irqs 0-23 on motherboard
registered firmware set <isp_1040>
registered firmware set <isp_1040_it>
registered firmware set <isp_1080>
registered firmware set <isp_1080_it>
registered firmware set <isp_12160>
registered firmware set <isp_12160_it>
registered firmware set <isp_2100>
registered firmware set <isp_2200>
registered firmware set <isp_2300>
registered firmware set <isp_2322>
registered firmware set <isp_2400>
kbd1 at kbdmux0
acpi0: <A_M_I_ OEMXSDT> on motherboard
acpi0: [ITHREAD]
acpi0: Power Button (fixed)
acpi0: reservation of 0, a0000 (3) failed
acpi0: reservation of 100000, cff00000 (3) failed
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0
acpi_hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0
Timecounter "HPET" frequency 14318180 Hz quality 900
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib1: <ACPI PCI-PCI bridge> irq 16 at device 1.0 on pci0
pci1: <ACPI PCI bus> on pcib1
vgapci0: <VGA-compatible display> port 0xc000-0xc0ff mem 0xd0000000-0xdfffffff,0xfe9e0000-0xfe9effff irq 16 at device 0.0 on pci1
pci1: <multimedia, HDA> at device 0.1 (no driver attached)
uhci0: <UHCI (generic) USB controller> port 0xb800-0xb81f irq 16 at device 26.0 on pci0
uhci0: [GIANT-LOCKED]
uhci0: [ITHREAD]
usb0: <UHCI (generic) USB controller> on uhci0
usb0: USB revision 1.0
uhub0: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0
uhub0: 2 ports with 2 removable, self powered
uhci1: <UHCI (generic) USB controller> port 0xb880-0xb89f irq 21 at device 26.1 on pci0
uhci1: [GIANT-LOCKED]
uhci1: [ITHREAD]
usb1: <UHCI (generic) USB controller> on uhci1
usb1: USB revision 1.0
uhub1: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb1
uhub1: 2 ports with 2 removable, self powered
uhci2: <UHCI (generic) USB controller> port 0xbc00-0xbc1f irq 18 at device 26.2 on pci0
uhci2: [GIANT-LOCKED]
uhci2: [ITHREAD]
usb2: <UHCI (generic) USB controller> on uhci2
usb2: USB revision 1.0
uhub2: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb2
uhub2: 2 ports with 2 removable, self powered
ehci0: <EHCI (generic) USB 2.0 controller> mem 0xfe8ffc00-0xfe8fffff irq 18 at device 26.7 on pci0
ehci0: [GIANT-LOCKED]
ehci0: [ITHREAD]
usb3: EHCI version 1.0
usb3: companion controllers, 2 ports each: usb0 usb1 usb2
usb3: <EHCI (generic) USB 2.0 controller> on ehci0
usb3: USB revision 2.0
uhub3: <Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1> on usb3
pci0: <multimedia, HDA> at device 27.0 (no driver attached)
pcib2: <ACPI PCI-PCI bridge> irq 17 at device 28.0 on pci0
pci3: <ACPI PCI bus> on pcib2
pcib3: <ACPI PCI-PCI bridge> irq 16 at device 28.5 on pci0
pci2: <ACPI PCI bus> on pcib3
mykc0: <Generic Marvell Yukon 88E8056 based Ethernet Controller Ver. 10.60.1.3> port 0xd800-0xd8ff mem 0xfeafc000-0xfeafffff irq 17 at device 0.0 on pci2
myk0 on mykc0
myk0: Ethernet address: 00:23:54:07:bb:ee
mykc0: [ITHREAD]
uhci3: <UHCI (generic) USB controller> port 0xb080-0xb09f irq 23 at device 29.0 on pci0
uhci3: [GIANT-LOCKED]
uhci3: [ITHREAD]
usb4: <UHCI (generic) USB controller> on uhci3
usb4: USB revision 1.0
uhub4: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb4
uhub4: 2 ports with 2 removable, self powered
uhci4: <UHCI (generic) USB controller> port 0xb400-0xb41f irq 19 at device 29.1 on pci0
uhci4: [GIANT-LOCKED]
uhci4: [ITHREAD]
usb5: <UHCI (generic) USB controller> on uhci4
usb5: USB revision 1.0
uhub5: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb5
uhub5: 2 ports with 2 removable, self powered
uhci5: <UHCI (generic) USB controller> port 0xb480-0xb49f irq 18 at device 29.2 on pci0
uhci5: [GIANT-LOCKED]
uhci5: [ITHREAD]
usb6: <UHCI (generic) USB controller> on uhci5
usb6: USB revision 1.0
uhub6: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb6
uhub6: 2 ports with 2 removable, self powered
ehci1: <EHCI (generic) USB 2.0 controller> mem 0xfe8ff800-0xfe8ffbff irq 23 at device 29.7 on pci0
ehci1: [GIANT-LOCKED]
ehci1: [ITHREAD]
usb7: EHCI version 1.0
usb7: companion controllers, 2 ports each: usb4 usb5 usb6
usb7: <EHCI (generic) USB 2.0 controller> on ehci1
usb7: USB revision 2.0
uhub7: <Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1> on usb7
uhub7: 6 ports with 6 removable, self powered
pcib4: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci4: <ACPI PCI bus> on pcib4
em0: <Intel(R) PRO/1000 Network Connection 6.9.6> port 0xe880-0xe8bf mem 0xfebc0000-0xfebdffff irq 17 at device 1.0 on pci4
em0: [FILTER]
em0: Ethernet address: 00:04:23:df:91:56
em1: <Intel(R) PRO/1000 Network Connection 6.9.6> port 0xec00-0xec3f mem 0xfebe0000-0xfebfffff irq 18 at device 1.1 on pci4
em1: [FILTER]
em1: Ethernet address: 00:04:23:df:91:57
mykc1: <Generic Marvell Yukon 88E8001/8003/8010 based Ethernet Controller Ver. 10.60.1.3> port 0xe400-0xe4ff mem 0xfebbc000-0xfebbffff irq 18 at device 2.0 on
myk1 on mykc1
myk1: Ethernet address: 00:23:54:07:c8:7c
mykc1: [ITHREAD]
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel ICH10 SATA300 controller> port 0xa000-0xa007,0x9c00-0x9c03,0x9880-0x9887,0x9800-0x9803,0x9480-0x948f,0x9400-0x940f irq 19 at device 31.2 on pc
atapci0: [ITHREAD]
ata2: <ATA channel 0> on atapci0
ata2: [ITHREAD]
ata3: <ATA channel 1> on atapci0
ata3: [ITHREAD]
ichsmb0: <Intel 82801JI (ICH10) SMBus controller> port 0x400-0x41f mem 0xfe8ff400-0xfe8ff4ff irq 18 at device 31.3 on pci0
ichsmb0: [GIANT-LOCKED]
ichsmb0: [ITHREAD]
smbus0: <System Management Bus> on ichsmb0
smb0: <SMBus generic I/O> on smbus0
atapci1: <Intel ICH10 SATA300 controller> port 0xb000-0xb007,0xac00-0xac03,0xa880-0xa887,0xa800-0xa803,0xa480-0xa48f,0xa400-0xa40f irq 19 at device 31.5 on pc
atapci1: [ITHREAD]
ata4: <ATA channel 0> on atapci1
ata4: [ITHREAD]
ata5: <ATA channel 1> on atapci1
ata5: [ITHREAD]
acpi_button0: <Power Button> on acpi0
fdc0: <floppy drive controller (FDE)> port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: [FILTER]
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
sio0: type 16550A
sio0: [FILTER]
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
cpu0: <ACPI CPU> on acpi0
ACPI Warning (tbutils-0243): Incorrect checksum in table [OEMB] -  BE, should be B5 [20070320]
coretemp0: <CPU On-Die Thermal Sensors> on cpu0
est0: <Enhanced SpeedStep Frequency Control> on cpu0
p4tcc0: <CPU Frequency Thermal Control> on cpu0
cpu1: <ACPI CPU> on acpi0
coretemp1: <CPU On-Die Thermal Sensors> on cpu1
est1: <Enhanced SpeedStep Frequency Control> on cpu1
est: CPU supports Enhanced Speedstep, but is not recognized.
est: cpu_vendor GenuineIntel, msr 6160b2406000b24
device_attach: est1 attach returned 6
p4tcc1: <CPU Frequency Thermal Control> on cpu1
cryptosoft0: <software crypto> on motherboard
ata0 at port 0x1f0-0x1f7,0x3f6 irq 14 on isa0
ata0: [ITHREAD]
ata1 at port 0x170-0x177,0x376 irq 15 on isa0
ata1: [ITHREAD]
ppc0: parallel port not found.
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
ums0: <vendor 0x0461 USB Optical Mouse, class 0/0, rev 2.00/2.00, addr 2> on uhub4
ums0: 3 buttons and Z dir.
ugen0: <American Power Conversion Back-UPS RS 1000 FW:7.g9a.I USB FW:g9a, class 0/0, rev 1.10/1.06, addr 2> on uhub5
Timecounters tick every 1.000 msec
IPsec: Initialized Security Association Processing.
ipfw2 initialized, divert enabled, nat enabled, rule-based forwarding enabled, default to accept, logging limited to 100 packets/entry by default
acd0: DVDR <Optiarc DVD RW AD-5240S/1.02> at ata3-slave SATA150
ad10: 476940MB <Seagate ST3500410AS CC34> at ata5-master SATA300
SMP: AP CPU #1 Launched!
Trying to mount root from ufs:/dev/ad10s1a

Гость
проходил мимо

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Гость » 2010-01-24 16:48:58

засрать 3 гига памяти надо еще постараться
так что если тест памяти с биоса + какими то утилитами покажет - ОК
значит либо драйвер сетевки что я показал глючит
либо чтото с фаерволом

какой фаер? ipfw или pf

Аватара пользователя
Storoge
рядовой
Сообщения: 44
Зарегистрирован: 2007-09-19 12:04:14
Откуда: Брянск
Контактная информация:

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Storoge » 2010-01-24 17:02:11

1. Кажется, что сетевая карта тут не причем, до того как поставил бинарные драйвера(http://www.lissyara.su/?id=1193) две сетевушки отображались как sk0 и msk0, но перезагрузки все равно были регулярно.
2. Файерволл
Прошу сильно не ругаться....

Код: Выделить всё

00025 deny ip from any to table(1) via em0
00026 deny ip from table(2) to any via em0
00029 fwd 127.0.0.1,8013 tcp from table(3) to any
00060 deny log logamount 100 ip from any to any in ipoptions ssrr
00065 deny log logamount 100 ip from any to any in ipoptions lsrr
00070 deny log logamount 100 ip from any to any in ipoptions rr
00075 deny log logamount 100 ip from any to any in ipoptions ts
00080 deny log logamount 100 tcp from any to any in tcpflags !syn,!ack,!rst via em0
00085 deny log logamount 100 tcp from any to any in tcpflags syn,fin,!ack,psh,urg
00086 deny log logamount 100 tcp from any to any in tcpflags syn,fin,!ack
00087 deny log logamount 100 tcp from any to any in tcpflags fin,!ack,psh,urg
00088 deny log logamount 100 tcp from any to any in tcpflags fin,!ack via em0
00089 deny log logamount 100 tcp from any to any in tcpflags !ack,urg
00090 deny log logamount 100 tcp from any to any in tcpflags !ack,psh
00100 deny ip from 239.255.255.250 to any
00101 deny ip from any to 239.255.255.250
00118 deny log logamount 100 ip from any to any tcpflags syn,fin,ack,psh,rst,urg
00119 deny log logamount 100 ip from any to any not established tcpflags fin
00120 deny log logamount 100 icmp from any to any frag
00121 deny log logamount 100 icmp from any to 255.255.255.255
00122 deny log logamount 100 icmp from any to 255.255.255.255
00123 deny log logamount 100 icmp from any to any in icmptypes 5,9,13,14,15,16,17
00124 deny log logamount 100 ip from any to any tcpflags !syn,!fin,!ack,!psh,!rst,!urg
00150 allow ip from any to any via lo0
00160 deny log logamount 100 ip from any to 127.0.0.0/8
00170 deny log logamount 100 ip from 127.0.0.0/8 to any
00200 deny ip from any to 10.0.0.0/8 via em0
00202 deny ip from any to 192.168.0.0/16 via em0
00203 deny ip from any to 10.0.0.0/8 via tun0
00204 deny ip from any to 172.16.0.0/12 via tun0
00205 deny ip from any to 192.168.0.0/16 via tun0
00208 deny ip from any to 192.168.0.0/16 via myk1
00209 deny ip from any to 0.0.0.0/8 via em0
00210 deny ip from any to 169.254.0.0/16 via em0
00211 deny ip from any to 192.0.2.0/24 via em0
00214 deny ip from any to 0.0.0.0/8 via tun0
00215 deny ip from any to 169.254.0.0/16 via tun0
00216 deny ip from any to 192.0.2.0/24 via tun0
00217 deny ip from any to 224.0.0.0/4 via tun0
00218 deny ip from any to 240.0.0.0/4 via tun0
00219 deny ip from any to 0.0.0.0/8 via myk1
00220 deny ip from any to 169.254.0.0/16 via myk1
00221 deny ip from any to 192.0.2.0/24 via myk1
00222 deny ip from any to 224.0.0.0/4 via myk1
00223 deny ip from any to 240.0.0.0/4 via myk1
00224 allow ip from 91.215.191.40 80 to any
00225 allow ip from any to 91.215.191.40 dst-port 80
00250 fwd 10.4.1.254,3128 tcp from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to not 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 dst-port 80,8080,443
00260 fwd 10.4.1.254,8110 ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to not 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 dst-port 110
00262 fwd 10.4.1.254,9199 ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to not 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 dst-port 25
00265 fwd 10.4.1.254,2121 tcp from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to not 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 dst-port 21
00266 fwd 10.4.1.254,2121 tcp from me to not 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 dst-port 21 uid squid via em0
00270 divert 8668 ip from any to any out via em0
00271 divert 8668 ip from any to any in via em0
00272 pipe 1 ip from 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133,224.0.0.0/4 to any
00273 pipe 1 ip from any to 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133,224.0.0.0/4
00279 allow igmp from any to any
00280 allow ip from any to 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133,224.0.0.0/4
00285 allow ip from 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133,224.0.0.0/4 to any
00330 allow ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.1.2,10.4.13.2,10.4.15.2,10.4.16.2,10.4.17.2,10.4.18.2,10.4.19.2,10.4.20.2,10.4.21.2,10.4.22.2,10.4.23.2,10.4.24.2,10.4.25.2,10.4.50.2,10.4.100.2
00331 allow ip from 10.4.1.2,10.4.13.2,10.4.15.2,10.4.16.2,10.4.17.2,10.4.18.2,10.4.19.2,10.4.20.2,10.4.21.2,10.4.22.2,10.4.23.2,10.4.24.2,10.4.25.2,10.4.50.2,10.4.100.2 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
00332 allow ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.1.3,10.4.14.3,10.4.15.3,10.4.16.3,10.4.17.3,10.4.18.3,10.4.19.3,10.4.20.3,10.4.21.3,10.4.22.3,10.4.23.3,10.4.24.3,10.4.25.3,10.4.50.3,10.4.100.3
00333 allow ip from 10.4.1.3,10.4.14.3,10.4.15.3,10.4.16.3,10.4.17.3,10.4.18.3,10.4.19.3,10.4.20.3,10.4.21.3,10.4.22.3,10.4.23.3,10.4.24.3,10.4.25.3,10.4.50.3,10.4.100.3 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
00334 allow ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.1.80,10.4.14.80,10.4.15.80,10.4.16.80,10.4.17.80,10.4.18.80,10.4.19.80,10.4.20.80,10.4.21.80,10.4.22.80,10.4.23.80,10.4.24.80,10.4.25.80,10.4.50.80,10.4.100.80
00335 allow ip from 10.4.1.80,10.4.14.80,10.4.15.80,10.4.16.80,10.4.17.80,10.4.18.80,10.4.19.80,10.4.20.80,10.4.21.80,10.4.22.80,10.4.23.80,10.4.24.80,10.4.25.80,10.4.50.80,10.4.100.80 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
00336 allow ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.15.1,10.4.16.1,10.4.17.1,10.4.18.1,10.4.19.1,10.4.20.1,10.4.21.1,10.4.22.1,10.4.23.1,10.4.24.1,10.4.25.1,10.4.50.1,10.4.100.1
00337 allow ip from 10.4.15.1,10.4.16.1,10.4.17.1,10.4.18.1,10.4.19.1,10.4.20.1,10.4.21.1,10.4.22.1,10.4.23.1,10.4.24.1,10.4.25.1,10.4.50.1,10.4.100.1 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
00338 allow ip from any to 10.4.1.4,10.4.14.4,10.4.15.4,10.4.16.4,10.4.17.4,10.4.18.4,10.4.19.4,10.4.20.4,10.4.21.4,10.4.22.4,10.4.23.4,10.4.24.4,10.4.25.4,10.4.50.4,10.4.100.4
00339 allow ip from 10.4.1.4,10.4.14.4,10.4.15.4,10.4.16.4,10.4.17.4,10.4.18.4,10.4.19.4,10.4.20.4,10.4.21.4,10.4.22.4,10.4.23.4,10.4.24.4,10.4.25.4,10.4.50.4,10.4.100.4 to any
00340 allow ip from any to 10.4.15.5,10.4.16.5,10.4.17.5,10.4.18.5,10.4.19.5,10.4.20.5,10.4.21.5,10.4.22.5,10.4.25.5,10.4.100.5
00341 allow ip from 10.4.15.5,10.4.16.5,10.4.17.5,10.4.18.5,10.4.19.5,10.4.20.5,10.4.21.5,10.4.22.5,10.4.25.5,10.4.100.5 to any
00410 deny log logamount 100 ip from not 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to any dst-port 77,3000,161,22,3128,3306,199,8110,5555,3551 via em0
00416 deny log logamount 100 ip from not 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to any dst-port 77,3000,161,22,33,3306,3128,199,8110,5555,3551 via myk1
00432 allow icmp from any to any
00433 allow ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 80.237.18.90,80.237.19.102,80.237.18.1,80.237.18.81,10.0.0.10,10.1.5.2,62.122.184.92,62.122.184.81,62.122.184.1,91.215.188.254
00433 allow ip from 10.1.5.1 to 80.237.18.90,80.237.19.102,80.237.18.1,80.237.18.81,10.0.0.10,10.1.5.2,62.122.184.92,62.122.184.81,62.122.184.1,91.215.188.254
00434 allow ip from 80.237.18.90,80.237.19.102,80.237.18.1,80.237.18.81,10.0.0.10,10.1.5.2,62.122.184.92,62.122.184.81,62.122.184.1,91.215.188.254 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
00434 allow ip from 80.237.18.90,80.237.19.102,80.237.18.1,80.237.18.81,10.0.0.10,10.1.5.2,62.122.184.92,62.122.184.81,62.122.184.1,91.215.188.254 to 10.1.5.1
00445 pipe 2 ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.18.254,10.4.19.254,10.4.20.254,10.4.21.254,10.4.22.254,10.4.23.254,10.4.24.254,10.4.25.254,10.4.50.254,10.4.100.254 dst-port 33,5555,123,520,3000,53,77
00455 pipe 2 ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.1.254,10.4.11.254,10.4.12.254,10.4.13.254,10.4.14.254,10.4.15.254,10.4.16.254,10.4.17.254 dst-port 33,5555,123,520,3000,53,77
00460 allow ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.18.254,10.4.19.254,10.4.20.254,10.4.21.254,10.4.22.254,10.4.23.254,10.4.24.254,10.4.25.254,10.4.50.254,10.4.100.254 dst-port 33,5555,123,520,3000,53,77
00465 allow ip from 10.4.18.254,10.4.19.254,10.4.20.254,10.4.21.254,10.4.22.254,10.4.23.254,10.4.24.254,10.4.25.254,10.4.50.254,10.4.100.254 33,5555,123,520,3000,53,77 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
00470 allow ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.1.254,10.4.11.254,10.4.12.254,10.4.13.254,10.4.14.254,10.4.15.254,10.4.16.254,10.4.17.254 dst-port 77,53,33,5555,123,520,3000
00475 allow ip from 10.4.1.254,10.4.11.254,10.4.12.254,10.4.13.254,10.4.14.254,10.4.15.254,10.4.16.254,10.4.17.254 33,5555,123,520,3000,53,77 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
04040 pipe 59 tcp from 10.4.13.23 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
04041 pipe 59 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.23 via vlan13
04042 allow ip from 10.4.13.23 to not 10.4.0.0/16
04043 allow ip from not 10.4.0.0/16 to 10.4.13.23
04044 allow ip from 10.4.13.23 to 10.4.13.254
04045 allow ip from 10.4.13.254 to 10.4.13.23
08120 pipe 127 tcp from 10.4.13.20 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
08121 pipe 127 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.20 via vlan13
08122 allow ip from 10.4.13.20 to not 10.4.0.0/16
08123 allow ip from not 10.4.0.0/16 to 10.4.13.20
08124 allow ip from 10.4.13.20 to 10.4.13.254
08125 allow ip from 10.4.13.254 to 10.4.13.20
10280 pipe 163 tcp from 10.4.13.130 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
10281 pipe 163 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.130 via vlan13
10282 allow ip from 10.4.13.130 to not 10.4.0.0/16
10283 allow ip from not 10.4.0.0/16 to 10.4.13.130
10284 allow ip from 10.4.13.130 to 10.4.13.254
10285 allow ip from 10.4.13.254 to 10.4.13.130
10880 pipe 173 tcp from 10.4.13.34 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
10881 pipe 173 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.34 via vlan13
10882 allow ip from 10.4.13.34 to not 10.4.0.0/16
10883 allow ip from not 10.4.0.0/16 to 10.4.13.34
10884 allow ip from 10.4.13.34 to 10.4.13.254
10885 allow ip from 10.4.13.254 to 10.4.13.34
12260 pipe 196 tcp from 10.4.13.239 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
12261 pipe 196 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.239 via vlan13
12262 allow ip from 10.4.13.239 to not 10.4.0.0/16
12263 allow ip from not 10.4.0.0/16 to 10.4.13.239
12264 allow ip from 10.4.13.239 to 10.4.13.254
12265 allow ip from 10.4.13.254 to 10.4.13.239
14300 pipe 230 tcp from 10.4.13.22 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
14301 pipe 230 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.22 via vlan13
14302 allow ip from 10.4.13.22 to not 10.4.0.0/16
14303 allow ip from not 10.4.0.0/16 to 10.4.13.22
14304 allow ip from 10.4.13.22 to 10.4.13.254
14305 allow ip from 10.4.13.254 to 10.4.13.22
15500 pipe 250 tcp from 10.4.13.182 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
15501 pipe 250 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.182 via vlan13
15502 allow ip from 10.4.13.182 to not 10.4.0.0/16
15503 allow ip from not 10.4.0.0/16 to 10.4.13.182
15504 allow ip from 10.4.13.182 to 10.4.13.254
15505 allow ip from 10.4.13.254 to 10.4.13.182
16280 pipe 263 tcp from 10.4.13.131 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
16281 pipe 263 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.131 via vlan13
16282 allow ip from 10.4.13.131 to not 10.4.0.0/16
16283 allow ip from not 10.4.0.0/16 to 10.4.13.131
16284 allow ip from 10.4.13.131 to 10.4.13.254
16285 allow ip from 10.4.13.254 to 10.4.13.131
16460 pipe 266 tcp from 10.4.13.94 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
16461 pipe 266 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.94 via vlan13
16462 allow ip from 10.4.13.94 to not 10.4.0.0/16
16463 allow ip from not 10.4.0.0/16 to 10.4.13.94
16464 allow ip from 10.4.13.94 to 10.4.13.254
16465 allow ip from 10.4.13.254 to 10.4.13.94
17660 pipe 286 tcp from 10.4.13.137 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
17661 pipe 286 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.137 via vlan13
17662 allow ip from 10.4.13.137 to not 10.4.0.0/16
17663 allow ip from not 10.4.0.0/16 to 10.4.13.137
17664 allow ip from 10.4.13.137 to 10.4.13.254
17665 allow ip from 10.4.13.254 to 10.4.13.137
17780 pipe 288 tcp from 10.4.13.19 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
17781 pipe 288 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.19 via vlan13
17782 allow ip from 10.4.13.19 to not 10.4.0.0/16
17783 allow ip from not 10.4.0.0/16 to 10.4.13.19
17784 allow ip from 10.4.13.19 to 10.4.13.254
17785 allow ip from 10.4.13.254 to 10.4.13.19
19340 pipe 314 tcp from 10.4.13.45 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
19341 pipe 314 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.45 via vlan13
19342 allow ip from 10.4.13.45 to not 10.4.0.0/16
19343 allow ip from not 10.4.0.0/16 to 10.4.13.45
19344 allow ip from 10.4.13.45 to 10.4.13.254
19345 allow ip from 10.4.13.254 to 10.4.13.45
19820 pipe 322 tcp from 10.4.13.91 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
19821 pipe 322 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.91 via vlan13
19822 allow ip from 10.4.13.91 to not 10.4.0.0/16
19823 allow ip from not 10.4.0.0/16 to 10.4.13.91
19824 allow ip from 10.4.13.91 to 10.4.13.254
19825 allow ip from 10.4.13.254 to 10.4.13.91
20120 pipe 327 tcp from 10.4.13.180 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
20121 pipe 327 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.180 via vlan13
20122 allow ip from 10.4.13.180 to not 10.4.0.0/16
20123 allow ip from not 10.4.0.0/16 to 10.4.13.180
20124 allow ip from 10.4.13.180 to 10.4.13.254
20125 allow ip from 10.4.13.254 to 10.4.13.180
24140 pipe 394 tcp from 10.4.13.37 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
24141 pipe 394 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.37 via vlan13
24142 allow ip from 10.4.13.37 to not 10.4.0.0/16
24143 allow ip from not 10.4.0.0/16 to 10.4.13.37
24144 allow ip from 10.4.13.37 to 10.4.13.254
24145 allow ip from 10.4.13.254 to 10.4.13.37
63430 deny ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.18.254,10.4.19.254,10.4.20.254,10.4.21.254,10.4.22.254,10.4.23.254,10.4.24.254,10.4.25.254,10.4.50.254,10.4.100.254
63435 deny ip from 10.4.18.254,10.4.19.254,10.4.20.254,10.4.21.254,10.4.22.254,10.4.23.254,10.4.24.254,10.4.25.254,10.4.50.254,10.4.100.254 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
63437 deny ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.1.254,10.4.11.254,10.4.12.254,10.4.13.254,10.4.14.254,10.4.15.254,10.4.16.254,10.4.17.254
63439 deny ip from 10.4.1.254,10.4.11.254,10.4.12.254,10.4.13.254,10.4.14.254,10.4.15.254,10.4.16.254,10.4.17.254 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
63440 allow ip from 10.4.10.0/24 to 10.4.11.0/24
63445 allow ip from 10.4.10.0/24 to 10.4.12.0/24
63450 allow ip from 10.4.10.0/24 to 10.4.13.0/24
63455 allow ip from 10.4.10.0/24 to 10.4.14.0/24
63460 allow ip from 10.4.11.0/24 to 10.4.10.0/24
63465 allow ip from 10.4.11.0/24 to 10.4.12.0/24
63470 allow ip from 10.4.11.0/24 to 10.4.13.0/24
63475 allow ip from 10.4.11.0/24 to 10.4.14.0/24
63480 allow ip from 10.4.12.0/24 to 10.4.11.0/24
63485 allow ip from 10.4.12.0/24 to 10.4.10.0/24
63490 allow ip from 10.4.12.0/24 to 10.4.13.0/24
63495 allow ip from 10.4.12.0/24 to 10.4.14.0/24
63540 allow ip from 10.4.13.0/24 to 10.4.11.0/24
63545 allow ip from 10.4.13.0/24 to 10.4.12.0/24
63550 allow ip from 10.4.13.0/24 to 10.4.10.0/24
63555 allow ip from 10.4.13.0/24 to 10.4.14.0/24
63640 allow ip from 10.4.14.0/24 to 10.4.11.0/24
63645 allow ip from 10.4.14.0/24 to 10.4.12.0/24
63450 allow ip from 10.4.10.0/24 to 10.4.13.0/24
63455 allow ip from 10.4.10.0/24 to 10.4.14.0/24
63460 allow ip from 10.4.11.0/24 to 10.4.10.0/24
63465 allow ip from 10.4.11.0/24 to 10.4.12.0/24
63470 allow ip from 10.4.11.0/24 to 10.4.13.0/24
63475 allow ip from 10.4.11.0/24 to 10.4.14.0/24
63480 allow ip from 10.4.12.0/24 to 10.4.11.0/24
63485 allow ip from 10.4.12.0/24 to 10.4.10.0/24
63490 allow ip from 10.4.12.0/24 to 10.4.13.0/24
63495 allow ip from 10.4.12.0/24 to 10.4.14.0/24
63540 allow ip from 10.4.13.0/24 to 10.4.11.0/24
63545 allow ip from 10.4.13.0/24 to 10.4.12.0/24
63550 allow ip from 10.4.13.0/24 to 10.4.10.0/24
63555 allow ip from 10.4.13.0/24 to 10.4.14.0/24
63640 allow ip from 10.4.14.0/24 to 10.4.11.0/24
63645 allow ip from 10.4.14.0/24 to 10.4.12.0/24
63650 allow ip from 10.4.14.0/24 to 10.4.13.0/24
63655 allow ip from 10.4.14.0/24 to 10.4.10.0/24
65200 deny ip from any to 10.0.0.0/8 via em0
65202 deny ip from 192.168.0.0/16 to any via em0
65208 deny ip from 192.168.0.0/16 to any via myk1
65209 deny ip from 0.0.0.0/8 to any via em0
65210 deny ip from 169.254.0.0/16 to any via em0
65211 deny ip from 192.0.2.0/24 to any via em0
65219 deny ip from 0.0.0.0/8 to any via myk1
65220 deny ip from 169.254.0.0/16 to any via myk1
65221 deny ip from 192.0.2.0/24 to any via myk1
65222 deny ip from 224.0.0.0/4 to any via myk1
65223 deny ip from 240.0.0.0/4 to any via myk1
65510 allow ip from any to any via em0
65520 allow ip from any to any via myk1
65530 deny ip from any to any
65535 allow ip from any to any

Гость
проходил мимо

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Гость » 2010-01-24 17:07:47

и почему после такого фаервола я не удивлен что оно падает...

счетчики по ipfw неплохо бы еще увидеть
при определенной нагрузке

смысл первых 20 deny я вообще не понимаю
этот сервак в пентагоне что ли стоит?

Аватара пользователя
Storoge
рядовой
Сообщения: 44
Зарегистрирован: 2007-09-19 12:04:14
Откуда: Брянск
Контактная информация:

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Storoge » 2010-01-24 17:17:10

Нет, сервер не в пентагоне, а в брянске :pardon:
Первые правила взяты из разных рекомендаций, в том числе и с этого сайта очень много позаимствовано.
Вывод утилиты top.

Код: Выделить всё

last pid: 15071;  load averages:  0.30,  0.81,  1.38                                                                                  up 0+17:11:45  17:14:01
165 processes: 2 running, 163 sleeping
CPU:  7.5% user,  0.0% nice, 20.6% system,  7.7% interrupt, 64.2% idle
Mem: 956M Active, 914M Inact, 189M Wired, 63M Cache, 63M Buf, 1137M Free
Swap: 4096M Total, 14M Used, 4082M Free

  PID USERNAME   THR PRI NICE   SIZE    RES STATE   C   TIME   WCPU COMMAND
 3797 root        11   4  -19 24932K 20436K accept  0   0:00 23.05% stargazer
 2391 root         1  47    0  3436K  1592K select  1  22:48  5.57% natd
 4592 root         1   8    0  3192K  1156K nanslp  1   7:42  0.78% monitord
15064 root         1  49    0 17588K  8008K select  1   0:00  0.10% php
 3816 squid        1   4    0   308M   294M kqread  1   7:55  0.00% squid
 3552 root         1   8    0 13544K 10928K nanslp  0   7:39  0.00% perl
 3465 root         1 -58    0 60060K 46944K bpf     0   5:13  0.00% snort
 4540 root         1  44    0 10256K  5256K select  1   2:53  0.00% snmpd
 3758 root         1   8    0  7248K  1572K nanslp  0   1:06  0.00% snortsam
 4656 nobody       1  44    0  3424K  1944K select  1   0:40  0.00% darkstat
 2761 root         1  44    0  3248K  1088K select  0   0:15  0.00% syslogd
 4825 root         1   5    0   175M   174M select  1   0:10  0.00% aveserver
 3822 squid        1  -4    0  4632K  1496K msgrcv  0   0:09  0.00% diskd
 4546 root         1  44    0 36268K 32568K select  0   0:07  0.00% perl
 4817 root         1  44    0  4736K  1836K select  0   0:07  0.00% ntpd
 2832 nobody       1   4    0  3192K  1032K kqread  1   0:05  0.00% dnsproxy
 3792 dnscache     1  44    0 13432K 10908K select  0   0:05  0.00% dnscache
 4741 root         1 -58    0  4376K  2768K bpf     1   0:05  0.00% arpwatch
 2715 root         1  44    0  3252K  1264K select  0   0:03  0.00% routed
 3793 dnslog       1  -8    0  5544K  3000K piperd  0   0:03  0.00% perl
 3794 dnslog       1  -8    0  3192K   788K piperd  0   0:03  0.00% multilog
 2830 nobody       1   4    0  3192K  1024K kqread  1   0:03  0.00% dnsproxy
14624 root         1   4    0  4216K   996K sbwait  1   0:03  0.00% udpxy
 3068 mysql       22  44    0   466M 77040K ucond   1   0:02  0.00% mysqld
 4567 nobody       1   4   -5 14960K  2644K kqread  0   0:02  0.00% nginx
 4576 nobody       1   4   -5 14960K  2820K kqread  1   0:02  0.00% nginx
 4731 root         2  44    0 14408K  8524K select  0   0:02  0.00% bfilter
 4573 nobody       1   4   -5 14960K  3104K kqread  1   0:02  0.00% nginx
 4569 nobody       1   4   -5 14960K  2644K kqread  1   0:02  0.00% nginx
 4571 nobody       1   4   -5 14960K  3232K kqread  0   0:02  0.00% nginx
 4578 nobody       1   4   -5 14960K  2644K kqread  0   0:02  0.00% nginx
 4580 nobody       1   4   -5 14960K  3172K kqread  1   0:01  0.00% nginx
 4614 daemon       1  44    0  3220K  1040K select  0   0:01  0.00% healthd
 4712 root         1  44    0 21280K 10452K select  1   0:01  0.00% httpd
 4565 nobody       1   4   -5 14960K  3104K kqread  0   0:01  0.00% nginx
 3785 root         1   8    0  3192K   808K nanslp  1   0:01  0.00% svscan
 4534 root         1  44    0  8248K  3580K select  0   0:01  0.00% snmptrapd
 2834 nobody       1   4    0  3192K  1032K kqread  1   0:01  0.00% dnsproxy
 2872 root         2  44    0  7256K  4020K select  0   0:01  0.00% monit

Аватара пользователя
Storoge
рядовой
Сообщения: 44
Зарегистрирован: 2007-09-19 12:04:14
Откуда: Брянск
Контактная информация:

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Storoge » 2010-01-24 17:19:36

Код: Выделить всё

00025     19074      1178432 deny ip from any to table(1) via em0
00026      2924       186138 deny ip from table(2) to any via em0
00029         0            0 fwd 127.0.0.1,8013 tcp from table(3) to any
00060         0            0 deny log logamount 100 ip from any to any in ipoptions ssrr
00065         0            0 deny log logamount 100 ip from any to any in ipoptions lsrr
00070         0            0 deny log logamount 100 ip from any to any in ipoptions rr
00075         0            0 deny log logamount 100 ip from any to any in ipoptions ts
00080         0            0 deny log logamount 100 tcp from any to any in tcpflags !syn,!ack,!rst via em0
00085         0            0 deny log logamount 100 tcp from any to any in tcpflags syn,fin,!ack,psh,urg
00086         0            0 deny log logamount 100 tcp from any to any in tcpflags syn,fin,!ack
00087         0            0 deny log logamount 100 tcp from any to any in tcpflags fin,!ack,psh,urg
00088         0            0 deny log logamount 100 tcp from any to any in tcpflags fin,!ack via em0
00089         0            0 deny log logamount 100 tcp from any to any in tcpflags !ack,urg
00090         0            0 deny log logamount 100 tcp from any to any in tcpflags !ack,psh
00100         0            0 deny ip from 239.255.255.250 to any
00101         0            0 deny ip from any to 239.255.255.250
00118         0            0 deny log logamount 100 ip from any to any tcpflags syn,fin,ack,psh,rst,urg
00119         0            0 deny log logamount 100 ip from any to any not established tcpflags fin
00120         0            0 deny log logamount 100 icmp from any to any frag
00121         0            0 deny log logamount 100 icmp from any to 255.255.255.255
00122         0            0 deny log logamount 100 icmp from any to 255.255.255.255
00123         2          112 deny log logamount 100 icmp from any to any in icmptypes 5,9,13,14,15,16,17
00124         0            0 deny log logamount 100 ip from any to any tcpflags !syn,!fin,!ack,!psh,!rst,!urg
00150   4223085    424066567 allow ip from any to any via lo0
00160         0            0 deny log logamount 100 ip from any to 127.0.0.0/8
00170         0            0 deny log logamount 100 ip from 127.0.0.0/8 to any
00200         0            0 deny ip from any to 10.0.0.0/8 via em0
00202      4279       385192 deny ip from any to 192.168.0.0/16 via em0
00203         0            0 deny ip from any to 10.0.0.0/8 via tun0
00204         0            0 deny ip from any to 172.16.0.0/12 via tun0
00205         0            0 deny ip from any to 192.168.0.0/16 via tun0
00208         0            0 deny ip from any to 192.168.0.0/16 via myk1
00209         0            0 deny ip from any to 0.0.0.0/8 via em0
00210         0            0 deny ip from any to 169.254.0.0/16 via em0
00211         0            0 deny ip from any to 192.0.2.0/24 via em0
00214         0            0 deny ip from any to 0.0.0.0/8 via tun0
00215         0            0 deny ip from any to 169.254.0.0/16 via tun0
00216         0            0 deny ip from any to 192.0.2.0/24 via tun0
00217         0            0 deny ip from any to 224.0.0.0/4 via tun0
00218         0            0 deny ip from any to 240.0.0.0/4 via tun0
00219         0            0 deny ip from any to 0.0.0.0/8 via myk1
00220         0            0 deny ip from any to 169.254.0.0/16 via myk1
00221         0            0 deny ip from any to 192.0.2.0/24 via myk1
00222         5          148 deny ip from any to 224.0.0.0/4 via myk1
00223         0            0 deny ip from any to 240.0.0.0/4 via myk1
00223         0            0 deny ip from any to 240.0.0.0/4 via myk1
00224      9975      5188393 allow ip from 91.215.191.40 80 to any
00225      6371       526853 allow ip from any to 91.215.191.40 dst-port 80
00250   2244835    319309435 fwd 10.4.1.254,3128 tcp from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to not 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 dst-port 80,8080,443
00260      2294       111670 fwd 10.4.1.254,8110 ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to not 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 dst-port 110
00262      1863        90940 fwd 10.4.1.254,9199 ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to not 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 dst-port 25
00265       183         8848 fwd 10.4.1.254,2121 tcp from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to not 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 dst-port 21
00266         0            0 fwd 10.4.1.254,2121 tcp from me to not 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 dst-port 21 uid squid via em0
00270  19874399   2082411697 divert 8668 ip from any to any out via em0
00271  41345364  37282390591 divert 8668 ip from any to any in via em0
00272  21216797  31766382888 pipe 1 ip from 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133,224.0.0.0/4 to any
00273  17213292  11014377218 pipe 1 ip from any to 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133,224.0.0.0/4
00279         0            0 allow igmp from any to any
00280         0            0 allow ip from any to 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133,224.0.0.0/4
00285         0            0 allow ip from 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133,224.0.0.0/4 to any
00330    139419     14407915 allow ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.1.2,10.4.13.2,10.4.15.2,10.4.16.2,10.4.17.2,10.4.18.2,10.4.19.2,10.4.20.2,10.4.21.2,10.4.22.2,10.4.23.2,10.4.24.2,10.4.25.2,10.4.50.2,10.4.100.2
00331   1202361     99432642 allow ip from 10.4.1.2,10.4.13.2,10.4.15.2,10.4.16.2,10.4.17.2,10.4.18.2,10.4.19.2,10.4.20.2,10.4.21.2,10.4.22.2,10.4.23.2,10.4.24.2,10.4.25.2,10.4.50.2,10.4.100.2 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
00332      2194       176302 allow ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.1.3,10.4.14.3,10.4.15.3,10.4.16.3,10.4.17.3,10.4.18.3,10.4.19.3,10.4.20.3,10.4.21.3,10.4.22.3,10.4.23.3,10.4.24.3,10.4.25.3,10.4.50.3,10.4.100.3
00333       256        18381 allow ip from 10.4.1.3,10.4.14.3,10.4.15.3,10.4.16.3,10.4.17.3,10.4.18.3,10.4.19.3,10.4.20.3,10.4.21.3,10.4.22.3,10.4.23.3,10.4.24.3,10.4.25.3,10.4.50.3,10.4.100.3 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
00334     35091      6007150 allow ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.1.80,10.4.14.80,10.4.15.80,10.4.16.80,10.4.17.80,10.4.18.80,10.4.19.80,10.4.20.80,10.4.21.80,10.4.22.80,10.4.23.80,10.4.24.80,10.4.25.80,10.4.50.80,10.4.100.80
00335     18559      5476702 allow ip from 10.4.1.80,10.4.14.80,10.4.15.80,10.4.16.80,10.4.17.80,10.4.18.80,10.4.19.80,10.4.20.80,10.4.21.80,10.4.22.80,10.4.23.80,10.4.24.80,10.4.25.80,10.4.50.80,10.4.100.80 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
00336      1622       124748 allow ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.15.1,10.4.16.1,10.4.17.1,10.4.18.1,10.4.19.1,10.4.20.1,10.4.21.1,10.4.22.1,10.4.23.1,10.4.24.1,10.4.25.1,10.4.50.1,10.4.100.1
00337         0            0 allow ip from 10.4.15.1,10.4.16.1,10.4.17.1,10.4.18.1,10.4.19.1,10.4.20.1,10.4.21.1,10.4.22.1,10.4.23.1,10.4.24.1,10.4.25.1,10.4.50.1,10.4.100.1 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
00338      2002       153024 allow ip from any to 10.4.1.4,10.4.14.4,10.4.15.4,10.4.16.4,10.4.17.4,10.4.18.4,10.4.19.4,10.4.20.4,10.4.21.4,10.4.22.4,10.4.23.4,10.4.24.4,10.4.25.4,10.4.50.4,10.4.100.4
00339     15253      1816604 allow ip from 10.4.1.4,10.4.14.4,10.4.15.4,10.4.16.4,10.4.17.4,10.4.18.4,10.4.19.4,10.4.20.4,10.4.21.4,10.4.22.4,10.4.23.4,10.4.24.4,10.4.25.4,10.4.50.4,10.4.100.4 to any
00340     22880      2528945 allow ip from any to 10.4.15.5,10.4.16.5,10.4.17.5,10.4.18.5,10.4.19.5,10.4.20.5,10.4.21.5,10.4.22.5,10.4.25.5,10.4.100.5
00341     48508     12525926 allow ip from 10.4.15.5,10.4.16.5,10.4.17.5,10.4.18.5,10.4.19.5,10.4.20.5,10.4.21.5,10.4.22.5,10.4.25.5,10.4.100.5 to any
00410      1691       102492 deny log logamount 100 ip from not 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to any dst-port 77,3000,161,22,3128,3306,199,8110,5555,3551 via em0
00416         2          366 deny log logamount 100 ip from not 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to any dst-port 77,300--More--(byte 8705)
0,161,22,33,3306,3128,199,8110,5555,3551 via myk1
00432  48085196   3077942185 allow icmp from any to any
00433 194742059 129473703425 allow ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 80.237.18.90,80.237.19.102,80.237.18.1,80.237.18.81,10.0.0.10,10.1.5.2,62.122.184.92,62.122.184.81,62.122.184.1,91.215.188.254
00433        13          846 allow ip from 10.1.5.1 to 80.237.18.90,80.237.19.102,80.237.18.1,80.237.18.81,10.0.0.10,10.1.5.2,62.122.184.92,62.122.184.81,62.122.184.1,91.215.188.254
00434 182372280 114069576376 allow ip from 80.237.18.90,80.237.19.102,80.237.18.1,80.237.18.81,10.0.0.10,10.1.5.2,62.122.184.92,62.122.184.81,62.122.184.1,91.215.188.254 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
00434        13         1639 allow ip from 80.237.18.90,80.237.19.102,80.237.18.1,80.237.18.81,10.0.0.10,10.1.5.2,62.122.184.92,62.122.184.81,62.122.184.1,91.215.188.254 to 10.1.5.1
00445   1217625     48802797 pipe 2 ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.18.254,10.4.19.254,10.4.20.254,10.4.21.254,10.4.22.254,10.4.23.254,10.4.24.254,10.4.25.254,10.4.50.254,10.4.100.254 dst-port 33,5555,123,520,3000,53,77
00455   3383052    139893720 pipe 2 ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.1.254,10.4.11.254,10.4.12.254,10.4.13.254,10.4.14.254,10.4.15.254,10.4.16.254,10.4.17.254 dst-port 33,5555,123,520,3000,53,77
00460         0            0 allow ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.18.254,10.4.19.254,10.4.20.254,10.4.21.254,10.4.22.254,10.4.23.254,10.4.24.254,10.4.25.254,10.4.50.254,10.4.100.254 dst-port 33,5555,123,520,3000,53,77
00465   2432725   3299582087 allow ip from 10.4.18.254,10.4.19.254,10.4.20.254,10.4.21.254,10.4.22.254,10.4.23.254,10.4.24.254,10.4.25.254,10.4.50.254,10.4.100.254 33,5555,123,520,3000,53,77 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
00470         0            0 allow ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.1.254,10.4.11.254,10.4.12.254,10.4.13.254,10.4.14.254,10.4.15.254,10.4.16.254,10.4.17.254 dst-port 77,53,33,5555,123,520,3000
00475   6429027   8554063090 allow ip from 10.4.1.254,10.4.11.254,10.4.12.254,10.4.13.254,10.4.14.254,10.4.15.254,10.4.16.254,10.4.17.254 33,5555,123,520,3000,53,77 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
02900     12836      1343095 pipe 40 tcp from 10.4.13.244 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
02901     15261     15858901 pipe 40 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.244 via vlan13
02902         0            0 allow ip from 10.4.13.244 to not 10.4.0.0/16
02903         0            0 allow ip from not 10.4.0.0/16 to 10.4.13.244
02904         0            0 allow ip from 10.4.13.244 to 10.4.13.254
02905         0            0 allow ip from 10.4.13.254 to 10.4.13.244
04040     27789      1193723 pipe 59 tcp from 10.4.13.23 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
04041    194792    261057940 pipe 59 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.23 via vlan13
04042         0            0 allow ip from 10.4.13.23 to not 10.4.0.0/16
04043         0            0 allow ip from not 10.4.0.0/16 to 10.4.13.23
04044         0            0 allow ip from 10.4.13.23 to 10.4.13.254
04045         0            0 allow ip from 10.4.13.254 to 10.4.13.23
05540      1547       290556 pipe 84 tcp from 10.4.13.133 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
05541      2266      2237120 pipe 84 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.133 via vlan13
05542         2          656 allow ip from 10.4.13.133 to not 10.4.0.0/16
05543         0            0 allow ip from not 10.4.0.0/16 to 10.4.13.133
05544         0            0 allow ip from 10.4.13.133 to 10.4.13.254
05545         0            0 allow ip from 10.4.13.254 to 10.4.13.133
08120         0            0 pipe 127 tcp from 10.4.13.20 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
08121     35784     45644909 pipe 127 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.20 via vlan13
08122         1          328 allow ip from 10.4.13.20 to not 10.4.0.0/16
08123         0            0 allow ip from not 10.4.0.0/16 to 10.4.13.20
08124         0            0 allow ip from 10.4.13.20 to 10.4.13.254
08125         0            0 allow ip from 10.4.13.254 to 10.4.13.20
10280        84         8041 pipe 163 tcp from 10.4.13.130 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
10281     51914     72210148 pipe 163 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.130 via vlan13
10282         0            0 allow ip from 10.4.13.130 to not 10.4.0.0/16
10283        11         1071 allow ip from not 10.4.0.0/16 to 10.4.13.130
10284         0            0 allow ip from 10.4.13.130 to 10.4.13.254
10285         0            0 allow ip from 10.4.13.254 to 10.4.13.130
10880    890267     41026754 pipe 173 tcp from 10.4.13.34 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
10881   1671928   2413667702 pipe 173 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.34 via vlan13
10882        13         4264 allow ip from 10.4.13.34 to not 10.4.0.0/16
10883         0            0 allow ip from not 10.4.0.0/16 to 10.4.13.34
10884         0            0 allow ip from 10.4.13.34 to 10.4.13.254
10885         0            0 allow ip from 10.4.13.254 to 10.4.13.34
12260      3821       560973 pipe 196 tcp from 10.4.13.239 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
12261      4216      3074616 pipe 196 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.239 via vlan13
12262       304        27690 allow ip from 10.4.13.239 to not 10.4.0.0/16
12263       991        78572 allow ip from not 10.4.0.0/16 to 10.4.13.239
12264        12          480 allow ip from 10.4.13.239 to 10.4.13.254
12265         0            0 allow ip from 10.4.13.254 to 10.4.13.239
14300    548641    180263990 pipe 230 tcp from 10.4.13.22 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
14301    601587    591318834 pipe 230 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.22 via vlan13
14302   8872465   1297011833 allow ip from 10.4.13.22 to not 10.4.0.0/16
14303  31020094   8448169296 allow ip from not 10.4.0.0/16 to 10.4.13.22
14304        27          990 allow ip from 10.4.13.22 to 10.4.13.254
14305         0            0 allow ip from 10.4.13.254 to 10.4.13.22
15500     61431      3486455 pipe 250 tcp from 10.4.13.182 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
15501    142362    196483852 pipe 250 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.182 via vlan13
15502         8         2372 allow ip from 10.4.13.182 to not 10.4.0.0/16
15503       247        23401 allow ip from not 10.4.0.0/16 to 10.4.13.182
15504         0            0 allow ip from 10.4.13.182 to 10.4.13.254
15505         0            0 allow ip from 10.4.13.254 to 10.4.13.182
16280     25380      2247463 pipe 263 tcp from 10.4.13.131 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
16281     45364     62072083 pipe 263 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.131 via vlan13
16282         0            0 allow ip from 10.4.13.131 to not 10.4.0.0/16
16283         0            0 allow ip from not 10.4.0.0/16 to 10.4.13.131
16284         0            0 allow ip from 10.4.13.131 to 10.4.13.254
16285         0            0 allow ip from 10.4.13.254 to 10.4.13.131
16460      2339       354169 pipe 266 tcp from 10.4.13.94 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
16461      2540      1360221 pipe 266 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.94 via vlan13
16462         0            0 allow ip from 10.4.13.94 to not 10.4.0.0/16
16463         0            0 allow ip from not 10.4.0.0/16 to 10.4.13.94
16464         0            0 allow ip from 10.4.13.94 to 10.4.13.254
16465         0            0 allow ip from 10.4.13.254 to 10.4.13.94
17660       908       102748 pipe 286 tcp from 10.4.13.137 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
17661    101155    139897182 pipe 286 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.137 via vlan13
17662         0            0 allow ip from 10.4.13.137 to not 10.4.0.0/16
17663      1036       211496 allow ip from not 10.4.0.0/16 to 10.4.13.137
17664         0            0 allow ip from 10.4.13.137 to 10.4.13.254
17665         0            0 allow ip from 10.4.13.254 to 10.4.13.137
17780    248451     12824257 pipe 288 tcp from 10.4.13.19 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
17781    380230    541563517 pipe 288 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.19 via vlan13
17782        32         1984 allow ip from 10.4.13.19 to not 10.4.0.0/16
17783        64         4976 allow ip from not 10.4.0.0/16 to 10.4.13.19
17784         0            0 allow ip from 10.4.13.19 to 10.4.13.254
17785         0            0 allow ip from 10.4.13.254 to 10.4.13.19
19340         0            0 pipe 314 tcp from 10.4.13.45 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
19341    239862    341179736 pipe 314 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.45 via vlan13
19342         0            0 allow ip from 10.4.13.45 to not 10.4.0.0/16
19343         0            0 allow ip from not 10.4.0.0/16 to 10.4.13.45
19344         0            0 allow ip from 10.4.13.45 to 10.4.13.254
19345         0            0 allow ip from 10.4.13.254 to 10.4.13.45
20120     19473     27542091 pipe 327 tcp from 10.4.13.110 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
20121     12127      1055686 pipe 327 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.110 via vlan13
20122         0            0 allow ip from 10.4.13.110 to not 10.4.0.0/16
20123         0            0 allow ip from not 10.4.0.0/16 to 10.4.13.110
20124         0            0 allow ip from 10.4.13.110 to 10.4.13.254
20125         0            0 allow ip from 10.4.13.254 to 10.4.13.110
24140         0            0 pipe 394 tcp from 10.4.13.37 to not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 via vlan13
24141     23877     20471197 pipe 394 tcp from not 91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.13.37 via vlan13
24142       168        11684 allow ip from 10.4.13.37 to not 10.4.0.0/16
24143         0            0 allow ip from not 10.4.0.0/16 to 10.4.13.37
24144         0            0 allow ip from 10.4.13.37 to 10.4.13.254
24145         0            0 allow ip from 10.4.13.254 to 10.4.13.37
63430      1362        88896 deny ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.18.254,10.4.19.254,10.4.20.254,10.4.21.254,10.4.22.254,10.4.23.254,10.4.24.254,10.4.25.254,10.4.50.254,10.4.100.254
63435        18         8551 deny ip from 10.4.18.254,10.4.19.254,10.4.20.254,10.4.21.254,10.4.22.254,10.4.23.254,10.4.24.254,10.4.25.254,10.4.50.254,10.4.100.254 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
63437      7596       409016 deny ip from 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133 to 10.4.1.254,10.4.11.254,10.4.12.254,10.4.13.254,10.4.14.254,10.4.15.254,10.4.16.254,10.4.17.254
63439      2790       160353 deny ip from 10.4.1.254,10.4.11.254,10.4.12.254,10.4.13.254,10.4.14.254,10.4.15.254,10.4.16.254,10.4.17.254 to 10.4.0.0/16,91.215.188.131,91.215.188.253,91.215.188.134,91.215.188.133
63440         0            0 allow ip from 10.4.10.0/24 to 10.4.11.0/24
63445         0            0 allow ip from 10.4.10.0/24 to 10.4.12.0/24
63450         0            0 allow ip from 10.4.10.0/24 to 10.4.13.0/24
63455         0            0 allow ip from 10.4.10.0/24 to 10.4.14.0/24
63460      3950       314770 allow ip from 10.4.11.0/24 to 10.4.10.0/24
63465   8468628   3243783958 allow ip from 10.4.11.0/24 to 10.4.12.0/24
63470   3269916   3571488707 allow ip from 10.4.11.0/24 to 10.4.13.0/24
63475  16275926  18070093940 allow ip from 10.4.11.0/24 to 10.4.14.0/24
63480  16879076  23178639836 allow ip from 10.4.12.0/24 to 10.4.11.0/24
63485     17435      1385404 allow ip from 10.4.12.0/24 to 10.4.10.0/24
63490   3276791   3960144855 allow ip from 10.4.12.0/24 to 10.4.13.0/24
63495  16330852  19396952056 allow ip from 10.4.12.0/24 to 10.4.14.0/24
63540   2706088   2012085024 allow ip from 10.4.13.0/24 to 10.4.11.0/24
63545   2821999   1928883599 allow ip from 10.4.13.0/24 to 10.4.12.0/24
63550      5944       476037 allow ip from 10.4.13.0/24 to 10.4.10.0/24
63555   1183418    501794843 allow ip from 10.4.13.0/24 to 10.4.14.0/24
63640  12913420  11208731642 allow ip from 10.4.14.0/24 to 10.4.11.0/24
63645  13099610   8914625300 allow ip from 10.4.14.0/24 to 10.4.12.0/24
63650   1708669   2161155890 allow ip from 10.4.14.0/24 to 10.4.13.0/24
63655     19971      1613858 allow ip from 10.4.14.0/24 to 10.4.10.0/24
65200       279        21941 deny ip from any to 10.0.0.0/8 via em0
65202         0            0 deny ip from 192.168.0.0/16 to any via em0
65208         0            0 deny ip from 192.168.0.0/16 to any via myk1
65209        56        18488 deny ip from 0.0.0.0/8 to any via em0
65210         0            0 deny ip from 169.254.0.0/16 to any via em0
65211         0            0 deny ip from 192.0.2.0/24 to any via em0
65219         0            0 deny ip from 0.0.0.0/8 to any via myk1
65220         0            0 deny ip from 169.254.0.0/16 to any via myk1
65221         0            0 deny ip from 192.0.2.0/24 to any via myk1
65222         0            0 deny ip from 224.0.0.0/4 to any via myk1
65223         0            0 deny ip from 240.0.0.0/4 to any via myk1
65510  19862313   7289446652 allow ip from any to any via em0
65520         2          104 allow ip from any to any via myk1
65530   4171205    320103892 deny ip from any to any
65535         0            0 allow ip from any to any

Гость
проходил мимо

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Гость » 2010-01-24 17:23:45

ну основная нагрузка на память это диверты и пайпы
диверты смените на ядреный нат
а пайпы... ну пайпы попробуйте как то прооптимизировать

Аватара пользователя
Storoge
рядовой
Сообщения: 44
Зарегистрирован: 2007-09-19 12:04:14
Откуда: Брянск
Контактная информация:

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Storoge » 2010-01-24 17:34:29

ядерный нат попробую
что подразумевается под оптимизацией пайпов, можно подробнее?


Аватара пользователя
Storoge
рядовой
Сообщения: 44
Зарегистрирован: 2007-09-19 12:04:14
Откуда: Брянск
Контактная информация:

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение Storoge » 2010-01-24 17:39:00

Дополнительный вопрос, чем протестить железо?
Вот это http://dedic.ru/node/66 подойдет?

Аватара пользователя
agat
мл. сержант
Сообщения: 138
Зарегистрирован: 2009-10-27 1:21:55
Откуда: Солнечная система, планета Земля, Россия
Контактная информация:

Re: Регулярная перезагрузка FreeBSD 7.2 -STABLE

Непрочитанное сообщение agat » 2010-01-26 1:33:50

Дааа.... фаер конечно просто жесть, с таким фаером до паники недалеко,
Чтож вы собираете то все в одну кучу, нечего тащить в него все что не поподя.
Чем больше записей, тем самому сложнее в нем разобратся, можно же писать фаеры читабельными
где все идет друг за дружкой, по порядочку.

Прежде чем писать фаер - нужно очистится от всякой скверны и все обдумать, а до тех пор фаер должен быть таким

Код: Выделить всё

ipfw add 1 allow all from any to any
Это не рекомендация, а то еще не дай бог кто нибудь утащит себе эту строку, а потом долго будет удивлятся почему это у меня фаер не работает
_________________________________________________________________________________________________________
ЗЫ не смог удержатся, от такого жестокого обращения с ipfw