Hi, I''ve a big problem. Everytime if I used "shorewall" with option status the Server hangs up completly. The way to solve the problem: switch off the computer. Nothing is makeable. The server is in a productiv enviroment and so I can''t test it all the days. Is here anyone who knows this problem ! Mit freundlichen Grüssen Michael Menkhoff =======================mmenkhoff@gmx.net www.menkhoff.net ======================= Lieber ein Pinguin, der läuft, als ein Fenster, das hängt... Gesendet: Sonntag, 17. Oktober 2004, 22:09 Uhr Virus checked by Sophos
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Michael Menkhoff wrote:> Hi, > > I''ve a big problem. Everytime if I used "shorewall" with option status > the Server hangs up completly. The way to solve the problem: switch > off the computer. Nothing is makeable. > The server is in a productiv enviroment and so I can''t test it all the > days. > > Is here anyone who knows this problem !Only that the problem isn''t in any of the Shorewall code -- /sbin/shorewall is just a shell script that runs ''iptables'',''ip'', ''cat'' etc. to produce its output and it is one of those commands that is causing the problem. I''ve seen the problem reported once before but don''t recall any resolution. - -Tom - -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBctd/O/MAbZfjDLIRAiXFAJ9ApmM0iY/cqg72DtZ/qkdJsJ2B+gCeIQji eASWjkNKmIRMHOG9LHdfQ+w=SJPj -----END PGP SIGNATURE-----
Tom Eastep wrote:> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Michael Menkhoff wrote: > >>Hi, >> >>I''ve a big problem. Everytime if I used "shorewall" with option status >>the Server hangs up completly. The way to solve the problem: switch >>off the computer. Nothing is makeable. >>The server is in a productiv enviroment and so I can''t test it all the >>days. >> >>Is here anyone who knows this problem ! > > > Only that the problem isn''t in any of the Shorewall code -- > /sbin/shorewall is just a shell script that runs ''iptables'',''ip'', ''cat'' > etc. to produce its output and it is one of those commands that is > causing the problem. I''ve seen the problem reported once before but > don''t recall any resolution.it''s a kernel''s netfilter bug. i already bugzilla it at redhat and the kernel team already fix it in upstream. -- Levente "Si vis pacem para bellum!"
> Tom Eastep wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Michael Menkhoff wrote: >> >>>Hi, >>> >>>I''ve a big problem. Everytime if I used "shorewall" with option status >>>the Server hangs up completly. The way to solve the problem: switch >>>off the computer. Nothing is makeable. >>>The server is in a productiv enviroment and so I can''t test it all the >>>days. >>> >>>Is here anyone who knows this problem ! >> >> >> Only that the problem isn''t in any of the Shorewall code -- >> /sbin/shorewall is just a shell script that runs ''iptables'',''ip'', ''cat'' >> etc. to produce its output and it is one of those commands that is >> causing the problem. I''ve seen the problem reported once before but >> don''t recall any resolution. > > it''s a kernel''s netfilter bug. i already bugzilla it at redhat and the > kernel team already fix it in upstream.I''ve been hit by this bug once and I''m interested to know in which kernel it was fixed. Do you have the bug id from bugzilla, I couldn''t find it. Simon
Simon Matter wrote:>>Tom Eastep wrote: >> >>>-----BEGIN PGP SIGNED MESSAGE----- >>>Hash: SHA1 >>> >>>Michael Menkhoff wrote: >>> >>> >>>>Hi, >>>> >>>>I''ve a big problem. Everytime if I used "shorewall" with option status >>>>the Server hangs up completly. The way to solve the problem: switch >>>>off the computer. Nothing is makeable. >>>>The server is in a productiv enviroment and so I can''t test it all the >>>>days. >>>> >>>>Is here anyone who knows this problem ! >>> >>> >>>Only that the problem isn''t in any of the Shorewall code -- >>>/sbin/shorewall is just a shell script that runs ''iptables'',''ip'', ''cat'' >>>etc. to produce its output and it is one of those commands that is >>>causing the problem. I''ve seen the problem reported once before but >>>don''t recall any resolution. >> >>it''s a kernel''s netfilter bug. i already bugzilla it at redhat and the >>kernel team already fix it in upstream. > > > I''ve been hit by this bug once and I''m interested to know in which kernel > it was fixed. Do you have the bug id from bugzilla, I couldn''t find it.https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=133381 -- Levente "Si vis pacem para bellum!"