2.4.0t8: hard reboot with ipchains/ipmasq

From: Les Schaffer (godzilla@netmeg.net)
Date: Mon Sep 25 2000 - 09:36:33 EST


[My first linux crash in over 3 years]

My linux box was set up for ipmasq with:

=======
/sbin/modprobe ip_masq_ftp
echo "1" > /proc/sys/net/ipv4/ip_forward
echo "1" > /proc/sys/net/ipv4/ip_always_defrag
/sbin/ipchains -M -S 7200 10 160
/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -s 192.0.0.0/24 -j MASQ
=======

a windows box had been browsing the net through the linux box several
hours earlier (about 4 hours), and then left alone. when i went back
to the windows box and tried to browse again from the same IExplorer
window, _SNAP_ and the linux machine just plain up and rebooted
instantly....

i am __guessing__ the problem had something to do with using an old
IExplorer session so long after it had last been used??? something
about NAT timeouts or something???

but a hard reboot???

apart from this crash, ipmasq had been working fine (just never tested
with that kind of delay time).

les schaffer

other tidbits:
--------------

a few hours prior to crash, i got these from net browsing on a
connected windows box:

Sep 24 22:14:34 localhost kernel: NAT: 0 dropping untracked packet c1afb180 1 207.88.240.105 -> 24.191.22.34
[snip]
Sep 25 00:03:12 localhost kernel: NAT: 0 dropping untracked packet c33da540 1 63.211.32.65 -> 24.191.22.

auth.log marks the last moment of conciousnes:

Sep 25 01:37:01 localhost PAM_unix[19174]: (cron) session closed for user root

no other significants things written to log.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sat Sep 30 2000 - 21:00:14 EST